1. Controller and contact
The controller responsible for data processing on this website under the GDPR and the Austrian Data Protection Act (DSG 2018) is:
Truth Matters – Verein für Informationskompetenz
ZVR 1117605908 · Vienna, Austria
Contact: via the contact form. For formal legal notices, see the contact details on our Legal Notice page.
2. Contact form data
When you use our contact form, we process the data you provide (name, optionally email, organisation, subject, message) solely to handle your inquiry (Art. 6(1)(f) GDPR — legitimate interest in communicating with interested parties). Data is deleted once no longer required, and no later than 24 months without further contact.
3. Membership / cooperation application data
When applying for membership, supporting membership, or institutional cooperation, we process the data provided for review by the board (Art. 6(1)(b) GDPR — pre-contractual measure regarding association membership). If accepted, data is carried forward as member data per point 4; if declined, it is deleted within 12 months unless a statutory retention obligation applies.
4. Member administration
For accepted members, we process name, contact details, membership type, and association-related correspondence to fulfil the obligations arising from membership and the association's statutes (Art. 6(1)(b) GDPR), including inviting members to General Assemblies and administering membership fees. This data is stored for the duration of membership and thereafter to the extent required by law (in particular association and tax-related retention obligations).
5. Internal association communications (member updates)
We send communications on association matters (e.g. invitations, minutes, news) only to members who have explicitly consented (Art. 6(1)(a) GDPR). Every communication includes an unsubscribe link; consent can be withdrawn at any time with future effect, without affecting the membership itself.
6. Cookies and tracking
This website uses no analytics or marketing cookies. Only technically necessary session data (e.g. to protect forms against abuse) is processed, which expires at the end of the session.
7. External fonts (Google Fonts)
This website embeds fonts from Google Fonts. Loading a page therefore establishes a connection to Google's servers, which may transmit the device's IP address. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a technically consistent presentation).
8. Your rights under the GDPR
You have the right to access, rectify, erase, restrict processing of, port, and object to the processing of your personal data, and the right to withdraw any consent given at any time.
9. Right to complain
You have the right to lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna) if you believe the processing of your data violates the GDPR.
Last updated: August 2026