Privacy Policy

3. Hosting and Access Data

The website is hosted by easyname GmbH in Austria. Each time the website is accessed, the server stores technically necessary access data: IP address, date and time, page requested, referring page, browser and operating system.

We use this access data to create aggregated statistics, such as the number of page views. No cookies are set and no user profiles are created for this.

The purpose is the secure and stable operation of the website and the analysis of its use. The legal basis is our legitimate interest (Art. 6 (1) (f) GDPR). Access data is stored only for a limited period and then deleted automatically.

4. Contact Form

If you write to us via the contact form, we process the information you enter in order to answer your inquiry. The legal basis is answering your inquiry or taking steps prior to entering into a contract (Art. 6 (1) (b) GDPR) and our legitimate interest in communication (Art. 6 (1) (f) GDPR).

To deliver the form to us, we use the service EmailJS (emailjs.com). Processing may take place outside the EU. If you want to avoid this, write to us directly at office@thecebras.com.

We delete your inquiry once it has been dealt with, unless statutory retention obligations apply.

5. Fonts

The font used on this website is hosted locally. No data is transferred to third parties such as Google when the website loads.

6. Cookies, Local Storage and Web Analytics

We store your language selection and your answer to the cookie notice in your browser. Both are needed so the website appears in your language and does not ask you again on every visit. This information never leaves your browser.

Only if you agree in the cookie notice do we use PostHog (PostHog Inc., USA) for web analytics. The data is processed in the EU (Frankfurt am Main). We record the pages you visit, clicks on links to our platform app.thecebras.com, the website you came from, your approximate location (country and city), browser, device type and a random identifier stored in your browser. Your IP address is not stored, and we record neither your name nor your email address.

The purpose is to understand which content is used and how visitors find our offers. The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). You can withdraw it at any time via "Cookie settings" at the bottom of every page; after that no more data is recorded and the identifier in your browser is deleted, so the data recorded so far can no longer be linked to you. We keep the analytics data for at most 24 months.

We have a data processing agreement with PostHog. Where data may be transferred to the USA, this is safeguarded by the European Commission's standard contractual clauses.

7. Links to Other Providers

The website contains links, for example to Google Calendar for booking appointments, to LinkedIn, to Instagram or to our platform. Data is only transferred once you click a link. The privacy policy of the respective provider applies on their site.

8. The Cebras Studies (Matura, Civilian Service, Military Service)

The Cebras studies are short online questionnaires about what comes next: the Matura Study for pupils from grade 11 onwards (Matura is the school-leaving exam), the Civilian Service Study for people doing civilian service (Zivildienst) and the Military Service Study for conscripts (Grundwehrdienst). They run at their own address. Cebras is the controller (section 1) and your rights are listed in section 9. In addition, the following applies.

We process your answers to the questions and your email address if you ask us to send you your results. In addition, in the Matura Study we process your estimate, your grade, federal state and type of school, and in the Civilian Service and Military Service Studies your civilian service placement or your company. There you can also enter a phone number voluntarily; we use it only for questions about your results. We do not ask for your name. We do not store your IP address in our database.

We create your results because you request them yourself (Art. 6 (1) (b) GDPR) and send them to you by email. We delete your email address, your phone number and the associated details no later than 3 months after sending.

From your answers we assess internally how well our offers might fit your situation. The legal basis is our legitimate interest in promoting our offers (Art. 6 (1) (f) GDPR). You can object to this at any time (Art. 21 GDPR) by writing to office@thecebras.com.

For the study itself, we also store your answers separately from your email address, without a name and only with the day of participation, as soon as you have answered the last question, even if you do not enter an email address. So that nobody is counted twice, your browser remembers a random identifier; it is not linked to your email address. The legal basis is our legitimate interest in a meaningful study (Art. 6 (1) (f) GDPR). These answers remain a permanent, anonymous part of the study and can no longer be linked to you.

We send you tips on choosing a study programme or career and information about Cebras offers only if you have ticked the box, in the form or with one click in your results email (Art. 6 (1) (a) GDPR, Section 174 of the Austrian Telecommunications Act 2021). You must be at least 14 years old for this (Section 4 (4) of the Austrian Data Protection Act). We record when you gave your consent and which text you saw. You can withdraw at any time by writing to office@thecebras.com or via the unsubscribe link in our tips emails; we then delete your address. Without consent, the 3-month period applies.

The data is stored with Google Cloud (Firebase Firestore) in Frankfurt am Main. The page runs on Vercel Inc. (USA) on servers in Frankfurt; Vercel is certified under the EU-US Data Privacy Framework. The results email is sent by Resend Inc. (USA) via servers in the EU; the transfer is safeguarded by standard contractual clauses. Data processing agreements are in place with all three providers. We do not sell your data and do not pass it on to third parties for their advertising.