Last updated: 15.07.2026

This privacy policy explains how personal data is processed when you visit and use the website www.or-zarua.at. Registration for our programmes and scholarship applications are additionally governed by a separate privacy policy [link: Privacy Policy — Registration & Scholarship].

1. Controller

Olami- "Verein zur Förderung von Bibelwissenschaften" (operating under the name Beit-Midrash "Or Zarua" — OLAMI) Hollandstraße 14/47-52, 1020 Vienna, Austria Register number (ZVR): 767033758 Email: office@or-zarua.at | Phone: +43 1 5320230

We have not appointed a Data Protection Officer, as this is not legally required in our case.

2. Hosting (Wix)

This website is hosted by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv, Israel. When you visit the website, Wix, acting as our processor, automatically processes technical access data (server log files), in particular your IP address, date and time of access, pages visited, browser type and operating system.

Purpose and legal basis: ensuring stable and secure operation of the website, error analysis and defence against attacks — Art. 6(1)(f) GDPR (legitimate interest). Log data is deleted in accordance with Wix's standard retention periods.

Third-country transfers: Israel is covered by an adequacy decision of the European Commission (Art. 45 GDPR). Where Wix engages sub-processors outside the EEA (e.g. in the USA), transfers are based on EU Standard Contractual Clauses (Art. 46 GDPR) and/or — for certified recipients — the EU-US Data Privacy Framework.

3. Cookies and similar technologies

We use strictly necessary cookies required to operate the website (e.g. Wix security and session cookies). Legal basis: § 165(3) of the Austrian Telecommunications Act (TKG 2021) (strictly necessary storage) and Art. 6(1)(f) GDPR.

Non-essential cookies (e.g. statistics/marketing) are used only if you have given consent via our cookie banner (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). You can withdraw or adjust your consent at any time via the cookie settings in the banner or your browser settings. Details of individual cookies are shown in the cookie banner.

4. Contacting us

If you contact us by email, phone or via the website, we process the information you provide (name, contact details, content of your enquiry) in order to handle your request. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into, or performance of, a participation agreement) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Our email correspondence is handled via Google (Google Ireland Ltd.). Enquiries are deleted once resolved, unless statutory retention obligations apply.

5. Donations

If you donate via the website, we process your name, the donation amount and the contact details you provide. Payment is processed by the payment service provider indicated during the donation process, acting as an independent controller or as our processor; we do not store full payment data (e.g. card details).

Legal bases: Art. 6(1)(b) GDPR (processing the donation) and Art. 6(1)(c) GDPR (tax and accounting obligations). Donation-related accounting records are retained for seven years from the end of the relevant calendar year, in accordance with § 132 of the Austrian Federal Fiscal Code (BAO).

6. Recipients

Recipients of personal data are exclusively: Wix (hosting), the relevant payment service provider (donations), Google (email/IT services), and public authorities where legally required. Data processing agreements pursuant to Art. 28 GDPR are in place with our processors. We do not sell personal data or share it with third parties for commercial purposes.

7. Retention

We store personal data only for as long as necessary for the purposes stated above or as required by statutory retention obligations (in particular § 132 BAO: 7 years).

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw any consent at any time with effect for the future (Art. 7(3) GDPR). To exercise these rights, contact: office@or-zarua.at.

You also have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

9. No automated decision-making

We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

10. Minors

This website is not directed at children under 14. In Austria, consent in connection with information society services can be validly given from the age of 14 (§ 4(4) of the Austrian Data Protection Act, DSG).

11. Data security

This website is transmitted in encrypted form (TLS/HTTPS). Access to personal data is restricted to authorised officers of the association.

12. Changes

We will update this privacy policy where our processing operations or the legal situation change. The version published on this page applies.