This website uses no cookies, no tracking and no advertising. We serve fonts and scripts from our own server, so your browser does not connect to Google or other providers for them. We only process personal data if you send it to us through a form or sign in to the members' area.
Green Light Project
Hans-Sachs-Gasse 4/6
1180 Vienna, Austria
Association register number (ZVR): 1721067288
Email: info@greenlightproject.eu
You can reach us at this address for any data protection question.
The website is hosted by Netlify, Inc. (USA). When you open a page, the server processes technically necessary data, mainly your IP address, date and time, the page requested and information about your browser. This is needed to deliver the page and to run it securely (Art. 6(1)(f) GDPR). We do not use this data to track visitors.
We do not set cookies and do not store any information on your device. The German and the English version of the website are separate pages. You switch between them with the DE/EN switch in the navigation; your language choice is not stored.
The fonts we use (Plus Jakarta Sans, Instrument Serif, Anton) and all scripts are hosted on our own server. No fonts or scripts are loaded from Google or other providers when you open the site.
If you use the application form, we process the details you enter: name, email address, university, field of study, how you found us and your motivation. For the contact form these are your name, email address and your message.
Purpose and legal basis: We use the data to handle your application or request and to get in touch with you (Art. 6(1)(b) GDPR; for general enquiries Art. 6(1)(f) GDPR).
How the data is processed: Your input is sent to a function run by our provider Supabase (servers in Ireland, EU). From there it is delivered by email through the sending service Resend (sent via servers in Ireland, EU) to our mailbox (applications@ or kontakt@greenlightproject.eu, with the association's board in copy). The mailboxes run on Google Workspace. You automatically receive a confirmation at the address you gave. We do not store the form data in a database.
Retention: We keep your details only as long as needed to handle your request and delete them afterwards, at the latest when you ask us to, unless legal retention duties apply. You need to fill in the required fields so that we can reply to you.
Our forms are aimed at students and not at children.
Blog posts and the help resource overviews are stored in our database at Supabase (Ireland, EU). When you open a page, our hosting provider Netlify retrieves the content from there and delivers the finished page to you. Your browser does not connect to Supabase for this. The PDFs for the help resources are also provided by Supabase: when you open or download a PDF, your browser connects to Supabase and, for technical reasons, your IP address is transmitted. We do not build profiles from it (Art. 6(1)(f) GDPR).
The members' area is only for members of the association. Sign-in is through the association's Google account. We process your email address, name and profile picture, as well as the details you enter in your profile yourself (for example team and role). Other members can see some of these details. The data is stored at Supabase (Ireland, EU). The legal basis is your membership (Art. 6(1)(b) GDPR). If you leave the association, we delete your profile.
We link to our profiles on LinkedIn and Instagram. These are simple links, not embedded plug-ins. Only when you click them do you connect to these providers, and their privacy policies apply.
We work with the providers named above (Netlify, Supabase, Resend, Google Workspace). Where data is transferred to a country outside the EU, for example the USA, we rely on an adequacy decision of the European Commission or on standard contractual clauses (Art. 45 and 46 GDPR).
You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing and to withdraw any consent at any time. Write to us at info@greenlightproject.eu.
If you believe we are not processing your data lawfully, you can complain to the supervisory authority: Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
We update this policy when something changes on the website or in the law. As of: October 2026.