This Data Protection and Privacy Notice was last modified on October 5, 2026.
This notice provides information on how Salzburg Global, Leopoldskronstrasse 56-58, 5020Salzburg, Austria (“we”) processes personal data.

Salzburg Global is an independent, non-profit organization creating spaces that change the conversation. Since 1947, we have gathered over 40,000 Fellows from 173 countries for more than 1,100 sessions that change the conversation on the pressing issues of our time.

Salzburg Global is where open-minded leaders from around the world gather for breakthrough conversations on pressing global issues. Our programs have worked to overcome barriers and open up a world of better possibilities – creating spaces where divergent voices can address the big challenges of our time.

Our historic headquarters at Schloss Leopoldskron in Salzburg, Austria –also the award-winning Hotel Schloss Leopoldskron – allows us to welcome all participants in conditions of trust and openness.
 

Below is a list of terms and definitions used in this notice. These terms and definitions are listed in Article 4 of the EU General Data Protection Regulation (“GDPR”).

Consent: Consent of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

Personal data: Any information relating to an identified or identifiable natural person ('data subject'). An identifiable natural person is one who can be identified, directly or indirectly by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

Processing: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collecting, recording, organizing, structuring, storing, adapting, altering, or retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

Recipient: A natural or legal person, public authority, organization, program partner, agency or another body, to which the personal data are disclosed, whether or not a third party. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with European Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
 

We process personal data for the following purposes:

1. Hotel bookings for guests, clients, and program participants;
2. Administration of program recruitment, travel, and participation;
3. Production and dissemination of program materials (for example program schedules and participant directories);
4. Invitations and promotional events;
5. Fellowship communications and networking;
6. Program-related research;
7. Solicitation and fundraising.

Purposes for processing your personal data while visiting our website:

1. To make this website available to you and to further improve and develop it;
2. To create usage statistics (see Chapter 5);
3. To detect, prevent, and investigate attacks on our website;
4. To respond to your requests.

We collect this data when it is provided to us voluntarily, from official program partners, and/or from identified public sources (i.e. publicly available websites).

In order to operate effectively, transparently, and in compliance with the GDPR, we ask guests, clients, and program participants to provide personal data on a voluntary basis.

Consistent with Article 6(1) of the GDPR, we process personal data in compliance with the following provisions of the GDPR:

Data for which we need explicit consent (Article 6(1)(a) GDPR):

1. Photographs;
2. Professional biographies;
3. Personal preferences relevant to guests, clients, and participants in our programs that may be considered sensitive data (for example food allergies, specific medical conditions, religious beliefs, etc.).

Data for which we do not need explicit consent (Article 6(1)(f) GDPR – “legitimate interests”):

In accordance with our “legitimate interests” to provide services as part of our operations, we may process the following categories of personal data as an integral part of our service delivery:

1. Contact information (for example: title, name, position, institution, address, phone, email);
2. Billing data (where appropriate);
3. Contractual data (where appropriate).

Data we process during your visit to our website:

1. Date and time of your visit to our website;
2. Your IP address;
3. Name and version of your web browser;
4. The website (URL) you visited before visiting our website;
5. Specific cookies (see Chapter 6);
6. The information that you provide yourself (for instance by registering for a session).

There is no obligation to disclose any information requested on our website. However, if you choose not to do so, you may not be able to use all functions of the website.

We seek to protect and ensure the privacy of all personal data processed as part of our operations. We will never sell or trade the personal data of our guests, clients, or program participants for commercial gain.

For the purposes set out in Point 2 above, we may transfer some personal data to organizations with whom we work. These recipients may include:
•    Travel agents and transport companies;
•    IT service providers with whom we have contractual relationships;
•    Event and program partners.
Recipients  to  whom  we  transfer  personal  data  may  be  located,  or  process  personal data,  in  a  rangeof countries. We will only transfer your personal data to recipients:
In countries listed by the European Commission as having an adequate level of data protection as determined in accordance with Article 45 of the GDPR and as published in the Official Journal of the European Union [or After taking measures to ensure that the recipient provides an adequate level of data protection compliant with the GDPR, for example by entering into appropriate data transfer agreements based on Standard Contractual Clauses (2010/87/EC and/or 2004/915/EC). Such agreements are accessible upon request from dataprotection@salzburgglobal.org.

We will also disclose personal information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

Salzburg Global commits to cooperate with the panel established by the EU data protection authorities (DPAs) and comply with the advice given by the panel with regard to customer data and data collected from website visitors, which is transferred from the EU in the context of providing services to you.

We use the “visitor action pixels” from Facebook Inc. (1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”)) on our website.

This allows user behavior to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes.

The data collected in this way is anonymous to us, meaning we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which is why we are informing you based on our knowledge of the situation.

Facebook may link this information to your Facebook account and also use it for its own promotional purposes, in accordance with Facebook’s Data Usage Policy: https://www.facebook.com/about/privacy/ 

You can allow Facebook and its partners to place ads on and off Facebook. A cookie may also be stored on your computer for these purposes.

The legal basis for the use of this service is Art. 6 paragraph 1 sentence 1 letter f GDPR.

You can object to the collection of your data by Facebook Pixel, or to the use of your data for the purpose of displaying Facebook ads, by contacting the following address: https://www.facebook.com/settings?tab=ads 

Facebook is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection legislation: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active 

We use LinkedIn's marketing services to reach and engage with potential program participants and other key stakeholders. This includes targeted advertisements and sponsored content on LinkedIn. By using LinkedIn, we can tailor our outreach efforts based on users' professional backgrounds, interests, and engagement with our content. LinkedIn may collect and process personal data such as your profile information, engagement data, and other relevant metrics to optimize the effectiveness of our campaigns. For more details on LinkedIn's data processing practices, please review LinkedIn's Privacy Policy.

Personal data will only be kept for:

• As long as we reasonably consider necessary to achieve the purposes set out under Point 2 above and as permitted under applicable legislation;
• Where there are statutory retention obligations that require us to retain personal data; or
• In cases where potential legal claims are not yet subject to a statute of limitation.

Consistent with the provisions of the GDPR, you have, among others, the right to:
1.    Check whether and what kind of personal data we hold about you and to request copies of suchdata;
2.    Request  correction,  supplementation  or  deletion  of  your  personal  data  that  is  inaccurate  orprocessed in non-compliance with applicable requirements;
3.    Request us to restrict the processing of your personal data;
4.    Object, in certain circumstances and for legitimate reasons, to the processing of your personaldata or revoke consent previously granted for the processingin the future;
5.    Request data portability;
6.    Know the identities of recipients to whom your data has been transferred (see 4.2 above); and
7.    Lodge a complaint with the competent authority.
 

Please note that we may revise its privacy notice at any time without notice. Such changes will takeeffect immediately upon posting on our website. Such revisions may arise in response to changes inapplicable legislation or other factors. We encourage you to periodically visit our website to reviewSalzburg Global’s Privacy Notice.

Please address your requests or questions concerning the processing of your personal data to:

Salzburg Global
Leopoldskronstrasse 56-58
5020 Salzburg Austria
dataprotection@salzburgglobal.org 

Last updated on 03/03/2025

The Austrian data protection authority can be reached in the following ways:

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Wien
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at