Privacy Policy

Protecting your personal data matters to us. We process your data solely on the basis of the applicable law, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). This policy explains which data we process when you use this website, for what purposes, on which legal basis, and what rights you have. This English version is a convenience translation. In the event of any discrepancy, the German version prevails.

1. Controller

For any questions about data protection and to exercise your rights, please contact us at the email address above.

2. Visiting the Website

2.1 Hosting and Log Data

This website is hosted by internex GmbH, Lagerstraße 15, 3950 Gmünd, Austria. Whenever a page is requested, the web server processes technically necessary data: IP address, date and time, the requested address, the amount of data transferred, the previously visited page (referrer), and browser and operating system. This data is required to deliver the website and to ensure its security and stability. It is not combined with other data and is deleted after the host's usual log retention period, unless it is needed to investigate a security incident.

The legal basis is our legitimate interest in a secure and functioning website (Art 6(1)(f) GDPR).

2.2 Event Calendar, News and Startup Directory

Your browser loads the event calendar, the news overview, the startup directory and related images through a service we operate at Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare Workers"). Cloudflare processes your IP address and technical connection data to answer the request. The content itself comes from our own systems; your browser does not connect to the underlying platforms.

The legal basis is our legitimate interest in presenting our content in an up-to-date and efficient way (Art 6(1)(f) GDPR). For transfers to the USA, see section 8.

2.3 Storage on Your Device

This website does not set any cookies of its own. In your browser's local storage (localStorage) we only store:

• your choice whether the embedded map should be loaded, if you selected "remember" (see section 6);
• the origin of your visit (campaign parameters such as utm_source and gclid, landing page, referring page), but only if you consented to the "Advertising" category in the consent banner. This information is deleted automatically after 90 days and removed immediately if you withdraw your consent.

The consent banner and the analytics services set their own cookies; see sections 4 and 5. The legal basis for any storage that is not strictly necessary is your consent (§ 165(3) TKG 2021 in conjunction with Art 6(1)(a) GDPR).

3. Contact, Enquiries and Newsletter

3.1 Contact and Enquiry Forms

If you contact us through a form, for example for an event enquiry, a viewing, an office exposé, a press enquiry or an application to a startup programme, we process the information you provide. Depending on the form, this includes name, email address, phone number, company or organisation, topic and message, preferred dates, group size, type of viewing and, for startups, website and description.

We also store which form and which page the enquiry came from, your type of device (desktop, mobile, tablet), the time, and the wording of the data protection notice shown when you submitted the form. Only if you consented to the "Advertising" category do we also transmit the origin of your visit described in section 2.3.

Form data is transmitted through a service we operate at Cloudflare to our enquiry database at Notion Labs, Inc., 685 Market St, San Francisco, CA 94105, USA, and stored there. To prevent abuse, this service briefly processes your IP address to limit the number of requests per minute.

The purpose is to handle your enquiry and, where applicable, to prepare or perform a contract. The legal basis is the performance of pre-contractual measures and of a contract (Art 6(1)(b) GDPR) and, otherwise, our legitimate interest in answering enquiries and protecting our systems (Art 6(1)(f) GDPR). We store the data for as long as necessary to handle your request and any resulting business relationship, and beyond that only where statutory retention obligations apply, for example seven years under § 212 of the Austrian Federal Fiscal Code (BAO) for tax-relevant records.

3.2 Contact by Email

If you email us, we process your email address and the content of your message in order to reply. The legal basis and retention period are the same as in section 3.1.

3.3 Newsletter

For the newsletter we need your email address and, on the newsletter page, optionally your first and last name. Sign-up uses a double opt-in procedure: you receive an email with a confirmation link, and you are added to the mailing list only after clicking it. We store the time and source of the sign-up as proof.

We send the newsletter using Mailchimp, a service of The Rocket Science Group LLC d/b/a Mailchimp, 405 N Angier Ave NE, Atlanta, GA 30308, USA. By default, Mailchimp records whether a newsletter was opened and which links in it were clicked. To do so, each issue contains an invisible tracking pixel and personalised links. We use this analysis to improve content and sending times.

The legal basis is your consent (Art 6(1)(a) GDPR and § 174 TKG 2021). You can unsubscribe at any time via the link in every issue or by emailing us. Your data is kept until you unsubscribe; we retain proof of consent given and withdrawn for as long as claims may be asserted on that basis.

3.4 Events

Registration for our events does not take place on this website but on the Luma platform operated by Luma Labs, Inc., 548 Market St PMB 36143, San Francisco, CA 94104, USA. If you follow such a link, Luma's privacy terms apply. Photos and video may be taken at our events.

4. Consent Management

We use CookieFirst, a service of Digital Data Solutions B.V., Plantage Middenlaan 42a, 1018 DH Amsterdam, the Netherlands, to obtain and manage your consent. CookieFirst stores your choice in a cookie on your device and logs it as proof. When the banner loads, your IP address is necessarily transmitted to CookieFirst.

The legal basis is our legal obligation to be able to demonstrate consent (Art 6(1)(c) in conjunction with Art 7(1) GDPR) and our legitimate interest in managing consent in compliance with the law (Art 6(1)(f) GDPR).

You can change or withdraw your choice at any time via the Cookie Settings link in the footer of every page.

5. Web Analytics and Advertising

5.1 Google Analytics 4 and Google Ads

With your consent, we use Google Analytics 4 and Google Ads, services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics helps us understand how our website is used. We use Google Ads to measure the success of our advertisements and to show ads to people who have already visited our website.

This involves processing data about your use of the website, such as pages visited, time spent, origin of the visit, IP address, device and browser information, and approximate location. Google sets cookies for this purpose. When you submit one of our enquiry forms, we tell Google Analytics that an enquiry was sent and through which form, but not its content. For enquiries through the event space forms, we also tell Google Ads and, provided you have also consented to the use of your data for advertising, transmit your email address and phone number in pseudonymised form ("enhanced conversions"). Google creates a hash value in your browser; the details are not transmitted in plain text.

Consent mode: We use Google's consent mode. As long as you have not consented, Google does not set any cookies. However, when a page is loaded, Google already receives a notification of your consent status as well as measurement requests without cookies. These contain, among other things, your IP address, the time, the page visited and browser information. Google uses them to statistically model visits and conversions and neither sets nor reads cookies in doing so. The legal basis for this transmission is our legitimate interest in basic performance measurement of our website and advertising (Art 6(1)(f) GDPR); you may object under Art 21 GDPR.

The legal basis is your consent (§ 165(3) TKG 2021 in conjunction with Art 6(1)(a) GDPR). You can withdraw it at any time with effect for the future via the Cookie Settings. Google retains analytics data for the period configured in our account. Google may transfer data to Google LLC in the USA; see section 8. Further information is available at policies.google.com/privacy.

6. Embedded Map

On some pages you can display a Google Maps map. The map loads only when you explicitly click to show it. Only then does your browser connect to Google and transmit, in particular, your IP address; Google may set cookies. If you choose "remember", we store this choice in your browser so that maps load directly in future.

The legal basis is your consent given by clicking (Art 6(1)(a) GDPR). You can withdraw it by clearing the website data in your browser. The provider is Google Ireland Limited; for transfers to the USA, see section 8.

7. Social Media

Our website links to our profiles on LinkedIn, Instagram, YouTube and Meetup. These are plain links; no plugins are loaded and no data is transmitted to these platforms before you click a link. After clicking, the privacy terms of the respective platform apply.

8. Recipients and Transfers to Third Countries

We share your data only where necessary for the purposes described. Recipients are:

• our hosting provider (section 2.1),
• Cloudflare, Inc. for delivering dynamic content and transmitting forms (sections 2.2 and 3.1),
• Notion Labs, Inc. for storing enquiries (section 3.1),
• The Rocket Science Group LLC (Mailchimp) for the newsletter (section 3.3),
• the provider of CookieFirst for consent management (section 4),
• Google Ireland Limited and Google LLC for analytics, advertising and maps (sections 5 and 6),
• in individual cases, authorities, courts and legal or tax advisers, where we are obliged to do so or where it is necessary to enforce claims.

Our hosting provider, Cloudflare, Notion, Mailchimp and CookieFirst process your data as processors within the meaning of Art 28 GDPR solely on our behalf and on our instructions. Google also acts as a processor for Google Analytics and enhanced conversions, but as an independent controller for Google Ads.

Some recipients are based in the USA or may transfer data there: Cloudflare, Inc., Notion Labs, Inc., The Rocket Science Group LLC (Mailchimp, part of Intuit Inc.) and Google LLC. These companies are certified under the EU-U.S. Data Privacy Framework (as of September 2026). An adequacy decision of the European Commission therefore applies to them (Implementing Decision (EU) 2023/1795, Art 45 GDPR). Where a transfer is not covered by it, we rely on the European Commission’s standard contractual clauses (Art 46(2)(c) GDPR).

9. Retention

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. The specific periods are stated for each processing activity. Once the purpose no longer applies and there is no retention obligation, the data is deleted.

10. Your Rights

Under the GDPR you have the following rights:

• access to the data stored about you (Art 15 GDPR),
• rectification of inaccurate data (Art 16 GDPR),
• erasure (Art 17 GDPR),
• restriction of processing (Art 18 GDPR),
• data portability (Art 20 GDPR),
• objection to processing based on our legitimate interest, on grounds relating to your particular situation (Art 21 GDPR),
• withdrawal of consent at any time with effect for the future; the lawfulness of processing carried out until then remains unaffected (Art 7(3) GDPR).

To exercise these rights, contact office@wexelerate.com. If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.

11. Obligation to Provide Data and Automated Decision-Making

You are not legally or contractually obliged to provide your data. Without a name and email address, however, we cannot handle an enquiry, and without an email address we cannot send the newsletter. We do not use automated decision-making, including profiling, within the meaning of Art 22 GDPR.

12. Changes

We update this privacy policy when our website or the legal situation changes. The version published here applies.

Last updated: September 2026