Privacy Policy | Glacier

1. Preamble

Glacier Carbon Reduction GmbH (hereinafter "Glacier" or "we") provides online training and education in climate protection and sustainability, organizes events, offers an AI-powered ESG reporting platform (hereinafter the "Services"), and operates this website.

We process personal data for these purposes. The protection of this data is of particular concern to us, and we process it exclusively on the basis of the EU General Data Protection Regulation 2016/679 ("GDPR"), the Austrian Data Protection Act 2018 ("DSG 2018"), and the Telecommunications Act ("TKG 2003").

2. Data Controller

Glacier Carbon Reduction GmbH

Schönbrunner Straße 131 Top 2.03, 1050 Vienna, Austria

Commercial Register Number: FN540361z

Court of Jurisdiction: Commercial Court Vienna

Email: hello@glacier.eco

3. Nature, Scope, and Purpose of Data Processing

We collect and use personal data only when:

It is necessary for the initiation, administration, and execution of pre-contractual measures, compliance with contracts, or the provision of our Services
It is necessary for compliance with legal requirements or we are obligated by law
It is done with the consent of the data subject
It is justified by our legitimate interest

4. Disclosure to Third Parties

We only disclose personal data to third parties if and to the extent that this is necessary and permissible. We also use external service providers ("processors") who process personal data on our behalf. We conclude Data Processing Agreements with all processors.

5. Your Rights

Applicable data protection law grants you comprehensive rights. To exercise these rights, please contact hello@glacier.eco.

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at)

6. Cookies & Analytics

Our website uses functional cookies (mandatory), analytical cookies (optional), and marketing cookies (optional). You can choose which cookies to accept and change your preferences at any time via the cookie settings.

7. Recipients & Processors

To provide our Services, we work with the following categories of service providers:

Hosting & Infrastructure (Vercel, Supabase)
CRM & Marketing (HubSpot)
Analytics (Google Analytics, Hotjar)
Communication (Microsoft Office 365)
Learning Platform (Thought Industries)
Payment Processing

8. Data Security

We implement technical and organizational measures to protect your data, including TLS encryption, access controls, regular security audits, and employee training.

9. Final Provisions

The invalidity, ineffectiveness, or unenforceability of any part of this Privacy Policy shall not affect the remaining provisions.