Privacy Policy

This website is owned and operated by Sourcing International SI1010 GmbH, Peregringasse 2, 1090 Vienna, Austria. We can be contacted at that address, or via office@sourcing-international.org.

When you visit this site, your browser automatically transmits technical information such as your IP address, the pages requested and your browser and device details. This data is temporarily stored and processed so that we can deliver the website and improve it, and it is deleted or anonymised after a maximum period of one year.

The legal basis is our legitimate interest in maintaining the proper functioning of this website.

If you send us a message or submit a membership application, we process the information you provide for the purpose indicated at the time — answering your request, sending you the information you asked for, or assessing your application. The legal basis is your explicit consent, given by submitting the message for that purpose.

When a member firm registers someone for an INPLP conference, we process that person’s name, e-mail address and — where given — their role, organisation and dietary requirements, in order to organise the event, issue badges, and invoice the registering firm. This applies both to people who hold a portal account and to guests, who are registered by a member firm and receive no account, no directory entry and no member mailings.

The legal basis is our legitimate interest under Article 6(1)(f) GDPR in running the conference and, for the invoice, our legal obligation under Article 6(1)(c) GDPR to keep proper accounting records.

These records are kept indefinitely, because each one belongs to an invoice and to the history of the conference. If you were registered as a guest and would like to know what we hold, have it corrected, or object to the processing under Article 21 GDPR, write to office@sourcing-international.org — you do not need an account to do so.

We use Plausible Analytics to understand which pages are read. It is a privacy-focused tool that sets no cookies and stores nothing on your device. It does not collect personal data and does not track you across websites; no data is used to build a profile of you, and none is sold or shared for advertising.

Because nothing is stored on your device, this analysis does not require your consent under Article 5(3) of the ePrivacy Directive. The legal basis for the processing itself is our legitimate interest under Article 6(1)(f) GDPR in knowing which of our publications are read.

You may object to this at any time under Article 21 GDPR. Choose “Decline measurement” in the notice shown on your first visit, or reopen it later through the Cookie settings link in the footer. Your choice is kept in your browser and takes effect immediately — the analytics script is not loaded at all once you have objected. You can change your mind through the same link.

This website sets no cookies. When you answer the notice shown on your first visit, your choice — whether you accepted the measurement or objected to it — is stored in your browser’s local storage, so that the notice is not shown again and, if you objected, the objection keeps working. It contains no identifier and is never transmitted to us. You can remove it at any time by clearing your browser’s site data; the notice then appears again.

Some pages embed third-party content — a Cloudflare Turnstile check on the membership form, an OpenStreetMap view of a conference venue, or a Vimeo video. Those providers may set their own cookies when their content loads. Where the embed is not necessary to use the page, we keep it out of the page.

Member firm logos and the portraits of the representatives our member firms have chosen to list are served from a public storage bucket under stable, permanent web addresses. This is deliberate: it lets browsers cache the images and keeps the site fast.

It also means that anyone who knows such an address can open that image directly, without visiting this website — and that the address stays reachable for as long as the image is published. The bucket cannot be listed, so addresses cannot be discovered by browsing it. When a firm leaves the network, or a representative is no longer listed, we remove the published copy and its address stops working.

We may share data with service providers outside the EU/EEA where they meet the requirements of the GDPR — through an adequacy decision, an appropriate certification, or approved standard contractual clauses.

You have the right to information, rectification, erasure and, where applicable, restriction of processing. To exercise any of them, use the contact details above.

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna).

See also our Impressum.