Privacy policy

1. General Information

1.1. This website is operated by IBG Innovatives Betriebliches Gesundheitsmanagement GmbH, headquartered in Vienna with a business address at Mariahilfer Straße 50/14, A-1070 Vienna, registered in the Commercial Register of the Vienna Commercial Court under FN 247009 z (see the Legal Notice for further details).

1.2. Data protection is a matter of great importance to us. The processing of personal data therefore always takes place in accordance with applicable data protection regulations.

1.3. Personal data refers to any information relating to an identified or identifiable living person. Various pieces of information that, when combined, can lead to the identification of a specific person also constitute personal data. Personal data that has been anonymized, encrypted, or pseudonymized but can still be used to re-identify a person remains personal data and falls within the scope of the General Data Protection Regulation. Personal data that has been anonymized in such a way that the data subject cannot be identified or can no longer be identified is no longer considered personal data. For the data to be truly anonymized, the anonymization must be irreversible. Definitions of the terms used can be found in Art. 4 of the GDPR.

1.4 Personal data therefore includes, for example: last name and first name, home address, email address, ID number, IP address, and data held by a hospital or doctor that could lead to the unambiguous identification of a natural person. (Fully) anonymized data is not included.

1.5.  This Privacy Policy informs you, in accordance with the General Data Protection Regulation (EU) 2016/679 and the Austrian Data Protection Act (DSG), about what personal data we collect, how we process it, and what options and rights you have as a visitor to this website regarding your data.

1.6. No automated decision-making, including profiling, takes place.

1.7. Since changes to this privacy policy may be made due to new technologies and the ongoing development of this website, we recommend that you review the privacy policy at regular intervals.

1.8. Data controller pursuant to Article 4(7) of the GDPR

IBG Innovatives Betriebliches Gesundheitsmanagement GmbH
Mariahilfer Straße 50/14
1070 Vienna
Tel: +43 1 524 37 51 – 0
Email: office@ibg.at

2. Data Processing When Visiting Our Website

2.1. You may also visit this website without providing any personal information.

2.2. However, to improve our online offering, we store (without personal reference) your access data to this website. This access data includes, for example, the file you requested, the address (URL) of the accessed webpage, the operating system used, or the name of your internet service provider. Due to the anonymization of the data, it is not possible to draw conclusions about your identity.  The legal basis for data processing on this website is Article 6(1)(f) of the GDPR, based on our legitimate interest in improving the stability and functionality of our website.

2.3. If you provide us with your personal data electronically via this website,  we will use this data exclusively for the purpose  specified in each case. Your data will be stored securely; it will not be disclosed to third parties. 

3. HTTP/HTTPS Cookies

3.1. On this website, we use cookies that are necessary for the execution of the electronic communication process, the provision of functions, or the optimization of the website. Cookies are small text files that your web browser stores on your device (either in the browser folder itself or in the program data) until you delete them. During subsequent visits to this site, the web server can read this cookie information directly or transmit the cookie information to the server via a website script. The purpose of these cookies includes, for example, identifying the user (session ID), saving a login for a web application, or saving a shopping cart for an online retailer. A common use is web tracking of users via specially designed pages. The use of cookies to analyze user behavior and for advertising purposes requires your consent. You can adjust this consent at any time via the cookie settings on our website.

3.2. We use essential cookies (see Section 3.3) and functional cookies (see Section 3.4) on this website. You will be informed about the cookies we use when you first visit this website. By default, only essential cookies are used and are mandatory. We use functional cookies from external media only with your consent.

3.3. Essential cookies, which are necessary for the execution of the electronic communication process, for providing certain functions you have requested, or for optimizing the website, are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified at . We have a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of our services.

Depending on the service used on one of our websites, the “Borlabs Cookie” may be used as an essential cookie to ensure basic website functions. Its use is therefore exempt from the consent requirement. The following information is stored in it:

• Cookie lifespan
• Cookie version
• Domain and path of the WordPress website
• Consents
• Unified Identification Number – the UID is randomly generated and contains no personal information

No personal data is transmitted to Borlabs.

3.4. Depending on the service you use on one of our websites, additional functional cookies may be used, provided you consent to their use via the cookie banner displayed when you first visit this website (specifically Google Analytics, Facebook Pixel, Facebook, Instagram, YouTube, and Xing). Otherwise, they are blocked by this website by default. If cookies from external media are accepted, accessing this content no longer requires manual consent. You can disable functional cookies via your browser at any time and block corresponding functions of this website (e.g., the display of YouTube links).

3.5. You can configure your browser so that you are informed when cookies are set and can choose to allow cookies only on a case-by-case basis, block the acceptance of cookies in certain cases or generally, and enable the automatic deletion of cookies when you close your browser. However, the functionality of our website may be limited if cookies are disabled.

• Safari: Managing cookies and website data with Safari
• Firefox: Deleting cookies to remove data that websites have stored on your computer
• Chrome: Deleting, enabling, and managing cookies in Chrome
• Edge: Deleting and managing cookies

If the links provided are inactive, search for instructions in an online search engine using the search terms “delete cookies [browser name]” or “disable cookies [browser name].” If you generally do not allow us to use cookies—i.e., disable them via your browser settings—some features and pages may not function as expected.

4. Google Tag Manager

4.1. We use Google Tag Manager on our pages. Google Tag Manager is an application that allows us to place small code elements (tags) on our pages based on user-defined rules. Such tags can, for example, be used to measure visitor behavior (Google Analytics).

4.2. Tag Manager itself does not create cookies or collect personal data, but it can place tags that collect such data.

4.3. The basis for the Cookie Consent Tool offered on our website is the use of Google Tag Manager, which interprets the settings selected by the visitor and then decides whether or not to place tags on the page.

4.4. We process your data based on your consent in accordance with Art. 6(1)(a) GDPR. This tool is operated by a company based in the United States. If this tool is active, your personal data may be transferred to the United States and processed there. We would like to point out that a level of data protection comparable to that in the EU cannot be guaranteed in these countries.

5. Google Analytics

5.1. We use the “Google Analytics 4” service, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), to analyze website usage by users. The service uses “cookies”—text files that are stored on your device. The information collected by the cookies is generally sent to a Google server in the United States and stored there.

5.2. IP anonymization is enabled on this website. Users’ IP addresses are truncated within the member states of the EU and the European Economic Area. This truncation removes the personal reference from your IP address. Under the data processing agreement that the website operators have entered into with Google Inc., Google uses the collected information to analyze website usage and activity and to provide services related to internet usage.

5.3. Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. Google Analytics stores cookies in your web browser for a period of two years from your last visit. User-related data is automatically deleted after 14 months. You have the option to prevent the storage of cookies on your device by adjusting the settings in your browser. We cannot guarantee that you will be able to access all features of this website without restrictions if your browser does not allow cookies.

5.4. Furthermore, you can use a browser plugin to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link takes you to the corresponding plugin: https://tools.google.com/dlpage/gaoptout?hl=de

5.5. You can find more information about Google Inc.’s use of data here: https://support.google.com/analytics/answer/6004245?hl=de

5.6. This tool is operated by a company based in the United States. If this tool is active, your personal data may be transferred to the United States and processed there. Please note that a level of data protection comparable to that in the EU cannot be guaranteed in these countries.

6. Google Fonts

6.1. We use Google Fonts to display fonts on our website. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; for users in Europe, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Fonts are integrated locally on our own web server; therefore, the fonts are no longer loaded from Google’s servers, and your IP address is not transmitted.

7. Google Ads

7.1 We use the Google Ads feature on our website. Google Ads is an online advertising program provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

7.2 Google Ads allows us to display ads in the Google search engine or on third-party websites when you enter specific search terms into Google (keyword targeting). Furthermore, targeted ads can be displayed based on user data available to Google (e.g., location data and interests) (audience targeting). As the website operator, we can evaluate this data quantitatively, for example by analyzing which search terms led to the display of our advertisements and how many ads resulted in corresponding clicks.

7.3 We use this tool based on your consent pursuant to Art. 6(1)(a) GDPR. We would like to point out that there is a possibility that data may be transferred to the United States and processed by U.S. authorities. Since July 10, 2023, an adequacy decision for the United States (U.S. Data Privacy Framework) has been in place pursuant to Art. 45 GDPR. The EU Commission has thereby recognized the level of data protection for certain companies from the United States. The list of certified U.S. companies is maintained by the U.S. Department of Commerce (https://www.dataprivacyframework.gov/s/participant-search). The certified U.S. companies thereby commit to complying with the specified data protection obligations. This includes Google LLC.

7.4 In the event that you do not grant your consent to the use of Google Ads, we use Google Ad Consent Mode. Consent Mode, as a beta feature, allows us to receive information from Google Ads at even if you have declined the use of cookies. This tool also enables us to track conversions related to advertisements. The program detects whether you have consented to cookies. Depending on this, the data is collected in anonymous (no consent) or non-anonymized form (consent) and forwarded for data analysis. Consent Mode is GDPR-compliant, as no personal data is forwarded to Google. Only the information regarding whether you have specifically consented to the use of cookies is forwarded, and thus whether the data can be forwarded in a non-anonymized form.

7.5 We also use Google Ads Enhanced Conversions for the Web on our website: Enhanced Conversions are a supplement to the conversion tag. In online marketing, conversion describes the process by which an interested website user ultimately performs a desired action, such as making a purchase.

Essentially, this application is used to forward personal data we have collected to Google in “hashed” form (i.e., converted into a random code), thereby enabling us to better track purchases and bookings and to overcome browser tracking restrictions. When you perform a so-called conversion action on our website, the personal data used in the process is collected. We forward this data in hashed form to Google, where it is associated with your Google account. This allows us to track which conversions have been made on our site, even if browser tracking restrictions are in place.

7.6 We also use Google Enhanced Conversions for Leads on our website: When using Enhanced Conversions for Leads, personal data collected by us is transmitted to Google in hashed form (i.e., converted into a random code). If you arrive at our website via an ad (lead), your personal data is collected as soon as you complete a conversion—that is, when you make a purchase or perform another action on our website. The converted (hashed) data is transmitted to Google and, after being matched by Google, is included in conversion tracking.t

8. Facebook Pixel

8.1. This website uses Facebook’s visitor action pixel for conversion tracking. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the collected data is also transferred to the United States and other third countries.

8.2. When using the Facebook Pixel, the behavior of website visitors can be tracked after they have been redirected to the provider’s website by clicking on a Facebook advertisement. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

8.3. The collected data is anonymous to us as the operator of this website, meaning we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, enabling a link to the respective user profile and allowing Facebook to use the data for its own advertising purposes in accordance with the Facebook Data Use Policy ( ). This enables Facebook to display ads on Facebook pages as well as outside of Facebook. As the site operator, we have no influence over this use of the data.

8.4. The use of Facebook Pixel is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising measures, including social media. If consent has been obtained (in particular, consent to the storage of cookies), processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR. This consent may be revoked at any time.

8.5. You can find further information regarding the protection of your privacy in Facebook’s privacy policy: https://de-de.facebook.com/about/privacy/.

8.6. You can also disable the “Custom Audiences” remarketing feature in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged into Facebook.

8.7. If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

8.8. This tool is operated by a company based in the United States. If this tool is active, your personal data may be transferred to the United States and processed there. Please note that a level of data protection comparable to that in the EU cannot be guaranteed in these countries.

9. Embedded Social Media Elements (Social Plugins)

Elements from social media services are embedded on our website, allowing images, videos, and text to be displayed. When you visit pages that include these elements, data is transmitted from your browser to the respective social media service and stored there. We do not have access to this data in this context.

To give users of our website the opportunity to interact with social networks and to make our offering more interesting and user-friendly for you, we use so-called social plug-ins from the following social networks/platforms:

• Facebook (Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA; privacy policy: https://www.facebook.com/privacy/explanation)

Please note that visiting our website establishes a connection with the above-mentioned social networks, and they receive, among other things, the information that the user has accessed the corresponding page of our website. If you interact with one of the integrated plugins—for example, by clicking on it while logged into the respective social network—your data may be directly associated with your existing user account on that social network.

We have no influence over the data collected by the social networks or their data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing, or the retention periods of the social networks. We also have no information regarding the deletion of the collected data.

We recommend that you familiarize yourself with the types of data covered, as well as the purpose and scope of data collection and the further processing and use of the data by the social networks, and with your rights and settings options for protecting your privacy by reading the privacy policies linked above.

10. YouTube

10.1. On this site, we use the video service YouTube, provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

10.2. When pages on our website that embed YouTube videos are accessed, data is transmitted to and from YouTube, stored, and analyzed. If you have a YouTube account and are logged in, this data may be associated with your personal account and the data stored therein.

10.3. You can find out what data Google collects and how this data is used at https://www.google.com/intl/de/policies/privacy/

10.4. In general, your data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest). If you have given your consent, data processing is based on your consent (Art. 6(1)(a) GDPR).

10.5. YouTube is operated by a company based in the United States. When this tool is active, your personal data may be transferred to the United States and processed there. Please note that a level of data protection comparable to that in the EU cannot be guaranteed in these countries.

10.6. You can find out what data YouTube collects and how this data is used at https://www.google.com/intl/de/policies/privacy/

11. Newsletter Subscription

11.1. The website operator offers you a newsletter that provides information on current developments, news, and offers from the operator. If you wish to subscribe to the newsletter, you must provide your name, your company, and a valid email address. By subscribing to the newsletter, you consent to receiving the newsletter and to the procedures outlined in this privacy policy.

11.2. The newsletter is distributed via email by the website operator.

11.3. We process your data based on your consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent to receive the newsletter at any time and thereby cancel your newsletter subscription. You will find information on how to cancel at the end of each newsletter. After you cancel, your personal data will be deleted to the extent that it was necessary for the newsletter service. If you wish to have your data deleted further, please contact us.

12. Newspaper Subscription (Magazine “Human Work”)

12.1. The website operator offers you a magazine featuring information and current developments regarding sustainable work capacity. If you wish to subscribe to the newspaper (magazine “Human Works”), you must provide your gender, first and last name, a valid email address, and a valid mailing address. By subscribing to the newspaper, you agree to receive the newspaper and to the procedures described.

12.2. The newsletter is mailed by the website operator or the contracted printing company in Austria.

12.3. We process your data based on your consent in accordance with Art. 6(1)(a) of the GDPR. You may revoke your consent to receive the newspaper at any time and thereby cancel your newspaper subscription. Cancellation may be made by mail, email, or phone. Following your cancellation, your personal data will be deleted to the extent that it was necessary for the newspaper service. If you wish to have your data deleted further, please contact us.

13. Legal Basis

13.1. The processing of your personal data required for the performance of a contract or based on pre-contractual measures is carried out on the basis of Article 6(1)(b) of the GDPR.

13.2. If processing is necessary to fulfill a legal obligation, it is carried out on the basis of Article 6(1)(c) of the GDPR, to comply with legal obligations and to fulfill court and official orders.

13.3. If the vital interests of a person necessitate processing, Article 6(1)(d) of the GDPR serves as the legal basis.

13.4. If processing is necessary to safeguard a legitimate interest of ours and such interests prevail, the processing is carried out on the basis of Article 6(1)(f) of the GDPR.

13.5. We may also process your personal data based on your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR. Consent to data processing is voluntary and may be revoked at any time with future effect. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Article 49(1)(a) of the GDPR.

14. Transfer of Your Personal Data to Third Parties

We use third-party service providers to fulfill our contractual obligations and to ensure the secure processing of your personal data. We have ensured that these providers also guarantee the protection of your personal data in accordance with the GDPR and have agreed to this in our contracts. We have concluded a separate data processing agreement with all partners, which ensures that your data is also processed by our partners in accordance with applicable data protection regulations.

15. User Rights

15.1. As a user, you have the right to request, free of charge, information about what personal data has been stored about you. You also have the right to have incorrect data corrected and to restrict the processing or erasure of your personal data. If applicable, you may also exercise your right to data portability. You also have the right to restrict processing, to object to unreasonable data processing, and to data portability.

15.2. If you believe that your data has been processed unlawfully, please contact us first. However, you also have the option of contacting the data protection authority.

16. Deletion of Data

Provided your request does not conflict with a legal obligation to retain data (e.g., data retention), you have the right to have your data deleted. Data stored by us will be deleted if it is no longer necessary for its intended purpose and there are no legal retention periods. If deletion cannot be carried out because the data is required for permissible legal purposes, data processing will be restricted. In this case, the data will be blocked and not processed for other purposes.

17. Right to Object

17.1. Users of this website may exercise their right to object and object to the processing of their personal data at any time, provided there is no legal obligation on our part to process the data.

17.2. If you wish to request a correction, blocking, deletion, or information regarding the personal data stored about you, or if you have questions regarding the collection, processing, or use of your personal data, or if you wish to revoke any consent you have given, please contact us.

17.3. You can communicate your request to us in three ways: (i) by letter to IBG Innovatives Betriebliches Gesundheitsmanagement GmbH, Data Protection, Mariahilfer Straße 50/14, A-1070 Vienna, signed by hand and accompanied by a copy of your ID, (ii) in person at our office at the same address (by appointment), or (iii) by email to datenschutz@ibg.at with a qualified electronic signature. You can also find our contact information in the legal notice. Please make your request as specific as possible so that we can process it quickly.

(As of April 30, 2026)

German version