Privacy Information for Website Users

Who is responsible for all processing activities and who is your contact person in case of any questions?

Controller of all processing activities is:

Which data are we processing and where does this data come from?

If you are a user of the website

When using the website Cookies are used. For further information, please see section 6.

If you contact us via the online contact form under the item "Contact us" or via the other contact options offered, the personal data you provide will be processed in order to be able to deal with and answer your enquiry, in particular your first name, surname, e-mail address, telephone number and any data specified in the text.

If you are a business partner/customer

On the basis of a (pre-)contractual relationship, the personal data provided by you in the course of the initiation of the contractual relationship as well as the following data provided during the upright contractual relationship will be processed:

• Name, company or business name;
• Address;
• Contact details (phone, e-mail, fax);
• Company register data;
• Data of the bank account;
• Credit card information;
• UID number;
• Names of contact persons;
• Contact details of contact persons (phone, mail, fax, address, etc.);
• Contract texts and business correspondence;

How are we processing your personal data and for which purpose?

We process your personal data for different purposes and by various means, depending on whether you are (i) a visitor of our website or (ii) a business partner/customer.

If you are a user of the website

We process your personal data

1. for the fulfilment of (pre-)contractual obligations (Article 6 para 1 lit b GDPR): We process the data collected from you for the purpose of contacting you or corresponding with you in writing, electronically or by telephone, including in the context of (pre-)contractual relationships.Without this data we cannot fulfil the contract with you.
2. for the fulfilment of legal obligations (Article 6 para 1 lit c GDPR): Your data is also processed for the purpose of fulfilling various legal obligations, such as for the purpose of providing information to law enforcement agencies and courts in the event of an incident.
3. on the basis of legitimate interests (Article 6 para 1 lit f GDPR): We process personal data to protect our legitimate interests, unless your interests in confidentiality prevail. Our legitimate interests is to process and answer your enquiries, to initiate legal business contact and to ensure the security of the website operation. You can object to the processing of your data for advertising purposes at any time (please find more information regarding Cookies & Analysis Tools in Section 6).

If you are a business partner/customer

We process your personal data

1. for the fulfilment of (pre-)contractual obligations (Article 6 para 1 lit b GDPR): The purpose of the processing of personal data is the performance of our (pre-)contractual duties according to our contractual relationship with you, such as our duties of protection, due diligence and clarification, the provision of services as well as the settlement of claims arising from the contract, invoicing etc. Without this data, we cannot fulfil the contract with you.
2. for the compliance with legal obligations (Article 6 para 1 lit c GDPR): personal data is also processed for the purpose of fulfilling various legal obligations, such as the obligation to keep proper accounts or for the purpose of providing information to law enforcement agencies and courts in the event of an incident.
3. on the basis of legitimate interests (Article 6 para 1 letter f GDPR): We process personal data to protect our legitimate interests, unless your interests in confidentiality prevail. These legitimate interests include, for example, the interest in optimizing our offer, the interest in sending you advertising about our products and services, contacting you regarding the initiation or processing of further contractual relationships, and the interest in the availability of the data in the event of a legal dispute. You can object to the processing of personal data for advertising purposes at any time.

Transfer of your data

We will transfer your personal data if we are legally obligated to do so to the following authorities and institutions:

If you are a user of the website

• Service Providers (IT-Provider);
• Courts and authorities in case of necessity;
• Legal representatives or lawyers and third parties, assisting in legal services;

If you are a business partner/customer

• Service providers (IT providers);
• Courts and authorities in case of necessity;
• Legal representatives or lawyers and third parties, assisting in legal services;
• Banks;
• Tax advisers and accountants;
• Auditors;
• Insurance companies in the event of an incident;

We will make sure that your personal data is transferred on the basis of Standard Contractual Clauses (as of today: [EU] 2021/914) or otherwise in accordance with Articles 46, 47 or 49 GDPR, if the above-mentioned recipients of your personal data are seated outside EEA and if the EU Commission has not decided that there is an adequate level of data protection in place in the country where the recipient of your personal data is seated.

Furthermore, service providers (processors) will receive your personal data from us in order to render their respective services (e.g. IT-service providers). All service providers are contractually obligated to keep your personal data confidential and may use your personal data only on our behalf and in line with our instructions.

Duration of processing / storage period

We will process your personal data as long as the processing is necessary. Your personal data will be made anonymous or erased automatically as soon as the processing is no longer necessary.

We retain your personal data necessary for the performance of our services according to mandatory record retention and documentation duties (e.g. according to the Austrian Commercial Code (Unternehmensgesetzbuch) or the Federal Fiscal Code (Bundesabgabenordnung)). Furthermore we comply with the legal periods of limitation, e.g. according to the Code of Civil Law (Allgemeinen Bürgerlichen Gesetzbuch (ABGB)). These periods of limitation can last up to 30 years in certain cases.

Data processing in connection with the website

Cookies & Analysis Tools

Our website uses cookies that are absolutely necessary for the structure or functioning of the website (technically necessary cookies). These cookies cannot be deactivated.

Cookies are small text files that are temporarily stored on your end device with the help of the browser and / or that your browser saves. They do not cause any harm, but make the use of the website more user-friendly. The cookies are deleted when you close the browser and do not remain stored on your computer. We do not use &auot;persistent cookies&auot;.

The storage period of the respective cookies depends on the duration of the respective platform session.

We are using the web analytics service "Fathom Analytics" based on our legitimate interests (Article 6 para 1 letter f GDPR) in order to continuously optimise our offer, both technically and in terms of content. Fathom Analytics is a trademark of Conva Ventures Inc. BOX 37058 Millstream PO, Victoria, BC, V9B 0E8, Canada ("Fathom").

You can find more information about the technical implementation here: usefathom.com/blog/anonymization.

Further information on data protection at Fathom can be found at usefathom.com/data.

What are your rights in connection with your personal data?

Right to information

Provided that we process your personal data, you have the right to information about the purposes of processing, the categories of personal data, the recipients of your personal data, the duration of storage, your rights, the origin of your personal data and the existence of an automated decision-making.

Rectification and erasure of data

If we process inaccurate or incomplete personal data you have the right to rectification of such data. You may also request the erasure of your personal data if your data is processed unlawfully, subject to legal obligations preventing the erasure of your personal data.

Restriction of processing

You may request to restrict the processing of your personal data in certain cases.

Data portability

You have the right to receive the personal data, which you have provided to us, in a structured, commonly used and machine-readable format. You have the right to direct transmission of those data to another controller as far as this is technically feasible.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. If you object to processing of your personal data, we shall cease to process your personal data unless our legitimate interests to processing your personal data override your interests.

Complaint

You have the right to lodge a complaint with the supervisory authority, if you believe that the processing of your data violates data protection law or your rights to protection of your personal data have been infringed. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde) (www.dsb.gv.at).

Contact

To exercise your rights in connection with your personal data processed by us, please contact

Definitions

Definitions of the terms used (e.g. "personal data" or "processing") can be found in Article 4 GDPR.