Privacy

The protection of your personal data is important to us. We want you to be informed about what types of personal data we collect and how we process them. We process your data only in compliance with applicable data protection laws and regulations (GDPR, Data Protection Amendment Bill, Telecommunications Act 2003). This Privacy Policy contains the most important aspects of data processing.

In the course of further developing our websites and the implementation of new technologies, changes to this Privacy Policy may occur. Thus, we advise you to periodically reread this Privacy Policy.

Contacting us

If you contact us via the form on this website, e-mail or telephone, we store your personal data for a period of two years for the purpose of processing your request and for the event that follow-up-communication is necessary. We do not transmit this data to third parties without your consent.

We collect personal data for the following purposes:

  • Legal basis of performance of a contract: The data provided by you is necessary for the performance of a contract or the implementation of pre-contractual measures. Without this data, we cannot conclude a contract with you. Examples of purposes: Processing requests, preparing offers & invoices
  • Legal basis of legitimate interests: We process your personal data on the basis of our legitimate interest (e.g. CRM-system for the efficient and timely processing of user requests, optimized and efficient operation of our online offer).
  • Legal basis of consent: You have freely provided us with your personal data and we process this data on the basis of your consent. Examples of purposes: Consent to receiving the newsletter or registration for an event. You can withdraw your consent at any time. Upon such notice of withdrawal, we will stop processing your personal data for the aforementioned purposes. To withdraw your consent, please contact us.

Period for which the data will be stored / Time limits for erasure

The collected personal data is erased when the user has withdrawn his consent to its storage or when the storage of the data is no longer necessary for the intended purposes.

Furthermore, the period for which your data is stored depends on the applicable laws and regulations and the specific application:

  • Contact details in consequence of offers and invoices: 7 years
  • Contact details in consequence of requests: 2 years
  • Job applications: 6 months

Processor

We hire processors for our data processing (e.g. e-mail & web hosts, CRM-system, e-mail newsletter service, website statistics, tax consultant). These processors are strictly obligated to protect your personal data and are not authorized to process your personal data for any other purpose than the provision of our services.

Security measures

We take state-of-the-art organisational, contractual and technical security measures to ensure that the provisions of the data protection law are complied with and to protect the data processed by us from accidental or deliberate manipulation, loss, destruction or access by unauthorised persons.

Web analytics

This website uses:

1. Website statistics

Automatically provided by our web host. The access statistics do not contain any personal data, since the IP-addresses of our website’s users are anonymised.

2. Web host IP-address

Our web host is processing the following personal data in a server log file for the purpose of monitoring the technical function and raising the operational safety of the web server, on the basis of the legitimate interest of the controller (technical security measures):
Accessed website, date and time of server inquiry, type of browser/browser version, used operating system, transferred data volume, notice of successful access, referrer URL, IP-address, host name. We ourselves do not have access to the log files.

Integration of the services and contents of third parties

Within our online offer, we integrate content or services provided by third parties, like videos or text fonts (hereinafter referred to as “contents”), on the basis of our legitimate interest (i.e. interest in the analysis, optimization and efficient operation of our online offer based on Art. 6 para 1 lit f GDPR). This always requires the third parties providing these contents to have access to the users’ IP-addresses, because without IP-address they cannot send contents to the users’ browsers. Thus, the IP-address is necessary for the display of these contents. We make an effort to exclusively use contents of providers who use these IP-addresses only for the provision of their contents.

The following list gives you an overview of third party providers and their contents as well as links to their privacy policies containing more information on the processing of data and possibilities of withdrawal or refusal (so-called opt-out), as partly mentioned before:

Webfonts

For the coherent presentation of text fonts, this site uses so-called Web Fonts provided by Google, LLC., („Google Fonts“), USA. When accessing a site, your browser loads the needed Web Fonts in your browser cache to correctly display texts and text fonts.

For this purpose, the server you are using has to contact the servers of Google. This way, Google is informed that our website has been accessed via your IP-address. We use Web Fonts for the purpose of a coherent and appealing presentation of our online offers. This presents a legitimate interest based on Art. 6 para 1 lit f DSGVO.

If your browser does not support Web Fonts, your computer uses a standard text font instead.

For more information about Web Fonts, please consult https://www.google.com/fonts and Google’s privacy policy: https://policies.google.com/privacy.

Online presence in social media

We maintain online presences in social networks and platforms to communicate with our customers, prospective customers and users there active and inform them about our services. When accessing any of these networks and platforms, the terms and conditions and policies on data processing of the respective operators apply. Unless stated otherwise in our Privacy Policy, we process user data if they communicate with us via social networks or platforms, e.g. write posts in connection with our online presence or send us messages.

Privacy Policies of the platforms:
Facebook: https://www.facebook.com/business/gdpr
Twitter: https://gdpr.twitter.com/en/faq.html
Google+: https://policies.google.com/privacy?hl=de
LinkedIn: https://www.linkedin.com/help/linkedin/answer/87080
Instagram: https://help.instagram.com/519522125107875?helpref=page_content
YouTube: https://policies.google.com/privacy?hl=de&gl=de

Your rights

In general, you have a right to request from the controller access to and rectification or erasure of personal data or restriction of processing or the right to object to processing or withdraw consent as well as the right to data portability. If you believe that the processing of your personal data infringes applicable data protection law or that your data protections rights are infringed in any other way, you can lodge a complaint with the competent supervisory authority. In Austria, the competent supervisory authority is:

Austrian Data Protection Authority
Wickenburggasse 8-10
1080 Wien
Telephone: +43 1 531 15-202525
eMail: dsb@nulldsb.gv.at
Homepage: https://www.dsb.gv.at/

Our contact details

Univ.-Prof. Dr. Rainer Kunstfeld

Währingerstrasse 115/14
A-1180 Wien
Telefon: +43 1 40 300 30
E-Mail: rainer@nullkunstfeld.at