Privacy Policy

Effective Date: January 2024

Data Protection at P-SMART GmbH.

We take the protection and security of our employees’, business partners’, and customers’ data seriously. Therefore, we are committed to respecting privacy when processing and using personal data. If personal data is collected (e.g., your name, address, or other contact details), it is processed and used solely in accordance with applicable data protection regulations.

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data includes all data with which you can be personally identified. For detailed information on the subject of data protection, please refer to our privacy policy listed below this text.

Data Collection on This Website

WHO IS RESPONSIBLE FOR THE DATA COLLECTION ON THIS WEBSITE?
The data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the Responsible Party” in this privacy policy.

HOW DO WE COLLECT YOUR DATA?
Your data is collected firstly by you providing it to us. This could be, for example, data that you enter into a contact form. Other data is collected automatically or after your consent by our IT systems when you visit the website. This mainly includes technical data (e.g., internet browser, operating system, or the time of the page access). The collection of this data occurs automatically as soon as you enter this website.

WHAT DO WE USE YOUR DATA FOR?
Part of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.

WHAT RIGHTS DO YOU HAVE REGARDING YOUR DATA?
You have the right at any time to obtain free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent for data processing, you can revoke this consent at any time for the future. Additionally, you have the right, under certain circumstances, to request the restriction of processing your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority (Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna). Hierzu sowie zu weiteren Fragen zum Thema Datenschutz können Sie sich jederzeit an uns wenden .

Analysis Tools and Third-Party Tools

When you visit this website, your browsing behavior may be statistically evaluated. This is done mainly with so-called analysis programs. Detailed information about these analysis programs can be found in the following privacy policy.

2. Hosting

External Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.

The use of the host is for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). Our host will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions concerning this data.

We use the following host:
Webforum Löffler KG
Leopoldstraße 20
6020 Innsbruck
Austria

Data Processing Agreement

We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract required by data protection law, which ensures that this provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.

When you use this website, various personal data are collected. Personal data are data that can identify you personally. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this occurs.

We would like to point out that data transmission over the Internet (e.g., communication via email) may have security gaps. Complete protection of data from access by third parties is not possible.

Note on the Responsible Entity

The entity responsible for data processing on this website is:

PHOENIX Arzneiwarengroßhandlung GmbH
FN 34326 f
Albert-Schweitzer-Gasse 3
1140 Vienna, Austria

Phone: +43 1 491 49-1234
Email:

The responsible entity is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Retention Period

Unless a more specific retention period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. The specific retention period for individual cookies can be found in the ConsentManager pop-up before you submit your consent. If you assert a legitimate request for deletion or withdraw your consent for data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in such cases, the deletion will occur after these reasons cease to exist.

Data Protection Officer

We have appointed a data protection officer for our company.

Mag. Sandra Erlacher
c/o PHOENIX Arzneiwarengroßhandlung GmbH
FN 34326 f
Albert-Schweitzer-Gasse 3
1140 Vienna, Austria

Phone: +43 1 491 49-1234
Email:

Notice on Data Transfer to the USA and Other Third Countries

We use tools from companies based in the USA or other non-EU countries that do not provide an adequate level of data protection. When these tools are active, your personal data may be transferred to and processed in these third countries. We would like to point out that in these countries, no level of data protection comparable to that of the EU can be guaranteed. For example, US companies are required to provide personal data to security authorities without you being able to take legal action against this. Therefore, it cannot be excluded that US authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You can revoke consent that you have already given at any time. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Advertising (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH A PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE PROCESSING IS FOR THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21 PARA. 2 GDPR).

Right to Lodge a Complaint with a Supervisory Authority

In the event of violations of the GDPR, the data subject has the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace, or the place of the alleged violation. (For Austria: Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna). The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to Data Portability

You have the right to have data that we process on the basis of your consent or in performance of a contract, automatically processed, handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done as far as it is technically feasible.

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock symbol in your browser bar. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Access, Deletion, and Correction

Within the framework of applicable legal provisions, you have the right at any time to free information about your stored personal data, their origin and recipients, and the purpose of data processing, and if applicable, a right to correction or deletion of this data. For this, as well as for further questions about personal data, you can contact us at any time.

Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data. For this, you can contact us at any time. The right to restrict processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you need them for the exercise, defense, or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
  • If you have lodged an objection under Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data may – apart from their storage – only be processed with your consent or for the assertion, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

Objection to Advertising Emails

The use of contact data published within the framework of the imprint obligation for sending unsolicited advertising and information materials is hereby rejected. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.

4. Data Collection on this Website

Cookies

Our website uses “cookies,” which are small text files that do no harm to your device. Cookies are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit ends. Persistent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.

In some cases, cookies from third-party companies may also be stored on your device when you enter our site (third-party cookies). These allow us or you to use certain services provided by the third party (e.g., cookies for processing payment services).

Cookies serve various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or displaying videos). Other cookies are used to analyze user behavior or display advertisements.

Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions you have requested (functional cookies, e.g., for the shopping cart function) or to optimize the website (e.g., cookies for measuring web audiences) are stored based on Art. 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent for the storage of cookies has been requested, the storage of the relevant cookies is based solely on this consent (Art. 6(1)(a) GDPR); consent can be revoked at any time.

You can configure your browser to notify you about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when the browser is closed. Disabling cookies may limit the functionality of this website.

Insofar as cookies from third-party companies or for analysis purposes are used, we will inform you separately within the framework of this data protection declaration and, if necessary, request your consent.

Consent with ConsentManager

To manage the cookies and similar technologies (tracking pixels, web beacons, etc.) used and the associated consents, we use the consent tool “Real Cookie Banner.” Details on the functionality of “Real Cookie Banner” can be found in the data processing section.

The legal bases for processing personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR. Our legitimate interest lies in managing the cookies and similar technologies used and the related consents.

Providing personal data is neither legally required nor necessary for concluding a contract. You are not obliged to provide personal data. If you do not provide personal data, we cannot manage your consents.

Server Log Files

The provider of the site automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not combined with other data sources. The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – to achieve this, the server log files must be recorded.

Request via Email, Phone, or Fax

If you contact us via email, phone, or fax, your request, including all resulting personal data (name, request), will be stored and processed by us for the purpose of handling your inquiry. We do not share this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively processing the requests addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if this was requested.

The data you send to us via contact requests remains with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions – especially statutory retention periods – remain unaffected.

Registration on this Website

You can register on this website to use additional features on the site. The data entered for this purpose will be used only for the use of the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will refuse the registration.

For important changes, such as the scope of the offer or technically necessary changes, we use the email address provided during registration to inform you in this way.

The processing of the data entered during registration is based on Art. 6(1)(b) GDPR, which allows data processing to fulfill a contract or pre-contractual measures. The data collected during registration will be stored by us as long as you are registered on this website and will then be deleted. Statutory retention periods remain unaffected.

5. Social Media

We maintain publicly accessible profiles on social networks. The social networks we use are listed below. Social networks like Facebook, Twitter, etc., can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g., like buttons or ad banners). Visiting our social media presences triggers various data processing operations relevant to data protection. Specifically:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can associate this visit with your user account. Your personal data may also be collected under certain circumstances even if you are not logged in or do not have an account with the respective social media portal. This data collection occurs in this case, for example, via cookies stored on your device or by recording your IP address.

With the help of the collected data, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, you can be shown personalized, interest-based advertising inside and outside of the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices you are logged in to or have been logged in to.

Please also note that we cannot track all processing operations on social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals (e.g., in their privacy statement linked below).

When you visit one of our social media appearances (e.g., Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, correction, deletion, restriction of processing, data portability, and complaint) both against us and against the operator of the respective social media portal (e.g., Facebook).

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined primarily by the corporate policies of the respective provider.

Data Used, Processing Purpose, and Legal Basis

Our social media presences aim to ensure the most comprehensive presence possible on the internet. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. The analysis processes initiated by social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g., consent in the sense of Art. 6(1)(a) GDPR). The personal data processed by the operators of the social media portals, the respective storage duration, the purposes of processing, and the recipients and categories of recipients of data, as well as the security measures to protect your data, are described under “Social Networks in Detail” or can be found in the individual linked privacy statements of the operators of the social media portals. Beyond this, no further data collection and processing are carried out by us.

Retention Period

The data we collect directly through the social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, or revoke your consent to store it. Stored cookies remain on your device until you delete them. Mandatory legal provisions – especially retention periods – remain unaffected. We have no influence on the storage duration of your data, which is stored by the operators of the social networks for their purposes. For details, please inform yourself directly with the operators of the social networks (e.g., in their privacy statement linked below).

Facebook

Plugins from the social network Facebook are integrated into this website. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the collected data is also transferred to the USA and other third countries. You can recognize Facebook plugins by the Facebook logo or the “Like” button on this website. An overview of Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

When you visit this website, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thereby receives the information that you have visited this website with your IP address. If you click on the Facebook “Like” button while logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate the visit to this website with your user account. We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data and their use by Facebook. For more information, please refer to Facebook’s privacy policy: https://de-de.facebook.com/privacy/explanation.

Die Verwendung der Facebook Plugins erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an einer möglichst umfangreichen Sichtbarkeit in den Sozialen Medien. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO; die Einwilligung ist jederzeit widerrufbar.

Ferner werden beim Besuch unserer Website seitens Facebook Cookies auf Ihrem Endgerät gesetzt. Dadurch wird mittels einer pseudonymen CookieID und auf Basis der von Ihnen besuchten Seiten Werbung ermöglicht. Durch diese Nutzung ist eine Erhebung von personenbezogenen Daten zur Analyse des Verhaltens der Webseiten-Nutzer auf der Webseite möglich. Sie können Ihre Werbeeinstellungen selbstständig in Ihrem Nutzer-Account anpassen. Klicken Sie hierzu auf folgenden Link und loggen Sie sich ein: https://www.facebook.com/settings?tab=ads.

Soweit mit Hilfe des hier beschriebenen Tools personenbezogene Daten auf unserer Website erfasst und an Facebook weitergeleitet werden, sind wir und die Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland gemeinsam für diese Datenverarbeitung verantwortlich (Art. 26 DSGVO). Die gemeinsame Verantwortlichkeit beschränkt sich dabei ausschließlich auf die Erfassung der Daten und deren Weitergabe an Facebook. Die nach der Weiterleitung erfolgende Verarbeitung durch Facebook ist nicht Teil der gemeinsamen Verantwortung. Die uns gemeinsam obliegenden Verpflichtungen wurden in einer Vereinbarung über gemeinsame Verarbeitung festgehalten. Den Wortlaut der Vereinbarung finden Sie unter: https://www.facebook.com/legal/controller_addendum. Laut dieser Vereinbarung sind wir für die Erteilung der Datenschutzinformationen beim Einsatz des Facebook-Tools und für die datenschutzrechtlich sichere Implementierung des Tools auf unserer Website verantwortlich. Für die Datensicherheit der Facebook- Produkte ist Facebook verantwortlich. Betroffenenrechte (z. B. Auskunftsersuchen) hinsichtlich der bei Facebook verarbeiteten Daten können Sie direkt bei Facebook geltend machen. Wenn Sie die Betroffenenrechte bei uns geltend machen, sind wir verpflichtet, diese an Facebook weiterzuleiten.

Informationen zu Deaktivierungs-Tools finden Sie in der Datenschutzerklärung von Facebook (https://www.facebook.com/about/privacy/).

Die erfassten Daten werden nach Aussage von Facebook auch in die USA und in andere Drittländer übertragen. Die Datenübertragung in die USA wird auf die Standardvertragsklauseln der EU-Kommission gestützt. Details finden Sie hier:
https://www.facebook.com/legal/EU_data_transfer_addendum
https://de-de.facebook.com/help/566994660333381
https://www.facebook.com/policy.php

Twitter

Wir nutzen den Kurznachrichtendienst Twitter und Funktionen dieses Kurznachrichtendienstes sind auf unserer Website eingebunden. Anbieter ist die Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Irland.

Über PlugIns auf unserer Website erfasst Twitter Ihre Besuche auf unserer Website und kann diese Ihrem Twitter-Profil zuordnen. Twitter verarbeitet und speichert dabei Log-Daten, wie etwa Ihre IP-Adresse, Ihren Browsertyp, das Betriebssystem, Informationen zu Ihrem Webnutzungsverhalten, Ihrem Standort, Ihrem Mobilfunkanbieter, Ihrem Endgerät, die von Ihnen verwendeten Suchbegriffe und Cookie-Informationen. Wenn Sie die Re-Tweet-Funktion nutzen, werden die von Ihnen besuchten Webseiten mit Ihrem Twitter-Account verbunden und anderen Nutzern bekannt gegeben. Twitter verarbeitet dabei die von Ihnen eingegebenen Daten wie Name und Nutzername, E-Mail-Adresse, Telefonnummer und allenfalls die Kontakte Ihres Adressbuchs. Ferner analysiert Twitter die von Ihnen geteilten Inhalte danach, welche Themen Sie interessiert, verarbeitet und speichert vertrauliche Nachrichten und bestimmt allenfalls Ihren Standort (GPS-Daten), Informationen zu Drahtlosnetzwerken und Ihre IP-Adresse, um Ihnen mithilfe von Analyse-Tools personalisierte Inhalte und Werbung anzubieten. Dabei werden Ihre Daten auch in Länder außerhalb der Europäischen Union übertragen. Informationen zu Deaktivierungs-Tools finden Sie in der Datenschutzerklärung von Twitter. Auf die Datenerhebung, -übermittlung und Nutzung durch Twitter haben wir keinen Einfluss und können hierfür keine Verantwortung übernehmen.

Die Verwendung von Twitter erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an einer möglichst umfangreichen Sichtbarkeit in den Sozialen Medien. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO; die Einwilligung ist jederzeit widerrufbar.

Sie können Ihre Twitter-Datenschutzeinstellungen selbstständig in Ihrem Nutzer-Account anpassen. Klicken Sie hierzu auf folgenden Link und loggen Sie sich ein:
https://twitter.com/personalization.

Die Datenübertragung in die USA wird auf die Standardvertragsklauseln der EU-Kommission gestützt. Details finden Sie hier:
https://gdpr.twitter.com/en/controller-to-controller-transfers.html.

Details entnehmen Sie der Datenschutzerklärung von Twitter:
https://twitter.com/de/privacy.

Instagram

Auf dieser Website sind Funktionen des Dienstes Instagram eingebunden. Diese Funktionen werden angeboten durch die Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland integriert.

Wenn Sie in Ihrem Instagram-Account eingeloggt sind, können Sie durch Anklicken des Instagram-Buttons die Inhalte dieser Website mit Ihrem Instagram-Profil verlinken. Ferner erfasst, verarbeitet und speichert Instagram beim Besuch unserer Instagram-Seite Ihre IP-Adresse sowie weitere technische Informationen über Ihr Endgerät. Wenn Sie selbst über ein Instagram-Profil verfügen, kann Instagram mittels auf Ihrem Endgerät gespeicherten Cookies Ihre Daten erfassen, nachvollziehen dass Sie unsere Website besucht und wie Sie diese verwendet haben und Ihren Besuch Ihrem Instagram-Profil zuordnen. Auf Basis dieser Daten kann Instagram Ihnen personalisierte Inhalte oder Werbung anbieten. Wir weisen darauf hin, dass wir als Anbieter der Seiten keine Kenntnis vom Inhalt der übermittelten Daten sowie deren Nutzung durch Instagram erhalten.

Die Verwendung von Instagram erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an einer möglichst umfangreichen Sichtbarkeit in den Sozialen Medien. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO; die Einwilligung ist jederzeit widerrufbar.

Informationen zu Deaktivierungs-Tools finden Sie in der Datenschutzerklärung von Instagram (https://instagram.com/about/legal/privacy/ und https://help.instagram.com/519522125107875).

Soweit mit Hilfe des hier beschriebenen Tools personenbezogene Daten auf unserer Website erfasst und an Facebook bzw. Instagram weitergeleitet werden, sind wir und die Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland gemeinsam für diese Datenverarbeitung verantwortlich (Art. 26 DSGVO). Die gemeinsame Verantwortlichkeit beschränkt sich dabei ausschließlich auf die Erfassung der Daten und deren Weitergabe an Facebook bzw. Instagram. Die nach der Weiterleitung erfolgende Verarbeitung durch Facebook bzw. Instagram ist nicht Teil der gemeinsamen Verantwortung. Die uns gemeinsam obliegenden Verpflichtungen wurden in einer Vereinbarung über gemeinsame Verarbeitung festgehalten. Den Wortlaut der Vereinbarung finden Sie unter: https://www.facebook.com/legal/controller_addendum. Laut dieser Vereinbarung sind wir für die Erteilung der Datenschutzinformationen beim Einsatz des Facebook- bzw. Instagram-Tools und für die datenschutzrechtlich sichere Implementierung des Tools auf unserer Website verantwortlich. Für die Datensicherheit der Facebook bzw. Instagram-Produkte ist Facebook verantwortlich. Betroffenenrechte
(z. B. Auskunftsersuchen) hinsichtlich der bei Facebook bzw. Instagram verarbeiteten Daten können Sie direkt bei Facebook geltend machen. Wenn Sie die Betroffenenrechte bei uns geltend machen, sind wir verpflichtet, diese an Facebook weiterzuleiten.

Gegebenenfalls werden Ihre Daten in Länder außerhalb der Europäischen Union übertragen. Die Datenübertragung in die USA wird auf die Standardvertragsklauseln der EU-Kommission gestützt. Details finden Sie hier:
https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 und
https://de-de.facebook.com/help/566994660333381.

Weitere Informationen hierzu finden Sie in der Datenschutzerklärung von Instagram: https://instagram.com/about/legal/privacy/.

Pinterest

Wir verfügen über ein Profil bei Pinterest und verwenden auf unserer Website PlugIns von Pinterest. Betreiber ist die Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Irland.

Wenn Sie eine Website aufrufen, auf der ein PlugIn von Pinterest integriert ist, stellt Ihr Browser eine direkte Verbindung zu den Servern von Pinterest her. Dabei werden Ihre IP-Adresse, die URL unserer Website, und technische Daten wie Art und Einstellungen Ihres Browsers, Datum und Zeitpunkt Ihres Websitebesuches und die Nutzung von Pinterest verarbeitet und gespeichert. Auf die Datenerhebung, -übermittlung und Nutzung durch Pinterest haben wir keinen Einfluss und können hierfür keine Verantwortung übernehmen.

Die Verwendung von Pinterest erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an einer möglichst umfangreichen Sichtbarkeit in den Sozialen Medien. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO; die Einwilligung ist jederzeit widerrufbar.

Details zu deren Umgang mit Ihren personenbezogenen Daten entnehmen Sie der Datenschutzerklärung von Pinterest:
https://policy.pinterest.com/de/privacy-policy.

XING

Wir verfügen über ein Profil bei XING und unsere Website nutzt mittels PlugIns die „Share-Funktion“ des XING-Netzwerkes. Anbieter ist die New Work SE, Dammtorstraße 30, 20354 Hamburg, Deutschland.

Durch das Anklicken des Share-Buttons wird eine direkte Verbindung zwischen Ihrem Browser und den Servern von XING hergestellt. Dabei erhält XING Ihre IP-Adresse und die Information, dass Sie unsere Website besucht haben. Wenn Sie selbst über ein XING-Profil verfügen, werden Sie auf Ihr Benutzerkonto weitergeleitet. Auf die Datenerhebung, -übermittlung und Nutzung durch XING haben wir keinen Einfluss und können hierfür keine Verantwortung übernehmen.

Die Verwendung von Xing erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an einer möglichst umfangreichen Sichtbarkeit in den Sozialen Medien. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO; die Einwilligung ist jederzeit widerrufbar.

Details zu deren Umgang mit Ihren personenbezogenen Daten entnehmen Sie der Datenschutzerklärung von XING:
https://privacy.xing.com/de/datenschutzerklaerung.

LinkedIn

Wir verfügen über ein Profil bei LinkedIn und unsere Website verwendet Plug-Ins des LinkedIn-Netzwerkes. Anbieter ist die LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland. LinkedIn verwendet Werbecookies.

Beim Anklicken der Share-Buttons wird eine direkte Verbindung zwischen Ihrem Browser und den Servern von LinkedIn hergestellt, wodurch LinkedIn in die Information erhält, dass Sie mit Ihrer IP-Adresse unsere Website aufgesucht haben. Ferner kann LinkedIn Ihrem Benutzerkonto den Besuch unserer Website zuordnen. Wenn Sie selbst über ein LinkedIn-Profil verfügen, werden Sie auf Ihr Benutzerkonto weitergeleitet. Auf die Datenerhebung, -übermittlung und Nutzung durch LinkedIn haben wir keinen Einfluss und können hierfür keine Verantwortung übernehmen.

Die Verwendung von LinkedIn erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an einer möglichst umfangreichen Sichtbarkeit in den Sozialen Medien. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO; die Einwilligung ist jederzeit widerrufbar.

Wenn Sie LinkedIn-Werbe-Cookies deaktivieren möchten, nutzen Sie bitte folgenden Link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Die Datenübertragung in die USA wird auf die Standardvertragsklauseln der EU-Kommission gestützt. Details finden Sie hier:
https://www.linkedin.com/legal/l/dpa und https://www.linkedin.com/legal/l/eu-sccs.

Details zu deren Umgang mit Ihren personenbezogenen Daten entnehmen Sie der Datenschutzerklärung von LinkedIn:
https://www.linkedin.com/legal/privacy-policy.

6. Analytics Tools and Advertising

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the user’s origin. This data may be compiled by Google into a profile that is associated with the respective user or their device.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about your use of this website is typically transmitted to a Google server in the USA and stored there.

The use of this analytics tool is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offering and its advertising. If appropriate consent has been requested (e.g., consent to store cookies), processing is based exclusively on Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP Anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Browser Plugin
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

More information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data Processing Agreement
We have entered into a data processing agreement with Google and fully implement the strict requirements of the Austrian data protection authorities when using Google Analytics.

Demographic Features in Google Analytics
This website uses the “demographic features” function of Google Analytics to display relevant advertisements to website visitors within the Google advertising network. This allows reports to be generated that include information about the age, gender, and interests of site visitors. This data comes from Google’s interest-based advertising as well as visitor data from third-party providers. This data cannot be attributed to a specific individual. You can disable this feature at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to Data Collection.”

Retention Period
User and event-level data stored by Google linked to cookies, user identifiers (e.g., User ID), or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) are anonymized or deleted after 14 months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de

7. Newsletter

Newsletter Data

If you would like to receive the newsletter offered on this website, we need your email address and information that allows us to verify that you are the owner of the provided email address and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. For managing the newsletter, we use newsletter service providers, which are described below.

CleverReach

This website uses CleverReach for sending newsletters. The provider is CleverReach GmbH Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter referred to as “CleverReach”). CleverReach is a service that organizes and analyzes newsletter dispatch. The data you enter for the purpose of subscribing to the newsletter (e.g., email address) is stored on CleverReach servers in Germany or Ireland.

Our newsletters sent via CleverReach allow us to analyze the behavior of the newsletter recipients. This includes analyzing how many recipients have opened the newsletter and how often each link in the newsletter has been clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g., purchasing a product on this website) has taken place after clicking the link in the newsletter. For more information on data analysis by CleverReach newsletters, visit: https://www.cleverreach.com/en/functions/reporting-and-tracking/.

Data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw this consent at any time by unsubscribing from the newsletter. The legality of the data processing carried out before the withdrawal remains unaffected by the withdrawal.

If you do not want analysis by CleverReach, you must unsubscribe from the newsletter. We provide a corresponding link in each newsletter message.

The data you provided for receiving the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider, and will be deleted from the newsletter distribution list after unsubscribing. Data stored for other purposes will remain unaffected.

After unsubscribing from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider to prevent future mailings. Data in the blacklist is used only for this purpose and is not merged with other data. This serves both your interest and our interest in complying with legal requirements for sending newsletters (legitimate interest according to Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is not time-limited. You can object to the storage if your interests outweigh our legitimate interest.

For more details, please refer to CleverReach’s privacy policy at: https://www.cleverreach.com/en/privacy/.

Data Processing Agreement
We have entered into a Data Processing Agreement (DPA) with the above-mentioned provider. This is a contract required by data protection law, ensuring that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

8. Plugins and Tools

YouTube with Extended Privacy

This website embeds YouTube videos. The operator of the site is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended privacy mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. However, data sharing with YouTube partners is not necessarily excluded by the extended privacy mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.

Once you start a YouTube video on this website, a connection to YouTube’s servers is established. YouTube’s server is notified of which of our pages you have visited. If you are logged into your YouTube account, YouTube can directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

Additionally, YouTube may store various cookies on your device or use similar recognition technologies (e.g., device fingerprinting) after starting a video. This allows YouTube to gather information about visitors to this website. This information is used, among other things, to compile video statistics, improve user-friendliness, and prevent fraud. Additional data processing operations may be triggered after starting a YouTube video, which we have no control over.

The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest under Art. 6 para. 1 lit. f GDPR. If consent has been requested, the processing is solely based on Art. 6 para. 1 lit. a GDPR; consent can be withdrawn at any time.

For more information about YouTube’s data protection, see their privacy policy at: https://policies.google.com/privacy?hl=en.

Google Web Fonts (Local Hosting)

This site uses so-called web fonts provided by Google for uniform font representation. The Google Fonts are installed locally. No connection to Google’s servers is made.

For more information on Google Web Fonts, see: https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Google Maps

This site uses the Google Maps service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence over this data transmission. When Google Maps is activated, Google may use Google Web Fonts for uniform font representation. When Google Maps is accessed, your browser loads the required web fonts into its browser cache to correctly display texts and fonts.

The use of Google Maps is in the interest of an appealing presentation of our online offers and the easy findability of the locations we specify on the website. This constitutes a legitimate interest under Art. 6 para. 1 lit. f GDPR. If consent has been requested, the processing is solely based on Art. 6 para. 1 lit. a GDPR; consent can be withdrawn at any time.

Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ und https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more information on handling user data, see Google’s privacy policy: https://policies.google.com/privacy?hl=en.

CleanTalk

This website uses the services of the CleanTalk spam filter provided by CLEANTALK (www.cleantalk.org) (hereinafter referred to as “CleanTalk”). The provider is CleanTalk Inc, located at 711 S Carson St Ste 4, Carson City, NV, 89701-5292, United States.

CleanTalk is a Software as a Service (SaaS) used for spam protection. The service is loaded externally via a script. CleanTalk analyzes user behavior and evaluates the parameters of a completed form. The user’s IP address is also checked against a list of bot IP addresses. All transmitted data is used to protect against spam requests from bots. Legal basis: Consent, Art. 6 para. 1 lit. a GDPR. Processing location: Servers in the EU.

By using this website, your IP address may be stored and processed for security reasons. Your IP address may be stored in server log files, CMS log files, and CleanTalk Anti-Spam Security log files. Our website uses third-party services such as CleanTalk Anti-Spam Security. These may store and process your IP address. CleanTalk may use cookies to manage access to the website through the CleanTalk SpamFireWall function to secure and protect the website from spam.

Information on CleanTalk’s privacy policy can be found at: https://cleantalk.org/publicoffer#privacy

9. eCommerce and Payment Providers

Processing of Data (Customer and Contract Data)

We collect, process, and use personal data only as far as it is necessary for establishing, defining the content of, or changing the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data to fulfill a contract or pre-contractual measures. Personal data regarding the use of this website (usage data) is collected, processed, and used only to the extent necessary to enable the user to use the service or to bill them.

Customer data collected will be deleted after the completion of the order or termination of the business relationship. Legal retention periods remain unaffected.

10. Handling of Applicant Data

We offer you the opportunity to apply for a position with us (e.g., via email, postal mail, or online application form). Below, we inform you about the scope, purpose, and use of your personal data collected during the application process. We assure you that the collection, processing, and use of your data is done in accordance with applicable data protection laws and all other legal requirements, and that your data is treated with strict confidentiality.

Scope and Purpose of Data Collection

When you send us an application, we process your associated personal data (e.g., contact and communication details, application documents, notes from interviews, etc.) to the extent necessary to make a decision regarding the establishment of an employment relationship. The legal basis for this is Art. 6 para. 1 lit. b GDPR (general contract initiation), Art. 6 para. 1 lit. f GDPR (legitimate interests on our part), and – if you have given consent – Art. 6 para. 1 lit. a GDPR. Consent can be withdrawn at any time. Your personal data will be shared within our company only with those involved in the application process and decision-making regarding your employment. There is no transfer of your data to a third country.

Sensitive data within the meaning of Art. 9 GDPR, such as information about your health or religious beliefs, will be deleted by us unless you have explicitly consented to their processing, as we would only have a legal basis for processing such data if you are hired.

Data Retention Period

If your application is successful, the data you submitted will be stored in our data processing systems based on Art. 6 para. 1 lit. b GDPR for the purpose of executing the employment relationship.

If we cannot offer you a position, if you reject a job offer, or if you withdraw your application, we reserve the right to retain the data you submitted based on our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 7 months from the end of the application process (rejection or withdrawal of the application). After this period, the data will be deleted, and physical application documents will be shredded. The retention serves primarily for documentation purposes in case of a legal dispute. If it is apparent that the data will be needed beyond the 7-month period (e.g., due to an impending or ongoing legal dispute), deletion will only occur once the purpose for further retention has ceased.

Longer retention can only occur if you have given explicit consent (Art. 6 para. 1 lit. a GDPR) or if legal retention obligations prevent deletion.

11. Changes to the Privacy Policy

Due to changes in laws or modifications to our internal processes that may necessitate adjustments to these privacy policies, which we reserve the right to do, we kindly ask you to regularly review this privacy policy for any changes.

Cookie Consent with Real Cookie Banner