Privacy Policy

We have written this privacy policy (version 05.08.2021-111794321) in order to explain to you, in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (data for short) we as the controller – and the processors commissioned by us (e.g. providers) – process, will process in the future and what legal options you have. The terms used are to be considered as gender-neutral. In short: We provide you with comprehensive information about any personal data we process about you.

Privacy policies usually sound very technical and use legal terminology. However, this privacy policy is intended to describe the most important things to you as simply and transparently as possible. So long as it aids transparency, technical terms are explained in a reader-friendly manner, links to further information are provided and graphics are used. We are thus informing in clear and simple language that we only process personal data in the context of our business activities if there is a legal basis for it. This is certainly not possible with brief, unclear and legal-technical statements, as is often standard on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative. Maybe you will also find some information that you have not been familiar with. If you still have questions, we would like to ask you to contact the responsible body named below or in the imprint, to follow the existing links and to look at further information on third-party sites. You can of course also find our contact details in the imprint.

Scope

This privacy policy applies to all personal data processed by our company and to all personal data processed by companies commissioned by us (processors). With the term personal data, we refer to information within the meaning of Article 4 No. 1 GDPR, such as the name, email address and postal address of a person. The processing of personal data ensures that we can offer and invoice our services and products, be it online or offline. The scope of this privacy policy includes:

  • all online presences (websites, online shops) that we operate
  • Social media presences and email communication
  • mobile apps for smartphones and other devices

In short: This privacy policy applies to all areas in which personal data is processed in a structured manner by the company via the channels mentioned. Should we enter into legal relations with you outside of these channels, we will inform you separately if necessary.

Legal bases

In the following privacy policy, we provide you with transparent information on the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which enable us to process personal data.
Whenever EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016. You can of course access the General Data Protection Regulation of the EU online at EUR-Lex, the gateway to EU law, at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex32016R0679. nachlesen.

We only process your data if at least one of the following conditions applies:

  1. Consent (Article 6 Paragraph 1 lit. a GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of data you entered into a contact form.
  2. Contract (Article 6 Paragraph 1 lit. b GDPR): We process your data in order to fulfill a contract or pre-contractual obligations with you. For example, if we conclude a sales contract with you, we need personal information in advance.
  3. Legal obligation (Article 6 Paragraph 1 lit. c GDPR): If we are subject to a legal obligation, we will process your data. For example, we are legally required to keep invoices for our bookkeeping. These usually contain personal data.
  4. Legitimate interests (Article 6 Paragraph 1 lit. f GDPR): In the case of legitimate interests that do not restrict your basic rights, we reserve the right to process personal data. For example, we have to process certain data in order to be able to operate our website securely and economically. Therefore, the processing is a legitimate interest.

Other conditions such as making recordings in the interest of the public, the exercise of official authority as well as the protection of vital interests do not usually occur with us. Should such a legal basis be relevant, it will be disclosed in the appropriate place.

In addition to the EU regulation, national laws also apply:

  • In Austria this is the Austrian Data Protection Act (Datenschutzgesetz), in short DSG.
  • In Germany this is the Federal Data Protection Act (Bundesdatenschutzgesetz), in short BDSG.

Should other regional or national laws apply, we will inform you about them in the following sections.

Contact details of the data protection controller

If you have any questions about data protection, you will find the contact details of the responsible person or controller below:
tecCONS GmbH
Percostraße 15, 1030 Wien
E-Mail: office@teccons.com
Telefon: +43(1) / 89 02515
Imprint: https://www.teccons.com/impressum

Storage Period

It is a general criterion for us to store personal data only for as long as is absolutely necessary for the provision of our services and products. This means that we delete personal data as soon as any reason for the data processing no longer exists. In some cases, we are legally obliged to keep certain data stored even after the original purpose no longer exists, such as for accounting purposes.

If you want your data to be deleted or if you want to revoke your consent to data processing, the data will be deleted as soon as possible, provided there is no obligation to continue its storage.

We will inform you below about the specific duration of the respective data processing, provided we have further information.

Rights in accordance with the General Data Protection Regulation

You are granted the following rights in accordance with the provisions of the GDPR (General Data Protection Regulation) and the Austrian Data Protection Act (DSG):

  • According to Article 15 of the GDPR, you have the right to know whether we process data about you. If this is the case, you have the right to receive a copy of the data and the following information:
    • the purpose for which we carry out the processing;
    • the categories, i.e. the types of data that are processed;
    • who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
    • how long the data will be stored;
    • the existence of the right to rectification, erasure or restriction of processing and the right to object to processing;
    • that you can complain to a supervisory authority (links to these authorities can be found below);
    • the origin of the data if we have not collected it from you;
    • whether profiling is carried out, i.e. whether data is automatically evaluated in order to arrive at a personal profile of you.
  • right to rectification (article 16 GDPR)
  • right to erasure (“right to be forgotten“) (article 17 GDPR)
  • right to restrict processing (article 18 GDPR)
  • righ to notification – notification obligation regarding rectification or erasure of personal data or restriction of processing (article 19 GDPR)
  • Right to object (article 21 GDPR)
    • -
    • -
    • -
  • right not to be subject to a decision based solely on automated processing – including profiling – (article 22 GDPR)

In short, you have rights - do not hesitate to contact the responsible party listed above with us!

If you think that the processing of your data violates the data protection law, or that your data protection rights have been infringed in any other way, you can lodge a complaint with your respective regulatory authority. For Austria this is the data protection authority, whose website you can access at https://www.data-protection-authority.gv.at/.

Austria data protection authority

Head: Mag. Dr. Andrea Jelinek
Address:
Barichgasse 40-42, 1030 Wien
Phone.:
+43 1 52 152-0
E-Mail-Adress
dsb@dsb.gv.at
Website:
https://www.dsb.gv.at/

Webhosting

Web hosting Overview

Affected parties: visitors to the website

Purpose: professional hosting of the website and security of operations
Processed data: IP address, time of website visit, browser used and other data. You can find more details on this below or at the respective web hosting provider.
Storage Period: dependent on the respective provider, but usually 2 weeks
Legal bases: Art. 6 para. 1 lit.f DSGVO (Legitimate Interests)

What is web hosting?

Every time you visit a website nowadays, certain information – including personal data – is automatically created and stored, including on this website. This data should be processed as sparingly as possible, and only with good reason. By website, we mean the entirety of all websites on your domain, i.e. everything from the homepage to the very last subpage (like this one here). By domain we mean example.uk or examplepage.com

When you want to view a website on a screen, you use a program called a web browser. You probably know the names of some web browsers: Google Chrome, Microsoft Edge, Mozilla Firefox, and Apple Safari.

The web browser has to connect to another computer which stores the website’s code: the web server. Operating a web server is complicated and time-consuming, which is why this is usually done by professional providers. They offer web hosting and thus ensure the reliable and flawless storage of website data.

Whenever the browser on your computer establishes a connection (desktop, laptop, smartphone) and whenever data is being transferred to and from the web server, personal data may be processed. After all, your computer stores data, and the web server also has to retain the data for a period of time in order to ensure it can operate properly.

Illustration:

Browser und Webserver

Why do we process personal data?

The purposes of data processing are:

  1. Professional hosting of the website and operational security
  2. To maintain the operational as well as IT security
  3. Anonymous evaluation of access patterns to improve our offer, and if necessary, for prosecution or the pursuit of claims.li>

Which data are processed?

Even while you are visiting our website, our web server, that is the computer on which this website is saved, usually automatically saves data such as

  • the full address (URL) of the accessed website (e. g. https://www.examplepage.uk/examplesubpage.html?tid=111794321)
  • browser and browser version (e.g. Chrome 87)
  • the operating system used (e.g. Windows 10)
  • the address (URL) of the previously visited page (referrer URL) (e. g. https://www.examplepage.uk/icamefromhere.html/)
  • the host name and the IP address of the device from the website is being accessed from (e.g. COMPUTERNAME and 194.23.43.121)
  • date and time
  • in so-called web server log files

How long is the data stored?

Generally, the data mentioned above are stored for two weeks and are then automatically deleted. We do not pass these data on to others, but we cannot rule out the possibility that this data may be viewed by the authorities in the event of illegal conduct.

In short: Your visit is logged by our provider (company that runs our website on special computers (servers)), but we do not pass on your data without your consent!

Legal basis

The lawfulness of processing personal data in the context of web hosting is justified in Art. 6 para. 1 lit. f GDPR (safeguarding of legitimate interests), as the use of professional hosting with a provider is necessary to present the company in a safe and user-friendly manner on the internet, as well as to have the ability to track any attacks and claims, if necessary.

Google Site Kit Privacy Policy

Google Site Kit Privacy Policy Overview

Affected parties: visitors to the website

Purpose: Evaluation of visitor information to optimise the website.
 Processed data: Access statistics that contain data such as access location, device data, access duration and time, navigation behaviour, click behaviour and IP addresses. More details can be found below and in Google Analytics’ privacy policy.
 Storage Period: depending on the properties used
 Legal bases: Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Google Site Kit?

We have integrated the WordPress plugin Google Site Kit of the American company Google Inc. to our website. For Europe, Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. With Google Site Kit, we can quickly and easily view statistics of various Google products such as Google Analytics directly on our WordPress dashboard. The in Google Site Kit integrated tools also collect your personal data. In this privacy policy we will explain why we use Google Site Kit, how long and where your data is stored, and which other privacy policies may be relevant to you in this context.

Google Site Kit is a plugin for the WordPress content management system. With this plugin we can view important website analysis statistics directly in our dashboard. These are statistics that are collected by other Google products – primarily by Google Analytics. In addition to Google Analytics, the services Google Search Console, Page Speed Insight, Google AdSense, Google Optimize and Google Tag Manager can also be linked to Google Site Kit.

Why do we use Google Site Kit on our website?

As a service provider, it is our job to offer you the best possible experience on our website. You should feel comfortable on our website. Moreover, you should be able to quickly and easily find exactly what you are looking for. Statistical evaluations help us to get to know you better and to adapt our offer to your wishes and interests. We use various Google tools for these evaluations. Site Kit makes our work a lot easier because we can view and analyse the statistics of Google products on its dashboard. Therefore, we must no longer register for using the respective tools. Site Kit always provides a good overview of the most important analysis data.

What data are stored by Google Site Kit?

If you have consented to the use of tracking tools in the cookie notice (also called script or banner), cookies will be set by Google products such as Google Analytics. Also, on about you, such as your user behaviour, will be sent to Google, where it is stored and processed. This also includes personal data such as your IP address.

You can find more detailed information on the individual services in the respective separate sections of this privacy policy. In our privacy policy on Google Analytics for example, you will be able to view information on the exact types of data that are collected. You will also learn how long Google Analytics stores, manages and processes data, what cookies can be used and how you can prevent data retention. We also have respective comprehensive privacy policies for other Google services such as Google Tag Manager or Google AdSense.

In the following, we will show you exemplary Google Analytics cookies that may be set in your browser if you have consented to Google’s data processing. Please note that this list contains only a selection of potential cookies:

Name: _ga Value:2.1326744211.152111794321-2 Purpose:Usually analytics.js uses the _ga cookie to store the user ID. Therefore, it can differentiate between website visitors. Expiry date: after 2 years

Name: _gid Value:2.1687193234.152111794321-7 Purpose: This cookie does also differentiate between website visitors. Expiry date: after 24 hours

Name: _gat_gtag_UA_ Value: 1 Purpose: This cookie is used to lower the request rate. Expiry date: after 1 minute

How long and where are the data stored?

Google stores the collected data on its own servers, which are distributed all around the world. Most servers are in the United States, so your data may likely be stored there. At https://www.google.com/about/datacenters/inside/locations/?hl=uk you can see exactly where the company provides servers.

Data that is collected by Google Analytics is stored for a standard period of 26 months. After this time, your user data will be deleted. This retention period applies to any data linked to cookies, user identification and advertising IDs.

How can I delete my data or prevent data retention?

You always reserve the right to either receive information about your data, or to have your data deleted, rectified, or reduced. You can also deactivate, delete, or manage cookies in your browser at any time. In the following we will show you the respective instructions to do this in the most common browsers:

Chrome: Clear, enable and manage cookies in Chrome

Safari: Manage cookies and website data in Safari

Firefox: Clear cookies and site data in Firefox

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete cookies in Microsoft Edge

Please note that when using this tool, your data may also be stored and processed outside the EU. Under current European data protection law most third countries (including the USA) are not considered secure for this matter. Data must not be transferred to, stored and processed in such insecure third countries, unless there are suitable guarantees (such as EU standard contractual clauses) between us and the non-European service provider.

Legal basis

The use of Google Site Kit requires your consent, which we obtained via our cookie popup. According to Art. 6 para. 1 lit. a GDPR (consent), this consent is the legal basis for processing personal data, such as when it is collected by web analytics tools.

In addition to consent, we have a legitimate interest in analysing the behaviour of website visitors, and thus technically and economically improving our offer. With the help of Google Site Kit, we can recognise website errors, identify attacks and improve profitability. The legal basis for this is Art. 6 para. 1 lit. f GDPR (legitimate interests). Nevertheless, we only use Google Site Kit if you have given us your consent.

Google also processes data in the USA, among other countries. We would like to note, that according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can be associated with various risks to the legality and security of data processing.

Google uses standard contractual clauses approved by the EU Commission (= Art. 46. para. 2 and 3 DSGVO) as the basis for data processing for recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there. These clauses oblige Google to comply with the EU level of data protection when processing relevant data outside the EU. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the clauses here, among other places: https://ec.europa.eu/germany/news/20210604-datentransfers-eu_de.

To find out more about data processing by Google, we recommend Google’s comprehensive privacy policy at https://policies.google.com/privacy?hl=en-GB

Google Maps Privacy Policy

Google Maps Privacy Policy Summary

 

Affected parties: visitors to the website

Purpose: Evaluation of visitor information to optimise the website.
Processed data: Access statistics that contain data such as access location, device data, access duration and time, navigation behaviour, click behaviour and IP addresses.
More details can be found below and in Google Analytics’ privacy policy.
Storage Period: depending on the properties used
Legal bases: Legal bases: Art. 6 para. 1 lit. a GDPR (consent), Art. 6 para. 1 lit. f GDPR (legitimate interests)

What is Google Maps?

On our website we use Google Maps of the company Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). With the use of Google Maps, we can show you locations in a better way and can therefore adjust our service to your needs. Due to the utilisation of Google Maps, data gets transferred to Google and is saved on Google’s servers. In the following, we want to explain in detail what Google Maps is, why we use this Google service, what data is stored and how you can prevent this.

Google Maps is an internet maps service of the company Google Inc. With Google Maps you can search for exact locations of cities, sights, accommodations or businesses online via a PC, a tablet or an app. If businesses are represented on Google My Business, the respective location as well as other information about the company are shown there. In order to show route directions, a location’s map sections can be integrated in a website through a HTML-code. Google Maps depicts the earth’s surface as either a road map or as air and satellite images. Due to the street view and high-quality satellite images, it is possible for exact representations to be made.

Why do we use Google Maps on our website?

The efforts we make on this page have the goal of giving you a useful and meaningful experience on our website. Through the integration of Google Maps, we can offer you essential information on various locations. Therefore, you can spot our office address with one glance. Furthermore, the route directions always show you the best and fastest way to us. You can retrieve the route directions for traveling either by car, by public transport, on foot or by bike. The integration of Google Maps is a part of our customer service.

What data is stored by Google Maps?

For Google Maps to offer its full services, the company must collect and store your data. This includes your entered search terms, your IP-address as well as your longitude and latitude coordinates. When you use the route-planner function, the entered start address is stored also. However, this data retention happens on Google Maps‘ websites. We can only inform you about it but cannot influence it in any way. Since we have included Google Maps on our website, Google will set at least one cookie (Name: NID) into your browser. This cookie saves data on your user behaviour. Google primarily uses this data to optimise ist own services and to provide you with individual, personalised advertisements.

The following cookies are set in your browser due to the integration of Google Maps:

Name: NID Value: 188=h26c1Ktha7fCQTx8rXgLyATyITJ111794321-5 Purpose: Google uses NID in order to adjust advertisments to your Google searches. With the cookie’s help Google “remembers“ your most frequently entered search queries or your previous interaction with ads. That way you always receive customised adertisments. The cookie contains a unique ID, wich Google uses to collect your personal settings for advertising porposes. Expiration date: after 6 months

Note: We cannot guarantee completeness of the information on saved data. This is, because especially concerning the use of cookies, changes can happen anytime. To identify the cookie NID, a test page was created, to which Google Maps was included.

How long and where are the data stored?

There are Google servers in data centres across the entire planet. However, most servers are in America. For this reason, your data is widely stored in the USA. Here you can read in detail about where the Google servers are located: https://www.google.com/about/datacenters/inside/locations/?hl=en

Google distributes data to various data carriers. This makes it possible to retrieve the data faster and to better protect it from possible attempted manipulations. Every server has emergency programs. Thus, should for example a problem with Google’s hardware occur or should a natural disaster impact the servers, any data will quite certainly stay protected.

Moreover, Google saves some data for a specified period. With some other data on the other hand, Google only offers the opportunity for deleting it manually. Furthermore, the company anonymises information (e.g. advertising data) in server logs, by deleting a part of the IP-address and cookie information after 9 to 18 months.

How can I delete my data or prevent data retention?

Due to the automatic delete function for location and activity data, which was introduced in 2019, information that is used for determining your location and web or app activity is saved for either 3 or 18 months, depending on your preferred decision, and is deleted thereafter. Furthermore, it is possible to delete this data manually from your browser history via your Google account anytime. If you want to prevent the determination of your location altogether, you must pause the category “Web and app activity” in your Google account. Click on “Data and personalisation” and then choose the option “Activity controls”. Here you can switch the activities on or off.

Moreover, in your browser you can deactivate, delete or manage individual cookies. This function can differ a little, depending on what browser you are using. The following instructions will show you how to manage cookies in your browser:

Chrome: Clear, enable and manage cookies in Chrome

Safari: Manage cookies and website data in Safari

Firefox: Clear cookies and site data in Firefox

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete cookies in Microsoft Edge

If you generally do not want to permit any cookies, you can set up your browser in a way that ensures you get informed whenever a cookie is about to be placed. That way you can decide to either permit or refuse every single cookie.

Please note that when using this tool, your data may also be stored and processed outside the EU. Under current European data protection law most third countries (including the USA) are not considered secure for this matter. Data must not be transferred to, stored and processed in such insecure third countries, unless there are suitable guarantees (such as EU standard contractual clauses) between us and the non-European service provider.

Legal basis

If you have consented to Google Maps being used, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. a DSGVO (consent), this consent constitutes the legal basis for the processing of personal data as it may occur during the collection by Google Maps.

On our side, there is also a legitimate interest to use Google Maps to optimize our online service. The corresponding legal basis for this is Art. 6 para. 1 lit. f DSGVO (Legitimate Interests). Nevertheless, we only use Google Maps if you have given your consent.

Google also processes data in the USA, among other countries. We would like to note, that according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This can be associated with various risks to the legality and security of data processing.

Google uses standard contractual clauses approved by the EU Commission (= Art. 46. para. 2 and 3 DSGVO) as the basis for data processing for recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or a data transfer there. These clauses oblige Google to comply with the EU level of data protection when processing relevant data outside the EU. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the clauses here, among other places: https://ec.europa.eu/germany/news/20210604-datentransfers-eu_de.

If you would like to learn more about Google's data processing, we recommend that you read the company's in-house privacy policy at https://policies.google.com/privacy?hl=de.

All texts are protected by copyright.

Source: Created with the privacy generator from AdSimple

Contact

Percostrasse 15 / 1. OG

1220 Wien

Phone: +43(1) / 89 02515

Fax: +43(1) / 89 02 515-10

office@teccons.com