Data protection declaration

We handle your data exclusively in compliance with the applicable legal provisions (e.g., GDPR). As a matter of principle, our company has no interest in processing your data unless it is necessary for contacting you, processing your order or performing technical maintenance on our website. We only store your data if we are obliged to do so in accordance with statutory record-keeping requirements. Here we explain the most important aspects of the data processing we carry out.

If you have any further questions, please contact our data protection officer:

Contact details of our data protection officer:

Judith Platter
Skodagasse 23/20
1080 Vienna
Austria

 office@saccessible.eu

If you request information in a way other than writing, please understand that we will need proof that you are the person you claim to be.

 

Scope of application

The present data protection declaration applies to all personal data processed by us in our company as well as all personal data processed by companies mandated by us (processors). Personal data is information as defined by Art. 4(1) GDPR, such as a person’s name, email address and postal address. We need to process personal data in order to be able to offer and issue invoices for our services and products, both online and offline. The scope of application of the present data protection declaration covers:

  • all online presences (websites, online shops) that we operate
  • social media presences
  • email communication
  • mobile apps for smartphones and other devices

We only process your data if at least one of the following conditions is met:

  • Consent (Article 6(1)(a) GDPR): You have given us your consent to the processing of your data for a specific purpose, such as storing the data that you have entered in the contact form.
  • Contract (Article 6(1)(b) GDPR): We process your data in order to perform a contract or fulfil obligations prior to entering into a contract with you. For example, if we enter into a purchase agreement with you, we will need personal data in advance.
  • Legal obligation (Article 6(1)(c) GDPR): We process your data if this is necessary to comply with a legal obligation. We are, for example, legally required to retain invoices for accounting purposes. Invoices usually contain personal data.
  • Legitimate interests (Article 6(1)(f) GDPR): We reserve the right to process personal data for the purposes of legitimate interests which do not restrict your fundamental rights. For example, we need to process certain data in order to operate our website securely and economically. This kind of processing thus constitutes a legitimate interest.

 

Processing of special categories of personal data (“sensitive data”)

Please do not reveal any sensitive data to us; no such data are in any way relevant to us. If you unintentionally reveal sensitive data to us, for example by email or via the contact form, we will not store or process such data under any circumstances.

The following categories of personal data are defined as “sensitive data” pursuant to Art. 9(1) GDPR:

  • data revealing ethnic origin
  • data revealing political opinions
  • data revealing religious or philosophical beliefs
  • data revealing trade union membership
  • genetic data
  • biometric data for the purpose of uniquely identifying a natural person (fingerprint, face, etc.)
  • data concerning health
  • data on a person’s sex life or sexual orientation

Web hosting

Cookies

Some of our web applications and websites use so-called cookies. Cookies are small text files that your browser will store on your device. They do not cause any damage. We use cookies to make our website user-friendly. Some cookies will remain stored on your device until you delete them. They enable us to recognise your browser the next time you visit our website. If you do not want such cookies to be stored, you can choose browser settings so that your browser will notify you when cookies are set and you can accept them individually. If you disable cookies, this may limit the functions of our website or services may become unusable.

Contact form

To access the contact form, Google’s ReCaptcha must be actively loaded. In the next step, you have to actively give your consent for your IP address to be transmitted to Google (this is done for technical reasons). If the process is cancelled before you have given your consent, no data will be stored or transmitted.

If you send us requests via the contact form, we will store the details that you have entered in the contact form (including personal data) for the purpose of processing your request and any follow-up questions. You will have to provide a name and an email address so that we can contact you. We will not disclose these data without your consent under any circumstances. The legal basis for processing your data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR and, where applicable, Art. 6(1)(b) GDPR, provided that your request is aimed at concluding a contract. We will delete your data after having processed your request, provided that there are no statutory record-keeping requirements that oblige us to store it. If Art. 6(1)(f) GDPR applies, you can object to the processing of your personal data any time.

Server log files

When you visit our website, it is technically necessary for data to be transmitted from your Internet browser to our web server. The following data are stored during an active connection to establish communication between your Internet browser and our web server:

  • date and time of the request
  • name of the requested file
  • page from which the file was requested
  • access status
  • web browser and operating system used
  • (complete) IP address of the requesting computer
  • amount of data transferred

We collect the listed data in order to ensure a smooth connection to the website and a technically error-free provision of our services. The processing of these data is absolutely necessary in order to make the website available to you. We use the log files to evaluate system security and stability, as well as for administrative purposes. The legal basis for processing your data is our legitimate interest in ensuring the protection and functionality of our website in accordance with Art. 6(1)(f) GDPR.

For reasons of technical security, in particular to defend against attempts to attack our web server, we store these data for a short period of time. After no more than 7 days, the data are anonymised at the domain level by shortening the IP address, so that it is no longer possible to establish a connection to individual users. The anonymised data may then be processed for statistical purposes. These data are not stored together with other personal data of the user, compared with other data sets or disclosed to third parties at any time.

​

Your rights

You have the right to obtain access to and rectification or erasure of data, to restriction of processing, data portability, withdrawal of your consent and objection to processing.

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. The competent supervisory authority in Austria is the Austrian Data Protection Authority. You can find the contact details at https://www.dsb.gv.at/.

​

Below you will find information on the rights of data subjects granted by the applicable data protection law vis-à-vis the controller in relation to the processing of personal data:

  • Pursuant to Art. 15 GDPR, you have the right to access the personal data that we process. In particular, you can obtain information about the purposes of the processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the envisaged storage period, the existence of a right to request rectification or erasure of personal data or restriction of processing of personal data or to object to such processing, the existence of a right to lodge a complaint, the source of your data if not collected by us and the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details.
  • Pursuant to Art. 16 GDPR, you have the right to obtain the rectification of inaccurate personal data or the completion of incomplete personal data without undue delay.
  • Pursuant to Art. 17 GDPR, you have the right to obtain the erasure of personal data without undue delay, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
  • Pursuant to Art. 18 GDPR, you have the right to obtain restriction of processing your personal data, if you contest the accuracy of the personal data, the processing is unlawful and you oppose the erasure of the personal data and we no longer need the personal data, but they are required for the establishment, exercise or defence of your legal claims or if you have objected to the processing of your data as provided for in Art. 21 GDPR.
  • Pursuant to Art. 20 GDPR, you have the right to receive the personal data that you have provided to us, in a structured, commonly used and machine-readable format and to request the transmission of these data to another controller.
  • Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. It is usually possible to lodge complaints with the supervisory authority of the Austrian province in which our office is located, as indicated above, or, if applicable, the supervisory authority of your usual place of residence or work.
  • Pursuant to Art. 7(3) GDPR, you have the right to withdraw your consent: You have the right to withdraw your consent to the processing of data at any time with future effect. If you withdraw your consent, we will erase the affected data immediately, unless further processing can be based on legal provisions for processing personal data without consent. The withdrawal of consent does not affect the lawfulness of the processing based on the consent before its withdrawal.

Right of objection

If we process your personal data on the basis of legitimate interests as defined by Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that this is done for reasons arising from your specific situation. If the objection is directed against the processing of personal data for direct marketing purposes, you have a general right to object to the processing of your data without giving a specific situation.

If you wish to exercise your right to withdraw your consent or object to the processing of your data, please send an email to info@saccessible.at.

Storage period

We only store your personal data for as long as is absolutely necessary to provide our services and products. This means that we erase personal data as soon as the reason for processing such data no longer exists. If you wish to have your data erased or withdraw your consent to the processing of your data, the data will be deleted as quickly as possible, unless we are under a statutory obligation to retain them. This specifically concerns the statutory obligation to retain documents which obliges us to store invoices and the personal data required for issuing invoices invoice for 7 years.

If you have any questions, please do not hesitate to contact our data protection officer. We thank you for your attention and hope to work with you soon – now that you know that your data are safe with us.