1. Processing of your personal data
We process the following personal data provided by you: name, address, email address, telephone number.
2. Controller responsible for processing of personal data
Migrant Expert e.U.
Zelinkagasse 6/6, 1010 Vienna
Phone: +43 660 20166 28; +43 1 53 22 779
3. Purposes for which the personal data shall be processed; legal basis
If you are our (potential) customer, we process your personal data in the context of preparing a contract or because this is necessary to fulfil obligations under the contract entered into with you. Processing is carried out pursuant to Art 6 (1) (b) of the General Data Protection Regulation (hereinafter referred to as “GDPR”). Any further processing of your personal data – such as the processing of your contact details for the purpose of sending you electronic mail, conventional mail or contacting you by telephone – will only be carried out with your consent in accordance with Article 6 (1) (a) of GDPR.
4. Recipients of personal data
Your personal data will be transmitted to the following recipients:
- to the organisation and administration of Tetyana Stangl
- to the IT service providers used by us
- ato our advertising and marketing service providers
- to our tax advisor
- to insurance companies in case of an insurance claim
- to other recipients specified by the client
- to corporate and statutory interest representation bodies
- if applicable, to debt collection agencies
5. Duration for which the personal data are stored
If an order is placed, personal data will be stored for a period of 7 years, which corresponds to our legal obligation to store invoices. This period shall be extended automatically by another 7 years in the event of renewed enquiries (including e-mail correspondence) or orders.
If no order is placed and no contract is entered into, personal data will be stored for a period of 2 years from the last contact, unless consent to store personal data is revoked earlier.
6. Provision of personal data
You are not obliged to provide your personal data. However, providing the following personal data, namely full name, address, e-mail address, mobile number/telephone number and date of birth, is necessary for entering into a contract with the controller(s).
7. Data protection on our website
We wrote this privacy statement to explain to you, pursuant to the requirements of the EU General Data Protection Regulation, what information we collect, how we use data and what choices you have as a visitor to this website. Unfortunately, it is in the nature of things that such explanations sound rather technical. However, we have tried to describe the most important matters as simply and clearly as possible.
Automatic data storage
When you visit websites, certain information is automatically created and stored, including on this website. When you visit our website, as you are doing now, our web server (the computer on which this website is stored) automatically records data such as the IP address of your device, the addresses of sub-pages you have visited, details of your browser (e.g,. Chrome, Firefox, Edge…) and the date of your visit. We do not use this data and generally do not pass it on, but we cannot rule out the possibility that this data may be viewed through unlawful conduct.
Storage of personal data
Personal data you transmit to us electronically on this website, such as first name, surname, e-mail address, telephone number or other personal details provided in the context of submitting a form, will only be used by us, along with time and IP address of the visit, for the purpose stated in each case, stored securely and not passed on to third parties. We will therefore only use your personal data to communicate with those visitors who expressly request such contact and to process the services and products offered on this website. We shall not disclose your personal data without your consent, but we cannot rule out the possibility that this data may be accessed by third parties through unlawful conduct.
TLS encryption with https
We use https to transmit data securely over the internet. By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the internet, we can ensure the protection of confidential data. You can recognise the use of this data transmission protection by the small lock symbol at the top left of your browser and the use of the https scheme as part of our internet address.
When you visit our website, the web server saves each access in a log file. The following data is recorded in extracts:
IP address of the requesting computer
Date and time of access by the requesting computer
Name and URL of the retrieved file
Amount of data transferred
Message as to whether the retrieval was successful
Identification data of the browser and operating system used
Website from which access was made.
This data is processed for the purpose of enabling use of the website (by establishing a connection), system security, technical administration of the network infrastructure and optimisation of our online offering. The IP address is evaluated only in emergencies – e.g., to investigate hacker attacks.
If you contact us using the form on the website or by e-mail, data you provide will be stored by us for 12 months for the purpose of processing your enquiry and in case of follow-up questions. We will not pass this data on without your consent. Newsletter When you sign up for our newsletter, you submit the personal data mentioned above and give us the right to contact you by e-mail. We use data stored in the context of your registration for the newsletter exclusively for our newsletter and do not pass it on to third parties. If you unsubscribe from the newsletter – you will find the link for this at the bottom of every newsletter – we will delete all data obtained through your registration for the newsletter.
Our website uses HTTP cookies to store user-specific data. A cookie is a short data packet that is exchanged between the web browser and the web server but it is completely meaningless to the latter and only acquires meaning for the web application, e.g., an online shop, for example to convey the contents of a virtual shopping basket.
Some cookies remain stored on your terminal device until you delete them. They allow us to recognise your browser on your next visit. If you do not wish this, you can set your browser so that it informs you about setting cookies and you only allow this in individual cases.
Google Analytics Data processing addendum
We have entered into a direct customer agreement with Google for the use of Google Analytics by accepting the “Data Processing Addendum” in Google Analytics. You can find out more about the data processing addendum for Google Analytics here: https://support.google.com/analytics/answer/3379636?hl=de&utm_id=ad.
Google Analytics IP anonymisation
We have implemented Google Analytics IP address anonymisation on this website. This function was developed by Google to enable this website to comply with applicable data protection regulations and recommendations of local data protection authorities if they prohibit storage of the full IP address. Anonymisation or masking of the IP takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before any storage or processing of the data takes place. More information on IP anonymisation can be found at https://support.google.com/analytics/answer/2763052?hl=de.
Google Analytics reports on demographic characteristics and interests
We have enabled promotional reporting features in Google Analytics. The demographic and interest reports contain information on age, gender and interests. This allows us to get a better picture of our users without being able to attribute this data to individual people. You can find out more about the advertising functions at https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad. You can deactivate the use of the activities and information of your Google account under “Advertising settings” at https://adssettings.google.com/authenticated via a checkbox.
Google Analytics deactivation link
If you click on the following deactivation link, you can prevent Google from recording further visits to this website. Please note: Deleting cookies, using the incognito/private mode of your browser, or using a different browser will result in data being collected again.
We use Google Fonts from Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. Google Fonts are used without authentication and no cookies are sent to the Google Fonts API. If you have an account with Google, none of your Google account data will be transmitted to Google during the use of Google Fonts. Google only records the use of CSS and the fonts used and stores this data securely. You can find out more about these and other issues at https://developers.google.com/fonts/faq. To find out what data Google collects and what it is used for, please visit https://www.google.com/intl/de/policies/privacy/.
We use Google Maps from the company Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. By using the functions of this map, data is transmitted to Google. You can find out what data is collected by Google and what it is used for at https://www.google.com/intl/de/policies/privacy/.
On this website, we use functions of Facebook, a social media network of FIrma Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. You can find out which functions (social plug-ins) Facebook provides at https://developers.facebook.com/docs/plugins/.
On this site, we use the video service YouTube, of the company YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. By calling up pages of our website that have integrated YouTube videos, data is transmitted to YouTube, stored and evaluated. If you have a YouTube account and are logged in, this data will be assigned to your personal account and the data stored in it. You can find out what data is collected by Google and what it is used for at https://www.google.com/intl/de/policies/privacy/.
On our website, we use functions of Google+, the social network of Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). If you wish to make full use of the functions offered, you will need a Google account. Even when using the functions (Google +1 buttons, Google+ badge, Follow button, Google+ Share button and link, Sign-In button, Hangout button) without a Google account, information is already transmitted to Google. If you are logged in with your Google account while using the above functions, your data will be published worldwide on https://plus.google.com/settings/ depending on the setting and collected and evaluated by Google. You can find out what data is collected by Google and what it is used for at https://www.google.com/intl/de/policies/privacy/.
We use functions of the social media network Instagram of the company Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA on our website. With the functions for embedding Instagram content (embed function), we can display images and videos. By calling up pages that use such functions, data (IP address, browser data, date and time, cookies) are transmitted to Instagram, stored, and evaluated.
We use functions of the social media network LinkedIn of the company LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA on our website. When you access pages that use such functions, data (IP address, browser data, date and time, cookies) is transmitted to Pinterest, stored, and evaluated.
On our website, we use functions of the social media network XING of the company XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. When you access pages that use such functions, data (IP address, browser data, date and time, cookies) is transmitted to XING, stored, and evaluated.
Deactivating personalised advertising
If you have a Google account, you can deactivate personalised advertising on the https://adssettings.google.com/authenticated page. Even if you disable personalised ads, you may still see ads based on factors such as your approximate location derived from your IP address, browser type, and recent search terms used. You can find out what data Google collects and what it is used for at https://www.google.com/intl/de/policies/privacy/.
We use the Facebook Pixel from Facebook, a social media network of the company Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland on this website. The code implemented on this page can evaluate the behaviour of visitors who have come to this website from a Facebook advertisement. This can be used to improve Facebook ads and this data is collected and stored by Facebook. The collected data is not visible to us but can only be used in the context of ad placements. Cookies are also set using the Facebook Pixel code. By using the Facebook pixel, a visit to this website is communicated to Facebook so that visitors can see suitable ads on Facebook.
If you have a Facebook account and are logged in, your visit to this website will be associated with your Facebook user account. You can find out how the Facebook pixel is used for advertising campaigns at https://www.facebook.com/business/learn/facebook-ads-pixel. You can change your preferences for Facebook ads at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screenverändern if you are logged into Facebook. At http://www.youronlinechoices.com/de/praferenzmanagement/ you can manage your preferences regarding usage-based online advertising. There you can disable or enable many providers at once or set the preferences for individual providers. More information on Facebook’s data policy can be found at https://www.facebook.com/policy.php.
We use Google AdSense on this website, the advertising programme of Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Data on the advertisements displayed and your IP address may be transmitted to servers in the USA and analysed there. In AdSense, cookies are intended to enable better advertising, and cookies do not contain personalised data. Google AdSense sends a cookie to the browser after every impression, every click and every other activity that leads to a call to the Google Adsense servers. If the browser accepts the cookie, it will be stored there.
Third-party ad serving companies may place and read cookies on your browser as part of AdSense, or use web beacons to store data they obtain through ad serving on the site. Web beacons are small graphics that enable log file recording and log file analysis that are used for statistical analysis for online marketing.
We participate in the Amazon affiliate programme which enables the placement of Amazon advertisements and affiliate links on websites. Through this placement of Amazon advertisements, we receive a refund of advertising costs.
The data controller within the meaning of the data protection laws is Amazon Europe Core S.à.r.l., Amazon EU S.à.r.l, Amazon Services Europe S.à.r.l. and Amazon Media EU S.à.r.l., all four located at 5, Rue Plaetis, L-2338 Luxembourg and Amazon Instant Video Germany GmbH, Domagkstr. 28, 80807 Munich. Amazon Deutschland Services GmbH, Marcel-Breuer-Str. 12, 80807 Munich, Germany, acts as data processor on their behalf.
We use features of ShareThis, a social bookmarking and sharing tool from ShareThis, 4005 Miranda Ave, Suite 100, Palo Alto, 94304 California, USA on this website. By using the social plugins from ShareThis, visitors are able to share content from this website on various social networks such as Facebook, Twitter, Google+, etc.
If you want to know more about how ShareThis uses your data, you can find all the information at https://www.sharethis.com/terms/.
8 Your rights
You have the right to receive information regarding your personal data, rectification, deletion, restriction of processing, data portability, their withdrawal and complaint in case of violation of the data processing law.
If you believe that the processing of your data violates data protection law or your data protection requirements have been violated in any other way, you can file a complaint with a supervisory authority. In Austria, the authority for this kind of complaint is the Data Protection Authority: https://www.dsb.gv.at/.
Right of access
You have the right to request information about processing of your personal data from the controller. You have the right to obtain the following information:
- purposes of processing
- categories of personal data processed
- recipients or categories of recipients to whom personal data are disclosed
- categories of processed personal data
- recipients or categories of recipients to whom your data has been disclosed or is still being disclosed
- if possible, the period for which the personal data will be stored, or, – if this is not possible, the criteria for determining the duration of storage of personal data
- existence of a right to correction or deletion of personal data concerning you, or to restriction of processing by the controller, or existence of a right to object to such processing
- existence of a right to lodge a complaint with a supervisory authority
- existence of a right of appeal to a supervisory authority
If you exercise your right of access, the (s) will provide you with a copy of the personal data that is the subject of processing. For any further copies you request, the controller may charge a reasonable fee based on administrative costs. If you submit your application electronically, the information will be available to you in a commonly used electronic format you have approved as being secure, unless otherwise agreed.
Right to rectification
You have the right to obtain without delay correction of inaccurate personal data concerning you from the controller. Taking into account the purposes of the processing, you have the right to request completion of incomplete personal data, including by means of a supplementary declaration.
Right to deletion/right to be forgotten
You have the right to request the controller to delete personal data concerning you without delay, and the controller is obliged to erase personal data without delay, if one of the following reasons applies:
- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- You object (Art 21(1) or (2) GDPR) to the processing and there are no overriding legitimate grounds for processing in the event of an objection pursuant to Art 21(1) GDPR.
- The personal data have been processed unlawfully.
Deletion of personal data is necessary to comply with a legal obligation under European Union or Member State law to which the controller is subject. If the controller has made the personal data public and is obligated to delete it, the controller shall take reasonable steps to also inform other data controllers who process the personal data you have requested to be deleted.
Right to restriction of processing
You have the right to obtain from the controller a restriction of processing if one of the following conditions is met:
- You contest the accuracy of the personal data for a period that enables the controller to verify the accuracy of the personal data.
- Processing is unlawful, you object to the erasure of the personal data and instead request a restriction of use of the personal data.
- The controller no longer needs the personal data for purposes of processing, but you need it to assert, exercise or defend legal claims.
- You have lodged an objection pursuant to Art 21 (1) GDPR as long as it has not yet been determined whether the controller(s) legitimate reasons outweigh yours. If you have obtained a restriction of processing, you will be informed by the controller before the restriction is lifted.
Obligation to notify in connection with correction or deletion of personal data or restriction of processing
The controller shall notify all recipients to whom personal data have been disclosed of any correction or deletion of personal data or restriction of processing, unless this proves impossible or involves disproportionate effort. The controller shall inform you of these recipients if you so request.
Right to data portability
You have the right to receive the personal data concerning you that you provided to the controller(s) in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance from the controller(s) to whompersonal data was provided, provided that processing is based on a contract (Art 6(1)(b) GDPR) and that processing is carried out with the help of automated procedures.
When exercising your right to data portability, you have the right to have personal data transferred directly from one controller to anotherprovided that this is technically feasible. The exercise of your right to data portability does not affect your right to deletion.
Right to object
You have the right to object at any time, on grounds related to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art 6(1)(e) or (f) GDPR. The controller shall no longer process the personal data unless it can demonstrate compelling legitimate grounds for such processing that override your interests, rights and freedoms, or that the processing serves the purpose of asserting, exercising or defending legal claims.
If personal data are processed for the purpose of direct marketing, you have the right to object at any time to processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to processing for direct marketing purposes, the personal data may no longer be processed for these purposes.
Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in your Member State of residence, place of work or place of the alleged infringement, if you believe that the processing of personal data relating to you infringes upon GDPR or Section 1 or Article 2.1 main Section of Austrian DSG 2018. In Austria, the competent authority is the Data Protection Authority.
Data Protection Authority in Austria
Wickenburggasse 8 A-1080 Vienna
Telephone: +43 1 52 152-0
Wickenburggasse 8 A-1080 Wien Telefon: +43 1 52 152-0 Email: firstname.lastname@example.org
Migrant Expert e.U.
+43 660 20 166 28
+43 1 53 22 779