This statement declares how we process your data. This statement is addressed to clients, who used our services in the past, but also to future clients, our partners and their employees.
1. Internal data use
1.1 Purpose of the data use
We are processing your data for the following purposes:
In case we collect data directly from you, the supply of the data is voluntary. In case you do not provide us with data, we can not fulfil certain services.
2.2 Legal background of the data processing
If you are a potential client, we are only doing direct marketing via email or post, with your agreement on the basis of the law Art. 6 Abs. 1 of the “Datenschutzgrundverordnung” (DSGVO). If you are a client, we are processing your data, because it is necessary to fulfil our contract with you. In any way we are processing your data in your interest and on behalf of the reasons named in section 1.
3.3 Exchange of data
If it is necessary to transfer your data in order to execute services named in 1, we are sending your date to following recipients:
1.4 Length of back up
Usually we save your data till the end of our business relation. For marketing purposes we save your data as long you do not disagree with the storage of your data, which was initially collected by us with your acceptance.
1.5 Your rights
You are allowed to: check (i) if and which of your data is stored, (ii) to claim correction, addition or cancelation, if they are wrong or not correctly processed, (iii) to claim to stop the processing of your data or (iv) to dissent with your initial agreement with us that we are allowed to process your data, whereby the dissent does not affect the data processing done before your dissent, (v) to claim the possibility to transfer data, and (vi) if you are our client being able to know identity of third parties who work with your data and (vii) to file a complaint within data security authorities.
2. Third party data use
2.1. Social media sites
We maintain publicly accessible profiles on social networks. The individual social networks used by us can be found below.
Social networks such as Facebook, Twitter etc. can generally comprehensively analyse your user behaviour when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). By visiting our social media presences, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. Provided you have an account with the respective social network, the interest-based advertising may be displayed on all devices on which you are or were logged in.
Please also note that we are not able to track all processing procedures on the social media portals. Depending on the provider, further processing procedures may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.
2.1.1 Legal basis
2.1.2 Person responsible and assertion of rights
Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing procedures of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
2.1.3 Storage period
The data collected directly by us via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.
We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
2.1.4. Social networks in detail
2.1.4.1 Facebook
We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.
We have entered into a joint processing agreement (Controller Addendum) with Facebook. This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your advertising settings yourself in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For details, see Facebook's privacy policy: https://www.facebook.com/about/privacy/.
2.1.4.2 Instagram
We have a profile on Instagram. The provider is Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum , https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
For details on their handling of your personal data, please refer to Instagram's privacy policy: https://help.instagram.com/519522125107875.
2.2 Data processing by Google
Laws protecting user privacy such as the European Economic Area’s General Data Protection Regulation and other privacy laws that establish various rights for applicable US-state residents impact content publishers, application developers, website visitors, and application users. See also the Google privacy policy and Google’s site for customers and partners. Currently such regulations apply to specific geographic regions, but publishers and application developers often implement controls that affect the experience of users in all regions.
2.2.1 Data collection
Google customers use tags on web pages and an SDK for mobile apps to enable Google measurement products. The measurement data collected helps customers understand their users’ needs and, optionally, personalize the user experience and offer relevant advertising (see Advertising personalization).
Google tags and the SDK use cookies and app instance IDs, respectively, to measure user interaction. While these identifiers provide information about user behavior, Google prohibits customers from sending Personally Identifiable Information to Google Analytics. Even so, use of cookies and app IDs falls under the privacy laws mentioned previously. Google customers need to inform users about the information being stored and give them the opportunity to grant or deny their consent.
2.2.2 Links for detailed data regulations
In following links our costumers will find these topics:
3. Our contact
If you have questions or want to make a formal complaint, do not hesitate to contact us:
we gmbh / we consult gmbh
Flugplatzstraße 52
5700 Zell am See