Data protection / privacy policy

Vienna, November 2023

We would like to inform you about the processing of your personal data in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act (DSG), and the Telecommunications Act (TKG).
If you need more information, feel free to contact us at any time. Our contact details can be found at the end of this privacy policy.


1. Personal data
Personal data include all information about personal or factual circumstances, such as name, address, email address, telephone number, date of birth, age, gender, social security number, video recordings, photos, etc.
We collect, process and use your personal data only if necessary to fulfil a contract or due to a legal obligation, or if you voluntarily provide us with this data. We will obtain your consent before processing data for any other purpose. If our legitimate interest in data processing outweighs your interest in data protection, processing may occur even without your consent.
In particular, we will use the data provided to us for the purpose of contract fulfilment, contract initiation and compliance with legal obligations.
If there are any changes to your personal data, please inform us accordingly.
Please note that the provision of personal data may be legally required (e.g. tax regulations) or may result from contractual regulations (e.g. information about the contractual partner). Failure to provide personal data may result in the inability to conclude a contract.


2. Your rights
You have the right to information about your stored personal data, as well as the right to correction, data transfer, objection, restriction of processing, and blocking or deletion of incorrect or unlawfully processed data. You also have the right to revoke your consent at any time.
If you believe that the processing of your personal data by us violates applicable data protection laws, you have the option to lodge a complaint with the relevant supervisory authority. In Austria, the responsible authority is the Data Protection Authority.


3. Data security
The protection of your personal data is ensured through appropriate organisational and technical measures. These measures include protection against unauthorised, unlawful or accidental access, loss, processing, use and manipulation.
Please note that we do not assume any liability for the disclosure of information due to errors not caused by us during data transmission and/or unauthorised access by third parties.


4. Transmission of data to third parties
To fulfil our contractual or legal obligations, it may be necessary to transmit your data to processors or other recipients, especially authorities. Processors process your personal data on our behalf and only to the extent necessary for the fulfilment of these tasks. Our processors include external service companies, for example.
Within our offer, based on our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our offer within the meaning of Art. 6 para. 1 lit. f of the GDPR), we use content or service offers from third-party companies to integrate content and services.
This requires the transmission of your IP address to third-party providers, as without the IP address, the content cannot be sent to your browser. The IP address is necessary for the presentation of this content. Third-party providers may also use so-called web beacons for statistical or marketing purposes. Web beacons can evaluate information such as website traffic. For this purpose, a cookie may also be placed, containing technical information about the browser and operating system, referring websites, visit time and other information about the use of our website. The following list provides an overview of the third-party providers we use.


5. Data retention
We store your data as long as necessary to fulfil our contractual or legal obligations. For example, we are required to keep our accounting and other records for a period of 7 years from the end of the relevant calendar year.
If you have given us your consent, we will store your data as long as specified in your consent declaration, such as within a contract with you.
In addition, we will store your data as long as necessary to defend against liability or other claims within the statutory limitation periods. According to Austrian law, this is generally 3 years from knowledge of the damage and the damaging party.
Requests that did not lead to the conclusion of a contract will be stored by us for the purpose of internal analysis, such as the analysis of our offer, for a period of 24 months.
Our obligations to delete in the event of you exercising your right to deletion in accordance with Art. 17 of the GDPR are not affected by the above paragraphs.


6. Collection of general data and information
Our website collects a series of general data and information every time it is opened. This may include the browser, operating system, previously visited website, date and time, IP address, internet service provider and similar data and information. We use these data to maintain the website and improve security. When using these data, no conclusions are drawn about personal data.
The anonymous data from the server log files are stored separately from all other personal data.


7. Web analytics with Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en


8. Cookies
Our website uses so-called cookies. These are small text files that are stored on your device by means of the browser. We use cookies to make our website user-friendly. Most of the cookies we use are so-called “session cookies” and are automatically deleted from your hard drive after the end of the browser session.
If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. If cookies are used by us and require your consent, we will obtain your consent in advance. Disabling cookies may limit the functionality of our website.


9. Privacy policy for the use of YouTube
This website embeds videos from the YouTube website. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. When you visit one of our pages that includes YouTube content, a connection is established to YouTube servers. YouTube is informed about which of our pages you have visited.
Furthermore, YouTube may store various cookies on your device or use similar technologies for recognition (e.g. device fingerprinting). This allows YouTube to obtain information about visitors to this website. This information is used, among other things, to capture video statistics, improve user-friendliness and prevent fraud.
If you are logged into your YouTube account, you enable YouTube to directly associate your browsing behaviour with your personal profile. This can be prevented by logging out of your YouTube account.
The use of YouTube is in the interest of an attractive presentation of our online offerings (reference stories, webinars, etc.). This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f of the GDPR. If consent has been requested, processing will only be carried out based on Art. 6 para. 1 lit. a of the GDPR and section 25 par. 1 of the TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) in terms of the TTDSG. Consent can be revoked at any time.
For more information on how user data are handled, please refer to YouTube’s privacy policy at: https://policies.google.com/privacy?hl=en.


10. Privacy policy for the use of Google Maps
This site uses the Google Maps mapping service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To use the features of Google Maps, it is necessary for your IP address to be stored. This information is usually transferred to a Google server in the USA and stored there.
The provider of this site has no influence on this data transfer. When Google Maps is activated, Google may use Google Fonts for the uniform display of fonts. When you access Google Maps, your browser loads the required web fonts into its cache to display text and fonts correctly.
The use of Google Maps is in the interest of an appealing presentation of our online offerings and an easy presentation of the location specified by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f of the GDPR. If consent has been requested, processing will only be carried out based on Art. 6 para. 1 lit. a of the GDPR and section 25 par. 1 of the TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) in terms of the TTDSG. Consent can be revoked at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
For more information on how user data are handled, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=en.


11. Privacy policy for the use of Facebook plug-ins
Plug-ins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated into our web pages. You can recognise the Facebook plug-ins by the Facebook logo on our site. An overview of Facebook plug-ins can be found here: http://developers.facebook.com/docs/plugins/. When you visit our pages, a direct connection is established between your browser and the Facebook server via the plug-in. Facebook receives the information that you have visited our site with your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate the visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or their use by Facebook. For more information, please refer to Facebook’s privacy policy at: https://de-de.facebook.com/policy.php. If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.


12. Privacy policy for the use of Instagram
Functions of the Instagram service are integrated on our pages. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the contents of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or their use by Instagram. For more information, please refer to Instagram’s privacy policy: http://instagram.com/about/legal/privacy/.


13. Privacy policy for the use of LinkedIn plug-ins
We use social plug-ins from the LinkedIn social media network, operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. The social plug-ins may link to our LinkedIn page or the LinkedIn pages of our employees. The social plug-ins are clearly marked with the well-known LinkedIn logo. For the European Economic Area and Switzerland, LinkedIn Ireland Unlimited Company, Wilton Place in Dublin, is responsible for data processing.
By embedding such plug-ins, data can be sent, stored and processed by LinkedIn. When you visit one of our pages equipped with a LinkedIn plug-in, a connection is established to LinkedIn servers. LinkedIn is informed about which of our pages you have visited. Information on LinkedIn’s privacy policy can be found here: https://de.linkedin.com/legal/privacy-policy.


14. Podigee podcast hosting
We use the podcast hosting service Podigee provided by Podigee GmbH, Schlesische Strasse 20, 10997 Berlin, Germany. The podcasts are loaded or transmitted by Podigee.
The use is based on our legitimate interests, i.e. the interest in a secure and efficient provision, analysis and optimisation of our podcast offering in accordance with Art. 6 para. 1 lit. f. of the GDPR.
Podigee processes IP addresses and device information to enable podcast downloads/playbacks and to determine statistical data, such as access numbers. Before being stored in the Podigee database, these data are anonymised or pseudonymised if not necessary for providing the podcasts.
For more information and options to object, please see Podigee’s privacy policy: https://www.podigee.com/de/about/privacy/.

15. Contact form

If the contact form is used, the personal data transmitted by you will be stored automatically. Such data are stored for processing or contacting purposes. These personal data will not be disclosed to third parties.


16. External hosting
This website is externally hosted. The personal data collected on this website are stored on the servers of the host(s). This may include, among other things, IP addresses, contact requests, meta- and communication data, contract data, contact details, names, website accesses and other data generated via a website.
External hosting is carried out for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Art. 6 para. 1 lit. b of the GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f of the GDPR). If consent has been requested, processing will only be carried out based on Art. 6 para. 1 lit. a of the GDPR and section 25 par. 1 of the TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) in terms of the TTDSG. Consent can be revoked at any time.
Our host(s) will only process your data to the extent necessary to fulfil its contractual obligations and will follow our instructions regarding this data.


We use the following host:
Cookis GmbH
Franz Xaver Rennstrasse 4
6460 Imst
Austria
Processing on behalf
We have concluded a contract for processing on behalf (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors are processed only in accordance with our instructions and in compliance with the GDPR.


17. Contact information
gorelate GmbH
FN 429209s
Seilerstätte 15/17
1010 Vienna
Austria

datenschutz@gorelate.com
+43 1 3000 944-20


18. Changes to our privacy policy
We reserve the right to make changes to this privacy policy to ensure that it always complies with current legal requirements or to implement changes to our services in the privacy policy, such as the introduction of new services. The new privacy policy will apply for your subsequent visits.