Information on data processing pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR)

 

Protecting your personal data is of particular concern to us. We process your personal data (hereinafter “data”) exclusively in accordance with legal regulations. With this privacy policy, we aim to provide you with comprehensive information about the processing of your data in our company and your data protection rights and claims.

 

1. Who is responsible for data processing and whom can you contact?

Controller: Georg Brameshuber

Malzgasse 14/27

A-1020 Vienna

Vienna 2nd district, Leopoldstadt

Email: office@validvent.com

Phone: +43 (664) 406 72 52

 

2. What data is processed and from which sources does this data originate?

We process the data we receive from you in the context of business initiation and relationships. Additionally, we process data obtained from credit agencies, credit protection associations, publicly available sources (e.g., commercial register, association register, land register, media), and other companies with whom we have a permanent business relationship, in accordance with applicable law.

 

The personal data includes:

 

Your master/contact data such as:

 

For private customers: first and last name, address, contact details (email address, telephone number, fax), date of birth, data from presented proof of identity (copy of identification), bank details

For corporate customers: company name, commercial register number, VAT number, operational number, address, contact person contact details (email address, telephone number, fax), bank details

In addition, we also process the following other personal data:

 

Information about the nature and content of our business relationship such as contract data, order data, sales and document data, customer and supplier history, consulting documents, information about your financial status (e.g., credit data),

Advertising and sales data, documentation data (e.g., consultation protocols), image data, information from your electronic communication with us (e.g., IP address, login data), other data that we have received from you in the course of our business relationship (e.g., in customer discussions), data that we generate ourselves from master/contact data and other data, such as through customer needs and potential analyses.

 

3. For what purposes and on what legal basis is the data processed?

We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act in its currently valid version:

 

To fulfill (pre-)contractual obligations (Art. 6 para. 1 lit. b GDPR): The processing of your data is carried out for the sale and distribution of our goods and services, for procurement and logistics purposes, as well as for customer administration and analysis. The data is processed in particular during business initiation and during the performance of contracts with you.

 

To fulfill legal obligations (Art. 6 para. 1 lit. c GDPR): Processing of your data is necessary to fulfill various legal obligations, e.g., under the Commercial Code (UGB) or the Federal Fiscal Code (BAO), anti-money laundering regulations, product-specific regulations such as the Raw Material Regulation, Chemicals Act.

To safeguard legitimate interests (Art. 6 para. 1 lit. f GDPR): Based on a balance of interests, data processing may go beyond the actual fulfillment of the contract to safeguard legitimate interests of ours or third parties. In any case, data processing to 

 

safeguard legitimate interests occurs in the following cases:

Consultation with and data exchange with credit agencies and credit protection associations to determine creditworthiness data;

Advertising or marketing;

Measures for business management and further development of services and products;

Measures to protect our company from contractually or legally prohibited behavior, e.g., access controls, video surveillance;

 

As part of legal action.

With your consent (Art. 6 para. 1 lit. a GDPR):

If you have given us consent to process your data, processing will only be carried out in accordance with the purposes specified in the declaration of consent and to the extent agreed therein. Consent given can be revoked at any time with future effect, e.g., for sending our newsletter or for data transmission to third parties. This does not affect the lawfulness of data processing prior to revocation. Please contact our email address provided in point 1 for this purpose.

 

4. Who receives your data?

Even if we commission contract processors, we remain responsible for the protection of your data. All contract processors are contractually obliged to treat your data confidentially and to process it only within the scope of service provision. The contract processors commissioned by us receive your data if they require the data to fulfill their respective service. These include IT service providers that we need for the operation and security of our IT system, as well as advertising and address publishers for our own advertising campaigns.

 

For the purposes of company-related and individual advertising/customer support, your data will be transferred to our own subsidiaries and to other companies with whom we have a permanent business relationship with your consent.

 

For the purpose of creditor protection, we transfer master data and information about your financial status to credit insurance companies, credit protection associations, and credit agencies.

 

In the event of a legal obligation and within the scope of legal action, authorities and courts as well as external auditors may be recipients of your data.

 

Furthermore, for the purpose of initiating and fulfilling contracts, insurance companies, banks, credit agencies, and service providers may be recipients of your data.

 

For a better understanding of the recipient categories mentioned under point 4, you can find a selection of individual companies at the following link.

 

5. How long will your data be stored?

We process your data until the end of the business relationship or until the expiry of the applicable warranty, guarantee, limitation, and statutory retention periods (e.g., under the Commercial Code (UGB), the Federal Fiscal Code (BAO)); furthermore, until the end of any legal disputes in which the data is needed as evidence.

 

6. What data protection rights do you have?

You have the right to information, correction, deletion, or restriction of the processing of your stored data at any time, a right of objection to the processing, as well as a right to data portability and to lodge a complaint in accordance with the requirements of data protection law.

 

6.1 Right to information:

You can request information from us as to whether and to what extent we process your data.

 

6.2 Right to rectification:

If we process your data that is incomplete or incorrect, you can request the correction or completion of it at any time.

 

6.3 Right to deletion:

You can request the deletion of your data from us if we process it unlawfully or if the processing disproportionately interferes with your legitimate interests. Please note that there may be reasons that prevent immediate deletion, e.g., in the case of legally regulated retention obligations.

 

6.4 Right to restriction of processing:

You can request us to restrict the processing of your data if

 

You dispute the accuracy of the data for a period that allows us to verify the accuracy of the data.

the processing of the data is unlawful, but you refuse to delete it and instead request the restriction of data use,

we no longer need the data for the intended purpose, but you need it to assert or defend legal claims, or

you have objected to the processing of the data.

 

6.5 Right to data portability:

You can request us to provide you with the data you have provided us in a structured, common, and machine-readable format and to allow you to

 

 transfer this data to another controller without hindrance on our part, provided that

 

we process this data based on a consent given and revocable by you or for the fulfillment of a contract between us, and

this processing is carried out using automated procedures.

 

6.6 Right of objection:

If we process your data for legitimate interest, you can object to this data processing at any time; this would also apply to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims. You can object to the processing of your data for the purpose of direct advertising without giving reasons.

 

6.7 Right to lodge a complaint:

If you believe that the processing of your data violates Austrian or European data protection law, please contact us to clarify any questions. Of course, you also have the right to contact the Austrian data protection authority or another supervisory authority, such as the data protection authority that is responsible for us.

 

7. Are you required to provide data?

The processing of your data is generally necessary to enter into or fulfill a contract with us. If you do not provide us with this data, we will generally have to refuse to conclude the contract or be unable to execute it and terminate the existing relationship. However, you are not obliged to give your consent to the processing of data that is not relevant to the performance of the contract or is not required by law. 

 

8. To what extent is there automated decision-making (including profiling)?

In principle, we do not use fully automated decision-making pursuant to Article 22 GDPR to establish and implement the business relationship. If we use these procedures in individual cases, we will inform you of this separately, provided this is required by law.

 

9. To what extent does your data help to make decisions in individual cases?

As part of our business relationship, we generally do not use any automated decision-making pursuant to Article 22 GDPR. Should we use these procedures in individual cases, we will inform you of this separately, provided this is required by law.

 

10. Changes to this privacy policy

We will revise this privacy policy as necessary, e.g., when changes in our data processing occur. You can find the latest version of the privacy policy on our website.