Vulganus - Privacy Statement
1. Name and address of the controller
The controller, in accordance with the General Data Protection Regulation and other national data protection laws, as well as other data privacy directives, is:
LIKAR Rechtsanwälte GmbH
Pestalozzistraße 1/II/13
8010 Graz
Tel.: +43 316 823 723
Email: dsb@likar-partner.at
Website: www.likar-partner.at
2. General information about data processing
2.1. Scope of the processing of personal data
In general, we only process the personal data of our users insofar as this is necessary for the provision of a functional website as well as our contents and services. The processing of the personal data of our users normally only occurs after obtaining the user’s consent. An exception applies in cases where it is not possible to obtain consent prior to the processing due to practical reasons and where the processing of the data is permitted by statutory provisions.
2.2. Legal basis for the processing of personal data
Where we obtain consent for the processing of personal data, Art. 6 Para. 1 lit. a of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis for the processing of personal data.
When processing personal data that is necessary for the fulfilment of a contract to which the data subject is party, Art. 6 Para. 1 lit. b of the GDPR shall serve as the legal basis for this. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c of the GDPR shall serve as the legal basis for this.
Where vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6 Para. 1 lit. d of the GDPR shall serve as the legal basis for this.
If the processing is necessary for the purpose of safeguarding a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the aforementioned interest, Art. 6 Para. 1 lit. f of the GDPR shall serve as the legal basis for the processing.
2.3. Deletion of data and duration of retention
The personal data of the data subject is deleted or locked as soon as the purpose of the storage ceases to exist. Beyond that, storage may also then occur where this is intended by the European or national legislator in EU regulations, laws or other regulations to which the data controller is subject. Data will also be locked or deleted if a retention period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
3. Provision of the website and creation of log files
3.1. Description and scope of data processing
Our system automatically collects data and information from the computer system of the accessing device each time our Internet site is viewed.
The following data is collected in the process:
(1) Browser type and version used
(2) The user’s operating system
(3) Data from the contact and service form (company, address, mail, telephone number, machine number, description of problem)
(4) Date and time of access
(5) Data from the portal service (customer number, name; e-mail address, document number, date of change, status, object number, document path)
(6) User’s IP address
This data is also stored in our system’s log files. However, the IP addresses of the user are changed and made anonymous in such a way that no clear assignment to the user can occur.
3.2. Legal basis for data processing
The legal basis for the storage of the log files is Art. 6 Para. 1 lit. f of the GDPR. 3. Purpose of the data processing
In addition, we also use the data to optimise the website and to ensure the security of our information technology systems. This purpose represents our legitimate interest in data processing in accordance with Art. 6 par. 1 lit. f of the GDPR.
3.3. Duration of storage
Data is erased as soon as it is no longer required for achieving the purpose of its collection. Where data is collected for the provision of the website, this occurs when the particular session has ended.
3.4. Right of Objection and Deletion
The collection of data for the provision of the website and the storage of data in log files is necessary for operating the Internet page. Consequently, the user has no right of objection.
4. Use of cookies
4.1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored on the user’s computer system in the internet browser i.e. by the internet browser. When a user calls up a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the unambiguous identification of the browser when the website is viewed again. Cookies that have already been stored on your device can be deleted at any time; the procedure for deleting cookies is explained in the user instructions for your browser (under „Help“ on the browser menu).
We use cookies in order to make our website more user-friendly. Certain elements of our internet site require the browser being used to view the site to be identifiable even after changing web pages.
The following data is stored and transmitted in the cookies:
(1) Language Settings
The data of the users collected in this way are made pseudonymous through technical precautionary measures. Therefore, it is no longer possible to assign the data to the viewing user. Data are not stored together with other personal data of users.
When accessing our website, users are informed about the use of cookies by means of an information banner and referred to this data protection declaration.
4.2. Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f of the GDPR.
4.3. Purpose of the data processing
The purpose of the use of cookies is to simplify the use of the website for the user. Several functions on our internet site cannot be offered without the use of cookies. For these functions, it is necessary for the browser to be identifiable even after changing web pages.
The user data collected by cookies required for technical purposes is not used for the creation of user profiles.
Our legitimate interest in the processing of data according to Article 6 Par. 1 lit. f of the GDPR also lies in these purposes.
4.4. Duration of storage, right of objection and deletion
Cookies are stored on the user’s computer and are transmitted from this computer to our site. Therefore you, as the user, have full control over the use of the cookies. By changing the settings in your internet browser, you may deactivate or restrict the transfer of cookies. Cookies that have already been stored may be deleted at any time. This can also be carried out automatically. If cookies are deactivated for our website, it may be that it is no longer possible to use all the functions of the website to their full extent.
5. Newsletter
5.1. Description and scope of data processing
You can subscribe to free newsletters on our website. The data from the input mask will be sent to us when you register for the newsletter.
(1) First name
(2) Surname
(3) Company name
(4) Email address
In addition, the following data are collected at the time of registration:
(5) Date and time of registration
(6) IP address:
Your consent will be obtained during the registration process for the processing of the data and you will be referred to this data protection declaration.
In connection with data processing for the sending of newsletters, the data which has been provided will be passed on to our newsletter provider “Mailchimp”, operated by the Rocket Science Group, LLC, established in Atlanta, USA. In this respect, we have concluded a data processing contract in the sense of Art. 28 of the GDPR. Your data will only be used for sending information such as newsletters, product information, etc.
5.2. Legal basis for data processing
The legal basis for the processing of data after the user has registered for the newsletter and where consent has been obtained from the user is Art. 6 Para. 1 lit. a of the GDPR.
5.3. Purpose of the data processing
The collection of the user’s email address is for the purpose of delivering the newsletter.
The collection of other personal data in the course of the registration process serves to prevent the abuse of the services or the email address used and to generate a personalised salutation.
5.4. Duration of storage
Data is erased as soon as it is no longer required for achieving the purpose of its collection. The e-mail address of the user is thus saved as long as the subscription to the newsletter is active.
5.5. Right of Objection and Deletion
The subscription to the newsletter can be cancelled by the affected user at any time. For this purpose, each newsletter contains a corresponding link.
6. Use of Google Analytics and Google Adwords
6.1. Description and scope of data processing
On our website we use the services of Google Analytics, a web analytics service provided by Google Inc., to increase efficiency. („ Google“). Google Analytics uses text files known as „cookies“. These are stored on your computer and enable your usage of this website to be analysed. The information generated by the cookie about your use of this website (included your IP address) is transmitted to a Google server in the USA and stored there. In order to protect the interests of users with respect to the protection of their personal data, their IP address is made anonymous and, as a result, transmitted to Google in a non-identifiable format.
You can prevent cookies from being saved by applying a setting in your browser. However, please note that in this case it may not be possible to utilise all functions of this website in their entirety. In addition, you can prevent Google from collecting and processing the data (including your IP address) generated by the cookie and which relates to your use of the website by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout
This website uses cookies with the aim of presenting users with online advertising material at a later date via re-marketing campaigns in the Google advertising network. To present re-marketing advertisements, third-party providers such as Google use cookies based on your visit to our website. Users can deactivate the use of cookies by Google by visiting this page to deactivate Google at www.google.com/ads/preferences.
The following data is collected in the course of the registration process:
(1) The encrypted IP address of the user
(2) Date and time of access
(3) Frequency of page views
(4) Use of website functions
(5) The user’s operating system
(6) The user’s internet service provider
(7) Websites from which the user’s system accesses our website
(8) Websites accessed by the user’s system via our website
(9) Operating systems used by terminal devices
(10) Age, gender, languages, interests, country of origin
6.2. Legal basis for data processing
The legal basis for the processing of the data is our legitimate interest in increasing the efficiency of and in financing the website in the sense of Art. 6 para. 1 lit. f of the GDPR.
6.3. Purpose of the data processing
The transmission of the anonymised IP address to Google serves to increase the efficiency of our website and for anonymous evaluations of the content of the server as well as to finance this website.
6.4. Duration of storage
The data will be deleted as soon as it is no longer needed for the achievement of the purpose or after 26 months at the latest.
7. Use of Google Tag Manager and Google Optimize
7.1. Description and scope of data processing
We use Google Optimize on our website. Google Optimize analyses the use of different versions of our website and helps us to improve usability according to the behaviour of our users on the website. Google Optimize is a tool integrated with Google Analytics.
Google Tag Manager is also a Google product that allows us to manage website tags through an interface. The Tag Manager is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which may in certain circumstances collect data. Google Tag Manager does not access this data. If it has been deactivated at the domain or cookie level, it will remain in effect for all tracking tags that have been implemented with Google Tag Manager. If you do not wish to receive interest-based advertising, you can disable Google’s use of cookies for these purposes by visiting the www.google.com/settings/ads/plugin page.
The following website tags were collected for our website using Google Tag Manager:
Facebook Pixel
Our website uses Facebook Pixel, a service provided by Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”)). With the help of Facebook Pixel, it is possible for us to determine the visitors to our online offer as a target group for the display of advertisements, so-called “Facebook ads”. Accordingly, we use Facebook Pixel in order to display the Facebook advertisements placed by us only to those Facebook users who have also shown an interest in our online offer.
Facebook Pixel is integrated by Facebook immediately when you visit our website and can save a so-called cookie, i.e. a small file, on your device. Facebook will assign this information to your account if you are registered with Facebook. For further information, see Facebook’s information on data protection under www.facebook.com/about/privacy/.
AdWords Conversion Tracking and the Re-Marketing Tag
We also use Google AdWords Conversion Tracking and the Google AdWords Re-marketing Tag for the purpose of targeting visitors with online advertising via re-marketing campaigns at a later point in time on the Google advertising network. This places a Google AdWords cookie on your computer when you are directed to our website by a Google advertisement. See point 6: Google’s use of Google Analytics and Google Adwords
LinkedIn Insight Tag
Our website uses the LinkedIn Insight Tag from LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. With the help of the LinkedIn Insight Tag, we can determine the visitors to our online offer as a target group for the display of advertisements, so-called “LinkedIn Ads”. Accordingly, we use the LinkedIn Tag to display the LinkedIn Ads we have placed only to those LinkedIn users who have also shown an interest in our website.
LinkedIn members may control the use of their personal information for advertising purposes in their account settings and disable the LinkedIn Tag on our website: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Leadfeeder Tag: Our website uses the Leadfeeder service provided by Liidio Oy, Leadfeeder, Mikonkatu 17 C, 00100 Helsinki, Finland. Leadfeeder accesses the IP addresses of the website visitors and links the list of IP addresses with information about the companies that can be found on the Internet under these IP addresses. No personal data will be passed on to our company. For more information on Leadfeeder and the collected data, please visit: www.leadfeeder.com/privacy
7.2. Legal basis for data processing
The legal basis for the processing of the data is our legitimate interest in increasing the efficiency of and in financing our website in the sense of Art. 6 para. 1 lit. f of the GDPR.
7.3. Purpose of the data processing
The internal processing of (partly) personal data serves to increase the efficiency of our website, assists in the anonymous evaluation of user behaviour on our website, helps us provide targeted advertising displays for interested customers and, as a result, in the financing of this website. Personal data will not be passed on or transmitted to third parties. 4. Duration of storage: Data will be deleted as soon as they are no longer needed for the fulfilment of the purpose.
8. Use of Youtube AND VIMEO
Our website uses videos from the video platform YouTube.com, which is provided by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA and Vimeo.com, 330 West 34th Street, 5th Floor New York, New York 10001, to allow users to post their own videos and make them publicly available.
In the event that you follow a link on YouTube, we would like to point out that YouTube stores any personal data of users (e.g. IP address) in accordance with its own data use guidelines and uses it for business purposes.
The processing of personal data on our part will not take place when videos are retrieved.
9. Google Maps
Our website uses Google Maps, a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use Google Maps to present maps embedded in our website. This does not result in the processing of personal data.
10. Rights of the data subject
If your personal data is processed, you are a data subject as set out in the GDPR and you are entitled to the following rights conceded by the data controller:
10.1. Right to information
You may request confirmation from the data controller as to whether personal information concerning you is being processed by us.
If such processing is taking place, you may request the following information from the data controller:
(1) The purposes for which the personal data is processed;
(2) The categories of personal data that are processed;
(3) The recipients i.e. the categories of recipients to whom the personal data concerning you has been disclosed or is yet to be disclosed;
(4) The planned duration of the storage of the personal data concerning you or, if specific details on this cannot be provided, criteria for the determination of the storage duration;
(5) That there exists the right to rectification or deletion of the personal data concerning you, a right to restriction of the processing by the data controller or a right to object to this processing;
(6) That there exists the right to file a complaint with a supervisory authority;
(7) All available information on the origin of the data if the personal data is not collected from the data subject;
(8) That there exists an automated decision making process including profiling pursuant to Article 22 Paras. 1 and 4 of the GDPR and – at least in these cases – meaningful information about the logic involved as well as the scope and the intended consequences of such processing for the data subject. You have the right to obtain information as to whether the personal data concerning you is transmitted to a third country or to international organisations. In this context, you may request to be informed of the appropriate guarantees pursuant to Art. 46 of the GDPR in connection with the transmission.
10.2. Right to rectification
You have the right to rectification and/or completion vis-à-vis the data controller if the processed personal data concerning you is incorrect or incomplete. The data controller must carry out the rectification immediately.
10.3. Right to the restriction of processing
Under the following conditions, you may request the restriction of the processing of personal data concerning you:
(1) If you contest the accuracy of your personal information for a period of time that enables the data controller to verify the accuracy of your personal information;
(2) If the processing is unlawful and you refuse deletion of the personal data and instead demand the restriction of the use of the personal data;
(3) If the data controller no longer requires the personal data for the purposes of the processing, but you, nevertheless, require the data to establish, exercise or defend legal claims, or
(4) If you have objected to the processing pursuant to Art. 21 Para. 1 of the GDPR and it has not yet been established whether the legitimate interests of the data controller outweigh your grounds.
If the processing of the personal data concerning you is restricted, this data may only be processed – with the exception of the storage thereof – with your consent or for the establishment, exercise or defence of legal claims or to protect the rights of another natural person or legal entity or for reasons of significant public interest of the EU or of a Member State. If processing has been restricted in accordance with the above conditions, you will be informed by the data controller before the restriction is lifted.
10.4. Right to deletion
a) Obligation to delete
You may demand that the data controller delete the personal data relating to you immediately, and the data controller is obliged to delete this data immediately provided that one of the following reasons applies:
(1) Your personal data is no longer required for the purposes for which it was collected or otherwise processed.
(2) You revoke your consent on which the processing pursuant to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a of the GDPR was based and there is no other legal basis for processing.
(3) You object to the processing in accordance with Art. 21 Para. 1 of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing in accordance with Art. 21 Para. 2 of the GDPR.
(4) The personal data concerning you have been processed unlawfully.
(5) The deletion of the personal data concerning you is required for the fulfilment of a legal obligation under EU legislation or the legislation of the Member States to which the controller is subject.
(6) The personal data concerning you were collected in relation to information society services offered pursuant to Article 8 Para. 1 of the GDPR.
b) Information to third parties
If the data controller has made the personal data concerning you public and is obliged to erase it pursuant to Article 17 Para. 1 of the GDPR, the data controller shall take reasonable measures, including of a technical nature and in consideration of the available technology and the cost of implementation, to inform data controllers who process your personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.
c) Exceptions
The right to deletion does not exist if processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) to fulfil a legal obligation which requires the processing of data under the law of the European Union or of the Member States to which the data controller is subject, or to perform a task which is in the public interest or in the exercise of public authority which has been delegated to the data controller;
(3) for reasons of public interest in the field of public health pursuant to Article 9 Para. 2 lit. h and i and Article 9 Para. 3 of the GDPR;
(4) for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes pursuant to Article 89 Para. 1 of the GDPR to the extent that the law referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of said processing, or
(5) to assert, exercise or defend legal claims.
10.5. Right to information
If you have asserted your right to rectification, deletion or restriction of processing from the data controller, he or she shall be obliged to notify all recipients to whom your personal data has been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate level of effort. You are entitled to learn from the data controller about these recipients.
10.6. Right to data portability
You have the right to obtain the personal data concerning you that you have provided to the data controller in a structured, common and machine-readable format, provided that this is technically possible. You also have the right to transfer this data to another data controller without hindrance from the data controller who has been provided with the personal data, provided that
(1) the processing is based on consent pursuant to Art. 6 Para. 1 lit. a of the GDPR or Art. 9 Para. 2 lit. a of the GDPR or on a contract pursuant to Art. 6 Para. 1 lit. b of the GDPR and
(2) the processing is carried out using automated procedures.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected in doing so.
The right to data portability does not apply to the processing of personal data necessary in order to carry out a task of public interest or in the exercise of official authority conferred on the data controller.
10.7. Right to objection
You have the right to raise an objection at any time against the processing of personal data concerning you which occurs on the basis of Art. 6 Para. 1 lit. f of the GDPR for reasons pertaining to your particular situation.
The data controller will no longer process the personal data concerning unless he can prove mandatory reasons for the processing thereof that must be upheld and that outweigh your interests, rights and freedoms, or where the processing serves the assertion, exercise or defence of legal claims.
If your personal data is processed to carry out direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct advertising.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58/EC, you have the option, in the context of the use of information society services, to exercise your right to object by means of automated procedures that use technical specifications.
10.8. Right to revoke the declaration of consent under data protection law
You have the right to revoke your data protection consent declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of that consent up until the revocation.
10.9. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data is in violation of the GDPR.
The supervisory authority to which the complaint is submitted shall inform the complainant about the status and results of the complaint including the option of legal remedies according to Art. 78 of the GDPR.