Data privacy

18.05.2018

1.1. This Privacy Policy explains the nature, scope and purpose of the processing of personal information within our online offering and the related websites, features and content (collectively referred to as "online offer" or "website"). The privacy policy applies regardless of the domains, systems, platforms, and devices (such as desktop or mobile) on which the online offering is being run.

1.2. The terms used, such as "Personal data" or their "processing", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

1.3. The personal data of the users processed in the context of this online offer includes stock data (without login: eg the IP address: logged in: eg names and addresses of customers), contract data at login (eg services used, payment information), usage data (eg visited websites of our online offer) and content data (eg input at registration).

1.4. The term "user" covers all categories of persons affected by data processing. These include our business partners, customers, interested parties and other visitors to our online offer. The terms used, such as "Users" are to be understood gender-neutral.

1.5. We process personal data of users only in compliance with the relevant data protection regulations. This means that users' data will only be processed if they have a legal permit. That is, especially if the data processing for the provision of our contractual services (eg processing of orders) as well as online services required or required by law, a consent of the users exists, as well as based on our legitimate interests (ie interest in the analysis, optimization and economic operation and security of our online offer within the meaning of Art. 6 (1) lit. DSGVO, in particular in the range measurement, creation of profiles for advertising and marketing purposes as well as collection of access data and use of third-party services.

1.6. Please note that the legal basis of the consents Art. 6 para. 1 lit. a. and Art. 7 GDPR, the legal basis for the processing for the performance of our services and the performance of contractual measures Art. 6 para. 1 lit. b. DSGVO, the legal basis for processing in order to fulfill our legal obligations Art. 6 para. 1 lit. c. DSGVO, and the legal basis for processing in order to safeguard our legitimate interests Art. 6 para. 1 lit. f. DSGVO is.

2.1. We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of the data protection laws are adhered to and in order to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

2.2. The security measures include in particular the encrypted transmission of data between your browser and our server.

3.1. A transfer of data to third parties is only within the scope of legal requirements. We will only pass users' data on to third parties if this is the case, for example. on the basis of Art. 6 para. 1 lit. b) GDPR is required for contract purposes or based on legitimate interests in accordance with Art. Art. 6 para. 1 lit. f. DSGVO on the economical and effective operation of our business operations.

3.2. If we use subcontractors to provide our services, we will take appropriate legal precautions and appropriate technical and organizational measures to protect personal data in accordance with applicable law.

3.3. In the context of this Privacy Policy, if content, tools or other means are used by other providers (collectively referred to as "Third Party Providers") and their registered office is located in a third country, it can be assumed that the data will be transferred to the countries of residence of the third party providers. Third countries are countries in which the GDPR is not a directly applicable law, i. E. basically countries outside the EU or the European Economic Area. The transfer of data to third countries occurs either when there is an adequate level of data protection, user consent or other legal authorization.

4.1. We process inventory data (e.g., IP addresses), contract data upon registration (e.g., services used, names of contact persons, billing information) to fulfill our contractual obligations and services pursuant to Art. Art. 6 para. 1 lit b. DSGVO.

4.2. Users can register for re.comm. As part of the registration, the required mandatory information will be communicated to the users. Registration is not public and user data can not be indexed by search engines. Users can request the deletion of their data in writing at any time. The data of the users will be deleted upon their application, subject to their retention is for commercial or tax law reasons according to Art. 6 para. 1 lit. c DSGVO necessary. We are entitled to irretrievably delete all user data stored during the term of the contract.

4.3. As part of the registrations and renewed registrations and use of our online services, the IP address and the time of the respective user action will be saved. The storage is based on our legitimate interests, as well as those of users for protection against misuse and other unauthorized use. A transfer of these data to third parties does not take place, unless it is necessary for the prosecution of our claims or there is a legal obligation in accordance with. Art. 6 para. 1 lit. c DSGVO.

4.4. We process usage data (e.g., the visited web pages of our online offering, interest in our events) and content data (e.g., submissions to the registration) for advertising purposes in a user profile to inform the user e.g. Event information based on their previously used services.

5.1. When contacting us (via contact form or e-mail), the information provided by the user to process the contact request and its processing acc. Art. 6 para. 1 lit. b) DSGVO processed.

5.2. The information provided by the users is stored exclusively internally and not to third parties, unless there is a legal obligation to do so. Art. 6 para. 1 lit. c DSGVO, passed on.

6.1. Based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO Data on every access to the server on which this service is located (so-called server log files). The access data includes the name of the retrieved web page, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider ,

6.2. Logfile information is stored for security purposes (for example, to investigate abusive or fraudulent activities) for a maximum of seven days and then deleted. Data whose further retention is required for evidential purposes are excluded from the erasure until the final clarification of the incident.

7.1. Cookies are information transmitted by our web server or third-party web servers to users' web browsers and stored there for later retrieval. Cookies can be small files or other forms of information storage.

7.2. We use "session cookies" that are only stored for the duration of the current visit to our online presence (for example, to enable the storage of your login status or the shopping cart function and thus the use of our online offer). In a session cookie a randomly generated unique identification number is stored, a so-called session ID. In addition, a cookie contains information about its origin and the retention period. These cookies can not save other data. Session cookies will be deleted when you have finished using our online offer and you are e.g. log out or close the browser.

7.3. The use of cookies in the context of pseudonymous range measurement informs users in the context of this privacy policy.

7.4. If users do not want cookies stored on their machine, they will be asked to disable the option in their browser's system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.

7.5. You may opt for the use of cookies for distance measurement and promotional purposes through the Network Advertising Initiative's opt-out page (http://optout.networkadvertising.org/) and in addition to the US website (http://www.aboutads.info/choices ) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

8.1. Based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO), we use Google Analytics, a web analysis service provided by Google Inc. ("Google") , Google uses cookies. The information generated by the cookie about the use of the online offer by the users are usually transmitted to a Google server in the USA and stored there.

8.2. Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

8.3. Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offering and to provide us with further services related to the use of this online offer and the internet usage. In this case, pseudonymous user profiles of the processed data can be created.

8.4. We only use Google Analytics with activated IP anonymization. This means that the IP address of the users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.

8.5. The IP address submitted by the user's browser will not be merged with other data provided by Google. Users can prevent the storage of cookies by setting their browser software accordingly; Users may also prevent the collection by Google of the data generated by the cookie and related to their use of the online offer as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http: // tools .google.com / dlpage / gaoptout? hl = en.

8.6. For more information about Google's data usage, hiring and opt-out options, please visit Google's websites: https://www.google.com/intl/en/policies/privacy/partners ("Google's use of your data when you use websites or apps our partners "), http://www.google.com/policies/technologies/ads (" Use of data for promotional purposes "), http://www.google.com/settings/ads (" Managing information that Google uses, to show you advertising ").

9.1. On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO) we may use social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook"). The plugins can represent interaction elements or content (eg videos, graphics or text contributions) and can be recognized by one of the Facebook logos (white "f" on blue tile, the terms "Like", "Like" or a "thumbs up" sign ) or are marked with the addition "Facebook Social Plugin". The list and appearance of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

9.2. Facebook is certified under the Privacy Shield Agreement, providing a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

9.3. When a user invokes a feature of this online offering that includes such a plugin, their device establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to the device of the user and incorporated by him into the online offer. In the process, user profiles of the processed data can be created. Therefore, we have no influence on the extent of the data that Facebook collects with the help of this plugin and therefore informs users according to our knowledge.

9.4. By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his Facebook account. If users interact with the plugins, for example, press the Like button or leave a comment, the information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and save their IP address. According to Facebook, only an anonymous IP address is stored in Austria.

9.5. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and settings options for protecting the privacy of users, can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/ ,

9.6. If a user is a Facebook member and does not want Facebook to collect data about him via this online offer and link it to his member data stored on Facebook, he must log out of Facebook and delete his cookies before using our online offer. Other settings and disagreements on the use of data for promotional purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US-American site http://www.aboutads.info / choices / or the EU page http://www.youronlinechoices.com/. The settings are platform independent, i. they are adopted for all devices, such as desktop computers or mobile devices.

9.7. The privacy policy of Facebook can be viewed at any time at https://www.facebook.com/privacy/explanation. If you have questions about the Facebook Data Policy, you can use the following contact form https://www.facebook.com/help/contact/2061665240770586. You can contact the Facebook Privacy Officer (https://www.facebook.com/help/contact/540977946302970) or Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland.

10.1. With the following information, we will inform you about the contents of our newsletter as well as the registration, shipping and statistical evaluation procedures as well as your right of objection. By subscribing to our newsletter, you agree to the receipt and the procedures described.

10.2. Content of the newsletter: We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter "newsletter") only with the consent of the recipient or a legal permission. Insofar as the content of a newsletter is concretely described in the context of an application for the newsletter, it is decisive for the consent of the user. Incidentally, our newsletters contain information about our events (eg Caesar, real estate ball, re.comm) or companies.

10.3. Double opt-in and logging: Registration for our newsletter is done in a so-called double opt-in procedure. That After registration, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that nobody can register with external e-mail addresses. The registration for the newsletter will be logged in order to prove the registration process according to the legal requirements. This includes the storage of the logon and the confirmation time, as well as the IP address. Likewise, changes to your data stored with the shipping service provider will be logged.

10.4. Shipping Service: The newsletter is distributed via Active Campaign, by ActiveCampaign, LLC, 1N Dearborn, 5th Floor, Chicago, IL 60601, United States, hereinafter referred to as the "Shipping Service Provider". You can view the privacy policy of the shipping service provider here: https://www.activecampaign.com/privacy-policy/

10.5. Furthermore, the shipping service provider may, according to its own information, transmit these data in pseudonymous form, i. without assignment to a user, to optimize or improve their own services, e.g. for the technical optimization of the dispatch and the presentation of the newsletters or for statistical purposes to determine from which countries the recipients come. However, the shipping service provider does not use the data of our newsletter recipients to write them down or to pass them on to third parties.

10.6. Credentials: To subscribe to the newsletter, it is sufficient to provide your e-mail address. Optionally, we ask you to give a name in the newsletter for personal address.

10.7. Statistical Survey and Analysis - The newsletters contain a so-called "web-beacon", i. a pixel-sized file, which is retrieved from the server of the shipping service provider when the newsletter is opened. As part of this call, technical information, such as information about the browser and your system, as well as your IP address and time of the call are collected. This information is used to improve the technical performance of services based on their specifications or audience and their reading habits, based on their locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients, but it is neither our endeavor nor that of the shipping service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

10.8. The use of the shipping service provider, carrying out the statistical surveys and analyzes as well as logging the registration process, are based on our legitimate interests in accordance with. Art. 6 para. 1 lit. f DSGVO. We are interested in using a user-friendly and secure newsletter system that serves both our business interests and the expectations of our users.

10.9. Termination / Withdrawal - You can terminate the receipt of our newsletter at any time, ie. Revoke your consent. At the same time, your consent to its dispatch by the shipping service provider and the statistical analyzes expire. A separate revocation of the shipment by the shipping service provider or the statistical evaluation is unfortunately not possible. A link to cancel the newsletter can be found at the end of each newsletter. Each event has its own newsletter and must be canceled separately. If you sign up for a specific newsletter and cancel this application, your personal information relating to this newsletter will be deleted.

11.1. On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO), we make use of content or services offered by third-party providers in order to provide their content and services Services, such as Include videos or fonts (collectively referred to as "content"). This always presupposes that the third-party providers of this content perceive the IP address of the users, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We endeavor to use only content whose respective providers use the IP address only for the delivery of the content. Third parties may also use so-called pixel tags (invisible graphics, also referred to as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information, such as visitor traffic, on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may include, but is not limited to, technical information about the browser and operating system, referring web pages, visit time, and other information regarding the use of our online offer.

11.2. The following presentation provides an overview of third-party providers as well as their contents, as well as links to their data protection statements, which further notes on the processing of data and, for already mentioned here, contradictory possibilities (so-called opt-out) contain:

- External fonts from Google, Inc., https://www.google.com/fonts ("Google Fonts"). The integration of Google fonts is done by a server call on Google (usually in the US). Privacy Policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.

- Third-party YouTube Inc. YouTube Inc. videos, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, opt-out: https://www.google.com/settings/ads/.

12.1. Users have the right, upon request, to obtain information free of charge about the personal data that we have stored about them.

12.2. In addition, users have the right to correct inaccurate data, restrict the processing and deletion of their personal data, if applicable, to assert their rights to data portability and, in the event of unlawful processing, to file a complaint with the appropriate regulatory authority.

12.3. Likewise, users can revoke consent, generally with implications for the future.

13.1. The data stored with us are deleted as soon as they are no longer necessary for their purpose and the deletion does not conflict with any statutory storage requirements. Unless the users' data are deleted because they are required for other and legally permitted purposes, their processing will be restricted. That the data is blocked and not processed for other purposes. This applies, for example for data of the users, which must be kept for commercial or tax reasons.

13.2. According to legal requirements the storage takes place for 6 years according to § 257 Abs. 1 HGB (trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.) as well as for 10 years according to § 147 Abs. 1 AO (books, records, management reports, Accounting documents, commercial and business letters, documents relevant for taxation, etc.).

Users may object to the processing of their personal data in accordance with legal requirements at any time. The objection may in particular be made against processing for direct marketing purposes.

15.1. We reserve the right to change the privacy policy in order to adapt it to changing legal situations, or to changes in the service and data processing. However, this only applies to declarations of data processing. If users' consent is required or elements of the privacy policy contain provisions of the contractual relationship with the users, the changes are only made with the consent of the users.

15.2. Users are requested to inform themselves regularly about the content of the privacy policy.

If you have any questions regarding the collection, processing and use of your personal data, you can contact our external data protection officer directly.An independent data protection officer monitors compliance with the law:

Johannes Eisert
epmedia Werbeagentur GmbH
Wienerbergstraße 11
1100 Wien
Tel.: 0043 1 512 16 16 – 0
E-Mail: office@epmedia.at