Data Protection Statement

General information

We are committed to protecting your personal data. We process your data exclusively on the basis of legal provisions (EU-GDPR, Data Protection Act (DSG), Telecommunications Act (TKG) 2003). The following information explains how we process your personal data in relation to our websites wirtschaftsagentur.at, viennabusinessagency.at, jobs.wirtschaftsagentur.at and cockpit.wirtschaftsagentur.at as well as the claims and rights to which you are entitled in accordance with the regulations of data protection law. The Data Controller responsible for the processing of your personal data is the

Vienna Business Agency. A fund of the City of Vienna.
Mariahilfer Strasse 20, A-1070 Vienna
E.: info@wirtschaftsagentur.at
T.: +43 1 25200

We are always happy to assist with any complaints, questions or feedback regarding data protection. The contact details for our Data Protection Officer are:

Harald Kudlich
Mariahilfer Strasse 20, A-1070 Vienna
E.: kudlich@wirtschaftsagentur.at
T.: +43 1 25200 853

We process data you disclose to us as follows:

1) Data processing in the context of making contact

If you contact us (e.g. by email or by telephone), we will process your data in order to perform pre-contractual measures and/or to process and/or handle your query for the purpose of contract fulfilment.

2) Data processing in the context of user account registration:

If you register for a user account on our websites, we will process data you disclose in the course of registering in order to perform pre-contractual measures and/or to fulfil a contractual relationship for the provision of the user account. Your data will not be disclosed to third parties or will be disclosed only if you have given your express prior consent to this disclosure.

3) Data processing in the context of our consultancy activities:

If you use our consultancy service, we will process your data to provide this consultancy and to formally examine the business cases to be addressed as part of our service. We process your data to fulfil a contractual relationship and/or with a lawful basis in the context of a business relationship (and/or to implement this relationship).

The disclosure of the relevant data in an individual case has a lawful basis and/or serves to fulfil a contractual relationship. Where appropriate, data may be disclosed to the following categories of recipients:

Banks, legal representatives, certified public accountants, auditors, tax advisers, law courts, administrative authorities, collection agencies, third-party lenders, contractual and business partners, insurance providers and Statistik Austria.

We only process your data for as long as necessary for fulfilment of the contractual relationship and/or as long as is dictated by legal obligations (such as 7 years as per retention periods under tax and company law).

4) Data processing in the context of processing funding: 

If you apply for funding through us, we will process your data to formally examine the business cases to be addressed as part of our service (processing and administration of funding applications, payment of funding, etc.). We process your data to fulfil a contractual relationship and/or with a lawful basis in the context of a business relationship (and/or to implement this relationship).

The disclosure of the relevant data in an individual case has a lawful basis and/or serves to fulfil a contractual relationship. Where appropriate, data may be disclosed to the following categories of recipients:

Banks, legal representatives, certified public accountants, auditors, tax advisers, law courts, administrative authorities, collection agencies, third-party lenders, contractual and business partners, insurance providers and Statistik Austria.

We only process your data for as long as necessary for fulfilment of the contractual relationship and/or as long as is dictated by legal obligations and/or in the context of our obligations as a company subject to mandatory auditing by the auditing courts (at most 30 years in accordance with the limitation period set down in Section 1478 Austrian Civil Code (ABGB)).

5) Data processing in the context of recruitment:

We perform recruitment searches and personnel selections on our own behalf and, in some cases, for our subsidiaries and associate companies. Each job advertisement always states the company to which the position relates. You must create an application profile (= a user account) in order to register on our recruitment platform. After entering your email address, you will receive a link to create an application profile.

We process the data you enter and upload in the course of registration and in the job portal for the purpose of conducting the application procedure to assess your suitability, level of qualification and professional performance in relation to the position. We process your data in order to perform pre-contractual measures and/or on the basis of a legitimate interest in conducting an efficient application process.

We disclose the relevant data in each individual case in order to fulfil a contractual relationship to the company to which you are applying. We use a data processor – eRecruiter GmbH, OK Platz 1a, A-4020 Linz (Company no. 459812w) – to operate our electronic recruitment platform.

Your personal data will be stored for as long as the respective storage purpose exists. In the case of an application for a specific advertised position and/or in the case of a speculative application, your data will be retained for 6 months after conclusion of the recruitment process, after which time it will be deleted. This retention period can be extended to 3 years if you give your consent to this by clicking the corresponding box. This data will be deleted after this three-year period. If you have an active application upon expiry of the retention period, the retention period will be extended to the conclusion of the active application process.

6) Data processing for the execution of events:

We process your data to fulfil a contractual relationship and/or with a lawful basis – provided that you participate in our events – in order to organise and implement the event.

The disclosure of the relevant data in an individual case has a lawful basis and/or serves to fulfil a contractual relationship. Where appropriate, data may be disclosed to the following categories of recipients:

Banks, legal representatives, certified public accountants, auditors, tax advisers, law courts, administrative authorities, collection agencies, third-party lenders, contractual and business partners, insurance providers and Statistik Austria.

We may take photographs and video recordings of you during the event while documenting the event. We process these images on the basis of our legitimate interest in documenting the event and facilitating media reports about the event (such as in newspapers, magazines, publications or on websites and social media platforms).

7) Data processing for the purpose of direct advertising:

If we have received your contact information in the context of the use of our services, you may receive messages by post, email and SMS to promote other, similar products and services we offer. In this case, we process your data on the basis of our legitimate interest in initiating business contact regarding services we offer. This legitimate interest is the consequence of our interest in sending you messages to inform you of news, current offers and events on a regular basis and to advertise our service offer. You can object to the processing of your data for the purpose of direct advertising at any time.

If you register for our newsletter, we will regularly send you information about us and the services we offer. Your consent is the lawful basis for this processing. You can unsubscribe from our newsletter at any time.

8) Image processing to facilitate the preventive protection of people and property:

We perform image processing on the basis of a prevailing legitimate interest within the meaning of Section 12 Austrian Telecommunications Act (DSG – regarding video monitoring in some of our premises) as a preventive measure, to ensure that any criminal acts can be traced and to facilitate the investigation of criminal offences.

We process data we receive through your use of our online presence as follows:

1) Server logs

If you visit our website, our web server will collect usage data (known as server logs). This data collection is necessary to establish a connection to our server and facilitate the use of our website in technical respects. We collect the following server logs: The IP address of the requesting computer, together with the date, time, request, which file was requested (name and URL), the volume of data transmitted to you, notification of whether the request was successful, identification data for the browser and operating system used, and the website from which our website was accessed (if our website was accessed via a link).

The lawful basis for this processing is our legitimate interest in safeguarding our system, administering technical aspects of our website and optimising the quality of our service. In the event of a cyberattack, we will pass this data on to law enforcement agencies. Beyond this, data is not disclosed to third parties. We store server logs for a maximum of six months.

2) Cookies

We use cookies on our website to facilitate the use of certain features. Cookies are small text files that our website places on your computer in order to identify it again in future. These files may contain information regarding use of the website. The information contained in the cookies serves to save the individual selections you make in order to restore these to the state in which you left them the next time you access the page. We also use cookies to generate non-personalised statistics. Most web browsers automatically accept cookies. You can prevent this by configuring your browser settings accordingly. You can remove cookies stored on your computer at any time by deleting temporary internet files. If the sole purpose of data processing is to execute or facilitate the transmission of a message via an electronic communication network or if the data processing is essential for us to provide services to you that you have expressly requested, we will process this data on the basis of our legitimate interest.

In all other cases, we will process data on the basis of your consent. In this case, we will still explicitly indicate this to you.

We use services offered by the providers listed below to process data regarding your usage of our website in order to tailor it to your interests as much as possible.

• For statistical purposes, we use Google Analytics, an internet analysis service provided by Google Inc. (“Google”). Google Analytics uses cookies: text files that are stored on your computer and make it possible to analyse your use of the website. In most cases, the information generated by the cookie regarding your use of the website will be transmitted to a Google server in the USA and stored there. We use IP anonymisation, which means that your IP address is truncated within European Union member states and in other signatory countries of the Agreement on the European Economic Area. Only in exceptional circumstances will your full IP address be transmitted to a Google server in the USA before being truncated. Google will use this information on our behalf in order to analyse your use of this website, to compile reports regarding website activities and to provide us with additional services relating to usage of the website and the internet. The IP address transmitted by your browser in the context of Google Analytics will not be combined with other Google data. You can block the use of cookies by configuring the settings in your browser software accordingly. Please note, however, that you will then be unable to use the full scope of all features on the website. Furthermore, you can prevent data generated by the cookie relating to your use of the website (incl. your anonymised IP address) from being collected, transmitted to and processed by Google by downloading and installing the browser plugin available via the following link: (http://tools.google.com/dlpage/gaoptout?hl=de).
  
  Google Analytics uses the following cookies that remain active  after your session has ended:
  _ga: Duration 2 years; Purpose: Used to distinguish between individual users.
  _gid: Duration 1 day; Purpose: Used to distinguish between individual users.
  _gat: Duration session; Purpose: Used by Google Analytics to throttle the request rate.
  
  The processing of your data is based on your consent given by clicking the “Statistics” box in the cookie banner. If you wish to withdraw your consent, you can do so at any time by changing your cookie settings (link at the end of this data protection statement).
  
  For statistical purposes, we use Matomo, a web analytics service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. This enables analysis of your use of the website. If you consent to the storage of the cookie required for this purpose, the information generated by the cookie about your use of this website will be transmitted to and stored by a server in the European Union administered by us. IP anonymisation is activated and your IP address will be truncated. The information about your use of the website generated in this way will not be disclosed to third parties.
  
  The processing of your data is based on your consent given by clicking the “Statistics” box in the cookie banner. If you wish to withdraw your consent, you can do so at any time by changing your cookie settings (link at the end of this data protection statement).
   
• For marketing purposes, we use Meta-Pixel, an analysis tool provided by Meta.
  Meta-Pixel saves the following cookies on your device:
  _fbp: Duration 3 months; Purpose: Used to display advertising products
  Meta-Pixel is an analysis tool that enables us to analyse user behaviour on our website and measure the efficacy of our advertising. The data we collect is transmitted to Meta. Meta can connect this data with your Meta account and also use it for its own purposes.
  
  The processing of your data is based on your consent given by clicking the “Marketing” box in the Cookie banner. If you wish to withdraw your consent, you can do so at any time by changing your cookie settings (link at the end of this data protection statement).
   
• For marketing purposes, we use LinkedIn Insight-Tag, a tool provided by LinkedIn Ireland Unlimited Company Wilton Plaza, Wilton Place, Dublin 2 Ireland; ("LinkedIn"). LinkedIn Insight tags allow us to collect data from your visit to our website, including the URL, referrer URL, IP address, device and browser properties (user agent), and timestamp. The IP addresses are truncated or hashed. LinkedIn does not share any personal data with us, instead it uses the data collected on our website for reports (which do not identify you) on visitors to our website and advertising performance.
  LinkedIn also offers retargeting for website visitors on LinkedIn, allowing us to use this data to display targeted advertising beyond our website without identifying you.
  LinkedIn also uses data that does not identify you in order to optimise the relevance of advertisements and to reach members on multiple devices. You can opt out of retargeting at https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
  
  LinkedIn saves the following cookies on your device:
  _bcookie: Duration 1 year; Purpose: Used to uniquely identify devices accessing LinkedIn, to detect abuse on the platform, and for diagnostic purposes.
  _bscookie: Duration 1 year; Purpose: Used to remember that a logged in user is verified by two factor authentication and has previously logged in
  _JSESSIONID: Duration session; Purpose: Used for Cross Site Request Forgery (CSRF) protection and URL signature validation.
  _lang: Duration session; Purpose: Used to remember a user's language setting to ensure LinkedIn.com displays in the language selected by the user in their settings
  _lidc: Duration 24 hours; Purpose: Used to facilitate data center selection 
  _li_gc: Duration 6 months, Purpose: Used to store consent of guests regarding the use of cookies for non-essential purposes
  _UserMatchHistory: Duration 30 days, Purpose: Used to synchronise LinkedIn Ads IDs
  _li_fat_id: Duration 30 days, Purpose: Indirect member identifier for conversion tracking, retargeting, and analytics
  _guid: Duration 90 days, Purpose: Used to identify a LinkedIn Member for advertising through Google Ads
  _li_giant: Duration 7 days, Purpose: Indirect indentifier for groups of LinkedIn members used for conversion tracking
  
  For more information on data protection in connection with LinkedIn, please refer to https://de.linkedin.com/legal/privacy-policy?_l=de_DE.

The processing of your data is based on your consent given by clicking the “Marketing” box in the Cookie banner. If you wish to withdraw your consent, you can do so at any time by changing your cookie settings (link at the end of this data protection statement).

Matomo Tag Manager is used to manage the tags on this website (LinkedIn and Meta). This is a solution that allows marketers to manage website tags from a single interface. The tool that implements the tags is a cookie-less domain and does not store any personal data. The tool triggers other tags: these tags may in turn collect data. Matomo Tag Manager does not access this data. If a deactivation has been applied at domain or cookie level, this remains in place for all tracking tags implemented with Matomo Tag Manager. Matomo Tag Manager does not store personal data.

If you consent to the use of Google Analytics, Meta Pixel and LinkedIn Insight Tag, your data may be transferred to third countries ( including countries outside the EU, particularly the USA). The USA in particular is not recognised by the European Court of Justice as providing an adequate level of data protection due to the absence of a supervisory authority, lack of effective data protection rules, lack of effective legal protection for EU citizens to enforce your data subject rights to erasure, etc. under the EU-GDPR in the USA, and the risk that your data may be processed by US authorities for control and monitoring purposes without effective legal remedies against it. 

3) Social media plugins – YouTube and Vimeo

Our website uses social plugins, which enable us to display interactive elements or content (e.g. text, graphics, images and videos) from social media services. At present, we use plugins for YouTube and Vimeo. These plugins can send data to YouTube and Vimeo and in some circumstances can then be used by them. When integrating social plugins for YouTube and Vimeo, we use what is known as a two-click solution. This means that, if you visit our website, data will not automatically be transmitted to YouTube and/or Vimeo. Data will only be transmitted to YouTube and/or Vimeo if you click on the video’s play button. This means that the transfer of data to YouTube and/or Vimeo is carried out on the basis of your consent.

You can find further information regarding YouTube and the exact scope and purpose of data processing by YouTube in the Privacy Policy of YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The Google Privacy Policy at https://policies.google.com/privacy applies to YouTube.

You can find further information regarding Vimeo and the exact scope and purpose of data processing by Vimeo in the Privacy Policy of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. The Vimeo Privacy Policy at https://vimeo.com/privacy applies to Vimeo.

4) Google Maps

We also use the services of Google Maps on our website. This allows us to display Google’s map service directly on our website and thereby provide you with a map feature. Integrating Google Maps allows data to be sent to Google and potentially be used by Google. When integrating Google Maps into our website, we use what is known as a two-click solution. This means that, if you visit our website, data will not automatically be transmitted to Google. Data will only be transmitted to Google if you click on the corresponding button on the Google Maps display. You can find further information regarding Google Maps and the exact scope and purpose of data processing by Google in the Privacy Policy of Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA. The Google Privacy Policy at https://policies.google.com/privacy applies to Google Maps.

Further information

You have the right of access to your stored data in accordance with Art. 15 EU-GDPR, the right to rectification of inaccurate data in accordance with Art. 16 EU-GDPR, the right to erasure of data in accordance with Art. 17 EU-GDPR, the right to restriction of processing in accordance with Art. 18 EU-GDPR, the right to data portability in accordance with Art. 20 EU-GDPR as well as the right to object to unreasonable data processing in accordance with Art. 21 EU-GDPR.

If processing is performed on the basis of a declaration of consent, you have the option to revoke this consent at any time; if you do so, the legality of the processing performed on the basis of your consent prior to its revocation shall remain unaffected.

You have the right to lodge a complaint with a supervisory authority – the responsible authority in Austria is the Austrian Data Protection Authority. Its address is:

Österreichische Datenschutzbehörde
Barichgasse 40-42
A-1030 Vienna
T.: +43 1 52 152-0
E.: dsb@dsb.gv.at

We require the data we request from you to provide our services in the context of the contractual relationship and/or to provide information you have requested from us or to send you our newsletter and other information. If you do not provide the requested data, we cannot perform our services.

We do not use automated decision-making including profiling. If we process your personal data for a reason other than the reason for which the data was collected, we will notify you of this and inform you of the new purpose.

For more information on joint data processing as per Art. 26 EU-GDPR, please refer to the declaration "Data processing for the purpose of business location marketing, business location services, and network building" (PDF in German).