Data Protection Statement
General information
We are committed to protecting your personal data. We process your data exclusively on the basis of legal provisions (GDPR, Data Protection Act (DSG), Telecommunications Act (TKG) 2003). The following information explains how we process your personal data in relation to our websites wirtschaftsagentur.at, viennabusinessagency.at, jobs.wirtschaftsagentur.at and cockpit.wirtschaftsagentur.at as well as the claims and rights to which you are entitled in accordance with the regulations of data protection law.
The Data Controller responsible for the processing of your personal data is the
Vienna Business Agency. A service offered by the City of Vienna.
Mariahilfer Strasse 20, 1070 Vienna
E.: info@wirtschaftsagentur.at
T.: +43 (0)1 25200
We are always happy to assist with any complaints, questions or feedback regarding data protection. The contact details for our Data Protection Officer are:
Harald Kudlich
Mariahilfer Strasse 20, 1070 Vienna
E.: kudlich@wirtschaftsagentur.at
T.: +43 (0)1 25200 853
We process data you disclose to us as follows
1. Data processing in the context of making contact
If you contact us (e.g. by email or by telephone), we will process your data in order to perform pre-contractual measures and/or to process and/or handle your query for the purpose of contract fulfilment.
2. Data processing in the context of user account registration
If you register for a user account on our websites, we will process data you disclose in the course of registering in order to perform pre-contractual measures and/or to fulfil a contractual relationship for the provision of the user account. Your data will not be disclosed to third parties or will be disclosed only if you have given your express prior consent to this disclosure.
3. Data processing in the context of our consultancy activities
If you use our consultancy service, we will process your data to provide this consultancy and to formally examine the business cases to be addressed as part of our service. We process your data to fulfil a contractual relationship and/or with a lawful basis in the context of a business relationship (and/or to facilitate this relationship).
The disclosure of the relevant data in an individual case has a lawful basis and/or serves to fulfil a contractual relationship. Where appropriate, data may be disclosed to the following categories of recipients:
Banks, legal representatives, certified public accountants, auditors, tax advisers, law courts, administrative authorities, collection agencies, third-party lenders, contractual and business partners, insurance providers and Statistik Austria.
We only process your data for as long as necessary for fulfilment of the contractual relationship and/or as long as is dictated by legal obligations (such as 7 years as per retention periods under tax and company law).
4. Data processing in the context of processing funding
If you apply for funding through us, we will process your data to formally examine the business cases to be addressed as part of our service (processing and administration of funding applications, payment of funding, etc.). We process your data to fulfil a contractual relationship and/or with a lawful basis in the context of a business relationship (and/or to implement this relationship).
The disclosure of the relevant data in an individual case has a lawful basis and/or serves to fulfil a contractual relationship. Where appropriate, data may be disclosed to the following categories of recipients:
Banks, legal representatives, certified public accountants, auditors, tax advisers, law courts, administrative authorities, collection agencies, third-party lenders, contractual and business partners, insurance providers and Statistik Austria.
We only process your data for as long as necessary for fulfilment of the contractual relationship and/or as long as is dictated by legal obligations and/or in the context of our obligations as a company subject to mandatory auditing by the auditing courts (at most 30 years in accordance with the limitation period set down in Section 1478 Austrian Civil Code (ABGB)).
5. Data processing in the context of recruitment
We perform recruitment searches and personnel selections on our own behalf and, in some cases, for our subsidiaries and associate companies. Each job advertisement always states the company to which the position relates. You must create an application profile (= a user account) in order to register on our recruitment platform. After entering your email address, you will receive a link to create an application profile.
We process the data you enter and upload in the course of registration and in the job portal for the purpose of conducting the application procedure to assess your suitability, level of qualification and professional performance in relation to the position. We process your data in order to perform pre-contractual measures and/or on the basis of a legitimate interest in conducting an efficient application process.
We disclose the relevant data in each individual case in order to fulfil a contractual relationship to the company to which you are applying. We use a data processor – eRecruiter GmbH, OK Platz 1a, A-4020 Linz (Company no. 459812w) – to operate our electronic recruitment platform.
Your personal data will be stored for as long as the respective storage purpose exists. In the case of an application for a specific advertised position and/or in the case of a speculative application, your data will be retained for 6 months after conclusion of the recruitment process, after which time it will be deleted. This retention period can be extended to 3 years if you give your consent to this by clicking the corresponding box. This data will be deleted after this three-year period. If you have an active application upon expiry of the retention period, the retention period will be extended to the conclusion of the active application process.
6. Data processing for the execution of events
We process your data to fulfil a contractual relationship and/or with a lawful basis – provided that you participate in our events – in order to organise and implement the event.
The disclosure of the relevant data in an individual case has a lawful basis and/or serves to fulfil a contractual relationship. Where appropriate, data may be disclosed to the following categories of recipients:
Banks, legal representatives, certified public accountants, auditors, tax advisers, law courts, administrative authorities, collection agencies, third-party lenders, contractual and business partners, insurance providers and Statistik Austria.
We may take photographs and video recordings of you during the event while documenting the event. We process these images on the basis of our legitimate interest in documenting the event and facilitating media reports about the event (such as in newspapers, magazines, publications or on websites and social media platforms).
7. Data processing for the purpose of direct advertising
If we have received your contact information in the context of the use of our services, you may receive messages by post, email and SMS to promote other, similar products and services we offer. In this case, we process your data on the basis of our legitimate interest in initiating business contact regarding services we offer. This legitimate interest is the consequence of our interest in sending you messages to inform you of news, current offers and events on a regular basis and to advertise our service offer. You can object to the processing of your data for the purpose of direct advertising at any time.
If you register for our newsletter, we will regularly send you information about us and the services we offer. Your consent is the lawful basis for this processing. You can unsubscribe from our newsletter at any time.
8. Image processing to facilitate the preventive protection of people and property
We perform image processing on the basis of a prevailing legitimate interest within the meaning of Section 12 Austrian Telecommunications Act or DSG (regarding video monitoring in some of our premises) as a preventive measure, to ensure that any criminal acts can be traced and to facilitate the investigation of criminal offences.
We process data we receive through your use of our online presence as follows
1. Server logs
If you visit our website, our web server will collect usage data (known as server logs). This data collection is necessary to establish a connection to our server and facilitate the use of our website in technical respects. We collect the following server logs: the IP address of the requesting computer, together with the date, time, request, which file was requested (name and URL), the volume of data transmitted to you, notification of whether the request was successful, identification data for the browser and operating system used, and the website from which our website was accessed (if our website was accessed via a link).
The lawful basis for this processing is our legitimate interest in safeguarding our system, administering technical aspects of our website and optimising the quality of our service. In the event of a cyberattack, we will pass this data on to law enforcement agencies. Beyond this, data is not disclosed to third parties. We store server logs for a maximum of six months.
2. Cookies
We use cookies on our website to facilitate the use of certain functions. Cookies are small text files that our website places on your computer in order to identify it again in future. These files may contain information regarding use of the website. The information contained in the cookies serves to save the individual selections you make in order to restore these to the state in which you left them the next time you access the page. We also use cookies to generate non-personalised statistics. Most web browsers automatically accept cookies. You can prevent this by configuring your browser settings accordingly. You can remove cookies stored on your computer at any time by deleting temporary internet files. If the sole purpose of data processing is to execute or facilitate the transmission of a message via an electronic communication network or if the data processing is essential for us to provide services to you that you have expressly requested, we will process this data on the basis of our legitimate interest.
In all other cases, we will process data on the basis of your consent. In this case, we will still explicitly indicate this to you.
We use services offered by the providers listed below to process data regarding your usage of our website in order to tailor it to your interests as much as possible.
- For statistical purposes, we use Google Analytics, an internet analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, which are text files that are stored on your computer and make it possible to analyse your use of the website. The information generated by the cookie regarding your use of the website will usually be transmitted to a Google server in the USA and stored there. We use IP anonymisation, which means that your IP address is truncated within European Union member states and in other signatory countries of the Agreement on the European Economic Area. Only in exceptional circumstances will your full IP address be transmitted to a Google server in the USA before being truncated. Google will use this information on our behalf in order to analyse your use of this website, to compile reports regarding website activities and to provide us with additional services relating to usage of the website and the internet. The IP address transmitted by your browser in the context of Google Analytics will not be combined with other Google data. You can block the use of cookies by configuring your browser software accordingly; please note, however, that you will then be unable to use the full scope of all functions on the website. Furthermore, you can prevent data generated by the cookie relating to your use of the website (incl. your anonymised IP address) from being collected, transmitted to and processed by Google by downloading and installing the browser plugin available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Google Analytics uses the following cookies that extend beyond your session:
_ga: duration 2 years; purpose: used to distinguish individual users.
_gid: duration 1 day; purpose: used to distinguish individual users.
_gat: duration session; purpose: used by Google Analytics to throttle the request rate.
The processing of your data is based on your consent given by clicking the “Statistics” box in the cookie banner. If you wish to revoke your consent, you need to delete the cookies in your browser.
- For marketing purposes, we use Facebook Pixel, an analysis tool provided by Facebook.
Facebook Pixel is an analysis tool that enables us to analyse user behaviour on our website and measure the efficacy of our advertising.
Facebook Pixel saves the following cookies on your device:
_fbp: duration 3 months; purpose: displays advertising products
In addition to cookies, Facebook Pixel also uses tracking pixels for analytical purposes. A tracking pixel is a small, invisible graphic placed through your web browser. This tracking pixel allows us to monitor how you use our website if you reach it via an advertisement on Facebook. The data we collect is transmitted to Facebook. Facebook can connect this data with your Facebook account and also use it for its own purposes.
You can find further information on Facebook and the scope and purpose of data processing in the Facebook Data Policy https://www.facebook.com/privacy/explanation. The Data Controller responsible for the data processing is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The processing of your data is based on your consent given by clicking the “Marketing” box in the cookie banner. If you wish to revoke your consent, you need to delete the cookies in your browser.
3. Social media plugins – YouTube and Vimeo
Our website uses social plugins, which enable us to display interactive elements or content (e.g. text, graphics, images and videos) from social media services. At present, we use plugins for YouTube and Vimeo. These plugins can send data to YouTube and Vimeo and in some circumstances can then be used by them. When integrating social plugins for YouTube and Vimeo, we use what is known as a two-click solution. This means that, if you visit our website, data will not automatically be transmitted to YouTube and/or Vimeo. Data will only be transmitted to YouTube and/or Vimeo if you click on the video’s play button. The transmission of data to YouTube and/or Vimeo is therefore based on your consent.
You can find further information regarding YouTube and the exact scope and purpose of data processing by YouTube in the Privacy Policy of YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The Google Privacy Policy at https://policies.google.com/privacy applies to YouTube.
You can find further information regarding Vimeo and the exact scope and purpose of data processing by Vimeo in the Privacy Policy of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. The Vimeo Privacy Policy at https://vimeo.com/privacy applies to Vimeo.
4. Google Maps
We also use the services of Google Maps on our website. This allows us to display Google’s map service directly on our website and thereby provide you with a map feature. Integrating Google Maps allows data to be sent to Google and potentially be used by Google. When integrating Google Maps into our website, we use what is known as a two-click solution. This means that, if you visit our website, data will not automatically be transmitted to Google. Data will only be transmitted to Google if you click on the corresponding button on the Google Maps display. You can find further information regarding Google Maps and the exact scope and purpose of data processing by Google in the Privacy Policy of Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA. The Google Privacy Policy at https://policies.google.com/privacy applies to Google Maps.
Further information
You have the right of access to your stored data in accordance with Art. 15 GDPR, the right to rectification of inaccurate data in accordance with Art. 16 GDPR, the right to erasure of data in accordance with Art. 17 GDPR, the right to restriction of processing in accordance with Art. 18 GDPR, the right to data portability in accordance with Art. 20 GDPR as well as the right to object to unreasonable data processing in accordance with Art. 21 GDPR.
If processing is performed on the basis of a declaration of consent, you have the option to revoke this consent at any time; if you do so, the legality of the processing performed on the basis of your consent prior to its revocation shall remain unaffected.
You have the right to lodge a complaint with a supervisory authority – the responsible authority in Austria is the Austrian Data Protection Authority. Its address is:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
Telephone: +43 (0)1 52 152-0
Email: dsb@dsb.gv
We require the data we request from you to provide our services in the context of the contractual relationship and/or to provide information you have requested from us or to send you our newsletter and other information. If you do not provide the requested data, we cannot perform our services.
We do not use automated decision-making including profiling. If we process your personal data for a reason other than the reason for which the data was collected, we will notify you of this and inform you of the new purpose.
Further information on joint data processing according to Art 26 DSGVO can be found in the declaration "Data processing for the purpose of business location marketing, business settlements and network building" (PDF). (PDF in German)