Data Protection Statement

General Information

The protection of your personal data is a top priority for us. We process your data exclusively on the basis of legislation (EU GDPR, Austrian Data Protection Act, Austrian Telecommunications Act 2003). This document provides information on how we process your personal data within our websites wirtschaftsagentur.at, viennabusinessagency.at, jobs.wirtschaftsagentur.at and cockpit.wirtschaftsagentur.at and your claims and rights under data protection regulations. The entity responsible for processing your personal data is

Vienna Business Agency. A service offered by the City of Vienna.
Mariahilfer Strasse 20, 1070 Vienna
Email: info@wirtschaftsagentur.at
Tel. +43 1 25200

If you have any complaints, questions or suggestions regarding data protection, we will be happy to assist you at any time. The contact details of the Data Protection Officer are:

Harald Kudlich
Mariahilfer Strasse 20, 1070 Vienna
Email: kudlich@wirtschaftsagentur.at
Tel.: +43 1 25200 853

We process the data that you provide to us as follows:

1. Data processing when you contact us

If you contact us (e.g. by email or telephone), your data will be processed to carry out pre-contractual measures or to fulfil the contract for processing or handling your request.

2. Data processing when you register for a user account

If you register for a user account on one of our websites, we process the data provided during your registration to carry out pre-contractual measures or to fulfil a contractual relationship for the provision of the user account. The data will not be transmitted to a third party unless you have expressly agreed to such transmission.

3. Data processing when we provide consulting services

If you receive consulting services from us, we process your data to manage the service and to formally handle the business cases we are responsible for as part of our services. Your data is processed to fulfil a contractual relationship or in accordance with legal requirements as part of a business relationship (or to process it).

In each case, the relevant data is transmitted in accordance with legal requirements or to fulfil a contractual relationship. If necessary, data will be transmitted to the following categories of recipients:

banks, legal representatives, public accountants, auditors and tax consultants, courts, administrative authorities, debt collection agencies, third-party lenders, contractual and business partners, insurance companies, Statistics Austria.

We only process your data for as long as necessary to fulfil the contractual relationship or in accordance with legal obligations (approximately 7 years in accordance with tax and corporate law retention obligations).

4. Data processing when we process funding

If you apply for funding from us, we will process your data as part of the formal handling of the business cases we are responsible for as part of our services (processing and administration of funding applications, settlement of funding, etc.). Your data is processed to fulfil a contractual relationship or in accordance with legal requirements as part of or to process a business relationship.

We only process your data for as long as is necessary to fulfil the contractual relationship, in accordance with legal obligations, or within the scope of our obligations as a company subject to auditing by the Austrian Court of Auditors (Rechnungshof), which is a maximum of 30 years pursuant to the limitation period of Section 1478 of the Austrian Civil Code.

5. Data processing when recruiting

We search and select personnel for ourselves and sometimes also for our subsidiaries and associated companies. The job advertisements always state the company being recruited for. You need to create an application profile (user account) to register on our recruiting platform. After entering your email address, you will receive a link to create an application profile.

The data you enter and upload during registration and in the job portal will be processed for the purpose of processing your application in order to assess your suitability, ability and qualifications with regard to the position(s) in question. Your data is processed to carry out pre-contractual measures or due to our legitimate interest in carrying out an efficient application process.

In each case, the relevant data is transmitted to the company to which you are applying in order to fulfil a contractual relationship. To operate the electronic recruiting platform, we use a processor – eRecruiter GmbH, OK Platz 1a, 4020 Linz (Commercial Register Number FN 459812w).

Your personal data will be stored for as long as the relevant purpose applies. If you apply for a specific advertised position or send an unsolicited application, your data will be retained for a further 6 months after the recruiting process has concluded, after which it will be deleted. This retention period can be extended to 3 years if you have given your consent by clicking on the box provided. After 3 years, the data will be deleted. If you still have an ongoing application when your retention period expires, the retention period will be extended until the current application process is completed.

6. Data processing for handling events

Your data is processed to fulfil a contractual relationship or on a legal basis – if you take part in our events – for the organisation and management of the relevant event.

We may take photographs and video recordings of participants during events for documentation purposes. Image processing is based on our legitimate interest in documenting the event and its media coverage (e.g. in journals, magazines, publications or on websites and social media platforms).

7. Data processing for direct marketing purposes

If we have received your contact information in connection with the use of our services, you may receive communications from us by post, email or SMS which market our own similar products and services. In this case, this processing of your data is based on our legitimate interest in initiating business in relation to our range of services. This legitimate interest arises from our interest in sending you messages to regularly inform you about news, current offers and events, as well as to advertise our own range of services. You can object to the processing of your data for direct marketing purposes at any time.

If you subscribe to our newsletter, you will receive a regular newsletter from us with information about our range of services and activities. The legal basis for processing is your consent. You can unsubscribe from a newsletter at any time.

8. Image processing for the purposes of preventative protection of persons or property

Image recordings are processed on the basis of a predominant legitimate interest as defined by Section 12 of the Austrian Data Protection Act (video surveillance at some of our properties) as a preventative measure and to ensure the traceability of criminal acts and enable the investigation of criminal offences.

We process data that we receive through your use of our online presence as follows:

1. Server logs

When you visit our website, the web server collects usage data (server logs). This collection is necessary for the technical establishment of a connection to our server and the use of our website. The following server logs are collected: the IP address of the requesting computer, together with the date, time, request, file requested (name and URL), amount of data transferred to you, a message as to whether the request was successful, identification data of the browser used, operating system used, and website from which access was made (if access was via a link).

The legal basis for processing is based on our legitimate interest in ensuring system security, technically administering the website and optimising service quality. This data will be passed on to law enforcement authorities if there has been a hack attack. No further transmission to third parties will occur. The server logs are stored for a maximum of six months.

2. Cookies

We use cookies on our website to enable the use of certain functions. Cookies are small text files that the website stores on your computer in order to recognise it. These may contain information about the use of the website. The information contained in the cookies is used to save the individual selections you have made in order to then restore them when you access the respective page again. We also use cookies to create non-personalised statistics. Most web browsers automatically accept cookies. You can prevent this by changing your browser settings. You can remove cookies stored on your computer at any time by deleting temporary internet files. If the sole purpose of the data processing is to carry out or facilitate the transmission of a message over an electronic communications network or if the data processing is strictly necessary to enable us to provide you with our service that you have expressly requested, this data will be processed on the basis of our legitimate interest.

In all other cases, the data is processed based on your consent.

You can access further information about the cookies (name, purpose, operator, storage period, etc.) at any time by accessing the Privacy function, which is dynamically displayed at the bottom left of the website page. If you want to change or revoke your consent to the use of cookies, you can do this here at any time.

We occasionally use services from Google, Meta and LinkedIn for our website. This use only takes place with your individual consent to each service. If you consent to the use of these services, your data may be transmitted to third countries (including outside the EU, especially the USA) is possible. The USA in particular is not considered by the European Court of Justice to have an adequate level of data protection, as there is no supervisory authority, no real data protection regulations, no effective legal protection for EU citizens to enforce their data subject rights to deletion, etc. in the USA as there is under GDPR and there is a risk of your data being processed by US authorities for monitoring and surveillance purposes without effective legal remedies.

3. Social media plugins – YouTube and Vimeo

Our website uses so-called “social plugins”, which enable us to show you interactive elements or content (e.g. text posts, graphics, images and videos) from social media services. We currently use plugins from the services YouTube and Vimeo. Through these plugins, data can be sent to YouTube and Vimeo and, if necessary, used by them. We use the so-called “two-click solution” when integrating the social plugins from YouTube and Vimeo. When you visit our website, data is not automatically transmitted to YouTube and/or Vimeo. Only when you click on the Play button of the video will data be transmitted to YouTube and/or Vimeo. The transmission of data to YouTube and/or Vimeo is therefore based on your consent.

Further information about YouTube and the exact scope and purpose of data processing by YouTube can be found in the privacy policy of YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The Google privacy policy applies to YouTube https://policies.google.com/privacy

Further information about Vimeo and the exact scope and purpose of data processing by Vimeo can be found in the privacy policy of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. The Vimeo privacy policy applies to Vimeo https://vimeo.com/privacy

4. Google Maps

We also use Google Maps on this website, which allows us to show you Google's map service directly on our website and thus enable you to use the map function. By integrating Google Maps, data can be sent to Google and, if necessary, used by Google. We use the so-called “two-click solution” when integrating Google Maps into our website. When you visit our website, data is not automatically transmitted to Google. Only when you click on the corresponding button on the Google Maps map will data be transmitted to Google. Further information about Google Maps and the exact scope and purpose of data processing by Google can be found in the of Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA. The Google privacy policy applies to Google Maps https://policies.google.com/privacy

Further information

You have the right to information about your stored data in accordance with Art. 15 GDPR, to correct inaccurate data in accordance with Art. 16 GDPR, to delete data in accordance with Art. 17 GDPR, to restrict the processing of data in accordance with Art. 18 GDPR, and to data portability in accordance with Art. 20 GDPR, and to object to unreasonable data processing in accordance with Art. 21 GDPR.

If the processing takes place on the basis of a declaration of consent, you may revoke your consent at any time without this affecting the lawfulness of the processing that took place on the basis of the consent up to the point of revocation.

You have the right to complain to the national supervisory authority – the responsible body in Austria is the Data Protection Authority (Datenschutzbehörde). The address is:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Telephone: +43 1 52 152-0
Email: dsb@dsb.gv.at

We need the data that we ask you to provide in order to provide our services as part of the contractual relationship, to provide information that you have asked us for, or when sending out our newsletters and other information. If you do not provide the data, we cannot provide our services.

We do not carry out automated decision-making, including profiling. If we process your personal data for a purpose other than that for which we collected the data, we will disclose this fact to you and inform you of that other purpose.

Further information on joint data processing in accordance with Art. 26 GDPR can be found in the Declaration "Data processing for the purpose of business location marketing, company settlements and network development" (PDF).