Data protection

Please note that the German version of this Privacy Policy is the original and is authoritative in case of any interpretation issues. Translations are provided for informational purposes only and are not legally binding.

Data protection information

The protection of your personal data is very important to us, which is why we would like to list all the information about the processing and storage of your data when you visit our website and in our company.

In order to be able to use all the functions and services of our website, it is necessary to collect your personal data. However, the processing and storage only takes place in accordance with the legal guidelines and requirements of the General Data Protection Regulation (GDPR), the Data Protection Act (DSG) and the Telecommunications Act (TKG 2021).

Responsible body

LeadMetrics GmbH

Wienerbergstraße 11, Tower B, 6th floor

1100 Vienna

Further information can be found in the imprint.

COLLECTION AND PROCESSING OF PERSONAL DATA ON THIS WEBSITE

Note: In order to protect your data as comprehensively as possible from unwanted access, we take so-called technical and organisational measures and use an encryption process on our website. Your data is transmitted over the internet from your computer to our computer and vice versa using what is known as TLS encryption. TLS stands for "Transport Layer Security" and is an encryption protocol for data transmission on the internet. You can usually recognise "TLS" by the fact that the lock symbol in the status bar of your browser is closed and the address begins with https://.

  1. COLLECTION OF ACCESS AND LOG DATA

This website automatically collects and stores server log file information that your browser transmits to us.  

These are

  • IP address of the user,
  • Date and time of access,
  • Type of enquiry,
  • Customer information such as type and version,
  • Operating system of the user (device, OS version of the device),
  • Referrer information (i.e. the source of the access)

The legal basis for this data processing is the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. The legitimate interest lies in being able to identify indications of unlawful use of our website (e.g. defence against hacker attacks) and to ensure a smooth connection setup.

We have concluded an order processing contract with the provider of this website, Webflow, Inc. based at 398 11th St., Floor 2, San Francisco, CA, USA, in accordance with Art. 28 GDPR. This automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.  Data transfers to Webflow, Inc. are subject to the Data Privacy Framework, the adequacy decision for the USA.  

The data collected is stored in server log files that your browser automatically transmits to us. We only store the server log files for longer in the event of attacks on our server infrastructure or other legal violations. This longer storage is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the preservation of evidence.

  1. ENQUIRIES VIA THE CONTACT FORM, E-MAIL AND TELEPHONE

Any personal data that you provide to us on a voluntary basis will of course be treated confidentially. We use the personal data you provide exclusively to process and respond to your enquiry. The legal basis for data processing is our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR. This arises from our interest in responding to enquiries from our customers, business partners and interested parties and in promoting and maintaining customer satisfaction. Another legal basis for natural persons is the initiation or fulfilment of a contract in accordance with Art. 6 para. 1 lit. b) GDPR.  

All personal data that you send to us with your enquiry will be deleted or anonymised by us no later than 2 years after the final response to you, unless a contract is concluded. The retention period of 2 years is due to the fact that you may occasionally contact us again about the same matter after a reply and refer to the previous correspondence. In our experience, we have found that after 2 years there are no more queries in response to our replies.  

  1. REGISTER AND USER ACCOUNT

A user account is required to use LeadMetrics, which can be created by providing an email address and a password. In this context, we store the IP address and the time of the respective user action on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR when you register, log in or use your user account. We do this to prevent misuse and unauthorised use, which is in our and the users' interests. In principle, we do not pass this data on to third parties unless it is necessary to enforce our claims or required by law.

Within the user account, we store information about your company (telephone number, address, e-mail address, team members and their roles), contact details of your customers (telephone numbers, campaigns, ...). This data is stored exclusively for the fulfilment of the contract in accordance with Art. 6 para. 1 lit. b) GDPR.  

We store your data for the duration of the contract. In the event of cancellation, you are obliged to back up your data in good time.  

  1. USE OF WEB ANALYSIS TOOLS AND COOKIES  

We use cookies to facilitate and improve the use of our website. Cookies are small pieces of text information that can be stored on your computer or smartphone via the browser when you visit a website. This serves to recognise the website visitor. Cookies can also provide us with information about how you use our website so that we can continuously improve the design of the website.  

Cookies themselves do not contain any personal data about users, they are only used to uniquely identify what our customers find interesting and useful on our website. We also use so-called "web beacons" (small graphic images, also known as "pixel tags" or "clear GIFs") on our website. They are used together with cookies to track general user behaviour on the website.  

The legal basis for the processing of personal data using cookies and other technologies is your consent in accordance with Art. 6 para. 1 lit. a) GDPR, which you give us via the so-called "consent banner" as soon as you visit our website for the first time.

We use cookies for the following purposes:  

  • Technically necessary: These are cookies and similar methods without which you cannot use our services, for example to display our website correctly or to use functions you have requested.
  • Convenience: With the help of these techniques, we can take into account your actual or presumed preferences for the convenient use of our website. For example, we can use your settings to display our website in a language that suits you.  
  • Statistics: These techniques enable us to compile anonymous statistics on the use of our services. This allows us to determine, for example, how we can better customise our website to the habits of our users.
  • Marketing: This allows us to show you advertising content tailored to you based on an analysis of your usage behaviour. Your usage behaviour can also be tracked across different websites, browsers or end devices using a user ID (unique identifier).

The data processed by necessary cookies is required for the purposes listed below to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 lit. f) GDPR and § 96 para. 3 TKG.  

Any use of cookies that is not absolutely technically necessary constitutes data processing that is only permitted with your express and active consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can use our so-called "Cookie Consent Tool" to set which cookie categories you would like to consent to when visiting our website.

Once cookies have been saved, you can delete them at any time via the settings of your web browser or change them via the cookie banner widget (bottom left). You can also adjust the settings of your web browser so that no cookies are stored. In this case, not all functions of our website may be available.  

As part of data processing (with the help of cookies and similar techniques for processing usage data), we may use specialised service providers, in particular from the online marketing sector. These process your data on our behalf as processors, are carefully selected and contractually bound in accordance with Article 28 GDPR. All of the above providers work for us as processors.

Technically necessary

Cookie name

Provider

Period of validity

Purpose

fs-cc

.leadmetrics.io

6 months

Saves the cookie settings

fs-cc-updated

.leadmetrics.io

6 months

Saves the cookie settings

wf_exp_uniqueId

.webflow.com

1 year

For website functions, to prevent fraud and to store a unique session identifier

wf_logout

.webflow.com

10 years

Session management for the CMS administration of Webflow (Admin only)

tracking-preferences

.webflow.com

1 year

Saves the cookie settings

ps_mode

.webflow.com

Meeting

For website functions, to prevent fraud and to store a unique session identifier

seenAnimation

.leadmetrics.io

1 day

Saves whether an animation has already been displayed

pxcts

.webflow.com

Meeting

This cookie is used for bot detection to prevent misuse.

__stripe_mid

.webflow.com

1 year

Fraud detection

__stripe-sid

.webflow.com

1 year

Fraud detection

Functional

wf_first_touch

.webflow.com

1 year

This cookie is associated with Webflow and is used to track a visitor's first touchpoint or interaction with the website. It helps to analyse the effectiveness of marketing campaigns and user acquisition channels.

wfu_contrast

.webflow.com

1 year

Similar to "wfu-docs-fontSize", this cookie is linked to a Webflow UI plugin or custom function and is used to store the preferred contrast or colour scheme for displaying documentation or content on the website. It allows users to customise their display by adjusting the contrast or colour scheme of the content.

wfu_sidebarState

.webflow.com

1 year

This cookie is associated with a Webflow UI plugin or custom function and is used to store the status or position of the sidebar menu on the website. It helps to maintain user preferences for the visibility or hiding of the sidebar menu across different pages or sessions.

wfu_theme

.webflow.com

1 year

Similar to "wfu-docs-fontSize" and "wfu-contrast", this cookie is linked to a Webflow UI plugin or custom function and is used to store the preferred theme or style settings for displaying documentation or content on the website. It allows users to customise their viewing experience by adjusting the theme or style settings of the content.

Marketing

LeadInfo

_li_id.e*

LeadInfo

Persistent

Local Storage: Tracks the individual sessions on the websites, so the website can compile statistical data from multiple visits - this data can also be used to generate leads for marketing purposes.

_li_id.e*.expires

LeadInfo

Persistent

Local Storage: Tracks the individual sessions on the websites, so the website can compile statistical data from multiple visits - this data can also be used to generate leads for marketing purposes.

_li_ses.*.expires

LeadInfo

Persistent

Local Storage: Tracks the individual sessions on the websites, so the website can compile statistical data from multiple visits - this data can also be used to generate leads for marketing purposes.

_li_ses.e*

LeadInfo

Persistent

Local Storage: Tracks the individual sessions on the websites, so the website can compile statistical data from multiple visits - this data can also be used to generate leads for marketing purposes.

snowplowOutQueue_*_post2

LeadInfo

Persistent

Local Storage: Registers statistical data about the behaviour of visitors to the website. Used by the website operator for internal analytics.

snowplowOutQueue_*_post2.expires

LeadInfo

Persistent

Local Storage: Registers statistical data about the behaviour of visitors to the website. Used by the website operator for internal analytics.

DV

www.google.com

1 day

This cookie is used to support Google's advertising services.

OTZ

consent.google.com

1 month

The "OTZ" cookie is used by Google Analytics to collect information about website traffic.

SOCS

.google.com

13 months

Saves the cookie setting

__Secure-ENID

.google.com

1 year

These cookies are required for remarketing and are used to deliver adverts and free product listings.

_ga_*

.webflow.com

1 year

Used by Google Analytics to collect data on the number of visits a user makes to the website and the dates of the first and last visit.

_ga

.webflow.com

2 years

Registers a unique ID that is used to generate statistical data on how the visitor uses the website.

ar_debug

.region1.google-analytics.com

1 year

Save and track conversions

_gcl_au

.webflow.com

13 months

to save and track conversions.

_fbp

.leadmetrics.io

3 months

This cookie is set by Facebook to display adverts either on Facebook or on a digital platform supported by Facebook advertising after visiting the website.

lastExternalReferrerTime

Meta Platforms, Inc.

Persisent

Local Storage: Determines how the user reached the website by registering their last URL address.

lastExternalReferrer

Meta Platforms, Inc.

Persisent

Local Storage: Determines how the user reached the website by registering their last URL address.

ajs_anonymous_id

.webflow.com

1 year

To save the last visit (Atlassian Jira Service Desk)

_derived_epic

.webflow.com

1 year

This cookie is placed by the JavaScript tag based on information sent by Pinterest with the advertised traffic to help identify the user.

_pin_unauth

.webflow.com

1 year

Pinterest: For saving and tracking visits to various websites.

_pxvid

.webflow.com

11 months

This cookie is linked to the Piwik PRO analytics platform and is used to track visitor behaviour and interactions with the website. It helps analyse website performance and user engagement for analysis and reporting purposes.

_rdt_uuid

.webflow.com

1 year

Posted by Reddit and used for remarketing on reddit.com.

_uetsid

.webflow.com

1 year

Bing Ads: For saving and tracking visits to various websites.

_uetvid

.webflow.com

13 months

Bing Ads: For saving and tracking visits to various websites.

AnalyticsSyncHistory

.linkedin.com

30 days

This cookie is used to store when synchronisation with the "lms_analytics cookie" has taken place.

UserMatchHistory

.linkedin.com

30 days

This cookie is used to synchronise the IDs of LinkedIn Ads.

bcookie

.linkedin.com

1 year

This cookie is a browser identifier. It is used to uniquely identify devices that access LinkedIn in order to recognise misuse of the platform.

li_gc

.linkedin.com

6 months

This cookie is used to store the consent of guests to the use of non-mandatory cookies  

li_sugr

.linkedin.com

90 days

This cookie is used to determine probabilistic matches of a user's identity outside the designated countries.

lidc

.linkedin.com

24 hours

This cookie is used to select the data centre.

Bscookie

.linkedin.com

1 year

This cookie remembers that a logged-in user has been verified with two-factor authentication and has previously logged in  

li_adsId

.leadmetrics.io

Persisent

Local Storage: The specific purpose has been added by the provider LinkedIn and will be added shortly.

Consent management via FINSWEET

We use the cookie consent technology of the company Finsweet to obtain your consent under data protection law to the storage of certain cookies on your end device or to the use of certain technologies and to document these in compliance with data protection regulations. The provider of this technology is Finsweet Inc, 2774 Harbor Rd Merrick, NY,11566-4608, USA.

Finsweet is used to obtain the legally required consent for the use of cookies. The legal basis for this is our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the legally compliant documentation and verifiability of consents (Art. 6 para. 1 lit. c) GDPR) to fulfil our accountability obligation pursuant to Art. 5 para. 2 GDPR.

LinkedIn Insight Tag

As part of the use of the conversion tracking tool "LinkedIn Insight Tag" of the company LinkedIn Ireland Unlimited, based in Ireland, we process your personal data in joint responsibility with LinkedIn in accordance with Art. 26 GDPR, provided that you have given your consent via the consent banner. You can access the joint controllership agreement on which the collaboration with LinkedIn is based here. LinkedIn is an American company based in California. Personal data is also processed in the USA. For the USA, there is currently an adequacy decision and a valid certification according to the Data Privacy Framework for the LinkedIn Corporation.  

The LinkedIn Insight Tag collects data about your use of our website. LinkedIn does not share any personal data with the website owner, but provides reports and communications (in which you are not identified) about the website audience and ad performance. LinkedIn also offers retargeting for website visitors so that the website owner can use this data to display targeted advertising outside its website without identifying the member. LinkedIn uses the data that, according to LinkedIn, does not identify you to improve the relevance of adverts and reach members across devices. You can find out more about the LinkedIn Insight Tag directly on LinkedIn. LinkedIn also uses the data for its own advertising purposes and for third-party advertising purposes in accordance with the LinkedIn Data Policy. You will also find further information on how you can assert your data subject rights described below directly against LinkedIn with regard to your data processed by LinkedIn. LinkedIn members can control the use of their personal data for advertising purposes in their account settings.

Use of Google Analytics

This website uses Google Analytics if you give your consent within the meaning of Art. 6 para. 1 lit. a) GDPR and Art. 49 para. 1 lit. a) GDPR. This is a service provided by Google Ireland Limited ("Google"), a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC (USA) ("Google").  

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable the use of the website by the user to be analysed. The information obtained by the cookies about your usage behaviour of this website is usually transferred to a Google server in the USA and stored there.   There is an adequacy decision for the USA, so that the data transfer can take place without further measures. You can view Google's certification here.

We have made the setting that your IP address will be anonymised. IP address anonymisation is carried out by Google, but within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.  

On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

The anonymised IP address transmitted by your browser as part of Google Analytics is linked to other data about you, such as your search history, personal accounts, usage data from other devices and all other data that Google has about you.  

You can view the cookies that are set in connection with Google Analytics in the list above.

You can revoke your consent at any time by making the appropriate settings directly via the cookie banner. The user and event data will be deleted after 14 months. The "Reset user data on new activity" function is activated. This means that if you visit the site again before the retention period expires, your data will not be deleted.

Facebook Pixel  

As part of the use of the so-called Facebook pixel, cookies are set on our website with your consent (see cookies with provider or name "Facebook"). In addition to us, Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook), is jointly responsible for the data processing associated with the pixel in accordance with Article 26 GDPR. You can access the agreement on which the cooperation with Facebook is based here. The pixel collects data about your use of our website and compares it with Facebook's data in order to show you customised advertising from us on Facebook's websites. Facebook also uses the data for its own advertising purposes and for third-party advertising purposes in accordance with the Facebook Data Policy. This also contains further information on how you can assert your data subject rights as described below directly against Facebook with regard to your data processed by Facebook.

LEADINFO

We use the lead generation service of Leadinfo B.V., Rotterdam, Netherlands. This recognises visits from companies to our website based on IP addresses and shows us publicly available information, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behaviour on our website and processes domains from form entries (e.g. "leadinfo.com") in order to correlate IP addresses with companies and improve the services. Further information can be found at www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. If you opt out, your data will no longer be collected by Leadinfo.

Data processing of business partners and customers

  1. Fulfilment of contractual obligations (Art. 6 para. 1 lit. b) GDPR)

The purposes of data processing arise from the implementation of pre-contractual measures that precede a contractually regulated business relationship and in the fulfilment of obligations arising from the contract concluded. To process our contract with you, we process master data such as your first name and surname, your billing address and your billing and payment data if you are a natural person.  

Processing our contracts with customers

We process master data such as first and last name, billing address and billing and payment data to process the contract. We use your e-mail address to carry out communication and to send invoices.

Payments are processed via the payment service provider "STRIPE". We provide this payment method to enable our customers to easily process recurring direct debits. This corresponds to our legitimate interest in offering an efficient and secure payment method and is based on the legal basis of legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. In this context, we also pass on data to the payment service providers insofar as this is necessary for the fulfilment of the contract (Art. 6 para. 1 lit. b. GDPR). Processing via the payment provider is neither legally nor contractually required. Without the transmission of your personal data, we cannot process a payment via this payment provider. You then have the option of choosing a different payment method.  

More information about STRIPE: Stripe Payments Europe, based in Ireland Data protection at Stripe: https://stripe.com/at/privacy  

  1. For the fulfilment of legal obligations (Art. 6 para. 1 lit. c) GDPR)

The purposes of data processing arise in individual cases from legal requirements. These legal obligations include, for example, the fulfilment of retention and identification obligations in the context of requirements for tax control and reporting obligations and data processing in the context of enquiries from authorities.

  1. For the fulfilment of our legitimate interests (Art. 6 para. 1 lit. f GDPR)

We process the contact details of contact persons at customers, interested parties, suppliers and other business partners for communication by email, telephone and post. The legal basis for data processing is the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. The legitimate interest arises from the interest in conducting or initiating the business relationship with customers, interested parties, suppliers and other business partners as well as personal contact with contact persons.  

Personal data is stored for the purpose of conducting business relationships for as long as there is a legitimate interest in doing so. It may be necessary to process the personal data provided by you beyond the actual fulfilment of the contract with business partners. The legitimate interests here are, in particular, the selection of suitable business partners, the fulfilment of compliance measures, the assertion of legal claims, defence against liability claims, the prevention of criminal offences and the settlement of claims resulting from the business relationship.

  1. Who receives the personal data you provide?

As part of the contractual relationship, we may also commission processors or service providers who may have access to your personal data. Compliance with data protection regulations is ensured by contract.

  1. Storage period

Personal data is stored for as long as is necessary to fulfil the above-mentioned purposes. This is regularly 7 years for the fulfilment of tax obligations.  

  1. Data processing to document compliance with the GDPR

Insofar as your data is processed on the basis of consent in accordance with Art. 6 para. 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR, we process your data exclusively for a specific purpose and after separate information in order to be able to prove that you have consented to the data processing in question within the framework of the accountability obligation incumbent on us in accordance with Art. 5 para. 2 GDPR.

If you assert data subject rights against us under the GDPR, we will also process and store your data in order to be able to prove that we have complied with the GDPR when processing your enquiry as part of our accountability obligations pursuant to Art. 5 (2) GDPR.

Communication via video conferencing systems

We use various tools to hold video conferences, telephone conferences and online meetings:

  • "Zoom" of the company Zoom Video Communications Inc.  
  • "Google Meeting" of the company Google Ireland Limited

You will receive access to the agreed appointments via a link provided by e-mail. You can enter the video room by clicking on the link. Before joining, you can decide for yourself whether or not to activate the video. You are muted by default and, if you wish, you must manually enable your microphone. If you switch on your camera and/or microphone, the data from your microphone and video camera will be processed during the meeting.

The following additional data may also be processed depending on the type and scope of the specific use:

  • Personal details (e.g. first and last name, e-mail address, profile picture)
  • Meeting metadata (e.g. date, time and duration of the communication, name of the meeting, participant IP address)
  • Device/hardware data (e.g. IP addresses, MAC addresses, Clint version)
  • Text, audio and video data (e.g. chat histories, video, audio and presentation recordings)
  • Connection data (e.g. phone numbers, country names, start and end times, IP addresses)

Furthermore, your personal data may be processed. This also depends specifically on your use, such as the use of the chat and the whiteboard.  

We would like to explicitly draw your attention to the fact that any information you provide during the meeting will be processed at least for the duration of the meeting.  

Legal basis

The legal basis for data processing for direct contractual partners is Art. 6 para. 1 lit. b) GDPR, for business partners or contact persons at external organisations the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. The legitimate interest lies in the organisation of virtual communication and the web conference.

We cannot rule out the possibility that data may also be routed via internet servers located outside the EU or the EEA. In some countries, e.g. the USA, there is a risk that authorities may access the data for security and surveillance purposes without you being informed or having the right to appeal. We have agreed EU standard contractual clauses as the legal basis for data transfer.

The above-mentioned providers necessarily receive knowledge of the above-mentioned data, insofar as this is contractually regulated within the framework of our order processing contract in accordance with Art. 28 GDPR. Data transfers to the USA are subject to the Data Privacy Framework. There are no other recipients.

In principle, you are not obliged to communicate with us via the above-mentioned providers. Alternatively, meetings can also be held by telephone.

We generally delete personal data when there is no need for further storage.  

Operation of social media presences

We operate the following social media presences:  

LinkedIn: https://www.linkedin.com/company/leadmetrics-gmbh/

Instagram : https://www.instagram.com/leadmetrics/  

Data processing by us:

  1. Maintaining the above-mentioned social media pages and placing ads ("adverts")

The personal data entered on social media pages, such as comments, videos, images, likes, public messages, etc. are published by the respective social media platform. We reserve the right to delete content if necessary. We may share content on our site and contact you via the social media platform, for example via the messengers offered. In addition, we regularly place adverts via our social media pages. The legal basis for this data processing is the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR, which is in the interest of our public relations and communication.  

  1. Page Insights

The social media platforms provide anonymised statistics and insights that help us gain knowledge about the types of actions people take on our site (so-called "page insights"). These Page Insights are created based on certain information about people who have visited our site.  

The legal basis for this data processing is our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR, which is based on obtaining information about the actions and visitors to our website.  

This processing of personal data is carried out by the social media platform and us as so-called joint controllers in accordance with Art. 26 GDPR. In the case of joint controllership, a separate agreement must be concluded.

LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum

Instagram : https://www.facebook.com/legal/terms/page_controller_addendum

If you wish to object to certain data processing over which we have an influence (e.g. deletion of comments), please contact us using the contact details given above.

Note: The provision of your data is neither legally nor contractually required or necessary for the conclusion of a contract. You are not obliged to provide your personal data. The consequence of not providing your data is that you will not be able to communicate with us via our social media pages, interact with us or take part in the competition. To contact us, please use the above e-mail address.  

Data processing by the operator of the social media platform:

In addition to us, there is also the operator of the social media platforms themselves. From a data protection perspective, this is also regarded as another controller that carries out its own data processing. This means that the operator is also a separate controller under the GDPR. However, we only have limited influence on data processing by the operator. Where we can exert influence (e.g. through parameterisation), we work within the scope of our possibilities to ensure that the operator of the social media platform handles data in compliance with data protection regulations. In many places, however, we cannot influence the data processing by the operator of the social media platform and do not know exactly what data they process. The respective operator will inform you about the processing of personal data in its own privacy policy:

Instagram: help.instagram.com/519522125107875

LinkedIn: https://de.linkedin.com/legal/privacy-policy?

When using the platform, your personal data is generally also processed by the respective platform operator on servers in third countries, in particular in the USA. Certain third countries are certified by the European Commission with a so-called adequacy decision. This means that the legal situation for the protection of privacy in these countries is comparable to that in the EU or the EEA. You can find more information on the current countries with an adequacy decision here. Certifications in accordance with the adequacy decision for the USA, the Data Privacy Framework, exist for Meta Platforms Inc (Facebook, Instagram). In all other cases, we conclude so-called standard contractual clauses with the platform operators for the transfer of personal data to third countries.  

Note: The operator of the social media platform uses web tracking methods. Web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we unfortunately have little influence on the web tracking methods of the social media platform. For example, we cannot switch it off. Please be aware of this: It cannot be ruled out that the provider of the social media platform uses your profile and behavioural data, for example to evaluate your habits or personal relationships and preferences, etc. We have no influence on the processing of your data by the provider of the social media platform.

Rights of data subjects

In accordance with Art. 15 para. 1 GDPR, you have the right to receive information about the personal data stored about you free of charge upon request. Furthermore, if the legal requirements are met, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR) of your personal data. If you have provided the processed data yourself, you have the right to data portability in accordance with Art. 20 GDPR.

If the data processing is based on Art. 6 para. 1 e) or f) GDPR, you have the right to object in accordance with Art. 21 GDPR. If you object to data processing, this will not take place in future unless the controller can demonstrate compelling legitimate grounds for further processing which override the data subject's interest in objecting.

If the data processing is based on consent in accordance with Art. 6 para. 1 lit. a), Art. 9 para. 2 lit. a) or Art. 49 para. 1 lit. a) GDPR, you can revoke your consent at any time with effect for the future without affecting the legality of the previous processing.

You also have the right to lodge a complaint with a data protection supervisory authority. The complaint may in particular be lodged with a supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

Contact details for the responsible data protection authority: Austrian Data Protection Authority, www.dsb.gv.at or by e-mail at dsb@dsb.gv.at  

No automated decision-making

We do not carry out automated decision-making or profiling.

Provision

Unless otherwise stated in the previous sections, the provision of personal data is not required by law or contract or necessary for the conclusion of a contract.  Failure to provide your personal data may mean that we are unable to respond to your enquiries, for example.

This data protection information was created in cooperation with the consulting firm SCALELINE Datenschutz. The legal texts are subject to copyright.