Data Protection
General Information
The protection of your personal data is a top priority for us. We process your data exclusively on the basis of legislation (EU GDPR, Austrian Data Protection Act, Austrian Telecommunications Act 2003). This document provides information on how we process your personal data within our websites wirtschaftsagentur.at, viennabusinessagency.at, jobs.wirtschaftsagentur.at, and
cockpit.wirtschaftsagentur.at and your claims and rights under data protection regulations. The entity responsible for processing your personal data is
Vienna Business Agency. A service offered by the City of Vienna.
Mariahilfer Strasse 20, 1070 Vienna
Email: info@wirtschaftsagentur.at
Tel.: +43 1 25200
If you have any complaints, questions or suggestions regarding data protection, we will be happy to assist you at any time. Contact the Data Protection Officer at:
Mr Harald Kudlich
Mariahilfer Strasse 20, 1070 Vienna
Email:
Tel.: +43 1 25200 853
We process the data that you provide to us as follows:
1. Data processing when you contact us
If you contact us (e.g. by email or telephone), your data will be processed to carry out pre-contractual measures or to fulfil the contract for processing or handling your request.
2. Data processing when you register for a user account
If you register for a user account on one of our websites, we process the data provided during your registration to carry out pre-contractual measures or to fulfil a contractual relationship for the provision of the user account. The data will not be transmitted to a third party unless you have expressly agreed to such transmission.
3. Data processing when we provide consulting services
If you receive consulting services from us, we process your data to manage the service and to formally handle the business cases we are responsible for as part of our services. Your data is processed to fulfil a contractual relationship or in accordance with requirements as part of or to process a business relationship. In each case, the relevant data is transmitted in accordance with requirements or to fulfil a contractual relationship. Data will be transmitted to the following categories of recipients as necessary: banks, legal representatives, public accountants, auditors and tax consultants, courts, administrative authorities, debt collection agencies, third-party lenders, contractual and business partners, insurance companies, Statistics Austria. We only process your data for as long as necessary to fulfil the contractual relationship or in accordance with legal obligations (approximately 7 years in accordance with tax and corporate law retention obligations).
4. Data processing when we process funding
If you apply for funding from us, we will process your data as part of the formal handling of the business cases we are responsible for as part of our services (processing and administration of funding applications, settlement of funding, etc.). Your data is processed to fulfil a contractual relationship or in accordance with requirements as part of or to process a business relationship.
In each case, the relevant data is transmitted in accordance with legal requirements or to fulfil a contractual relationship. If necessary, data will be transmitted to the following categories of recipients:
banks, legal representatives, public accountants, auditors and tax consultants, courts, administrative authorities, debt collection agencies, third-party lenders, contractual and business partners, insurance companies, Statistics Austria.
We only process your data for as long as is necessary to fulfil the contractual relationship, in accordance with legal obligations, or within the scope of our obligations as a company subject to auditing by the Austrian Court of Auditors (Rechnungshof), which is a maximum of 30 years pursuant to the limitation period of Section 1478 of the Austrian Civil Code.
5. Data processing when recruiting
We search and select personnel for ourselves and sometimes also for our subsidiaries and associated companies. The job advertisements always state the company being recruited for. You need to create an application profile (user account) to register on our recruiting platform. After entering your email address, you will receive a link to create an application profile. The data you enter and upload during registration and in the job portal will be processed for the purpose of implementing the application process in order to assess your suitability, ability and qualifications with regard to the position(s) in question. Your data is processed to carry out pre-contractual measures or due to our legitimate interest in carrying out an efficient application process. In each case, the relevant data is transmitted to the company to which you are applying in order to fulfil a contractual relationship. We use a processor to operate the electronic recruiting platform – eRecruiter GmbH, OK Platz 1a, 4020 Linz (Commercial Register Number FN 459812w).
Your personal data will be stored for as long as the relevant purpose applies. If you apply for a specific advertised position or send an unsolicited application, your data will be retained for a further 6 months after the recruiting process has concluded, after which it will be deleted. This retention period can be extended to 3 years if you have given your consent by clicking on the box provided. The data will be deleted after 3 years. If you still have an ongoing application when the retention period expires, it will be extended until your current application process is completed.
6. Data processing for organising events
Your data is processed to fulfil a contractual relationship for the organisation and management of the relevant event, or on another legal basis if you take part in one of our events. In each case, the relevant data is transmitted in accordance with legal requirements or to fulfil a contractual relationship. If necessary, data will be transmitted to the following categories of recipients:
banks, legal representatives, public accountants, auditors and tax consultants, courts, administrative authorities, debt collection agencies, third-party lenders, contractual and business partners, insurance companies, Statistics Austria. We may take photographs and video recordings of participants during events for documentation purposes. This image processing is based on our legitimate interest in documenting the event and its media coverage, for example, in journals, magazines, publications or on websites and social media platforms.
7. Data processing for direct marketing purposes
If we have received your contact information in connection with the use of our services, you may receive communications from us by post, email or SMS, which market our own similar products and services. In this case, this processing of your data is based on our legitimate interest in initiating business in relation to our range of services. This legitimate interest arises from our interest in sending you messages to regularly inform you about news, current offers and events, as well as to advertise our own range of services. You can object to the processing of your data for direct marketing purposes at any time. If you subscribe to our newsletter, you will receive a regular newsletter from us with information about our range of services and activities. The legal basis for processing is your consent. You can unsubscribe from a newsletter at any time.
8. Image processing for the purposes of preventative protection of persons or property
Images are recorded and processed on the basis of overriding legitimate interests as defined by Section 12 of the Austrian Data Protection Act (Datenschutzgesetz, or DSG) (video surveillance at some of our properties) as a precautionary measure, and to ensure the traceability of criminal acts and enable the investigation of criminal offences.
We process data that we receive through your use of our online presence as follows
1. Server logs
When you visit our website, the web server collects usage data (server logs). This collection is necessary for the technical establishment of a connection to our server and the use of our website. The following server logs are collected: the IP address of the requesting computer, together with the date, time, request, file requested (name and URL), amount of data transferred to you, a message as to whether the request was successful, identification data of the browser used, operating system used, and website from which access was made (if access was via a link).
The legal basis for processing is our legitimate interest in ensuring system security, technically administering the website and optimising service quality. This data will be passed on to law enforcement authorities if there has been a hack attack. No further transmission to third parties will occur. The server logs are stored for a maximum of six months.
2. Cookies
We use cookies on our website to enable the use of certain functions. Cookies are small text files that the website stores on your computer in order to recognise it. These may contain information about the use of the website. The information contained in the cookies is used to save the individual selections you have made in order to restore them when you access the respective page again. We also use cookies to create non-personalised statistics. Most web browsers automatically accept cookies. You can prevent this by changing your browser settings. You can remove cookies stored on your computer at any time by deleting temporary internet files. If the sole purpose of the data processing is to carry out or facilitate the transmission of a message over an electronic communications network or if the data processing is strictly necessary to enable us to provide you with a service that you have expressly requested, this data will be processed on the basis of our legitimate interest. In all other cases, data is processed based on your consent. You can access further information about cookies (name, purpose, operator, storage period, etc.) at any time by clicking on “Data Protection” , which is dynamically displayed at the bottom left of the VBA website homepage. If you want to change or revoke your consent to the use of cookies, you can do this here at any time.
We occasionally use services from Google, Meta, Adform and LinkedIn for our website. This use only takes place with your individual consent to each service. If you consent to the use of these services, your data may be transmitted to third countries (including outside the EU, especially the USA). The USA in particular is not considered by the European Court of Justice to have an adequate level of data protection, as there is no supervisory authority, no real data protection laws, and no effective legal protection for EU citizens to enforce their data subject rights to deletion, etc. in the USA as there is under GDPR, and there is a risk of your data being processed by US authorities for monitoring and surveillance purposes without effective legal remedies.
3. Video embedding using “Streamdiver”
We use Streamdiver, an external service operated in Austrian data centres, for video streaming and management on our website. The content delivery network used by Streamdiver is also operated exclusively in data centres in Europe and therefore is within the scope of the GDPR. Streamdiver generally only processes personal data to the extent that is technically absolutely necessary. The processing of your IP address is technically necessary in connection with the delivery of data to your browser. For technical reasons, certain additional data and information must also be collected and stored when using the Streamdiver platform, such as the pages used, time and duration of the visit, as well as data provided by the visitor’s browser (e.g. data regarding the operating system and the applied system settings). Streamdiver uses this data and information anonymously in order to make its service as user-friendly as possible and to optimise it technically. This data is not used to personally identify the visitor to this website. More information can be found here: Self-Organizing Video Platform - Streamdiver
Further information
You have the right to information about your stored data in accordance with Art. 15 GDPR, to correct inaccurate data in accordance with Art. 16 GDPR, to delete data in accordance with Art. 17 GDPR, to restrict the processing of data in accordance with Art. 18 GDPR, to data portability in accordance with Art. 20 GDPR, and to object to unreasonable data processing in accordance with Art. 21 GDPR.
If processing takes place on the basis of a declaration of consent, you may revoke your consent at any time without this affecting the lawfulness of the processing that took place on the basis of the consent up to the point of revocation.
You have the right to complain to the national supervisory authority – the competent authority in Austria is the Data Protection Authority (Datenschutzbehörde). The address is:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Telephone: +43 1 52 152-0
Email:
We need the data we ask you to provide in order to provide our services as part of the contractual relationship, to provide information that you have requested, or when sending out our newsletters and other information. If you do not provide this data, we cannot provide our services.
We do not carry out automated decision-making, including profiling. If we process your personal data for a purpose other than that for which we collected the data, we will disclose this fact to you and inform you of that other purpose.
Further information on joint data processing in accordance with Art. 26 GDPR can be found in the VBA document:"Data Processing for Business Location Marketing, Company Settlements and Network Development" (PDF).