Data Privacy Statement

General information

Your privacy is extremely important to us. We process your data exclusively on the basis of relevant legal provisions (the General Data Protection Regulation [GDPR], the Austrian Data Protection Act [DSG], the Austrian Telecommunications Act [TKG] 2003). Below, we inform you how we process your personal data on our websites wirtschaftsagentur.at, viennabusinessagency.at, jobs.wirtschaftsagentur.at and cockpit.wirtschaftsagentur.at, and advise you of your rights and remedies under data protection regulations. The controller responsible for processing your personal data is:

Wirtschaftsagentur Wien. Ein Fonds der Stadt Wien.
Mariahilfer Strasse 20, 1070 Vienna
Email: info@wirtschaftsagentur.at
Tel.: +43 1 25200

Please do not hesitate to contact us if you have any queries, complaints or suggestions regarding data protection. The data protection officer's contact details are as follows:

Harald Kudlich
Mariahilfer Strasse 20, 1070 Vienna
Email: kudlich@wirtschaftsagentur.at
Tel.: +43 1 25200 853

We process the data you provide to us as follows:

1. Data processing when you contact us

When you contact us (e.g. by email or telephone), your data is processed in order to take steps prior to entering into a contract or to fulfil a contract for the processing or fulfilment of your request.

2. Data processing when you register for a user account

When you register for a user account on our websites, we process the data you provide during the registration process in order to take steps prior to entering into a contract or to fulfil a contract to provide the user account. Data will not be disclosed to third parties, or will only be disclosed if you have expressly agreed to such disclosure.

3. Data processing in connection with our consulting activities

If you engage our consultancy services, we process your data for the purpose of carrying out such consulting and for the formal handling of the business to be conducted by us as part of our services. The processing of your data is carried out to fulfil a contract or is founded on a legal basis within the context of a business relationship (or for the purpose of conducting such a relationship).

The transfer of data relevant to each individual case is founded on a legal basis or is carried out in order to fulfil a contract. To the extent necessary, data is transferred to the following categories of recipients:

Banks, legal representatives, auditors, audit and tax advisory firms, courts, administrative authorities, debt collection agencies, lenders, contractual and business partners, insurance companies, Statistics Austria.

We process your data only for as long as necessary to fulfil the contractual relationship or to comply with legal obligations (e.g. seven years in accordance with legal retention obligations under tax and company law ).

4. Data processing in connection with the administration of grants

If you apply to us for a grant, we will process your data for the formal handling of the business we are required to conduct as part of our services (processing and administering grant applications, disbursement of grants, etc.). The processing of your data is carried out to fulfil a contract or is founded on a legal basis within the context of a business relationship (or for the purpose of conducting such a relationship).

We process your data only for as long as necessary to fulfil the contractual relationship, to comply with legal obligations, or within the scope of our obligations as an enterprise subject to audit by the Court of Auditors (a maximum of 30 years in accordance with the limitation period set out in Section 1478 of the Austrian Civil Code [ABGB]).

5. Data processing in connection with recruitment

We carry out recruitment and selection on our own behalf and, in some cases, on behalf of our subsidiaries and affiliates. The relevant job advertisements always specify the enterprise for which the recruitment is being carried out. To register on our recruitment platform, you must create an application profile. After providing your email address, you will first receive a link to create an application profile.

The data you enter and upload during registration and on the job portal will be processed for the purpose of conducting the recruitment process and to assess your suitability, qualifications and professional performance in relation to the position to be filled. Your data is processed in order to take steps prior to entering into a contract or on the basis of our legitimate interest in conducting an efficient recruitment process.

The data relevant to each individual case will be transferred to the enterprise you are applying to in order to fulfil a contract. We use a processor, eRecruiter GmbH, OK Platz 1a, 4020 Linz, Austria (company registration number 459812w), to operate the electronic recruitment platform.

Your personal data will be stored for as long as the relevant purpose remains valid. If you are applying for a specific advertised vacancy or submitting a speculative application, your data will be retained for a further six months after the recruitment process has ended, after which it will be erased. This retention period may be extended to three years if you have given your consent by ticking the box provided for this purpose. After three years have elapsed, the data will be automatically erased. If you have an application currently in process when your retention period expires, the retention period will be extended until the current application process has been completed.

6. Data processing for the holding of events

Your data is processed in order to fulfil a contract or on a legal basis – provided you take part in our events – for the organisation and delivery of the event concerned.

We may take photographs and video recordings of you during the event for the purpose of documenting the event. The processing of these images is based on our legitimate interest in documenting the event and reporting on it in the media (for example, in journals, magazines, publications, on websites and social media platforms).

7. Data processing for the purposes of direct marketing

If we have received your contact details in connection with your use of our services, you may receive communications from us by post, email and text message promoting our own similar products and services. In this case, the processing of your data is carried out on the basis of our legitimate interest in initiating business relating to our own range of services. This legitimate interest stems from our interest in sending you notifications to keep you regularly informed about news, current offers and events, and to promote our own range of services. You may object to the processing of your data for the purposes of direct marketing at any time.

If you subscribe to our newsletter, you will receive regular information from us about ourselves and our range of services. The legal basis for the processing is your consent. You can unsubscribe from a newsletter to which you have subscribed at any time.

8. Image processing for the purposes of preventative protection of persons or property

The processing of image recordings is carried out on the basis of an overriding legitimate interest within the meaning of Section 12 of the Austrian Data Protection Act (DSG) (video surveillance on some of our premises) as a preventative measure for tracing criminal acts and to facilitate the investigation of criminal offences.

9. Data processing in connection with the conclusion of cooperation agreements and the submission of reports within the meaning of Section 2 of the Austrian Media Cooperation and Funding Transparency Act (MedKF-TG)

We process data of our cooperation partners in order to conclude cooperation agreements for the purposes of the cooperation, whereby the cooperation partners provide advertising services and we make a financial contribution in return for the advertising services provided. In connection with the conclusion of the cooperation agreement with you, we process your data on a contractual basis (Article 6(1)(b) GDPR), namely for the purposes of initiating, maintaining and performing the cooperation agreement.

We also process your data in order to comply with the provisions of Section 2(1) of the Austrian Media Cooperation and Funding Transparency Act (MedKF-TG) concerning media cooperation and advertising contracts, which include placements of adverts specified in the cooperation agreement on websites, in electronic newsletters and mobile apps, and on advertising displays such as perimeter boards, large-scale posters or other advertising spaces. Under Section 2(1) MedKF-TG, a reporting obligation exists in relation to all media, regardless of whether they are periodical media or not. Data processing is carried out in order to comply with a legal obligation pursuant to Article 6(1)(c) GDPR.

We process data that we receive through your use of our website as follows:

1. Server logs

When you visit our website, the web server collects usage data (known as server logs). Such collection is necessary in order to enable the connection to our server and the use of our website. The following server logs are collected: the IP address of the requesting computer, together with the date, the time, the request, which file is requested (name and URL); the amount of data transferred to you; a message indicating whether the request was successful; identification data of the browser and operating system used; and the website from which access was made (if access is via a link).

The legal basis for the processing is our legitimate interest in ensuring system security, administering the website in a technical sense and optimising service quality. In the event of a cyberattack, this data will be passed on to law enforcement authorities. No further disclosure to third parties will take place. The server logs are stored for a maximum of six months.

2. Cookies and enhanced conversion tracking

We use cookies on our website to enable the use of certain functions. Cookies are small text files that the website stores on your computer in order to recognise you. They may contain information about your use of the website. The information contained in the cookies is used to remember your individual choices and restore your preferences on your next visit. We also use cookies to compile non-personalised statistics. Most web browsers accept cookies automatically. You can prevent this by changing your browser settings. You can remove cookies stored on your computer at any time by deleting the temporary internet files. Where the sole purpose of data processing is to carry out or facilitate the transmission of a message via an electronic communications network, or where data processing is strictly necessary to enable us to provide you with our service which you have expressly requested, the processing of this data is carried out on the basis of our legitimate interest.

In all other cases, the processing of data is carried out on the basis of your consent.

You can access further information about cookies (name, purpose, operator, storage period, etc.) at any time by clicking on the 'Privacy' function, which appears dynamically in the bottom left-hand corner of our website. If you wish to change or withdraw your consent to the use of cookies, you can do so here at any time.

We use services provided by Google, Meta, Adform and LinkedIn on our website on a case-by-case basis. Such use takes place only if you consent to it (for each of these services individually). If you consent to their use by ticking the relevant box in the cookie banner on our home page, data may be transferred to third countries (including outside the EU, in particular the USA).

If you have given your consent, we use Google Ads Enhanced Conversions. Any personal data you provide as part of a conversion (e.g. via a contact form or when registering), in particular your email address, telephone number or name, may be pseudonymised using the SHA-256 hashing algorithm before being transmitted. The hashed data is transmitted to Google and compared there with existing hashed information in order to assign conversions to Google Ads campaigns more reliably. The purpose of this processing is to improve how we measure the effectiveness of our advertising campaigns.

3. Video embedding via 'Streamdiver'

For video streaming and management on our website we use the external service 'Streamdiver', which is operated in Austrian data centres. The content delivery network used by Streamdiver is also operated exclusively in data centres in Europe and is therefore subject to the GDPR.

Streamdiver only ever processes personal data to the extent that this is technically strictly necessary. The processing of your IP address is technically necessary in order to deliver data to your browser.

For technical reasons, certain additional data and information must also be collected and stored when using the Streamdiver platform, e.g. the pages visited, the time and duration of the visit and data supplied by the browser being used (e.g. regarding the operating system and system settings).

Streamdiver uses this data and information anonymously to make its service as user-friendly as possible and for technical optimisation.

This data is not used to personally identify visitors to this website. Further information can be found here: Self-Organizing Video Platform - Streamdiver

4. Embedding of print data, texts and photos via 'pagestrip'

We use the external service 'pagestrip' to embed reports and white papers on our website. Pagestrip is operated by the Austrian company alice interactive GmbH. The data is hosted directly by pagestrip and the infrastructure is operated by Amazon Web Services via Amazon Data Services Austria GmbH, which is based in Austria. For the embedding, pagestrip uses, among others, US-based services such as 'Cloudflare' and 'Fastly'.

Further information can be found here: pagestrip.com – Visual storytelling without compromises; Connect, protect, and build everywhere | Cloudflare; Build, Secure, and Deliver. Instantly. | Fastly

Further information

You have the right to obtain information about the stored data under Article 15 GDPR, to obtain rectification of inaccurate data under Article 16 GDPR, to obtain the erasure of data under Article 17 GDPR, to obtain restriction of processing of data under Article 18 GDPR, to data portability under Article 20 GDPR, and to object to unreasonable data processing under Article 21 GDPR.

Where processing is based on a declaration of consent, you have the right to withdraw your consent at any time, without this affecting the lawfulness of processing carried out on the basis of the consent up to the time of withdrawal.

You have the right to lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority. The address is:

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
Email:

The data we ask you to provide is needed in order to deliver our services within the scope of the contractual relationship and to supply information you have requested, or to send you our newsletters and other information. If you do not provide the collected data, we will be unable to provide our services.

We do not carry out automated decision-making, including profiling. If we process your personal data for a purpose other than that for which we have collected it, we will notify you accordingly and inform you of the other purpose.

Further information about joint data processing under Article 26 GDPR can be found in the statement "Data processing for the purpose of business location marketing, setting up business operations and network development" (PDF).