In addition to the EU Regulation (GDPR), national laws also apply:
In Austria, this is the Federal Act for the Protection of Individuals with regard to the Processing of Personal Data (Data Protection Act), or DSG for short.
In Germany, the Federal Data Protection Act, or BDSG for short, applies.
Scope of application
- Our online presence (website)
- Our social media presence and e-mail communication
The responsible party within the meaning of data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:
Austrian Data Protection Authority
Mag. Dr. Andrea Jelinek
Barichgasse 40-42, 1030 Wien
+43 1 52 152-0
Data Protection Officer
Questions for the data protection officer
If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organization directly:
Your data subject rights
You can assert your data subject rights under the above contact option either against the person responsible or against the data protection officer.
- You have the right to obtain information about the personal data that is processed by us in accordance with Art. 15 DSGVO.
- You have the right to correct incorrect or incomplete personal data that we have stored about you in accordance with Art. 16 DSGVO.
- You have the right to erasure of your personal data stored by us in accordance with Art. 17 DSGVO, unless further processing is necessary from one of the following areas:
- in the case of legal claims (exercise/execution/defense).
- for the fulfillment of a legal obligation
- in the exercise of the right to freedom of expression / information
- due to public interest
In accordance with Art. 18 DSGVO, you have the right to restrict the processing of your personal data stored by us if one of the following criteria is met:
- you dispute the accuracy of your data
- you object to the erasure of your data in the event of unlawful processing
- you still need the data due to legal claims (exercise/execution/defense), but we would actually delete it because we no longer need it
- you have objected to the processing in accordance with Art. 21 DSGVO
Your right to object to the collection of data in special cases as well as to direct marketing according to Art. 21 DSGVO in detail.
If the processing is based on Art. 6 (1) (e) or Art. 6 (1) (f) DSGVO, you may object to the processing at any time, for reasons arising from your particular situation. This objection also applies to any profiling.
In the event of an objection, we will stop the processing of the relevant data; this is without prejudice to compelling legitimate grounds which we can demonstrate to you if these grounds override your interests/rights/freedoms, or the processing in question serves the exercise, assertion, or defense of legal claims (cf. objection in accordance with Art. 21 (1) DSGVO).
If we process your personal data for direct marketing purposes, you may object to this processing at any time; this also includes profiling carried out for direct marketing purposes.
In the event of an objection to direct marketing, we will stop the processing of the corresponding data (cf. objection in accordance with Art. 21 (2) DSGVO).
In accordance with Art. 20 DSGVO, you have the right to request from us a file of your personal data stored by us in a structured, common and machine-readable format. Furthermore, the right to transfer this to another responsible party.
If we process your data on the basis of consent given by you, you can revoke this consent at any time with effect for the future.
You have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 DSGVO.
Collection of general information when visiting our website
When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, your IP address, the type of web browser, the operating system used, the domain name of your Internet service provider and the like. This information is not used by us to draw conclusions about your person. It is technically necessary in order to correctly deliver the contents of web pages requested by you and is mandatory when using the Internet. In particular, they are processed for the following purposes:
- A trouble-free website usage is ensured.
- The data is evaluated to ensure system security and stability.
- To ensure that the connection from you to the website is established.
- For administrative purposes.
The processing of your personal data is based on our legitimate interest from the aforementioned purposes for data collection in accordance with Art. 6 (1) lit. f DSGVO. Recipients of the data are only the responsible party and, if applicable, order processors.
Anonymous information of this kind is statistically evaluated by us, if necessary, in order to optimize our Internet presence and the technology behind it.
Without the collection of your IP address, we cannot, or cannot completely guarantee the service or the functioning of this website. An objection is therefore excluded.
Note on data transfer to the USA
Among other things, tools from companies based in the USA are integrated on our website. If these tools are active, your personal data may be passed on to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you, as a data subject, being able to take legal action against this.
It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.
General information on data collection
We collect personal data when you provide it to us in the course of contacting us (e.g. via contact form, application, and or e-mail). This includes data such as your name, address, e-mail address or telephone number. Here we mark mandatory fields, which are absolutely necessary for the purpose of contacting us. Please refer to the respective forms for the exact data collected. This data is used in accordance with Art. 6 Para. 1 lit. b DSGVO. As soon as we have fully processed the transaction (or resulting contract, if applicable), the data will be restricted for further/other processing. After expiry of any retention periods due to tax or commercial law provisions, the data will be deleted unless you have expressly consented to further use, or we reserve the right to legally permitted, further use in accordance with this statement.
Purposes of data processing by the data controller and third parties
you have given your express consent to this,
the processing is necessary for the performance of a contract with you,
the processing is necessary for compliance with a legal obligation,
the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.
Third parties to whom we pass on your data
Since our products are sold exclusively through sales partners, your data (e.g. from the contact form) will be passed on to the bema sales partner responsible for the country or region.
We host our website via an external service provider for contract fulfillment and/or contract initiation (Art. 6 para. 1 lit. b DSGVO) and in our legitimate interest to provide our online offer professionally (Art. 6 para. 1 lit. f DSGVO). If consent to the use and storage of cookies has been requested and confirmed, the data processing is also carried out on this basis (Art. 6 para. 1 lit. a DSGVO). Any consent can be revoked at any time.
Accordingly, the personal data collected within the scope of this web offer is stored/processed on the servers of the hoster(s). In particular, this includes the IP address, time of the website visit, browser used, form requests, meta, contact and communication data, possibly contract data and other data generated via the website.
The data is only processed by the hoster(s) if this is necessary to fulfill the service obligations within the scope of the hosting.
Contact details of the hoster(s):
Weißenburger Str. 2a
Hetzner Online GmbH
We have concluded an order processing agreement (AVV) for the use of the above-mentioned service. This is a contract required by data protection law and ensures that this service only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DSGVO.
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPs.
If you send us inquiries via the contact form, this information is stored and processed by us for the purpose of processing your inquiry and in the event of follow-up questions.
If you contact us by e-mail, telephone or fax, this inquiry and all resulting personal data (name, contact details, inquiry, etc.) will be stored and processed by us for the purpose of processing your inquiry.
We do not pass on the data collected in this way without your consent.
If your request is related to the performance of a contract, or pre-contractual measures, the processing is based on Art. 6 (1) lit. b DSGVO.
In all other cases, the processing is based on our legitimate interest in the effective handling of your request (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested.
The data you send to us via contact requests will remain with us unless:
- you request us to delete it
- you revoke your consent
- the purpose of the data storage no longer applies (e.g. after the processing of your request has been completed)
Mandatory legal provisions such as statutory retention periods remain unaffected.
Please note that we may transfer your data to a sales partner (see "Third parties to whom we pass your data"). This serves the purpose of contract initiation/fulfillment.
Deletion or blocking of data
We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as stipulated by the various storage periods provided for by law. As soon as the respective purpose or these periods end/discontinue, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions. As a rule, this is already the case when the meeting/session has ended.
In order to make the visit to our website attractive and to enable the use of certain functions or to display suitable products, we use so-called cookies on various pages. This serves to protect our legitimate interests in an optimized presentation of our offer, which outweigh our interests in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and allow us to recognize your browser the next time you visit (persistent cookies). The duration of storage can be found in the overview in the cookie settings of your web browser.
In addition, partners help us to optimize our website offering. Cookies may also be set for this purpose. The processing of your personal data for these purposes is based on your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO. Information about the individual cookies, your consent, and a way to revoke your consent for the future can be found here:
You can generally set your browser to inform you when cookies are set. In addition, you can set your browser so that they can individually decide whether to accept a cookie. In addition, you can generally exclude the acceptance of certain cookies through a browser setting. Since each browser differs in the way it manages cookies, please refer to your browser's help menu for more information. For the most common browsers, you can find more detailed information under the following links:
Microsoft Internet Explorer: https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
Apple Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac
Google Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
Mozilla Firefox https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Please note that if you do not accept or exclude certain cookies, the functionality of this website may be limited.
We would like to point out that changes to settings only ever affect the browser in question. If you use different browsers, the settings must also be changed separately. In addition, you can delete cookies from your storage medium at any time. For more information, please refer to the help function of your browser or operating system.
Use of Google Ads (formerly Google Adwords)
This website uses Google Ads Conversion to display advertisements (Google Ads) on other websites that are of interest to the respective site visitor. We also use this to determine how successful individual advertising efforts are.
The advertising (Google Ads) is played out via Google servers (Ad Server). In order to measure success and allocation we use Ad Server Cookies.
If you have accessed our website via a Google Ad, Google also sets a cookie on your device.
These cookies are usually valid for 30 days and are not used to directly identify a natural person, but to record anonymized analysis values (usually the number, frequency and time of ad impressions, as well as any opt-out messages).
These cookies enable Google to recognize the Internet browser. We do not collect and process any personal data in this process but receive anonymized statistical evaluations from Google. These enable us to achieve the above-mentioned goals.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.
Use of Google Ads Remarketing
This website uses the Google Ads remarketing function. This allows us to serve ads to visitors of our website on external websites based on their interests. For this purpose, the user interaction of our website is analyzed.
For this purpose, Google stores cookies on the end device of the visitor. However, these identify a specific browser on a specific end device and are not used to identify a natural person. The use of Google Ads Remarketing is based on Art. 6 para. 1 lit. a DSGVO; you can revoke this consent at any time.
Further information on data protection at Google can be found here: https://policies.google.com/privacy?hl=en and https://services.google.com/sitestats/en.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.
Transfers to third countries are possible. As suitable guarantees, so-called standard contractual clauses have been concluded in accordance with Art. 46 DSGVO. Further information can be found here: https://business.safety.google/adscontrollerterms/sccs/ or you can contact us directly using the contact details above.
Use of Google Analytics
This website uses Google Analytics Universal and Google Analytics 4, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. (hereinafter: Google). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
We also use Google Signals, which collects additional information about users who have activated personalized ads (interests and demographic data). Also, ads can be delivered in cross-device remarketing campaigns to corresponding users. If you do not want this, please deactivate the "personalized advertising" option in your Google account settings.
The use of Google Analytics is based on Art. 6 (1) lit. a DSGVO; you can revoke this consent at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://business.safety.google/adscontrollerterms/sccs/. Due to the activation of IP anonymization on this website, your IP address will be truncated before processing by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the controller, Google will use this data for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the controller. A combination of the IP address transmitted by you in this context with other data from Google does not take place.
We record events during your visit to our site. These are for example:
- First time and repeat visits, start of session, the click path on our site, interactions with the site, scrolls (whenever you scroll to the end of the page (90%)), clicks on links (internal/external), internal search queries, interaction with elements such as multimedia, file downloads, ads seen/clicked and language settings.
- We or Google store the user and event data for up to 14 months, due to the decision-making process, which may be longer in the B2B environment. However, this deletion period is not extended in case of activity.
- Your approximate location (region), their IP address (in shortened form), technical information about your browser and the end devices you use (e.g. language setting, screen resolution), their Internet provider and the referrer URL (via which website/ via which advertising material you came to our website).
We fully implement the requirements of the data protection authorities in Germany when using Google Analytics. We have therefore concluded an order data processing agreement (AVV) with Google.
Use of demographic characteristics
We use the Google Analytics "demographic characteristics" function to show you suitable advertisements from the Google network.
In this way, reports can be created which contain statements about the age, gender and interests of site visitors. They come from advertisements tailored to interests and from visitor data from third-party providers. They cannot be assigned to any natural person. If you wish, you can deactivate this function via the ad settings of your Google account, prohibit the collection of your data by Google Analytics as shown in the item "Objection to data collection".
Your data stored by Google, which is linked to cookies, user or advertising IDs (e.g. User ID or DoubleClick cookies, Android advertising ID), Google deletes or anonymizes after 14 months. More information can be found here: https://support.google.com/analytics/answer/7667196?hl=en
Use of Google Maps
Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
Embedded Vimeo videos
When you visit a page with the Vimeo plugin, a connection to Vimeo servers is established. This tells Vimeo which pages you are visiting. If you are logged into your Vimeo account, Vimeo can assign your surfing behavior to you personally. You can prevent this by logging out of your Vimeo account beforehand.
If you have deactivated the saving of cookies for the Google Ad program, you will not have to deal with such cookies when watching Vimeo videos. However, Vimeo also stores non-personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in the browser.
Further information on data processing and notes on data protection by Vimeo can be found at https://vimeo.com/privacy
We use Facebook Pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, to create so-called Custom Audiences, i.e. to segment visitor groups of our online offer, to determine conversion rates and to subsequently optimize them. This happens in particular when you interact with advertisements that we have placed with Meta Platforms Ireland Limited.
The use of Facebook Pixel is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g., in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. DSGVO. These are - unless otherwise stated - standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.
In addition, prior to such a third country transfer, we obtain your consent pursuant to Art. 49 (1) sentence 1 lit. a. DSGVO, which you provide via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be unknown risks in detail (e.g. data processing by security authorities of the third country, the exact scope and consequences of which for you we do not know, over which we have no influence and of which you may not become aware).
LinkedIn Insight Tag
We use LinkedIn Insight-Tag from LinkedIn Corporation, Sunnyvale, California, US, to create target groups, segment visitor groups of our online offer, determine conversion rates and subsequently optimize them. This happens in particular when you interact with advertisements that we have placed with LinkedIn Corporation. To do this, LinkedIn Corporation provides retargeting for website visitors to display targeted ads outside of our website.
LinkedIn Insight tag collects data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics (user agent), and timestamp. This data is used to present anonymized reports about website audience and ad performance.
The use of LinkedIn Insight Tag is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.
Web tracking technologies are used to create pseudonymized user profiles. These profiles cannot be linked to you as a natural person, but are used, for example, for segmentation when displaying advertisements.
The use of LinkedIn Ads is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.