Data Privacy Information
1 General
1.1 Controller
t-matix solutions GmbH
Neuseiersberger Straße 157
8054 Graz
office@t-matix.com
+43 3462 347 34-0
Austria
1.2 Data Protection Officer
t-matix solutions GmbH
Neuseiersberger Straße 157
8054 Graz
office@t-matix.com
+43 3462 347 34-0
Austria
1.3 Scope of processing
In principle, we only process personal data of our users where it is necessary for the deployment of an operational website or for the proper functioning of our content and services. The regular processing of personal data of our users takes place only with the consent of the user. An exception applies to cases in which prior consent is not possible due to practical reasons and the processing of the data is permitted by law.
1.4 Legal basis
Provided the data subject has given consent to the processing of his or her personal data, Article 6(1a) of the EU General Data Protection Regulation (GDPR) serves as a legal basis.
In the processing of personal data necessary for the performance of a contract to which the data subject is party, Article 6(1b) of the GDPR serves as a legal basis. This also applies to processing operations required to carry out pre-contractual obligations.
As far as processing of personal data is required to comply with a legal obligation to which the controller is subject, Article 6(1c) of the GDPR serves as a legal basis.
If the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1d) of the GDPR serves as a legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not prevail over the first interest, Article 6(1f) of the GDPR serves as a legal basis.
1.5 Data Deletion and Storage Duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data storage may follow in accordance with the European or national legislator in EU regulations, laws, or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
2 Website
2.1 Scope of data processing
Our website processes the data assigned to your computer as listed below. This is done in order to transmit the requested content of our website to your computer (e.g. texts, images, and downloadable files, etc.). We also process this data for misuse detection and tracking. Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
• Information about the browser type and version used
• The operating system of the user
• The Internet service provider of the user
• The IP address of the user
• Date and time of access
• Websites from which the user’s system accesses our website
• Websites accessed by the user’s system through our website
2.2 Legal basis for data processing
The legal basis for the temporary storage of data and log files is in accordance with Article 6(1f) of the GDPR.
2.3 Purpose of processing
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user’s IP address must be kept for the duration of the session.
Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
For these purposes, our legitimate interest in the processing of the data is in accordance with Article 6(1f) of the GDPR.
2.4 Duration of data storage
The data will be deleted as soon as the purpose for the storage of the data ceases to apply. In the case of collecting the data for provision of the website, this is the case when the respective session is completed.
In the case of storing the data in log files, this is the case after no more than seven days. Further storage is possible, and, in this case, the IP addresses of the users are deleted or encrypted, so that an assignment of the calling client is no longer possible.
2.5 Options for contesting and appealing
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no contest on the part of the user.
3 Usage of Cookies
3.1 Scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or transferred from the Internet browser to the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is reopened.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser is identified after navigating to another page.
In addition, we use cookies on our website to provide analysis of users’ browsing behavior.
3.2 Legal basis for data processing
The legal basis for the processing of personal data using cookies is in accordance with Article 6(1f) of the GDPR.
The legal basis for the processing of personal data using technically necessary cookies is in accordance with Article 6(1f) of the GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes is subject to consent of the user and in accordance with Article 6(1a) of the GDPR.
3.3 Purpose of processing
The purpose of using technically necessary cookies is to facilitate the use of websites for users. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized after navigating to a new page.
The user data collected through technically necessary cookies will not be used to create user profiles.
The use of analysis cookies is for improving the quality of our website and its contents. Through these analysis cookies, we learn how the website is used and thus can constantly optimize our content.
For these purposes, our legitimate interest in the processing of the data is in accordance with Article 6(1f) of the GDPR.
3.4 Duration of data storage and options for contesting & appealing
Cookies are stored on the computer of the user and then transmitted to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already saved cookies can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may not be possible to use all the functions of the website to their fullest potential.
4 Newsletter
4.1 Scope of data processingIt is possible to subscribe to a free newsletter from our website. The data from the input form is transmitted to us when registering for the newsletter.
In addition, the following data is collected upon registration:
The actual data collected must be stated. These can be, for example:
• IP address of the calling computer
• Date and time of registration
For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy.
With regards to the processing of data for the sending of newsletters, there is no disclosure of the data to third parties. The data will be used exclusively for sending the newsletter.
4.2 Legal basis for data processing
The legal basis for the processing of the data after the user has registered for the newsletter is in accordance with Article 6(1a) of the GDPR.
4.3 Purpose of processing
The collection of the user’s e-mail address serves to deliver the newsletter. The collection of other personal data in the context of the registration process serves to prevent misuse of the services or the email address used.
4.4 Duration of data storage
The data will be deleted as soon as the purpose for the storage of the data ceases to apply. The e-mail address of the user is therefore stored as long as the subscription to the newsletter is active.
The other personal data collected during the registration process will normally be deleted after a period of seven days.
4.5 Options for contesting and appealing
Subscription to the newsletter may be terminated at any time by the user concerned. For this purpose, there is a corresponding link in each newsletter.
This also allows a revocation of the consent to the storage of the personal data collected during the registration process.
5 Web analysis
5.1 Scope of data processing
Our website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA; “Google”). The use includes the operating mode “Universal Analytics”. This makes it possible to assign data, sessions, and interactions across multiple devices to a pseudonymous user ID, thus analyzing the activities of a user across devices.
Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
However, in the event of activation of IP encryption on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement of the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.
5.2 Legal basis for data processing
The legal basis for the processing of a user´s personal data is in accordance with Article 6(1f) of the GDPR.
5.3 Purpose of processing
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.
The processing of users’ personal data enables us to analyze the browsing behavior of our users. By analyzing the obtained data, we can compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness.
For these purposes, our legitimate interest in the processing of the data using Google Analytics is in accordance with § 15 para. 3 TMG or Article 6(1f) of the GDPR.
The anonymisation of the IP address sufficiently considers the interest of users in their protection of personal data.
5.4 Duration of data storage
Sessions and campaigns stop after a certain amount of time. By default, sessions will end after 30 minutes of no activity and campaigns after six months. Campaign timeout can be a maximum of two years. For more information about Terms of Use and Data Privacy, please visit https://www.google.com/analytics/terms/us.html or https://policies.google.com/?hl=us.
5.5 Options for contesting and appealing
You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. It is possible to prevent the collection of the cookie-generated and website-related data (including your IP address) and the processing of such data by Google by downloading and installing the Browser-Add-on (anonymizeIP). Opt-out cookies prevent future collection of your data when you visit this website. To prevent Universal Analytics tracking across devices, you must opt-out on all systems you use. If you click here, the opt-out cookie will be set: Google Analytics deactivate
6 Social Media Plugins
6.1 Scope of data processing
On our website, so-called social plugins (“plugins”) of the social networks Facebook and Google+ and the microblogging service Twitter are used. These services are provided by the companies Facebook Inc., Google Inc., and Twitter Inc. (“Provider”).
Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). An overview of the plugins of Facebook and their appearance can be found here: https://developers.facebook.com/docs/plugins
Google+ is operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). For an overview of Google’s plugins and how they look, please visit: https://developers.google.com/+/web/
Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). An overview of the Twitter buttons and their appearance can be found here: https://about.twitter.com/en_us/company/brand-resources.html
To increase the protection of your data when visiting our website, the plugins are integrated into the site by means of a so-called “2-click solution”. This integration ensures that when you visit a page of our website that contains such plugins, no connection with the servers of Facebook, Google and Twitter is made. Only when you activate the plugins and thus give your consent to the data transmission, your browser establishes a direct connection to the servers of Google, Facebook, or Twitter. The content of the respective plugin is then transmitted directly to your browser by the associated provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the corresponding provider or are currently not logged in. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider in the USA and stored there.
This means, we have no influence or current knowledge over the extent of the data which Facebook, Google and Twitter obtains with the help of this plugin.
6.2 Legal basis for data processing
The legal basis for the processing of a user´s personal data is in accordance with Article 6(1f) of the GDPR.
Facebook is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
6.3 Purpose of processing
We use this service for analyzing, optimizing, and economically operating our online content.
The purpose and scope of the data collection and the further processing and use of the data by Facebook, Google, and Twitter as well as the related rights and setting options to protect the privacy of users can be viewed via the following links:
Facebook: https://www.facebook.com/about/privacy/
Google: https://policies.google.com/privacy?hl=en
6.4 Duration of data storage
Please refer to the corresponding privacy policies of Facebook, Google, and Twitter.
6.5 Options for contesting and appealing
If a user is a Facebook member and does not want Facebook to collect data about him via this online content and link it to his member data stored on Facebook, he must log out of Facebook and delete his cookies before using our website. Other settings and inconsistencies regarding the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US-American site http://www.aboutads.info / choices / or the EU page http://www.youronlinechoices.com/. The settings are platform independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.
If you do not want Facebook to directly assign the data collected via our website to your Facebook profile, you must log out of Facebook before visiting our website. You can completely prevent the loading of Facebook plugins even with add-ons for your browser, e.g.
for Mozilla Firefox:
https://addons.mozilla.org/en-US/firefox/addon/facebook-blocker/
for Opera:
https://addons.opera.com/en/extensions/details/facebook-blocker/?display=en
for Chrome:
https://chrome.google.com/webstore/detail/block-facebook/gebclbfnlcebcljmgblacllmjkfidoef
7 Data subject rights
The following list includes all rights of the data subject according to the GDPR. Rights that have no relevance for your own website need not be mentioned. In this regard, the list is shortened.
If your personal data is processed, you are the data subject in accordance with the GDPR and you have the following rights:
7.1 Right of access
You have the right to ask the relevant person to confirm if personal data concerning you is processed by us.
If such processing is available, you can request information from the person responsible about the following information:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) all available information on the source of the data if the personal data is not collected from the data subject;
(8) the existence of automated decision-making including profiling under Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.
You have the right to request information about whether your personal information is being transferred to a third country or an international organization. In this regard, you can request the appropriate guarantees in accordance with Article 46 of the GDPR.
For data processing for scientific, historical, or statistical research purposes:
This right of access may be limited to the extent that it is likely to render impossible or seriously affect the realization of the research or statistical purposes and the restriction is necessary for the performance of the research or statistical purposes.
7.2 Right to amendments
You have the right to make changes and/or completions, if the personal data processed is incorrect or incomplete. The responsible person must make the correction without delay.
For data processing for scientific, historical, or statistical research purposes:
This right of rectification may be limited to the extent that it is likely to render impossible or seriously affect the realization of research or statistical purposes and the restriction is necessary for the performance of research or statistical purposes.
7.3 Right to restriction of processing
You may request the restriction of the processing of your personal data under the following conditions:
(1) if you contest the accuracy of your personal information over a period of time, thereby enabling the controller to verify the accuracy of your personal information;
(2) the processing is unlawful, and you refuse the deletion of the personal data and instead demand the restriction of the use of the personal data;
(3) the controller no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims; or
(4) if you have objected to the processing in accordance with Article 21(1) of the GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for asserting, exercising, or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest to the Union or a Member State.
If the limitation of the processing due to the above conditions is restricted, you will be informed by the person in charge before the restriction is lifted.
For data processing for scientific, historical, or statistical research purposes:
Your right to restriction of processing may be limited to the extent that it is likely to be rendered impossible or seriously affect the realization of the research or statistical purposes and the limitation is necessary for the performance of the research or statistical purposes.
7.4 Right to delete
a) Deletion obligation
You may require the controller to delete your personal information without delay, and the controller is obligated to delete that information immediately if one of the following is true:
(1) Personal data concerning you is no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent to which the processing was based according to Article 6(1a) or Article 9(2a) of the GDPR and there is no other legal basis for processing.
(3) You object to the processing according to Article 21(1) or Article 21(2) of the GDPR and there are no prior justifiable reasons for the processing.
(4) Your personal data has been processed unlawfully.
(5) The deletion of personal data concerning you shall be required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
(6) The personal data concerning you was collected in relation to information society services offered according to Article 8 (1) of the GDPR.
b) Information to third parties
If the person in charge has made the personal data concerning you public and is, according to Article 17(1) of the GDPR, obligated to delete it. Considering both the available technology and implementation costs, they shall take the appropriate measures to inform the data controllers who are processing the personal data that you have been identified as being affected and are requesting deletion of all links to such personal data or of copies or replications of such personal data.
c) Exceptions
The right to deletion does not exist if the processing is necessary to:
(1) exercise the right to freedom of expression and information;
(2) fulfill a legal obligation that requires processing under Union or Member State law to which the controller is subject or for the performance of a task of public interest or in the exercise of official authority that has been assigned to the controller;
(3) for reasons of public interest in the field of public health according to Article 9(2h) and Article 9(2i) and Article 9(3) of the GDPR;
(4) for archival purposes of public interest, scientific or historical research purposes or for statistical purposes according to Article 89(1) of the GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
(5) to assert, exercise or defend legal claims.
7.5 Right to information
If you have the right to amendments, deletion, or restriction of processing to the controller, he/she is obliged to notify all recipients to whom your personal data has been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.
You are entitled to be informed by the controller about these recipients.
7.6 Right to data portability
You have the right to obtain the personal user information you provided to the controller in a structured, common, and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that:
(1) the processing is based on consent according to Article 6(1a) of the GDPR or Article 9(2a) of the GDPR or based on a contract according to Article(61b) of the GDPR.
(2) the processing is done by automated means.
In exercising this right, you also have the right to obtain your personal data by means of it being transmitted directly from one person to another, as far as this is technically feasible. Freedoms and rights of other persons may not be affected.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
7.7 Right to object
You have the right to object at any time, for reasons that arise from your situation, against the processing of your personal data, in accordance with Article 6(1e) or Article 6(1f) of the GDPR.
The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing is for enforcing, exercising, or defending legal claims.
If the personal data relating to you is processed to operate direct mail, you have the right to object at any time to the processing of your personal data for the purposes of such advertising.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Irrespective of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
7.8 Right to revoke the data protection consent declaration
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until the revocation.
7.9 Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you is in contravention of the GDPR.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.