The protection of your personal data is important to us. Therefore, we process your personal data only according to the relevant legal requirements (General Data Protection Regulation (“GDPR”), Austrian Data Protection Act (Datenschutzgesetz, “DSG”) and the Austrian Telecommunication Act (Telekommunikationsgesetz, “TKG”). This privacy notice informs you of the details of the processing of your personal data. Personal data is all information relating to an identified or identifiable person, such as his/her name, date of birth, address etc.

This privacy statement has no contractual character but aims to inform you about the data processing.

A.        Controller and Contact

Controller of the data processing in the meaning of the GDPR is

Venergi GmbH

Guglgasse 17, Office BT 5/3/2,

1110 Vienna, Austria

T: +43 664 383 26 36

e-mail: datenschutz@venergi.at

B.             DATA PROCESSING

1.       Data Processing in Connection with our Website

1.1.         Provision of the website and creation of log files

1.1.1.     Description and purpose of data processing

Each time our internet site is accessed, our system collects automated data and information from the computer system accessing our site.

The data is stored in log files to guarantee the functionality of the website. Furthermore, the data help us optimise the website and guarantee the security of our information technology system.

The temporary storage of the IP address by the system is necessary to enable the user’s computer to retrieve and display the website. For this purpose, the user’s IP address must be stored for the duration of the session.

1.1.2.     Data categories:

            The following data is collected for this purpose:

• Information on the type of browser and the version being used
• Language and version of the browser software
• Operating system and interface used
• The user’s IP address
• Date and time of access and time zone difference to Greenwich Mean Time (GMT)
• Volume of data transmitted
• Websites from which the user’s system accesses our website
• Websites accessed by the user’s system via our website
• Access status / HTTP status code

The data are likewise stored in our system’s log files.

1.1.3.     Legal basis for data processing

The temporary storage of data and log files is lawful under Article 6(1)(f) GDPR and the technical requirements according to § 165 Abs 3 TKG 2021. Our legitimate interest in processing data as provided for under Article 6 (1) (f) GDPR consists in granting the functionality and the security of our information technology system.

1.1.4.     Duration of storage

Data will be deleted or anonymised at the end of each session.

1.1.5.     Recipients

We use external service providers for the provision of the Website. They process your data on our behalf. They were carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. We use the following providers

Strato AG
Otto-Ostrowski-Straße 7
10249 Berlin

1.2.         Use of Cookies and similar technologies

1.2.1.     Description and purpose of data processing

By accessing our website Cookies and similar technologies (e.g. LocalStorage and SessionStorage) may be used. This makes our website user-friendly and efficient and enables an optimised website-experience for you.

Cookies are small text files stored in your browser. They are downloaded by your browser the first time you visit our website. The next time this website is visited using the same terminal or browser, the cookie and the information stored in it will be sent either to the respective website which set it (first party cookie) or to another website to which it belongs (third party cookie). In this way, the cookie recognises that the website was requested using the respective browser and this changes the way in which content is displayed. For instance, cookies “remember” your preferences, how you use a site, and to some degree they adapt the offers shown to the individual.

If at all, we only use functionally necessary cookies for the purpose of guaranteeing the basic functionality of our website.

1.2.2.     Legal basis for data processing

The data processing activities undertaken by employing the use of functional necessary cookies are based on our legitimate interests in providing a fully functioning website and the services requested by you (Article 6(1)(f) GDPR, Section 165 para. 3 TKG 2021.

We do not use other cookies, which are not functionally necessary.

1.2.3.     Duration of storage

Cookies will be deleted after end of the session.

1.2.4.     Recipients

We do not transfer any data to providers located in- or outside the EU.

2.       Data processing in connection with our business operations and services

2.1.         Description and purpose of data processing

In the context of our professional activities, we process personal data of customers, data of employees of our customers and other business partners (such as suppliers, service providers, etc).

2.2.         Data categories:

            The following data is collected for this purpose:

• Name
• Company
• Contact details

2.3.         Legal basis for data processing

The processing is lawful under Article 6(1)(f) GDPR. Our legitimate interest in processing data as provided for under Article 6 (1) (f) GDPR consists in the necessity to stay in contact with business partners.

2.4.         Duration of storage

Data will be stored 7 years from the last contact.

2.5.         Recipients

We use external service providers for the provision of our internal IT systems for hosting and other IT services (consultations). They were carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

We use the following service providers:

Strato AG
Otto-Ostrowski-Straße 7
10249 Berlin

MM IT Management & Solutions GmbH & CoKG
Michlbauerstraße 4a
82061 Neuried

3.       Recruitment

When applying for a job with us, we process personal data. More details can be found in the separate Recruitment Privacy Policy which is automatically made available to you during the registration process in our Recruitment Tool.

C.             Your rights in connection with the processing of your data

The GDPR grants you as a data subject certain rights to which we wish to draw your attention in the following. Please note that these rights are complementary, which means that you can for instance either request that your data be rectified/completed or that it be erased.

1. Right of access

You have the right to obtain information on the origin, categories, storage duration, recipients, and purpose of the data relating to you processed by us, as well as information on the nature of the processing.

2. Right to rectification and erasure

In the event we process data relating to you that is incorrect or incomplete, you have the right to request that the data be rectified or completed. Further, you have the right to request the erasure of data processed unlawfully.

3. Right to restrict processing

If it is unclear whether the processed data relating to you are incorrect or incomplete or whether they are being or have been unlawfully processed, you have the right to request the restriction of the processing of your data until such time as this issue is clarified.

4. Right to object

You have the right to object to the processing of your data even if the data relating to you are correct and complete and even if they are being processed lawfully by us. However, you may only do so in situations in which you provide special justification.

5. Right to data portability

You have a right to obtain data relating to you that has been processed by us, which we received from you, in a machine-readable format or you may instruct us to transfer the data directly to a third party of your choosing

6. Revocation of consent

Where we process your personal data with your consent, you have the right to revoke your consent at any time. However, this does not affect the lawfulness of the pro-cessing of data conducted up until the time of revocation.

7. Right to lodge a complaint

Lastly, you have a right to lodge a complaint with the Data Protection Agency if you are of the view that the processing of the personal data relating to you breaches the provisions of the GDPR

To whom can you turn to enforce your rights as a data subject?

To assert the aforementioned rights, please write (via letter or email) to Venergi GmbH (contact details specified at the top of this Privacy Notice).