privacy policy

The protection of your personal data is of particular concern to us. We process your data exclusively on the basis of the legal provisions, in particular the Basic Data Protection Regulation "DSGVO"), the applicable Data Protection Act ("DSG") and the Telecommunications Act ("TKG"). In this data protection declaration, we inform you about the most important aspects of data processing. If you have any questions, please feel free to contact us at any time.

1. data processing when visiting our website

1.1 Server log files

When you visit our website, the provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to our server. This includes your IP address, browser and language setting, country, referer URL, operating system, your internet service provider as well as date and time. This data is required to optimise the website in terms of system performance, quality assurance, user-friendliness and to provide useful information about our services. The web server location is within the EU.

This data is not merged with personal data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

This data processing is necessary to protect our legitimate interests (Art 6 para 1 lit f DSGVO), namely to ensure the operation, security and optimisation of our website as well as for security reasons (e.g. to investigate acts of abuse or fraud).

1.2 Cookies

Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. Necessary or functional cookies help us to make our website technically possible, to manage your declarations of consent and to achieve functionality and quality assurance. This corresponds to our legitimate interest within the meaning of Art 6 (1) f DSGVO.

When you access our website, a "Cookie Banner"with the information that we use cookies for certain purposes on this website and that there may be a data protection risk when using partner services from third countries (such as the USA) - sh "More details". Directly below this information in the cookie banner, you have the choice of clicking "Accept all", "Allow only necessary cookies" or "More details". Under the heading "More details" you will find a more detailed explanation and can make an individual selection (with the exception of the necessary cookies). You can also generally agree to the use of all cookies for the purposes listed. Apart from technically necessary cookies (Art. 6 para. 1 lit f DSGVO), we only use cookies that are not absolutely necessary when using our online offers on the basis of your prior active, explicit and voluntary consent via our cookie banner (Art. 6 para. 1 lit a DSGVO). This consent can be revoked at any time with effect for the future.

Insofar as the settings you have made or the voluntary consent you have given also include providers who store data in Third countriesIf you transfer your data to a third country, i.e. to a country without an adequacy decision pursuant to Art 45 (3) of the GDPR and without suitable guarantees pursuant to Art 46 of the GDPR (such as, in particular, the USA), your data shall be deemed to have been transferred to that country. Consent in accordance with Art. 49 of the GDPR. There is the RiskThe data you transfer in this way is subject to access by authorities in these third countries for control and monitoring purposes and there are no effective legal remedies available against this. In the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA (for more details sh below; also under point 4.).

You can set your browser to generally prevent cookies from being saved or to ask you each time whether you agree to cookies being set. Once cookies have been set, you can delete again at any time. If cookies are deactivated, the functionality of our website may be limited.

The cookies used on our website are divided into the following categories:

  1. Necessary cookies: Necessary cookies are essential for the website to function properly. These cookies anonymously ensure basic functions and security features of the website. The website cannot function properly without these cookies. These cookies can therefore not be deselected.
  2. AnalyticsAnalytical cookies are used to understand how visitors interact with the website. These cookies provide information on metrics such as number of visitors, bounce rate, traffic source, etc.
  3. OthersThese cookies are analysed in order to assign them to a specific category.
  4. AdvertisementThese cookies are used to provide relevant advertising and marketing campaigns to visitors. They track visitors on different websites and collect information to provide tailored advertising.

If you would like to change your selection in the cookie banner, you can do so here: Link Change cookie selection

1.2.1 Google Analytics

Our website uses functions of the web analysis service Google Analytics, Contract Administration Department Google Ireland Ltd, Gordon House Barrow Street Dublin 4, Ireland ("Google "). Cookies are used for this purpose, which enable an analysis of the use of the website by its users. Please note that when using this service, data transfer to a third country, in particular the USA, may occur or cannot be ruled out.. Your data will only be processed on the basis of your prior active, explicit and voluntary consent (Art 6 para 1 lit a DSGVO; Art 49 DSGVO). You can revoke your consent at any time with effect for the future. You can also prevent the collection of data by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout

When the analysis function is activated, the following data, among others, is collected: the pages you visit ("your click path"), achievement of website goals (conversions, e.g. newsletter registrations), your user behaviour (e.g. clicks, duration of visit, bounce rates, your approximate location (region); your IP address (in shortened form); technical information about your browser and end devices; your internet provider; the referrer URL ("analysis data").

This information is usually transferred to a Google server and stored there. For this purpose, we have concluded a contract with Google for commissioned data processing in accordance with Art. 28 DSGVO. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. According to Google, the IP address transmitted by your browser will not be merged with other Google data.

We only use Google Analytics with IP anonymisation activated by adding the code "anonymizeIP" to this website. This guarantees the masking of your IP address so that all data is collected anonymously. Only in exceptional cases will the full IP address be transferred to a Google server and shortened there. Here you can find out where exactly Google data centres are located: https://www.google.com/about/datacenters/locations/.

The analysis data is deleted immediately after the retention period set by us in each case. Google Analytics gives us the following options for the retention period: 14 months, 26 months, 38 months, do not delete automatically. You can ask us at any time for the retention period currently set by us.

You can find Google's privacy policy (including information on data use, settings and objection options) here: https://policies.google.com/privacy.

For more information on data processing conditions for Google products and the standard contractual clauses for data transfers to third countries, please click here:  https://business.safety.google/adsprocessorterms/

1.2.2 Google Maps

The Google Maps service is integrated on our website in order to better display geographical information about locations for users. The provider of this service is Google Ireland LimitedGordon House, Barrow Street, Dublin 4, Ireland ("Google"). Please note that when using this service, data transfer to a third country, in particular the USA, may occur or cannot be ruled out.. Google Maps is an online map service that makes geographical information more readable for you as a user via a terminal device. Among other things, directions are shown or map sections are integrated into our website. When Google Maps is started, your browser establishes a connection to Google's servers. This enables Google to know that our website has been accessed via your IP address. The use of Google Maps enables Google to collect and process data about the use of this service. In addition to your IP address, Google Maps processes search terms entered as well as latitude and longitude coordinates.

If you use the route planner function of Google Maps, the start address entered will also be saved. This data processing takes place exclusively through your voluntary use of Google Maps and is not subject to our sphere of influence.

When running this service, the settings cookie "NID" is (currently) set. Google Maps does not currently offer the option of operating this service without this cookie. The NID cookie contains information about your user behaviour, which Google uses to optimise its own services and to provide you with individual, personalised advertising. Google anonymises data in server logs by deleting part of the IP address and cookie information after 9 and 18 months respectively.

You can find more information about cookies from Google here: https://policies.google.com/technologies/cookies?hl=de

The Google privacy policy (including information on data use, settings and objection options) can be found here: https://policies.google.com/privacy.

Information on data processing conditions for Google products and the standard contractual clauses for data transfers to third countries can be found here:  https://business.safety.google/adsprocessorterms/

Information on the location of Google data centres can be found here: https://www.google.com/about/datacenters/locations/.

1.2.3 Microsoft Clarity

On our website, we use the service of Microsoft Clarity for the statistical evaluation of the use of our website. The provider of Microsoft Clarity is Microsoft CorporationOne Microsoft Way, Redmond, WA 98052 USA ("Microsoft"). Please note that when using this service, data transfer to a third country, in particular the USA, may occur or cannot be ruled out..

Microsoft Clarity uses cookies that enable an analysis of the use of our website, as well as a so-called tracking code that is executed when this service is called up. The information collected, such as your IP address, location, time or frequency of visits to our website, is transmitted to Microsoft and stored there. According to Microsoft, this information may also be used for advertising purposes and other services related to the use of our website and the use of the Internet. We use Microsoft Clarity with the so-called anonymisation function. This function allows Microsoft to truncate the IP address within the EU or EEA.

Your data will only be processed on the basis of your prior active, explicit and voluntary consent (Art 6 para 1 lit a DSGVO; Art 49 DSGVO). You can revoke your consent at any time with effect for the future.

Microsoft's privacy notice and further information can be found here: https://privacy.microsoft.com/de-de/privacystatement.

1.2.4 Vimeo

On our website we use the service of vimeo.com, Inc., 555 West 18th street, New York, New York 10011, USA ("vimeo"). Please note that when using this service, data transfer to a third country, in particular the USA, may occur or cannot be ruled out..

Through the service of vimeo you can see video material directly on our website. In the process, certain data may be transferred from you to vimeo. When you call up our website that has a vimeo video embedded, your browser connects to the vimeo servers. The computer systems, servers and databases of vimeo are located in the USA and other countries.

Your data will only be processed on the basis of your prior active, explicit and voluntary consent (Art 6 para 1 lit a DSGVO; Art 49 DSGVO). You can revoke your consent at any time with effect for the future.

Vimeo collects information whether or not you have a vimeo account. This includes your IP address, technical information about your browser type, operating system or basic device information, the website you visited or search query you entered before arriving at the site, and your activities. Vimeo may track these activities using cookies and similar technologies.

If you are logged in to vimeo as a registered member, more data may be collected or linked to your vimeo account. This processing is influenced by the cookie settings in your browser. To prevent this, you must log out of vimeo while visiting our website, or edit your cookie settings.

More information on vimeo's standard contractual clauses in connection with third country transfers can be found here: https://vimeo.com/privacy#international_data_transfers_and_certain_user_rights .

You can find more information about vimeo's use of cookies here: https://vimeo.com/cookie_policy?tid=331645701676

You can find Vimeo's privacy policy here: https://vimeo.com/privacy#international_data_transfers_and_certain_user_rights

1.2.5 YouTube

Our website uses the "Youtube" service to embed videos. The provider of this service is Google Ireland LimitedGordon House, Barrow Street, Dublin 4, Ireland ("Youtube"). Google operates servers around the world. Please note that when using this service, data transfer to a third country, in particular the USA, may occur or cannot be ruled out..

We only integrate Youtube videos in the so-called "extended data protection mode" on our website. If you only allow functional cookies when calling up the page, these videos will be blocked. This prevents the setting of Youtube cookies until you click on the play button. By clicking on the button, you give your consent for Youtube to set cookies on the end device you are using, which can also be used to analyse user behaviour for market research and marketing purposes. As soon as you start a Youtube video, a connection to the Youtube servers is established. This tells Youtube which of our pages you have visited. If you are logged into your Youtube account, you enable Youtube to assign your surfing behaviour directly to your personal profile. This can be prevented by logging out of your account. Even if you are not logged in with your Youtube account, YouTube optimises its recommendations based on the videos you watch on the respective device. You can delete the history from your device or pause it. You can find more information on the privacy settings of your YouTube account here:  https://support.google.com/youtube/topic/9257518?hl=de&ref_topic=9257107.

You can find more details on the use of cookies by Youtube in Google's cookie policy at https://policies.google.com/technologies/types?hl=de.

1.2.6 Meta Business Tools

Our website uses business tools from Meta (formerly: Facebook) for the purpose of analysis, optimisation and economic operation of the online offer. This service is provided by Meta Platforms Ireland Limited (formerly: Facebook Ireland Limited), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta"). Please note that when using this service, data transfer to a third country, in particular to the USA, may occur or cannot be ruled out..

You can find an overview of various meta products here: https://www.facebook.com/help/1561485474074139?ref=cookies.

On our website, the service Meta Pixel is switched on, which makes it possible to determine the visitors to our website as the target group for the display of advertisements (so-called "Facebook Ads"). This means that Facebook ads placed by us can only be displayed to Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited). In this way, we ensure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect. With the help of the so-called "conversion", we can track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad.

Your actions are stored in one or more cookies. These cookies enable Meta to match your user data (such as IP address, user ID) with the data of your Facebook account. The collected data is anonymous and not visible to us and can only be used in the context of advertisements. You can prevent the linking with your Facebook account by logging out before you take any action. You can edit the account settings of your Facebook account here: https://www.facebook.com/settings?tab=ads. For more information on cookies and other storage technologies, click here: https://de-de.facebook.com/policies/cookies/

The processing of your data is based on your consent within the meaning of Art. 6 para. 1 lit a DSGVO. You can revoke this consent at any time with effect for the future.

For more information on Meta products, additional tools and information, in particular also on the exercise of data subject rights vis-à-vis Meta, please refer to Facebook's Data Policy: https://de-de.facebook.com/policy.php.

2. data processing in contract negotiation and contract management

2.1 Contact request by you

If you contact us by e-mail, telephone, fax, post or via our form, the personal data you provide (e.g. name, contact address, e-mail address, mobile number) will be stored for the purpose of processing the enquiry and in case of follow-up questions. The processing is based on your consent (Art 6 (1) (a) DSGVO) or for the fulfilment of (pre)contractual measures (Art 6 (1) (b) DSGVO).

2.2 Registration and contract management

The registration of your user account and the ongoing administration of your user account are fundamental requirements for the further performance of our service or for the actual fulfilment of the contract. You are thus considered an "authenticated" user of our website. In order to be able to offer you our services, it is therefore necessary to process the following data:

DATAPURPOSE
First and last name

 

of the contracting party/business owner

Identification of the contracting party;
Workshop data

 

(Company address, telephone, e-mail address, UID; optional: concept partner)

Contacting; invoicing;
Official photo IDIdentification of the contracting party;
Trade licenceVerification of the commercial entitlement of the contracting party
Bank or payment dataProcessing of the payment transaction; execution of any payment obligations;

You can choose between the services of Stripe and PayPal as payment options (see details below). If you do not agree to the use of one of these payment services, a contract cannot be fulfilled by us via the website - if necessary, contact us to discuss alternative payment options without obligation. The basis for the aforementioned data processing results from Art 6 para 1 lit b DSGVO, as it is necessary for the conclusion of a contract with you (your company). Without this data, no conclusion of a contract with us can take place. We only offer our services to companies with a valid business licence.

For the data processing in the course of our Service provision within the framework of the service contract with you (or your company) (actual "performance of the contract") please note the separate Agreement on the Order data processing and our service contract.

2.3 Payment process via Paypal

In the area for authenticated users on our website, components from PayPal are integrated. PayPal is an online payment service of the PayPal (Europe) S.à.r.l. et Cie, S.C.A.22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal").

With the help of this service, payments can be processed via PayPal accounts, which represent virtual private or business accounts. In addition, PayPal offers the possibility of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is linked to an email address instead of an account number. PayPal makes or receives online payments to third parties. PayPal also offers escrow functions or buyer protection services. Cookies, beacons or similar technologies are used to fulfil these services. You can find more information about this here: https://www.paypal.com/AT/webapps/mpp/ua/cookie-full.

If "PayPal" is selected as a payment method in our online shop, data will be transmitted to PayPal. This is: First name, last name, address, e-mail address, IP address, telephone number, mobile phone number or similar data. Details about the processed data and PayPal's privacy policy can be found here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full. By selecting the payment method, you consent to the transmission of the necessary personal data. You can revoke this consent at any time with effect for the future.

Please note that when using this service, data transfer to a third country, in particular to the USA, cannot be ruled out. PayPal specifically reserves the right under its Privacy Policy to share personal information with members of the PayPal group of companies in order to, among other things, provide the services you have requested or authorised, to manage risk, to help detect and prevent potentially unlawful and fraudulent activity or other violations of PayPal policies or agreements, and to manage the availability and connectivity of PayPal's products and services and communications.

2.4 Payment process via Stripe

In the authenticated user area on our website, components from Stripe Payments Europe Ltd.1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland ("Stripe"). These components include products and services related to electronic payment transactions. You can find more information about cookies and similar technologies here: https://stripe.com/cookies-policy/legal.

If you select the payment method Sofortüberweisung or credit card in our online shop, you consent to the transmission of personal data. This means that data such as credit card numbers and account data in particular are processed within the framework of payment processing. The data is stored exclusively in encrypted form in Stripe's databases in accordance with PCI-DSS regulations.

Please note You acknowledge that when using this service, data transfer to a third country, in particular to the USA, cannot be ruled out. Indeed, under its privacy policy, Stripe reserves the right to share personal data with other companies affiliated with Stripe, or to store or process personal data in any country in which they do business. Stripe's current privacy policy can be found here: https://stripe.com/at/privacy.

2.5 Newsletter

As an authenticated customer, you have the option of subscribing to our newsletter via our website. For this purpose, we process your e-mail address, your name and your declaration that you agree to receive the newsletter. As soon as you have registered for the newsletter, we will send you a confirmation e-mail with a link to confirm your registration.

Our website uses the services of the provider Sendinblue GmbH, Köpenicker Straße 126m 10179 Berlin ("Sendinblue"). We have concluded an order processing agreement with Sendinblue for this purpose. Sendinblue is a certified partner of the Certified Senders Alliance. Sendinblue's service organises and analyses, among other things, the sending of newsletters and makes it possible to determine whether a newsletter message was opened, which links were clicked on or whether a newsletter was undeliverable. Sendinblue processes data for this purpose, such as the time and date of your newsletter subscription, your email address or your IP address. Data such as click behaviour may also be processed. The data is stored (according to the order) on Sendinblue servers in Germany. You can find more information about Sendinblue's privacy policy here: https://de.sendinblue.com/legal/privacypolicy/. Specific information for newsletter recipients can be found here:  https://de.sendinblue.com/informationen-newsletter-empfaenger/.

The processing of your data for sending the newsletter is based on your consent (Art 6 para 1 lit a DSGVO). If you do not want Sendinblue to analyse your data, you must unsubscribe from the newsletter. You can cancel or revoke your subscription to the newsletter at any time without giving reasons (at the end of each newsletter or by contacting us) with effect for the future.

3. storage period

We will only store your data for as long as is necessary for those purposes for which we collected your data:

Server log files are deleted shortly after the purpose has been fulfilled, usually after a few days, unless further storage is required for evidence purposes. Otherwise, the data will be retained until the incident has been finally clarified. Data from your Contact request we store for a period of six months after answering the enquiry in order to be able to respond to any follow-up questions. Data in connection with the Contract performance we generally store for seven years after fulfilment of the contract for reasons of tax and company law. In the event of Contract termination or termination of the contract, contractually earmarked data will only be limited to the extent (in terms of time and content) that is directly necessary for the assertion of any consequential claims arising from the termination of the contract (approximately 10 years in accordance with § 13 PHG) after weighing up the interests as defined in Art 6 (1) f DSGVO. Data that is no longer immediately required will be deleted immediately. If a purchase transaction is cancelled, the transaction (cancellation) data stored by us in this respect will be deleted immediately.

Provided you are interested in our Newsletter If you have subscribed to our newsletter, we will store your data in connection with the newsletter mailing, but for a maximum of three years. If you unsubscribe from our newsletter, we will delete this data immediately.

4. data transmission to third parties

In order to fulfil the above-mentioned purposes, in particular to offer you a functional, quality-assured Internet presence (Art 6 para 1 lit f DSGVO), to manage contacts and contracts efficiently or to fulfil contracts (Art 6 para 1 lit b DSGVO), or to enable the sending of newsletters based on customer wishes (Art 6 para 1 lit a DSGVO), but also to comply with official/legally enforceable requests (Art 6 para 1 lit e DSGVO) or based on your consent (Art 6 para 1 lit a DSGVO), it may be necessary on a case-by-case basis that we disclose your data to the following recipients or categories of recipients:

  • IT service provider or hosting provider;
  • Other service providers, providers of tools and software solutions; including (1) Sendinblue GmbH, Köpenicker Straße 126m 10179 Berlin, as service provider for newsletter dispatch; server location in the EU;
  • Payment service providers, banks;
  • Consultancy (lawyers, tax consultants, auditors);
  • Courts, authorities, other public bodies (in case of need and only to the extent required by law; e.g. tax office);
  • Operator of digital service booklets (for the actual performance of the contract);


In the context of the data processing described above, your data may be transferred to recipients outside the European Union (so-called "data controllers"). Third countries). We only transfer your personal data (i) to countries for which the EU Commission has decided that they offer an adequate level of data protection or (ii) if we take measures to ensure that the respective recipient offers an adequate level of protection (in particular by concluding standard data protection clauses).

Please note: In a ruling of 16.7.2020 by the European Court of Justice (C-311/18), the US Privacy Shield was declared invalid. Data protection in the US is not considered equivalent to data protection in the EU. For you as a user, due to the extensive powers of US intelligence services and the legal situation in the US, there are in particular the following RisksThe FISA is a violation of the principle of proportionality, unlimited surveillance measures, lack of legal remedies for affected persons, and lack of proportionality barriers (cf: Sec 702 of the Foreign Intelligence Surveillance Act - FISA; Presidential Policy Directive 28 - PPD-28).

The EU Commission's newly drafted EU standard contractual clauses (2021/914 of 4 June 2021) are still valid, but - after evaluation of the access possibilities of US authorities - must be additional measures be met. Where US service providers offer the option, we choose to process on server locations in the EU. This should ensure that US authorities cannot access data within the EU. We also endeavour to conclude the aforementioned standard contracts with US providers and to demand additional guarantees.

As far as possible, your consent will be requested before the use of US tools and you will be informed transparently in advance about how the service works. You will also find the relevant passages in this privacy policy.

5. your data subject rights

You are generally entitled to the rights of information, correction, deletion, restriction of processing, data portability, revocation and objection (Art 15 ff DSGVO). If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can contact us or complain to the supervisory authority at any time. In Austria, this is the data protection authority, Barichgasse 40-42, 1030 Vienna; Tel: +43 1 52 152 -0; dsb@dsb.gv.at.

Please note: If we process your data on the basis of your consent, you have the right to revoke this consent, whereby the lawfulness of the data processing carried out up to this point is not affected (Art 7 (3) DSGVO). Failure to provide data may result in the conclusion of a service contract or the further fulfilment of the contract by OE Service GmbH not being possible.

If you have any questions or wish to exercise your data protection rights, please contact us at the following address:

OE Service GmbH 
Dr. Franz-Palla-Gasse 21
A-9020 Klagenfurt

Mobile: +43 (0) 660 4419 993
office@oeservice.eu