Privacy Policy
 

We process your personal data exclusively in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act. Below, we inform you about who we are, as well as the nature, scope, and purpose of the processing of your personal data.

1. Legal Basis (EU General Data Protection Regulation and Data Protection Act 2018)

The EU General Data Protection Regulation (2016/679) protects the fundamental rights and freedoms of natural persons, in particular their right to the protection of personal data. Personal data refers to all information relating to an identified or identifiable natural person.

1. Who We Are (Data Controller) and Website Operators

DieWIRcity OG
Managing Directors: Verena Ulrich, Lisa Krahn & Carla Stepanik
Zusertalgasse 62, 8010 Graz, Austria
Phone number: +43 681 2025 7073
Email address: info@diewircity.com

1. Collection and Processing of Data

I process the personal data that you provide to me through the use of my website (including all subpages) and/or as an interested party or customer through information provided in the course of an inquiry or correspondence.

When visiting the website, if you do not register or actively submit data to me, I only process the data that your browser transmits to my server and that is technically necessary for me to display my website and ensure and improve stability and security (e.g., name of the retrieved file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, user operating system, referrer URL, IP address, and requesting provider).

Within the scope of contract administration (initiation, execution, processing, and administration), I process your name, address, contact details, and other information provided by you.

I process data for the following purposes and on the following legal bases:
– Initiation of contracts, contract processing, and administration
– Provision of services
– Marketing for our own purposes
– Operation and administration of Verena Ulrich’s website

Legal bases for data processing are:
– Consent pursuant to Art. 6(1)(a) GDPR
– Contract initiation and fulfillment pursuant to Art. 6(1)(b) GDPR, as I require your data to process your inquiry or order
– Marketing and advertising or another legitimate interest pursuant to Art. 6(1)(f) GDPR. As an interested party, customer, or guest, I would like to keep you informed about updates and offers regarding my products and services.

I undertake to process your data only for specific and lawful purposes and to protect it according to the current state of technology. Your data will not be passed on to third parties for advertising purposes. Third parties will only receive your personal data in the manner described in this privacy policy or if I am legally obliged to do so.

1. Contact Form

To request further information, I provide contact forms at various locations on my websites through which you can contact me directly. The personal data entered there (e.g., name, email address) is processed in accordance with legal regulations for handling the inquiry.

1. Cookies

My website uses so-called cookies. These are small text files stored on your device using your browser. They do not cause any harm.

I use cookies to make my website more user-friendly. Some cookies remain stored on your device until you delete them. They enable me to recognize your browser during your next visit.

If you do not wish this, you can configure your browser to inform you about the setting of cookies and allow this only in individual cases. Disabling cookies may limit the functionality of my website.

Depending on their purpose and function, cookies are divided into categories (essential, statistics, marketing). Further information can be found in the cookie banner.

1. Collection of Anonymous Data and Information

I or my web hosting provider collect data about every access to our website through so-called server log files.

The access data includes:
Name of the accessed webpage, file, date and time of access, amount of data transferred, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (previously visited page), IP address, and the requesting provider.

The log data is used solely for statistical evaluations for the purpose of operation, security, and optimization of the website. However, I reserve the right to subsequently review the log data if there are concrete indications of unlawful use.

1. Revocation, Changes, Correction, or Deletion

Every natural person affected by data processing has the right, upon request, to receive free information about the personal data processed about them.

In addition, the affected person has the right to correction of inaccurate data, blocking, and deletion of their personal data, provided no statutory retention obligation prevents this.

The affected person has the right to object at any time, with effect for the future, to the processing of personal data concerning them.

Furthermore, when exercising your right to data portability pursuant to Art. 20(1) GDPR, you have the right to request that the personal data you provided be transmitted directly by me to another controller, where technically feasible and provided this does not adversely affect the rights and freedoms of other persons.

7.1 Assertion of Data Subject Rights and Right to Lodge a Complaint

As a data subject under Art. 15 to 22 GDPR, you have the following rights regarding the data stored about you:
– Right of access
– Right to rectification of inaccurate or incomplete data
– Right to deletion of unlawfully processed data
– Right to restriction of processing
– Right to object to processing (only in the case of legitimate interest)
– Right to data portability of the provided data in a structured, commonly used, and machine-readable format

If the processing is based on consent, you have the right to withdraw your consent at any time with effect for the future. This means that we may no longer process your data unless another legal basis for lawful processing exists. Such withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You have the right to lodge a complaint with the Austrian Data Protection Authority as the supervisory authority if you believe that the processing of your personal data is not lawful.

To assert your rights as a data subject or if you have questions regarding the processing of your data, please contact us by email at info@diewircity.com.

1. Storage Duration

Unless an explicit storage duration is specified at the time of collection (e.g., as part of a declaration of consent), I am obliged pursuant to Art. 5(1)(e) GDPR to delete personal data as soon as the purpose for processing no longer applies.

In this context, I would like to point out that statutory retention obligations constitute a legitimate purpose for processing personal data.

As a rule, personal data is stored by me until the termination of a business relationship or until the expiry of applicable warranty, guarantee, or limitation periods; beyond that, until the conclusion of any legal disputes in which the data is required as evidence, or in any case until the expiry of the third year after the last contact with a business partner.