PRIVACY POLICY / INFORMATION OBLIGATION
(Status: June 2020, Version 1.0)
It is particularly important to us to protect your data, which is why we comply with the applicable data protection regulations, in particular the GDPR and the DSG, when processing your personal data (e.g. master data).
Below you will find more information about the data processing we carry out:
1. Responsible
Thomas Peterseil
Laaher Strasse 8
4052 Ansfelden
Phone: 43 (0) 660/4887930
Email: business@realsim.at
Since we are not legally obliged, we have not appointed / appointed a data protection officer at the data protection authority.
2. Rights of data subjects / right of objection and withdrawal / right of appeal
2.1. You have the following rights towards us with regard to your personal data:
- Right to information (Art 15 GDPR),
- Right to correction (Art 16 GDPR) or deletion (Art 17 GDPR),
- Restriction of processing (Art 18 GDPR),
- Right to data portability (Art 20 GDPR),
- Right to object to processing (Art 21 GDPR).
Right of objection: If the processing of your personal data is based on a weighing of interests (Art 6 Paragraph 1 lit f GDPR: legitimate interests), you have the right to object to the processing at any time for reasons that arise from your particular situation. When exercising your right of objection, we ask you to explain to us your reasons why we should not process your personal data as we have done. We will examine the situation and either discontinue or adjust the data processing or show you our compelling reasons worthy of protection and continue the data processing. We will continue data processing even if it serves to assert, exercise or defend legal claims.
You can object to data processing for the purposes of direct advertising and data analysis at any time. In this case, we will stop processing the data.
Right of withdrawal: If you have given us your consent to the processing of your personal data, you can withdraw your consent at any time. Your revocation does not affect the legality of the data processing carried out up to the point of revocation.
In order to exercise the rights listed, you must inform us personally, by telephone or in writing:
Thomas Peterseil
Laaher Strasse 8
4052 Ansfelden
Phone: 43 (0) 660/4887930
Email: business@realsim.at
Please note that we can only provide you with information if you can identify yourself.
2.2. If you are of the opinion that the data processing violates applicable data protection law or that we violate your data protection claims, you also have the right to lodge a complaint with the supervisory authority in the member state of your place of residence, your place of work or the place of the alleged violation.
If you want to submit your complaint to the supervisory authority in Austria, please address it to:
Austrian data protection authority
Barichgasse 40-42
1030 Vienna
3. Information about the processing of your personal data
3.1. Website visit
- Purpose: If our website is only used for information purposes (no registration and no transmission of other information), personal data is collected, which is transmitted from your browser to our server. This is technically necessary in order to be able to display our website to you and to guarantee the stability and security of the website.
- Legal basis: legitimate interest (Art 6 Paragraph 1 lit f GDPR), Section 96 Paragraph 3 TKG 2003
- The following data is processed: IP address, date and time of the request, time zone difference to GMT, content of the request (specific page), access status / HTTP status code, amount of data transferred, requesting website, browser, operating system and interface, language and version of the Browser software
- Storage period: As long as you use our website.
- Recipients / recipient categories: Processors
3.1.1 Social Media
In addition to our website, we also maintain appearances in social networks, in particular Facebook and Xing to increase the level of awareness of our company and for marketing purposes. If you visit one of our presences, personal data may be transmitted to the operator of the social network. In addition, the operator can link your profile to ours, provided you are logged into the respective network.
Legal basis: legitimate interest (Art 6 Paragraph 1 lit f GDPR)
Recipients / recipient categories: Processors
Details about the specific data collection and processing by the respective operator can be found in the following links:
Facebook:
https://de-de.facebook.com/about/privacy/
Xing:
https://privacy.xing.com/de/datenschutzerklaerung
3.1.2 Use of Google services
This website uses various services from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”), if you are a resident of the European Union, the European Economic Area and Switzerland, Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland. In the following we will explain to you exactly which services this website uses.
With the integration of Google services in this website, Google also collects and processes personal information. A transfer of the information collected to a third country cannot be ruled out. With the certification for the Privacy Shield, Google has committed itself to complying with the EU-US and the Swiss-US Privacy Shield Framework requirements. Information about participation can be found under the search term Google here:
https://www.privacyshield.gov/list
The information can also be passed on to contractual partners of Google. You can find more information on handling user data in Google's privacy policy:
https://www.google.de/intl/de/policies/privacy/
.
Order data processing:
We have concluded a contract data processing agreement with Google.
3.1.2.1 Google Maps
This website uses the Google Maps map service. To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored by Google on servers in the United States. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website.
Legal basis: Art. 6 Para. 1 lit.f GDPR
Storage period: until the end of use
3.1.2.2 YouTube
Our website uses social plugins (“plugins”). If you visit one of our pages equipped with a plug-in, a connection to the servers of the plug-in operator will be established. The plug-in server is informed which of our pages you have visited.
If you have an account with the operator of the plug-in and are logged into it, you enable them to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your account. When you log out of your account, some functions are restricted or excluded (e.g. YouTube).
The use of plug-ins is in the interest of an appealing presentation and expansion of the level of awareness of our online offers and our company.
We use plug-ins for YouTube.
3.2. Electronic contact requests through the website
3.3. Customer administration, accounting, logistics and bookkeeping
- Purpose: Processing of personal data in the context of all business relationships with customers and suppliers in the context of a commercial exercise, including systematic recording of all business transactions relating to income and expenditure.
- Legal basis: Consent (Art 6 Para 1 lit a GDPR), fulfillment of a contract, necessary to carry out pre-contractual measures (Art 6 Par 1 lit b GDPR), fulfillment of a legal obligation (Art 6 Par 1 lit c GDPR), legitimate interest, esp Defense, exercise and assertion of legal claims (Art 6 Paragraph 1 lit f GDPR), express consent (Art 9 Paragraph 2 lit a GDPR).
- Storage period: Until the end of the business relationship or until the expiry of the guarantee, warranty, statute of limitations and statutory retention periods (in particular BAO); in addition, until the end of any legal disputes in which the data is required as evidence.
- Recipients / recipient categories: tax office, courts and authorities, suppliers, debt collection agencies, banks dealing with the payment to the person concerned or to third parties, legal representatives, accountants, payroll administrators.
The provision of your personal data is necessary to fulfill the contract or to carry out pre-contractual measures. Without this data, we cannot conclude a contract with you.
3.4. Customer care and marketing for own purposes
3.5. Personnel administration and applicant management
- Purpose: Processing and transmission of data for wage, salary and remuneration accounting and compliance with recording, information and reporting obligations, insofar as this is required by law or norms of collective legal arrangements or contractual obligations, use and keeping of personal data of Applicants if this data has been provided by the person concerned.
- Legal basis: Consent (Art 6 Para 1 lit a GDPR), fulfillment of a contract, necessary to carry out pre-contractual measures (Art 6 Par 1 lit b GDPR), fulfillment of a legal obligation (Art 6 Par 1 lit c GDPR), legitimate interest, esp Defense, exercise and assertion of legal claims (Art 6 Paragraph 1 lit f GDPR), express consent (Art 9 Paragraph 2 lit a GDPR), necessary to fulfill the obligations under labor law and social law (Art 9 Paragraph 2 lit b GDPR), assertion , Exercise and defense of legal claims (Art 9 Paragraph 2 lit f GDPR), statutory duties of care (Art 10 GDPR in conjunction with Section 4 Paragraph 3 Z 2 GDPR), legitimate interest (Art 10 GDPR in conjunction with Section 4 Paragraph 3 Z 2 GDPR)
- Storage period: Until the end of the relationship with the person concerned and beyond that as long as the statutory retention period or as long as legal claims from the employment relationship can be asserted against the employer (in particular the issuing of references and the like). Applicant data will be deleted immediately after the advertised position has been filled, unless consent has been given to keep records. Unsolicited applications are appropriately kept on record until they are revoked by the person concerned.
- Recipients / recipient categories: Tax office, courts and authorities, social security agencies (including company health insurance funds), labor inspectorate, traffic labor inspectorate and agriculture and forestry inspectorate, in particular in accordance with Section 8 of the Labor Inspection Act, organs of company interest representation (in particular works council in accordance with Section 89 (4) ArbVG, safety representative according to Section 10 ASchG, youth ombudsman according to § 125ff ArbVG and disabled ombudsman according to § 22a BEinstG), apprenticeship according to § 19 BAG and vocational schools, labor market service, banks dealing with the payment to the person concerned or to third parties, union specified by the employee, with the consent of the person concerned Statutory interest groups, pension funds, employee pension fund (MVK) in accordance with Section 11 Paragraph 2 Z and Section 13 BMVG, legal representative; Chartered accountant; Payroll Clerk.
The provision of your personal data is necessary to fulfill the contract or to carry out pre-contractual measures. Without this data, we cannot conclude or carry out a contract with you. Without this data, we cannot give you any voluntary social benefits or external education and training offers.
3.6. Access management for IT systems
The provision of your personal data is necessary to fulfill the contract. Without this data, we cannot operate our (software) systems securely. Otherwise we cannot employ you in our company.
3.7. Access control systems
- Purpose: Control of the authorization of access to buildings and demarcated areas by the owner or authorized user with the help of systems that process personal data with automated support, whereby no biometric data of those affected are processed. The mere real-time display of facial images is covered by this exception.
- Legal basis: Consent (Art 6 Paragraph 1 lit a GDPR), fulfillment of a contract, required to carry out pre-contractual measures (Art 6 Paragraph 1 lit b GDPR), fulfillment of a legal obligation to implement technical and organizational measures to protect personal data (Art 6 para 1 lit c GDPR), legitimate interest, in particular defense, exercise and assertion of legal claims (Art 6 para 1 lit f GDPR), express consent (Art 9 para 2 lit a GDPR), necessary to fulfill the obligations under labor law and Social law (Art 9 Paragraph 2 lit b)
- Storage period: Until the end of the access authorization and beyond as long as there is a statutory retention period or as long as special legal claims from the employment relationship can be asserted against the employer. If there are no special retention periods, the data should be deleted six months after the end of the access authorization.
- Recipients / recipient categories: Courts and authorities.
The provision of your personal data is necessary to fulfill the contract. Without this data, we cannot operate a secure access control system. Otherwise we cannot employ you in our company.
4. Information about data transfers to third countries or to international organizations
The data processed by us will not be transmitted to recipients in third countries or international organizations.
Change of these data protection regulations
We reserve the right to change this data protection declaration at any time, taking into account the applicable civil and data protection regulations. The most recent version is determined in accordance with the release notes.
DATA PRIVACY STATEMENT / RIGHT TO BE INFORMED
(As at: June 2020, version 1.0)
Protecting your data is an especially important concern for us, which is why we comply with the applicable data protection provisions, particularly GDPR and the Austrian Data Protection Act (DSG), when processing your personal data (eg master data).
You can find more detailed information on how we carry out data processing below:
1. Controller
Thomas Peterseil
Laaher Strasse 8
4052 Ansfelden, Austria
Phone: 43 (0) 660 488 7930
E-mail: business@realsim.at
As we are not under any statutory obligation to do so, we have not appointed a data protection officer or appointed one from the Austrian Data Protection Authority.
2. Rights of the data subject / right to object and withdraw / right to complain
2.1. You have the following rights with regard to the personal data concerning you:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR) or erasure (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object to processing (Article 21 GDPR)
Right to object: As the processing of your personal data is based on the consideration of interests (Article 6 (1) f) GDPR: legitimate interests), you have the right to file an objection to this processing for reasons related to your particular circumstances at any time. In the event that you exercise your right to object, we will ask you to state your reasons for withdrawing consent for the processing of your personal data for the purposes we have already carried out. We will verify the circumstances and either stop the data processing, adjust it or show you our urgent reasons that need protecting and continue with the data processing. We will then also continue data processing if it serves to assert, exercise or defend against legal claims.
You can object to data processing for the purposes of direct marketing and data analysis at any time. In this case, we will stop data processing.
Right to withdraw: If you have given your consent for us to process personal data, you can also withdraw your consent at any time. Your withdrawal does not affect the legality of the data processing carried out up to the withdrawal.
To exercise the rights listed above, you must inform us in person, by phone or in writing:
Thomas Peterseil
Laaher Strasse 8
4052 Ansfelden, Austria
Phone: 43 (0) 660 488 7930
E-mail: business@realsim.at
Please note that we can then only issue information if you verify your identify.
2.2. If you are of the opinion that the data processing violates the applicable data protection law or we have violated your data protection claims, you also have the right to file a complaint with the supervisory authority in the Member State in which you are resident, in which you work or in which the alleged breach took place.
If you wish to file a complaint with the Austrian Data Protection Authority, please direct this to:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna, Austria
3. Information about processing your personal data
3.1. Visiting our website
- Purpose: If our website is used only for information purposes (no registration and no transfer of other information), personal data is collected that is transferred from your browser to our server. This is required for technical reasons to correctly display our website to you and guarantee the stability and security of the website.
- Legal basis: Legitimate interest (Article 6 (1) f) GDPR), Article 96 (3) Telecommunications Act 2003 (TKG)
- The following data will be processed: IP address, data and time of inquiry, time difference from GMT, content of the request (specific page), access status / HTTP status code, respective transferred data volume, requested website, browser, operating system and interface, language and version of browser software
- Storage duration: For as long as you use our website.
- Recipient / recipient categories: Processor
3.1.1 Social Media
In addition to our website, we also maintain a social media presence, particularly on Facebook and Xing, to increase the level of awareness for our company and for marketing purposes. If you visit one of our pages, it is possible that personal data may be sent to the operator of the social network. Furthermore, the operator can connect your profile with ours, provided that you are logged into the respective network.
Legal basis: Legitimate interest (Article 6 (1) f) GDPR)
Recipient / recipient categories: Processor
Specific details about the data collection and processing by the respective operator can be found via the following links:
Facebook:
https://en-gb.facebook.com/about/privacy/
Xing:
https://privacy.xing.com/en/privacy-policy
3.1.2 Use of Google services
This website uses various services by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States (“Google”) and, if you are a resident of the European Union, European Economic Area and Switzerland, by Google Ireland Limited ( register number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland. The following shall explain exactly which services this website uses.
With the integration of Google services in this website, Google also collects and processes personal data. The gathered information being sent to third parties cannot be ruled out. With the Privacy Shield certification, Google undertakes to comply with the provisions in the EU-US and Swiss-US Privacy Shield Framework. Information about participation can be found by searching for Google here:
https://www.privacyshield.gov/list
The information can also be forwarded to Google's contractual partners. More information about the handling of user data can be found in Google's privacy policy:
https://policies.google.com/privacy?hl=en-GB
.
Data processing contract:
We have concluded a data processing contract with Google.
3.1.2.1 Google Maps
This website uses the Google Maps map service. Storing your IP address is necessary for using the Google Maps function. This information will generally be sent to a Google server in the USA and stored there. The provider of this website has no involvement in this data transfer.
Google Maps is used for the purpose of displaying our services online in a pleasant format and to make it easier to find us at the locations given on the website.
Legal basis: Article 6 (1) f) GDPR
Storage duration: Until the end of use
3.1.2.2 YouTube
Our website uses social plugins (“plugins”). If you visit one of our pages that is equipped with a plugin, this will create a connection to the server of the plugin operator. In doing so, the plugin will share with the server which of our pages you visited.
If you have an account with the operator of the plugin and are logged into this, this enables the operator to match your surfing behavior directly with your personal profile. You can prevent this by logging out of your account. Logging out of your account will limit or prevent some functions (e.g. YouTube).
Plugins are used for the purpose of attractively displaying and increasing awareness of our services online and company.
We use plugins for YouTube.
3.2. Electronic contact inquiries via the website
3.3. Client management, accounting, logistics and record keeping
- Purpose: Processing personal data as part of any business relationships with clients and suppliers in the context of operating a business, including systematically recording all income and costs of relevant business transactions.
- Legal basis: Consent (Article 6 (1) a) GDPR), fulfilling a contract, required to carry out precontractual measures (Article 6 (1) b) GDPR), fulfilling a legal obligation (Article 6 (1) c) GDPR) , legitimate interest, especially preventing, exercising and asserting legal claims (Article 6 (1) f) GDPR), explicit consent (Article 9 (2) a) GDPR).
- Storage duration: Until the end of the business relationship or until the expiration of the applicable guarantee, warranty, limitation and statutory storage periods (particularly the Austrian Fiscal Code (BAO)); furthermore, until the expiration of all legal disputes in which the data is required as evidence.
- Recipient / recipient categories: Fiscal authorities, courts and authorities, suppliers, debt collection companies, banks concerned with payment to the data subject or third parties, legal representatives, economic trusts and payroll accountants.
Providing your personal data is required for fulfilling the contract or carrying out precontractual measures. We cannot conclude a contract with you without this data.
3.4. Customer support and marketing for internal purposes
3.5. Staff management and applicant management
- Purpose: Processing and transferring data for paying wages, salaries and remuneration and complying with recording, information and reporting obligations, insofar as these are required by law or codes of collective legal regulation or obligations in employment contracts; using personal data belonging to applicants and retaining for record keeping, if this data has been provided by the data subject.
- Legal basis: Consent (Article 6 (1) a) GDPR), fulfilling a contract, required to carry out precontractual measures (Article 6 (1) b) GDPR), fulfilling a legal obligation (Article 6 (1) c) GDPR) , legitimate interest, especially preventing, exercising and asserting legal claims (Article 6 (1) f) GDPR), explicit consent (Article 9 (2) a) GDPR), required to fulfill obligations from employment law and social law (Article 9 ( 2) b) GDPR), exercising, asserting and defending against legal claims (Article 9 (2) f) GDPR), statutory obligations to exercise due diligence (Article 10 GDPR in conjunction with Article 4 (3) 2 DSG), legitimate interest (Article 10 GDPR in conjunction with Article 4 (3) 2 DSG).
- Storage duration: Until the end of the relationship with the data subject and, in addition, for as long as the statutory storage period or for as long as legal claims resulting from the employment relationship against the employer can be asserted (particularly providing character references, Etc.). Applicant data will be deleted immediately once the advertised position is filled, unless consent has been provided to keep it for our records. Prospective applications shall be kept in our records as appropriate until the data subject withdraws their consent.
- Recipient / recipient categories: Fiscal authorities, courts and authorities, social insurance agencies (including company health insurance funds), Labor Inspectorate, Transport Labor Inspectorate and Agriculture and Forestry Labor Inspectorate, in particular pursuant to Article 8 Labor Inspection Act, bodies in occupational special interest groups (particularly works councils pursuant to Article 89 4) Working Conditions Act (ArbVG), safety representatives pursuant to Article 10 Health and Safety at Work Act (ASchG), youth representatives pursuant to Article 125 ff. ArbVG and disability representatives pursuant to Article 22a Disability Employment Act (BEinstG)), apprentice positions pursuant to Article 19 Employment Training Act (BAG) and vocational schools, job market services, banks concerned with payment to the data subject or third parties, trade unions specified by the employee , with consent of the data subject, statutory special interest groups, reti rement funds, employee pension funds (MVK) pursuant to Article 11 2) and Article 13 Occupational Employee Pension Law (BMVG), legal representatives; economic trusts; payroll accountants.
Providing your personal data is required for fulfilling the contract or carrying out precontractual measures. We cannot conclude or carry out a contract with you without this data. Without this data, we are also unable to provide any voluntary benefits and external training and advanced training opportunities.
3.6. Access management for computer systems
Providing your personal data is required for fulfilling the contract. We are not able to operate our (software) systems securely without this data. We are therefore unable to work with you in our company otherwise.
3.7. Access control systems
- Purpose: Controlling access authorization to buildings and restricted areas by the owner or those authorized for use by means of systems that process personal data using automated technology in which no biometric data belonging to the data subject is processed. The only exception is the real-time reproduction of facial images.
- Legal basis: Consent (Article 6 (1) a) GDPR), fulfilling a contract, required to carry out precontractual measures (Article 6 (1) b) GDPR), fulfilling a legal obligation to implement technical and organizational measures to protect personal data (Article 6 (1) c) GDPR), legitimate interest, especially preventing, exercising and asserting legal claims (Article 6 (1) f) GDPR), explicit consent (Article 9 (2) a) GDPR), required to fulfill obligations in employment law and social law (Article 9 (2) b).
- Storage duration: Until the end of the access authorization and, in addition, for as long as the statutory storage period or for as long as particular legal claims resulting from the employment relationship against the employer can be asserted. If there is no storage period is specified, the data must be deleted six months after the end of the access authorization.
- Recipient / recipient categories: Courts and authorities.
Providing your personal data is required for fulfilling the contract. We are not able to operate a secure access control system without this data. We are therefore unable to work with you in our company otherwise.
4. Information about transferring data to third countries or international organizations
The data we process will not be transferred to recipients in third countries or international organizations.
Modification of these data protection provisions
We reserve the right to modify this privacy policy at any time, taking into account the relevant applicable civil and data protection-related provisions. The most up-to-date version is defined in accordance with the version reference.