Privacy
This is a translation for convenience. The legally binding version is the German one: Datenschutz.
1. Contract performance & initiation
As the controller, we process personal data of our customers and suppliers that is required to initiate and perform the respective contract and to comply with our obligations under company and tax law (legal basis: performance of a contract pursuant to Art. 6 (1) (b) GDPR and legal obligation pursuant to Art. 6 (1) (c) GDPR).
This includes customer data generated by us, such as first name, last name, business address, business telephone numbers and business email address, as well as data that (potential) customers provide to us. Providing this data is required both by law and by contract, as no contract can be concluded without it.
In the course of initiating a contract, and with existing customers, the contact details of the (potential) customer and the data relating to the services we provide are also used to inform them regularly about new offers, technical developments and other information relating to our services (legal basis: legitimate interests in customer service and acquisition pursuant to Art. 6 (1) (f) GDPR; data subjects have the right to object pursuant to Art. 21 GDPR — see the data subject rights below for details).
The data is processed for the duration of the active contractual relationship or the initiation of a contract. Any processing beyond that takes place in accordance with tax and company law requirements for a period of seven years.
Processing on behalf of a controller:
Personal data is disclosed to third parties (about which we inform you in the course of providing our services) exclusively under a data processing agreement (recipients acting as processors).
2. Transfer of personal data to third countries
2.1. General requirements for transfers to third countries
If personal data is processed in a third country (a non-EEA state), we only transfer or disclose this data on one of the following legal bases:
- An adequacy decision of the European Commission is in place.
- Appropriate safeguards exist, in particular standard data protection clauses, including a documented case-by-case assessment of the level of protection.
- The data subject has given consent, provided none of the grounds listed under point 2.1 (a) and (b) applies. In this case all additionally relevant provisions (including the Austrian Telecommunications Act) are of course fully taken into account. Consent once given can be withdrawn at any time with effect for the future.
2.2. Transfer of cookies to third countries
With your explicit consent, data may be transferred to a third country (Art. 49 (1) (a) GDPR). We hereby inform you of the risks associated with such an intended transfer and of the absence of appropriate data protection safeguards (see point 2.1).
On our website we use various cookies and similar technologies ("cookies") through which we and third-party providers may process personal data. These third-party providers include Google LLC, based in the USA, which carries out data processing there. The European Court of Justice has not established an adequate level of data protection for the USA. In particular, there is a risk that your data may be accessed by US authorities for monitoring and surveillance purposes and that no effective legal remedies are available to you against this.
Before such cookies are set and data is transferred to these companies, we obtain your explicit consent (Art. 6 (1) (a) GDPR in conjunction with Art. 49 (1) (a) GDPR) and inform you in detail about the respective processing (in particular purposes, categories of data and storage period). Further information is available under "Edit cookie settings". You can withdraw your consent at any time with effect for the future by adjusting your settings under "Edit cookie settings" on our website.
We are also working intensively on implementing (additional) appropriate safeguards pursuant to Art. 46 GDPR as an alternative legal basis for these data transfers.
2.3. Data transfer when using Facebook
Using Facebook involves transfers of data to third countries. These transfers take place in anonymised or pseudonymised form. More detailed information can be found under point 4.6.
3. Website & newsletter
3.1. Website
Responsible for the content of this website and the associated data processing is DSR Agency GmbH, Zirkusgasse 13/3, 1020 Vienna.
When you visit our website, (non-personal) data transmitted to us by your computer or mobile device is collected automatically. This data collected during your visit is not linked with any other personal data.
In addition, we store and process the personal data you provide when subscribing to our newsletter. This data is used to send the newsletter and for DSR Agency's marketing activities. By subscribing to the newsletter you explicitly consent to the data provided being used for these purposes. Data used for marketing purposes is stored for a period of 5 years.
When you visit our website or subscribe to the newsletter, the following data in particular is collected:
- Device ID, device type, computer and connection information, statistical data on page views, traffic times to and from the websites, referrer URL, advertising data, IP address and standard weblog information
- Anonymous data collected through our cookies
- The email address you provide when subscribing to the newsletter
The data obtained through your website visit and the data provided when subscribing to the newsletter is stored by us with automated support and processed exclusively for DSR Agency's internal marketing purposes. DSR Agency collects and stores usage-related data only to the extent strictly necessary for the purposes described in this privacy notice. The data collected is not passed on to third parties.
3.2. Newsletter
DSR Agency operates a newsletter through which we regularly inform our customers about our company, our products and our services. If you subscribe to the newsletter by providing your email address, we use that address for our own marketing purposes. You can unsubscribe at any time free of charge.
By subscribing you explicitly agree that your data may be recorded, stored and processed electronically and used for advertising purposes by DSR Agency. The newsletter can be cancelled at any time via the "unsubscribe" link included in it.
The data named in this privacy notice is processed on the legal bases of contract performance (Art. 6 (1) (b) GDPR), consent (Art. 6 (1) (a) GDPR) and/or the protection of our legitimate interests (Art. 6 (1) (f) GDPR).
Our legitimate interest lies in informing customers and potential customers about our services. Customers and their employees are not to expect any disadvantages from the use of the data listed.
4. Use of cookies
On our websites we use cookies and comparable technologies (collectively "cookies"). They serve to make our offering more user-friendly and more efficient.
Cookies are small text files that are transferred by our web server to the browser's cookie files on your hard drive and stored there. They allow an analysis of how our website is used. In this way our website can recognise your browser when you connect again. Among other things, cookies help us determine how frequently our pages are used and how many visitors they have.
Partner companies ("cookie providers") may also set cookies on our websites; among other things this serves to improve our products and services, as though we had set the cookies ourselves. To analyse the use of our websites we work with partners such as Google and Facebook, for example.
We inform you about the type, scope and purpose of the cookies used via our consent management tool and under "Edit cookie settings".
4.1. Setting and managing cookies (legal basis)
Technically necessary cookies (strictly necessary cookies) are set on our websites without your consent, in particular pursuant to § 96 of the Austrian Telecommunications Act and on the basis of our legitimate interest in providing a functioning online service pursuant to Art. 6 (1) (f) GDPR.
Beyond that, you can explicitly consent to or reject the use of performance cookies and cookies for marketing purposes before they are set. Our cookie consent management tool is available for this. When you first visit our website, a cookie banner explains all the cookies we use (in particular name, purpose, lifetime, provider). There you can either consent to all cookies or make your selection by cookie category, or within a category by individual cookie or provider.
You can withdraw or change the consent or selection you have given at any time under "Edit cookie settings". If new cookies or cookie providers are added after your consent, a cookie banner will appear again so you can grant or refuse consent. All cookie providers are named individually in the cookie consent management tool, where their privacy policies are also available; these contain further information, in particular on additional opt-out options.
You can also configure your browser so that no cookies are accepted. You can generally still visit our website with cookies disabled. You also have the option of being informed when cookies are set, of allowing cookies only in individual cases, of refusing the acceptance of cookies in certain cases or generally, and of activating the automatic deletion of cookies when the browser is closed.
Please note that rejecting all consent-based cookies may lead to restrictions in the functionality of our website.
4.2. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"), exclusively with your explicit consent. Google Analytics uses cookies. The information generated by the cookie about your use of this website (including your IP address) is transferred to and stored on a Google server in the USA. Google uses this information to evaluate the use of the website, to compile reports on website activity for us as the website operator and to provide further services connected with website use and internet use.
Google may pass this information on to third parties where required by law or where third parties process this data on Google's behalf.
You can prevent cookies from being stored by adjusting your browser software accordingly; in this case you may not be able to use all functions of this website to their full extent. By giving your explicit consent via our consent management tool, you agree to the described processing of the data collected about you by Google for the purposes stated.
You can withdraw or change your consent and selection at any time under "Edit cookie settings".
4.3. Advertising functions of Google Inc. (Google Ads & Google DV360)
In order to show you interest-based advertising and to measure the success of our advertising activities, we use Google Ads and Google Display & Video 360 (Google DV360). This allows us to use campaign data to see how successful individual measures are. Our aim is to show you relevant advertising, to make our website more attractive and to ensure a fair calculation of advertising costs.
The advertising material is delivered via Google's so-called "ad servers". Ad server cookies are used for this, measuring among other things ad impressions and clicks by users. If you reach our website via an advertisement placed by Google, a cookie from Google Ads or Google DV360 is usually stored on your device. These cookies are typically valid for 30 days. They do not serve to identify you personally, but they do allow the browser to be recognised.
If you are registered with a Google service, Google may attribute your visit to your account. Even without registration or login, your IP address may be collected and stored by Google.
You can withdraw or adjust your consent and selection at any time under "Edit cookie settings".
4.4. Google Remarketing
In addition to Google Ads we use Google Remarketing. This application allows us to address you again after a visit to our website. Using cookies stored in your browser, Google records and evaluates your usage behaviour when you visit various websites. Google can thus recognise that you have already visited our website and show you our advertisements as you continue browsing the internet.
According to Google, the data collected in the course of remarketing is not combined with any personal data that Google may have stored elsewhere. In particular, according to Google, pseudonymisation is used for remarketing.
You can withdraw or change your consent and selection at any time under "Edit cookie settings".
4.5. Adition
Our website also uses components of ADITION Technologies AG, based in Düsseldorf ("Adition"), to display digital advertising material. Adition uses cookies for this. All information stored in these cookies is technical in nature and makes it possible, among other things, to track how often certain advertising material is displayed.
Further information on the Adition cookie, including its lifetime, is available on our website under "Edit cookie settings".
You can object to the collection of the data generated by the Adition cookie relating to your use of this website, and to its processing by Adition, by clicking the opt-out link provided at www.adition.com. This sets an opt-out cookie. If you delete your cookies, the opt-out process must be repeated. Please note that after opting out you may no longer be able to use all functions of this offering to their full extent.
You can withdraw or change your consent and selection at any time under "Edit cookie settings".
4.6. Facebook, Instagram and LinkedIn
In order to show you advertising content tailored to you, Instagram Ads, Facebook Ads and LinkedIn Ads may also be used with your consent. The information used for this is not directly personal. User-related information is stored both on servers within the European Union (Ireland) or the EEA and in third countries for a period of up to 90 days.
The Facebook, Instagram and LinkedIn pixels make it possible to track whether users were directed to our website after clicking one of our advertisements on Instagram, Facebook or LinkedIn. These pixels use, among other things, cookies that are placed in your browser cache on your device. If you are logged in to Instagram, Facebook or LinkedIn with your user account, your visit to our website is attributed to that account. The data collected about you is anonymous to us and does not allow us to identify individual people. Instagram, Facebook or LinkedIn may, however, link this data with your user account there.
User-related information is stored on servers in the EU/EEA (in particular Ireland) and in third countries. The cookies used have a lifetime of up to 2 years.
You can withdraw or change your consent and selection at any time under "Edit cookie settings".
5. Server log files
To improve system performance and usability and to provide relevant information about our services, the provider of this website automatically collects and stores information in so-called server log files that your browser transmits to us. This includes in particular your IP address, browser type and version, language settings, operating system, referrer URL, your internet service provider and the date and time of access.
Temporarily storing the IP address is necessary to enable the website to be delivered to the user's computer; for this, the IP address must remain stored for the duration of the session.
Storage in log files also serves to ensure the functionality of the website, to optimise the website and to guarantee the security of our IT systems.
We reserve the right to review this data subsequently if there are concrete indications of unlawful use.
6. Legitimate interest in hosting advertising material (Art. 6 (1) (f) GDPR, § 1 of the Austrian Data Protection Act)
Data is processed on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR in conjunction with § 1 of the Austrian Data Protection Act. Our legitimate interest lies in providing, securely operating and continuously optimising our cloud infrastructure for delivering online advertising material.
To ensure system security and technical stability and to defend against and analyse attacks (e.g. inadmissible access attempts, DDoS attacks), access data is processed in the form of server log files. This may include processing the IP address. This processing corresponds to the practice recognised in Austria and the EU for ensuring IT security and the proper operation of online services.
Processing takes place exclusively for the purposes stated and is limited to what is necessary for them (principle of data minimisation). IP addresses are stored for a maximum of 90 days and then deleted, unless longer retention is required in an individual case to investigate a specific security incident.
The data is not used for marketing or tracking purposes. No cookies are used. In addition, anonymised data is processed for statistical purposes in order to analyse and continuously improve the functionality and performance of our systems.
6.1. Balancing of interests
In the balancing of interests pursuant to Art. 6 (1) (f) GDPR we take into account in particular the reasonable expectations of users and the intensity of the interference caused by the processing. Since the processing serves security-related purposes only, no profiling takes place, no combination with other data occurs and the storage period is clearly limited, our legitimate interests in the secure and stable operation of the infrastructure outweigh the interests or fundamental rights and freedoms of the data subjects.
6.2. Data disclosure
The data is generally not passed on to third parties, unless this is necessary to fulfil legal obligations or to assert or defend legal claims.
6.3. Data security
We use appropriate technical and organisational measures pursuant to Art. 32 GDPR to ensure a level of protection appropriate to the risk and to protect the processed data against unauthorised access, loss or manipulation.
7. Your rights as a data subject
Data subjects whose personal data we process have the right at any time to request information about the data concerning them, the purpose of the processing, the origin of the data and any recipients. Please send us a short email with a copy of your ID to: office@dsr.agency. We will answer your request as quickly as possible, in any case within one month.
In addition, under the conditions set out in the GDPR, data subjects have the right
- to object to the processing of their data,
- to request the restriction of processing and/or
- to demand the rectification or erasure of their data.
A short email is sufficient for this as well, again with a copy of your ID and a precise description of your request, to: office@dsr.agency.
For questions, suggestions or complaints you can contact us at any time by email at office@dsr.agency.
If data subjects believe that one of the companies named in this privacy notice is processing their data contrary to data protection law, they have the right to contact the competent supervisory authority (in Austria: the Data Protection Authority).
8. Data security
Personal data is protected by appropriate organisational and technical measures. These measures serve in particular to protect against unauthorised, unlawful or accidental access, processing, loss, use or manipulation.
Despite the careful implementation of a high security standard, it cannot be entirely ruled out that information you transmit to us over the internet may be viewed and used by unauthorised third parties.
We endeavour to detect any data breaches early and — where required — to report them without delay to the affected data subjects and the competent supervisory authority, taking into account the categories of data concerned.
8.1. Links to third-party websites and content
The content of our website may refer to other websites and their content. These external websites are not subject to the responsibility and control of DSR Agency and may have their own privacy policies. DSR Agency accepts no responsibility or liability for the use and content of these websites; this also applies to the data processing that takes place there.
If you have questions about data protection at DSR Agency, you can contact us at any time by email at office@dsr.agency.