Data privacy

Information on Data Processing

Information on Data Processing pursuant to Articles 13 and 14 of the General Data Protection Regulation (Privacy Policy)
Wir nehmen den Schutz Ihrer persönlichen Daten sehr ernst. Wir behandeln Ihre Daten vertraulich und entsprechend den gesetzlichen Vorschriften. Wir informieren Sie hiermit über die Verarbeitung Ihrer personenbezogenen Daten und die Ihnen zustehenden datenschutzrechtlichen Ansprüche und Rechte. Der Inhalt und Umfang der Datenverarbeitung richtet sich maßgeblich nach der mit Ihnen bestehenden Geschäftsbeziehung.

Who is responsible for data processing and who can you contact?

Responsible for data processing:

KAPSCH HOLDING GMBH
Stock im Eisen-Platz 3/22
A-1010 Vienna

Contact details of the data protection coordinator:
Mag. Oliver Schlief
Telephone: +43 1 512 787 750
E-Mail: schlief@kapsch-holding.net

What data is processed and from what sources does it come?

We process the personal data that we receive from you in the course of our business relationship. Additionally, we process data obtained from credit agencies, debtor directories, and from publicly available sources (e.g., commercial register, association register, land register, or media) as permitted by law, or data that is legitimately transmitted to us by other affiliated companies.

Personal data includes your personal details and contact data (e.g. name, address, date and place of birth if applicable, nationality, etc.) or data relating to identity and travel documents (e.g. specimen signature, ID data).

For what purposes and on what legal basis are the data processed?

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Austrian Data Protection Act 2018:

  • To fulfill contractual obligations (Art. 6 para. 1 lit. b GDPR)
    The processing of personal data (Art. 4 No. 2 GDPR) is carried out to maintain our business relationship, especially to execute contracts with you or your company, as well as to carry out pre-contractual measures.
  • To fulfill contractual obligations (Art. 6 para. 1 lit. b GDPR)
    The processing of personal data may be necessary for the purpose of fulfilling various legal obligations (e.g. from the VAT Act, the Federal Fiscal Code, the Income Tax Act, etc.) and due to legal requirements to which we are subject.
  • Based on your consent (Art. 6 para. 1 lit. a GDPR)
    If you have given us consent to process your personal data for specific purposes, processing will only be carried out in accordance with the purposes and scope agreed upon in the consent declaration. A given consent can be revoked at any time with effect for the future.
  • To safeguard legitimate interests (Art. 6 para. 1 lit. f GDPR) in general
    If necessary, data processing may be carried out to safeguard legitimate interests of our company or third parties through a balance of interests. For example, data processing for the following purposes may be carried out:
    • Consultation with and exchange of data with credit agencies (e.g., Austrian Credit Protection Association 1870) to determine credit or default risks
    • Examination and optimization of procedures for needs analysis and direct customer/business partner approach
    • Measures for business control and further development of services and products
    • Data processing for legal purposes
    • Assertion of legal claims and defense in legal disputes
    • Ensuring IT security and IT operations of our company
    • Prevention and investigation of criminal offenses
    • individual information and offers within the scope of the business relationship, which Kapsch Holding arranges, provides or transmits, as well as to develop services and products that are tailored to your interests within the scope of the business relationship.

The analysis of your data listed above is based on our legitimate interest in marketing our services. The data will only be analyzed for this purpose for as long as you have not objected to it.

Who will receive my data?

Within our company, those departments or employees receive your data that need it to fulfill contractual, legal and/or other obligations as well as legitimate interests. In addition, contractually bound processors (in particular IT and back office service providers, accounting, payroll accounting, auditing) will receive your data if they require the data to fulfill their respective services. The following data, which we have collected ourselves or which you have transferred to us, will be evaluated for this purpose:

Personal data/master data: Gender, title, name, date of birth, citizenship, marital status, tax status, address and other contact data such as telephone number or e-mail address and postal address, product and service data.

Will data be transferred to a third country or to an international organization?

Will data be transferred to a third country or to an international organization?

Ihre Daten können im Zuge unserer Datensicherungsmaßnahmen, aber auch fallweise zur Abwicklung größerer Geschäftsfälle zumindest zum Teil auch außerhalb der EU bzw. des EWR verarbeitet werden, z.B. im Zuge von Cloudlösungen. Wir verwenden nur Cloudanbieter, die sich verpflichten mit europäischen Datenschutz- und Sicherheitsvorgaben übereinzustimmen. (Standard Contractual Terms, Selbstzertifizierung unter dem EU‐US DPF.) Über Einzelheiten werden wir Sie, sofern gesetzlich vorgegeben, gesondert informieren.

How long will my data be stored?

We process your personal data for as long as necessary for the duration of the entire business relationship (from initiation, execution to termination of a contract) and beyond in accordance with legal retention and documentation obligations, which arise, among other things, from the Austrian Commercial Code (UGB) and the Federal Fiscal Code (BAO).

What data protection rights do I have?

You have the right to access, correct, delete, or restrict the processing of your stored data, as well as the right to object to the processing and the right to data portability according to the requirements of data protection law. Complaints can be addressed to the Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna, www.dsb.gv.at. If you have given us consent, you can revoke this consent at any time. Revoking consent means that we will no longer process your data for the purposes mentioned, unless other legal provisions allow it. Please contact the above-mentioned contact person to revoke consent.

Am I obligated to provide data?

You are required to provide the personal data necessary for the initiation and performance of the business relationship and which we are legally obligated to collect. If you do not provide us with this data, we cannot conclude the contract or continue to perform existing contracts and must therefore terminate them. However, you are not obliged to give consent to the processing of data that is not relevant for the performance of the contract or for which there is no legal or regulatory obligation.