Privacy policy
In this privacy statement we explain how we process your personal data. We recommend that you read this statement carefully. In our processing, we comply with the requirements of the GDPR.
We clearly state the purposes for which we process personal data. We do this with the help of this privacy statement. We strive to limit the collection of personal data to the personal data necessary for the legitimate purposes. In cases where your consent is required, we first obtain your explicit consent to process your personal data. We take reasonable security measures to protect your personal data. We grant you your right to access your personal data or have it corrected or deleted at your request.
If you have any questions or would like to know exactly what information we hold about you, please contact us at [email protected]
1. How we receive your personal data
In most cases, we receive your personal data directly from you when you contact us directly. This may be through the following channels:
- Phone
- Social media (Facebook, Instagram or LinkedIn)
- In person (exchanging contact information, such as a business card, at a face-to-face meeting).
If we do not receive your personal data directly from you, we will receive your personal data through one of the following channels:
- Referral (A third party forwards us your data with your consent).
2. Purpose, data and retention period.
We have the following purposes for processing your personal data:
- Customer contact
We process your personal data primarily in order to stay/get in contact with you. We also process your personal data in order to conclude a contract with you, if applicable. In addition, your personal data may be necessary for the financial processing and the performance of the requested services. - Applicants
We process your personal data to be able to assess whether you are suitable for the position you are applying for, to obtain information about you as an applicant and to be able to recruit staff if necessary. - Partner
We process your personal data in order to be able to stay/get in contact with you to ensure an efficient cooperation.
Information and advertising - We process your personal data in order to communicate with you independently of a current business relationship or in order to be able to contact you. For example, to send you offers, advertising brochures and newsletters (in paper and electronic form)
- Self-promotion
We process your personal data for the purpose of referring to the existing or former business relationship with you (reference) when we engage in self-promotion.
For the above purposes, we use the following data:
- Customer contact
We process your name, date of birth, telephone number, email address, company registration number, business address, billing address and other addresses and your position in the company. If we do marketing work for you, we also process the website and/or webshop you manage or own. Without this personal data we cannot conclude the contract with you. If you send us or we send you an invoice, we also process all the data mentioned on it. The provision of your personal data is not mandatory, but necessary for the contract. - Applicants
In addition to your contact details, we process all personal data that you provide to us when applying for a job. For example, think of education, evaluations and a letter of motivation. Providing your personal data is not mandatory. If you do not provide us with your personal data, we will not be able to process your application with you. - Partner
We process your name, telephone number, e-mail address, business address and other addresses and your position in the company. The provision of this personal data is not mandatory. However, we cannot ensure efficient cooperation without your personal data. If you send us or we send you an invoice, we also process all data mentioned on it. - Information and advertising
We process your name, e-mail address and business address to provide you with information (promotional and non-promotional). - Self-promotion
We process your name and publicly available data (e.g. internet address) for reference purposes.
From a business perspective, the provision of this personal data is a necessary condition for the conclusion of a contract with you. You are not obliged to provide this personal information. The moment you do not provide us with your personal data, the consequence is that we cannot conclude a contract with you. In a non-business context, the provision of your personal data is of course not obligatory. However, without your personal data, we will not be able to contact you, maintain contact or send you promotional materials.
3. The basis on which we may process this data.
Personal data may only be processed if we have a basis for doing so. We have the following bases for processing your personal data:
- Customers
Your personal data is necessary for the contract we have with you or your company. In addition, all billing information is subject to the legal obligation to process. Finally, we have a legitimate interest in processing your contact information. Without this information, we would not be able to contact future or former customers. - Applicants
We ask for your consent to process your personal data. We also have a legitimate interest in processing your personal data. Without applicants, the continued existence of our company could be at risk. - Partner
We expressly ask for your consent to process your personal data. Without this information, cooperation would not be possible. - Others
We ask for your consent to process your personal data. In addition, the personal data is necessary in a business context for the contract we have concluded with you. In all other cases, we have a legitimate interest in processing your personal data. Without these processes, we can no longer establish the relationships that are necessary for us. The processing of billing data is a legal obligation.
4. Storage of your personal data
We never keep your personal data longer than necessary. We have therefore established the following retention periods, some of which are based on legal obligations.
- Customers
We keep your personal data for the duration of the contractual relationship. After termination of the contract, your contact data will be kept for a period of 18 months. - Applicants
In principle, we will keep your personal data for one (1) month. With your consent, we will store your personal data for a maximum of one (1) year. - Partner
We will keep your personal data for the duration of the cooperation. After the end of the collaboration, your contact information will be kept for a period of 18 months. - Others
We never keep your personal data longer than necessary. We keep your personal data for the duration of the business contact and other legal retention periods where the data serves as evidence. If, based on your consent, you wish to contact us prior to entering into a contract or remain in contact after entering into a contract (e.g.: receiving product information), then we will store your data until you revoke it.
5. Sharing of your personal data
We may share your personal information with our partners and external service providers as necessary to provide the service. Financial data is shared with our accountants, tax advisors, banks and various payment service providers. If courts and authorities want to see your data, then we will share your data. Should it be necessary, then we will transfer your data to debt collection agencies for debt recovery.
In addition, personal data may be stored in our CRM system. We use the ActiveCampaign, LLC marketing platform as our CRM system. For more information on the data processing of this platform, visit their privacy policy: www.activecampaign.com/legal/privacy-policy. If there is a legal obligation to do so, we may disclose your personal data to a supervisory or other authority.
It is possible that some of our partners may also process your data outside the EU or EEA. The adequate level of protection results from an adequacy decision of the European Commission according to Art 45 DSGVO.
6. Security
We are committed to the security of personal data. We take appropriate security measures to limit the misuse of and unauthorized access to personal data. For example, we ensure that only the necessary persons have access to your data, that access to the data is protected and that our security measures are regularly reviewed.
7. Third party websites
This privacy policy does not apply to third-party websites that are connected by links on our website. For example, if you share one of our project on social media or click on related links in our blog articles. We cannot guarantee that these third parties will handle your personal information in a reliable or secure manner. We recommend that you read the privacy statements of these websites before using them.
8. Changes to this privacy policy
We reserve the right to make changes to this Privacy Policy. We recommend that you read this Privacy Policy regularly to be aware of any changes. In addition, we will actively inform you as far as possible.
9. Accessing and changing your data
If you have any questions or would like to know what personal data we hold about you, please contact us at: [email protected] You can contact us using the information below. You have the following rights:
- You have the right to know what your personal data is needed for, what happens to it and how long it is stored.
- Right of access: you have the right to access your personal data known to us.
- Right to rectification: you have the right to have your personal data completed, rectified, deleted or blocked whenever you wish.
- If you have given us your consent to process your data, you have the right to revoke this consent and have your personal data deleted.
- Right to data portability: you have the right to request all of your personal data from the controller and have it transferred in its entirety to another controller.
- Right to object: you may object to the processing of your data. We will comply with this unless there are legitimate grounds for processing.
Please make sure that you always clearly state who you are so that we can be sure that we do not change or delete data of the wrong person.
10. Cookies
Cookies are small files that send back information from visited pages and store it on your computer. This information is primarily used to ensure the functionality of the website and provide a pleasant user experience. Abovethese, there are also cookies that collect information about user behavior and therefore require consent from the user.
We only use functional cookies on our website. Functional/necessary cookies are required for the proper functioning of the website and do not fall under the “Cookie Consent Act”. Therefore, we do not have a cookie banner asking for your consent. However, we hereby inform you about the use of functional cookies in the privacy policy. While you can block or delete these cookies in your browser settings, you must be aware that it may affect your use of the website.
11. International data transfer
It is possible that the transfer of your data to third parties (point 5) means a data transfer outside the EU. The level of data protection in these countries may differ from the level within the European Union. Here, we make every effort to transfer your personal data to third parties where we also have confidence that your data will be handled professionally. But we cannot control the actual processing of your data by third parties and therefore we do not assume any liability for inappropriate processing of it by third parties.
12. Contact information
onpavo
Lukas Pichler
Eschengasse 10
7442 Lockenhaus | Austria
Phone: +4368120860087
Email: [email protected]
Web: www.onpavo.at