Processing activities
1. Website use
Purpose and scope
Each time our website www.cancom.at is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is automatically collected via log files:
- Browser type and the version used
- Operating system of the user
- Internet service provider of the user
- IP address
- Date and time of access
- Websites from which the user's system accesses our website
- Websites that are accessed by the user's system via our website
We process your personal data in order to detect, prevent and investigate attacks on our website. The storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. Data is also stored in log files to ensure the functionality of the website and to enable it to be optimized
Please refer to our cookie statement for information on the cookies we collect via the website.
Legal basis
The temporary storage of certain data is necessary for the security of our IT systems and allows us to offer you a user-friendly browsing experience, which is why the legal basis for the processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user therefore has no right to object in accordance with Art. 21 GDPR.
Recipients of data
We use IT service providers to operate and manage the website, who may also have access to personal data on our behalf and in accordance with our instructions in order to be able to provide the commissioned IT services.
Your data will not be passed on to other third parties for their own purposes without your consent.
Duration of storage
The data relating to your visit to the website will be deleted or anonymized at the end of your visit. It is possible to store anonymized data beyond this. This means that in this case the IP addresses of the users are alienated so that an assignment of the calling client is no longer possible and accordingly no personal reference is possible.
2. Contact form or e-mail
Purpose and scope
You have the option of requesting information about our company, our products and activities or events via a contact form on our website or by email. When you contact us, the data you provide (title, first name and surname, contact details, content of your inquiry and any other information you provide) will be processed by us in order to answer your questions and process your request.
You are free to provide us with your data for your request. However, if you do not provide us with this data, we may not be able to process your request accordingly.
Legal basis
The data processing following your contact with us is carried out in accordance with Art. 6 Para. 1 S 1 lit b GDPR in order to be able to process your request.
Recipient of data
We use Flownative GmbH, Arnimstraße 19C, 23566 Lübeck, Germany, to store and host the personal data, which therefore has access to personal data in accordance with our instructions and our instructions in order to be able to provide the commissioned IT services.
Duration of storage
The data will be stored for as long as the contact with the data subject exists, but for no longer than one year after your last contact with us.
3. Newsletter registration
Purpose and scope
You can register for our newsletter and other mailings in order to receive information about the latest topics relating to our company, our services, events and other information material.
In addition to your e-mail address, you must also provide your name on some forms so that we can address you personally in the newsletter. You can voluntarily provide further data in some registration forms (e.g. address).
In addition, the following data is collected during registration: IP address of the accessing computer and the date and time of registration. The collection of this data as part of the registration process serves to prevent misuse of the services or the e-mail address used.
Legal basis
The legal basis for the aforementioned data processing is Art. 6 para. 1 sentence 1 lit. a GDPR. When using the data for this purpose, the provisions of communications law, in particular Section 174 TKG 2021, are complied with.
Recipients of data
We use IT and marketing service providers to send the newsletter, who only have access to personal data on our behalf and in accordance with our instructions in order to be able to provide the commissioned services.
Withdrawal of consent
You can cancel your subscription to the newsletter at any time. You have the option of refusing to receive future newsletters and emails electronically, free of charge and without any problems.
Duration of storage
The data processed in this context will be stored for as long as you have subscribed to the newsletter and therefore until you withdraw your consent.
4. Direct marketing
This processing activity also includes customer satisfaction surveys.
Purpose and scope
We use your personal data, insofar as you provide it in the course of an inquiry via a contact form or e-mail, or to receive the newsletter, for direct marketing purposes, namely to send you general information about CANCOM activities and products and to align our marketing strategies accordingly, unless you object to the use of your data for this purpose in advance.
Legal basis
The use of direct advertising is a legitimate interest of ours in order to reach interested parties and business partners in the best possible way. The legal basis for processing is therefore the existence of a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.
When using the data for this purpose, the provisions of communications law, in particular Section 171 TKG 2021, are complied with.
Recipients of data
We use Flownative GmbH as an IT service provider for the storage and hosting of personal data, which may also have access to personal data on our behalf and in accordance with our instructions in order to be able to provide the commissioned IT services.
We also use service providers for the provision of marketing services, the implementation of marketing campaigns and, in particular, for sending mailings.
Duration of storage
We store your data for up to three years after your last contact with us, unless you object to the processing of your data before then.
5. Event management
Purpose and scope
We process your personal data as an interested party or as a participant in events to organize and manage events and participation in them, as well as to manage the sending of invitations and other related documents. During the events, images and/or video recordings may be made for internal and public reporting.
Legal basis
Since we only process the data via your request for or participation in an event, we refer to Art. 6 para. 1 lit. b GDPR as the legal basis and therefore the fulfillment of a request/contract. If image and/or video recordings are made, the resulting processing (collection and possible publication) of personal data constitutes a legitimate documentation interest on our part as the organizer (Art. 6 para. 1 lit. f GDPR).
Recipients of data
We use third parties to provide services in connection with the organization of events. In this context, access to personal data is necessary. However, this is only done in accordance with our instructions.
Duration of storage
We store the data until the end of the event or until consent to the sending of event information (invitations, registration confirmations, reminders, follow-up) is withdrawn.
6. Software products of CANCOM
Purpose and scope
We process your personal data as a customer of one of our software solutions (e.g. Platyno) exclusively to enable the licensee to use the product. In this context, CANCOM processes the licensee's data as a user as part of the provision of the product.
Legal basis
Since we only process the data to fulfill a software delivery and/or software maintenance contract, we refer to Art. 6 para. 1 lit b GDPR as the legal basis and therefore the fulfillment of a contract.
Recipients of data
We store this data securely and do not transmit it to third parties. The legal basis for this storage and processing is the fulfillment of the contract or the implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit. b) GDPR.
Duration of storage
We store your data in any case until the end of the contract and for any longer statutory retention period.
Information about your rights as a data subject
In accordance with Art. 13 GDPR, you have the following rights with regard to your personal data
- Right to information in accordance with Art. 15 GDPR: You have the right to receive information from us at any time about which of your data is processed by us as part of your inquiry or registration.
- Right to rectification pursuant to Art. 16 GDPR: You may request the rectification or completion of inaccurate or incomplete data.
- Right to erasure in accordance with Art. 17 GDPR: You have the right to erasure of data under certain circumstances, for example if it is not processed in accordance with data protection requirements.
- Right to restriction pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your data in certain cases. Restriction means that your data will continue to be stored but that we will not take any other processing steps with regard to your data. You can request the restriction if: (i) you have contested the accuracy of the personal data, or (ii) the processing is unlawful and you oppose the erasure, or (iii) the data is no longer necessary for the purposes of the processing, but may be required for the establishment, exercise or defense of legal claims.
- Right to data portability pursuant to Art. 20 GDPR: You also have the right to receive your data in a structured, commonly used and machine-readable format. At your request, your data will also be transmitted directly to other providers if this is technically feasible.
- Right to object pursuant to Art. 21 GDPR: You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR.
Right to lodge a complaint and supervisory authority
Irrespective of the possibility of a complaint to the regional court in accordance with Section 29 (2) of the Data Protection Act 2018 and any other legal remedies, you have the right to lodge a complaint with the national supervisory authority of your place of residence if unlawful processing of personal data is assumed. In Austria, the data protection authority is responsible.
Contact
In data protection matters and to exercise your right of revocation and information, right to data portability and restriction or to correct or delete your data, please contact us at the following e-mail address: datenschutz@cancom.com
You can contact our data protection officer at the following email address: datenschutz@cancom.com
If your requests in accordance with this privacy policy are not complied with within one month, you have the right to lodge a complaint with the data protection authority.
Updating and amendment
Parts of this Privacy Policy may be changed or updated by us for technical or legal reasons without prior notice to you. Please always check the current privacy policy to ensure that you are up to date with any changes or updates.