Data Privacy Policy
In this privacy policy, we will inform you about data processing that is related to our website www.pidso.com or www.pidso.at as well as the contact options offered on these websites. We will inform you about data processing that affects every website visitor and takes place when using our general contact form (point 2) as well as the processing of your data when you apply to us via our “Careers” page (point 3).
- Controller and contact options
The controller for the data processing is the
PIDSO – Propagation Ideas & Solutions GmbH
Wallackgasse 2
1230 Vienna
FN 348498y, Commercial Court of Vienna
For questions and concerns about data protection, please contact us at datenschutz@pidso.com.
- Visitors to our website
- Purposes of the processing and legal bases
We process your personal data
- on the basis of your consent (§ 165 TKG [Telecommunications Act], Art. 6 (1) (a) GDPR) if the data processing is carried out by setting non-technically-necessary cookies (for the use of cookies, see point 2.d.)
- on the basis of overriding legitimate interests (Article 6 (1) (f) GDPR), namely
- preventing and deterring attacks on the technical infrastructure of our website;
- preventing, detecting and impeding the misuse of our website;
- communicating with you via our contact form;
- analyzing user behavior and improving our services (for the use of cookies, see point 2.d.);
- presenting our company headquarters and offering an option for route planning to our company headquarters
- Recipient
In order to achieve these intended purposes, it may be necessary to disclose your personal data to third parties:
If there is a legal obligation to do so, we transmit personal data to public authorities and institutions (e.g. law enforcement authorities, courts).
- Duration of processing
We store and process your personal data as long as this is necessary to fulfil the purpose of the processing.
Personal data in connection with the use of the contact form is kept for seven years in accordance with corporate law (§ 212 UGB). In individual cases, such as pending administrative or judicial proceedings, this storage period may also be longer than seven years. In the event of foreseeable legal disputes, your personal data may also be retained for a longer period, in any case until the expiry of the relevant statutes of limitation for legal claims.
- Cookies
When using our website, we use cookies to temporarily store certain information. Some cookies are (technically) necessary for the operation of our website and are always set. Other cookies, on the other hand, are not absolutely necessary for the operation of the website, but serve, for example, to increase user-friendliness or to analyze user behavior.
Technically necessary cookies
The following technically necessary cookies are set on our website:
Not technically necessary cookies
Not technically necessary cookies are set exclusively on the basis of your consent, if you have given this via the cookie banner (§ 96 TKG, Art. 6 (1) (a) GDPR). You can change your cookie banner settings at any time by calling up the cookie banner again by clicking on the floating button in the lower left-hand area of the website and revoking your consent.
- Applying to PIDSO
- Purposes of the processing and legal bases
We process your personal data
- for the implementation of pre-contractual measures or the conclusion of a service contract (Art. 6 (1) (b) GDPR)
- on the basis of overriding legitimate interests (Article 6 (1) (f) GDPR), namely
- the exercise and defense of legal claims (in particular with regard to the Equal Treatment Act)
- based on your consent (Art. 6 (1) (a) GDPR) to the keeping of evidence of your application documents
- Recipient
In order to achieve these intended purposes, it may be necessary to disclose your personal data to third parties:
If there is a legal obligation to do so, we transmit personal data to public authorities and institutions (e.g. law enforcement authorities, courts).
- Duration of processing
If your application is rejected, we will store your application documents for a period of seven months from the date of notification of the rejection (§§ 15 (1), 29 (1) of the Equal Treatment Act + one month).
If you give us your consent for us to keep your application documents as evidence, we will store them for the duration of the processing covered by the consent or at the latest until your consent is revoked.
- Rights of data subjects
As a data subject, you have the rights described below. If we have reasonable doubts about the identity of your person in the exercise of one of the rights of a data subject, we may request additional information from you that is necessary to confirm your personal identity.
With those rights that are asserted by means of a request, we have a month to comply with it.
Right of access under Art. 15 GDPR
You have the right to information about the personal data we process concerning you at any time. The right to information also includes the right to receive a copy of data, provided that this does not affect the rights and freedoms of other persons. To create such a copy of the data, we may charge you a reasonable fee based on the administrative costs.
Right to rectification under Art. 16 GDPR
You have the right to request the rectification or completion of incorrect data about you.
Right to erasure under Art. 17 GDPR
You generally have the right to request the erasure of data about you. However, this right to erasure does not apply if the processing is required:
- for the right to freedom of expression and information; or
- for the performance of a legal obligation which requires processing under the law of the EU law or a Member State to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; or
- for reasons of public interest in the field of public health; or
- for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes, insofar as the erasure is likely to render impossible or at least seriously impair the achievement of the objectives on which the processing is based; or
- to assert, exercise or defend legal claims.
Right to restriction of processing under Art. 18 GDPR
You have the right to request the restriction of processing, provided that at least one of the following conditions is met:
- the accuracy of the personal data is disputed by you for a period that allows the controller to verify the accuracy of the personal data; or
- the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data; or
- the controller no longer needs the personal data for the purposes of the processing, but you do need them to assert, exercise or defend legal claims; or
- after an objection has been filed in accordance with Article 21 (1) GDPR, as long as it has not yet been determined whether the legitimate reasons of the controller outweigh your interests.
If you have exercised your right to restriction of processing, we may process this personal data – with the exception of the storage of this data – only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
Right to object under Art. 21 GDPR
You have the right to object to processing based on an overriding legitimate interest on our part or on the part of a third party (under Article 6 (1) (f) GDPR). If you lodge an objection, we will no longer process your data, unless the processing serves to assert, exercise or defend legal claims or we demonstrate compelling legitimate grounds for the processing that outweigh your interests.
An objection to the processing of personal data for direct marketing purposes is possible at any time and will lead to us no longer being allowed to process your data for this purpose.
Right to data portability under Art. 20 GDPR
In principle, you also have the right to receive the transmission of the data provided by you in a structured, commonly used and machine-readable format and to transmit this data to another controller. However, the right to data portability only applies if the processing is based on your consent or on a contract, and the processing is carried out using automated methods.
Right to complain under Art. 77 GDPR
If you believe that the processing of your data has been unlawful and violates the GDPR, you have the right to lodge a complaint with the responsible data protection authority. The place jurisdiction depends on your place of residence or work.
You can reach the Austrian Data Protection Authority at
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna