Information on data processing pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR)
The protection of your personal data is of particular concern to us. We therefore process your personal data (in short “data”) exclusively on the basis of the statutory provisions. With the data protection declaration we want to inform you comprehensively about the processing of your data in our company and the data protection claims and rights to which you are entitled.
1. Who is responsible for data processing and who can you contact?
Block & Wine
c/o Validvent Ventures GmbH in Gründung
weXelerate – Praterstraße 1/Space 31
E-Mail: [email protected]
2. What data is processed and from which sources does this data originate?
We process the data that we receive from you in the course of the business initiation and relationship. In addition, we process data that we have permissibly received from credit agencies, creditor protection associations, from publicly accessible sources (e.g. company register, register of associations, land register, media) and other companies with which we have a permanent business relationship.
Personal information includes:
Your basic contact data such as:
- as a private customer: name and surname, address, contact data (e-mail address, telephone number, fax), date of birth, data from submitted proof of identity (copy of ID card), bank data
- as a corporate customer: company name, company register number, VAT number, company number, address, contact person contact data (e-mail address, telephone number, fax), bank data
In addition, we also process the following other personal data:
- Information about the nature and content of our business relationship, such as contract data, order data, sales and document data, customer and supplier history, consulting documents, information about your financial status (e.g., creditworthiness data),
- Advertising and sales data, documentation data (e.g. consultation protocols), image data, information from your electronic traffic with us (e.g. IP address, log-in data), other data that we have received from you in the course of our business relationship (e.g. in customer meetings), data that we generate ourselves from master/contact data as well as other data, such as by means of customer demand and customer potential analyses.
3. For what purposes and on what legal basis is the data processed?
We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act as amended:
- for the fulfillment of (pre-)contractual obligations (Art 6 para. 1lit.b GDPR): Your data is processed for the sale and distribution of our goods and services, for procurement and logistics purposes, and for customer management and analysis. In particular, the data is processed when initiating business and executing contracts with you.
- for the fulfillment of legal obligations (Art 6 para. 1 lit.c GDPR): Processing of your data is necessary for the purpose of fulfilling various legal obligations, e.g. from the Unternehmensgesetzbuch (UGB) or the Bundesabgabenordnung (BAO), money laundering regulations, product-specific regulations such as the AusgangsstoffVO, Chemikaliengesetz.
- for the protection of legitimate interests (Art. 6 para. 1 lt.f GDPR): Based on a balancing of interests, data processing may take place beyond the actual performance of the contract for the protection of legitimate interests of us or third parties. In any case, in the following cases, data processing is carried out to safeguard legitimate interests:
o Consultation of and data exchange with credit bureaus and creditor protection associations to determine creditworthiness data;
o Advertising or marketing
o Measures for business management and further development of services and products;
o Measures to protect our company against conduct in breach of contract or the law, e.g. access controls, video surveillance;
o in the context of legal prosecution.
- within the scope of your consent (Art 6 para. 1 lit.a GDPR):
o If you have given us consent to process your data, processing will only take place in accordance with the purposes and to the extent agreed in the declaration of consent. Consent given can be revoked at any time with effect for the future, e.g. for sending our newsletter or for data transfer to third parties. This does not affect the lawful processing of your data prior to revocation. To do so, please contact our e-mail address specified in point 1.
4. Who receives your data?
If we engage a processor, we still remain responsible for the protection of your data. All order processors are contractually obligated to treat your data confidentially and to process it only in the context of providing the service. The processors we commission receive your data if they need the data to perform their respective service. These are IT service providers that we require for the operation and security of our IT system as well as advertising and address publishers for their own advertising campaigns.
For the purposes of company-related and individual advertising/customer care, your data will be transferred with your consent to our own affiliated companies and to other companies in a permanent business relationship.
For the purpose of creditor protection, we transmit master data and information on your financial status to credit insurers, credit protection associations and credit agencies.
In the event of a legal obligation and in the context of legal prosecution, authorities and courts as well as external auditors may be recipients of your data.
In addition, insurance companies, banks, credit agencies and service providers may be recipients of your data for the purpose of initiating and fulfilling contracts.
For a better understanding of the categories of recipients mentioned under point 4, you will find a selection of individual companies under the following link.
5. How long will your data be stored?
We process your data until the termination of the business relationship or until the expiry of the applicable guarantee, warranty, limitation and statutory retention periods (such as from the Unternehmensgesetzbuch (UGB), the Bundesabgabenordnung (BAO)); furthermore, until the termination of any legal disputes in which the data is required as evidence.
6. What data protection rights do you have?
You have a right to information, correction, deletion or restriction of the processing of your stored data at any time, a right to object to the processing as well as a right to data portability and to lodge a complaint in accordance with the requirements of data protection law.
6.1 Right to information:
You can request information from us as to whether and to what extent we process your data.
6.2 Right to rectification:
If we process your data that is incomplete or incorrect, you can request that we correct or complete it at any time.
6.3 Right to deletion:
You can demand that we delete your data if we process it unlawfully or if the processing disproportionately interferes with your legitimate interests of protection. Please note that there may be reasons that prevent immediate deletion, e.g. in the case of legally regulated retention obligations.
6.4 Right to restriction of processing:
You may request us to restrict the processing of your data if
o you dispute the accuracy of the data for a period of time that allows us to verify the accuracy of the data.
o the processing of the data is unlawful, but you refuse erasure and request restriction of data use instead,
o we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or
o you have objected to the processing of the data.
6.5 Right to data portability:
You may request that we provide you with the data you have provided to us in a structured, commonly used and machine-readable format and that you may transfer this data to another controller without hindrance from us, provided that
o we process such data on the basis of consent given by you, which may be revoked, or for the performance of a contract between us; and
o this processing is carried out with the aid of automated procedures.
If technically feasible, you may request that we transfer your data directly to another data controller.
6.6 Right of objection:
If we process your data for legitimate interest, you may object to this data processing at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. You may object to the processing of your data for the purpose of direct marketing at any time without giving reasons.
6.7 Right of appeal:
If you are of the opinion that we are violating Austrian or European data protection law in the processing of your data, we request that you contact us in order to clarify any issues. Of course, you also have the right to complain to the Austrian data protection authority or to a supervisory authority within the EU.
7. With whom can you assert these rights?
If you wish to exercise any of the aforementioned rights against us, please contact our e-mail address indicated in point 1. In case of doubt, we may request additional information to confirm your identity. This serves to protect your rights and your privacy.
8. Are you required to provide data?
The processing of your data is necessary for the conclusion or performance of your contract entered into with us. If you do not provide us with this data, we will usually have to refuse the conclusion of the contract or the execution of the order or will no longer be able to perform an existing contract and consequently have to terminate it. However, you are not obliged to give your consent to data processing with regard to data that is not relevant for the performance of the contract or that is not required by law.
9. Will the personal data be transferred to a third country?
In principle, we do not transfer any data to a third country. A transfer takes place in individual cases only on the basis of an adequacy decision of the European Commission, standard contractual clauses, appropriate guarantees or your express consent.
10. Application data
If you send us your application, your application data will only be made available to the authorized persons involved in the application process. Your application data will be stored for a maximum of two years, also in order to be able to offer you alternative positions if necessary.
11. Cookies and Tracking-Tools
Open or edit Cookies and Tracking Cookie Consent Manager:
Duration: 3 months
Duration: 0 days
Duration: 12.2 months
Duration: 12.2 months
Duration: 12.2 months
Duration: 12.2 months
Duration: 12.2 months
Duration: 12.2 months
Duration: 1 days
Duration: 2 years
Type: 3rd party
If you do not wish this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases.
When disabling cookies, the functionality of our website may be limited.
11.2 Tracking tools and use of Google Analytics
On our website, general information about the usage behavior of visitors is collected with the help of analysis tools. This includes, for example, pages viewed, duration of visit, referring pages, as well as general information about your computer system such as operating system, screen resolution, browser used, etc.. All collected data is stored anonymously and does not allow any assignment to your person. If you do not agree with this anonymized collection of your usage behavior, you can prevent it by disabling cookies in your browser.
We inform that this website uses Google Analytics exclusively by using a deactivation add-on “_anonymizeIp()”. Your IP address will not be stored in full. The identification of the visitor of the website is excluded.
By installing the browser add-on to deactivate Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=de), you can object to its use. By doing so, you tell Google Analytics that no information about the website visit should be transmitted to Google Analytics. Without your explicit consent, we will not use tracking tools to
o collect personal information about you,
o transmit such data to third-party providers and marketing platforms or
o link the data with your personal data (name, address, etc.).
The browser add-on to disable Google Analytics is compatible with Chrome, Internet Explorer 8-11, Safari, Firefox and Opera.
12. Use of SocialSharing
For the social sharing functionalities, we do not use plugins of the respective social media services. Instead, we only set a text link or an image link. As a result, no data, such as your IP address, browser used, screen resolution, the web page accessed, date and time, is transmitted to the respective social media services.
Such links may look like this: www.facebook.com/sharer/sharer.php
If you click on a social sharing link while logged into your respective social media account, you can share the content of our pages on your profile. This allows the social media service to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook.
13. Contact possibility via the website
Due to legal requirements, our website contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or by using a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted on a voluntary basis by a data subject to the controller will be stored for the purpose of processing or contacting the data subject. No disclosure of this personal data to third parties will take place.
14. YouTube video embedding
If you want to make sure that YouTube does not store any of your data, do not click on the embedded videos.
15. Use of Google reCaptcha
16. Google Maps use
17. Google Tag Manager
This website uses the Google Tag Manager. Through this service, website tags can be managed through an interface. The Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.
18. External images
This website uses images from unsplash.com and envato.com.