Privacy Policy
Overview
If we welcome you as a participant in draws, customer or business partner, please read from point III.
If you use our app, please read from point II.
What data do we process if you use our app?
Welcome to the app 24hdrop! Please get a picture of how we process your personal data when you use our app (Art 13, Art 14 GDPR; section 165 (3) Austrian Telecommunication Act (“TKG”)).
When using our app, the following data may be processed:
- Browser type,
- Operating system,
- country,
- Date,
- Time and duration of access,
- IP address and pages visited on our website including entry and exit pages,
- e-mail address,
- payment data,
- telephone number,
- Postal address,
- data in the course of registration.
The processing of this data is necessary to ensure the security of the operation of the app and to ensure the functionality of the app from a technical point of view. The collection of this data is partly carried out via technical cookies. These technical cookies are only used to the extent necessary (section 165 (3) TKG). The processing of this data is justified by our legitimate interest in operating our app (Art 6 para 1 lit f GDPR).
For the operation of our app, it may be necessary that we disclose your data to the following recipients:
- Recipient of data: bitsfabrik GmbH
- Purpose for data processing: App-Developer
- Legal basis for data processing: Legitimate interest (Art 6 Abs 1 lit f GDPR); Data processing agreement pursuant to Art 28 GDPR
- Location: Austria
- Basis for transfer to a third country: Within the EAA
- Recipient of data: Stripe, Inc
- Purpose for data processing: Online-Payment-Provider
- Legal basis for data processing: Contractual obligation (Art 6 1 lit b GDPR)
- Location: USA
- Basis for transfer to a third country: Standard data protection clauses pursuant to Art 46 (2) lit c GDPR
- Recipient of data: Mailchimp, Inc
- Purpose for data processing: Newsletter-Provider
- Legal basis for data processing: Consensus (Art 6 Abs 1 lit a GDPR)
- Location: USA
- Basis for transfer to a third country: Standard data protection clauses pursuant to Art 46 (2) lit c GDPR or contract performance according to Art 49 para 1 lit b GDPR
- Recipient of data: OneSignal
- Purpose for data processing: Reminder-Service
- Legal basis for data processing:
- Legitimate Interest (Art 6 Abs 1 lit f GDPR)
- Location:
- Basis for transfer to a third country: Standard data protection clauses pursuant to Art 46 (2) lit c GDPR
- Recipient of data: Apple, Inc
- Purpose for data processing: App-Store-Provider
- Legal basis for data processing: Contractual obligation (Art 6 1 lit b GDPR)
- Location: USA
- Basis for transfer to a third country: Standard data protection clauses pursuant to Art 46 (2) lit c GDPR or contract performance according to Art 49 para 1 lit b GDPR
- Recipient of data: Facebook Ireland Ltd; Instagram Inc
- Purpose for data processing: Social-Media-Provider
- Legal basis for data processing: Consensus (Art 6 Abs 1 lit a GDPR)
- Location: USA
- Basis for transfer to a third country: Standard data protection clauses pursuant to Art 46 (2) lit c GDPR
For what reasons do we process your data if you are a client or if we are in business relationship?
In the course of our business relationship with customers and business partners, we process data on the basis of contractual (processing of the contractual relationship with you, pre-contractual obligations, billing for services, dispatch of documents, communication for the processing of the contract) and legal obligations (legally required storage within the meaning of section 132 BAO; section 212 Austrian Business Code (“UGB”)); (Art 6 para 1 lit b and c DSGVO) as well as on the basis of our legitimate interests or on the basis of legitimate interests of third parties (Art 6 para 1 lit f GDPR), namely:
– For the purpose of internal administration and management of your business case to the extent required (e.g.: Processing your business case, forwarding your business case to various departments, filing, archiving purposes, correspondence with you);
– Delivery of artwork;
– for the purpose of direct advertising (e.g.: Mailing, e-mailing, satisfaction surveys, congratulatory letters, statistical analysis);
We would like to inform you explicitly that you can object to the processing of your data for the purpose of direct advertising.
– assertion and defense of legal claims
in each case to the extent necessary. The processing of your data serves the initiation, maintenance and handling of our business relations. If you do not provide us with this data, we will unfortunately not be able to process your business case.
In addition, personal data may be transferred to our order processors (within the meaning of Art 4 Z 8 GDPR). These processors are listed under point V.
If applicable, we process your data based on your voluntary, explicit consent (Art 6 para 1 lit a GDPR).
How long do we store your data?
We will only store your data for as long as is necessary for the purposes for which we collected your data. In this context, statutory retention obligations must be taken into account (for example, for reasons of tax law, contracts and other documents from our contractual relationship must generally be retained for a period of seven years (§ 132 BAO)). In justified individual cases, such as for the assertion and defense of legal claims, we may also store your data for up to 30 years after termination of the business relationship.
We store data of interested parties for up to three years from the date of the last contact by the interested party.
The data of persons who have not been drawn will be deleted after six month in order to be able to process any complaints.
Who might receives your data?
In the course of our business relationship, it may be necessary for us to transmit your data to the following recipients:
- Recipient of data: Delivery services
- Purpose for data processing: Package delivery
- Legal basis for data processing: Contractual obligation (Art 6 Abs 1 lit b GDPR)
- Location: Within the EAA
- Basis for transfer to a third country: Within the EAA
- Recipient of data: Auditor and tax consultants
- Purpose for data processing: Tax consulting and auditing
- Legal basis for data processing: Contractual obligation (Art 6 Abs 1 lit b GDPR)
- Location: Austria
- Basis for transfer to a third country: Within the EAA
- Recipient of data: Banks
- Purpose for data processing: Payment-Provider
- Legal basis for data processing: Contractual obligation (Art 6 Abs 1 lit b GDPR)
- Location: Within the EAA
- Basis for transfer to a third country: Within the EAA
- Recipient of data: Attorney at law
- Purpose for data processing: Pursuit and defense of legal claims
- Legal basis for data processing: Contractual obligation (Art 6 Abs 1 lit b GDPR); Legitimate interest (Art 6 Abs 1 lit f GDPR)
- Location: Within the EAA
- Basis for transfer to a third country: Within the EAA
- Recipient of data: Courts, authorities, online arbitration board
- Purpose for data processing: Law enforcement
- Legal basis for data processing: Legitimate interest (Art 6 Abs 1 lit f GDPR)
- Location: Within the EAA
- Basis for transfer to a third country: Within the EAA
Receiving of data from external sources (Art 14 GDPR)
In the course of a business relationship or the initiation thereof, it is naturally necessary to conduct research on the business partner. This is done exclusively to the extent required for this purpose. In this context, data may be retrieved and processed from the following sources:
Our company does not obtain data from external sources.
Does automated decision making or profiling takes place (Art 13 para 2 lit f GDPR)?
No automated decision-making or profiling takes place in our company.
What rights do you have with regard to data processing?
We would like to inform you that, provided that the legal requirements are met, you have the right to request information about your personal data:
– Have the right to request information about which of your data is processed by us (see in detail Art 15 GDPR).
– You have the right to request the correction or completion of incorrect or incomplete data concerning you (see in detail Art. 16 DSGVO).
– Have the right to have your data deleted (see in detail Art 17 GDPR).
– Have the right to object to processing of your data that is necessary for the protection of our legitimate interests or those of a third party (see in detail Art 21 GDPR). This applies in particular with regard to the processing of your data for advertising purposes.
– Have the right to receive the transfer of the data you have provided in a structured, common and machine-readable format.
If we process your data on the basis of your consent, you have the right to revoke this consent at any time by e-mail. This does not affect the lawfulness of the data processing carried out up to this point (Art 7 (3) GDPR).
Do you have a right to complain?
If, contrary to expectations, there is a violation of your right to lawful processing of your data, please contact us by mail or e-mail. We will make every effort to process your concerns promptly. However, you also have the right to lodge a complaint with the supervisory authority for data protection matters responsible for you.
The address of the Austrian data protection authority is:
Austrian Data Protection Authority
Barichgasse 40-42,
1030 Vienna
How can you get in contact with us?
If you have any further questions about the processing of your data, please feel free to contact our data protection coordinator using the contact details below.
Controller
Controller pursuant to Art 4 number 7 GDPR:
24hdrop,
Owner: Christoph Oberlechner,
Anzengrubergasse 14/15, 1050 Vienna, Austria
E-Mail: info@24hdrop.com