Zum Hauptinhalt springen

Data Privacy Policy

In this privacy policy, we will inform you about data processing that is related to our website www.pidso.com or www.pidso.at as well as the contact options offered on these websites. We will inform you about data processing that affects every website visitor and takes place when using our general contact form (point 2) as well as the processing of your data when you apply to us via our “Careers” page (point 3).

 

  1. Controller and contact options

The controller for the data processing is the

PIDSO - Propagation Ideas & Solutions GmbH

Wallackgasse 2

1230 Vienna

FN 348498y, Commercial Court of Vienna

 

For questions and concerns about data protection, please contact us at datenschutz@pidso.com.

 

  1. Visitors to our website

 

  1. Purposes of the processing and legal bases

We process your personal data

  • on the basis of your consent (§ 165 TKG [Telecommunications Act], Art. 6 (1) (a) GDPR) if the data processing is carried out by setting non-technically-necessary cookies (for the use of cookies, see point 2.d.)
  • on the basis of overriding legitimate interests (Article 6 (1) (f) GDPR), namely
    • preventing and deterring attacks on the technical infrastructure of our website;
    • preventing, detecting and impeding the misuse of our website;
    • communicating with you via our contact form;
    • analyzing user behavior and improving our services (for the use of cookies, see point 2.d.);
    • presenting our company headquarters and offering an option for route planning to our company headquarters
  1. Recipient

In order to achieve these intended purposes, it may be necessary to disclose your personal data to third parties:

 

Recipient

Purpose

Legal basis

Registered office / place of data processing

Basis for transfer to a third country

World4you Internet Services GmbH

Website hosting

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT infrastructure

EU (Austria, Germany)

No third country transfer

nanoware web GmbH

Website maintenance

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT support

EU (Austria)

No third country transfer

Kill The Dragon GmbH

Website maintenance

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT support

EU (Austria)

No third country transfer

Google Ireland Ltd

Google Maps: Location of our company headquarters

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT service providers when presenting the location of our company headquarters and offering a route planning option to our company headquarters

EU (Ireland), USA (data transfers within the Group)

Standard contractual clauses (Article 46 (2) (c) GDPR) including additional measures as well as

Article 49 (1) (a) GDPR: Express consent

ALLDATA IT-Systeme GmbH & CO KG

Maintenance and support of the ERP system

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT support

EU (Austria)

No transmission to third countries

Rauscher & Hackl OG

Maintenance and support of IT, network administration

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT support

EU (Austria)

No transmission to third countries

Quality Software & Consulting GmbH & Co KG

Maintenance and support of the quality assurance software

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT support

EU (Austria)

No transmission to third countries

Microsoft Ireland Operations Ltd

Mail Hosting

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional mailing services

EU (Ireland), USA (group transfers)

Standard contractual clauses (Article 46 (2) (c) GDPR) including additional measures

Deloitte Tax Wirtschaftsprüfungs GmbH

Human Resources & Accounting

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional accounting services

EU (Austria)

No transmission to third countries

Boyum IT Solutions A/S

ERP Boyum Produce & CRM System

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Management and processing of production orders, management of customer and sales data, improvement of work processes

EU (Denmark),

Transfers within the Group (USA)

 

Standard contractual clauses (Article 46 (2) (c) GDPR) including additional measures  

Google Ireland Ltd 

YouTube: Displaying videos on the website

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Integrating advertising videos to introduce the company and promote sales

EU (Ireland), USA (transmission within the Group)

Standard contractual clauses (Article 46 (2) (c) GDPR) including additional measures

Google Ireland Ltd

ReCaptcha: Analyzing user behavior on the website

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Analyzing user behavior to improve our website

EU (Ireland), USA (transmission within the Group)

Standard contractual clauses (Article 46 (2) (c) GDPR) including additional measures

 

If there is a legal obligation to do so, we transmit personal data to public authorities and institutions (e.g. law enforcement authorities, courts).

  1. Duration of processing

We store and process your personal data as long as this is necessary to fulfil the purpose of the processing.

Personal data in connection with the use of the contact form is kept for seven years in accordance with corporate law (§ 212 UGB). In individual cases, such as pending administrative or judicial proceedings, this storage period may also be longer than seven years. In the event of foreseeable legal disputes, your personal data may also be retained for a longer period, in any case until the expiry of the relevant statutes of limitation for legal claims.

  1. Cookies

When using our website, we use cookies to temporarily store certain information. Some cookies are (technically) necessary for the operation of our website and are always set. Other cookies, on the other hand, are not absolutely necessary for the operation of the website, but serve, for example, to increase user-friendliness or to analyze user behavior.

 

 

 

Technically necessary cookies

The following technically necessary cookies are set on our website:

Name

Recipient

Purpose

Registered office / place of data processing

Storage duration

PHPSESSID

None (pidso.com)

Contains the user's states on all page requests.

Austria

Until the end of the browser session

auth-verify

None (pidso.com)

Identification of an active user login

Austria

120 minutes

cookieconsent_status

None (pidso.com)

Storage of consent to the setting of technically unnecessary cookies via the cookie banner

EU (Austria)

1 year

_grecaptcha

None (pidso.com)

This cookie is used to distinguish between humans and bots

USA

Persistent

_GRECAPTCHA

Google LLC

This cookie is used to distinguish between humans and bots.

USA

179 days

CONSENT

Google LLC (YouTube)

Used to determine if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for the website’s compliance with the GDPR.

USA

6061 days

CookieConsent

None (pidso.com)

Saves the user's consent status for cookies on the current domain.

EU

1 year

rc::a

Google LLC

This cookie is used to distinguish between humans and bots.

USA

Persistent

rc::b

Google LLC

This cookie is used to distinguish between humans and bots.

USA

Until the end of the browser session

rc::c

Google LLC

This cookie is used to distinguish between humans and bots

USA

Until the end of the browser session

test_cookie

Google LLC

To check whether the user's browser supports cookies.

USA

1 day

 

Not technically necessary cookies

Not technically necessary cookies are set exclusively on the basis of your consent, if you have given this via the cookie banner (§ 96 TKG, Art. 6 (1) (a) GDPR). You can change your cookie banner settings at any time by calling up the cookie banner again by clicking on the floating button in the lower left-hand area of the website and revoking your consent.
 

Name

Recipient

Purpose

Registered office / place of data processing

Storage duration

_ga

(Statistics Cookie)

 

Google LLC

Improve analysis of user behavior on the website

 

USA

2 years

_Hole

(Statistics Cookie)

Google LLC

Request request rate

USA

1 minute

_gid

(Statistics Cookie)

Google LLC

Recognizing the website visitor

 

USA

1 day

ads/ga-audiences

(Marketing Cookie)

Google LLC

Recognizing the website visitor

 

USA

Until the end of the browser session

IDE

(Marketing Cookie)

Google LLC

Analyzing user behavior and creating targeted advertising

 

USA

1 year

VISITOR_INFO!_LIVE

(Marketing Cookie)

Google LLC (YouTube)

Estimating the expected bandwidth on pages with integrated YouTube videos

USA

179 days

YSC

(Marketing Cookie)

Google LLC (YouTube)

Analyzing user behavior

USA

Until the end of the browser session

yt.innertube::nextld

(Marketing Cookie)

Google LLC (YouTube)

Registers a unique ID to keep statistics on YouTube videos the user has viewed

USA

Persistent

yt.innertube::requests

(Marketing Cookie)

Google LLC (YouTube)

Registering a unique ID to keep statistics on YouTube videos that the user has viewed.

USA

Persistent

yt.remote-cast-available

(Marketing Cookie)

Google LLC (YouTube)

Improving the user experience when playing YouTube videos

USA

Until the end of the browser session

yt-remote-cast-installed

(Marketing Cookie)

Google LLC (YouTube)

Saving the user settings when retrieving a YouTube video integrated on other websites

USA

Until the end of the browser session

yt.remote-connected-devices

(Marketing Cookie)

Google LLC (YouTube)

Saving the user settings when retrieving a YouTube video integrated on other websites

USA

Persistent

yt.remote-device-id

(Marketing Cookie)

Google LLC (YouTube)

Saving the user settings when retrieving a YouTube video integrated on other websites

USA

Persistent

yt.remote-fast-check-period

(Marketing Cookie)

Google LLC (YouTube)

Saving the user settings when retrieving a YouTube video integrated on other websites

USA

Until the end of the browser session

yt.remote-session-app

(Marketing Cookie)

Google LLC (YouTube)

Saving the user settings when retrieving a YouTube video integrated on other websites

USA

Until the end of the browser session

yt.remote-session-name

(Marketing Cookie)

Google LLC (YouTube)

Saving the user settings when retrieving a YouTube video integrated on other websites

USA

Until the end of the browser session

 

  1. Applying to PIDSO

 

  1. Purposes of the processing and legal bases

We process your personal data

  • for the implementation of pre-contractual measures or the conclusion of a service contract (Art. 6 (1) (b) GDPR)
  • on the basis of overriding legitimate interests (Article 6 (1) (f) GDPR), namely
    • the exercise and defense of legal claims (in particular with regard to the Equal Treatment Act)
  • based on your consent (Art. 6 (1) (a) GDPR) to the keeping of evidence of your application documents

 

  1. Recipient

In order to achieve these intended purposes, it may be necessary to disclose your personal data to third parties:

 

Recipient

Purpose

Legal basis

Registered office / place of data processing

Basis for transfer to a third country

Deloitte Tax Wirtschaftsprüfungs GmbH

Financial accounting and payroll accounting

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional accounting services

EU (Austria)

No transmission to third countries

SAGE GMBH

HR Tool

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of a professional personnel management tool

EU (Austria)

No third country transfer

Rauscher & Hackl OG

Maintenance and support of IT, network administration

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT support

EU (Austria)

No third country transfer

Nanoware web GmbH

Website maintenance

Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT support

EU (Austria)

No third country transfer

 

If there is a legal obligation to do so, we transmit personal data to public authorities and institutions (e.g. law enforcement authorities, courts).

 

  1. Duration of processing

If your application is rejected, we will store your application documents for a period of seven months from the date of notification of the rejection (§§ 15 (1), 29 (1) of the Equal Treatment Act + one month).

 

If you give us your consent for us to keep your application documents as evidence, we will store them for the duration of the processing covered by the consent or at the latest until your consent is revoked.

 

  1. Rights of data subjects

As a data subject, you have the rights described below. If we have reasonable doubts about the identity of your person in the exercise of one of the rights of a data subject, we may request additional information from you that is necessary to confirm your personal identity.

With those rights that are asserted by means of a request, we have a month to comply with it.

 

Right of access under Art. 15 GDPR

You have the right to information about the personal data we process concerning you at any time. The right to information also includes the right to receive a copy of data, provided that this does not affect the rights and freedoms of other persons. To create such a copy of the data, we may charge you a reasonable fee based on the administrative costs.

 

Right to rectification under Art. 16 GDPR

You have the right to request the rectification or completion of incorrect data about you.

 

Right to erasure under Art. 17 GDPR

You generally have the right to request the erasure of data about you. However, this right to erasure does not apply if the processing is required:

  • for the right to freedom of expression and information; or
  • for the performance of a legal obligation which requires processing under the law of the EU law or a Member State to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; or
  • for reasons of public interest in the field of public health; or
  • for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes, insofar as the erasure is likely to render impossible or at least seriously impair the achievement of the objectives on which the processing is based; or
  • to assert, exercise or defend legal claims.

 

Right to restriction of processing under Art. 18 GDPR

You have the right to request the restriction of processing, provided that at least one of the following conditions is met:

  • the accuracy of the personal data is disputed by you for a period that allows the controller to verify the accuracy of the personal data; or
  • the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data; or
  • the controller no longer needs the personal data for the purposes of the processing, but you do need them to assert, exercise or defend legal claims; or
  • after an objection has been filed in accordance with Article 21 (1) GDPR, as long as it has not yet been determined whether the legitimate reasons of the controller outweigh your interests.

If you have exercised your right to restriction of processing, we may process this personal data – with the exception of the storage of this data – only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

 

Right to object under Art. 21 GDPR

You have the right to object to processing based on an overriding legitimate interest on our part or on the part of a third party (under Article 6 (1) (f) GDPR). If you lodge an objection, we will no longer process your data, unless the processing serves to assert, exercise or defend legal claims or we demonstrate compelling legitimate grounds for the processing that outweigh your interests.

An objection to the processing of personal data for direct marketing purposes is possible at any time and will lead to us no longer being allowed to process your data for this purpose.

 

Right to data portability under Art. 20 GDPR

In principle, you also have the right to receive the transmission of the data provided by you in a structured, commonly used and machine-readable format and to transmit this data to another controller. However, the right to data portability only applies if the processing is based on your consent or on a contract, and the processing is carried out using automated methods. 

 

Right to complain under Art. 77 GDPR

If you believe that the processing of your data has been unlawful and violates the GDPR, you have the right to lodge a complaint with the responsible data protection authority. The place jurisdiction depends on your place of residence or work.

You can reach the Austrian Data Protection Authority at

Austrian Data Protection Authority

Barichgasse 40-42

1030 Vienna

dsb@dsb.gv.at