Data Privacy Policy
In this privacy policy, we will inform you about data processing that is related to our website www.pidso.com or www.pidso.at as well as the contact options offered on these websites. We will inform you about data processing that affects every website visitor and takes place when using our general contact form (point 2) as well as the processing of your data when you apply to us via our “Careers” page (point 3).
- Controller and contact options
The controller for the data processing is the
PIDSO - Propagation Ideas & Solutions GmbH
Wallackgasse 2
1230 Vienna
FN 348498y, Commercial Court of Vienna
For questions and concerns about data protection, please contact us at datenschutz@pidso.com.
- Visitors to our website
- Purposes of the processing and legal bases
We process your personal data
- on the basis of your consent (§ 165 TKG [Telecommunications Act], Art. 6 (1) (a) GDPR) if the data processing is carried out by setting non-technically-necessary cookies (for the use of cookies, see point 2.d.)
- on the basis of overriding legitimate interests (Article 6 (1) (f) GDPR), namely
- preventing and deterring attacks on the technical infrastructure of our website;
- preventing, detecting and impeding the misuse of our website;
- communicating with you via our contact form;
- analyzing user behavior and improving our services (for the use of cookies, see point 2.d.);
- presenting our company headquarters and offering an option for route planning to our company headquarters
- Recipient
In order to achieve these intended purposes, it may be necessary to disclose your personal data to third parties:
Recipient |
Purpose |
Legal basis |
Registered office / place of data processing |
Basis for transfer to a third country |
World4you Internet Services GmbH |
Website hosting |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT infrastructure |
EU (Austria, Germany) |
No third country transfer |
nanoware web GmbH |
Website maintenance |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT support |
EU (Austria) |
No third country transfer |
Kill The Dragon GmbH |
Website maintenance |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT support |
EU (Austria) |
No third country transfer |
Google Ireland Ltd |
Google Maps: Location of our company headquarters |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT service providers when presenting the location of our company headquarters and offering a route planning option to our company headquarters |
EU (Ireland), USA (data transfers within the Group) |
Standard contractual clauses (Article 46 (2) (c) GDPR) including additional measures as well as Article 49 (1) (a) GDPR: Express consent |
ALLDATA IT-Systeme GmbH & CO KG |
Maintenance and support of the ERP system |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT support |
EU (Austria) |
No transmission to third countries |
Rauscher & Hackl OG |
Maintenance and support of IT, network administration |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT support |
EU (Austria) |
No transmission to third countries |
Quality Software & Consulting GmbH & Co KG |
Maintenance and support of the quality assurance software |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT support |
EU (Austria) |
No transmission to third countries |
Microsoft Ireland Operations Ltd |
Mail Hosting |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional mailing services |
EU (Ireland), USA (group transfers) |
Standard contractual clauses (Article 46 (2) (c) GDPR) including additional measures |
Deloitte Tax Wirtschaftsprüfungs GmbH |
Human Resources & Accounting |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional accounting services |
EU (Austria) |
No transmission to third countries |
Boyum IT Solutions A/S |
ERP Boyum Produce & CRM System |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Management and processing of production orders, management of customer and sales data, improvement of work processes |
EU (Denmark), Transfers within the Group (USA)
|
Standard contractual clauses (Article 46 (2) (c) GDPR) including additional measures |
Google Ireland Ltd |
YouTube: Displaying videos on the website |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Integrating advertising videos to introduce the company and promote sales |
EU (Ireland), USA (transmission within the Group) |
Standard contractual clauses (Article 46 (2) (c) GDPR) including additional measures |
Google Ireland Ltd |
ReCaptcha: Analyzing user behavior on the website |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Analyzing user behavior to improve our website |
EU (Ireland), USA (transmission within the Group) |
Standard contractual clauses (Article 46 (2) (c) GDPR) including additional measures |
If there is a legal obligation to do so, we transmit personal data to public authorities and institutions (e.g. law enforcement authorities, courts).
- Duration of processing
We store and process your personal data as long as this is necessary to fulfil the purpose of the processing.
Personal data in connection with the use of the contact form is kept for seven years in accordance with corporate law (§ 212 UGB). In individual cases, such as pending administrative or judicial proceedings, this storage period may also be longer than seven years. In the event of foreseeable legal disputes, your personal data may also be retained for a longer period, in any case until the expiry of the relevant statutes of limitation for legal claims.
- Cookies
When using our website, we use cookies to temporarily store certain information. Some cookies are (technically) necessary for the operation of our website and are always set. Other cookies, on the other hand, are not absolutely necessary for the operation of the website, but serve, for example, to increase user-friendliness or to analyze user behavior.
Technically necessary cookies
The following technically necessary cookies are set on our website:
Name |
Recipient |
Purpose |
Registered office / place of data processing |
Storage duration |
PHPSESSID |
None (pidso.com) |
Contains the user's states on all page requests. |
Austria |
Until the end of the browser session |
auth-verify |
None (pidso.com) |
Identification of an active user login |
Austria |
120 minutes |
cookieconsent_status |
None (pidso.com) |
Storage of consent to the setting of technically unnecessary cookies via the cookie banner |
EU (Austria) |
1 year |
_grecaptcha |
None (pidso.com) |
This cookie is used to distinguish between humans and bots |
USA |
Persistent |
_GRECAPTCHA |
Google LLC |
This cookie is used to distinguish between humans and bots. |
USA |
179 days |
CONSENT |
Google LLC (YouTube) |
Used to determine if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for the website’s compliance with the GDPR. |
USA |
6061 days |
CookieConsent |
None (pidso.com) |
Saves the user's consent status for cookies on the current domain. |
EU |
1 year |
rc::a |
Google LLC |
This cookie is used to distinguish between humans and bots. |
USA |
Persistent |
rc::b |
Google LLC |
This cookie is used to distinguish between humans and bots. |
USA |
Until the end of the browser session |
rc::c |
Google LLC |
This cookie is used to distinguish between humans and bots |
USA |
Until the end of the browser session |
test_cookie |
Google LLC |
To check whether the user's browser supports cookies. |
USA |
1 day |
Not technically necessary cookies
Not technically necessary cookies are set exclusively on the basis of your consent, if you have given this via the cookie banner (§ 96 TKG, Art. 6 (1) (a) GDPR). You can change your cookie banner settings at any time by calling up the cookie banner again by clicking on the floating button in the lower left-hand area of the website and revoking your consent.
Name |
Recipient |
Purpose |
Registered office / place of data processing |
Storage duration |
_ga (Statistics Cookie) |
Google LLC |
Improve analysis of user behavior on the website
|
USA |
2 years |
_Hole (Statistics Cookie) |
Google LLC |
Request request rate |
USA |
1 minute |
_gid (Statistics Cookie) |
Google LLC |
Recognizing the website visitor
|
USA |
1 day |
ads/ga-audiences (Marketing Cookie) |
Google LLC |
Recognizing the website visitor
|
USA |
Until the end of the browser session |
IDE (Marketing Cookie) |
Google LLC |
Analyzing user behavior and creating targeted advertising
|
USA |
1 year |
VISITOR_INFO!_LIVE (Marketing Cookie) |
Google LLC (YouTube) |
Estimating the expected bandwidth on pages with integrated YouTube videos |
USA |
179 days |
YSC (Marketing Cookie) |
Google LLC (YouTube) |
Analyzing user behavior |
USA |
Until the end of the browser session |
yt.innertube::nextld (Marketing Cookie) |
Google LLC (YouTube) |
Registers a unique ID to keep statistics on YouTube videos the user has viewed |
USA |
Persistent |
yt.innertube::requests (Marketing Cookie) |
Google LLC (YouTube) |
Registering a unique ID to keep statistics on YouTube videos that the user has viewed. |
USA |
Persistent |
yt.remote-cast-available (Marketing Cookie) |
Google LLC (YouTube) |
Improving the user experience when playing YouTube videos |
USA |
Until the end of the browser session |
yt-remote-cast-installed (Marketing Cookie) |
Google LLC (YouTube) |
Saving the user settings when retrieving a YouTube video integrated on other websites |
USA |
Until the end of the browser session |
yt.remote-connected-devices (Marketing Cookie) |
Google LLC (YouTube) |
Saving the user settings when retrieving a YouTube video integrated on other websites |
USA |
Persistent |
yt.remote-device-id (Marketing Cookie) |
Google LLC (YouTube) |
Saving the user settings when retrieving a YouTube video integrated on other websites |
USA |
Persistent |
yt.remote-fast-check-period (Marketing Cookie) |
Google LLC (YouTube) |
Saving the user settings when retrieving a YouTube video integrated on other websites |
USA |
Until the end of the browser session |
yt.remote-session-app (Marketing Cookie) |
Google LLC (YouTube) |
Saving the user settings when retrieving a YouTube video integrated on other websites |
USA |
Until the end of the browser session |
yt.remote-session-name (Marketing Cookie) |
Google LLC (YouTube) |
Saving the user settings when retrieving a YouTube video integrated on other websites |
USA |
Until the end of the browser session |
- Applying to PIDSO
- Purposes of the processing and legal bases
We process your personal data
- for the implementation of pre-contractual measures or the conclusion of a service contract (Art. 6 (1) (b) GDPR)
- on the basis of overriding legitimate interests (Article 6 (1) (f) GDPR), namely
- the exercise and defense of legal claims (in particular with regard to the Equal Treatment Act)
- based on your consent (Art. 6 (1) (a) GDPR) to the keeping of evidence of your application documents
- Recipient
In order to achieve these intended purposes, it may be necessary to disclose your personal data to third parties:
Recipient |
Purpose |
Legal basis |
Registered office / place of data processing |
Basis for transfer to a third country |
Deloitte Tax Wirtschaftsprüfungs GmbH |
Financial accounting and payroll accounting |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional accounting services |
EU (Austria) |
No transmission to third countries |
SAGE GMBH |
HR Tool |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of a professional personnel management tool |
EU (Austria) |
No third country transfer |
Rauscher & Hackl OG |
Maintenance and support of IT, network administration |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT support |
EU (Austria) |
No third country transfer |
Nanoware web GmbH |
Website maintenance |
Overriding legitimate interests (Art. 6 (1) (f) GDPR): Use of professional IT support |
EU (Austria) |
No third country transfer |
If there is a legal obligation to do so, we transmit personal data to public authorities and institutions (e.g. law enforcement authorities, courts).
- Duration of processing
If your application is rejected, we will store your application documents for a period of seven months from the date of notification of the rejection (§§ 15 (1), 29 (1) of the Equal Treatment Act + one month).
If you give us your consent for us to keep your application documents as evidence, we will store them for the duration of the processing covered by the consent or at the latest until your consent is revoked.
- Rights of data subjects
As a data subject, you have the rights described below. If we have reasonable doubts about the identity of your person in the exercise of one of the rights of a data subject, we may request additional information from you that is necessary to confirm your personal identity.
With those rights that are asserted by means of a request, we have a month to comply with it.
Right of access under Art. 15 GDPR
You have the right to information about the personal data we process concerning you at any time. The right to information also includes the right to receive a copy of data, provided that this does not affect the rights and freedoms of other persons. To create such a copy of the data, we may charge you a reasonable fee based on the administrative costs.
Right to rectification under Art. 16 GDPR
You have the right to request the rectification or completion of incorrect data about you.
Right to erasure under Art. 17 GDPR
You generally have the right to request the erasure of data about you. However, this right to erasure does not apply if the processing is required:
- for the right to freedom of expression and information; or
- for the performance of a legal obligation which requires processing under the law of the EU law or a Member State to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; or
- for reasons of public interest in the field of public health; or
- for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes, insofar as the erasure is likely to render impossible or at least seriously impair the achievement of the objectives on which the processing is based; or
- to assert, exercise or defend legal claims.
Right to restriction of processing under Art. 18 GDPR
You have the right to request the restriction of processing, provided that at least one of the following conditions is met:
- the accuracy of the personal data is disputed by you for a period that allows the controller to verify the accuracy of the personal data; or
- the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data; or
- the controller no longer needs the personal data for the purposes of the processing, but you do need them to assert, exercise or defend legal claims; or
- after an objection has been filed in accordance with Article 21 (1) GDPR, as long as it has not yet been determined whether the legitimate reasons of the controller outweigh your interests.
If you have exercised your right to restriction of processing, we may process this personal data – with the exception of the storage of this data – only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
Right to object under Art. 21 GDPR
You have the right to object to processing based on an overriding legitimate interest on our part or on the part of a third party (under Article 6 (1) (f) GDPR). If you lodge an objection, we will no longer process your data, unless the processing serves to assert, exercise or defend legal claims or we demonstrate compelling legitimate grounds for the processing that outweigh your interests.
An objection to the processing of personal data for direct marketing purposes is possible at any time and will lead to us no longer being allowed to process your data for this purpose.
Right to data portability under Art. 20 GDPR
In principle, you also have the right to receive the transmission of the data provided by you in a structured, commonly used and machine-readable format and to transmit this data to another controller. However, the right to data portability only applies if the processing is based on your consent or on a contract, and the processing is carried out using automated methods.
Right to complain under Art. 77 GDPR
If you believe that the processing of your data has been unlawful and violates the GDPR, you have the right to lodge a complaint with the responsible data protection authority. The place jurisdiction depends on your place of residence or work.
You can reach the Austrian Data Protection Authority at
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna