Data protection information according to Art. 13 and 14 EU GDPR

1. Who is responsible for the processing of data and whom can I contact?

The controller is:

Obere Donaustraße 15A/1/1
1020 Vienna
[email protected]

2. What are we processing your data for (purpose of processing) and on which legal basis?

It is possible that you contact us yourself and we collect the data directly from you or that your employer has placed an order with us as buyer on behalf of his employees. In this case, a contractual relationship exists either directly with you or with your employer and we receive your contact details indirectly from him as customer.

The legal basis for the processing of the data is Article 6 para. 1 b EU GDPR, i.e. the processing is necessary for the performance of a contract to which the data subject is party. Moreover, it is possible that you give us your consent to remain in touch with you after completion of the digiTools and to continue to contact you using the data you provided.

If your are using the contact form, we will process your data to answer your query.

3. To whom will the data be transferred?

The individual data will only be processed internally and will not be forwarded to third parties.

4. How long will the personal data be stored?

The data will be stored throughout the term of the valid contractual relationship and beyond that until the end of the statutory retention and limitation periods.

In case you have given us your consent to contact you, you may withdraw your consent at any time and, in this case, your data will be anonymised or deleted and you will no longer be receiving any mailings.

5. Which data privacy rights apply?

According to the statutory requirements, each data subject shall have the right to access information about the processing of their personal data, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability and the right to withdrawal and objection (Art. 15 to 21 EU GDPR). As regards the exercise of your rights, please contact: [email protected].

You may also file a complaint with the respective data protection supervisory authority. The responsible authority in Austria is the Österreichische Datenschutzbehörde.

7. Is there an obligation to provide data?

As part of the processing of the digiTools of UP’N‘CHANGE, you must only provide those personal data which are required for the implementation of the same, so that we can render you these services. We will not be able to send you the link and the password without these data.

8. Cookies

Our website uses cookies. Cookies are text files that are stored by your browser on your device. They do not cause any damage.

We use cookies to make our services more user-friendly. Some cookies remain in your device’s memory until you delete them. These cookies allow us to recognize your browser the next time you visit the site.

If you do not want this, you can set your web browser to inform you about cookies being set, so that you can allow this only on a case-by-case basis.

Disabling cookies can restrict the functionality of our website.

9. Web analysis

This website uses functions of the web analysis service Google Analytics. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses such targeted cookies.

Further information about handling user data can be found in the privacy policy of Google:

You can also prevent the collection of the data created by the cookie and by your use of the website and the processing of these data by Google by downloading and installing the browser plug-in available via the following link:

Alternatively, you can prevent the collection of your data by Google Analytics by clicking on the following link. This activates an opt-out cookie, which prevents the collection of your data when visiting this website in the future.

Disable Google Analytics

IP anonymisation

We use the function “Activation of IP anonymisation” on this website. As a result, your IP address will be shortened by Google for the member states of the European Union or other Contracting States of the Agreement of the European Economic Area. A full IP address is only sent to a Google server in the USA and truncated there in exceptional cases. Under the authority of the operator of this website, Google will use this information to analyse your usage of the website in order to compile reports about the website activities and to render further services associated with website use and Internet use vis-á-vis the website operator. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

Your IP address is collected but immediately anonymised (e.g. by deleting the last 8 bits). Only an approximate localisation is possible as a result.

The relationship to the web analysis provider is based on an adequacy decision of the European Commission (e.g. “Privacy Shield” in the case of the USA ).

Data processing is based on the legal provisions of Section 96 para.3 Austrian Telecommunications Act (TKG) and point 1(a) (consent) and/or 1(f) (legitimate interest) of Article 6 GDPR.

Our legitimate interest within the meaning of the GDPR is the improvement of our services and our website. The privacy of our users is very important to us, so user data are pseudonymised.

Used data are kept for a period of 14 months.

10. Customer Relationship Management System

We are using the “HubSpot” customer relationship management system by HubSpot Ireland Limited, Guild Street, Dublin, Ireland to process queries more quickly and more efficiently, and to inform prospective and current customers through a newsletter. HubSpot is certified under the EU-U.S. Privacy Shield Framework, thus providing an additional guarantee that it will comply with European data protection legislation. For more information, go to the Privacy statement of HubSpot or read the information provided by HubSpot in connection with EU data protection provisions: