Last updated July 7, 2021

 

1. Principles of data processing 

ivii attaches great importance to the protection of your private sphere and your personal data. When processing your personal data, conformity with the relevant data protection laws and in particular with the provisions of the General Data Protection Regulation (GDPR) is of great importance to ivii. Processing of personal data by ivii always takes place under the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation as well as integrity and confidentiality.

To fulfil our obligations to provide information according to Article 13 et seq. of the General Data Protection Regulation (GDPR), we are glad to provide you with the following information about data protection.

 

2. Who is responsible for data processing?

As defined in the data protection law, data controller is:

ivii GmbH
Gewerbeparkstraße 17
8143 Dobl bei Graz
Austria

Phone: +43 5 04954 77 01
privacy@ivii.eu

Further information about our company is found at: ivii.eu/imprint.

 

3. Which personal data is processed by ivii, and for what purpose?

If we have received data from you, then we only use this data, in general, for the purpose for which we have received or collected it.

Data processing for a different purpose would only come into question to the extent that the legal requirements according to Article 6(4) GDPR are fulfilled. In that case we will of course observe any obligations to inform under Article 13(3) GDPR and Article 14(4) GDPR.

 

a. Contact

If you are contacting us via E-Mail, the data you provide will only be stored by ivii for processing your request and, if applicable, in the case of follow-up questions for as long as necessary. The legal basis for this is legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. This data will not be processed further without your consent.

 

b. Website use

The use of this website is generally possible without providing any personal data, however, it is possible, that your IP-adress as well as the start and ending of the session will be recorded. This is a technical requirement and thus qualifies as a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. Unless otherwise stated below, this data will not be processed further. 

Only you determine whether, for example, you want to give us your email address or your postal address in order for us to get in touch with you, to process your request, or to grant you access to special information or offers. We do not collect any personal data on our website in this respect without your explicit and voluntary consent. If you provide us with personal data, it will be handled in strict confidence and will not be passed on to third parties without your explicit consent. All information we receive from you when you use our Internet services is exclusively used to process user information and for communication regarding orders, products and services.

 

c. Cookies

As soon as you contact us, we receive and store certain information. Among other things, we use cookies. Cookies are pieces of information that are automatically stored on your computer in accordance with strict rules and with content that you can check. We use cookies solely to make our website more user-friendly for you, for example, to enable you to access the site without entering your password or your preferences every time.

 

d. Google Analytics

This website uses Google Analytics, a web analysis service by Google Inc. (“Google”). The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies, text files that are stored on your computer and which allows an analysis of the use of our website by you. The information about your use of this website (including your IP address) generated by the cookie is transferred to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on the website activity for the website operators, and to provide further services related to the use of the website and the Internet. Google may also transfer this information to third parties, provided this is required by law or if third parties process this data on behalf of Google. On no account will Google associate your IP address with other data retrieved from Google. You can prevent the installation of the cookies by adjusting the setting of your browser software accordingly, or click on “Disagree” in the reference banner; however, we would point out that in this case you may not be able to make use of the full scope of all the website’s functions. By using this website you agree to the processing of the data collected about you by Google in the manner described above and for the purpose set out above.

The European Court of Justice classifies the level of data protection in the USA as inadequate. Therefore, there is a risk, that the data collected can be accessed by US authorities for control and monitoring purposes, whereas no effective legal remedies are available. That is why, you will be asked for your express consent in accordance with Art. 6 Para. 1 lit. a GDPR in conjunction with Art. 49 Para. 1 lit. a GDPR for the respective data processing, including the purpose of the processing, the storage period as well as the categories of data, before cookies are set. This information as well as the information regarding cookies can be found in the consent banner. You can also revoke your consent at any time with effect for the future.

 

e. Server log files

The website provider automatically collects and saves information in server log files, which your browser automatically transmits to us. They are as follows:

• Browser type / browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server query
• Apache-Log
• PHP-Log

This data cannot be attributed to specific persons. This data will not be combined with other sources of data. We reserve the right to check this data at a later time, if we learn of specific evidence of unlawful use.

 

f. ChatBot (now disabled!)

The ChatBot on our website sends the questions to the server of Google Dialogflow, to the Microsoft Bot Framework and our development partner Botential.

We only use our own IP address to communicate with Google Dialogflow. The personal data of our visitors remains protected.

The Microsoft Bot Framework comprises several web services that enable intelligent dialogues. As the provider of these services, Microsoft uses the data for the function of the bot. For more information on the Microsoft privacy policy, please visit http://go.microsoft.com/fwlink/?LinkId=521839. The use of bot dialogue data is also covered in the “Conversational channel’s applicable terms of use, privacy and data collection policies”.

Botential (Guid.New GmbH, Raiffeisenstrasse 214 b, 8041 Graz, Austria) processes the dialogues without IP addresses or cookies, and instead only with IDs that are generated completely anonymously.

Children

No matter how tempting, we recommend that only those aged 18 and above use the ChatBot.

 

4. What is the legal basis for the processing described above?

The legal basis for processing personal data is, in general – as long there is no specific legal requirement – Article 6 GDPR. Here the following possibilities must be observed in particular:

• Consent (Article 6(1)(a) GDPR)
• Data processing for the performance of contracts (Article 6(1)(b) GDPR)
• Data processing based on the consideration of interests (Article 6(1)(f) GDPR)
• Data processing for the compliance with a legal obligation (Article 6(1)(c) GDPR)

If personal data of yours will be processed on the basis of consent, you have the right to revoke such consent at any time and we are bound to respect the revocation in the future.

If we process data based on the consideration of interests, you, as the data subject, have the right to object with regard to the provisions of Article 21 GDPR to the processing of personal data.

 

5. How long will the data be saved? 

We process the data as long as it is necessary for the purpose.

If there are legal obligations to retain the data – for example, under company law or tax law – the relevant personal data will be saved for the duration of the retention obligation. Once the retention obligation expires, a check is made whether further necessity exists for processing. When there is no necessity, the data is deleted.

You can naturally request information (see below) about your personal data that has been saved and, in the case, where there is no necessity, request that the data be deleted or that the processing be limited.

 

6. To which recipients will the data be given to?

Your personal data is generally only given to third parties if this is necessary to fulfil a contract with you, the data is permitted to be passed on based on the consideration of interests within the meaning of Article 6(1)(f) GDPR, we are legally obligated to pass the data on or if and when you have issued a consent.

 

7. How does ivii guarantee the security of data?

We take careful precautions to protect your data from loss, manipulation and unauthorized access. The precautions are in accordance with the current state of technology and legal requirements.

 

8. How can I exercise my rights as a “data subject”?

You have the right to access to the personal data that we have processed.

If the request for access to the data is not made in writing, we kindly ask you to note that we, if necessary, require proof from you that verifies that you are the person who you claim to be.

You also have a right to request rectification or erasure or restriction of processing as far as you are legally entitled.

You also have a right to object to such processing in accordance with legal requirements. The same applies to a right to data portability.

In particular, you have a right to object, according the Article 21(1) and (2) GDPR, to the processing of your data in connection to direct marketing purposes, if this is based on the consideration of interests.

You furthermore have the right to complain to the data protection supervisory authority regarding our processing of personal data. The responsible Austrian supervisory authority can be reached under following address:

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Wien
Phone: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at

Wherever we collect data for a specific purpose on this website, you will be given the opportunity to exclude your data, either by clicking a box or by adjusting your browser settings accordingly.

You can consult privacy@ivii.eu at any time for notices in connection to the above-mentioned rights, complaints as well as other questions, concerns or suggestions pertaining to the topic of data protection.

 

9. Links to other websites

The website contains links to external websites. As we are unable to influence these websites, we cannot take any responsibility for their content and data protection policies.