The website www.oberjäger.at is the responsible entity, operated by:
Zum Oberjäger Immo GmbH
Point of contact for users’ privacy rights: email@example.com
Though we carefully inspect links to external sites, we are not liable for the content or security of such sites.
1. Collection and processing of personally identifiable data
Your personally identifiable data will only be collected and processed on our website/in our data processing systems if you have provided us with this information, e.g. within an event, by registering or purchasing. Indirect personal information is neither stored nor processed by OJäg. The data which you provide is used for the purposes of processing and transmission of data within the scope of a business relationship, which includes electronically generated and archived documents (such as correspondence) as well as – insofar as a business relationship or valid consent declaration exist – processing in order to maintain contact via the postal service, email, fax, telephone or SMS in order to send you information about our own products and services. Also included are special promotions and advertising campaigns pertaining to the aforementioned (e.g. invitations to special events, travel offers, prize contests, surveys, orders via digital platforms, newsletters). The data will be stored until conclusion of the business relationship or until expiration of applicable guarantee, warranty or statutory retention deadlines; Furthermore, data will be stored until any and all legal disputes have been resolved for which the data may be required as evidence, though only for 3 years after the final contact with the responsible entity or until revocation of a consent declaration. Access to the aforementioned data is only given to those persons at OJäg or within Esterhazy’s member companies who are tasked with processing the data.
The data is protected from unauthorized access by means of technological and organizational measures, such as access controls, encrypted transmission, encrypted storage, restricted access, a complete data security concept as well as physical security measures for our servers. Security measures are revised continuously in accordance with the very latest technological developments.
For example, the following personally identifiable data may be processed:
- First and last name including title
- Date of birth
- Email address
- Telephone contact data
- Company affiliation
Sources for this information may be
- from a business relationship (customers/suppliers, information entered into online forms, personal visits to our locations or telephonically)
- participation in prize contests (conducted by OJäg or third-parties, if you have consented to your data being shared)
- newsletter subscriptions pursuant to DOI (double opt-in) confirmation
- pursuant to your expressed consent to be added to a database in order to receive informational material
We also point out that the data you have disclosed to others, for example your name, address, date of birth, email address, telephone number, insofar as you have expressed the required consent, may also be used for the following additional purposes: transmission and processing by pan.event GmbH (Esterhazyplatz 4, 7000 Eisenstadt), an address publishing company and direct marketing business within the Esterhazy corporate group. pan.event GmbH only shares personally identifiable data within the scope of business license iSd § 151 GewO in order to prepare and implement marketing programs including the design and shipping of advertising materials subject to your consent and exclusively to companies within the Esterhazy corporate group. Such consent may be revoked, also separately, at any time (e.g. by letter, fax or email).
2. Processing of Data
Within the Esterhazy Group, your data will only be processed if this is necessary for contract fulfillment. Transmission to other Esterhazy companies only occurs pursuant to your consent. You have the right to revoke your consent at any time.
You will only receive newsletters or other informational materials by email – or other electronic means – if you have expressed your consent. You may unsubscribe to electronic communications at any time, simply by clicking on the link provided for that purpose in every communication.
We work together with various social networks. By using these services, your browser is automatically connected to the network in question. When doing so, it transmits your IP address as well as other information such as cookies if you have visited the platform in question previously. Insofar as possible, we avoid this type of data transmission until you actually personally interact with one of the platforms.
Cookies and Tracking Tools
3. Data Storage
If the purchase process is interrupted, the data we have stored is immediately deleted. If a contract is entered into, all data pertaining to the contractual relationship is stored until expiration of statutory data retention deadlines (7 years). Furthermore, data including name, address, purchased items and purchase date will be stored until expiration of the product warranty (10 years). Data processing is conducted in compliance with legal provisions as stipulated in § 96 (3) TKG as well as Art 6 (1) (a) (consent) and/or (b) (necessary for contract fulfillment) of the GDPR.
4. Your Rights
Consistent with the General Data Privacy Regulation (GDPR), as the affected person you enjoy the following rights and legal remedies. In order to assert your rights or get answers to any questions you might have, please do not hesitate to contact our data privacy officer at firstname.lastname@example.org
Right to Information
In compliance with Art 15 GDPR, OJäg must provide every affected person who requests confirmation as to whether personally identifiable data pertaining to them is being processed, with accurate information. In certain circumstances, it might be necessary for you to provide appropriate proof of identity.
Correction and Deletion
In compliance with Art 16 GDPR, as the affected person you have the right to demand the immediate correction of any inaccurate data pertaining to you and – taking into consideration the purposes for which your data is being processed – that incomplete information pertaining to you be amended. In compliance with Art 17 GDPR, you have the right to demand deletion (“Right to be forgotten”) of data.
Restriction of Processing
In compliance with Art 18 GDPR, you have the right to restrict the processing of all personally identifiable data which has been collected about you, pursuant to which it will only be processed with your expressed consent or until such point as any legal claims have been asserted and enforced.
In compliance with Art 20 GDPR, you have the right to data transferability. This is your right to demand that personally identifiable data which has been collected and pertains to you be transmitted without restriction or hindrance to a third-party of your choosing.
Right to Object
In compliance with Art 21 (1) of the GDPR, every affected person has the right, for reasons which derive from their own unique situation, to lodge an objection at any time against the processing of personally identifiable data pertaining to them, processing which may be deemed necessary for the performance of a task, in the public interest, pursuant to exercise of official authority, which had been consigned to the responsible party (Art 6 (1) (e) GDPR) or which is required in order to safeguard the legitimate interests of the responsible party or of a third-party (Art 6 (1) (f) GDPR). This right also applies to any profiling based on such circumstances.
The responsible party will cease processing the personally identifiable data, other than if s/he can demonstrate compelling reasons for such processing that are worthy of protection and which outweigh the interests, rights and freedoms of the affected person, or the processing thereof is vital in the assertion, exercise or defense of legal claims. In accordance with Art 21 (2) and (3) GDPR, every affected person has the right to object to data processing for the purpose of direct advertising with future effect. If you do indeed decide to assert your rights as laid out above and in accordance with the GDPR, OJäg must respond or lodge a formal objection within one month of receipt of your request. If you believe that the processing of your data contravenes data privacy statutes or that your data privacy rights have been infringed in some other way, you may submit a complaint to the public oversight authority, which in Austria is the Data Protection Office.