Privacy Policy

General

The protection of your personal data and your privacy is important to us. For this reason, we inform you in the following about our handling of your personal data; in particular the type, scope and purpose of the processing of personal data as well as the data protection claims and rights to which you are entitled.

Person Responsible

The responsible party in accordance with the GDPR is aneon solutions GmbH.
You can reach us at the following contact details:

Johannesgasse 18/5
A-1010 Vienna
+43 1 9346183
[email protected]

Purpose of Processing, Legal Basis, and Data Collected

1) Establishing Contact and Processing Contracts

We process your personal data to process enquiries and orders when you contact us by e-mail, telephone or via our web forms and make an enquiry.
The following personal data may be processed for this purpose:
Title, first and last name, address, e-mail address, telephone number and company name.

The legal basis for the processing is the performance of a contract or the implementation of pre-contractual measures pursuant to art. 6(1)(b) GDPR.

2) Accounting

We process your personal data for the handling of our internal accounting.
The following personal data may be processed for this purpose:
Title, first and last name, contact information, role, power of representation and processed business cases.

The legal basis for the processing is the fulfilment of a legal obligation pursuant to art. 6(1)(c) GDPR.

3) Applications

We process your personal data as part of the application process if you send us relevant application documents, e.g. by e-mail or via our application form on our website.
The following personal data may be processed for this purpose:
Title, first and last name, address, e-mail address, telephone number, date of birth, CV incl. submitted documents (references, certificates, etc.).

The legal basis for the processing is the performance of a contract or the implementation of pre-contractual measures pursuant to art. 6(1)(b) GDPR, or the protection of our legitimate interest pursuant to art. 6(1)(f) GDPR.
If the processing is based on the protection of our legitimate interest, you have the right to object at any time pursuant to art. 21(1) GDPR (see point 6.4, first paragraph).

Transmission of Data

Within aneon solutions GmbH, only those departments or employees will receive your data insofar as that they require it for processing for the relevant purposes.
Your personal data will only be passed on to third parties or other responsible parties of h&z Unternehmensberatung AG (registered office: Max-Joseph-Straße 6, D-80333 Munich) as an affiliated company if this is absolutely necessary for the fulfilment of the purposes mentioned under point 3.
We generally do not pass on your personal data to third parties or other responsible parties outside of this sphere.

Processors commissioned by us, i.e. IT service providers and service providers in the area of management consultancy and project management, receive your data if they require the data to fulfil their respective tasks. All processors have been carefully selected and take appropriate technical and organisational measures to ensure that your data is processed in accordance with data protection obligations and that your rights are protected. In particular, the processors are not permitted to use your personal data for their own purposes.

Storage Period

We process your personal data for as long as is reasonably necessary to achieve the relevant purposes and, in addition, in accordance with the statutory retention and documentation obligations arising, inter alia, from the Austrian Commercial Code (UGB), the Austrian General Civil Code (ABGB) and the Austrian Federal Fiscal Code (BAO).

In principle, your data will therefore be deleted after the contract has been fully processed, your consent has been revoked or your objection has been made, unless storage is necessary for the fulfilment of a legal obligation or for the assertion, exercise or defence of legal claims.
For example, data in the form of application documents are deleted after seven months if the application has not led to an employment relationship.
Further processing will only take place if you have consented to the further use of your data or if we have reserved the right to further data processing that is permitted by law.

It is also possible to have the data rendered anonymous instead of being deleted. In this case, any reference to a person is irretrievably removed, therefore the obligations under data protection law to delete data also cease to apply. In this case, no personal reference can be restored.

Your Rights

1) Right of Information

Within the framework of the applicable legal regulations, you have the right to request confirmation at any time as to whether personal data relating to you is being processed.
If this is the case, you have the right to obtain information about this personal data (e.g. the purpose of processing, the categories of personal data and recipients) free of charge.

2) Right of Rectification

You have the right to request that we correct your inaccurate personal data without delay.

3) Right of Deletion

Under certain circumstances, you have the right to have your personal data deleted without delay.
Such a right of deletion exists, for example, if

  • your data is no longer required for the purpose for which it was collected or otherwise processed,

  • your data has been processed unlawfully,

  • the data processing was based on your declaration of consent and you revoke your consent, or

  • you object to the processing pursuant to art. 21(1) GDPR and there are no prevailing legitimate grounds for processing your personal data.

You also have a right to deletion if you object to processing for the purpose of direct marketing.

You do not have the right to deletion if one of the exceptions of art. 17(3) GDPR applies.
This is the case, for example, if processing is required for compliance with a legal obligation under EU or Austrian law (e.g. statutory retention obligations) or for the assertion, exercise or defence of legal claims.

4) Right to Object to Data Processing

If data processing is carried out to protect our legitimate interests, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.
The respective legal bases on which processing is based can be found in this privacy policy.
If you object, we will no longer process your respective personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the purpose of asserting, exercising or defending legal claims.

If we process your personal data for the purpose of direct marketing, you have the right to object at any time regarding the processing of your personal data for the purpose of conducting such marketing.

5) Right to Withdraw Consent

If the data processing is based on your consent pursuant to art. 6(1)(a) GDPR, you have the right to revoke the consent at any time.
The lawfulness of the processing carried out on the basis of the consent remains unaffected until the revocation.

6) Right to Data Transference

You have the right to have personal data concerning you, that we automatically process on the basis of your consent or in fulfilment of a contract, handed over to you or to a third party in a common, machine-readable format.
If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.

7) Right to Restriction of Data Processing

You have the right to request the restriction of the processing of your personal data.
The right to restriction of processing applies in the following cases:

  • If you dispute the accuracy of your personal data held by us, we usually need time to verify this.
    For the duration of the verification, you have the right to request the restriction of the processing of your personal data.

  • If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of erasure.

  • If we no longer need your personal data for the purposes of processing, yet you still require it for the exercise, defence or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.

  • If you have lodged an objection pursuant to art. 21(1) GDPR, a balancing of your and our interests must be carried out.
    Until such time as it has been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may — apart from being stored — only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another private individual or legal entity or for reasons of important public interest of the European Union or a member state.

8) Right to Complain to the Competent Supervisory Authority

If you believe that the processing of your personal data violates data protection law or your data protection rights have otherwise been violated in any way, you can file a complaint with the supervisory authority.
In Austria, the Austrian Data Protection Authority (DSB) is responsible.

You can reach the DSB under the following contact details:

Barichgasse 40-42
A-1030 Vienna
Phone: +43 1 52 152-0
Email: [email protected]