Privacy Policy for Website Operators in Accordance with the GDPR
79 Blue Elephants GmbH (hereinafter “79BE”) is pleased that you are visiting our website. Data protection and data security when using our website are very important to us. We would therefore like to inform you here about which of your personal data we collect when you visit our website and for what purposes it is used.
As changes in legislation or in our internal processes may require this privacy policy to be updated, we ask you to read it regularly. This privacy policy can be accessed, saved and printed at any time at https://alpha-awards.com/datenschutz.
§1 Controller and scope
The controller within the meaning of the EU General Data Protection Regulation (hereinafter: GDPR) and other national data protection laws of the member states as well as other data protection provisions is:
79 Blue Elephants GmbH
Längenfeldgasse 27B, 1120 Vienna, Austria
01/8908989-0
office@alpha-awards.com
This privacy policy applies to the online services of 79BE available under the domains https://submit.to , https://alpha-awards.com, https://79blueelephants.com and their various subdomains (hereinafter “our website”).
§2 Data protection officer
The controller’s external data protection officer is:
RA Dr. Daniel Stanonik
Salztorgasse 2/8
01/904 33 55
office@stanonik.at
§3 Principles of data processing
Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, age, address, telephone number, date of birth, email address, IP address or user behavior. Information that cannot be linked to you (or only with disproportionate effort), e.g. because it has been anonymized, is not personal data. The processing of personal data (e.g. collecting, retrieving, using, storing or transmitting it) always requires a legal basis or your consent.
Personal data that has been processed is deleted as soon as the purpose of the processing has been achieved and there are no longer any statutory retention obligations.
Where we process your personal data to provide certain services, we inform you below about the specific processes, the scope and purpose of the data processing, the legal basis for the processing and the respective storage period.
§4 Individual processing operations
1. PROVISION AND USE OF THE WEBSITE
1a. Type and scope of data processing
When you visit and use our website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file. When you use our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the file/website accessed
- Website from which access is made (referrer URL)
- Browser used and, if applicable, your computer’s operating system
1b. Legal basis
The legal basis for this data processing is Art. 6(1)(f) GDPR. Processing this data is necessary to provide a website and thus serves our company’s legitimate interest.
1c. Storage period
As soon as the data is no longer required to display the website, it is deleted. Collecting the data to provide the website and storing it in log files is essential for operating the website. Consequently, users have no right to object. Longer storage may take place in individual cases where required by law.
2. REGISTRATION / USER ACCOUNT
2a. Type and scope of data processing
On our website, we offer you the option of registering by providing personal data.
We use the data processed to create a personalized user account for you, with which you can use certain content on our website.
We process your email address so that we can send you new login details should you ever forget them.
The following overview shows in detail which personal data we process when you register:
Name
Email address
Address
IP address
2b. Legal basis
Pursuant to Art. 6(1)(b) GDPR, the processing of the personal data described serves the performance of a contract between you and 79BE or the implementation of pre-contractual measures.
2c. Storage period
As soon as the data processed is no longer required to perform the contract, it is deleted. Even after the contract has ended, it may be necessary to store your personal data in order to meet contractual or legal obligations. Longer storage may take place in individual cases where required by law.
2d. Closing your registration
As a user, you can close your registration at any time. You can have the data stored about you changed at any time. To do so, please proceed as follows: send us an email with your request to: [email address].
However, if the data processed is required to perform a contract or to implement pre-contractual measures, early deletion of the data is only possible insofar as no contractual or legal obligations prevent it.
3. PURCHASE OF GOODS
3a. Type and scope of data processing
On our website, we offer users the option of purchasing goods by providing personal data. The data required for this is entered into an input form, transmitted to us and stored. The data is not passed on to third parties. The following data is collected as part of the ordering process:
Name
Address
Email address
Payment information
Company
Your data is passed on to the shipping company commissioned with delivery insofar as this is necessary to deliver the goods. To process payments, we pass your payment data on to the credit institution commissioned with the payment. These companies may only use your data to process the order and not for any other purpose.
If you purchase goods on our website and provide your email address, we may use it to send you a newsletter about our own similar goods or services.
3b. Legal basis
The legal basis for processing your personal data required to perform a purchase contract concluded with us is Art. 6(1)(b) GDPR. This also applies to processing operations required to implement pre-contractual measures.
The legal basis for sending the newsletter following the purchase of goods is Art. 6(1)(f) GDPR.
3c. Storage period
Once the contract has been fully processed and the purchase price paid in full, your data is blocked for further use and deleted after the tax and commercial retention periods have expired, unless you have expressly consented to further use of your data. Longer storage may take place in individual cases where required by law.
4. NEWSLETTER
4a. Type and scope of data processing
On our website, you can subscribe to a free newsletter. To send you the newsletter regularly, we need the following information from you:
Email address
Name
Company
Telephone number
Areas of interest
Newsletter
Your data is not passed on to third parties in connection with sending the newsletter.
We use the so-called double opt-in procedure to send the newsletter, i.e. we will only send you the newsletter once you have confirmed your subscription via a link in a confirmation email sent to you for this purpose. This ensures that only you, as the owner of the email address provided, can subscribe to the newsletter. You must confirm promptly after receiving the confirmation email, otherwise your newsletter subscription will automatically be deleted from our database.
4b. Legal basis
The processing of your email address, name, company, telephone number and areas of interest, as well as your stated interest in receiving the newsletter, is based on Art. 6(1)(a) GDPR and the declaration of consent you voluntarily give below:
Declaration of consent:
By entering my data and clicking the “Subscribe to newsletter” button, I consent to the processing of my email address, name, company, telephone number and areas of interest, as well as my stated interest in receiving a regular newsletter. I can unsubscribe from the newsletter service at any time by clicking the corresponding link at the end of the newsletter.
I can withdraw my consent to the collection of the personal data collected during the subscription process at any time at [email address], 79 Blue Elephants GmbH, Längenfeldgasse 27B, 1120 Vienna.
4c. Storage period
The data you enter is stored for as long as you are subscribed to the newsletter. After you unsubscribe, your email address is deleted. Longer storage may take place in individual cases where required by law.
5. CONTACT FORM
5a. Type and scope of data processing
On our website, we offer you the option of contacting us via a form. When you submit your inquiry via the contact form, you are referred to this privacy policy in order to obtain your consent. If you use the contact form, the following personal data is processed:
Email address
Name
Your email address is used to assign your inquiry and to be able to reply to you. Your personal data is not passed on to third parties when you use the contact form.
5b. Legal basis
The data processing described above for the purpose of contacting us is based on Art. 6(1)(a) GDPR and the declaration of consent you voluntarily give below:
Declaration of consent:
By entering my data and clicking the “Send” button, I consent to the processing of my email address and name in order to answer my inquiry. I can withdraw my consent to the collection of the personal data collected when using the contact form at any time at [email address], 79 Blue Elephants GmbH, Längenfeldgasse 27B, 1120 Vienna.
5c. Storage period
As soon as your inquiry has been dealt with and the matter has been conclusively clarified, the personal data processed via the contact form is deleted. Longer storage may take place in individual cases where required by law.
§5 Disclosure of data
We only pass your personal data on to third parties if:
- you have given your express consent to this pursuant to Art. 6(1)(1)(a) GDPR;
- this is legally permissible and necessary pursuant to Art. 6(1)(1)(b) GDPR to perform a contractual relationship with you;
- there is a legal obligation to disclose the data pursuant to Art. 6(1)(1)(c) GDPR;
- disclosure pursuant to Art. 6(1)(1)(f) GDPR is necessary to protect legitimate business interests and to assert, exercise or defend legal claims, and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed.
§6 Use of cookies
a. Type and scope of data processing
We use cookies on our website. Cookies are small files that we send to your device’s browser during your visit to our website, where they are stored. Some features of our website cannot be offered without technically necessary cookies. Other cookies, by contrast, enable us to carry out various analyses. Cookies can, for example, recognize the browser you use when you visit our website again and transmit various information to us. Among other things, cookies help us make our website more user-friendly and effective for you, for example by tracking your use of our website and identifying your preferred settings (e.g. country and language settings). Where third parties process information via cookies, they collect it directly via your browser. Cookies do not harm your device. They cannot run programs or contain viruses.
Various types of cookies are used on our website; their type and function are explained in more detail below.
Our website uses transient cookies, which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. This allows various requests from your browser to be assigned to a single session and enables us to recognize your device on subsequent visits to the website.
Our website uses persistent cookies. Persistent cookies are stored in your browser for a longer period and transmit information to us. The storage period differs depending on the cookie. You can delete persistent cookies yourself via your browser settings.
Necessary cookies:
These cookies are required for technical reasons so that you can visit our website and use the features we offer. This applies, for example, to the following applications: submit.to, alpha-awards.com, 79blueelephants.com. These cookies also contribute to the secure and compliant use of the website.
Performance cookies:
These cookies enable us to analyze the use of the website and improve its performance and functionality. For example, they record how visitors use our website, which pages are accessed most frequently, or whether error messages are displayed on certain pages.
Marketing and social media cookies:
Advertising cookies (from third-party providers) make it possible to show you various offers that match your interests. These cookies can record users’ web activities over a longer period. The cookies may recognize you across different devices you use.
The following third-party providers receive personal data via cookies embedded on our website:
- Google Analytics
- Google+
In addition, certain cookies make it possible to connect to your social networks and share content from our website within your networks.
b. Legal basis
Based on the purposes described, the legal basis for processing personal data using cookies is Art. 6(1)(f) GDPR. If you have given us your consent to the use of cookies on the basis of a notice on our website (“cookie banner”), the lawfulness of the use is additionally governed by Art. 6(1)(1)(a) GDPR.
c. Storage period
As soon as the data transmitted to us via cookies is no longer required to achieve the purposes described above, this information is deleted. Longer storage may take place in individual cases where required by law.
d. Configuring your browser settings
Most browsers are set to accept cookies by default. However, you can configure your browser so that it only accepts certain cookies or none at all. Please note, however, that you may no longer be able to use all features of our website if cookies are disabled via your browser settings. You can also use your browser settings to delete cookies already stored in your browser or to display their storage period. It is also possible to set your browser to notify you before cookies are stored. As the various browsers may work differently, please refer to your browser’s help menu for the configuration options.
If you would like a comprehensive overview of all third-party access to your web browser, we recommend installing plug-ins developed specifically for this purpose.
§7 Tracking and analytics tools
We use tracking and analytics tools to ensure the ongoing optimization and needs-based design of our website. Tracking measures also enable us to record statistically how visitors use our website and to develop our online offering further for you based on the insights gained. Based on these interests, the use of the tracking and analytics tools described below is justified pursuant to Art. 6(1)(1)(f) GDPR. If you have given us your consent to the use of cookies on the basis of a notice on our website (“cookie banner”), the lawfulness of the use is additionally governed by Art. 6(1)(1)(a) GDPR. The description of the tracking and analytics tools below also sets out the respective processing purposes and the data processed.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable an analysis of your use of the website.
The information generated by these cookies, for example about the time, place and frequency of your use of this website, is usually transmitted to a Google server in the USA and stored there. When Google Analytics is used, it cannot be ruled out that the cookies set by Google Analytics may collect other personal data in addition to the IP address. Please note that Google may transfer this information to third parties where required by law or where third parties process this data on Google’s behalf.
Google will use the information generated by the cookies on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services related to website and internet use. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
You can generally prevent cookies from being stored by adjusting the settings of your browser software. Please note, however, that in this case you may not be able to use all features of this website to their full extent.
It cannot be ruled out that the cookies set by Google Analytics may collect further personal data in addition to the IP address. To prevent information about your use of the website from being collected by Google Analytics and transmitted to Google Analytics, you can download and install a browser plug-in via the following link: Browser add-on.
This plug-in prevents information about your visit to the website from being transmitted to Google Analytics. It does not prevent other forms of analysis.
Please note that you cannot use the browser plug-in described above when visiting our website via the browser of a mobile device (smartphone or tablet). When using a mobile device, you can prevent Google Analytics from collecting your usage data by clicking the following link: Disable Google Analytics.
Clicking this link sets a so-called opt-out cookie in your browser. This prevents information about your visit to the website from being transmitted to Google Analytics. Please note that the opt-out cookie is only valid for this browser and this domain. If you delete the cookies in this browser, the opt-out cookie is deleted as well. To continue preventing collection by Google Analytics, you must click the link again. The opt-out cookie can also be used as an alternative to the plug-in above when using the browser on your computer.
To ensure the best possible protection of your personal data, Google Analytics on this website has been extended by the code “anonymizeIp”. This code deletes the last 8 bits of IP addresses, so that your IP address is collected anonymously (so-called IP masking). Google generally shortens and thereby anonymizes your IP address within member states of the European Union or other contracting states of the Agreement on the European Economic Area before it is transmitted. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
Google AdWords
We use the “Google AdWords” technology, specifically conversion tracking. Google Conversion Tracking is an analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you click on an ad placed by Google, a conversion tracking cookie is stored on your PC. These cookies are valid for 30 days and are not used for personal identification. If you visit certain pages of our website while the cookie has not yet expired, Google and we can recognize that you clicked on a particular ad and were redirected to this page. Each Google AdWords customer receives a different cookie. It is therefore not possible to track cookies across the websites of AdWords customers.
The data obtained via the conversion cookie is used to create conversion statistics for AdWords customers who use conversion tracking. Customers learn the number of users who clicked on their ad and were then redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users.
If you do not want to take part in conversion tracking, you can prevent this by adjusting your browser settings accordingly, e.g. by generally preventing cookies from being installed. You can also disable cookies for conversion tracking by setting your browser so that only cookies from the domain “googleadservices.com” are blocked.
Google Remarketing
We use the “Google Remarketing” technology from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Remarketing shows ads to users who have already visited our websites and online services and have shown interest in a particular offer. Within the Google advertising network, targeted, interest-based ads can thus be shown on our site. Google Remarketing uses cookies for this analysis. This allows our visitors to be recognized as soon as they visit websites within Google’s advertising network. Within Google’s advertising network, targeted and interest-based ads can thus be shown that are based on the websites in Google’s advertising network previously visited by the visitor (which also use Google’s remarketing function).
If you do not wish to see targeted, interest-based advertising, you can disable Google’s use of cookies for these purposes via the following link: Disable ads.
§8 Plugins
-
1. Facebook, Google+, Twitter, Instagram, LinkedIn
Our websites contain social plugins from the social networks “Facebook” (Facebook Inc., 1601 S. California Ave, Palo Alto, California 94304, USA), “Google+” (Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA), “Twitter” (Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA), “Instagram” (Instagram, LLC, ATTN: Arbitration Opt-out, 1601 Willow Rd., Menlo Park, CA 94025) and “LinkedIn” (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). It is possible that personal data about website visitors is collected via these plugins, transmitted to the respective service and linked to the visitor’s account with that service.79BE itself does not collect any personal data via the social plugins or their use. To prevent data from being transmitted to service providers in the USA without the user’s knowledge, we use the so-called Shariff solution on our website. This means that the respective social plugins are initially embedded on the website only as graphics. These graphics contain a link to the website of the respective plugin provider. Only when you click on one of the graphics are you redirected to the respective provider’s service. This solution ensures that personal data is not automatically passed on to the providers of the respective social plugins when you visit our website. If you click on one of the social plugin graphics, data may be transmitted to the respective service provider and stored there. If you do not click on any of the graphics, no data is exchanged between you and the provider of the social plugin. You can find more information about the Shariff solution on the following website: heise.de
After you click on a social plugin, the respective service provider receives the information that you have visited the corresponding page of our online offering. Please note that you do not need to have a user account with the service in question or be logged in there for this to happen. However, if you already have a user account with the service provider and are logged into it while visiting our website, the data collected by the social plugin is assigned directly to your account. If you do not want the data to be assigned to your profile with the service provider, you must log out of your user account before clicking on one of the social plugins.
Please note that 79BE has no influence on whether and to what extent the respective service providers collect personal data. We do not know the scope, purpose and storage periods of the respective data collection. However, we would like to point out that it must be assumed that at least the IP address and device-related information are used and collected via social plugins. It is also possible that the respective service providers use cookies.
For the scope and purpose of the data collection by the respective service, and for the further processing and use of your data there, please refer to the privacy notices on the website of the respective service. There you will also find further information about your data protection rights and settings to protect your privacy.
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
b) Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA
c) Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA
d) Instagram
https://help.instagram.com/519522125107875e) LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
2. Xing
Our website uses a button from the “Xing” network. When you click this button, your browser briefly establishes a connection to servers of XING AG (hereinafter “XING”), which provide the “XING button” functions. XING does not store any of your personal data when you access this website. In particular, XING does not store IP addresses. Your usage behavior is also not analyzed via cookies in connection with the “XING Share button”. You can find the latest data protection information on the “XING Share button” and further information on this website:
§9 Hyperlinks
Our website contains so-called hyperlinks to websites of other providers. When you activate these hyperlinks, you are redirected from our website directly to the website of the other provider. You can recognize this, among other things, by the change of URL. We cannot accept responsibility for the confidential handling of your data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please inform yourself directly on these websites about how these companies handle your personal data.
§10 Rights of data subjects
As a data subject whose personal data is processed, you have the following rights under the GDPR:
Pursuant to Art. 15 GDPR, you can request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, any transfer to third countries or international organizations, and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details.
Pursuant to Art. 16 GDPR, you can request the immediate rectification of inaccurate personal data or the completion of your personal data stored by us.
Pursuant to Art. 17 GDPR, you can request the erasure of your personal data stored by us, unless processing is necessary to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to establish, exercise or defend legal claims.
Pursuant to Art. 18 GDPR, you can request the restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful, we no longer need the data and you oppose its erasure because you need it to establish, exercise or defend legal claims. You also have the right under Art. 18 GDPR if you have objected to the processing pursuant to Art. 21 GDPR.
Pursuant to Art. 20 GDPR, you can request to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or request that it be transmitted to another controller.
Pursuant to Art. 7(3) GDPR, you can withdraw any consent you have given us at any time. As a result, we may no longer continue the data processing based on this consent in the future.
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our registered office. In Austria, the supervisory authority is the Data Protection Authority (Datenschutzbehörde), Wickenburggasse 8, 1080 Vienna, phone: +43 1 52 152-0, email: [email address], web: www.dsb.gv.at
§11 Right to object
Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(1)(f) GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data, provided there are grounds arising from your particular situation or the objection relates to direct marketing. In the case of direct marketing, you have a general right to object, which we will implement without you having to state a particular situation.
§12 Data security and security measures
We are committed to protecting your privacy and treating your personal data confidentially. To prevent manipulation, loss or misuse of your data stored with us, we take extensive technical and organizational security measures, which are regularly reviewed and adapted to technological progress. These include the use of recognized encryption methods (TLS/SSL).
However, we would like to point out that, due to the structure of the internet, it is possible that the rules of data protection and the above-mentioned security measures are not observed by other persons or institutions outside our area of responsibility. In particular, data disclosed without encryption, e.g. by email, may be read by third parties. We have no technical influence on this. It is the user’s responsibility to protect the data they provide against misuse by encryption or in any other way.