Please address your questions regarding data protection to:
H&S Heilig und Schubert Software AG, FN 121836 x, Goldschlagstraße 87-89, 1150 Vienna, Austria, (also known as “H&S AG” for short) processes your personal data only in accordance with the provisions of the General Data Protection Regulation (also known as the GDPR for short) and the Data Protection Act (also known as “DSG”). The term “personal data” means any information relating to an identified or identifiable natural person (data subject). An identifiable person is considered to be an individual who, directly or indirectly, in particular by assigning it to an identifier such as a name, to an identification number, to location data, to an online identifier or to one or more special characteristics, the expression The physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person can be identified. H&S AG only processes personal data (hereinafter also referred to as “data”) which are necessary for the purpose of fulfilling the contract, which you voluntarily made available to H&S AG and for whose use you have given H&S AG your consent for the respective purpose, which are necessary for the purpose of safeguarding the legitimate interests of H&S AG or a third party or for whose processing there is an otherwise legal basis. H&S AG has put in place appropriate technical and organisational measures to ensure that there is no unauthorized access to the data and that the data cannot be used illegally. The technical and organisational measures are continuously evaluated and adapted to the respective technical standards. The employees of H&S AG are contractually obliged to comply with the data secrecy (Section 6 (1) DSG). Only those employees who need it to fulfill their respective purposes will have access to your data. H&S AG will transmit data of its customers and suppliers to banks for the processing of payment transactions, legal representatives, business trustees, courts, administrative and financial authorities, contractual partners who are to participate in the delivery or service, and insurance companies on the occasion of the occurrence of an insured event. H&S AG will pass on data within the Group if this is justified by the legitimate interests of H&S AG or is necessary for the performance of the contract. H&S AG uses processors with whom it has concluded contract processor contracts in accordance with Art 28 GDPR to process its data. Your personal data will be stored depending on the legal basis for data processing and the purpose of the data processing. The storage, if the processing of the data is necessary for the fulfilment of the contract, until the termination of the contractual relationship, if your consent is required for the data processing, until the revocation of your consent, provided that the storage of the data takes place on the basis of legitimate interests of H&S AG or a third party until the abolition of these legitimate interests, and in addition as long as statutory retention periods and reporting obligations , in particular in accordance with UGB and BAO, exist or as long as legal claims arising from contractual relationships with H&S AG can be asserted. In particular, H&S AG has a legitimate interest in processing your data in order to provide you as a customer or supplier with information about promotions, new products and updates of H&S AG. Transfers of data outside the EU or eEA to third countries will only take place if permitted by law.
2. Information about your rights (affected rights)
With regard to your personal data, you have the following rights with regard to the legal requirements of Art 15 to 22 GDPR: right to access, right to rectification, right to erasure, right to restriction of processing and right to data portability. Pursuant to Art 14 (2) lit c GDPR iVm Art 21 GDPR, you have the right to object to the processing of your personal data if the data processing is carried out for the purpose of safeguarding the legitimate interests of H&S AG or a third party (Art 6 sec. 1 lit f GDPR), provided that H&S AG has no vested interest, rights and freedoms, or the processing of the claim is carried out exercise or defence of legal claims. If H&S AG processes your personal data in order to conduct direct marketing, you have the right to object to the processing of your personal data at any time. If H&S AG processes your data solely on the basis of your consent, you are entitled to revoke this consent at any time. If you have any questions about data protection or wish to assert your data subjects’ rights, H&S AG asks you to contact H&S AG either by e-mail: firstname.lastname@example.org or by post (H&S Heilig und Schubert Software AG, data protection department, e.g. Mr. DI (FH) Martin Leitner, Goldschlagstraße 87-89, 1150 Vienna, Austria). In the event that you feel that your data subjects are infringed or that you believe that the processing of your personal data is not lawful, you have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the data protection authority, Wickenburggasse 8, 1080 Vienna.