Data protection information
Introduction
Thank you for your interest in our website and our company. Although we carefully check external links, we are not liable for the content and security of these external links.
We protect your personal data in the best possible way when collecting, processing and during your visit to our website. Your data is protected in accordance with the law. Below you will find explanations of the type of data collected when you visit our website and how this data is used.
The processing of your data
Who is responsible for processing my personal data?
Responsible for the processing of your data is
FLiP GmbH
Gemeinnützige Gesellschaft zur Förderung finanzieller Bildung’
Am Belvedere 1
1100 Vienna
Contact for data protection related inquiries:
Erste Social Finance GmbH
Am Belvedere 1
1100 Vienna
E-Mail: contact@erstesocialfinance.com
Competent supervisory authority for data protection matters:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at
https://www.dsb.gv.at/
Who is the data protection officer?
Gregor König is our Data Protection Officer, also known as the Data Protection Officer. If you have any questions, suggestions or complaints regarding the processing of your data, you can contact him and his team at:
Gregor König – Data Protection Officer
Erste Group Bank AG
Am Belvedere 1 1100 Vienna
E-mail: datenschutz@erstegroup.com
For what purposes and on what legal basis is my personal data processed?
Further information on data processing in connection with the operation of our website can be found in the “Cookies” section.
- Processing for the performance of a contract and for pre-contractual measures taken at your request:
When you book a visit or contact us, we process the personal data you provide in order to process your request.
If you provide a name to address you during a visit, this will be processed during your participation and deleted immediately after it ends.
- Processing due to legal obligations
Legal regulations also require us to process your personal data, e.g. for accounting, controlling and compliance with tax regulations.
- Processing based on legitimate interests
A legitimate interest in data processing by us or third parties exists in the following cases:
- Measures to protect employees, visitors and our property
- Exercising or defending rights
- Ensuring our IT security and IT operations
- Processing based on consent
If there is neither a contract nor legal obligations or a legitimate interest, data processing may still be lawful: namely if you have given us your consent to do so.
The scope and content of this data processing always results from the respective consent. You can withdraw your consent at any time for the future. However, if you withdraw your consent, the processing will remain lawful up to the time of withdrawal. This means that a revocation does not apply to the past.
- Processing for statistical purposes
We also process your personal data for statistical purposes in accordance with Section 7 of the Data Protection Act.
Am I obliged to provide my personal data? What happens if I do not want to?
We rely on your personal data for our business relationship (bookings, answering contact inquiries). If you do not wish this, we may unfortunately not be able to provide certain services. If we only process your data on the basis of your consent, you are not obliged to give this consent and provide the data.
Is there any decision-making based on automated processing – e.g. profiling?
No, such processing does not take place.
To whom will my personal data be passed on?
Your personal data may be forwarded to:
- Processors commissioned by us and other service providers (controllers), e.g. for IT, back office, legal and tax advice, insofar as they require the data for their task.
- third parties, insofar as this is mandatory for the fulfillment of the contract or legal regulations.
- Public bodies and institutions as well as persons with a sovereign mandate, insofar as we are legally obliged to do so or in order to protect our legitimate interests, e.g. tax authorities.
Data may also be passed on to third parties if and for as long as you have consented to this.
A list with an overview of possible recipients can be found here.
Will my personal data be transferred to a third country?
Your personal data may be transferred to a third country in the following cases:
- If this is necessary in order to assert, exercise or defend legal claims or if there is a legal obligation, e.g. at the request of the authorities under a mutual legal assistance agreement.
- If it is necessary for your contract or for pre-contractual measures.
- Our processors and sub-processors may be located in third countries. If the transfer is not based on an adequacy decision by the European Commission, we transfer the data on the basis of suitable or appropriate guarantees. We will be happy to provide you with these on request.
- In other cases in which data is transferred to a third country, you will be informed separately.
How long will my personal data be stored?
Your personal data will be stored for as long as is necessary for the respective purpose, for example if a law prescribes storage.
Key legal provisions for us are, for example
- German Commercial Code § 212 (7 years)
- Federal Fiscal Code § 132 (7 years or for the duration of tax proceedings)
Clarification of your rights
What rights do I have?
The GDPR grants the following rights for your personal data. You have the right to:
- Information, according to Article 15 GDPR
- Rectification, in accordance with Article 16 GDPR
- Erasure, in accordance with Article 17 GDPR
- Restriction of processing, in accordance with Article 18 GDPR
- Data portability, in accordance with Article 20 GDPR
- Objection, according to Article 21 GDPR
- Decisions that are not based exclusively on automated processing – including profiling, in accordance with Article 22 GDPR
How and where can I assert my rights?
What information do I have to provide?
We do not want your data to fall into the wrong hands. Please understand that in cases of doubt we may request further information about your identity.
How can I submit the application?
You can submit your application by e-mail to contact@erstesocialfinanceholding.at or by letter:
Erste Social Finance GmbH
Am Belvedere 1
1100 Vienna
How long will it take for my application to be processed?
We will provide you with the relevant information on the measures without delay, but in any case within one month of receiving your application.
The deadline can be extended by a further 2 months if this is necessary due to the complexity and number of applications. However, we will inform you within one month of receiving your application about a possible extension of the deadline and the reasons for it.
Will it cost me anything if I assert my rights?
No, the applications are processed free of charge. Exception: If the applications are manifestly unfounded or excessive, we are entitled to demand an appropriate fee. This takes into account the administrative costs for the notification, refusal or implementation of the requested measure.
Are there any complaint options?
Our data protection officer will be happy to help you with any complaints, questions or suggestions on the subject of data protection. We are convinced that a joint solution can be found to almost any problem.
If you do not receive a timely response to a request, if you feel that your right to data protection has been violated or if you believe that we have not complied with your request in accordance with the law, you can also lodge a complaint with the competent supervisory authority:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Austria
Phone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at
https://www.dsb.gv.at/
In addition, any person who has suffered material or non-material damage as a result of a breach of the GDPR or of Section 1 or Article 2 1st main section of the DPA is entitled to compensation from the controller or processor in accordance with Article 82 GDPR. In detail, the general provisions of civil law apply. Please note that it is not the Austrian Data Protection Authority that is responsible for claims for damages, but the local provincial court in your district that is responsible for civil law matters. However, applications and lawsuits can also be filed with the regional court in whose district the defendant has his habitual residence, registered office or branch office. You can find out which court has jurisdiction here: https://www.justiz.gv.at/
Video surveillance
Erste Group Bank AG uses video surveillance to ensure increased security on the Erste Campus site. These areas are marked accordingly.
Erste Group Bank AG uses video surveillance for these purposes:
- In order to enforce their domiciliary rights and those of the tenants at Erste Campus and to prevent attacks
- Protection of customers, employees and property of the bank and tenants
- To enforce and defend against legal claims
- To collect evidence of criminal offenses
- For proof of withdrawals and deposits (at ATMs and in branches)
Storage duration of the video recording:
- Erste Group Bank AG stores the recordings for 90 days and then deletes them.
- Longer storage is possible if necessary, e.g. if proceedings are ongoing)
is responsible for video surveillance:
Erste Group Bank AG
(Erste Campus site)
Am Belvedere 1
1100 Vienna
Data protection information Erste Group Bank AG
Note:
If a tenant of Erste Campus asserts a legitimate interest, it can also pass on the video recordings to them. A list of tenants can be found under Campus Tenants | Erste Group Bank AG.
Contact for inquiries about data protection:
Erste Group Bank AG
0196 1905/AT Data Privacy Security Management
Am Belvedere 1
1100 Vienna
E-Mail: DSGVO-Support@erstegroup.com
You can reach the person responsible for data protection at
Erste Group Bank AG
0196 0358/Data Protection Office
Am Belvedere 1
1100 Vienna
E-mail: datenschutz@erstegroup.com
Data processing for online services
We use cookies to analyze access to our website and create content and offers that meet your needs. You can set your browser so that your consent must be obtained before a cookie is used or the use of cookies is generally blocked. In the following section, which you can access by clicking on the “Cookie settings” button, you will find further information and the option to object to the use of cookies.
Key aspects for the use of our online services
What is it about?
Some data processing is essential for you to be able to use our website. Others are optional and extend your options.
Can you prevent this data processing?
You cannot use our online services without the data processing of the “Essential Services”. Optional areas such as “Statistics”, “Marketing” and “External media” are not mandatory.
You can find all information on this under “Detailed information on services and cookies”.
Technical
What is it about?
This website uses certain fundamental services that are necessary for its operation. These include- DNS Proxy
- Website hosting
- E-mail provider
- Technical service providers / administration
Can you prevent this?
No, you cannot prevent this when you visit and interact with this website.
Web analysis
What is it about?
We use a web analysis tool to collect statistical usage data and user behavior on our website in order to optimize our offering: Which website did a person come from? Which subpages were visited? How often and for how long was the page visited? Where was clicked?Can you prevent this data processing?
Yes, you can prevent these evaluations by adjusting your privacy settings. Do you want to change your consent? Manage data protection settings:You can find all information on this under “Detailed information on services and cookies”.
Marketing and social media
What is it about?
We do not currently use any marketing services or social media tracking or profiling ourselves, but some of the online services we use do.
Can you prevent this data processing?
Yes. You can prevent these evaluations by third parties by adjusting your privacy settings and deactivating these services.
Do you want to change your consent? Manage privacy settings:
You can find all information on this under “Detailed information on services and cookies”.
External media
What is it about?
We integrate external services to provide functions on our website (e.g. embedding videos or podcasts). In some cases, services from third parties are also loaded automatically.
Can you prevent these functions?
Yes, you can prevent this by adjusting your privacy settings and deactivating these services completely.
Do you want to change your consent? Manage privacy settings:
You can find all information on this under “Detailed information on services and cookies”.
Detailed information on services and cookies
We have compiled a detailed list of the services used on this website and their cookies. Please note that we have no influence on the online services used by third parties and it is therefore possible that a service may in turn activate other services. Example: “AdsWizz / Simplecast – Podcast Hosting Platform” from the “External Media” category also loads tracking pixels for itself, which are assigned to the “Marketing” category. In addition, the third-party services used may also change at short notice and without our knowledge.