The protection of your personal data is very important to us. We therefore process your data solely based on the applicable legal provisions (EU General Data Protection Regulation GDPR, Austrian TKG 2003). In this data protection information, we inform you about the most important aspects of data processing within the scope of our activities.
The use of our website is usually possible without providing any personal data. If you enter personal data, e.g. for the purpose of establishing contact or subscribing to a newsletter, we will pass on the necessary information to companies that process data on our behalf (e.g. send the newsletter). We only commission companies that are subject to the General Data Protection Regulation.
Encrypted data transfer
This website uses SSL encryption to ensure safety and privacy, which prevents third parties from intercepting and reading the data you have entered on our website during transmission to or from our site. You can recognize active encryption by checking the lock symbol or similar symbols in the address bar of your browser.
Contact us
If you contact us via the contact form on the website, by email or other means, the data you provide (name, email address and optionally the telephone number) will be used to process the request and in the event of follow-up questions stored with us for one year. If a contract results from the request, the statutory retention periods apply. We do not pass on this data without your consent.
Data processing is based on Art 6 Para 1 lit b (performance of contract) and Art 6 Para 1 lit a (consent) of the GDPR.
Newsletter
You have the option of subscribing to our newsletter via our website. For this we need your e-mail address, name and your consent to receive the newsletter.
As soon as you have registered for the newsletter, we will send you a confirmation email with a link to confirm your registration. Data processing is therefore based on § 96 para 3 TKG and Art 6 para 1 lit a (consent) of the GDPR.
You can cancel the newsletter at any time. Please send your cancellation to the following email address: contact(at)cedenu.com or use the corresponding link at the end of the newsletter. We will then immediately delete your data in connection with the newsletter dispatch.
The newsletter is sent by “Brevo”, a service of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. Brevo processes your contact information (such as e-mail address and telephone number), personal information (such as first and last name, date of birth, gender), the date of your registration and the IP address used. Brevo uses this information to send and evaluate the newsletter on our behalf.
We have signed a data processing agreement with Brevo. You can find Brevo’s privacy policy here: https://www.brevo.com/de/legal/privacypolicy/
Cloudflare Turnstile
We use the “Cloudflare Turnstile” service from Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA, to protect our website from spam and misuse.
For this purpose, data is transmitted to Cloudflare that makes it possible to distinguish between humans and robots. In most cases, this happens without a human having to answer questions or recognize images.
Data processing is carried out on the basis of Article 6 Paragraph 1 lit f (legitimate interest) of the GDPR.
Our concern within the meaning of the GDPR (legitimate interest) is to protect our website from spam and misuse.
The Cloudlare’s Privacy Policy and further information about the data processed can be found at the following links: https://www.cloudflare.com/privacypolicy/
Server logs
The server from which this website is provided stores information that is automatically transmitted to us by your browser in so-called log files. These are:
- Browser type and browser version
- Operating system used
- The page (URL) from which you came to us
- The IP address of the accessing computer
- Time of the request
This data solely used to ensure security and for technical monitoring of the web server (load, optimization, error detection, security) and is required to offer this service. The data is not connected to other data sources, and therefore cannot be associated with individual persons. The log files are deleted after three months.
Data processing is based on § 6 article 1f (legitimate interests) of the GDPR. The legitimate interest in the sense of the GDPR is the proper and safe function of the website.
Cookies
Our website uses so-called cookies. These are small text files that are stored on your device with the help of the browser. They do no harm.
We use cookies to make our offer user-friendly. Some cookies remain stored on your device until you delete them. They allow us to recognize your browser on your next visit.
Some of these cookies are necessary for the operation of the website and are used to log in and save your consent to non-essential cookies. If you do not want the necessary cookies to be stored, you can set up your browser in the way that it informs you about the setting of the cookies and you only allow these in individual cases.
The legal basis for the use of required cookies is Article 6 Paragraph 1 lit f (legitimate interests) of the GDPR. Legitimate interests within the meaning of the GDPR are the proper and secure functioning of the website and the optimization of our offer.
In addition, other cookies that are not absolutely necessary for the operation of the website may only be stored with your consent. For more details head to our Cookie Policy.
Consent Management
To query and store your consent for cookies and other data processing that requires your consent, we use complianz, a service provided by Complianz BV, Kalmarweg 14-5, 9723 JG, Groningen (NL). Complianz does not process any personal data, only the following information in anonymous form:
- A random key
- The selection you have made (consent)
- Your IP address in an anonymous (shortened) form
- Date and time of your consent / rejection
- The URL where you consented / declined
- The browser used and the operating system (user agent string)
The data is processed exclusively in the EU and stored permanently to document your consent. In addition, a cookie is stored in the visitor’s browser, which saves the random key and the selection (consent) you have made. This information can be used later to verify consent.
Data processing takes place on the basis of Article 6 Paragraph 1 lit f (legitimate interests) of the GDPR. The legitimate interest within the meaning of the GDPR is the effective and legally correct collection and storage of your consent.
Information on data processing by complianz can be found here: https://complianz.io/privacy-statement/
Google Tag Manager
For the purpose of effectively configuring the analysis services described below, we use the Google Tag Manager on this website, a service provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
The Tag Manager is primarily used to transmit data to the Google Analytics and Google Ads services described below. It itself only processes data to the extent technically necessary, in particular the IP address of the accessing computer. The data passed on to the configured services is not analyzed or stored.
We have concluded a data processing contract with Google in which Google undertakes to comply with the standard contractual clauses defined by the EU Commission.
Data processing is carried out on the basis of Art. 6 Para. 1 lit. a (consent) of the GDPR.
The Google Terms of Use and further information on data protection can be found under the following links: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/ and https://policies.google.com/privacy
Google Analytics
With your consent, our website uses functions of the web analysis service “Google Analytics” provided by Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA. Cookies are used for this purpose, which enable an analysis of the use of the website by your visitors. The information generated in this way is transferred to the provider’s server and stored there.
If you have agreed to the use of Google Analytics, cookies will be set in your browser, which will identify you when you visit our website again and allow us to distinguish between visitors and analyse what you have viewed on previous visits to our website. Since the privacy of our users is important to us, this data is pseudonymised, ie we cannot assign it to any specific person and do not know who the respective visitor was.
We have activated the “IP anonymisation” function on this website. As a result, your IP address is shortened before it is sent to the USA and can no longer be assigned to a specific person. Only a rough localization is possible. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
We have concluded a processor contract with Google, in which Google undertakes to comply with the standard contractual clauses defined by the EU Commission.
Data processing takes place on the basis of the legal provisions of Section 96 Paragraph 3 TKG and Art 6 Paragraph 1 lit a (consent) of the GDPR.
The Google terms of use and further information on data protection can be found under the following links: https://marketingplatform.google.com/about/analytics/terms/us and https://policies.google.com/privacy
Comments
If you comment on a post on this website, your comment, your name, your e-mail address and your IP address will be saved.
Before your comment is published, we check it for legal violations such as insults or racist or hate speech. The stored data is necessary in order to be able to take action against such authors if necessary. The data will be deleted as soon as the corresponding contribution is removed from the website.
Data processing takes place on the basis of Article 6 Paragraph 1 lit a (consent) of the GDPR.
Data storage
For the purpose of accounting, the following data of our customers are stored by us: name, address, telephone number, e-mail address, VAT ID. If you have agreed to a direct debit order (SEPA direct debit mandate), your bank details as well. This data will not be passed on, with the exception of transmission to the processing bank/payment service provider for the purpose of debiting, as well as to our tax consultant for accounting purposes and to fulfill our tax obligations. The data is only stored within the EU.
The data you provide is required to fulfill the contract or to carry out pre-contractual measures. Without this data we cannot conclude and fulfill the contract with you.
All data from a contractual relationship will be stored until the end of the tax retention period (7 years).
The storage of the above data takes place
- on encrypted local computer systems or portable computers secured by passwords and physical access protection.
- in encrypted and password-protected Microsoft cloud solutions (Microsoft Ireland Operations Limited, Atrium Block B, Carmenhall Road, Sandyford Industrial Estate, Dublin 18, Ireland).
The data is stored exclusively on servers within the EU.
We have concluded a processor contract with Microsoft, in which Microsoft undertakes to comply with the standard contractual clauses defined by the EU Commission. Microsoft’s privacy policy can be found here.
Data processing takes place on the basis of Art 6 Para 1 lit c (statutory provisions) of the GDPR and Art 6 Para 1 lit b (necessary for the fulfillment of the contract) of the GDPR.
Notes on our Facebook fan page
We operate a Facebook page, which can be accessed at https://www.facebook.com/CEDENUcom. This is a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
We would like to point out that with the help of the Facebook Insight function, which Facebook makes available to us free of charge as an indispensable part of the user relationship, anonymous statistical data relating to the users of these pages is transmitted to us. This data is collected using cookies, each of which contains a unique user code that is active for two years and that Facebook stores on the hard drive of your computer or other data storage medium of the fan page visitor. The user code, which can be linked to your Facebook registration data, is collected and processed when the fan page is accessed. There is no way for the operator of a Facebook fan page to deactivate this function or to prevent the processing of the data mentioned. Facebook provides more information about Facebook Insight here: https://de-de.facebook.com/help/pages/insights.
In this context, Facebook agrees to assume primary responsibility under the GDPR for the processing of the Insight data and to fulfill all obligations under the GDPR with regard to this data. In particular, Facebook assures that it assumes sole responsibility for the personal data processed in this context and that it will fulfill all relevant information obligations.
The data transmitted to us by Facebook in connection with the use of the fan page is anonymized so that we cannot draw any conclusions about the identity of the individual user. However, it is possible to collect demographic data about users (including trends in the areas of age, gender, relationship status and professional situation), information about the lifestyle and interests of users (including information about purchases and online purchasing behaviour) in a statistical analysis the visitor to its site and the categories of goods or services that interest them most) and geographic data.
This data is only processed by us for our own evaluation of the reach of our Facebook page and is not passed on to third parties.
The legal basis for this processing is Article 6 Paragraph 1 lit f (legitimate interests) of the GDPR. The legitimate interest within the meaning of the GDPR is the identification of target groups who are interested in the content contained on our site.
Other social media platforms
We are also present and use these social media platforms to get in contact with you and post the latest news insights and articles based around Cedenu.
Your rights
In principle, you have the right to information, correction, deletion, restriction, data transferability, revocation and objection. Corresponding inquiries can be addressed to the e-mail address contact(at)cedenu.com.
If you believe that the processing of of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can complain to the supervisory authority. In Austria, this is the data protection authority.
You can reach us under the following contact details:
Cedenu OG
Sechshauser Straße 62-64, 1150 Vienna, Austria
contact(at)cedenu.com
