The European Union General Data Protection Regulation 2016/679 (GDPR) is applied to all organizations that collect data from EU residents and even applies to organizations based outside the EU. GDPR harmonizes different data privacy laws across European countries and requires businesses to re-evaluate what they do. See more at https://www.eugdpr.org.

atwork gmbh (short: atwork) cares about your privacy. For this reason, we collect and use personal data only as it might be needed for us to deliver to you our products, services, websites and mobile applications (collectively, our “Services”). Your personal data includes information such as:

• Name
• Company Name
• Company Address
• Phone Number
• E-Mail Address
• IP Address
• Other data collected that could directly or indirectly identify you

Our Privacy Policy is intended to describe to you what data we collect, and how and why we use your personal data. It also describes options we provide for you to access, update or otherwise take control of your personal data that we process.

Responsibilities

Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:

atwork gmbh Kreilplatz 1
1190 Wien
Austria
Phone: +43 (1) 370 83 90
E-Mail: office@atwork.at
Web: www.atwork-it.com

Name and Address of the Data Protection Officer

The Data Protection Officer (DPO) of the controller is: Toni Pohl
atwork gmbh
Kreilplatz 1
1190 Wien
Austria

If at any time you have questions about our practices or any of your rights described below, you may reach our Data Protection Officer (“DPO”) and our team by filling out our GDPR form at the end of this page.

What information do we collect

We collect information so that we can provide the best possible experience when you utilize our Services.Much of what you likely consider personal data is collected directly from you when you create a request (via e-mail, phone, contact form) or purchase any of our services (e.g.. billing information, including name and address).

However, we also collect additional information when delivering our Services to you to ensure necessary and optimal performance.These methods of collection may not be as obvious to you, so we wanted to highlight and explain below a bit more about what these might be (as they vary from time to time) and how they work.

Cookies

Some of our internet websites use cookies. Cookies are text files that are stored in a computer system via an Internet browser. Thus, Internet pages and servers can be assigned to the specific Internet browser. Through the use of cookies, atwork can provide the users of its websites more user-friendly services and optimized content. and Another purpose is to make it easier for users to utilize our website.

The data subject may, at any time, prevent the setting of cookies through our websites by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be entirely usable.

Facebook: Ad Serving, Ad Targeting, Analystics/Measurement, Content Customization, Optimization, Cross Device Tracking - duration is decided by Facebook - read more: https://www.facebook.com/policies/cookies/

Linkedin: Ad Targeting, Analytics/Measurement, Content Customization, Optimization - duration decided by LinkedIn - read more: https://www.linkedin.com/legal/cookie-policy

Twitter Ad Targeting, Tailored Audiences, Analytics/Measurement, Optimization Decided by Twitter - read more:https://help.twitter.com/en/rules-and-policies/twitter-cookies

Google AdWords Ad Serving, Ad Targeting, Analytics/Measurement, Content Customization, Optimization Decided by Google - read more: https://policies.google.com/technologies/cookies#types-of-cookies

Google Analytics Ad Targeting, Analytics/Measurement, Optimization Decided by Google - read more: https://developers.google.com/analytics/devguides/collection/gajs/cookie-usage

Collection of general data and information

The website of the atwork collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems.

When using these general data and information, atwork does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as its advertisement, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, atwork analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

Contact possibility via the website and Email

If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for processing or contacting the data subject. There is no transfer of this personal data to third parties.

Registration on our websites

The data subject has the possibility to register on the website of the controller with the indication of personal data. Which personal data are transmitted to the controller is determined by the respective input mask. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller, and for his own purposes. The controller may request transfer to one or more processors (e.g. a parcel service) that also uses personal data for an internal purpose which is attributable to the controller.

By registering on the website of the controller, the IP address—assigned by the Internet service provider (ISP) and used by the data subject—date, and time of the registration are also stored. This is the only way to prevent the misuse of our services, and, if necessary, to make it possible to investigate committed offenses. This data is not passed on to third parties unless there is a statutory obligation to pass on the data, or if the transfer serves the aim of criminal prosecution.

Registered persons are free to change the personal data specified during the registration at any time, or to have them completely deleted from the data stock of the controller. The data controller shall, at any time, provide information upon request to each data subject as to what personal data are stored about the data subject. In addition, the data controller shall correct or erase personal data at the request or indication of the data subject, insofar as there are no statutory storage obligations. The entirety of the controller’s employees are available to the data subject in this respect as contact persons.

Subscription to our newsletters

On our websites, users are given the opportunity to subscribe to our enterprise’s newsletter in order to receive enterprise offers. The input mask used for this purpose determines what personal data are transmitted.

During the registration for the newsletter, we also store the IP address assigned by the Internet service provider (ISP) and used by the data subject at the time of the registration, as well as the date and time of the registration. This is necessary in order to understand the (possible) misuse of the e-mail address of a data subject at a later date, and it therefore serves the aim of the legal protection of the controller.

The personal data collected in this context will only be used to send our newsletter. In addition, subscribers to the newsletter may be informed by e-mail, as long as this is necessary for the operation of the newsletter service or a registration in question (e.g. in the case in the event of modifications to the newsletter offer or a change in technical circumstances). There will be no transfer of personal data collected by the newsletter service to third parties. The consent to the storage of personal data in this context and the subscription to our newsletter may be revoked at any time. For the purpose of revocation, a corresponding link is found in each newsletter.

Comments function in the blog on the website

atwork offers users the possibility to leave individual comments on individual blog contributions on a blog, which is hosted by the controller. If a data subject leaves a comment, the comments made by the data subject are stored and published, as well as information on the date of the commentary and on the user’s pseudonym chosen by the data subject. In addition, the IP address assigned by the Internet service provider (ISP) to the data subject is also logged. This storage of the IP address takes place for security reasons, and in case the data subject violates the rights of third parties or posts illegal content through a given comment. The storage of these personal data is, therefore, in the own interest of the data controller, so that he can exculpate in the event of an infringement. This collected personal data will not be passed to third parties, unless such a transfer is required by law or serves the aim of the defense of the data controller.

Use of Google Analytics

On this website, the controller has integrated the component of Google Analytics (with the anonymizer function). Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analysis service collects, inter alia, data about the website from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.

The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.

For the web analytics through Google Analytics the controller uses the application “_gat. _anonymizeIp”. By means of this application the IP address of the Internet connection of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our websites, and to provide other services concerning the use of our Internet site for us.

Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Google Analytics component was integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements.

The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of our website by the data subject. With each visit to our Internet site, such personal data, including the IP address of the Internet access used by the data subject, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.

The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google Analytics from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google Analytics may be deleted at any time via a web browser or other software programs.

In addition, the data subject has the possibility of objecting to a collection of data that are generated by Google Analytics, which is related to the use of this website, as well as the processing of this data by Google and the chance to preclude any such. For this purpose, the data subject must download a browser add-on under the link https://tools.google.com/dlpage/gaoptout and install it. This browser add-on tells Google Analytics through a JavaScript, that any data and information about the visits of Internet pages may not be transmitted to Google Analytics. The installation of the browser add-ons is considered an objection by Google. If the information technology system of the data subject is later deleted, formatted, or newly installed, then the data subject must reinstall the browser add-ons to disable Google Analytics. If the browser add-on was uninstalled by the data subject or any other person who is attributable to their sphere of competence, or is disabled, it is possible to execute the reinstallation or reactivation of the browser add-ons.

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under http://www.google.com/analytics/terms/us.html. Google Analytics is further explained under the following Link https://www.google.com/analytics/.

Use of Google-AdWords

On this website, the controller has integrated Google AdWords. Google AdWords is a service for Internet advertising that allows the advertiser to place ads in Google search engine results and the Google advertising network. Google AdWords allows an advertiser to pre-define specific keywords with the help of which an ad on Google’s search results only then displayed, when the user utilizes the search engine to retrieve a keyword-relevant search result. In the Google Advertising Network, the ads are distributed on relevant web pages using an automatic algorithm, taking into account the previously defined keywords.

The operating company of Google AdWords is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States.

The purpose of Google AdWords is the promotion of our website by the inclusion of relevant advertising on the websites of third parties and in the search engine results of the search engine Google and an insertion of third-party advertising on our website.

If a data subject reaches our website via a Google ad, a conversion cookie is filed on the information technology system of the data subject through Google. The definition of cookies is explained above. A conversion cookie loses its validity after 30 days and is not used to identify the data subject. If the cookie has not expired, the conversion cookie is used to check whether certain sub-pages, e.g, the shopping cart from an online shop system, were called up on our website. Through the conversion cookie, both Google and the controller can understand whether a person who reached an AdWords ad on our website generated sales, that is, executed or canceled a sale of goods.

The data and information collected through the use of the conversion cookie is used by Google to create visit statistics for our website. These visit statistics are used in order to determine the total number of users who have been served through AdWords ads to ascertain the success or failure of each AdWords ad and to optimize our AdWords ads in the future. Neither our company nor other Google AdWords advertisers receive information from Google that could identify the data subject.

The conversion cookie stores personal information, e.g. the Internet pages visited by the data subject. Each time we visit our Internet pages, personal data, including the IP address of the Internet access used by the data subject, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties.

The data subject may, at any time, prevent the setting of cookies by our website, as stated above, by means of a corresponding setting of the Internet browser used and thus permanently deny the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a conversion cookie on the information technology system of the data subject. In addition, a cookie set by Google AdWords may be deleted at any time via the Internet browser or other software programs.

The data subject has a possibility of objecting to the interest based advertisement of Google. Therefore, the data subject must access from each of the browsers in use the link www.google.de/settings/ads and set the desired settings.

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/.

Use of PayPal as a payment processor

On this website, the controller has integrated components of PayPal. PayPal is an online payment service provider.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If the data subject chooses “PayPal” as the payment option in the online shop during the ordering process, we automatically transmit the data of the data subject to PayPal. By selecting this payment option, the data subject agrees to the transfer of personal data required for payment processing.

The personal data transmitted to PayPal is usually first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data necessary for payment processing. The processing of the purchase contract also requires such personal data, which are in connection with the respective order.

The transmission of the data is aimed at payment processing and fraud prevention. The controller will transfer personal data to PayPal, in particular, if a legitimate interest in the transmission is given. The personal data exchanged between PayPal and the controller for the processing of the data will be transmitted by PayPal to economic credit agencies. This transmission is intended for identity and creditworthiness checks.

PayPal will, if necessary, pass on personal data to affiliates and service providers or subcontractors to the extent that this is necessary to fulfill contractual obligations or for data to be processed in the order.

The data subject has the possibility to revoke consent for the handling of personal data at any time from PayPal. A revocation shall not have any effect on personal data which must be processed, used or transmitted in accordance with (contractual) payment processing.

The applicable data protection provisions of PayPal may be retrieved under https://www.paypal.com/us/webapps/mpp/ua/privacy-full.

Interaction with external social networks and platforms

We provide you with links to social media platforms (for example, Facebook, Instagram, LinkedIn) in various areas of our website. You can recognize these by the logo of the respective social media provider. When you use our website, no personal data is initially passed on to social media platforms’ providers. Only when you click on these links will you be redirected to the respective social media provider’s website and then transmit personal data to the provider. By doing so, you leave our website. We have no influence on the data and data processing procedures then collected, nor are we aware of the full extent of the data collection, the purposes, and the storage periods. If you click on such a link, the social media provider receives the information you have accessed the corresponding subpage of our online offer. We will transmit the data mentioned in the section “Collection of personal data for informational use” of this declaration. This occurs regardless of whether you have an account with this social media provider and are logged in there. If you are logged in to the social media provider, this data is directly assigned to your account. The social media provider stores the personal data as usage profiles and uses them for advertising, market research, or designing its website according to requirements. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and inform other users of the social network about your activities on our website. You have the right to object to creating these user profiles, whereby you must contact the respective social media provider to exercise this right. We can find further information on the purpose and scope of the data collection and its processing by the social media provider in the data protection declarations of these providers communicated below. You will also receive further information about your rights in this regard and setting options for protecting your privacy.

Supplement disclaimer for links to external sites

Our website contains links to external sites of third parties. We do not influence these pages and therefore do not assume any liability for external content. The responsibility for the site’s range lies in each case with the provider or operator of the site. At the time of linking, no possible legal violations or illegal content were found. Continuous control of linked pages’ contents is not reasonable without concrete evidence of a breach of the law. When legal violations become known or illegal content is found, we will remove external links from third parties immediately.

How we utilize information

We strongly believe in both minimizing the data we collect and limiting its use and purpose to only that (1) for which we have been given permission, (2) as necessary to deliver the Services you purchase or interact with, or (3) as we might be required or permitted for legal compliance or other lawful purposes.

Sharing with trusted third parties

We may share your personal information with third parties with whom we work (partner companies and technical experts) to use their services and knowledge. Here is the communication with you. by e-mail or telephone in the foreground.

We only share your personal data as necessary for any third party to provide the services as requested or as needed on our behalf. These third parties (and any subcontractors) are subject to strict data processing terms and conditions and are prohibited from utilizing, sharing or retaining your personal data for any purpose other than as they have been specifically contracted for (or without your consent).

How you can access, update or delete your data

In the case of a data request or a data deletion request, please use our contact form which can be found at: www.atwork-it/contact

How we secure, store and retain your data

We follow generally accepted standards to store and protect the personal data we collect, both during transmission and once received and stored, including utilization of encryption where appropriate.

We retain personal data only for as long as necessary to provide the Services you have requested and thereafter for a variety of legitimate legal or business purposes. These might include retention periods:

mandated by law, contract or similar obligations applicable to our business operations; for preserving, resolving, defending or enforcing our legal/contractual rights; or needed to maintain adequate and accurate business and financial records. If you have any questions about the security or retention of your personal data, please fill out the following form at the end of this page.

Period for which the personal data will be stored

The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfillment of the contract or the initiation of a contract.

Changes in our Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we decide to change our Privacy Policy, we will post those changes to this Privacy Policy and any other places we deem appropriate, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If we make material changes to this Privacy Policy, we will notify you here, by email, or by means of a notice on our home page, at least thirty (30) days prior to the implementation of the changes.

Legal basis for the processing

Article 6, Paragraph 1 lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on that regulation. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. Is our company subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Article 6, Paragraph 1 lit. c GDPR

How to create a GDPR request with atwork

If you have any questions about the security or retention of your personal data, please fill out the following GDPR request form.

Create a GDPR request

You will receive an email with a link to confirm this request then. After you have confirmed your request, we will open a new ticket and work on your request.

Go to top