The Wiener Stadtwerke Group is one of the 25 largest companies in Austria and makes an important contribution to the daily functioning of the City of Vienna. www.wienerstadtwerke.at

Privacy policy

Privacy policy of Bestattung Wien GmbH

PRIVACY POLICY

We, Bestattung Wien GmbH, are aware of the high value that your personal data enjoy. We take the protection of your personal data very seriously and adhere strictly to the data protection regulations. In the following, you will find more detailed information on how we process your data. We reserve the right to adapt this data protection declaration at any time due to legal or technical developments. The version published at www.bestattungsmuseum.at/shop applies.

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR DATA?

Responsible for data processing is

Bestattung Wien GmbH

Simmeringer Hauptstraße 339

1110 Vienna

Austria

Contact details of our data protection officer:

 Bestattung Wien GmbH

Simmeringer Hauptstraße 339 

1110 Vienna

Austria

datenschutz@bestattungwien.at

WHAT DATA IS PROCESSED AND FROM WHAT SOURCES DOES THIS DATA ORIGINATE?

We process the personal data that we receive from you in the course of a business relationship or that we generate in the course of fulfilling contractual obligations. Personal data" means any information relating directly or indirectly to natural persons.

The personal data we process about you include your master data (e.g. name, address, contact data, customer number), your contract data (e.g. product, delivery data), and billing data (e.g. invoice details, payment method, payment service provider). In addition, we process any advertising data (e.g. product offers), documentation data (e.g. notes of conversations and e-mail traffic), as well as data to meet legal requirements.

FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS IS YOUR DATA PROCESSED?

We process your personal data for the following purposes and on the following legal basis:

Within the scope of your consent (Art 6 para. 1 lit a DSGVO):

If you have given us your consent to process your personal data, the data will only be processed for the purposes and to the extent agreed in the declaration of consent. You can revoke your consent at any time with effect for the future free of charge. The revocation of your consent does not affect the legality of the processing that has taken place on the basis of your consent until the revocation. You will find further information on this under point 6.

For the fulfillment of contractual obligations (Art 6 para. 1 lit b DSGVO):

The processing of your data is necessary for the performance of a contract concluded with you or for the implementation of pre-contractual measures. The purposes of data processing are primarily based on the specific product. Details of the purpose of data processing can be found in the respective contract documents and general terms and conditions.

For the fulfillment of legal obligations (Art 6 Paragraph 1 lit c DSGVO):

We are subject to legal obligations which may make it necessary to process personal data. Such obligations may result from the following legal bases, among others:

  • Industrial Code

To safeguard legitimate interests (Art. 6 paras. 1 lit f DSGVO):

We process your data in our legitimate interest for the following purposes:

  • Customer satisfaction analysis

You can object to the data processing under the conditions of Art 21 DSGVO. For more information, see Your rights.

TO WHOM IS YOUR DATA PASSED ON?

We will only pass on your personal data to third parties if this is necessary to fulfill (pre-)contractual or legal obligations, if it is justified in order to safeguard our legitimate interests or if it is permissible within the scope of a granted consent. Your data will be forwarded to the following recipients:

  • Companies in accordance with consent granted
  • commissioned service providers for order processing (e.g. shipping service providers, payment service providers, service providers for customer satisfaction measurements, as well as IT services.
  • authorities and public bodies (e.g. financial authorities) if required by law

In all cases in which we pass on your data to recipients within and outside our company, we always ensure that this is only done on the basis of legal requirements and that the protection of your data is guaranteed.

HOW LONG IS YOUR DATA STORED?

In principle, we store your data for the duration of our business relationship with you. In addition, we are subject to a variety of retention obligations, according to which we must retain data relating to your person, to third parties, to your business transactions and to your contractual relationship beyond its termination or even after the completion of your business transaction, as is the case, for example, due to the retention periods under company law. We also retain your data for as long as the assertion of legal claims arising from our contractual and service relationship with you is possible or as long as it is permissible to protect our legitimate interests in accordance with Art. 6 Para. 1 lit f DSGVO.

ARE YOU OBLIGED TO PROVIDE DATA?

The provision of your personal data and, if applicable, of third parties you name is necessary to establish our contractual relationship and to process your business cases. If you do not provide us with this data or do not provide it to the extent required, we may not be able to establish the contractual relationship you desire or process your business case. Please note that this would not be regarded as contractual non-fulfillment on our part.

IS THERE AN AUTOMATED DECISION-MAKING PROCESS INCLUDING PROFILING?

We do not use automated decision making according to Art 22 DSGVO to reach a decision on the establishment and execution of the business relationship.

YOUR RIGHTS

WHICH DATA PROTECTION RIGHTS ARE AVAILABLE TO YOU?

You may request information in particular on the origin and categories of the data we process about you and your business case, the storage period, the recipients to whom your personal data is or has been disclosed, the purpose and nature of this processing. We would like to point out that, in accordance with § 4 paras. 6 DSG 2018, no information is to be provided if business or trade secrets of Bestattung Wien GmbH or third parties are endangered.

If we process data relating to your person that is incorrect or incomplete, you may demand that it be corrected or completed. You can also demand the deletion of unlawfully processed data. However, please note that this only applies to incorrect, incomplete or unlawfully processed data. If it is not clear whether the data processed concerning your person are inaccurate, incomplete or processed unlawfully, you may request that the processing of your data be restricted until the matter has been finally clarified. Please note that these rights are complementary so that you can only request either the rectification or completion of your data or their deletion.

Even if the data concerning your person are correct and complete and are processed by us lawfully, you may object to the processing of these data in specific individual cases for which you have given reasons. You can also object if you receive direct mail from us and do not wish to receive it in the future.

You may receive the data processed by us concerning your person, insofar as we have received this data from you, in a machine-readable format determined by us or you may instruct us to transmit this data directly to a third party chosen by you, provided that this recipient enables us to do so from a technical point of view and that the data transmission is not hindered by unreasonable effort or by legal or other obligations of secrecy or confidentiality considerations on our part or on the part of third parties.

If we have received and process your data on the basis of a consent given by you, you can revoke this consent at any time with the consequence that we will no longer process your data for the purposes stated in the consent after receipt of the revocation of consent. Revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

For all your concerns, please contact us at datenschutz@bestattungwien.at [GO4] or

Bestattung Wien GmbH

For the attention of the data protection officer

Simmeringer Hauptstraße 339

1110 Vienna

Austria

whereby we always ask you to provide proof of your identity, for example by sending us a copy of your electronic identity card.

While we make every effort to protect the security and integrity of your information, we cannot exclude the possibility of differences of opinion about the way we use your information. If you are of the opinion that we are using your data in an inadmissible manner, you have the right to lodge a complaint with the Austrian data protection authority.

 

 

Consent Management Tool

LEGALWEB.IO

We use the Consent Management Tool from LEGALWEB.IO, legalweb GmbH, Fürbergstraße 42a, 5020 Salzburg, Austria on our website. This tool sets a cookie on your terminal device to store the services you have selected or not selected. This cookie is not provided with a user-related ID and does not store any other personal data. The content is stored for a maximum of 1095 days and then automatically deleted.

The legal basis for the storage of this data is § 165 para. 3 TKG 2021.

 

Server Log-Files

Connection data is processed for the purpose of monitoring the technical function and increasing the operational security of our web host. The duration of the processing is limited to 30 days.

The legal basis for the data processing is the absolute technical necessity of a server log file as a basic database for error analysis and for security measures within the scope of the "website" service expressly requested by your call pursuant to Section 165 (3) TKG 2021.

 

Webfonts

Local integration of fonts

We use web fonts. We embed these locally on our web space so that no personal data is processed.

 

Web analytics

Adobe Analytics

In the event that your consent is granted, we will process your personal data with the service Adobe Analytics, Adobe Systems Software Ireland Limited, Citywest Business Campus, Dublin 24, Ireland as joint controller for the purpose of error analysis and statistical evaluation of our website. Failure to give consent has no immediate effect on the function of the website, but without statistical data it will be more difficult for us to further develop the website. You can revoke consent you have already given by changing the data protection settings.

We enable the service to collect connection data, data from your web browser and data about the content accessed, as well as to run analysis software and store data on your terminal device. The service anonymises the collected data immediately after collection and provides us with the anonymous data in the form of statistics for evaluation. We use these statistics for troubleshooting and for the further development of our website. The data on your terminal device is stored for a period of up to two years.

The legal basis for the data processing is your consent in accordance with Section 165 (3) TKG 2021.

 

Embeddings

Open Street Map

In case of granting your consent, we process your personal data with the service Open Street Map, OpenStreetMap Foundation, St Johns Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom as joint controller for the purpose of displaying interactive maps on our website.

We allow the service to collect connection data, collect data from your web browser and place an advertising cookie. The placement of advertising cookies enables Open Street Map to calculate an individual user ID for each user. This personal data, which is suitable for unique identification, is then processed within the framework of the advertising network operated by Open Street Map.

Insofar as Open Street Map carries out further independent processing of the data, in particular within the framework of the Open Street Map advertising network, Open Street Map is solely responsible for this. Details can be found in the Open Street Map privacy policy.

Failure to give consent will only result in the Open Street Map service not being made available to you. You can revoke consent you have already given by changing the data protection settings.

The legal basis for data processing is your consent pursuant to Section 165 (3) TKG 2021.

 

Vimeo

In case of granting your consent, we process your personal data with the service Vimeo, Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA as joint controller for the purpose of playing videos on our website.

We allow the service to collect connection data, collect data from your web browser and place an advertising cookie. The placement of advertising cookies enables Vimeo to calculate an individual user ID for each user. This personal data, which is suitable for unique identification, is then processed within the advertising network operated by Vimeo.

If Vimeo carries out further independent processing of the data, in particular within the framework of the Vimeo advertising network, Vimeo is solely responsible for this. Details can be found in Vimeo's privacy policy.

Failure to give consent will only result in the Vimeo service not being made available to you. You can revoke consent you have already given by changing the data protection settings.

The legal basis for data processing is your consent pursuant to Section 165 (3) TKG 2021. The legal basis for data transfer to the USA is your consent pursuant to Art. 49 (1) lit a in conjunction with Art. 6 (1) lit a DSGVO. Before giving your consent, you were already informed that the USA does not have a level of data protection that corresponds to the standards of the EU. In particular, US secret services can access your data without you being informed and without you being able to take legal action against this. For this reason, the European Court of Justice has ruled that the previous adequacy decision (Privacy Shield) is invalid.

 

YouTube

In case of granting your consent, we process your personal data with the service YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as joint controllers for the purpose of playing videos on our website.

We enable the service to collect connection data, collect data from your web browser and place an advertising cookie. The placement of advertising cookies enables Google to calculate an individual user ID for each user. This personal data, which is suitable for unique identification, is then processed within the advertising network operated by Google.

Insofar as Google carries out further independent processing of the data, in particular within the framework of the Google advertising network, Google is solely responsible for this. Details can be found in Google's privacy policy.

Google transfers your personal data to the USA. The legal basis for the data transfer to the USA is your consent pursuant to Art. 49 (1) lit a in conjunction with Art. 6 (1) lit a DSGVO. Before giving your consent, you were already informed that the USA does not have a level of data protection that corresponds to the standards of the EU. In particular, US secret services can access your data without you being informed and without you being able to take legal action against it. For this reason, the European Court of Justice has ruled that the previous adequacy decision (Privacy Shield) is invalid.

The only consequence of not giving consent is that the YouTube service is not made available to you. You can revoke consent you have already given by changing the data protection settings.

The legal basis for data processing is your consent pursuant to Section 165 (3) TKG 2021.

 

 

Right of objection

Where the processing of your personal data is based on legitimate interest, you have the right to object to this processing. Unless there are compelling legitimate grounds for processing on our part, the processing of your data will cease on the basis of this legal ground. In addition, you have the right to object to the processing of your personal data for the purpose of direct marketing. In the event of an objection, your personal data will no longer be processed for the purpose of direct marketing. The lawfulness of the data processed until the objection is not affected by the objection.

Right of withdrawal

You have the right to revoke consent you have already given at any time by changing the data protection settings. In the case of consent to receive electronic advertising, you can revoke your consent by clicking on the unsubscribe link. In this case, processing will cease unless there is another legal basis. The lawfulness of the data processed until the revocation is not affected by the revocation.

Other data subject rights

You also have the right to information, correction, deletion and restriction of the processing of personal data. If the legal basis for the processing of your personal data is your consent or a contract concluded with you, you also have the right to data portability. Furthermore, you have the right to lodge a complaint with the supervisory authority. You can find more information about the supervisory authorities in the European Union here.