The current data of the Data Controller are the following: • Name: FirmenBurg OG • registered at: Hauptplatz 2. - 7461 Stadtschlaining • E-mail: office@firmenburg.at • website: https://www.firmenburg.at • phone: +43 1 442 0053

The purpose of this privacy policy (hereinafter referred to as the "PP") is to provide data subjects with information in a clear and comprehensible manner about the processing of their personal data on the website https://www.firmenburg.at (hereinafter referred to as the "Website") operated by FirmenBurg OG (hereinafter referred to as the "Controller").

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation; hereinafter "GDPR")

(1) The Data Controller shall carry out its processing on the basis of the consent of the data subjects or on the basis of a legal authorisation. In the case of voluntary consent, the data subject may at any time request information about the scope of the data processed and the way in which it is used, and may withdraw his or her consent, except in specific cases where the processing is continued pursuant to a legal obligation (in such cases, the Controller shall provide the data subject with information about the further processing of the data). (2) Data subjects are obliged to provide all the data provided accurately and to the best of their knowledge. (3) Where the data subject does not provide his or her own personal data, the data subject shall obtain the consent of the data subject. (4) Where the Data Controller transfers data to processors or other third parties, the Data Controller shall keep a record of such transfers. The record of the transfer shall include the recipient of the transfer, the method and time of the transfer and the scope of the data transferred.

a. Data processing related to Contact Through the Website, the visitor can contact the Data Controller by writing to the e-mail address provided in the "Contact" section or by filling in the "Contact form", or by sending an e-mail to the e-mail address provided. Visitors/customers may contact the Data Controller by telephone. No personal data will be requested or recorded over the telephone. Legal basis for processing: voluntary consent of the data subject (Article 6(1)(a) GDPR) If your request is for the conclusion of a contract, the further legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after the final processing of the request; this will be done if the circumstances indicate that the matter in question has been finally resolved and provided that there is no legal obligation to retain the data to the contrary Data processed: name, e-mail address, telephone number (in the case of a contact form), the message and its subject Purpose of processing: to contact the Data Controller How long do we handle the personal data? In case of phone calls, no voice recording will be made, otherwise your data will be erased after the final processing of your enquiry; this is the case if the circumstances indicate that the matter in question has been definitively resolved and provided that there is no legal obligation to retain data to the contrary. b. Cookies When the visitor visits the site covered by the information, a small data file called a website cookie (hereinafter referred to as a cookie) is placed on the computer, which serves several purposes. We use cookies that are necessary for the operation of the site and support sessions, for identifying individual user sessions, and for more convenient use of our website. We aim to provide the Website with the content preferred by visitors, and to do this we need to collect statistics on visitor habits. To do this, the Website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"), and we therefore consider it necessary to share additional information about this. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website is usually transmitted to and stored by Google on servers in the United States. However, if you opt to have your IP address anonymised on the website, Google will shorten your IP address in a European Union Member State or in another country outside the European Economic Area that is a party to the Agreement before sending it to the USA. Only in exceptional cases will the full IP address be transmitted to and stored by Google on a server in the U.S. Google will use this information on behalf of the website operator for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage for website operators. The IP addresses transmitted by our browser software in the context of Google Analytics will not be merged or aggregated with other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser. Please note, however, that if you do so, you may not be able to use all the functions of the website to their full extent. In addition, you may prevent the recording and transmission to Google of data (including your IP address) generated by cookies about your use of the website and the processing of such data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en You can prevent the collection of data by Google Analytics via the Google website. This will activate an opt-out cookie which will prevent the collection of your data when you visit the website. For more information on the terms of use and the processing of personal data, please visit https://policies.google.com/privacy?hl=en-US

(1) You will be entitled to rights specified in articles 15-22 of GDPR, that is to: a) right of access, b) right to rectification, c) right to erasure (‘right to be forgotten’), d) right to restriction of processing, e) right to data portability, f) right to object, g) and right to obtain information The listed rights can be exercised in the following cases: a) right to rectification - if data are incorrect or incomplete; b) right to erasure - when data are no longer necessary for the purposes for which they were originally collected; when you withdraw your consent for data processing; when you object to your data being processed; when your data are unlawfully processed; when data should be deleted as a result of binding legal provisions; c) right to restriction of processing - when your data are incorrect, for a period of time making it possible to verify their correctness; when your data are unlawfully processed but you will not be requesting their erasure; when your data are no longer necessary but might be useful for your defence or pursuing claims; when you object to your data being processed - until it will be verified if the objection is legitimate; d) right to data portability - when your data are being processed on the basis of your consent or a contract you entered into and the processing is being conducted automatically. You have the right to object to personal data processing when: a) personal data processing is being conducted on the basis of a legitimate interest or for statistical purposes, and the objection is justified by your specific situation, b) personal data are processed for the purposes of direct marketing. Please note that you have the right to submit a complaint to the supervisory authority, in particular in the Member State of his or her residence, place of work or place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes this Regulation. The supervisory authority with which the complaint has been submitted shall inform the complainant of the progress and outcome of the complaint, including the possibility of judicial remedy under Article 78 (GDPR).

The Data Controller may unilaterally amend this Privacy Notice, which shall be published on the Website without delay. Created : 28.01.2024.