Privacy policy

Declaration on the duty to inform

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the legal provisions (DSGVO, TKG 2003). In this data protection information, we inform you about the most important aspects of data processing within the framework of our website.

When you visit our website, your IP address, start and end of the session are recorded for the duration of this session. This is for technical reasons and therefore constitutes a legitimate interest as defined in Art 6 (1) f DSGVO. Unless otherwise stipulated below, this data will not be further processed by us.

Contact with us

If you contact us by e-mail, the data you provide will be stored by us for 120 months for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.

WKO: EU General Data Protection Regulation (DSGVO): Storage, limitation and retention periods

Cookies

Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause any damage.

We use cookies to make our website user-friendly. Some cookies remain stored on your terminal device until you delete them. They enable us to recognise your browser on your next visit.

If you do not wish this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases.

If cookies are deactivated, the functionality of our website may be limited.

Web analysis

Our website uses a self-hosted version of Matomo as web analytics, a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Cookies are used for this purpose, which enables an analysis of the use of the website by your users. The information generated by this is transferred to our server and stored there.

You can prevent this by setting your browser so that no cookies are stored.

The data processing is carried out on the basis of the legal provisions of § 96 para 3 TKG as well as Art 6 para 1 lit a (consent) and/or f (legitimate interest) of the DSGVO.

Our concern in terms of the DSGVO (legitimate interest) is the improvement of our offer and our web presence. Since the privacy of our users is important to us, the IP addresses and user data are pseudonymised.

User data is deleted when it is no longer required for our purposes.

Integration of Cloudflare

We use the services of Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA) to secure our website and optimize loading times. Cloudflare is a content delivery network (CDN) and security service that helps to protect our website from attacks (e.g. DDoS attacks) and to improve performance through distributed servers worldwide.

The processing of your data is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to operate our website securely and efficiently.

When you visit our website, requests are routed via Cloudflare servers. Personal data, in particular IP addresses, may be processed in the process. Cloudflare uses cookies for this purpose, which serve to secure and optimize the offer.

Cloudflare is a US-American company. It is certified under the EU-U.S. Data Privacy Framework and is committed to complying with European data protection regulations. Nevertheless, data may be transferred to the USA.

Detailed information on data processing by Cloudflare can be found in Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

Use of the Google Tag Manager and Google Ads (AdWords)

We use Google Tag Manager and Google Ads (AdWords) on our website, both services provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). In this privacy policy, we inform you about the processing of personal data in connection with the use of these services.

The Google Tag Manager enables us to centrally manage various tracking and analysis tools (so-called "tags") and integrate them on our website. The Tag Manager itself does not process any personal data, but is only used to manage other services that may collect data.

Google Ads (AdWords) is an online advertising program from Google that we use to place ads in Google search results and in the Google advertising network. We use what is known as conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. This cookie does not contain any personal data, but is used to recognize whether you have performed a specific action on our website.

Although the Google Tag Manager itself does not collect any personal data, data may be processed by the integrated tags and by Google Ads. These are in particular
- IP address
- Visitor behavior on our website
- Technical information about your device and browser
- Length of stay on certain pages
- Referrer URL (the previously visited page)
- Click behavior on Google Ads ads

This data is processed by Google or other third-party providers. For information on data processing by these third-party providers, please refer to their respective privacy policies.

The use of Google Tag Manager and Google Ads is based on Art. 6 para. 1 lit. f GDPR (legitimate interest) or, if necessary, on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. Our legitimate interest lies in the efficient administration and implementation of analysis and tracking tools as well as in the optimization of our advertising measures.

As Google is headquartered in the USA, data may be transferred to third countries. Google has undertaken to comply with the EU standard contractual clauses in order to ensure an adequate level of data protection. You can find more information on this in Google's privacy policy: policies.google.com/privacy

The Google Tag Manager itself does not store any personal data. The storage period of the data collected by Google Ads varies. Conversion cookies lose their validity after 30 days and are not used for personal identification. Further information can be found in the Google Ads privacy policy.

You have the right to:
- Information about the personal data processed by us (Art. 15 GDPR)
- Correction of incorrect or incomplete data (Art. 16 GDPR)
- Deletion of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Objection to the processing (Art. 21 GDPR)
- Data portability (Art. 20 GDPR)

You can also withdraw your consent at any time with effect for the future. To do so, please contact us using the contact details provided in our legal notice.

If you do not want the Google Tag Manager or Google Ads to include certain services on our website, you can prevent these tags from being loaded in your browser settings or by using appropriate opt-out tools. Google also offers an option to deactivate personalized advertising: adssettings.google.com 

Use of Complianz

We use Complianz, a cookie management tool from Complianz B.V. (Kalmarweg 14-5, 9723 JG Groningen, The Netherlands), to manage your consent to the use of cookies and tracking technologies. Complianz stores your decision in a cookie or locally on your device.

Processing of personal data by Complianz:

- Your consent decision (consent or rejection of cookies)

- A pseudonymized user ID for storing the consents

- Your IP address (in anonymized form)

- Information on browser and device settings used

The storage takes place to ensure that your cookie preferences remain documented. The use of Complianz is based on Art. 6 para. 1 lit. c GDPR (legal obligation to comply with data protection regulations) and Art. 6 para. 1 lit. f GDPR (legitimate interest in the efficient management of cookie consents).

You can adjust your cookie settings at any time via our cookie banner or the settings on our website.

Your rights

Any person affected by the processing of personal data has the right, granted by the European legislator of directives and regulations, to obtain from the controller free information about the personal data stored about him/her and a copy of this information at any time. Furthermore, the European legislator has granted the data subject access to the following information:

• the purposes of processing
• the categories of personal data that are processed
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
• the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
• the existence of a right to lodge a complaint with a supervisory authority
• if the personal data is not collected from the data subject: All available information about the origin of the data
• the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

Furthermore, the data subject has a right to information as to whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer. If a data subject wishes to avail himself of this right of access, he or she may, at any time, contact any employee of the controller.

As a data subject, you have the right to information, correction, deletion, restriction, data portability, revocation and objection with regard to your data stored by us. Please help us to fulfill this obligation by informing us or, if applicable, us or our clients of any changes to your data.

If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can contact us with your complaint. dsgvo@uit.at or the Austrian Data Protection Authority (dsb@dsb.gv.at) turn.

(Last revision in November 2023)

ou can reach us at the following contact details:

upstreamNet Communications GmbH, Ruckergasse 30-32, 1120 Vienna
tel.: +43 (0)5 01 8218-0
office@upstreamNet.at

You can reach our data protection officer Sylvia Leeb, B.A., MBA at dsgvo@uit.at.