Datenschutzerklärung

  1. Privacy policy

We are pleased that you are visiting our website. We respect your privacy. Data protection and data security are

very important to us when using our website. With this privacy policy, we would like to inform you about which data

is collected when you are using our website and for what purposes we use this data. Concerning this matter, we

would also like to inform you about your rights.

  1. Responsible

FOREUS Blockchain Analytics GmbH

Stefan Embacher (CEO)

Beckgasse 32

1030 Wien

Austria

E-mail: office@foreus.at

Register court: Handelsgericht Wien

Register number: 563124z

III. Data Protection Officer

Ricardo Hager

Beckgasse 32

1030 Wien

Austria

E-mail: office@foreus.at

Register court: Handelsgericht Wien

Register number: 563124z

  1. Competent supervisory authority

The data protection authority is the supervisory authority for data protection established under the General Data

Protection Regulation (GDPR) and the Data Protection Directive for the law enforcement sector in Austria.

Austrian Data Protection Authority

Barichgasse 40-42

1030 Wien

Telefon: +43 1 521 52-25 69

E‑Mail: dsb@dsb.gv.at

  1. Data processing

We process personal data for the following purposes, resulting from the list of processing activities, Art. 30 EUGDPR

  • Provision of the website
  • Applicant management
  • Social media presence
  • Marketing
  • Services such as: Blockchain, Central & Deepweb Intelligence
  • Prospects & customer meetings via video call
  1. Legal basis for data processing

We process personal data on the basis of the following legal grounds:

Art. 6, para. 1 lit. a. EU-GDPR

The data subject has given consent to the processing of personal data relating to him or her for one or more

specific purposes

Art. 6, para. 1 lit. b. EU-GDPR

The processing is necessary for the performance of a contract to which the data subject is party or for the

implementation of pre-contractual measures taken at the request of the data subject

Art. 6, para. 1 lit. c. EU-GDPR

Processing is necessary for compliance with a legal obligation to which the controller is subject

Art. 49, para. 1 lit. a EU-GDPR (in the absence of a Privacy Shield)

The data subject has expressly consented to the proposed data transfer after having been informed of the

potential risks to him or her of such data transfers without the existence of an adequacy decision and without

appropriate safeguards For ancillary contracts, the written form or a documented electronic format is required as a

matter of principle.

VI.1. Storage period

Unless a more specific storage period has been specified within this privacy policy, your personal data will remain

with us until the purpose for processing the data no longer applies. If you assert a justified request for deletion or

revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for

storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be

deleted after these reasons no longer apply.

VII. Website and online presence

VII.1. Use of cookies

  1. Nature and purpose of processing

Like many other websites, we also use so-called “cookies”. You have the option in the Cookie Consent

Management Tool to set the prescribed preferences.

Which cookies we are used for what purpose you can see among other things or in the Cookie Consent.

Cookies are simple files that store information about our website and your usage. These small files are optionally

created by your browser automatically through the use of our website and stored locally on your respective end

device. This does not mean that we have direct knowledge of your identity as a result. The use of cookies serves

to make the use of our offer more pleasant for you.

Therefore, we generally distinguish between technically necessary and non-necessary cookies: You can find

the storage period in the Cookie-Consent Tool, which is displayed when you visit our website for the first time.

Technically necessary cookies (“first party cookies”)

are required for the operation of a website and are essential to navigate on it and use its functions. These cookies

are not permanently stored on your computer or device and are deleted when you close the browser. These are

so-called session cookies or also session cookies).

The following technically necessary cookies are used by us:

Non-essential cookies, on the other hand, are mostly Functional Cookies, Performance Cookies and

Marketing & Third Party Cookies, which make it possible, for example, to record and count the number of

visitors and traffic sources in order to measure and improve the performance of the website. They are also used to

find out whether problems or errors occur on certain pages, which pages are the most popular and how visitors

navigate the website.

  • Functional cookies

Functional cookies are used to store information that has been entered, such as the user name or language

selection, and thus offer the website visitor improved and personalized functions based on this information.

  • Performance cookies

Performance cookies are used to track visits and individual activities on websites. They are used to

statistically record and evaluate the use of websites.

  • Marketing & Third Party Cookies Marketing & Third Party Cookies originate, among others, from external advertising companies and are used to collect information about the websites visited by the user, e.g. to create targeted advertising for the user.
  1. Legal basis of the processing

The use of technically necessary cookies (“first party cookies”) is possible without the consent of the website

visitor and is subject to a legitimate interest in the economic operation and optimization of our website and

services) within the meaning of Art. 6 para. 1 sentence 1 lit. f DSGVO.

The use of non-essential cookies, such as functional cookies, performance cookies and marketing & third party

cookies is subject to the consent of the website visitor pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO.

  1. Data categories
  • IP adress
  • Browser used
  • Operating system used
  • Internet connection
  • Session ID of the cookie
  1. Recipient

The data recipients can be found at the end of the privacy policy in the list of cookies used

  1. Storage periods

The user can set his web browser in such a way that the storage of cookies on his end device is generally

prevented or he is asked each time whether he agrees to the setting of cookies. Once cookies have been set, the

user can delete them at any time. How this works is described in the help function of the respective web browser.

A general deactivation of cookies may lead to functional restrictions of this website.

  1. Legal / contractual requirement

The provision of your personal data in cookies is voluntary in the case of cookies that are not necessary, solely on

the basis of your consent (so-called opt-in cookies). You can also prevent the use of preset, technically necessary

cookies (so-called opt-out cookies) via your browser settings. However, without consent, the service and

functionality of our website is not guaranteed. In addition, individual services and services may not be available or

may be limited.

  1. Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

  1. Revocation of consent

You can revoke the consent of all cookies at any time with effect for the future in your browser settings.

  1. Automated decision making and profiling

As a responsible company, we do not use automated decision-making or profiling when collecting cookies.

VII.2. Google Ads Note

Note: Cookies are used to personalise advertisements.

VII.3. Newsletter

  1. Nature and purpose of the processing

Your data will only be used to send you the newsletter you have subscribed to by e-mail. Your name is provided in

order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to

exercise your rights as a data subject. To receive the newsletter, it is sufficient to provide your e-mail address.

When registering to receive our newsletter, the data you provide will be used exclusively for this purpose.

Subscribers may also be informed by e-mail about circumstances relevant to the service or registration (e.g.

changes to the newsletter offer or technical circumstances). For an effective registration, we require a valid e-mail

address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the

“double-opt-in” procedure. For this purpose, we log the order for the newsletter, the sending of a confirmation email

and the receipt of the response requested herewith. No further data is collected. The data is used exclusively

for sending the newsletter and is not passed on to third parties.

  1. Legal basis of the processing

On the basis of your express consent (Art. 6 para. 1 lit. a GDPR, Art. 7 GDPR in conjunction with § 107 para. 2

TKG), we will regularly send you our newsletter or comparable information by e-mail to your specified e-mail

address.

  1. Data categories
  • E-mail address
  • Last name
  • First name
  1. Recipient
  • Employees of the IT and marketing department
  • Service provider for sending the newsletter
  1. Storage periods

In this context, the data will only be processed as long as the corresponding consent is given. Afterwards they will

be deleted.

  1. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. Unfortunately, we cannot send you

our newsletter without your consent.

  1. Third country transfer

The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

  1. Revocation of consent

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any

time with effect for the future. You will find a link to this effect in every newsletter. In addition, you can also

unsubscribe directly on this website at any time or inform us of your revocation using the contact option provided

at the end of this data protection notice.

  1. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

VII.4. Use of Google Analytics

  1. Nature and purpose of the processing

This website uses Google Analytics, a web analytics service provided by Google Building Gordon House, 4 Barrow

Street, Dublin, D04 E5W5, Ireland. Google Analytics uses “cookies”, which are text files placed on your computer,

to help the website analyse how users use the site. The information generated by the cookie about your use of the

website will be transmitted to and stored by Google on servers in the United States. However, due to the activation

of IP anonymisation on these websites, your IP address will be truncated beforehand by Google within member

states of the European Union or in other contracting states of the Agreement on the European Economic Area.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your

use of the website, compiling reports on website activity and providing other services relating to website activity

and internet usage to the website operator. The IP address transmitted by your browser as part of Google

Analytics will not be merged with other Google data. The purpose of the data processing is to evaluate the use of

the website and to compile reports on website activities. Further associated services are then to be provided on

the basis of the use of the website and the internet.

  1. Legal basis of the processing

The processing of the entered data is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).

  1. Data categories
  • IP address (shortened/anonymised)
  1. Recipients
  • Employees of the IT and marketing department
  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  1. Storage periods

Data will only be processed in this context as long as the corresponding consent has been given. Afterwards, they

will be deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context,

please use the contact details provided at the beginning of this privacy policy.

  1. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may

result in functional restrictions on the website.

  1. Third country transfer

Processing will not take place outside the European Union (EU) or the European Economic Area (EEA).

  1. Withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can

notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note

that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the

collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to

Google as well as the processing of this data by Google by downloading and installing the browser plugin

available under the following link: “Browser Add On to deactivate Google Analytics”.

  1. Automatic decision-making and profiling

With the help of the tracking tool Google Analytics, the behaviour of visitors to the website can be evaluated and

interests analysed. For this purpose, we create a pseudonymous user profile.

VII.5. Use of Google Webfonts

  1. Nature and purpose of the processing

In order to display our content correctly and graphically appealing across browsers, we use “Google Web Fonts”

(1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) on this website to display fonts. The privacy policy

of the library operator Google can be found here: https://www.google.com/policies/privacy/. Calling up script

libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible –

although it is currently also unclear whether and, if so, for what purposes – that the operator collects Google data

in this case. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and

in Google’s privacy policy: https://www.google.com/policies/privacy/.

  1. Legal basis for processing

The legal basis for the integration of Google Web Fonts and the associated data transfer to Google is your

consent (Art. 6 para. 1 lit. a GDPR).

  1. Data categories

IP address, date, referrer URL, browser plugins, information about the operating system, cookies, user device

settings (e.g. language settings, location, browser, etc.).

  1. Recipients

Recipients of the data are internal employees and Google as a processor.

  1. Storage periods

Data will only be processed in this context for as long as the corresponding consent exists. Afterwards, they will be

deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please

use the contact details provided at the beginning of this privacy policy.

  1. Legal / contractual requirement

The provision of personal data is neither legally nor contractually required. However, the correct display of the contents of standard fonts cannot be made possible without it.

  1. Third country transfer

Google processes your data in the USA.

  1. Revocation of consent

The programming language JavaScript is regularly used to display the content. You can therefore object to data

processing by deactivating the execution of JavaScript in your browser or installing a JavaScript blocker. Please

note that this may result in functional restrictions on the website. You can revoke your consent to the storage of

your personal data at any time with effect for the future. You can notify us of your revocation at any time using the

contact option provided at the beginning of this data protection notice.

  1. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

VII.6. Use of Google Tag Manager

  1. Nature and purpose of the processing

Use of Google Tag Manager: Google Tag Manager is a solution that allows marketers to manage website tags

through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does

not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager

does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for

all tracking tags implemented with Google Tag Manager: http://www.google.de/tagmanager/use-policy.html.

  1. Legal basis of the processing

The processing of the entered data is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).

  1. Data categories

Google Tag Manager itself does not store any personal data. The personal data is collected by the tags of the

respective web analytics tool used.

  1. Recipients

Recipients of the data are internal employees and Google as an order processor. For this purpose, we have concluded the corresponding order processing agreement with Google.

  1. Storage periods

Data will only be processed in this context as long as the corresponding consent is given. Afterwards, they will be

deleted, provided that there are no legal storage obligations to the contrary. To contact us in this context, please

use the contact details provided at the beginning of this privacy policy.

  1. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may

result in functional restrictions on the website.

  1. Third country transfer

Processing will not take place outside the European Union (EU) or the European Economic Area (EEA).

  1. Withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can

notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note

that if you do this you may not be able to use the full functionality of this website.

  1. Profiling

The Google Tag Manager tool can be used to evaluate the behaviour of visitors to the website and analyse their

interests.

VII.7. Use of Google Doubleclick

  1. Nature and purpose of the processing

We use the Google “Doubleclick” online marketing service.

The purpose of this service is to place ads in the Google advertising network (e.g., in search results, in videos, on

web pages, etc.). Double Click is characterised by the fact that ads are displayed in real time based on the

presumed interests of the users. This allows us to target ads for and within our online offering to present users

only with ads that potentially match their interests. If, for example, a user is shown ads for products in which he or she was interested on other online offers, this is referred to as “remarketing”. For these purposes, when our

website and other websites on which the Google advertising network is active are called up, a code is executed

directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as “web beacons”) are

integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user’s device

(comparable technologies can also be used instead of cookies). This file records which web pages the user has

visited, which content the user is interested in and which offers the user has clicked on, as well as technical

information on the browser and operating system, referring web pages, time of visit and other information on the

use of the online offer.

The IP address of the user is also recorded, whereby this is shortened within Member States of the European

Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional

cases is transferred in full to a Google server in the USA and shortened there. The aforementioned information

may also be combined by Google with such information from other sources. If the user subsequently visits other

websites, he or she may be shown ads tailored to his or her interests on the basis of his or her user profile.

User data is processed pseudonymously within the Google advertising network. This means that Google does not

store and process the name or email address of the user, for example, but processes the relevant data on a

cookie basis within pseudonymous user profiles. This means that from Google’s perspective, the ads are not

managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie

holder is. This does not apply if a user has expressly allowed Google to process the data without this

pseudonymisation.

  1. Legal basis of the processing

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the

analysis, optimisation and economic operation of our online offer.

  1. Data categories

IP address, date, referrer URL, browser plugins, information about the operating system, cookies, user device

settings (e.g. language settings, location, browser, etc.).

  1. Recipients

Recipients of the data are internal employees of the IT department and Google as processor.

  1. Storage periods

After the end of the purpose and the end of the use of Google Doubleclick by us, the data collected in this context will be deleted.

  1. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. Without the provision of your

personal data, we cannot grant you access to our offered content and services.

  1. Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

  1. Withdrawal of consent

For more information on Google’s use of data, settings and opt-out options, please refer to Google’s privacy policy

(https://policies.google.com/technologies/ads) and the settings for the display of advertisements by

Google(https://adssettings.google.com/authenticated). You can revoke your consent to the storage of your

personal data at any time with effect for the future. You can notify us of your revocation at any time using the

contact option provided at the beginning of this privacy notice.

  1. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

VII.8. Use of Active Campaign

  1. Nature and purpose of the processing

This website uses ActiveCampaign, a customer experience automation software. ActiveCampaign is used for

email marketing, marketing automation and CRM tools.

  1. Legal basis of the processing

The processing of the data is based on the user’s consent (Art. 6 para. 1 lit. a DSGVO).

  1. Data categories

IP address, date, referrer URL, browser plugins, information about the operating system, cookies, user device

settings (e.g. language settings, location, browser, etc.).

  1. Recipients

Recipients of the data are internal employees of the IT department.

  1. Storage periods

Data will only be processed in this context as long as the relevant consent has been given. Afterwards, they will be

deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please

use the contact details provided at the beginning of this privacy policy.

  1. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may

result in functional restrictions on the website.

  1. Third country transfer

Processing will not take place outside the European Union (EU) or the European Economic Area (EEA).

  1. Withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can

notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

You can prevent the storage of cookies by setting your browser software accordingly. However, this offer informs

users that in this case they may not be able to use all the functions of this website to their full extent.

  1. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

VII.9. Use of Facebook Pixel

  1. Nature and purpose of the processing

The Facebook Pixel is a JavaScript code implemented on our website to link people’s behaviour on the website to

Facebook user profiles. It collects data that helps track conversions, optimise ads and create audiences.

  1. Legal basis of the processing

The processing is carried out pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the

functionality of our website.

  1. Data categories

Please refer to Facebook’s privacy policy to find out which specific data is collected and how it is used:

Facebook: http://www.facebook.com/policy.php

  1. Recipients
  • Employees of the IT department of our company
  • Facebook
  1. Storage periods

The data collected directly by us via the pixel will be deleted from our systems as soon as the purpose for storing it

no longer applies, you request us to delete it, revoke your consent to store it or the purpose for storing the data no

longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions – in

particular retention periods – remain unaffected.

We have no influence on the storage period of your data that is stored by Facebook for its own purposes. For

details, please contact Facebook directly (e.g. in their privacy policy, see above).


  1. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you

access to our offered content and services.

  1. Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

  1. Withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can

notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

  1. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

VII.10. Use of Gravatar

  1. Nature and purpose of the processing

This website uses Gravatar. Gravatar is a service for providing avatars by the company Automattic Inc (60 29th

Street #343 San Francisco, CA 94110, USA).

  1. Legal basis of the processing

The processing of the data is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).

  1. Data categories

IP address, date, referrer URL, browser plugins, information about the operating system, cookies, user device settings (e.g. language settings, location, browser, etc.).

  1. Recipients

Recipients of the data are internal employees of IT department and Automattic Inc.

  1. Storage periods

Data will only be processed in this context as long as the relevant consent has been given. Afterwards, they will be

deleted unless there are legal retention obligations to the contrary. To contact us in this context, please use the

contact details provided at the beginning of this privacy policy.

  1. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may

result in functional restrictions on the website.

  1. Third country transfer

Automattic Inc processes your data in the USA.

  1. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can

notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

  1. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

VII.11. Use of preeco

We use an external service for the ongoing updating of the data protection declaration. No personal data is

collected when calling up the information obligations according to Art. 13ff, the so-called data protection

declaration.

For data protection management and the protection of data subject rights according to Art. 15ff EU-DSGVO, data

collection is necessary for secure communication.

VII.12. Using Kaspersky Cyber Threat Map

  1. Nature and purpose of the processing

This website uses the Cyber Threat Map from Kaspersky. Please refer to Kaspersky’s privacy policy to find out

what specific data is collected and how it is used: https://www.kaspersky.com/web-privacy-policy

  1. Legal basis of the processing

The processing of the data is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).

  1. Data categories

IP address, date, referrer URL, browser plugins, information about the operating system, cookies, user device

settings (e.g. language settings, location, browser, etc.).

  1. Recipients

Recipients of the data are internal employees of the IT department and Kaspersky.

  1. Storage periods

Data will only be processed in this context as long as the relevant consent has been given. Afterwards, they will be

deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please

use the contact details provided at the beginning of this Privacy Policy.

  1. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may

result in functional restrictions on the website.

  1. Third country transfer

Processing will not take place outside the European Union (EU) or the European Economic Area (EEA).

  1. Withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can

notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

  1. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

VII.13. Use of embedded YouTube videos

  1. Nature and purpose of the processing

We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC,

901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to

YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your

YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging

out of your YouTube account first. If a YouTube video is started, the provider uses cookies that collect information

about user behaviour. Further information on the purpose and scope of data collection and processing by

YouTube can be found in the provider’s data protection declarations, where you will also find further information on

your rights in this regard and setting options for protecting your privacy (https://policies.google.com/privacy).

  1. Legal basis for processing

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6

para. 1 lit. a DSGVO).

  1. Data categories

IP address, date, referrer URL, browser plugins, information about the operating system, cookies, user device

settings (e.g. language settings, location, browser, etc.).

  1. Recipients

Recipients of the data are internal employees of the IT department and YouTube as service provider.

  1. Storage periods

Anyone who has deactivated the storage of cookies for the Google Ad programme will not have to expect any

such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in

other cookies. If you would like to prevent this, you must block the storage of cookies in your browser. Further

information on data protection at “YouTube” can be found in the provider’s data protection declaration at:

www.google.de/intl/de/policies/privacy.

  1. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may

result in functional restrictions on the website.

  1. Third country transfer

Google processes your data in the USA.

  1. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can

notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

  1. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

VII.14. Social media

VII.14.a. Use of social media plugins

  1. Type and purpose of processing

Social plugins from the providers listed below are used on our websites. You can recognise the plugins by the fact

that they are marked with the corresponding logo.

Information, which may include personal data, may be sent to the service provider via these plugins and may be

used by the service provider. We prevent the unconscious and unintentional collection and transmission of data to

the service provider through a so-called Shariff solution. Only by clicking on the plugin is the collection of

information and its transmission to the service provider triggered. We do not collect any personal data ourselves

by means of the social plugins or through their use.

We have no influence on what data an activated plugin collects and how it is used by the provider. At present, it

must be assumed that a direct connection to the provider’s services is established and that at least the IP address

and device-related information is collected and used. There is also the possibility that the service providers try to

save cookies on the computer used.

  1. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in

the functionality of our website.

  1. Data categories

Please refer to the data protection information of the respective service provider to find out which specific data is

collected and how it is used:

Facebook: http://www.facebook.com/policy.php

Instagram: https://help.instagram.com/155833707900388

Twitter: https://twitter.com/privacy

YouTube: https://policies.google.com/privacy

Telegram: https://telegram.org/privacy

  1. Recipient

Employees of the IT department of their own company

Facebook

Google

Twitter

Telegram

  1. Storage periods

The data collected directly by us via the social media plugins will be deleted from our systems as soon as the

purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it or the purpose

for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory

legal provisions – in particular retention periods – remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the social networks

for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their

privacy policy, see above).

  1. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you

access to our offered content and services.

  1. Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

  1. Withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can

notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

  1. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

VII.14.b. Online presence on YouTube

  1. Nature and purpose of the processing

We appreciate your interest in our presence on YOUTUBE. We would like to give you an overview of what data is

collected, used and stored by us there.

Social networks can usually comprehensively analyse your user behaviour when you visit their website or a

website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media

presence on YouTube triggers numerous processing operations relevant to data protection. In detail:

If you are logged into your YouTube account and visit our social media presence, YouTube can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not

logged in or do not have an account on YouTube. In this case, this data collection takes place, for example, via

cookies that are stored on your end device or by recording your IP address. With the help of the data collected in

this way, YouTube can create user profiles in which your preferences and interests are stored. In this way, you can

be shown interest-based advertising inside and outside YouTube. If you have an account on YouTube, the

interest-based advertising may be displayed on all devices on which you are logged in or have been logged in.

Please also note that we are not able to track all processing on YouTube. Further processing operations may

therefore be carried out by YouTube. For details, please refer to YouTube’s terms of use and privacy policy.

  1. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interest of

contacting our customers. The analysis processes initiated by YouTube may be based on deviating legal bases to

be indicated by YouTube (e.g. consent within the meaning of Art. 6 (1) lit. a GDPR).

  1. Data categories

Please refer to YouTube’s data protection information to find out which specific data is collected and how it is

used:

YouTube: https://policies.google.com/privacy

  1. Recipients

Employees of the IT department of your own company

Google

  1. Storage periods

After the end of the purpose and the end of the use of YouTube by us, the data collected in this context will be

deleted.

  1. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you

access to our offered content and services.

  1. Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

  1. Withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can

notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

  1. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

VII.14.c. Online presence on Facebook

  1. Nature and purpose of the processing

We appreciate your interest in our presence on FACEBOOK. We would like to give you an overview of what data

is collected, used and stored by us there.

Social networks can usually comprehensively analyse your user behaviour when you visit their website or a

website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media

presence on Facebook triggers numerous processing operations relevant to data protection. In detail:

If you are logged into your Facebook account and visit our social media presence, Facebook can assign this visit

to your user account. However, your personal data may also be collected under certain circumstances if you are

not logged in or do not have an account on Facebook. In this case, this data collection takes place, for example,

via cookies that are stored on your end device or by recording your IP address. With the help of the data collected

in this way, Facebook can create user profiles in which your preferences and interests are stored. In this way, you

can be shown interest-based advertising inside and outside Facebook. If you have an account on Facebook, the

interest-based advertising can be displayed on all devices on which you are logged in or have been logged in.

Please also note that we cannot track all processing on Facebook. Therefore, additional processing operations

may be carried out by Facebook. For details, please refer to Facebook’s terms of use and privacy policy.

  1. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interest of

contacting our customers. The analysis processes initiated by Facebook may be based on different legal bases,

which are to be specified by Facebook (e.g. consent within the meaning of Art. 6 (1) lit. a GDPR).

  1. Data categories

Please refer to Facebook’s data protection information to find out which specific data is collected and how it is

used:

Facebook: http://www.facebook.com/policy.php

  1. Recipients

Employees of the IT department of our own company

Facebook

  1. Storage periods

After the end of the purpose and the end of the use of Facebook by us, the data collected in this context will be

deleted.

  1. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you

access to our offered content and services.

  1. Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

  1. Withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can

notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

  1. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

VII.14.d. Online presence on Instagram

  1. Nature and purpose of the processing

Thank you for your interest in our presence on INSTAGRAM. We would like to give you an overview of what data

is collected, used and stored by us there.

Social networks can usually comprehensively analyse your user behaviour when you visit their website or a

website with integrated social media content (e.g. like buttons or advertising banners). By visiting our social media

presence on Instagram, numerous data protection-relevant processing operations are triggered. In detail:

If you are logged into your Instagram account and visit our social media presence, Instagram can assign this visit

to your user account. However, your personal data may also be collected under certain circumstances if you are

not logged in or do not have an account on Instagram. In this case, this data collection takes place, for example,

via cookies that are stored on your end device or by recording your IP address. With the help of the data collected

in this way, Instagram can create user profiles in which your preferences and interests are stored. In this way, you

can be shown interest-based advertising inside and outside Instagram. If you have an account on Instagram, the

interest-based advertising can be displayed on all devices on which you are logged in or have been logged in.

Please also note that we cannot track all processing on Instagram. Further processing operations may therefore

be carried out by Instagram. For details, please refer to Instagram’s terms of use and privacy policy.

  1. Legal basis of the processing

The processing is carried out pursuant to Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interest of

contacting our customers. The analysis processes initiated by Instagram may be based on deviating legal bases

to be indicated by Instagram (e.g. consent within the meaning of Art. 6 (1) lit. a GDPR).

  1. Data categories

Please refer to Instagram‘s privacy policy to find out which specific data is collected and how it is used:

Instagram: https://help.instagram.com/155833707900388

  1. Recipients
  • Employees of the IT department of your own company
  • Facebook
  1. Storage periods

After the end of the purpose and the end of the use ofI nstagram by us, the data collected in this context will be

deleted.

  1. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you

access to our offered content and services.

  1. Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

  1. Withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can

notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

  1. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

VII.14.e. Online presence on Twitter

  1. Nature and purpose of the processing

Thank you for your interest in our presence on TWITTER. We would like to give you an overview of what data is

collected, used and stored by us there.

Social networks can usually comprehensively analyse your user behaviour when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media

presence on Twitter triggers numerous processing operations relevant to data protection. In detail:

If you are logged into your Twitter account and visit our social media presence, Twitter can assign this visit to your

user account. However, your personal data may also be collected under certain circumstances if you are not

logged in or do not have an account on Twitter. In this case, this data collection takes place, for example, via

cookies that are stored on your end device or by recording your IP address. With the help of the data collected in

this way, Twitter can create user profiles in which your preferences and interests are stored. In this way, you can

be shown interest-based advertising inside and outside Twitter. If you have an account on Twitter, the interestbased

advertising can be displayed on all devices on which you are or were logged in. Please also note that we

cannot track all processing on Twitter. Further processing operations may therefore be carried out by Twitter. For

details, please refer to Twitter’s terms of use and privacy policy.

  1. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interest of

contacting our customers. The analysis processes initiated by Twitter may be based on deviating legal bases to be

specified by Twitter (e.g. consent within the meaning of Art. 6 (1) lit. a GDPR).

  1. Data categories

Please refer to Twitter’s data protection information to find out which specific data is collected and how it is used.

Twitter: https://twitter.com/privacy

  1. Recipients

Employees of the IT department of your own company

Twitter

  1. Storage periods

After the end of the purpose and the end of the use of Twitter by us, the data collected in this context will be

deleted.

  1. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you

access to our offered content and services.

  1. Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

  1. Withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can

notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

  1. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.a.

Nature and purpose of the processing

VII.14.f. Online presence on Telegram

  1. Nature and purpose of the processing

We appreciate your interest in our presence on Telegram. We would like to give you an overview of what data is

collected, used and stored by us there.

Social networks can usually comprehensively analyse your user behaviour when you visit their website or a

website with integrated social media content (e.g. like buttons or advertising banners). By visiting our social media

presence on Telegram, numerous data protection-relevant processing operations are triggered. In detail:

If you are logged into your Telegram account and visit our social media presence, Telegram can assign this visit to

your user account. However, your personal data may also be collected under certain circumstances if you are not

logged in or do not have an account on Telegram. In this case, this data collection takes place, for example, via

cookies that are stored on your end device or by recording your IP address. With the help of the data collected in

this way, Telegram can create user profiles in which your preferences and interests are stored. In this way, you

can be shown interest-based advertising inside and outside Telegram. If you have an account on Telegram, the

interest-based advertising can be displayed on all devices on which you are logged in or have been logged in.

Please also note that we cannot track all processing on Telegram. Further processing operations may therefore be

carried out by Telegram. For details, please refer to Telegram’s terms of use and privacy policy.

  1. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interest of

contacting our customers. The analysis processes initiated by Telegram may be based on deviating legal bases to

be specified by Telegram (e.g. consent within the meaning of Art. 6 (1) lit. a GDPR).

  1. Data categories

Please refer to Telegram’s data protection information to find out which specific data is collected and how it is

used:

Telegram: https://telegram.org/privacy

  1. Recipients
  • Employees of the IT department of your own company
  • Telegram
  1. Storage periods

After the end of the purpose and the end of the use of Telegram by us, the data collected in this context will be

deleted.

  1. Legal / contractual requirement

The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you

access to our offered content and services.

  1. Third country transfer

Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

  1. Withdrawal of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future. You can

notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

  1. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling in this data processing.decisionmaking or profiling in this data processing.

VIII. Data security

The personal data of every individual who has a contractual, pre-contractual or other relationship with our

company deserves special protection. We aim to maintain our level of data protection at a high standard. That is

why we focus on the continuous development of our data protection and data security concepts. We are therefore

committed to protecting your privacy and treating your personal data confidentially. In order to prevent

manipulation, loss or misuse of your data stored with us, we take extensive technical and organisational security

precautions which are regularly reviewed and adapted to technological progress. These include, among other

things, the use of recognised encryption procedures (SSL or TLS). ?However, we would like to point out that, due

to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security

measures are not observed by other persons or institutions not within our sphere of responsibility. In particular,

data disclosed unencrypted – e.g. if this is done by e-mail – can be read by third parties. We have no technical

influence on this. It is the user’s responsibility to protect the data he or she provides against misuse by encrypting

it or in any other way.

  1. Data subjects’ rights

If personal data is processed by you as a user, you are considered a data subject in accordance with the GDPR.

Data subjects have the following rights vis-à-vis the controller:

  • Right of access (Art. 15 GDPR)
  • Right to rectification or erasure of personal data (Art. 16, 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to communication in connection with the rectification or erasure of your personal data or the restriction
  • of processing (Art. 19 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to revoke declarations of consent given. The lawfulness of the data processing carried out until the
  • revocation remains unaffected due to the consent valid to date. (Art. 7 para. 3 GDPR)
  • Right to complain to the supervisory authority (Art. 77 GDPR)
  1. Our right to amend the Directive

Since changes in the law or changes in our internal company processes may make it necessary to adapt this data

protection declaration, we ask you to read through this data protection declaration regularly. The data protection

declaration can be accessed at any time. We therefore reserve the right to amend this policy at any time in

compliance with data protection law.

  1. Overview of the processors used

If, in the course of our processing, we disclose data to other persons and companies (order processors, jointly

responsible persons or third parties), transmit it to them or otherwise grant them access to the data, this will only

be done on the basis of a legal permission (e.g. if a transmission of the data to third parties, such as to payment

service providers, is necessary for the performance of the contract), users have consented, a legal obligation

provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). If we disclose

or transfer data to other companies in our group of companies or otherwise grant them access, this is done in

particular for administrative purposes as a legitimate interest and, in addition, on a basis that complies with the

legal requirements.

The following organisations, companies or persons have been commissioned by the operator of this website to

process data:

Processors within/outside the EU / EEA:

Company

List of AD Processors AD-PROCESSOR

XII. Own services & applications

Handling of applicant data

We offer you the opportunity to apply to us (e.g. by e-mail, post or via the online application form). In the following,

we inform you about the scope, purpose and use of your personal data collected as part of the application

process. We assure you that the collection, processing and use of your data will be carried out in accordance with

applicable data protection law and all other statutory provisions and that your data will be treated in strict

confidence.

Scope and purpose of data collection

When you send us an application, we process your associated personal data (e.g. contact and communication

data, application documents, notes taken during interviews, etc.) insofar as this is necessary to decide on the

establishment of an employment relationship.

If the application is successful, the data submitted by you will be stored in our data processing systems on the

basis of Art. 6 (1) lit. b GDPR for the purpose of implementing the employment relationship.

Retention period of the data

If we are unable to make you a job offer, if you reject a job offer or withdraw your application, we reserve the right

to keep the data you have submitted with us for up to 6 months from the end of the application process (rejection

or withdrawal of the application) on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR). The data will

then be deleted and the physical application documents destroyed. This storage serves in particular as evidence

in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired

(e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further

storage no longer applies.

Longer storage may also take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if legal storage

obligations prevent deletion.

Inclusion in the applicant pool

If we do not make you a job offer, it may be possible to include you in our applicant pool. If you are accepted, all

documents and details from your application will be transferred to the applicant pool so that we can contact you in

the event of suitable vacancies.

Inclusion in the applicant pool is based exclusively on your express consent (Art. 6 para. 1 lit. a GDPR). The

provision of consent is voluntary and is not related to the current application process. The person concerned can

revoke his/her consent at any time. In this case, the data from the applicant pool will be irrevocably deleted, unless

there are legal reasons for retention.

The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.

XIII. List of cookies and external services used

Cookies and web storage overview

Name

_ga_DPSR126VZB

_gat_gtag_UA_2357570

82_1

_gid

_wpfuuid

prism_801237041

real_cookie_banner-b

log:1

Type

1st-Party

(permanent)

1st-Party

(permanent)

1st-Party

(permanent)

1st-Party

(permanent)

3rd-Party

(permanent)

1st-Party

(permanent)

Storage duration (days)

730

1

1

3999

30

365

Domain

foreus.at

foreus.at

foreus.at

foreus.at

appus1.com

foreus.at

Source

Google Analytics

Google Analytics

Google Analytics

Unknown

Active Campaign

Unknown

Purpose

Analytics

Analytics

Analytics

Unknownt

Analytics

Unknown

External Services Overview

Name

Active Campaign

DoubleClick

Facebook Pixel

Google Analytics

Google Fonts

Google Tag

Manager

Gravatar

Preeco

YouTube

Domain

app-us1.com

doubleclick.net

connect.facebook.net /*/fbevents.js

google-analytics.com

fonts.gstatic.com

googletagmanager.com

gravatar.com

preeco.de

youtube.com

Source

Active Campaign

Google

Facebook

Google

Google

Google

Automattic

preeco GmbH

Google

Purpose

Analytics

Advertising

Advertising

Analytics

Functional

Functional

Social media

External content

Audio/video player