PRIVACY POLICY
- Privacy policy
We are pleased that you are visiting our website. We respect your privacy. Data protection and data security are
very important to us when using our website. With this privacy policy, we would like to inform you about which data
is collected when you are using our website and for what purposes we use this data. Concerning this matter, we
would also like to inform you about your rights.
- Responsible
FOREUS Intelligence GmbH
Stefan Embacher (CEO)
Beckgasse 32
1030 Wien
Austria
E-mail: office@foreus.at
Register court: Handelsgericht Wien
Register number: 563124z
III. Data Protection Officer
DPO Consult GmbH
Karl Pusch (GF)
Joanneumring 18
8010 Graz
Österreich
Telefon: AT: 0800224488 DE: 08002244880
E-Mail: dpo@dpo.at
Registergericht: GRAZ
- Competent supervisory authority
The data protection authority is the supervisory authority for data protection established under the General Data
Protection Regulation (GDPR) and the Data Protection Directive for the law enforcement sector in Austria.
Austrian Data Protection Authority
Barichgasse 40-42
1030 Wien
Telefon: +43 1 521 52-25 69
E‑Mail: dsb@dsb.gv.at
- Data processing
We process personal data for the following purposes, resulting from the list of processing activities, Art. 30 EUGDPR
- Provision of the website
- Applicant management
- Social media presence
- Marketing
- Services such as: Blockchain, Central & Deepweb Intelligence
- Prospects & customer meetings via video call
- Legal basis for data processing
We process personal data on the basis of the following legal grounds:
Art. 6, para. 1 lit. a. EU-GDPR
The data subject has given consent to the processing of personal data relating to him or her for one or more
specific purposes
Art. 6, para. 1 lit. b. EU-GDPR
The processing is necessary for the performance of a contract to which the data subject is party or for the
implementation of pre-contractual measures taken at the request of the data subject
Art. 6, para. 1 lit. c. EU-GDPR
Processing is necessary for compliance with a legal obligation to which the controller is subject
Art. 49, para. 1 lit. a EU-GDPR (in the absence of a Privacy Shield)
The data subject has expressly consented to the proposed data transfer after having been informed of the
potential risks to him or her of such data transfers without the existence of an adequacy decision and without
appropriate safeguards For ancillary contracts, the written form or a documented electronic format is required as a
matter of principle.
VI.1. Storage period
Unless a more specific storage period has been specified within this privacy policy, your personal data will remain
with us until the purpose for processing the data no longer applies. If you assert a justified request for deletion or
revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for
storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be
deleted after these reasons no longer apply.
VII. Website and online presence
VII.1. Use of cookies
- Nature and purpose of processing
Like many other websites, we also use so-called “cookies”. You have the option in the Cookie Consent
Management Tool to set the prescribed preferences.
Which cookies we are used for what purpose you can see among other things or in the Cookie Consent.
Cookies are simple files that store information about our website and your usage. These small files are optionally
created by your browser automatically through the use of our website and stored locally on your respective end
device. This does not mean that we have direct knowledge of your identity as a result. The use of cookies serves
to make the use of our offer more pleasant for you.
Therefore, we generally distinguish between technically necessary and non-necessary cookies: You can find
the storage period in the Cookie-Consent Tool, which is displayed when you visit our website for the first time.
Technically necessary cookies (“first party cookies”)
are required for the operation of a website and are essential to navigate on it and use its functions. These cookies
are not permanently stored on your computer or device and are deleted when you close the browser. These are
so-called session cookies or also session cookies).
The following technically necessary cookies are used by us:
Non-essential cookies, on the other hand, are mostly Functional Cookies, Performance Cookies and
Marketing & Third Party Cookies, which make it possible, for example, to record and count the number of
visitors and traffic sources in order to measure and improve the performance of the website. They are also used to
find out whether problems or errors occur on certain pages, which pages are the most popular and how visitors
navigate the website.
- Functional cookies
Functional cookies are used to store information that has been entered, such as the user name or language
selection, and thus offer the website visitor improved and personalized functions based on this information.
- Performance cookies
Performance cookies are used to track visits and individual activities on websites. They are used to
statistically record and evaluate the use of websites.
- Marketing & Third Party Cookies Marketing & Third Party Cookies originate, among others, from external advertising companies and are used to collect information about the websites visited by the user, e.g. to create targeted advertising for the user.
- Legal basis of the processing
The use of technically necessary cookies (“first party cookies”) is possible without the consent of the website
visitor and is subject to a legitimate interest in the economic operation and optimization of our website and
services) within the meaning of Art. 6 para. 1 sentence 1 lit. f DSGVO.
The use of non-essential cookies, such as functional cookies, performance cookies and marketing & third party
cookies is subject to the consent of the website visitor pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO.
- Data categories
- IP adress
- Browser used
- Operating system used
- Internet connection
- Session ID of the cookie
- Recipient
The data recipients can be found at the end of the privacy policy in the list of cookies used
- Storage periods
The user can set his web browser in such a way that the storage of cookies on his end device is generally
prevented or he is asked each time whether he agrees to the setting of cookies. Once cookies have been set, the
user can delete them at any time. How this works is described in the help function of the respective web browser.
A general deactivation of cookies may lead to functional restrictions of this website.
- Legal / contractual requirement
The provision of your personal data in cookies is voluntary in the case of cookies that are not necessary, solely on
the basis of your consent (so-called opt-in cookies). You can also prevent the use of preset, technically necessary
cookies (so-called opt-out cookies) via your browser settings. However, without consent, the service and
functionality of our website is not guaranteed. In addition, individual services and services may not be available or
may be limited.
- Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
- Revocation of consent
You can revoke the consent of all cookies at any time with effect for the future in your browser settings.
- Automated decision making and profiling
As a responsible company, we do not use automated decision-making or profiling when collecting cookies.
VII.2. Google Ads Note
Note: Cookies are used to personalise advertisements.
VII.3. Newsletter
- Nature and purpose of the processing
Your data will only be used to send you the newsletter you have subscribed to by e-mail. Your name is provided in
order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to
exercise your rights as a data subject. To receive the newsletter, it is sufficient to provide your e-mail address.
When registering to receive our newsletter, the data you provide will be used exclusively for this purpose.
Subscribers may also be informed by e-mail about circumstances relevant to the service or registration (e.g.
changes to the newsletter offer or technical circumstances). For an effective registration, we require a valid e-mail
address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the
“double-opt-in” procedure. For this purpose, we log the order for the newsletter, the sending of a confirmation email
and the receipt of the response requested herewith. No further data is collected. The data is used exclusively
for sending the newsletter and is not passed on to third parties.
- Legal basis of the processing
On the basis of your express consent (Art. 6 para. 1 lit. a GDPR, Art. 7 GDPR in conjunction with § 107 para. 2
TKG), we will regularly send you our newsletter or comparable information by e-mail to your specified e-mail
address.
- Data categories
- E-mail address
- Last name
- First name
- Recipient
- Employees of the IT and marketing department
- Service provider for sending the newsletter
- Storage periods
In this context, the data will only be processed as long as the corresponding consent is given. Afterwards they will
be deleted.
- Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. Unfortunately, we cannot send you
our newsletter without your consent.
- Third country transfer
The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
- Revocation of consent
You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any
time with effect for the future. You will find a link to this effect in every newsletter. In addition, you can also
unsubscribe directly on this website at any time or inform us of your revocation using the contact option provided
at the end of this data protection notice.
- Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
VII.4. Use of Google Analytics
- Nature and purpose of the processing
This website uses Google Analytics, a web analytics service provided by Google Building Gordon House, 4 Barrow
Street, Dublin, D04 E5W5, Ireland. Google Analytics uses “cookies”, which are text files placed on your computer,
to help the website analyse how users use the site. The information generated by the cookie about your use of the
website will be transmitted to and stored by Google on servers in the United States. However, due to the activation
of IP anonymisation on these websites, your IP address will be truncated beforehand by Google within member
states of the European Union or in other contracting states of the Agreement on the European Economic Area.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your
use of the website, compiling reports on website activity and providing other services relating to website activity
and internet usage to the website operator. The IP address transmitted by your browser as part of Google
Analytics will not be merged with other Google data. The purpose of the data processing is to evaluate the use of
the website and to compile reports on website activities. Further associated services are then to be provided on
the basis of the use of the website and the internet.
- Legal basis of the processing
The processing of the entered data is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).
- Data categories
- IP address (shortened/anonymised)
- Recipients
- Employees of the IT and marketing department
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- Storage periods
Data will only be processed in this context as long as the corresponding consent has been given. Afterwards, they
will be deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context,
please use the contact details provided at the beginning of this privacy policy.
- Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may
result in functional restrictions on the website.
- Third country transfer
Processing will not take place outside the European Union (EU) or the European Economic Area (EEA).
- Withdrawal of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can
notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note
that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the
collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to
Google as well as the processing of this data by Google by downloading and installing the browser plugin
available under the following link: “Browser Add On to deactivate Google Analytics”.
- Automatic decision-making and profiling
With the help of the tracking tool Google Analytics, the behaviour of visitors to the website can be evaluated and
interests analysed. For this purpose, we create a pseudonymous user profile.
VII.5. Use of Google Webfonts
- Nature and purpose of the processing
In order to display our content correctly and graphically appealing across browsers, we use “Google Web Fonts”
(1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) on this website to display fonts. The privacy policy
of the library operator Google can be found here: https://www.google.com/policies/privacy/. Calling up script
libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible –
although it is currently also unclear whether and, if so, for what purposes – that the operator collects Google data
in this case. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and
in Google’s privacy policy: https://www.google.com/policies/privacy/.
- Legal basis for processing
The legal basis for the integration of Google Web Fonts and the associated data transfer to Google is your
consent (Art. 6 para. 1 lit. a GDPR).
- Data categories
IP address, date, referrer URL, browser plugins, information about the operating system, cookies, user device
settings (e.g. language settings, location, browser, etc.).
- Recipients
Recipients of the data are internal employees and Google as a processor.
- Storage periods
Data will only be processed in this context for as long as the corresponding consent exists. Afterwards, they will be
deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please
use the contact details provided at the beginning of this privacy policy.
- Legal / contractual requirement
The provision of personal data is neither legally nor contractually required. However, the correct display of the contents of standard fonts cannot be made possible without it.
- Third country transfer
Google processes your data in the USA.
- Revocation of consent
The programming language JavaScript is regularly used to display the content. You can therefore object to data
processing by deactivating the execution of JavaScript in your browser or installing a JavaScript blocker. Please
note that this may result in functional restrictions on the website. You can revoke your consent to the storage of
your personal data at any time with effect for the future. You can notify us of your revocation at any time using the
contact option provided at the beginning of this data protection notice.
- Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
VII.6. Use of Google Tag Manager
- Nature and purpose of the processing
Use of Google Tag Manager: Google Tag Manager is a solution that allows marketers to manage website tags
through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does
not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager
does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for
all tracking tags implemented with Google Tag Manager: http://www.google.de/tagmanager/use-policy.html.
- Legal basis of the processing
The processing of the entered data is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).
- Data categories
Google Tag Manager itself does not store any personal data. The personal data is collected by the tags of the
respective web analytics tool used.
- Recipients
Recipients of the data are internal employees and Google as an order processor. For this purpose, we have concluded the corresponding order processing agreement with Google.
- Storage periods
Data will only be processed in this context as long as the corresponding consent is given. Afterwards, they will be
deleted, provided that there are no legal storage obligations to the contrary. To contact us in this context, please
use the contact details provided at the beginning of this privacy policy.
- Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may
result in functional restrictions on the website.
- Third country transfer
Processing will not take place outside the European Union (EU) or the European Economic Area (EEA).
- Withdrawal of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can
notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note
that if you do this you may not be able to use the full functionality of this website.
- Profiling
The Google Tag Manager tool can be used to evaluate the behaviour of visitors to the website and analyse their
interests.
VII.7. Use of Google Doubleclick
- Nature and purpose of the processing
We use the Google “Doubleclick” online marketing service.
The purpose of this service is to place ads in the Google advertising network (e.g., in search results, in videos, on
web pages, etc.). Double Click is characterised by the fact that ads are displayed in real time based on the
presumed interests of the users. This allows us to target ads for and within our online offering to present users
only with ads that potentially match their interests. If, for example, a user is shown ads for products in which he or she was interested on other online offers, this is referred to as “remarketing”. For these purposes, when our
website and other websites on which the Google advertising network is active are called up, a code is executed
directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as “web beacons”) are
integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user’s device
(comparable technologies can also be used instead of cookies). This file records which web pages the user has
visited, which content the user is interested in and which offers the user has clicked on, as well as technical
information on the browser and operating system, referring web pages, time of visit and other information on the
use of the online offer.
The IP address of the user is also recorded, whereby this is shortened within Member States of the European
Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional
cases is transferred in full to a Google server in the USA and shortened there. The aforementioned information
may also be combined by Google with such information from other sources. If the user subsequently visits other
websites, he or she may be shown ads tailored to his or her interests on the basis of his or her user profile.
User data is processed pseudonymously within the Google advertising network. This means that Google does not
store and process the name or email address of the user, for example, but processes the relevant data on a
cookie basis within pseudonymous user profiles. This means that from Google’s perspective, the ads are not
managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie
holder is. This does not apply if a user has expressly allowed Google to process the data without this
pseudonymisation.
- Legal basis of the processing
The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the
analysis, optimisation and economic operation of our online offer.
- Data categories
IP address, date, referrer URL, browser plugins, information about the operating system, cookies, user device
settings (e.g. language settings, location, browser, etc.).
- Recipients
Recipients of the data are internal employees of the IT department and Google as processor.
- Storage periods
After the end of the purpose and the end of the use of Google Doubleclick by us, the data collected in this context will be deleted.
- Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. Without the provision of your
personal data, we cannot grant you access to our offered content and services.
- Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
- Withdrawal of consent
For more information on Google’s use of data, settings and opt-out options, please refer to Google’s privacy policy
(https://policies.google.com/technologies/ads) and the settings for the display of advertisements by
Google(https://adssettings.google.com/authenticated). You can revoke your consent to the storage of your
personal data at any time with effect for the future. You can notify us of your revocation at any time using the
contact option provided at the beginning of this privacy notice.
- Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
VII.8. Use of Active Campaign
- Nature and purpose of the processing
This website uses ActiveCampaign, a customer experience automation software. ActiveCampaign is used for
email marketing, marketing automation and CRM tools.
- Legal basis of the processing
The processing of the data is based on the user’s consent (Art. 6 para. 1 lit. a DSGVO).
- Data categories
IP address, date, referrer URL, browser plugins, information about the operating system, cookies, user device
settings (e.g. language settings, location, browser, etc.).
- Recipients
Recipients of the data are internal employees of the IT department.
- Storage periods
Data will only be processed in this context as long as the relevant consent has been given. Afterwards, they will be
deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please
use the contact details provided at the beginning of this privacy policy.
- Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may
result in functional restrictions on the website.
- Third country transfer
Processing will not take place outside the European Union (EU) or the European Economic Area (EEA).
- Withdrawal of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can
notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
You can prevent the storage of cookies by setting your browser software accordingly. However, this offer informs
users that in this case they may not be able to use all the functions of this website to their full extent.
- Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
VII.9. Use of Facebook Pixel
- Nature and purpose of the processing
The Facebook Pixel is a JavaScript code implemented on our website to link people’s behaviour on the website to
Facebook user profiles. It collects data that helps track conversions, optimise ads and create audiences.
- Legal basis of the processing
The processing is carried out pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the
functionality of our website.
- Data categories
Please refer to Facebook’s privacy policy to find out which specific data is collected and how it is used:
Facebook: http://www.facebook.com/policy.php
- Recipients
- Employees of the IT department of our company
- Storage periods
The data collected directly by us via the pixel will be deleted from our systems as soon as the purpose for storing it
no longer applies, you request us to delete it, revoke your consent to store it or the purpose for storing the data no
longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions – in
particular retention periods – remain unaffected.
We have no influence on the storage period of your data that is stored by Facebook for its own purposes. For
details, please contact Facebook directly (e.g. in their privacy policy, see above).
Legal / contractual requirement
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you
access to our offered content and services.
- Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
- Withdrawal of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can
notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
- Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
VII.10. Use of Gravatar
- Nature and purpose of the processing
This website uses Gravatar. Gravatar is a service for providing avatars by the company Automattic Inc (60 29th
Street #343 San Francisco, CA 94110, USA).
- Legal basis of the processing
The processing of the data is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).
- Data categories
IP address, date, referrer URL, browser plugins, information about the operating system, cookies, user device settings (e.g. language settings, location, browser, etc.).
- Recipients
Recipients of the data are internal employees of IT department and Automattic Inc.
- Storage periods
Data will only be processed in this context as long as the relevant consent has been given. Afterwards, they will be
deleted unless there are legal retention obligations to the contrary. To contact us in this context, please use the
contact details provided at the beginning of this privacy policy.
- Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may
result in functional restrictions on the website.
- Third country transfer
Automattic Inc processes your data in the USA.
- Revocation of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can
notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
- Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
VII.11. Use of preeco
We use an external service for the ongoing updating of the data protection declaration. No personal data is
collected when calling up the information obligations according to Art. 13ff, the so-called data protection
declaration.
For data protection management and the protection of data subject rights according to Art. 15ff EU-DSGVO, data
collection is necessary for secure communication.
VII.12. Using Kaspersky Cyber Threat Map
- Nature and purpose of the processing
This website uses the Cyber Threat Map from Kaspersky. Please refer to Kaspersky’s privacy policy to find out
what specific data is collected and how it is used: https://www.kaspersky.com/web-privacy-policy
- Legal basis of the processing
The processing of the data is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).
- Data categories
IP address, date, referrer URL, browser plugins, information about the operating system, cookies, user device
settings (e.g. language settings, location, browser, etc.).
- Recipients
Recipients of the data are internal employees of the IT department and Kaspersky.
- Storage periods
Data will only be processed in this context as long as the relevant consent has been given. Afterwards, they will be
deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please
use the contact details provided at the beginning of this Privacy Policy.
- Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may
result in functional restrictions on the website.
- Third country transfer
Processing will not take place outside the European Union (EU) or the European Economic Area (EEA).
- Withdrawal of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can
notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
- Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
VII.13. Use of embedded YouTube videos
- Nature and purpose of the processing
We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC,
901 Cherry Ave, San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to
YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your
YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging
out of your YouTube account first. If a YouTube video is started, the provider uses cookies that collect information
about user behaviour. Further information on the purpose and scope of data collection and processing by
YouTube can be found in the provider’s data protection declarations, where you will also find further information on
your rights in this regard and setting options for protecting your privacy (https://policies.google.com/privacy).
- Legal basis for processing
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6
para. 1 lit. a DSGVO).
- Data categories
IP address, date, referrer URL, browser plugins, information about the operating system, cookies, user device
settings (e.g. language settings, location, browser, etc.).
- Recipients
Recipients of the data are internal employees of the IT department and YouTube as service provider.
- Storage periods
Anyone who has deactivated the storage of cookies for the Google Ad programme will not have to expect any
such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in
other cookies. If you would like to prevent this, you must block the storage of cookies in your browser. Further
information on data protection at “YouTube” can be found in the provider’s data protection declaration at:
www.google.de/intl/de/policies/privacy.
- Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may
result in functional restrictions on the website.
- Third country transfer
Google processes your data in the USA.
- Revocation of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can
notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
- Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
VII.14. Social media
VII.14.a. Use of social media plugins
- Type and purpose of processing
Social plugins from the providers listed below are used on our websites. You can recognise the plugins by the fact
that they are marked with the corresponding logo.
Information, which may include personal data, may be sent to the service provider via these plugins and may be
used by the service provider. We prevent the unconscious and unintentional collection and transmission of data to
the service provider through a so-called Shariff solution. Only by clicking on the plugin is the collection of
information and its transmission to the service provider triggered. We do not collect any personal data ourselves
by means of the social plugins or through their use.
We have no influence on what data an activated plugin collects and how it is used by the provider. At present, it
must be assumed that a direct connection to the provider’s services is established and that at least the IP address
and device-related information is collected and used. There is also the possibility that the service providers try to
save cookies on the computer used.
- Legal basis of the processing
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in
the functionality of our website.
- Data categories
Please refer to the data protection information of the respective service provider to find out which specific data is
collected and how it is used:
Facebook: http://www.facebook.com/policy.php
Instagram: https://help.instagram.com/155833707900388
Twitter: https://twitter.com/privacy
YouTube: https://policies.google.com/privacy
Telegram: https://telegram.org/privacy
- Recipient
Employees of the IT department of their own company
Telegram
- Storage periods
The data collected directly by us via the social media plugins will be deleted from our systems as soon as the
purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it or the purpose
for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory
legal provisions – in particular retention periods – remain unaffected.
We have no influence on the storage period of your data, which is stored by the operators of the social networks
for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their
privacy policy, see above).
- Legal / contractual requirement
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you
access to our offered content and services.
- Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
- Withdrawal of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can
notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
- Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
VII.14.b. Online presence on YouTube
- Nature and purpose of the processing
We appreciate your interest in our presence on YOUTUBE. We would like to give you an overview of what data is
collected, used and stored by us there.
Social networks can usually comprehensively analyse your user behaviour when you visit their website or a
website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media
presence on YouTube triggers numerous processing operations relevant to data protection. In detail:
If you are logged into your YouTube account and visit our social media presence, YouTube can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not
logged in or do not have an account on YouTube. In this case, this data collection takes place, for example, via
cookies that are stored on your end device or by recording your IP address. With the help of the data collected in
this way, YouTube can create user profiles in which your preferences and interests are stored. In this way, you can
be shown interest-based advertising inside and outside YouTube. If you have an account on YouTube, the
interest-based advertising may be displayed on all devices on which you are logged in or have been logged in.
Please also note that we are not able to track all processing on YouTube. Further processing operations may
therefore be carried out by YouTube. For details, please refer to YouTube’s terms of use and privacy policy.
- Legal basis of the processing
The processing is carried out in accordance with Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interest of
contacting our customers. The analysis processes initiated by YouTube may be based on deviating legal bases to
be indicated by YouTube (e.g. consent within the meaning of Art. 6 (1) lit. a GDPR).
- Data categories
Please refer to YouTube’s data protection information to find out which specific data is collected and how it is
used:
YouTube: https://policies.google.com/privacy
- Recipients
Employees of the IT department of your own company
- Storage periods
After the end of the purpose and the end of the use of YouTube by us, the data collected in this context will be
deleted.
- Legal / contractual requirement
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you
access to our offered content and services.
- Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
- Withdrawal of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can
notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
- Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
VII.14.c. Online presence on Facebook
- Nature and purpose of the processing
We appreciate your interest in our presence on FACEBOOK. We would like to give you an overview of what data
is collected, used and stored by us there.
Social networks can usually comprehensively analyse your user behaviour when you visit their website or a
website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media
presence on Facebook triggers numerous processing operations relevant to data protection. In detail:
If you are logged into your Facebook account and visit our social media presence, Facebook can assign this visit
to your user account. However, your personal data may also be collected under certain circumstances if you are
not logged in or do not have an account on Facebook. In this case, this data collection takes place, for example,
via cookies that are stored on your end device or by recording your IP address. With the help of the data collected
in this way, Facebook can create user profiles in which your preferences and interests are stored. In this way, you
can be shown interest-based advertising inside and outside Facebook. If you have an account on Facebook, the
interest-based advertising can be displayed on all devices on which you are logged in or have been logged in.
Please also note that we cannot track all processing on Facebook. Therefore, additional processing operations
may be carried out by Facebook. For details, please refer to Facebook’s terms of use and privacy policy.
- Legal basis of the processing
The processing is carried out in accordance with Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interest of
contacting our customers. The analysis processes initiated by Facebook may be based on different legal bases,
which are to be specified by Facebook (e.g. consent within the meaning of Art. 6 (1) lit. a GDPR).
- Data categories
Please refer to Facebook’s data protection information to find out which specific data is collected and how it is
used:
Facebook: http://www.facebook.com/policy.php
- Recipients
Employees of the IT department of our own company
- Storage periods
After the end of the purpose and the end of the use of Facebook by us, the data collected in this context will be
deleted.
- Legal / contractual requirement
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you
access to our offered content and services.
- Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
- Withdrawal of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can
notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
- Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
VII.14.d. Online presence on Instagram
- Nature and purpose of the processing
Thank you for your interest in our presence on INSTAGRAM. We would like to give you an overview of what data
is collected, used and stored by us there.
Social networks can usually comprehensively analyse your user behaviour when you visit their website or a
website with integrated social media content (e.g. like buttons or advertising banners). By visiting our social media
presence on Instagram, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged into your Instagram account and visit our social media presence, Instagram can assign this visit
to your user account. However, your personal data may also be collected under certain circumstances if you are
not logged in or do not have an account on Instagram. In this case, this data collection takes place, for example,
via cookies that are stored on your end device or by recording your IP address. With the help of the data collected
in this way, Instagram can create user profiles in which your preferences and interests are stored. In this way, you
can be shown interest-based advertising inside and outside Instagram. If you have an account on Instagram, the
interest-based advertising can be displayed on all devices on which you are logged in or have been logged in.
Please also note that we cannot track all processing on Instagram. Further processing operations may therefore
be carried out by Instagram. For details, please refer to Instagram’s terms of use and privacy policy.
- Legal basis of the processing
The processing is carried out pursuant to Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interest of
contacting our customers. The analysis processes initiated by Instagram may be based on deviating legal bases
to be indicated by Instagram (e.g. consent within the meaning of Art. 6 (1) lit. a GDPR).
- Data categories
Please refer to Instagram‘s privacy policy to find out which specific data is collected and how it is used:
Instagram: https://help.instagram.com/155833707900388
- Recipients
- Employees of the IT department of your own company
- Storage periods
After the end of the purpose and the end of the use ofI nstagram by us, the data collected in this context will be
deleted.
- Legal / contractual requirement
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you
access to our offered content and services.
- Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
- Withdrawal of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can
notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
- Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
VII.14.e. Online presence on Twitter
- Nature and purpose of the processing
Thank you for your interest in our presence on TWITTER. We would like to give you an overview of what data is
collected, used and stored by us there.
Social networks can usually comprehensively analyse your user behaviour when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media
presence on Twitter triggers numerous processing operations relevant to data protection. In detail:
If you are logged into your Twitter account and visit our social media presence, Twitter can assign this visit to your
user account. However, your personal data may also be collected under certain circumstances if you are not
logged in or do not have an account on Twitter. In this case, this data collection takes place, for example, via
cookies that are stored on your end device or by recording your IP address. With the help of the data collected in
this way, Twitter can create user profiles in which your preferences and interests are stored. In this way, you can
be shown interest-based advertising inside and outside Twitter. If you have an account on Twitter, the interestbased
advertising can be displayed on all devices on which you are or were logged in. Please also note that we
cannot track all processing on Twitter. Further processing operations may therefore be carried out by Twitter. For
details, please refer to Twitter’s terms of use and privacy policy.
- Legal basis of the processing
The processing is carried out in accordance with Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interest of
contacting our customers. The analysis processes initiated by Twitter may be based on deviating legal bases to be
specified by Twitter (e.g. consent within the meaning of Art. 6 (1) lit. a GDPR).
- Data categories
Please refer to Twitter’s data protection information to find out which specific data is collected and how it is used.
Twitter: https://twitter.com/privacy
- Recipients
Employees of the IT department of your own company
- Storage periods
After the end of the purpose and the end of the use of Twitter by us, the data collected in this context will be
deleted.
- Legal / contractual requirement
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you
access to our offered content and services.
- Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
- Withdrawal of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can
notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
- Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.a.
Nature and purpose of the processing
VII.14.f. Online presence on Telegram
- Nature and purpose of the processing
We appreciate your interest in our presence on Telegram. We would like to give you an overview of what data is
collected, used and stored by us there.
Social networks can usually comprehensively analyse your user behaviour when you visit their website or a
website with integrated social media content (e.g. like buttons or advertising banners). By visiting our social media
presence on Telegram, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged into your Telegram account and visit our social media presence, Telegram can assign this visit to
your user account. However, your personal data may also be collected under certain circumstances if you are not
logged in or do not have an account on Telegram. In this case, this data collection takes place, for example, via
cookies that are stored on your end device or by recording your IP address. With the help of the data collected in
this way, Telegram can create user profiles in which your preferences and interests are stored. In this way, you
can be shown interest-based advertising inside and outside Telegram. If you have an account on Telegram, the
interest-based advertising can be displayed on all devices on which you are logged in or have been logged in.
Please also note that we cannot track all processing on Telegram. Further processing operations may therefore be
carried out by Telegram. For details, please refer to Telegram’s terms of use and privacy policy.
- Legal basis of the processing
The processing is carried out in accordance with Art. 6 para. 1 lit. f. GDPR on the basis of our legitimate interest of
contacting our customers. The analysis processes initiated by Telegram may be based on deviating legal bases to
be specified by Telegram (e.g. consent within the meaning of Art. 6 (1) lit. a GDPR).
- Data categories
Please refer to Telegram’s data protection information to find out which specific data is collected and how it is
used:
Telegram: https://telegram.org/privacy
- Recipients
- Employees of the IT department of your own company
- Telegram
- Storage periods
After the end of the purpose and the end of the use of Telegram by us, the data collected in this context will be
deleted.
- Legal / contractual requirement
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you
access to our offered content and services.
- Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
- Withdrawal of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can
notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
- Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling in this data processing.decisionmaking or profiling in this data processing.
VIII. Data security
The personal data of every individual who has a contractual, pre-contractual or other relationship with our
company deserves special protection. We aim to maintain our level of data protection at a high standard. That is
why we focus on the continuous development of our data protection and data security concepts. We are therefore
committed to protecting your privacy and treating your personal data confidentially. In order to prevent
manipulation, loss or misuse of your data stored with us, we take extensive technical and organisational security
precautions which are regularly reviewed and adapted to technological progress. These include, among other
things, the use of recognised encryption procedures (SSL or TLS). ?However, we would like to point out that, due
to the structure of the Internet, it is possible that the rules of data protection and the above-mentioned security
measures are not observed by other persons or institutions not within our sphere of responsibility. In particular,
data disclosed unencrypted – e.g. if this is done by e-mail – can be read by third parties. We have no technical
influence on this. It is the user’s responsibility to protect the data he or she provides against misuse by encrypting
it or in any other way.
- Data subjects’ rights
If personal data is processed by you as a user, you are considered a data subject in accordance with the GDPR.
Data subjects have the following rights vis-à-vis the controller:
- Right of access (Art. 15 GDPR)
- Right to rectification or erasure of personal data (Art. 16, 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to communication in connection with the rectification or erasure of your personal data or the restriction
- of processing (Art. 19 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to revoke declarations of consent given. The lawfulness of the data processing carried out until the
- revocation remains unaffected due to the consent valid to date. (Art. 7 para. 3 GDPR)
- Right to complain to the supervisory authority (Art. 77 GDPR)
- Our right to amend the Directive
Since changes in the law or changes in our internal company processes may make it necessary to adapt this data
protection declaration, we ask you to read through this data protection declaration regularly. The data protection
declaration can be accessed at any time. We therefore reserve the right to amend this policy at any time in
compliance with data protection law.
- Overview of the processors used
If, in the course of our processing, we disclose data to other persons and companies (order processors, jointly
responsible persons or third parties), transmit it to them or otherwise grant them access to the data, this will only
be done on the basis of a legal permission (e.g. if a transmission of the data to third parties, such as to payment
service providers, is necessary for the performance of the contract), users have consented, a legal obligation
provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). If we disclose
or transfer data to other companies in our group of companies or otherwise grant them access, this is done in
particular for administrative purposes as a legitimate interest and, in addition, on a basis that complies with the
legal requirements.
The following organisations, companies or persons have been commissioned by the operator of this website to
process data:
Processors within/outside the EU / EEA:
Company
List of AD Processors AD-PROCESSOR
XII. Own services & applications
Handling of applicant data
We offer you the opportunity to apply to us (e.g. by e-mail, post or via the online application form). In the following,
we inform you about the scope, purpose and use of your personal data collected as part of the application
process. We assure you that the collection, processing and use of your data will be carried out in accordance with
applicable data protection law and all other statutory provisions and that your data will be treated in strict
confidence.
Scope and purpose of data collection
When you send us an application, we process your associated personal data (e.g. contact and communication
data, application documents, notes taken during interviews, etc.) insofar as this is necessary to decide on the
establishment of an employment relationship.
If the application is successful, the data submitted by you will be stored in our data processing systems on the
basis of Art. 6 (1) lit. b GDPR for the purpose of implementing the employment relationship.
Retention period of the data
If we are unable to make you a job offer, if you reject a job offer or withdraw your application, we reserve the right
to keep the data you have submitted with us for up to 6 months from the end of the application process (rejection
or withdrawal of the application) on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR). The data will
then be deleted and the physical application documents destroyed. This storage serves in particular as evidence
in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired
(e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further
storage no longer applies.
Longer storage may also take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if legal storage
obligations prevent deletion.
Inclusion in the applicant pool
If we do not make you a job offer, it may be possible to include you in our applicant pool. If you are accepted, all
documents and details from your application will be transferred to the applicant pool so that we can contact you in
the event of suitable vacancies.
Inclusion in the applicant pool is based exclusively on your express consent (Art. 6 para. 1 lit. a GDPR). The
provision of consent is voluntary and is not related to the current application process. The person concerned can
revoke his/her consent at any time. In this case, the data from the applicant pool will be irrevocably deleted, unless
there are legal reasons for retention.
The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.
XIII. List of cookies and external services used
Cookies and web storage overview
Name
_ga_DPSR126VZB
_gat_gtag_UA_2357570
82_1
_gid
_wpfuuid
prism_801237041
real_cookie_banner-b
log:1
Type
1st-Party
(permanent)
1st-Party
(permanent)
1st-Party
(permanent)
1st-Party
(permanent)
3rd-Party
(permanent)
1st-Party
(permanent)
Storage duration (days)
730
1
1
3999
30
365
Domain
foreus.at
foreus.at
foreus.at
foreus.at
appus1.com
foreus.at
Source
Google Analytics
Google Analytics
Google Analytics
Unknown
Active Campaign
Unknown
Purpose
Analytics
Analytics
Analytics
Unknownt
Analytics
Unknown
External Services Overview
Name
Active Campaign
DoubleClick
Facebook Pixel
Google Analytics
Google Fonts
Google Tag
Manager
Gravatar
Preeco
YouTube
Domain
app-us1.com
doubleclick.net
connect.facebook.net /*/fbevents.js
google-analytics.com
fonts.gstatic.com
googletagmanager.com
gravatar.com
preeco.de
youtube.com
Source
Active Campaign
Automattic
preeco GmbH
Purpose
Analytics
Advertising
Advertising
Analytics
Functional
Functional
Social media
External content
Audio/video player