Privacy Policy
Security and Protection of Your Personal Data
Protecting the confidentiality of the personal data you provide and safeguarding it from unauthorized access is our top priority. That’s why we apply the utmost care and use state-of-the-art security standards to ensure maximum protection for your personal data.
As a private company, we are subject to the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). We have implemented technical and organizational measures to ensure compliance with data protection regulations both by us and by our external service providers.
Definitions of Terms
The law requires that personal data must be processed lawfully, fairly, and transparently (“lawfulness, fairness, and transparency”). To ensure this, we provide explanations of the key legal terms used in this Privacy Policy:
1. Personal Data
“Personal data” refers to any information relating to an identified or identifiable natural person (“data subject”). A natural person is considered identifiable if they can be identified directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more characteristics that express their physical, physiological, genetic, mental, economic, cultural, or social identity.
2. Processing
“Processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
3. Restriction of Processing
“Restriction of processing” means the marking of stored personal data to limit its future processing.
4. Profiling
“Profiling” refers to any form of automated processing of personal data that involves using it to evaluate certain personal aspects relating to a natural person, particularly to analyze or predict aspects concerning job performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
5. Pseudonymization
“Pseudonymization” is the processing of personal data in such a way that it can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
6. File System
A “file system” is any structured collection of personal data accessible according to specific criteria, whether centralized, decentralized, or organized by functional or geographical considerations.
7. Controller
The “controller” is a natural or legal person, public authority, agency, or other entity that, alone or jointly with others, determines the purposes and means of processing personal data. If the purposes and means of processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under such law.
8. Processor
A “processor” is a natural or legal person, public authority, agency, or other entity that processes personal data on behalf of the controller.
9. Recipient
A “recipient” is a natural or legal person, public authority, agency, or other entity to whom personal data is disclosed, whether a third party or not. However, authorities that may receive personal data under Union or Member State law as part of a specific investigation are not considered recipients; the processing of such data by these authorities must comply with applicable data protection regulations in accordance with the purposes of processing.
10. Third Party
A “third party” is a natural or legal person, public authority, agency, or other entity other than the data subject, the controller, the processor, and those authorized to process personal data under the direct authority of the controller or processor.
11. Consent
“Consent” of the data subject is any freely given, specific, informed, and unambiguous indication of their wishes by which they, through a statement or a clear affirmative action, signify agreement to the processing of their personal data.
Lawfulness of Processing
Processing personal data is lawful only if there is a legal basis for it. According to Article 6(1) of the GDPR, the legal basis for processing may include:
- (a) The data subject has given consent for one or more specific purposes.
- (b) Processing is necessary for the performance of a contract to which the data subject is a party or for pre-contractual measures at the request of the data subject.
- (c) Processing is necessary for compliance with a legal obligation to which the controller is subject.
- (d) Processing is necessary to protect the vital interests of the data subject or another natural person.
- (e) Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
- (f) Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the data subject’s interests or fundamental rights and freedoms requiring protection of personal data, particularly if the data subject is a child.
Collection of Personal Data
1. When Using Our Website
When you visit our website for informational purposes only (i.e., without registering or providing any other information), we only collect the personal data your browser transmits to our server. This data is technically necessary for displaying our website and ensuring stability and security. This includes:
- IP address
- Date and time of request
- Time zone difference to GMT
- Specific page requested
- HTTP status code
- Amount of data transferred
- Website from which the request originated
- Browser type and version
- Operating system and its interface
- Language and version of browser software
2. Contacting Us
When you contact us via email, the data you provide (your email address, and possibly your name and phone number) will be stored to answer your inquiries. We delete this data once it is no longer necessary, or we restrict processing if legal retention obligations apply.
Use of Cookies
We use cookies to make our website more user-friendly and effective. These are small text files stored on your device that transmit certain information to us. Our website uses the following types of cookies:
- Session Cookies: These are automatically deleted when you close your browser.
- Persistent Cookies: These remain stored until their expiration date or until manually deleted.
You can configure your browser settings to refuse third-party cookies or all cookies. However, this may limit some website functionalities.
Your Rights
As a data subject, you have the following rights under the GDPR:
- Right to Withdraw Consent – You can revoke your consent at any time.
- Right to Access – You can request information on what personal data we store about you.
- Right to Rectification – You can request corrections to inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”) – You can request deletion of your data under certain conditions.
- Right to Restriction of Processing – You can request that we limit processing of your data under certain conditions.
- Right to Data Portability – You can request a structured, machine-readable copy of your data.
- Right to Object – You can object to the processing of your data under certain conditions.
For further details, please contact us at office@hcs.co.at.
This translation ensures clarity and compliance with legal terminology while maintaining readability. Let me know if you’d like any modifications! 😊
