Privacy policy

1) Legal information according to the General Data Protection Regulation (GDPR)

Data is processed on the website exclusively on the basis of the statutory provisions (GDPR, TKG 2021).

Information according to Art. 13 GDPR

By means of this privacy policy, SENTIOTEC would like to inform the readers and users of the website (users) about the type, scope and purpose of the personal data processed. Furthermore, data subjects/users are informed of their rights by means of this privacy policy.

We know that the careful handling of your personal data is very important to you and appreciate your trust that we will handle this data conscientiously.

The terms used in this statement are based on the definitions in Art. 4 of the EU General Data Protection Regulation (GDPR).

Controller within the meaning of Art. 24 GDPR

Sentiotec GmbH (hereinafter SENTIOTEC, we, or the controller).
Wartenburger Strasse 31
4840 Vöcklabruck

Data protection officer according to Art. 37 ff GDPR

SENTIOTEC is a private company. To protect your data, we have appointed the following data protection officer:

Mr Ronald Kopecky
KOMDAT Datenschutz GmbH
Linzerstrasse 74
4614 Marchtrenk
Tel.: +43 / 7243 / 54300
www.komdat.at
datenschutz@komdat.at

2) Rights of data subject

You have comprehensive rights under the General Data Protection Regulation, such as

  • Right to information (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)
  • Right to lodge a complaint (Art. 77 GDPR)

To exercise your rights, please make contact

*Please enclose an official copy of your ID.

Without prior positive identification, we cannot process requests from data subjects. For this reason, we ask you to support the identification process accordingly.

If you believe that the processing of your data violates data protection regulations or that your data protection rights have been violated in any other way, you can complain to the supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde),Wickenburggasse 8, 1080 Vienna.

3.)    Data collection and processing

Online contact form / product inquiries

You can use the contact form to send us inquiries, suggestions and requests. In order to contact us, it is necessary that you provide us with your data.

You must also enter a text in the corresponding field.

You acknowledge that the aforementioned data will be processed by us for the purpose of handling or responding to your request. Without providing this information, we will not be able to process your request.

Legal basis:

  • Consent according to Art. 6(1)(a) GDPR
  • Performance of a contract or pre-contractual measure according to Art. 6(1)(b) GDPR

RETENTION PERIOD

  • 7 years from receipt of the request

 

Product tester

You can register as a product tester using the contact form. This requires us to receive a complete registration (name, address, contact details, information on product preferences, application environment, purposes, preferences and interests, ...). We use this information to optimise our products and applications to suit you. We cannot carry out registration without this information.

You acknowledge that the aforementioned data will be processed by us for the purpose of product tester management.

Legal basis:

  • Consent pursuant to Art. 6 para. 1 lit. a GDPR
  • Contract fulfilment or pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.

Storage period:

  • For the duration of registration as a product tester
  • In addition, 7 years from the last product test

 

Influencer

You can register as an influencer using the contact form. To do so, it is necessary for us to receive a complete registration (name, address, contact details, information on product preferences, application environment, purposes, preferences and interests, etc.). This information helps us to optimise our products and applications to suit you. We cannot carry out influencer registration without this information.

You acknowledge that the aforementioned data will be processed by us for the purpose of influencer management.

Legal basis:

  • Consent pursuant to Art. 6 para. 1 lit. a GDPR
  • Contract fulfilment or pre-contractual measure pursuant to Art. 6 para. 1 lit. b GDPR.

Storage duration:

  • For the duration of registration as an influencer

 

Competitions

Sentiotec organises competitions at irregular intervals.

You expressly acknowledge that the personal data you provide when registering for the competition will be processed by us for the purpose of drawing winners and contacting you (in the event of a win).

The data will be deleted after the competition has been completed, unless otherwise provided for by law.

Legal basis:

  • Consent pursuant to Art. 6 para. 1 lit. a GDPR

Storage period:

  • After the competition has been carried out, the data will be deleted, unless otherwise provided for by law

Complaint management

Within the scope of complaint handling, we collect and store your data and forward it if necessary. Failure to provide this data may result in the complaint not being processed.

Further processing will only take place if you have consented or a legal permission exists. In some cases, we use external service providers based in the European Economic Area to process your data. These service providers have been carefully selected by us, commissioned in writing and are bound by our instructions. The service providers will not pass on this data to third parties, but will delete it once the contract has been fulfilled and the statutory retention periods have expired, unless you have consented to retention beyond that.

If necessary, we transmit personal data from this process to our lawyer and the competent court. This is done in accordance with the legal requirements insofar as it is necessary to protect our legitimate interests and those of third parties and there is no reason to assume that your interests or fundamental rights and freedoms which require the protection of personal data are overridden.

Legal basis:

  • Our legitimate interests according to Art. 6(1)(f) GDPR
  • Performance of a contract or pre-contractual measure according to Art. 6(1)(b) GDPR
  • Legal obligations according to Art. 6(1)(c) GDPR

RETENTION PERIOD

  • 7 years from receipt of the complaint

Newsletter

We use the ActiveCampaigne component to send our newsletters. ActiveCampaigne is a service provided by 1 North Dearborn Street, 5th floor
Chicago, IL 60602, USA.

Then data stored registering to receive the newsletter (title, first name, last name, e-mail address, IP address, date and time of your registration) will be transmitted to a server of ActiveCampaigne in the USA and stored there in compliance with the EU standard contractual clauses.

For more information about ActiveCampaigne's privacy policy, please visit: https://www.activecampaign.com/legal/privacy-policy.

You can cancel or revoke your subscription to this newsletter – and thus your consent to the storage of your data – at any time in the future.

Legal basis:

  • Consent according to Art. 6(1)(a) GDPR

RETENTION PERIOD

  • Until revocation / cancellation / unsubscribe

Double opt-in and logging

The registration for our newsletter takes place using a double opt-in method. This means that after registration you will receive an e-mail in which you are asked to confirm your registration.

The registrations to the newsletter are logged in order to be able to prove the registration process follows the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address.

Statistical collection and analyses

When you access the newsletter, technical information such as information about the browser and your system, as well as your IP address, and the time of access are collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined with the help of the IP address) or the access times.

The statistical surveys also determines whether the newsletters are opened, when they are opened, and which links are clicked on. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is not our intention to observe individual users. The analyses serve more to recognise the reading habits of our users and adapt our content to them, or to send different content according to the interests of our users.

Newsletter tracking

Our newsletters contain tracking pixels (web bugs),which allow us to recognise if and when an email was opened and which links in the e-mail were followed by the recipient. We store this data so that we can optimally tailor our newsletters to the wishes and interests of our subscribers. Accordingly, the data thus collected is used to send personalised newsletters to the respective recipient. We ask for your consent in this regard at the given point: “Consent to the newsletter according to DSGVO.” With the revocation of consent to receive the newsletter, the consent to the aforementioned tracking is also revoked.

Server log

When you visit this website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

 

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • website of origin (referrer URL),
  • browser used and, if applicable, the operating system of your computer and the name of your access provider.

 

The possibility of using this data for purposes such as

  • Ensuring a smooth connection to the website,
  • ensuring the convenient use of our website
  • analysing system security and stability and
  • for further administrative purposes

 

is currently being utilised by us. Under no circumstances will the data collected be used to draw conclusions about your person.

 

Legal basis:

  • Our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR

 

Storage period:

  • 6 months from creation

4) Data transmission / data transfer

Data transfer to third parties

We do not transfer your personal data to third parties for purposes other than those listed below.

We will only pass on your personal data to third parties if:

  • You have given your express consent to this in accordance with Art. 6(1)(a) GDPR
  • Disclosure is necessary in accordance with Art. 6(1)(f) GDPR to protect the interests of the company, or to assert, exercise or defend legal claims, and there is no reason to assume that you have an overriding interest warranting protection in the non-disclosure of your data
  • There is a legal obligation for disclosure pursuant to Art. 6(1)(c) GDPR
  • It is legally permissible and necessary according to Art. 6(1)(b) GDPR for carrying out contractual relationships with you.

The controller may disclose your personal data to suppliers who provide services on our behalf in accordance with our instructions.

The controller may also share your personal data with our affiliated companies and partners.

In addition, the controller may disclose your personal information if we are required to do so by law or by the public authorities, or if we believe that disclosure is necessary or appropriate in order to prevent physical damage or financial loss.

The controller reserves the right to transfer personal information we have about you if we sell or transfer all or part of our business or assets (including in the event of a reorganisation, dissolution or liquidation).

Data transfers

The controller may also transfer your personal information to countries outside of the country where the information was originally collected. These countries may not have the same data protection laws as the country where you originally provided the personal information. When we transfer your information to other countries, we protect that information as described in this privacy policy, and those transfers are governed by the applicable law.

The countries to which we transfer personal data are located

• Within the European Union or
• Outside the European Union

When we transfer personal data from the European Union to countries or international organisations outside the European Union, the transfer is made on the basis of:

  • An adequacy decision of the European Commission;
  • In the absence of such, on the basis of other legally permissible grounds, such as the existence of a legally binding and enforceable document between public authorities or public bodies, binding internal corporate rules, standard data protection clauses, and approved or certified codes of conduct.

In exceptional cases, a data transfer may also take place on the basis of Art. 49 GDPR:

  • Art. 49(1)(a) GDPR
    The data subject has explicitly consented to the proposed transfer, after having been informed of the possible risks of such transfers for the data subject due to the absence of an adequacy decision and appropriate safeguards
  • Art. 49(1)(b) GDPR
    The transfer is necessary for the performance of a contract between the data subject and the controller or the implementation of pre-contractual measures taken at the data subject’s request
  • Art. 49(1)(c) GDPR
    The transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the controller and another natural or legal person

 

5) SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.  An encrypted connection is identified by the character string “https://” and the lock symbol in your browser line.

6) Changes or additions 

We reserve the right to make changes or additions to the information at any time and without notice. If sections or individual wordings of this text are not, no longer or not entirely legally valid or correct, this does not affect the content or validity of the other parts of the document.

 

version 02/2024