The Austrian Institute for SME Research carries out data processing on the basis of the Research Organisation Act (Forschungsorganisationsgesetzes) § 2d Abs 2 Z 1.
For questions on data protection please contact our data protection officer at firstname.lastname@example.org
Declaration on the duty to provide information
The protection of your personal data is of particular concern to us. We therefore process your data exclusively based on the legal regulations (EU-GDPR, Austrian Telecommunications Act 2003). In this statement of privacy, we will inform you about the most important aspects of data processing on our website.
If you contact us by e-mail, your data will be stored for the purpose of processing your inquiry and in the event of follow-up questions. We will not pass on this data without your consent.
We would like to point out that in order to simplify the ordering process, joining our association and for subsequent contract processing some personally identifiable information could be collected such as the IP-address, the name and the address of the customer or new member. In addition, for purposes related to the association membership and the order process, the following data is stored with us: title, company name, telephone and fax number, e-mail address and a customer number. The data provided by you is necessary for the fulfilment of the contract or for the implementation of pre-contractual measures. Without this data, we cannot conclude the contract with you. Data will not be transmitted to third parties, with the exception of the transmission to our tax consultant for the fulfilment of our tax obligations, if needed.
After the order process has been cancelled, the specified data will not be saved. All data from the contractual relationship is stored until the expiry of the tax retention period (7 years). The given data as well as the ordered report and the order date will be stored during the current association membership. Data processing is carried out on the basis of the legal provisions of § 96 section 3 Telecommunications and Article 6 section 1 lit a (consent) and/or lit b (necessary for contract fulfilment) of the GDPR.
Our website uses Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Cookies are used for this purpose, which enable us to analyse the use of our website by its users. The information generated in this way is transferred to the provider’s server and stored there. You can prevent this by setting your browser so that no cookies are stored. If you do not want your data to be used in Analytics, you can install the browser add-on to deactivate Analytics, for example. Your IP address is recorded, but pseudonymised immediately by deleting the last 8 bits. This means that only a rough localization is possible.
The relationship with the web analytics provider is based on an adequacy decision of the European Commission, in the case of the USA: “Privacy Shield”. Data processing is carried out based on the legal provisions of § 96 section 3 Telecommunications Act and Article 6 section 1 lit a (consent) and/or f (legitimate interest) of the GDPR.
Our concern in the sense of the GDPR (legitimate interest) is the improvement of our offer and our website. Since the privacy of our users is important to us, the user data is pseudonymised.
With our newsletter (only available in German) we provide information about our current research activities as well as selected research results.
You have the opportunity to subscribe to our newsletter via our website. For this, we need your e-mail address and your declaration that you agree with the subscription to the newsletter. As soon as you have subscribed to the newsletter, we will send you an e-mail with a link to confirm the registration. You can cancel the subscription to the newsletter at any time. Your data will thus be processed based on revocable consent at any time. Certain groups of people receive the newsletter in the legitimate interest of us. The data will not be disclosed to third parties. The storage period is limited to the end of the subscription.
You have the right to access and correct your personal information, to rectification, erasure, restriction of processing, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can lodge a complaint with the supervisory authority. In Austria this authority is named “Datenschutzbehörde”.