Source: https://www.mic-cust.com/privacy/
Timestamp: 2019-04-26 02:50:36+00:00

Document:
We are strongly committed to protecting your data; therefore we process your personal data in strict compliance with the applicable data protection regulations, including, but not limited to, GDPR and DPA.
We are not under a legal obligation and therefore we have not registered a data protection officer with the Data Protection Authority.
Purpose: Processing and transfer of data within the framework of business relationships with Customers and suppliers, including text documents (such as e.g. correspondence) in such matters created and archived by automated means.
Legal basis: The performance of a contract, necessary to take steps prior to entering into a contract (Art 6 para 1 subpara b GDPR), compliance with a legal obligation (Art 6 para 1 subpara c GDPR), pursuit of legitimate interests, esp. warding off, exercising and establishing claims (Art 6 para 1 subpara f GDPR), explicit consent (Art 9 para 2 subpara a GDPR), necessary for carrying out the legal obligations relating to employment and social security (Art 9 para 2 subpara b GDPR).
Retention period: Until the business relationship ends or until the periods of guarantee, warranty, limitation and statutory retention (esp. BAO) applying to the Customer expire; beyond that, until any legal disputes in which the data is needed as evidence have been resolved.
Categories of recipients: Legal representatives; courts; banks for managing payment transactions; public accountants for auditing purposes; competent administrative authorities, esp. tax authority; collection agencies for debt collecting; debt financers such as leasing or factoring companies and assignee, where the trade payables are externally financed that way; contract or business partners cooperating or expected to cooperate in products or services; insurers when an insurance policy relating to the products/services is taken out or an event covered by insurance occurs; Bundesanstalt “Statistik Österreich” (Austrian Statistical Office) for creating the (official) statistics required by law; group management of the Controller, suppliers as well as trade customers and key accounts, Customers (services recipients).
Purpose: Processing and transfer of data for payroll and remuneration and compliance with obligations to keep records, provide information and register to the extent required by laws or standards of collectively agreed provisions or obligations under employment contracts, including text documents (such as e.g. correspondence) in such matters created and archived by automated means. Such use is permitted to any Customer who employs people under a private law contract, except those employees to which the special uses by public-sector employers apply; using and keeping on record personal data of applicants if those data were provided by the data subject and/or recruiters.
Legal basis: Consent (Art 6 para 1 subpara a GDPR), performance of a contract, necessary to take steps prior to entering into a contract (Art 6 para 1 subpara b GDPR), compliance with a legal obligation (Art 6 para 1 subpara c GDPR), pursuit of legitimate interests, esp. warding off, exercise and establishment of legal claims (Art 6 para 1 subpara f GDPR), explicit consent (Art 9 para 2 subpara a GDPR), necessary for carrying out the legal obligations relating to employment and social security (Art 9 para 2 subpara b GDPR), establishment, exercise and defense of legal claims (Art 9 para 2 subpara f GDPR), duty of care required by law (Art 10 GDPR in conjunction with § 4 para 3 subpara 2 DPA), legitimate interest (Art 10 GDPR in conjunction with § 4 para 3 subpara 2 DPA).
Retention period: Until the relationship with the data subject ends, and beyond that until the statutory retention period ends or as long as legal claims against the Employer can be established under the employment relationship (esp. issuing of references by employers etc.). Applicant data are deleted without undue delay when the advertized vacancy is filled, unless the applicant agrees to his/her data being kept on record; unsolicited applications are kept on record. The period of keeping data on record is 5 years; after 5 years the data kept on record are deleted.
Recipients/Categories of recipients: Creditors of the data subject as well as other parties involved in the relevant prosecution, if applicable, also in the case of voluntary wage assignments for repayment of loans, if applicable; social insurance funds (including company health insurance funds); election committee for works council elections; Labor Inspectorate, Transportation Labor Inspectorate and Agricultural and Forestry Inspectorate, esp. according to § 8 Work Inspection Act; bodies of employee representations (esp. works council according to § 89 subpara 4 ArbVG (Labor Constitution Act), Safety and Health Officers according to § 10 ASchG (Occupational Safety and Health Act), Youth Representative according to § 125ff ArbVG and Representative for Disabled Employees according to § 22a Disabled Persons Employment Act); municipal authorities in connection with administrative police agendas; district administration offices in connection with administrative police agendas (trade authorities, responsibilities under ASchG, etc.); Apprenticeship Office according to § 19 BAG (Vocational Training Act) and vocational colleges; Arbeitsmarktservice (job center); Construction Workers' Vacation and Severance Payment Fund; Federal Office of Social Affairs and Disabled Persons e.g. § 16 Disabled Persons Employment Act (BEinstG); Tax Office; insurance institutions within the framework of existing collective or individual insurance; banks managing payment to the data subject or to third parties; trade union specified by the employee with the consent of the data subject; statutory bodies set up for representing the interests of professional associations; Works Council Fund according to § 73 para 3 ArbVG; works doctors; pension funds; Rechnungshof (Court of Auditors); legal representatives; courts; additional insured persons; Staff Provision Fund (MVK) according to § 11 para 2 subpara and § 13 BMVG (Federal Act on Corporate Staff and Self-Employment Provision).
Purpose: Use of own or purchased customer or prospect data for initial business contact relating to own range of products and services, including text documents (such as e.g. correspondence) in such matters created and archived by automated means.
Legal basis: Consent (Art 6 para 1 subpara a GDPR), performance of a contract, necessary to take steps prior to entering into a contract (Art 6 para 1 subpara b GDPR), pursuit of legitimate interests, esp. warding off, exercise and establishment of legal claims (Art 6 para 1 subpara f GDPR).
Retention period: The data may be kept until the end of the third year after the last contact with the Customer, unless longer contractual or statutory retention periods are in place.
Purpose: Camera that allows viewing of live image in the entrance area at Hafenstraße without recording footage for visual access control due to poor acoustic conditions: Protection of property and protection of the Controller’s employees and the responsibility to protect (duty to implement safety precautions, contractual liability to Customers etc.).
Legal basis: Compliance with a legal obligation (Art 6 para 1 subpara c GDPR), legitimate interest (Art 6 para 1 subpara f GDPR), § 12 para 2 DPA, establishment, exercise or defense of legal claims (Art 9 para 2 subpara f GDPR), legitimate interest.
Retention period: No recording, only live image.
Purpose: System access control and identity management for the Customer’s data applications, and management of the allocation of hardware and software to the system users, including text documents (such as e.g. correspondence) in such matters created and archived by automated means.
Legal basis: Compliance with a legal obligation, esp. compliance with access controls (e.g. password guideline) or access authorizations (Art 6 para 1 subpara c GDPR), pursuit of legitimate interests, esp. warding off, exercise and establishment of legal claims (Art 6 para 1 subpara f GDPR).
Retention period: The data is erased when the system rights of the data subject have expired and all legal disputes in which the data is needed as evidence have been resolved. The data is definitely deleted when legal retention periods are no longer applicable.
Purpose: Building access and marked area access authorization checking by the owner or authorized person using facilities which collect and store personal data by automated means, including text documents (such as e.g. correspondence) in such matters created and archived by automated means.
Legal basis: Consent (Art 6 para 1 subpara a GDPR), performance of a contract, necessary to take steps prior to entering into a contract (Art 6 para 1 subpara b GDPR), compliance with a legal obligation to implement technical and organizational measures for the protection of personal data (Art 6 para 1 subpara c GDPR), pursuit of legitimate interests, esp. warding off, exercise and establishment of legal claims (Art 6 para 1 subpara f GDPR), explicit consent (Art 9 para 2 subpara a GDPR), necessary for carrying out the legal obligations relating to employment and social security (Art 9 para 2 subpara b).
Retention period: Until the access authorization expires, and beyond that as long as a legal retention period is in place or legal claims against the Employer can be established under the employment relationship. If no specific retention periods are in place, the data shall be erased six months after the expiry date of the access authorization.
We are using the website analysis services Google Analytics and Marketo on our website. These website analysis services use so-called cookies, i.e. small text files that are stored on your terminal equipment (computer, smartphone, etc.) by your web browser, which allow us to analyze how the website is used by its users. The data generated thereby are transferred to the provider’s server and stored there.
You can change your cookies settings in your browser at any time so that no cookies are stored.
Recipients: Company of the analysis service / service provider; a contract data processing agreement was entered into.
Please note that according to Art 21 GDPR you have the right to object, on grounds relating to your particular situation, at any time toprocessing of personal data concerning you. This applies only if the processing is necessary for the purposes of legitimate interests pursued by us or by a third party (Art 6 para 1 subpara f GDPR).
Please refer to Article 3 to find out how you can exerciseyour right to object.
You can elect to subscribe to a newsletter via our website by using the opt-in subscription form to give your consent.
Please note that you have the right to withdraw your consent at any timewithoutgiving reasons. Your withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Please refer to Article 3 to find out how you can exerciseyour right to withdraw consent.
3.1. You have the right of access (Art 15 GDPR), the right to rectification (Art 16 GDPR), the right to erasure (Art 17 GDPR), the right to restriction of processing (Art 18 GDPR), the right to data portability (Art 20 GDPR) and theright to object (Art 21 GDPR).
If you have consented to processing of your personal data, you have the right to withdraw your consent at any time. Your withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Please note that you can only obtain information from us if you can identify yourself to us.
3.2. If you believe that we have not adhered to the applicable data protection regulations or that we have committed data breach of your personal information, you have the right to lodge a complaint with the supervisory authority.
To prevent the capture of your user data by Google Analytics on this site only by clicking on the following link. An opt-out cookie will be set that will prevent your data from being collected on future visits to this site. Click here to be excluded from the Google Analytics measurement.

References: § 4
 § 4
 § 8
 § 89
 § 10
 § 125
 § 22
 § 19
 § 16
 § 73
 § 11
 § 13
 § 12
 Art 21