Source: https://www.wastebox.biz/en/data-protection/
Timestamp: 2018-12-14 11:29:16
Document Index: 316833642

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 22', 'Art. 46', 'Art. 21', 'Art. 6', 'Art. 9', 'Art. 21', 'Art. 21', 'Art. 8', 'Art. 17', 'Art. 9', 'Art. 9', 'Art. 89', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 6', 'Art. 78']

Wastebox – Data protection
The responsible party in the sense of the General Data Protection Regulation and other national data protection laws as well as other statutory data protection provisions is:
Tel.: +43 59 800 5000
Email: office@wastebox.biz
The responsible party’s data protection officer can be reached using the following contact information:
Email: datenschutz@wastebox.biz
We collect and use personal data for our users only to the extent that this is necessary in order to provide a functional website as well as our content and services. As a rule, the collection and use of our users’ personal data only takes place with prior consent from the user. An exception applies in cases where it is not possible to obtain consent in advance for practical reasons, and where data processing is permitted by the statutory provisions.
If and to the extent that we obtain consent from the relevant persons to process their personal data, Art. 6 Sec. 1 lt. a EU General Data Protection Regulation (GDPR) serves as the legal basis for processing personal data.
When processing personal data that is necessary in order to fulfill a contract with the relevant person, Art. 6 Sec. 1 lt. b GDPR serves as the legal basis. This also applies to processing steps that are necessary in order to perform pre-contractual measures.
If and to the extent that personal data must be processed in order to fulfill a legal obligation for our company, Art. 6 Sec. 1 lt. c GDPR serves as the legal basis.
In the event that vital interests of the relevant persons or of another natural person necessitate the processing of personal data, Art. 6 Sec. 1 lt. d GDPR serves as the legal basis.
If data processing is necessary in order to protect a justified interest of our company or of a third party, and if the interests, basic rights and basic liberties of the relevant party do not outweigh the former interest, Art. 6 Sec. 1 lt. f GDPR serves as the legal basis for such processing.
Personal data for the relevant persons will be deleted or blocked as soon as the reason for storing it no longer applies. Longer storage periods may apply as required by European or national legislation in Union ordinances, laws, or other regulations to which the responsible party is subject. Data will also be deleted or blocked once a storage period established by the abovementioned standards comes to an end, unless the data must continue to be stored for the purpose of concluding or executing a contract.
4. Availability of the website and creating log files
Each time our website is called up, our system automatically records data and information from the visitor’s computer system.
This data is also stored in our system’s log files. It does not include the user’s IP addresses or other data that would allow the collected data to be assigned to a specific user. The data is not stored in conjunction with the user’s other personal data.
We use the data to optimize the website and to ensure the security of our information technology systems. This also constitutes our justified interest in data processing as per Art. 6 Sec. 1 lt. f GDPR.
Our website uses cookies. Cookies are text files that are saved in the user’s internet browser and/or by the internet browser on the user’s computer system. When a user calls up a website, a cookie can be stored in the user’s operating system. This cookie contains a unique string of characters that allow the browser to be clearly identified the next time it calls up the website. Cookies that are already on the computer can be deleted at any time. You can find instructions for this in your browser settings (under “Help” in the browser menu).
We use cookies to make our website more user-friendly. Some elements on our website also require the visiting browser to be identified after going to a new page.
Auto-fill function for entry forms
User data that is collected in this way is rendered pseudonymous by technical means. Therefore it is no longer possible to assign the data to the visiting user. This data is not saved together with any other personal data for the user.
When users visit our website, an info banner informs them about the use of cookies for analytical purposes and refers them to this Data Protection Statement. In this context, there is also information about how to prevent cookies from being stored by adjusting the browser settings.
The purpose of implementing technically necessary cookies is to make it easier for users to use the websites. Some of the features on our website cannot be offered without the use of cookies. It must be possible to recognize the browser even after the user goes to a new page on the site.
Analysis cookies are used to improve the quality of our website and its content. The analysis cookies tell us how the website is being used, which allows us to continuously improve our offerings. We use analysis cookies for the following purposes:
In order to improve the efficiency of our website, we use the services of Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses “cookies.” These are text files stored on your computer that enable analysis of your website usage. Information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the United States and saved there. In order to protect users’ interests in protecting their personal data, this is done through anonymization of the data. Thus your IP address is not recognizable when it is transmitted to Google.
You can prevent storage of Google cookies by adjusting your browser settings appropriately; in this case, however, please note that you might not be able to fully use all functions offered by this website. In addition, you can prevent data generated by the cookie and relating to your use of the website (including your IP address) from being collected and processed by Google, by downloading and installing a browser plug-in from the following link: tools.google.com/dlpage/gaoptout
This website also uses cookies to contact visitors with online advertisements at a later time via remarketing campaigns in the Google advertising network. In order to place remarketing ads, third-party providers like Google use cookies based on your visit to our website. You as the user have the option to disable Google cookies by calling up the following page to disable Google at www.google.com/ads/preferences.
The user’s encrypted IP address
The legal basis for processing data is our justified interest in improving efficiency and in financing the website in the sense of Art. 6 Sec. 1 lt. f GDPR.
Transmitting the anonymized IP address to Google helps us improve the efficiency of our website and create corresponding anonymized analyses of user behavior as well as financing this website.
The data is deleted as soon as it is no longer needed to achieve the stated purpose.
7. Rights of the relevant person
If your personal data is processed, you are the relevant person, and you have the following rights with regard to the responsible party:
You can request confirmation from the responsible party about whether your personal data is being processed by us.
(4) the planned storage period for your personal data or, if no concrete information can be provided in this regard, criteria for determining the storage period;
(7) all available information regarding the origin of the data if the personal data is not collected from the relevant person;
(8) whether there is an automated decision-making process, including profiling as per Art. 22 Sec. 1 and 4 GDPR, and – at least in these cases – meaningful information about the involved logic and reach as well as the intended effects of such processing for the relevant person.
You have the right to request information about whether your personal data is transmitted to a non-EU country or an international organization. In this context, you can ask to be informed about the appropriate guarantees as per Art. 46 GDPR in conjunction with this transmission.
You have a right to ask the responsible party to correct and/or complete your personal data if your processed data is incorrect or incomplete. The responsible party must perform such corrections immediately.
Under the following conditions, you can request that processing of your personal data be limited if:
(1) you dispute the accuracy of your personal data for a period of time that allows the responsible party to check the accuracy of the personal data;
(2) the processing is illegal and you waive the right to delete the personal data, instead asking to limit use of the personal data;
(3) the responsible party no longer needs the personal data for the stated processing purposes, but you need it in order to assert, exercise or defend legal claims, or
(4) you have raised an objection to the processing as per Art. 21 Sec. 1 GDPR and it is not yet clear whether the responsible party’s justified reasons outweigh your reasons.
If processing has been limited according to the abovementioned requirements, you will be informed by the responsible party before the limitation is lifted.
You can ask the responsible party to delete your personal data immediately, and the responsible party is obligated to delete this data immediately, if one of the following reasons applies:
(2) You revoke your consent, which was the basis for processing as per Art. 6 Sec. 1 lt. a or Art. 9 Sec. 2 lt. a GDPR, and there is no other legal basis for the processing.
(3) You object to the processing as per Art. 21 Sec. 1 GDPR and there are no prior-ranking justified reasons for processing, or you object to the processing as per Art. 21 Sec. 2 GDPR.
(5) It is necessary to delete your personal data in order to fulfill a legal obligation under Union law or the law of the member states to which the responsible party is subject.
(6) Your personal data was collected with regard to information society services as per Art. 8 Sec. 1 GDPR.
If the responsible party has published your personal data and is obligated to delete it as per Art. 17 Sec. 1 GDPR, it will take appropriate (technical) measures – with consideration for the available technology and the implementation costs – to inform the parties responsible for processing your personal data that you as a relevant person have asked them to delete all links to this personal data and any copies or replications of this personal data.
The right to deletion does not apply if processing is required:
(2) to fulfill a legal obligation that requires processing according to the law of the Union or the member states to which the responsible party is subject, or to perform a task that is in the public interest or was assigned to the responsible party in the exercise of public authority;
(3) for the sake of public interest in the sphere of public health as per Art. 9 Sec. 2 lt. h and i as well as Art. 9 Sec. 3 GDPR;
(4) for archival purposes, scholarly or historical research purposes that are in the public interest, or for statistical purposes as per Art. 89 Sec. 1 GDPR, to the extent that the right named in Section a) will likely make it impossible to realize the objectives of this processing or will significantly impair it, or
If you have asserted your right to have the data corrected or deleted or its processing limited by the responsible party, this party must inform all recipients to whom your personal data was disclosed about this correction or deletion of data or limitation on processing, unless this is impossible or is associated with an unreasonable effort or cost.
You have the right to be informed about these recipients by the responsible party.
You have the right to obtain your personal data that you provided to the responsible party in a structured, common and machine-readable format wherever technically possible. In addition, you have the right to provide this data to another responsible party without hindrance from the responsible party that was originally provided with the personal data as long as
(1) the processing is based on a declaration of consent as per Art. 6 Sec. 1 lt. a GDPR or Art. 9 Sec. 2 lt. a GDPR or on a contract as per Art. 6 Sec. 1 lt. b GDPR and
In exercising this right, you are also entitled to have the relevant personal data transmitted directly from one responsible party to another responsible party wherever technically possible. In doing so, other people’s freedoms or rights may not be impaired.
The right to data portability does not apply to the processing of personal data that is necessary in order to perform a task that is in the public interest or was assigned to the responsible party in the exercise of public authority.
For reasons relating to your particular situation, you have the right to object at any time to the processing of your personal data that takes place on the basis of Art. 6 Sec. 1 lt. e or f GDPR.
The responsible party will no longer process your personal data in this case unless it can demonstrate urgent, legitimate grounds for such processing that outweigh your interests, rights and freedoms, or unless such processing is being used to assert, exercise or defend legal claims.
If your personal data is being processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling where this is connected to such direct advertising.
If you raise an objection to processing for the sake of direct advertising, your personal data will no longer be processed for this purpose.
You have the option to exercise your right to object in conjunction with the use of information society services – regardless of Directive 2002/58/EC – by way of automated processes in which technical specifications are used.
You have the right to revoke your declaration of consent under data protection law at any time. Revoking your consent will not affect the legality of any processing that took place before the revocation.
9. Right to submit a complaint to a supervisory authority
Regardless of any other administrative or judicial action, you have the right to submit a complaint to a supervisory authority, particularly in the member state where you are located, at your workplace, or in the city of the alleged violation, if you believe that the processing of your personal data violates the GDPR.
The supervisory authority to which the complaint is submitted will then inform the complainant about the status and results of the complaint, including the possibility of taking legal action as per Art. 78 GDPR.