Source: https://www.ixolit.com/en/privacy-policy-b2b
Timestamp: 2019-02-18 14:47:47
Document Index: 448452225

Matched Legal Cases: ['Art 6', 'Art 6', 'Art 6', '§ 212', '§132', 'Art 22', 'Art 15', 'Art 17', 'Art 18', 'Art 20', 'Art 77']

IXOLIT | Privacy Policy - B2B
IXOLIT Privacy Policy for Contracting Parties
For us, IXOLIT Group, comprising
kiwi suite GmbH, FN 475863z (each Mariahilfer Straße 77-79, 1060 Vienna)
This Privacy Policy explains to you the nature, extent and purposes of the processing of your personal data within the scope of your business relationship with us. Information about our processing activities within our online services can be found under “Data Protection” on the websites of the IXOLIT Group: www.ixolit.com, www.ixopay.com; additionally for the services “IXOAds” www.ixoads.com as well as “Moreify” www.moreify.com.
Personal particulars & contact details:
Bank details (as far as communicated by you)
For the performance of a contract (Art 6 (1) lit b GDPR)
Based on your consent (Art 6 (1) lit a GDPR)
If you have consented to the processing of your personal data, it will only be processed for the purposes specified in the declaration of consent and to the extent agreed therein. A given consent can be withdrawn at any time by e-mail or letter to our address stated in Section 8.7. The withdrawal of consent shall not aﬀect the lawfulness of processing based on consent before its withdrawal.
For the purpose of legitimate interests (Art 6 (1) lit f GDPR)
If necessary, we process your data on the basis of our legitimate interests or the legitimate interests of third parties.
Legitimate interests are in particular:
We will inform you in advance of processing or collecting personal data for other purposes other described in this document.
To the extent necessary, we provide your personal data to the following service providers (acting as “processors”) outside IXOLIT Group that support us in the performance of our services
Apart from that, we transmit your personal data to the extent necessary to the following recipients (acting as “controller”):
Only if necessary for the fulfilment of our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests, we process your data in a third country outside the European Union (EU) or the European Economic Area (EEA) or within the use of third parties’ services. We have implemented appropriate safeguards for any transfer of your data to a third country (e.g. towards US recipients by means of the "Privacy Shield" or the conclusion of so called "Standard Data Protection Clauses"). Upon your enquiry we can transmit a copy of those appropriate safeguards to you, provided processing activities are carried out in third countries.
We store your personal data only as long as necessary for the purposes for which they are processed, in particular for the duration of the entire business relationship (from initiation to performance up to termination of a contract). Beyond that, we might be obligated to keep your data in accordance to statutory retention periods.
Specifically, we store your data in connection with your enquiries, business letters and contract documents in accordance with statutory retention periods (inter alia § 212 BAO, §132 UGB) for a time period of seven years.
If we collect access data and log files as a part of our services, such data is stored for a maximum time period of 500 days and are erased subsequently.
We store data in connection with your registration and your user account (e.g. for deliverables of our service “moreify”, www.moreify.com) until the end of your client relationship with us or, moreover, until the expiry of statutory retention periods (cf Section 5.2).
In specific cases, we store your personal data beyond the above-mentioned retention periods for as long as necessary for the establishment, exercise or defence of legal claims out of our legal relationship.
Within our business relationship, you must provide us with personal data required for the performance of our contractual obligations towards you and for voluntary services and performances, as well as data that we are legally obliged to collect (e.g. name, company, VAT number, address, telephone number, bank details). Data to be provided by is typically marked with an (*) as a mandatory field. If you do not provide us with such data, we will generally have to refuse to enter into a contract or execute the order, or we will no longer be able to perform an existing contract and will therefore have to terminate it.
You are not obliged to consent to data processing with regard to data which is not relevant for the fulfilment of the contract or which is not legally required.
We do not use automated decision-making pursuant to Art 22 GDPR in order to reach a decision on the establishment and performance of the business relationship or other decisions that would significantly aﬀect you.
You have the right to access your personal data that is being processed by us. Apart from that, you have the right to rectification of inaccurate or incomplete data (Art 15 et seq GDPR).
You have a right to erasure (Art 17 GDPR) if (i) your personal data is no longer necessary for the purposes for which we have collected it, (ii) you withdraw your consent and there is no other legal basis for processing by us (cf. Section 3), (iii) you object to the processing and there are no overriding legitimate grounds for the processing (except in the case of processing for direct marketing purposes), (iv) your personal data has been unlawfully processed or (v) for compliance with our legal obligations.
You have the right to restrict the processing (Art 18 GDPR) if (i) you contest the accuracy of your personal data, for a period enabling us to verify the accuracy, (ii) the processing is unlawful and you oppose the erasure of the data and request the restriction of its use instead, (iii) your personal data is no longer necessary for the purposes of the processing, but required by you for the establishment, exercise or defence of legal claims or if (iv) you have objected to processing pending the verification whether our interests override.
Subject to the terms of Art 20 GDPR you have the right to receive personal data that you have provided to us in a structured, transferable format (right to data portability).
Additionally, you have the right to withdraw your consent free of charge at any time, without aﬀecting the lawfulness of processing based on consent before its withdrawal.
Finally, you have the right to lodge a complaint with the competent supervisory authority (Art 77 GDPR), for Austria: Österreichische Datenschutzbehörde, Wickenburggasse 8, 1080 Vienna.