PRIVACY POLICY
Privacy Policy of HQ Office GmbH
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations as well as this Privacy Policy. With this statement, we would like to inform you about the processing of your personal data in connection with the use of our website.
1. Definitions
Personal data refers to any information relating to an identified or identifiable natural person, such as name, address, email address, telephone number, date of birth, age, gender, social security number, video recordings, photographs, etc. Data relating to legal entities is not subject to the provisions of the GDPR.
Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Verantwortlicher ist die natürliche oder juristische Person, Behörde, Einrichtung oder andere Stelle, die allein oder gemeinsam mit anderen über die Zwecke und Mittel der Verarbeitung von personen-bezogenen Daten entscheidet.
Controller means the natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
Recipient means a natural or legal person, public authority, agency, or another body to whom personal data is disclosed, whether or not they are a third party.
2. Data Processing When Visiting Our Website (www.horizonquarter.com)
When you visit our website, we process your personal data only to the extent necessary to provide the website and its content in a functional manner. Accordingly, we process the personal data that your browser automatically transmits to our server in so-called server log files. This includes, in particular, your IP address.
Apart from this, we do not process personal data when you visit our website, but exclusively technical data. This data cannot be attributed to specific individuals. Such data is not combined with other data sources. We reserve the right to review this data retrospectively if concrete indications of unlawful use become known.
As a user of our website, you have the option to:
(i) contact us via a contact form provided on the website; and
ii) apply for a position at our company via an online application form.
In these cases, we additionally process the following personal data:
Contact Form
– Your name
– Your telephone number
– Your email address
– Any additional information you provide in the message field
Application Form
– Your name
– Your telephone number
– Your email address
– Date of birth
– Residential address
– All information you provide as part of your application, typically including details of your résumé, salary expectations, and any other information you choose to include
3. Purposes of Processing
The purposes of data processing are as follows:
· Ensuring a secure and user-friendly design of our website
· Detecting, preventing, and investigating attacks on our website and online services
· Creating usage statistics for analytical purposes
· Processing and responding to inquiries or applications submitted via the contact or application form
4. Legal Bases for Data Processing
The legal basis for data processing in connection with visiting our website is Art. 6(1)(f) GDPR, i.e., a legitimate interest in achieving the purposes stated above. Processing the data is necessary to safeguard our legitimate interests. No overriding interests of the website user conflict with this.
If you provide us with data via the contact or application form, processing is carried out for the purpose of initiating and performing a contract pursuant to Art. 6(1)(b) GDPR or on the basis of your (implied) consent pursuant to Art. 6(1)(a) GDPR. If invoicing information is involved (e.g., name, address, VAT ID, payment method), processing is additionally based on Art. 6(1)(b) GDPR, as such information must be processed due to accounting and tax obligations.
5. Data Retention Period
Your data is stored only for as long as necessary to fulfill the purposes stated above or as required by statutory retention obligations or for the assertion or defense of legal claims. If the data is no longer required to provide the website or fulfill our contractual obligations, it will be deleted, provided no contractual or statutory obligations prevent such deletion.
6. Disclosure of Data to Third Parties
To operate our website, we regularly engage IT service providers who, acting on our behalf and under our instructions, may have access to personal data processed as a result of your use of our website in order to provide the contracted services.
In individual cases, your personal data may also be disclosed to the following categories of recipients:
– External third parties to the extent necessary based on our legitimate interests (e.g., legal representatives)
– Authorities and other public bodies to the extent required by law (e.g., tax authorities, courts)
Your data will only be transferred to other recipients if you have given your explicit consent pursuant to Art. 6(1)(a) GDPR, if such transfer is legally permissible and necessary pursuant to Art. 6(1)(b) GDPR for the performance of a contractual relationship, if we are legally obliged to do so pursuant to Art. 6(1)(c) GDPR, or if the transfer is necessary pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests or to assert, exercise, or defend legal claims, provided that there is no reason to assume that you have an overriding interest in the non-disclosure of your data.
Your data will not be transferred to a third country.
7. Cookies
Cookies are small text files that the website stores on your computer in order to recognize you. They may contain information about your use of the website. The information stored in cookies is used to determine whether you are logged in or which data you have already entered. Most web browsers automatically accept cookies. You can prevent this by adjusting your browser settings. You may delete cookies stored on your computer at any time by deleting temporary internet files.
Some cookies are essential for the operation of the website (essential cookies). Others record visits and visitor origin and measure this data without establishing a personal reference (performance cookies). Certain cookies are used for marketing purposes (marketing cookies). Some cookies are stored only until you close the website (session cookies), while others are stored for a longer period and allow you to be recognized (persistent cookies).
Our website uses Borlabs Cookies. This is a technically necessary cookie used to store your cookie consent preferences. Borlabs Cookies does not process any personal data.
If personal data is processed through individual cookies or log files, such processing is carried out pursuant to Art. 6(1)(a) GDPR where consent has been given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring optimal website functionality, a user-friendly experience, and effective marketing.
When you first visit the website, you may choose which cookies you wish to allow via the cookie notice. Consent is required for marketing cookies. You may revoke your consent or change your cookie settings at any time via your browser settings.
8. Google Analytics
We use the technology “Google Analytics” to create statistics on access to our website. Google Analytics is a tracking tool for analyzing website traffic.
This service is provided by Google Ireland Limited, Google Building Gordon House
Google uses cookies for tracking purposes. Various pieces of information about your visit to our website are recorded, including browser type and version, operating system, previously visited website, time of access, approximate location, pages visited, and your IP address. Google processes this data and provides us with reports on certain aspects of user behavior.
The information may be transmitted to and stored on Google servers, including servers located in the United States. However, due to IP anonymization activated on this website, your IP address is truncated within EU member states before transmission.
You can prevent the storage of cookies by adjusting your browser settings. Please note, however, that this may limit the full functionality of the website. You may also prevent Google from collecting and processing data generated by cookies relating to your website use (including your IP address) by downloading and installing the browser plugin available at:
http://tools.google.com/dlpage/gaoptout?hl=de
9. Social-Media-Plug-ins
Our website uses social media plug-ins. These are small buttons that allow users to share content without leaving the website. The plug-ins originate from third-party social media platforms and may collect information about your internet activity, including on our website, and set cookies. We currently use plug-ins from the following platforms: LinkedIn, Facebook, Instagram, YouTube.
By clicking the respective button, you establish a direct connection with the provider. Only when you actively click the button does the plug-in provider receive the information that you have accessed our website. Personal data may then be transmitted to and stored by the provider, potentially in the United States. Further information regarding your rights and privacy settings can be found in the privacy policies of the respective providers.
10. Data Subject Rights
Under the GDPR, you are entitled to the following rights:
10.1. Right of Access
You have the right to request confirmation as to whether personal data is being processed; if this is the case, you have the right to access these personal data. The following information is included:
• the purposes of the processing;
• the categories of personal data;
• the recipients or categories of recipients;
• where possible, the intended period for which the personal data will be stored, or, if not possible, the criteria for determining that period;
• the existence of a right to rectification or erasure of the relevant personal data or to restriction of processing by the controller or a right to object to such processing;
• the existence of a right to lodge a complaint with a supervisory authority;
• all available information on the source of the data;
• the existence of automated decision-making, including profiling.
10.2. Right to Rectification
You have the right to request correction of inaccurate personal data and completion of incomplete data.
10.3. Right to Erasure
You have the right to request that the controller erase personal data without undue delay, provided that one of the following grounds applies:
• The personal data are no longer necessary for the purposes for which they were collected.
• You withdraw your consent on which the processing was based, and there is no other legal basis for the processing.
• You object to the processing (Art. 21(1) GDPR) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
• The personal data have been unlawfully processed.
• The erasure of the personal data is necessary to comply with a legal obligation.
• The personal data have been collected in relation to the offer of information society services pursuant to Article 8(1).
The right to erasure does not apply to the extent that processing is necessary:
• for the exercise of the right of freedom of expression and information;
• to comply with a legal obligation;
• for the performance of a task carried out in the public interest;
• for reasons of public interest in the area of public health;
• for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes;
• for the establishment, exercise, or defense of legal claims.
10.4. Right to Restriction of Processing
You have the right to request the restriction of processing if one of the following conditions applies:
• The accuracy of the personal data is contested, for a period enabling the controller to verify the accuracy of the personal data;
• The processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of their use;
• The controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims;
• You have objected to the processing pursuant to Article 21(1), as long as it is not yet determined whether the legitimate grounds of the controller override yours.
Where processing has been restricted, such personal data — aside from storage — may only be processed with your consent or for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for important reasons of public interest.
10.5. Right to Data Portability
You have the right to receive the personal data that you have provided to a controller in a structured, commonly used, and machine-readable format, and you have the right to transmit these data to another controller without hindrance by the controller to whom the personal data were provided, provided that the processing is based on consent or on a contract and the processing is carried out by automated means.
In exercising the right to data portability, you have the right to request that the personal data be transmitted directly from one controller to another controller, as far as this is technically feasible.
10.6. Right to Object
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data that is carried out pursuant to Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. The controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
10.7. Right to Withdraw Consent
You have the right to withdraw consent at any time, which is given pursuant to Art. 6(1)(a) or Art. 9(2)(a), without affecting the lawfulness of processing based on consent before its withdrawal.
10.8. Right to Lodge a Complaint
You have the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, Tel.: +43 1521522569, Email: dsb@gsb.gv.at, if you believe that the processing violates applicable data protection law.
10.9. Data Security
The protection of your personal data is ensured through appropriate organizational and technical measures. These measures specifically concern protection against unauthorized, unlawful, or accidental access, loss, processing, use, and manipulation.
11. Contact Details
You can contact us at any time using the contact details below if you have any questions or wish to withdraw your consent:
Address:
HQ Office GmbH
Sportplatzweg 15
6336 Langkampfen
Austria
Contact:
+43 (0)5332 25401
office@horizonquarter.com
12. Information on Online Dispute Resolution pursuant to Art. 14(1) ODR Regulation
The EU Commission provides the possibility of online dispute resolution on a platform operated by it (the so-called “ODR platform”). The ODR platform can serve as a point of contact for the out-of-court settlement of disputes arising from online purchase or service contracts. This platform can be accessed via the external link: http://ec.europa.eu/consumers/odr