Data protection
The protection and security of personal data is particularly important to us. Your personal data will be treated confidentially and in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the Data Protection Act (DSG), and the Telecommunications Act (TKG 2003), as well as this privacy policy. You can rely on us completely in this regard.
In accordance with Article 13 of the General Data Protection Regulation (GDPR), we would like to provide you with the following information about the personal data we collect from you as the data controller.
Data controller
Citycom Telekommunikation GmbH, Gadollaplatz 1, A-8010 Graz
Contact data protection officer at Citycom Telekommunikation GmbH
Gadollaplatz 1, A-8010 Graz
Email: datenschutz@citycom-austria.com
The explanations below provide you with an overview of the categories of personal data that concern you and, in each case, the following information:
- the purposes for which the personal data is to be processed and the legal basis for the processing;
- where applicable, the recipients or categories of recipients of the personal data;
- the storage period, or if this is not possible, the criteria for determining this period;
- the source of the personal data and, where applicable, whether it comes from publicly available sources.
What personal data does Citycom process?
- Data of company contact persons (name, address, contact details, position in the company)
- Identification data (e.g., ID card data)
In addition, the following data may also be included:
- order data (e.g., payment orders);
- data from the fulfillment of our contractual obligations (e.g., sales data in payment transactions);
- advertising and sales data;
- documentation data (e.g., appointment logs, tickets submitted);
- image data (e.g., video recordings in data centers);
- data for the fulfillment of legal and regulatory requirements;
- telephone call data (e.g., itemized bills in payment transactions);
- IP and MAC addresses (Internet and telephone systems);
- user content (e.g., content on your website).
For what purposes and on what legal basis is the data processed?
- To fulfill contractual obligations (Art. 6 (1b) GDPR): We use your contact and order data (personal data, Art. 4 No. 2 GDPR) to set up and maintain our products and services and for administrative purposes. This includes, for example, procurement, technical support, consulting, software upgrades, and invoicing.
- Within the scope of your consent (Art. 6 (1a) GDPR): If you have given us your consent to process your personal data, processing will only take place in accordance with the purposes specified in the declaration of consent and to the extent agreed therein. Consent that has been given can be revoked at any time with effect for the future, unless this is contrary to legal provisions.
- To fulfill legal obligations (Art. 6 (1) (c) GDPR): Certain legal obligations to which Citycom Telekommunikation GmbH is subject, such as the Telecommunications Act 2003 (TKG 2003), require us to carry out data processing.
- To safeguard legitimate interests (Art. 6 (1) (f) GDPR): Our data centers are monitored by video surveillance for the protection of property and to prevent criminal activity.
Where do we obtain your data?
We obtain your data through personal contact or from contact persons provided by your company or when you enter it in the contact form on our website. We also use the Herold database for customer acquisition.
Who receives your data?
- Holding Graz receives the data it needs to carry out accounting.
- In addition, processors commissioned by us (e.g., service centers, market research institutes, IT service providers, wholesale providers) receive your data if they need it to perform their respective tasks. All processors are contractually obligated to treat your data confidentially and to process it only within the scope of service provision.
- Consultants, auditors, and authorities such as tax advisors, the Court of Auditors
- Debt collection agencies and credit protection associations
- Insurance companies (in the event of damages)
How long will your data be stored and processed?
- For the duration of the entire business relationship (from initial contact to order processing to termination of the contract or pending legal proceedings) and beyond, until the end of the statutory retention and documentation obligations (e.g., tax retention obligation pursuant to Section 132 (1) BAO (Federal Fiscal Code), which is 7 years)
Are you obliged to provide data?
- You must provide the personal data that is necessary for the establishment and execution of our business relationship or that we are legally obligated to collect. If you do not wish to provide us with this data, we will generally have to refuse to conclude the contract or execute the order. In this case, we will no longer be able to fulfill an existing contract and will therefore have to terminate it.
- If we ask for your consent to process data, you are not obliged to give this consent. Without consent, this data processing will not take place, but there will be no further consequences.
Is your data transferred to third countries?
Citycom does not currently transfer any data to third countries or international organizations and does not intend to do so.
Does Citycom process data for web analysis?
Cookies
Our website uses cookies. These are small text files that are stored on your device with the help of your browser. They do not cause any damage.
We use cookies to make our website more user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser the next time you visit.
If you do not want this, you can set your browser to inform you about the setting of cookies and only allow this in individual cases.
If you deactivate cookies, the functionality of our website may be limited.
What rights do I have regarding my personal data?
We would also like to draw your attention to the following rights that you have under the GDPR with regard to your personal data:
- Right to information under Art. 15 GDPR: You have the right to be informed whether your personal data is being processed, as well as the scope and details of this processing.
- Right to rectification under Art. 16 GDPR: You have the right to request the rectification of your data if it is inaccurate.
- Right to erasure under Article 17 GDPR: You have the right to request the erasure of your data under certain conditions.
- Right to restriction of processing under Article 18 GDPR: You have the right to request that the processing of your data be restricted under certain conditions.
- Right to data portability pursuant to Art. 20 GDPR: You have the right to receive/recover the data you have provided to the controller in a commonly used format.
- Right to object pursuant to Art. 21 GDPR: You have the right to object to certain processing of your data for specific reasons.
Furthermore, you also have the right to lodge a complaint with the data protection authority. In this regard, we also refer you to the homepage of the data protection authority, which can be accessed at https://www.dsb.gv.at/.
