Data privacy statement of IQ Wien 21

In addition to the data processed ZGS Privacy Statement by ZGS Bildungs-GmbH and me/us as joint controllers according to Art. 26 of the General Data Protection Regulation (GDPR), I/we also process some of your personal data in my/our own right as sole controller. I/we undertake to collect, transfer, store and otherwise process this data in compliance with the applicable regulations for the protection of personal data, and to do so only for legitimate business interests including for the purpose of negotiating and performing a contract. You will find below more detailed information about how Richar Wieland, Franz-Jonas-Platz 8, A-01210 Wien 21 Floridsdorf, 0664/5125469, richard.wieland@schuelerhilfe.com (data controller) collect, store, transfer and otherwise process your personal data. The data protection officer is: Richard Wieland, c/o IQ Wien 21, Franz-Josef-Platz 8, 1210 Vienna, 0664 541 44 40, wien21@iq-wissen.com.

1. Data privacy prior to and on registration

I/we process the personal data collected prior to registration in order to contact you, to inform you of my/our offers, for the purpose of negotiating and performing a contract, and for purposes of advertising. The data is also used for statistical purposes. The lawful basis for processing is your agreement pursuant to Article 6 (1) sentence 1a of the GDPR, and Article 6 (1) sentence 1b of the GDPR and Article 6 (1) sentence 1f of the GDPR. My/our legitimate interest follows from the purposes described above.

2. Other enquiries

If you contact me/us for other reasons, I/we will save your personal data and the content of your enquiry for the purpose of responding to your enquiry. The data will also be used for statistical purposes. The legal basis for processing is Art. 6 (1) sentence 1f of the GDPR. My/our legitimate interest follows from the purposes described.

3. Transferring data

To enable me to fulfil my/our contractual and legal obligations, specialist companies or divisions of the Schülerhilfe Group perform certain data processing tasks centrally on my/our behalf. Service providers used by me/us may also receive data for these purposes as long as they comply with my/our data privacy instructions.

With regard to sharing information with third parties, please note that I/we are allowed to pass on personal data only if required to do so by law, if you have given valid consent, and/or if the processor we have engaged has guaranteed to implement measures that meet the requirements of the DGPR or the German Data Protection Act. Subject to these constraints, we may transfer personal data to a processor in order to, for example, conduct a business relationship with you. Or more specifically: support/maintenance of IT applications; archiving; call centre services; controlling; data destruction; debt collection; marketing; telephone services; website management. Data may also be transferred to third parties if you have explicitly consented to the transfer.

4. Erasure

I/we will process and retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal requirements. We will regularly delete data that is no longer needed for the purposes of satisfying our legal obligations, unless further (time-limited) processing is necessary for the following purposes:

  • To comply with commercial and tax retention periods as stipulated in the German Commercial Code and the German Fiscal Code. The record retention periods specified in these Codes range from seven to ten years.
  • To retain supporting documents in compliance with statutory limitation periods. According to §§ 1479,1489 ABGB), limitation periods may be up to 30 years, although the standard limitation period is three years.

5. Data subject rights

You have the right of access under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restrict processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR, and the right to data portability under Article 20 of the GDPR. You also have the right to raise an objection with a data protection authority (Article 77 GDPR). Where our processing of your personal information is based on your consent, you have the right to withdraw your consent at any time. Please note that if you withdraw your consent, this will only affect future processing. The withdrawal of your consent will not affect any of our processing up to that point.