Data protection

1. Data protection

The protection of your personal data is very important to us. Therefore, when collecting and processing your personal data, we strictly adhere to all legal requirements, in particular to the EU General Data Protection Regulation (hereinafter referred to as "GDPR" ) and the Austrian Data Protection Act in the currently applicable version.

In the following, we would like to explain their most important aspects and inform you about the scope and purpose of our data processing and your rights as a data subject:

2. Responsible and contact

We, this is the one

City of Baden
Hauptplatz 1, 2500 Baden
Tel: (+ 43) 2252 868 00
Fax: (+ 43) 2252 868 00 - 210
Mail: stadtamt@baden.gv.at
HP: http://www.baden.at/

If you have any questions about data protection, you can also send them directly to our data protection coordinators by email at datenschutz@baden.gv.at.

Data protection officer:

Urbanek Lind Schmied Reisch Rechtsanwälte OG attorney at law
Mag. Martin Führer, LL.M. 3100 St. Pölten, Domgasse 2
www.ulsr.at
office.st.poelten@ulsr.at

Data protection coordinator:

IT department
datenschutz@baden.gv.at

3. Collection and processing of personal data

Part I - Use of the website

A. Access data

Personal data
We are responsible for data protection 1 our website, available at www.greatspasofeurope.eu. We save the following data every time you visit and use our website:

  • IP address
  • Date and time of the request
  • Targeted subpage on our website, referrer URL
  • Type and version of browser and operating system

Purpose of data processing
The purpose of this data processing is to maintain our website, in particular to locate and correct errors more quickly, as well as to monitor utilization and, if necessary, make adjustments or improvements.

Legal basis
If there is any personal reference at all, the data security to be granted and the maintenance of the online presentation represent our legitimate interests within the meaning of Art 6 Paragraph 1 lit f GDPR and thus the legal basis .

Storage period
We also try to dispel data protection concerns by assuring you that the data (with the exception of the IP address) will only be stored for a limited period and that a personal reference cannot be made from this data because the associated IP address has been deleted or deleted is at least anonymized. The IP address of your computer is also only stored for the time you are using the website and then deleted or anonymized by being shortened. Only in the case of hacking attacks or the like, longer storage may be necessary to ensure the functionality and security of our website.

Transmission of the data
A transmission of your data to third parties does not take place.

B. Cookies

Personal data
We use cookies to improve our website, to make it as optimal as possible for you and for the purpose of website visitor statistics. The use and configuration of cookies is also carried out in accordance with European and Austrian legal provisions. 2 Cookies are small text files that are stored on your computer when you visit our website and enable your browser to be reassigned. Cookies store information (e.g. the length of time you stay on our website or your entries). This avoids having to re-enter all the required data each time you use it. Cookies also enable us to recognize your preferences and to tailor our offer to your areas of interest. We do not use any additional cookies that require consent. You can also generally completely prohibit the use of cookies by making the appropriate setting in your browser. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. The data stored in our cookies are not linked to your personal data (name, address, etc.). In the case of third-party cookies (such as analysis tools) you will find linked instructions for the following browsers: Internet Explorer, Firefox , Chrome . Apple Safari blocks third-party cookies by default.

Change Cookie Settings

Purpose of data processing
We use the tracking tool "Google Analytics" for visitor statistics . Specifically, the following analytics cookies are used in the standard configuration and stored for a period of 30 days: _ga , _gat . These cookies are set by Google Analytics and make it possible to monitor the use of this website and to improve the user experience. With their help, data about the use of our website is collected, which is used to create reports and to improve the website. Anonymous data such as the number of visitors, the website last visited by a user and the pages accessed by users on this website are collected.

Google Analytics is used to provide a web analysis service from Google Inc., 1600 Amphitheater sParkway, Mountain View, CA 94043, USA. This service uses so-called "cookies" (see above). The information generated by cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened in advance by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA or another third country and shortened there in certain cases.

Google uses this information on our behalf to evaluate your use of this website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The storage of the cookies required by Google Analytics can be prevented by setting your browser software accordingly; however, this can lead to it. that you may not be able to use all functions of this website to their full extent. The collection of the data generated by the cookie and related to your use of the website (incl. http://tools.google.com/dlpage/gaoptout?hl=de .

Legal basis
Again, our legitimate interests within the meaning of Art 6 Paragraph 1 lit f GDPR (including online service offer) and - if applicable - consent are our legal basis .

Revocation of Consent
You can revoke your consent at any time and without giving a reason by email to datenschutz@baden.gv.at. Where the processing is based solely on your consent and we are not legally obliged to store it, the relevant data will then be irrevocably deleted.

Transmission of the data
A transmission of your data to third parties (except in the illustrated above circumference) does not take place.

Part II - The community citizens

A. Legally required tasks

As a municipality, we have to fulfill numerous tasks in our own and transferred sphere of activity in the context of public administration, for which the processing of your personal data is necessary, such as:

  • Construction, local building police
  • Tax administration, administration of municipal finances Fire protection and rescue services
  • Construction and maintenance of public roads and squares
  • School maintenance and administration
  • Kindergarten maintenance and management
  • Reporting
  • Keeping civil status books
  • local spatial planning
  • local health police
  • local market police
  • local security police
  • Public sports and leisure facilities
  • Construction and maintenance of water and canal facilities
  • Garbage collection and disposal
  • Cultural institutions
  • Issuing birth, marriage and death certificates
  • Conducting elections
  • Participation in referendums, referendums and referendums
  • Keeping the population register, citizenship record
  • Honors according to the Lower Austrian Honors Act
  • Conducting various procedures of the 1st instance (Lower Austria Construction Office, Lower Austrian Municipal Water Supply Act, Lower Austrian Water Supply Act, Lower Austrian Canal Act, Lower Austrian Fire Act, Lower Austrian Event Act, Lower Austrian Utility Tax Act, StVO, Lower Austrian Road Act, water law procedures according to WRG, etc.)
  • Conducting various proceedings at the second instance, also before courts and authorities
  • Determination of a list of juries and lay judges
  • Lost property
  • Various legal obligations (Lower Austria HundehalteG, Lower Austrian BuschenschankG, Lower Austrian Events Act, Lower Austrian Childcare Act, Lower Austrian Funeral Services Act, Lower Austrian Disaster Aid Act, Building and Housing Register Act, Lower Austrian ROG, LiegenschaftteilungsG,

Personal data
The personal data that are used are listed in the respective underlying subject law. In addition to the processing or procedure-specific data, these are in any case:

  • Name, company
  • Address and contact details (phone, email)
  • Correspondence (e-mails, meeting minutes, letters) and other information you have provided
  • Payment and bank details (for processing payments, etc.)

In addition, we process data that we legitimately receive from publicly accessible sources (e.g. commercial register, land register, association register, etc.).

Purpose of data processing
The purpose is to fulfill the statutory obligation incumbent on us.

Legal basis
The aforementioned legal obligation or assigned task serves as the legal basis for this.

Storage period
We delete personal data that are no longer required to achieve the respective purpose after the expiry of the statutory retention requirements or after the expiry of the warranty and limitation periods or the duration of any ongoing legal disputes.

Transmission of the data
We do not transfer your personal data to third parties , except

  • we are legally obliged to
  • otherwise we are instructed to do so by you
  • or the transfer corresponds to the purpose of the data processing or

In particular, it may be necessary to transmit it to public bodies, e.g. tax authorities, judicial and prosecution authorities (e.g. police, public prosecutors, courts), lawyers and notaries as well as auditors. Furthermore, a transmission to public bodies and institutions, such as tax authorities, social insurance) and Statistics Austria may be required by law.

Processors employed by us can also receive data. These are, for example, companies in the categories of postal and print service providers, IT service providers, sales partners, web service companies, credit agencies, debt collection service providers and other processors that we use in the context of order processing.

Internally, employees who are bound to secrecy can process the data insofar as this is necessary to fulfill their contractual obligations and corresponds to the purpose of the data processing.

Any recipients are and will be obliged by us to comply with data protection regulations.

A transfer of personal data to third countries or international organizations does not take place.

The data is stored and backed up on our in-house server and therefore in Austria.

miscellaneous
Your data will not be used for automated decision-making.

B. Voluntary Assignments

Personal data
In addition, when you contact us, we save and process the personal data you provide, in particular:

  • Name, company
  • Address and contact details (phone, email)
  • Data from the fulfillment of our contractual obligations (e.g. delivery addresses, invoice data)
  • Data about your respective concerns, correspondence (e-mails, meeting minutes) and other information provided by you
  • Payment and bank details (for processing payments, etc.)

If we have not received this data from you, it will be sent to us by your legal representatives, your legal protection insurance, the court or other parties involved in the proceedings.

In addition, we process data that we legitimately receive from publicly accessible sources (e.g. commercial register, land register, association register, etc.). It is also conceivable that we will receive your data from contractual partners in order to be able to fulfill our obligations towards you. In this way, we can receive your data from our contractual partner, who previously collected it directly from you.

Purpose of data processing
We use the personal data you provide only insofar as your data is necessary to fulfill the respective purpose. The purpose of data processing is the establishment of contact on the one hand and any conclusion of an agreement, its planning, fulfillment and management as well as the resulting rights and obligations or the handling of your request on the other. Data processing in this context are for example:

  • Rental and leasing of objects or real estate
  • Rental and leasing of sports facilities, advertising space
  • Various grants and financial support
  • Complaint management
  • Use of the city arms
  • School and kindergarten: afternoon care, bus services, meals
  • Youth, cultural or social actions
  • Repair and maintenance measures
  • Ticketing: subscription and card management
  • Issue of garbage bags, etc.

Legal basis
As a legal basis , we can rely on the implementation of pre-contractual measures as well as the need to fulfill the contract in accordance with Art.6 Para 6 para 1 lit f GDPR.

If it is necessary to fulfill the contract, you can find further details on the data processing purposes in the relevant contract documents and guidelines.

You can revoke your consent at any time and without giving a reason by email to datenschutz@baden.gv.at . Where the processing is based solely on your consent and we are not legally obliged to store it, the relevant data will then be irrevocably deleted.

Storage period
We delete personal data that are processed to process a contract after the contract has been fully processed and after the expiry of the statutory retention requirements or after the expiry of the warranty and limitation periods or the duration of any ongoing legal disputes.

With regard to the statutory retention requirements, the following should be pointed out in particular:

  • 7-year tax retention obligation in accordance with BAO
  • 3 year limitation period according to ABGB (in individual cases, if there are indications, 30 years according to § 1489 ABGB) Transmission of the data We do not transfer your personal data to third parties , except
  • we are legally obliged to
  • we are otherwise instructed by you or
  • or the transfer corresponds to the purpose of the data processing or

In particular, it may be necessary to transmit it to public bodies, e.g. tax authorities, judicial and prosecution authorities (e.g. police, public prosecutors, courts), lawyers and notaries as well as auditors. Furthermore, a transmission to public bodies and institutions, such as tax authorities, social insurance) and Statistics Austria may be required by law.

Processors employed by us can also receive data. These are, for example, companies in the categories of postal and print service providers, IT service providers, sales partners, web service companies, credit agencies, debt collection service providers and other processors that we use in the context of order processing.

Internally, employees who are bound to secrecy can process the data insofar as this is necessary to fulfill their contractual obligations and corresponds to the purpose of the data processing.

Any recipients are and will be obliged by us to comply with data protection regulations.

A transfer of personal data to third countries or international organizations does not take place.

The data is stored and backed up on our in-house server and therefore in Austria.

miscellaneous
Your data will not be used for automated decision-making.

C. Newsletter and distribution of information material

If you have given us your e-mail address, you will receive our regular newsletter. We use your name and email address for this purpose and provide information about the latest from the city of Baden. Unsubscribing from a newsletter subscription and rejecting further newsletters by e-mail is possible at any time in person or by sending a message to the e-mail address given in the newsletter.

We also use your data to send you information on new events within the community or invitations to events.

These purposes find their legal basis on the one hand in your consent and on the other hand in the perception of the welfare administration incumbent on us and the maintenance of a proper citizen-community relationship as our legitimate interest within the meaning of Art 6 Paragraph 1 lit f GDPR .

You can revoke your consent at any time and without giving a reason by email to the email address given in the newsletter . Where the processing is based solely on your consent and we are not legally obliged to store it, the relevant data will then be irrevocably deleted, unless we are subject to statutory retention requirements or limitation periods are open or legal disputes are pending.

A transfer of the data to third parties does not take place.

Internally, employees who are bound to secrecy can process the data insofar as this is necessary to fulfill their contractual obligations and corresponds to the purpose of the data processing.

The data is stored and backed up on our in-house server and therefore in Austria.

Your data will not be used for automated decision-making.

Part III - Business Partners

Personal data
As far as we have to process our rights and obligations from a business relationship with you, these are as a rule:

  • Name, company, other business name
  • Address and contact details (phone, email, fax, website)
  • Contact persons and their contact details (phone, email)
  • Correspondence (e-mails, meeting minutes, faxes, letters)
  • Payment and bank details (for processing payments, etc.)
  • Data from the fulfillment of our contractual obligations (e.g. delivery addresses, invoice data)
  • Data on your online behavior and preferences (e.g. IP addresses, identification features of mobile devices, data on visits to our websites and apps);
  • Advertising and sales data (e.g. information on granted or revoked consents).

If we have not received this data from you, it will be sent to us by your legal representatives, your legal protection insurance, the court or other parties involved in the proceedings.

In addition, we process data that we legitimately receive from publicly accessible sources (e.g. commercial register, land register, association register, etc.). It is also conceivable that we will receive your data from contractual partners in order to be able to fulfill our obligations towards you. In this way, we can receive your data from our contractual partner, who previously collected it directly from you.

Purpose of data processing
We use the personal data you provide only insofar as your data is necessary to fulfill the respective purpose. The purpose of the data processing is the establishment of contact on the one hand and on the other hand the perception or fulfillment of the rights and obligations from the business relationship, their fulfillment and management and the handling of your concerns.

Legal basis
As a legal basis , we may refer to the implementation of pre-contractual measures as well as the need to fulfill the contract in accordance with Art 6 Paragraph 1 lit b GDPR, our legal obligations and - if necessary - your consent and our legitimate interests within the meaning of Art 6 Paragraph 1 lit f GDPR .

If it is necessary to fulfill the contract, you can find further details on the data processing purposes in the relevant contract documents and terms and conditions.

Storage period We delete personal data that are processed to process a contract after the contract has been fully processed and after the expiry of the statutory retention requirements or after the expiry of the warranty and limitation periods or the duration of any ongoing legal disputes.

With regard to the statutory retention requirements, the following should be pointed out in particular:

  • 7-year tax retention obligation in accordance with BAO
  • 3 year limitation period according to ABGB
    (in individual cases, if there are indications, 30 years according to § 1489 ABGB)

Transmission of the data
We do not transfer your personal data to third parties , except

  • we are legally obliged to
  • we are otherwise instructed by you or
  • or the transfer corresponds to the purpose of the data processing

In particular, it may be necessary to transmit it to public bodies, e.g. tax authorities, judicial and prosecution authorities (e.g. police, public prosecutors, courts), lawyers and notaries as well as auditors.

Processors employed by us can also receive data. These are, for example, companies in the categories of postal and print service providers, IT service providers, sales partners, web service companies, credit agencies, debt collection service providers and other processors that we use in the context of order processing.

Internally, employees who are bound to secrecy can process the data insofar as this is necessary to fulfill their contractual obligations and corresponds to the purpose of the data processing.

Any recipients are and will be obliged by us to comply with data protection regulations.

A transfer of personal data to third countries or international organizations does not take place.

The data is stored and backed up on our in-house server and therefore in Austria.

miscellaneous
Your data will not be used for automated decision-making.

Part IV - Unsuccessful Applications

Personal data
We look forward to every application that we receive. As part of application management, we process the following data from potential students and employees:

  • Master data (salutation, title, first name, last name)
  • Date of birth
  • Contact details (address, email address, telephone number)
  • Nationality, religion (if disclosed)
  • Desired course of study, possible kick-off semester
  • Desired position, possible start of work
  • Other information disclosed in the application (curriculum vitae, certificates, photo, desired salary, etc.)

Purpose of data processing
We process the application data for the purpose of inviting you to job interviews, carrying out an admission procedure and sending acceptance or rejection.

Legal basis
As a legal basis , we can rely on the implementation of pre-contractual measures in accordance with Article 6 (1) (b) GDPR as well as the consent required for data in a special category (Article 9 (2) (a) GDPR) and our legitimate interests within the meaning of Article 6 (1) (f) DS-GVO appointed.

Retention period
We delete application documents from applicants with whom no employment relationship is established after 6 months from the notification of rejection. A further record keeping requires your consent.

Revocation of Consent
You can revoke your consent at any time and without giving a reason by e-mail to personal@baden.gv.at . Where the processing is based solely on your consent and we are not legally obliged to store it, the relevant data will then be irrevocably deleted.

transmission
Application documents from applications that result in an employment relationship are included in the personnel file. Further information on the subject of employee data protection will be made available as part of the employment relationship.

4. Data security

We use technical and organizational security measures to protect your data against manipulation, loss, destruction and against access by third parties. Our security measures are continuously improved in line with technological developments on the Internet. All data is stored on servers that are operated with a high security standard and are protected from unauthorized access and misuse.

The storage and backup of the data takes place on our servers, thus in Austria.

5. Your rights

As a data subject, you have the following rights and legal remedies:

Right to information
You have the right to request information about whether - and if so: which - personal data about you is being processed. In order to prevent information to unauthorized persons, it may be necessary to verify your identity in the event of an application.

Right to rectification and erasure
You can request the correction / completion of your incorrect personal data and the deletion of your data. We will comply with this immediately, provided there are no legal obligations to the contrary.

Right to restriction of processing
You have the right to restrict the processing of your personal data.

Right to data portability
You can request the transfer of collected personal data to a third party.

Right to object
Should such reasons arise from your particular situation, you can object to the processing of your personal data at any time.

You can assert these rights directly with us as the responsible data processor either by post, using the online form or by e-mail to datenschutz@baden.gv.at .

We would like to point out that we are obliged - regardless of how your applications are dealt with - to determine your identity in order to prevent any data protection violations (e.g. incorrect information to the wrong person). For this reason, we have to go through an identity verification procedure with you every time you apply.

Furthermore, if you suspect violations of data protection regulations, in particular your rights as a data subject, you have the right to lodge a complaint with the Austrian data protection authority, Wickenburggasse 8, 1080 Vienna, phone: +43 1 521 52-25 69 , e-mail: dsb@dsb.gv.at as the competent supervisory authority.

If you have any questions about data protection, you can contact us by email (datenschutz@baden.gv.at).
1 According to Art 4 Z 7 GDPR.
2 Art 5 para
3 E-Privacy-RL; Section 96 (3) TKG 2003.

Adobe Fonts

In order to ensure the uniform depiction of certain fonts, this website uses fonts called Adobe Fonts provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).

When you access pages of this website, your browser will automatically load the required fonts directly from the Adobe site to be able to display them correctly on your device. As a result, your browser will establish a connection with Adobe’s servers in the United States. Hence, Adobe learns that your IP address was used to access this website. According to the information provided by Adobe, no cookies will be stored in conjunction with the provision of the fonts.

Data are stored and analyzed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in a uniform presentation of the font on the operator’s website. If a respective declaration of consent has been obtained (e.g., consent to the archiving of cookies), the data will be processed exclusively on the basis of Art. 6(1)(a) GDPR. Any such consent may be revoked at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.adobe.com/de/privacy/eudatatransfers.html.

For more information about Adobe Fonts, please read the policies under: https://www.adobe.com/privacy/policies/adobe-fonts.html.

Adobe’s Data Privacy Declaration may be reviewed under: https://www.adobe.com/privacy/policy.html.