PRIVACY POLICY

This privacy policy informs you about what happens to personal data (\"data\") that we collect from you when you purchase the DocLX Welcome Card by DocLX or that you provide to us online when you visit our websites (\"site\").

 

1. Who is responsible for data protection?

For the purposes of data protection regulations, the controller responsible for your data is

DocLX Welcome Card GmbH
(FN 623068b)
Ringstraßen-Palais Schnapper
Parkring 20
1010 Wien

References to \"we\", \"our\" or \"us\" in this privacy policy refer to DocLX Welcome Card GmbH.

 

2. Introduction

The DocLX Welcome Card by DocLX gives visitors to the city the opportunity to take advantage of numerous discounts and benefits. It is primarily sold online and as an app in the Apple App Store or via Google Play.

For this reason, we are providing you with this privacy policy to inform you about this and who you can contact if you have any questions or concerns. Please note that we generally assume that if you provide us with information or use our services, you have read this privacy policy. Further details on what rights you have and how you can contact us if you have any questions about data protection can be found below.

Please note that the DocLX Welcome Card is sometimes also distributed via third-party providers, such as travel agencies, online platforms or hotels. These providers are responsible for data protection-compliant processing. This data protection declaration therefore does not apply to them.

 

3. What information do we collect about you?

3.1. Webshop

When you purchase the DocLX Welcome Card by DocLX in the webshop, we collect the data about you that you enter there. These are the following categories of data:

  • First name
  • Surname
  • Email address

Optional:

  • Company name
  • Address (house number, door number, street, postcode and town)
  • Country

In general, this data is processed for the purpose of realising, handling and processing your purchases and orders. It will not be used for any other purpose.

3.2. App

If you load the DocLX Welcome Card by DocLX in our app, we will only collect the data about you that you enter there. These are the following categories of data:

  • First name
  • Surename
  • Year of birth

In general, this data is processed for the purpose of realising, handling and processing your purchases and orders. It will not be used for any other purpose.

3.3. Business costumers

If business customers purchase the DocLX Welcome Card by DocLX for resale to end customers, we collect the following data:

  • Company name
  • tax number
  • First name and surname of the contact person
  • Professional position of the contact person
  • Company address
  • Company website
  • Company email address
  • Company telephone number
  • Order history

Apart from the name of the contact person, this does not generally include any personal data. This data is also not used for any other purpose.

3.4. On the website

When you visit our website, we do not collect any personal data other than the IP address of the device from which you are accessing our website. We sometimes use various analysis tools to determine the traffic on the website or to simplify its use. However, it is not possible for us or third parties to draw any conclusions about you personally. Below is a detailed description:

Cookies: Cookies are pieces of information that are stored directly on the computer you are using. Cookies make it possible to collect information such as browser type, time spent on the website, pages visited, preferred languages and other data about web traffic. Together with our service providers, we use this information for security purposes, to facilitate online navigation, to display information more effectively, to customise your experience when using our website and to analyse user activity in other ways. We also collect statistical data about the use of our website in order to continually improve its design and functionality, to understand how it is used and to assist us in answering questions. If you wish to opt out of data collection via cookies when using your customer profile or our website, most browsers provide a simple option that allows you to automatically reject cookies or gives you the choice of rejecting or accepting the transfer of one or more cookies from a particular website to your computer. You can find out more at http://www.allaboutcookies.org/manage-cookies/index.html.

Analysis tools: We also use website and application analytics services provided by third parties that use cookies and similar technologies to collect information about website or application usage and report trends without identifying individual visitors. These third parties who provide such services may also collect information about your use of third party websites. You can download the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout, to learn more about how Google collects this information and how you can opt-out.

Pixel Tags and other similar technologies: Pixel tags (also known as web beacons or clear GIFs) may be used in connection with some services to, among other things, track the actions of users of the services (including email recipients), measure the success of our advertising campaigns and compile statistics on the use of the services and response rates.

3.5. Email traffic

As part of our normal office activities, we also store any e-mail correspondence with you. The storage takes place in the respective e-mail programme and the e-mails are regularly archived or deleted if not required.

 

4. Source of the data

In the event that we have not collected your data ourselves or you have not provided it to us yourself, it will in any case originate from a reliable source that we have verified as being authorised to collect and transmit the data.

 

5. How do we use your data?

The data collected in the web shop or in the app is used exclusively to process your order, to process payments and to issue invoices. Your contact details are used in particular to send you the DocLX Welcome Card by DocLX by post or electronically.

The data of our business partners is also used to process orders, process payments and issue invoices. If you have given your consent, we will also use this data to keep you up to date with our newsletter.

Finally, we may also use your contact details to respond to your enquiries and fulfil your orders, to obtain feedback on our services and to send you administrative information, such as information about or changes to our terms and conditions and guidelines.

 

6. Legal bases

Your data is processed on one or more of the following legal bases. Not all of them necessarily apply to you personally.

  • Because it is necessary for your order, i.e. to fulfil the contract concluded between us or to prepare the processing, i.e. to carry out pre-contractual measures.
  • Your consent (please note that you can withdraw your consent at any time, more on this below).
  • Because it is necessary for the fulfilment of legal obligations to which we are subject. This applies in particular to retention obligations under tax law.
  • Because the processing of your data is necessary to protect our legitimate interests. The realisation of market communication and advertising is also considered a legitimate interest.
  • Because it is necessary for the realisation of our legitimate interest in connection with the administration, operation and optimisation of the website.
  • Because it is necessary for the realisation of our legitimate interest in connection with quality control and business planning.
  • Because we need it to enforce our legal claims (debt collection, etc.).

7. With whom do we share your information?

Generally. your data will not be passed on to third parties. Under certain circumstances, however, we may use the support of contract processors to fulfil your order or to process our business operations, who carry out data processing for us in accordance with our specifications and instructions or are required to process the order.

 

8. Cross-border transfers

Our services are generally provided from Austria and your data will also be stored in Austria. Your data will not be transferred outside the European Economic Area (EEA). Should this be necessary, it would be based on standard contractual clauses authorised by the European Commission.

 

9. Your rights

As stated above, we attach great importance to the proper, transparent and, above all, confidential handling of your data. We would therefore like to inform you of your rights below:

9.1. Information or rectification

You can request information at any time about which of your data we have processed and/or stored and that this data is corrected if necessary. We will respond to all your requests in accordance with our legal obligations. In order to process such requests, we may need additional information from you, such as a copy of your ID or details of the job advertised. We will fulfil justified requests for information and/or rectification within the statutory period of no more than one month.

9.2. Right to erasure

You also have the right to have your data erased if

  • the data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • you have withdrawn your consent to the data processing or have objected to the processing (unless there is another legal basis for the processing);
  • your data has been processed unlawfully;
  • the earsion of your data is necessary to fulfil a legal obligation;
  • or if the data was collected from a child (i.e. a person under the age of 16) in connection with information society services.

You can submit requests for erasure using the contact details below. We will comply with justified requests for erasure within the statutory period of no more than one month.

9.3. Right to restriction

You have the right to request the restriction of the processing of your data. You can submit requests for restriction using our contact details below. We will comply with justified requests within the statutory period.

9.4. Objection to processing

You have the right to object at any time to the processing of your data that is carried out in the public interest or to protect important interests on our part. The same applies in the event that personal data is processed for the purposes of direct marketing or profiling. If you object, your data will no longer be processed for these purposes and will be deleted. You can object at any time using our contact details below.

9.5. Right to data portability

You have the right to portability of your data, in that we will provide it to you in a structured, commonly used, machine-readable format so that you can pass it on to another client without hindrance. If possible and if requested by you, we will also transfer your data directly to the client named by you.

9.6. Right to object

You have the option of withdrawing your consent to data processing at any time without this having any negative consequences for you. You can exercise your right of cancellation using our contact details below.

9.7. Possibility to lodge a complaint

If you believe that you have discovered violations of data protection regulations, we suggest that you contact us in the first instance so that we can check this and take remedial action if necessary. However, you also have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).

9.8. Exercising your rights

We ask you to clearly state in your enquiry what information you have provided or wish to correct, whether you want the information provided to us to be blocked in our database or what other restrictions you wish to impose on us regarding the use of the information you have provided. For your protection, we will only process requests for information associated with the email address you use to submit the request. We may need to verify your identity before fulfilling your request.

Please also note that we may need to retain certain information for document management or legal purposes and/or to complete transactions that began prior to the requested change or deletion. There may also be residual information that remains in our databases and other records that cannot be removed.

 

10. Security

We strive to maintain appropriate organisational, technical and administrative security measures to protect information within our organisation. Unfortunately, the security of any data transmission or storage system can never be 100% guaranteed. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately of the problem. The sooner you let us know, the more damage we can avert.

 

11. Retention and deletion period

We will retain data that we have received from you for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is permitted or required by law. As a rule, we adhere to the following deletion concept:

Based on the above-mentioned legal bases, your data will generally continue to be processed on a personal basis for 40 months after termination of the contractual relationship (i.e. 36 months for possible contractual claims for damages plus a maximum of four months for service of a lawsuit) and then deleted (at least the personal reference). Thereafter, personal data processing of any invoice data will continue until the end of the statutory retention period (currently 7 years).

 

12. Minors

Our services are not aimed at persons under the age of sixteen and we request that these persons do not provide us with any information.

 

13. Links

This Privacy Policy does not apply to, and we are not responsible for, the privacy, information or other practices of third parties. This includes third parties who operate sites or services to which the services are linked. The inclusion of a link on our website does not imply endorsement of the linked site or service by us or our affiliates, nor is it an indication of any affiliation with that third party. Please note that we are not responsible for the collection-, use- or disclosure policies and practices (including privacy practices) of other organisations, such as other app developers, app providers, social media platform providers, operating system providers or Wi-Fi providers.

Similarly, we are not responsible for any information you disclose to other organisations through or in connection with our software applications or social media pages.

 

14. Updates to this policy

We may change this privacy policy. Please refer to the \"Last updated on\" legend at the bottom of the page. Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy on the services. By providing us with information after these changes, you accept the revised Privacy Policy.

 

15. Ways to contact us

You reach us at:

DocLX Welcome Card GmbH
Ringstraßen-Palais Schnapper
Parkring 20
1010 Wien
Telefon: +43 1 47 87 255
E-Mail: info@viennawelcomecard.at

last updated on 13th of August, 2024