Privacy statement
The operators of these sites take the protection of your personal data very seriously. We treat your personal data confidential and according to the legal data protection rules as well as this privacy statement.
Scope of application
This privacy statement informs you about the nature, extent and scope of the collection and use of personal data by the website provider CL:CasaLinguae e.U. – Strohberggasse 15/1/5, 1120 Vienna or Mozartgasse 4/2, 1040 Vienna – office@casalinguae.at – +43 699 11 959 333 and the linked websites, functions and contents as well as our social media profile.
Responsible person
CL: CasaLinguae e.U.
Mozartgasse 4/2
1040 Vienna
E-Mail: office@casalinguae.at
Phone: +43 699 11 959 333
Access data/server logfiles
CL: CasaLinguae e.U. (or rather the webspace provider) collects data on every access to the offer (so called server logfiles).
These access data include:
* Name of the requested website, file, date and time of access
* Data volume transferred
* Notification on successful access
* Type of browser besides version, operating system of the user
* Referrer URL (the website visited before)
* IP-address and the requesting provider
CL: uses the log data only for statistical evaluations for the purpose of the operation, security and optimization of the offer. CL: however, reserves itself the right to verify the log data subsequently if due to concrete evidence a justified suspicion referring to an illegal use may arise.
Types of processed data:
- Inventory data (title, first name and surname, profession, social security number, office and/or home address), eventually billing address
- Contact data (phone number, fax, e-mail address)
- In case of corporate courses: name of company, contact persons including contact data, eventually title, first name and surname of employees registered by the company
Purpose of data processing
The above-mentioned types of data are processed for the purposes listed below:
- Preparation of offers
- Organisation (registration confirmation, information on courses/training sessions, settlement of course fees, inclusion in a list of participants)
- Fulfilment of legal documentation and reporting duties vis-á-vis third parties (tax and duties)
Safety measures
Ferner berücksichtigen wir den Schutz personenbezogener Daten bereits bei der Entwicklung, bzw. Auswahl von Hardware, Software sowie Verfahren, entsprechend dem Prinzip des Datenschutzes durch Technikgestaltung und durch datenschutzfreundliche Voreinstellungen berücksichtigt (Art. 25 DSGVO). (dt. Satz prüfen) Subject to art. 32 of the GDPR we take adequate technical and organizational measures under consideration of the state of the art, implementation costs and type, scope, circumstances and purpose of data processing as well as different probabilities of occurrence and the gravity of risks relating to the rights and freedoms of private individuals to ensure an adequate level of protection against the respective risk. The measures include in particular the protection of confidentiality, integrity and availability of data through the control of physical access to these data as well as the input, forwarding, protection of availability and their separation. Furthermore, we implemented procedures which ensure the perception of rights of persons concerned, the cancellation of data and the reaction on data endangerment. Furthermore, we take the protection of personal data into account already at the development, the acquisition of hardware, software as well as the procedures according to the principle of data protection via the choice of technical solutions and through data protection-friendly default settings (art. 25 of the GDPR).
Handling of personal data
Personal data contain information with which a person can be identified, i.e. data which help you to track a person. These data include name, email address or phone number. But also data concerning preferences, hobbies, memberships or any information about websites visited by a certain person, are part of these personal information.
Personal data are collected, used and forwarded by CL: only if this is permitted by law or the user gave his/her authorization to process these data.
Cooperation with processors and third parties
If in the framework of our processing procedure personal data are disclosed vis-á-vis other persons and companies (processors or third parties), transferred to these or if access to these information is given in any other way, this will take place only on the basis of a legal permission (for example if the transmission of the data to third parties such as payment providers is necessary for the fulfilment of the contract according to art. 4 clause 1 lit. b of the GDPR), if you agreed, if a legal obligation allows for it or on the basis of our legitimate interests (for example in case of the assignment of authorized persons, web host etc. )
If we assign the data processing to third parties on the basis of a so-called “order processing contract” this will take place based on art. 28 of the GDPR.
Transmission to third countries
If we process any personal data in a third country (that means outside of the European Union or rather the European Economic Area or if this takes place in the framework of the use of services from third parties or the disclosure or transmission of personal data to third parties, this will happen only if carried out for the fulfilment of our pre-contractual obligation, on the basis of your permission, because of any legal obligations or on the basis of our legitimate interests. Subject to legal or contractual permissions we process or give the permission to process personal data in third countries only in case of the presence of the specific terms of art. 44 seqq. of the GDPR. That means the processing is carried out for example on the basis of particular guarantees such as the officially recognized definition of a data protection level equal to the one of the EU (for example for the US through the “Privacy Shield”) or the observance of officially recognized specific contractual obligations (so called standard contractual clauses).
Establishment of contact
When establishing the contact with CL: (for example via contact form, email or social media channels) the data of the user will be processed in order to process the request as well as for of further questions. The data provided by the user can be saved in a Customer Relation Management System (CRM).
Newsletter shipping provider
We use our newsletter to inform you about us and our offers.
If you would like to receive the newsletter, we require a valid email address as well as information that allows us to verify that you are the owner of the provided email address or that the owner agrees to receive the newsletter. No further data will be collected. These data will be used solely for sending the newsletter and will not be passed on to third parties.
Double Opt-In and Logging:
After registration, you will receive an email asking you to confirm your subscription. This confirmation is necessary to ensure that no one can register using someone else’s email address. The newsletter subscriptions are logged in order to be able to prove the subscription process in accordance with legal requirements. This includes the storage of the subscription and confirmation time, as well as the IP address. Any changes to the data stored by the newsletter service provider are also logged.
You can revoke your consent to the storage of your data, your email address, and its use for sending the newsletter at any time. The revocation can be made via a link in the newsletter itself, in your profile area, or by contacting us via the contact details provided above.
Shipping Provider:
The newsletters are sent using the shipping service provider ActiveCampaign, LLC, 1 N Dearborn Street, 5th Floor, Chicago, IL 60602, USA. You can view the data protection policy of the shipping provider here: https://www.activecampaign.com/legal/privacy-policy.
ActiveCampaign processes the data on our behalf based on a data processing agreement in accordance with Art. 28 GDPR. Data processing may take place in the USA. According to ActiveCampaign, appropriate safeguards pursuant to Art. 46 GDPR are in place to ensure a level of data protection that complies with European standards.
Newsletter – performance measurement
Our newsletters contain a so-called “web beacon,” which is a pixel-sized file that is retrieved from our server—or from the server of our shipping provider, if one is used—when the newsletter is opened. As part of this retrieval, technical information such as your browser and system information, IP address, and the time of retrieval are collected.
This information is used to improve the technical performance of our services and to better understand the reading behavior of our target audience, based on their access locations (determinable via IP address) and access times. The statistical data also include determining whether the newsletters are opened, when they are opened, and which links are clicked. While this information can technically be assigned to individual newsletter recipients, neither we nor (if used) our service provider seek to monitor individual users. The evaluations serve only to help us recognize our users’ reading habits and to tailor our content accordingly, or to send different content according to the interests of our users.
Integration of services and contents from third parties
It may be the case that in these online offers contents of third parties such as for example YouTube videos, map data from google maps, RSS-feeds or graphics from other websites will be included. This always assumes that the providers of these contents (hereinafter referred to as “third party provider”) will be aware of the IP address of the user. Because without the IP address they would not be able to send the contents to the browser of the corresponding user. The IP address is hence necessary to display these contents. We aim at using only those contents whose corresponding provider uses the IP address only to deliver the contents. However, we have no influence over whether the third-party providers save the IP address for example for statistical purposes. As far as we know, we inform our users about it.
Cookies
Cookies are small files which render it possible to save specific information referred to the device on the access device of the User (PC, smartphone or similar). On one hand the improve the user-friendliness of websites and thus offer a benefit for the users (for example the storage of login data). On the other hand, they are used to collect statistical data of the website usage and analyse them in order to improve the offer. The users can influence the use of cookies. Most browsers dispose of an option with which the storage of cookies can be restricted or completely prevented. However, we point out that the use and in particular the user comfort is restricted without cookies.
You can administer many corporate online ads cookies via the US American website http://www.aboutads.info/choices / or the EU website http://www.youronlinechoices.com/uk/your-ad-choices/.
REGISTRATION FUNCTION
The data registered in the course of registration (language courses, training and assessments tests) are used for the purpose of using the offer. Users can be informed by e-mail about information relevant to offers or registration, such as changes to the scope of offers or technical circumstances. The data collected can be seen in the input mask during registration. This includes first and last name, postal address, email address and their purpose.
Order processing in the online shop and client account
We process the data of our clients in the framework of the order procedure in our online shop to allow them the selection and ordering of the selected products and services as well as their payment and shipment or execution.
The processed data include inventory data, communication data, contractual data, payment data and the persons concerned are our clients, interested persons and other business partners. The processing takes place for the purpose of the fulfilment of the contractual services within the operation of an online shop, the settlement, delivery and customer service. For this purpose, we place session cookies for the storage of the content of the shopping cart and permanent cookies for the storage of the login status.
The processing takes place on the basis of art. 6 clause 1 lit. b (realization of ordering processes) and c (legally required storage) of the GDPR. In doing so the details marked as necessary for the justification and fulfilment of the contract are required. We disclose the information vis-á-vis third parties only in the framework of the delivery, payment or in the framework of legal permissions and obligations vis-á-vis legal consultants and authorities. The data will be processed in third countries only if this is necessary for the fulfilment of the contract (for example following a customer request upon delivery or payment).
Users can create a user account where they can display all their orders. In the framework of the registration the necessary compulsory details are communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users cancelled their user account, their data concerning the user account will be cancelled unless their storage is required for commercial and fiscal reasons according to art. 6 clause 1 lit c of the GDPR. Details in the clients account remain there up to their cancellation with the subsequent storage in case of a legal obligation. It is up to the users to store their data upon cancellation before the end of the contractual relationship.
In the framework of the subscription and new registration as well as use of our online services, we save the IP address and the time of the respective user intervention. The storage takes place on the basis of our legitimate interests as well as the user protection against misuse and other unauthorized usages. The transfer of data to third parties does normally not take place, except if required to track our claims or if there is any legal obligation according to art. 6 clause 1 lit c of the GDPR.
The cancellation takes place at the end of legal and comparable guarantees. The necessity of data storage will be verified every three years. In the event of legal storage obligations, the cancellation takes place after their expiry.
Retrieval of profile pictures from Gravatar
We use the service Gravatar of Automattic Inc. 60 29th Street #343, San Francisco, CA 94110, USA in the framework of our online offer and in particular in our blog.
Gravatar is a service where users register and store their profile pictures and their email addresses. If users leave comments or articles on their online presences with their respective email addresses (especially in blogs), their profile pictures can thus be displayed next to the articles or comments. For this reason, the email address communicated by the users is transmitted in an encrypted form to Gravatar in order to verify if there is a stored email address for this profile. This is the only reason to transmit the email address and it is not used for other reasons but cancelled immediately afterwards.
The use of Gravatar takes place on the basis of our legitimate interests in line with art. 6 clause 1 lit. f) of the GDPR since with Gravatar we offer users the possibility to personalize their articles and comments with a profile picture.
By showing the picture Gravatar detects the IP address of the users since this is necessary for the communication between the browser and an online service. More information concerning the collection and use of data by Gravatar can be found in the privacy statement of Automattic: https://automattic.com/privacy/.
If users do not want that their picture linked to their email address at Gravatar will be displayed in the comments, they should use an email address to write comments which is not saved at Gravatar. We also point out that it is possible to use an anonymous or no email address at all, if the users do not want that their personal email address is transmitted to Gravatar. Users can completely prevent the transmission of data by not using our comment function.
Data protection information in the application procedure
We process application data only for the purpose and in the framework of application procedures in line with the legal requirements. The processing of application data takes place for the fulfilment of our (pre)contractual obligations in the framework of the application procedure in line with art. 6 clause 1 lit. b. of the GDPR if the data processing is necessary for us for example in the framework of legal procedures.
The application procedure implies that applicants communicate the application details to us. The necessary details of applicants are normally marked in the online form and alternatively result from the description of the position and basically comprise all personal details such as person, post and contact addresses and the documents which form part of the application such as cover letter, CV and certificates. Beside that the applicants can also communicate us additional information if they want.
With the transmission of the application the applicants agree to the processing of their data for the purposes of the application procedure according to the type and extent indicated in this data protection declaration.
If in the framework of the application procedure voluntarily specific categories of personal data are communicated in line with art. 9 clause 1 of the GDPR, its processing takes place additionally according to art.9 clause 2 lit. b of the GDPR (for example health data, such as severe disability or ethnical origin). If in the framework of the application procedure specific categories of personal data are requested from applicants in line with art. 9 clause 1 of the GDPR, their processing takes place additionally according to art. 9 clause 2 lit a of the GDPR (for example health data if these are necessary for the execution of the profession).
Applicants may send us their applications via email. When doing so, however, we ask you to consider that emails will basically not be sent in an encoded form and the applicants must ensure the encryption personally. Hence, we cannot assume any responsibility for the transfer of the application from the sender to the reception on our server and thus advice you to use the postal delivery. Because instead of sending the application via email, the applicants still have the possibility to send the applications via post.
The data made available by applicants, can be further processed by us in case of a successful application for the purpose of the employment relationship. Otherwise, if the application referring to a determined position is not successful the data of the applicant will be deleted. The data of the applicant will also be deleted if an application is withdrawn by the applicant as the person is entitled to at any point in time.
The cancellation takes place, subject to a legitimate revocation by the applicant at the end of the period of six months so to be able to answer to possible further questions regarding the application and to satisfy our burden of proof from the General Equal Treatment Act. Invoices on possible travel cost compensations will be stored according to the fiscal requirements.
Comments and articles
If users write comments or other articles, their IP-address can be saved for 7 days on the basis of our legitimate interests in line with art. 6 clause 1 lit. f. of the GDPR. This is done to protect ourselves if someone writes illegal contents in comments or articles (offenses, forbidden political propaganda etc.). In this case we can be prosecuted personally for such comments or articles and are hence interested in the identity of the writer.
Furthermore, we reserve the right to process the details of the users for spam detection on the basis of our legitimate interests according to art. 6 clause 1 lit f. of the GDPR
The data indicated within the scope of comments and articles will be saved by us permanently until the objection by the user.
Google Analytics
CL: uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “Cookies”, text files which will be saved on the computer of the users and which offer an analysis of the use of the respective website. The information generated via the cookie regarding the use of this website by the users are usually transmitted to a server of Google in the US and saved there.
In case of activation of the IP anonymization on this website, the IP-address of the user will be first shortened by Google within the Member states of the European Union or in other contracting parties to the agreement on the European Economic Area. Only in exceptional cases will the IP address be transmitted to a server of Google in the US and shortened there. The IP anonymization is active on this website. On behalf of the provider of this website, Google will use this information to assess the usage of the website by its users, to create reports on website activities and to provide further services connected to the website and internet usage.
Die Nutzer können darüber hinaus die Erfassung der durch das Cookie erzeugten und auf ihre Nutzung der Website bezogenen Daten (inkl. Ihrer IP-Adresse) an Google sowie die Verarbeitung dieser Daten durch Google verhindern, indem sie das unter dem folgenden Link verfügbare Browser-Plugin herunterladen und installieren (dt. Satz prüfen): The IP address transmitted from your browser in the framework of Google Analytics will not be joined with other data from Google. The users can prevent the storage of cookies via a respective setting of their browser software; this offer, however, informs the users that in this case they will eventually not be able to use all functions of this website to their full extent. The users can furthermore prevent the collection of data generated through cookies and relating to their use of the website (including the IP address) as well as the processing of this data by Google via the download and installation of the browser plugin available below the following link http://tools.google.com/dlpage/gaoptout?hl=de.
Further information on the use of information for marketing purposes via Google, setting and possibilities to object are available on the Google websites: https://www.google.com/intl/de/policies/privacy/partners/ („How Google uses information from sites or apps which use our services“ “), http://www.google.com/policies/technologies/ads („How Google uses information for advertising“), http://www.google.de/settings/ads („Administer information used by Google to display ads“) and http://www.google.com/ads/preferences/ (“Define which ads should be displayed by Google“).
Alternatively, to the Browser-Add-On or in case of browsers on mobile devices, please click on this link to prevent the future data collection by Google Analytics via this website. By doing so an Opt-Out Cookie is saved on your device. If you delete your cookies, you must click on the link again.
Use of Facebook Social Plugins
CL: uses Social Plugins (“Plugins”) of the social network facebook.com which is operated by the Facebook Ireland Ltd., 4 Grand Canal Square, grand Canal harbor, Dublin 2, Irland (“Facebook”). The plugins can be identified via the facebook logos (white “f” on a blue background, the terms “Like” or the thumbs-up signs) or are marked with the addition “Facebook Social Plugins”. The list and the look of the Facebook Social Plugins is represented here https://developers.facebook.com/docs/plugins/.
If a user of a website views this offer which contains such a plugin his browser creates a direct connection to the Facebook server. The content of the Plugin will be directly transferred to your browser by Facebook and from there embedded into the website. Thus, the provider has no influence on the extent of the data which Facebook collects with the help of these plugins and thus informs the user according to the personal state of knowledge:
Through the embedment of Plugins, Facebook receives the information that a user viewed the respective page of a particular offer. If the user is logged in on Facebook, Facebook can assign this visit to the respective Facebook account. If a user interacts with the Plugins, for example by clicking the “Like”- Button or entering a comment, the respective information is directly transmitted from your browser to Facebook and saved there. If a user is not a member of Facebook, however, Facebook has the possibility to find out the IP address and to save it. According to Facebook in Germany only anonymized IP addresses are saved.
The purpose and extent of data collection and the further processing and use of the data by Facebook as well as respective rights and possible settings to protect the privacy of the user, can be found in the privacy statement provided by Facebook: https://www.facebook.com/about/privacy/.
If a user is a member of Facebook and this person does not want Facebook to collect any data on him via this offer and connect them with the membership data saved on Facebook, he must log out from his Facebook account before visiting the internet site. Further settings and objections concerning the use of data for marketing purposes can be made via the Facebook profile settings: https://www.facebook.com/settings?tab=ads.
+1 button of Google+
CL: uses the “+1”-button of the social network Google Plus operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). The button carries the sign “+1” and can be identified by its white or coloured background.
If a user views a website of this offer which contains such a button, the browser establishes a direct connection with the server of Google. The content of the “+1” button will be transmitted directly to its browser by Google and from there embedded into the website. The website provider hence, does not have any influence on the extent of the data which are collected by Google through this button. According to Google no personal data are collected as long as you do not click on this button. Only in case of logged-in members such data, amongst others the IP address, will be collected and processed.
The purpose and extent of the data collection and the further processing and use of data by Google as well as the respective rights and possible settings to protect privacy can be found in the Google privacy information referring to the “+1”- button below: http://www.google.com/intl/de/+/policy/+1button.html and in the FAQ: http://www.google.com/intl/de/+1/button/.
CL: uses website elements (https://dev.twitter.com/web/overview) such as for example buttons or integrated contents of the service Twitter, offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, Ca 94107, USA. With the aid of website elements, it is possible for example to share an article or page of this offer on Twitter or to follow the provider on Twitter. Further contents which can be integrated into the website, are in particular single Tweets.
If a user views a website of this online presence which contains such a website element, his browser establishes a direct connection to the server of Twitter. The content of the website element will be transmitted directly to the browser of the user. The provider, hence, does not have any influence on the extent of data which are collected by Twitter with the help of the website elements and informs the users on the basis of his personal state of knowledge. According to this knowledge only the IP address of the user or rather the URL of the respective website is transferred when using the button, but it is not used for other purposes than the display of the website element.
Further information to this are available in the privacy policy of Twitter at http://twitter.com/privacy.
It is possible to integrate functions and contents of the Instagram service, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA to our online offer. These may comprise for example contents such as pictures, videos or texts and buttons with which users can express that they like the contents or they can follow the author of the contents or subscribe to our posts. If the users are members of the platform Instagram, Instagram can assign the access to the above-mentioned contents and functions to the profiles of the users there. Privacy statement of Instagram: http://instagram.com/about/legal/privacy/.
Website functions and contents of the service Xing, offered by the XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany can be integrated into our website offer. These may comprise for example contents such as pictures, videos or texts and buttons with which users can show if they like the contents, they can follow the authors of the contents or subscribe to our posts. If the users are members of the Xing platform, Xing can assign the access to the above-mentioned contents and functions to the profiles of the users there. Privacy statement of Xing: https://www.xing.com/app/share?op=data_protection.
Functions and contents of the service LinkedIn, offered by the LinkedIn AG, Dammtorstraße 29-32, 20354 Hamburg, Germany can be integrated into our online offer. These may comprise for example contents such as pictures, videos or texts and buttons with which users can express that they like the contents, follow the author of the contents or subscribe to our posts. If the users are members of the LinkedIn platform, LinkedIn can assign the access to the above-mentioned contents and functions to the profile of the user there. Privacy statement of LinkedIn: https://www.linkedin.com/legal/privacy-policy.LinkedIn is certified under the Privacy-Shield-agreement and thereby offers a guarantee for the compliance with the European privacy law (https://www.privacyshield.gov/participant?id=a2zt0000000LoUZAA0&status=Active).
Privacy statement: https://twitter.com/de/privacy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Youtube
We integrate videos of the “YouTube” platform offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Revocations, amendments, rectifications and updates
Upon request the user has the right to receive information free of charge as regards the personal data which were saved. Additionally, the user has the right to rectification of incorrect data, blocking and cancellation of his personal data, unless no legal retention requirement exists.
The legal retention period in Austria amounts to 7 years according to § 132 clause 1 BAO (accounting documents, receipts/invoices, accounts, business documents, lists of revenues and expenditures, etc.), 22 years in case of properties and 10 years in case of documents relating to electronically provided services, telecommunication, radio and TV services which were provided to private individuals in EU member states and for which the Mini-One-Stop-Shop (MOSS) is used.
Created with the Datenschutz-Generator.de of RA Dr. Thomas
