Privacy policy Wiener Zeitung Digitale Publikationen GmbH – auftrag.at
With this privacy policy we inform you regarding the processing of personal data on https://www.auftrag.at.
The English version of the privacy policy is for information purposes only. In case of conflicting information, the German version always prevails.With this Privacy Policy, we inform you about the processing of personal data in connection with the homepage of auftrag.at https://www.auftrag.at.
Insofar as reference is made below to consent given, this presupposes that you have granted valid consent for the processing of your data. If you have not given consent, no processing of your personal data will take place.
In this Privacy Policy, you will find information about:
- who is responsible for the processing of your personal data, including contact information;
- which categories of personal data are processed, the sources of this data, the purposes of processing, and the legal basis for processing your data;
- to whom we disclose personal data or who processes personal data on our behalf;
- how long personal data is stored;
- which rights you are entitled to under data protection law and how you can exercise them.
Controller and Contact Information
The controller for processing your personal data is Wiener Zeitung Digitale Publikationen GmbH, Maria-Jacobi-Gasse 1, 1030 Vienna. The designated Data Protection Officer can be contacted regarding any data protection concerns via email at datenschutz@auftrag.at.
Scope of Application
Our Privacy Policy applies to the website https://www.auftrag.at and to processing activities involving personal data in connection with the services offered by https://www.auftrag.at.
Categories of Data, Purpose and Legal Basis of Processing, Storage Duration, and Withdrawal
Newsletter (Brevo/Sendinblue)
We offer you the opportunity to subscribe to our free newsletter in order to receive regular updates on current articles on https://www.auftrag.at, the latest news in public procurement, and services and offers from auftrag.at and the Wiener Zeitung media group. For this purpose, we collect your first and last name as well as your email address. The provision of this data is voluntary and based on your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.
Processing and Delivery
The newsletter is sent via the service provider SENDINBLUE Brevo, 55 Rue d’Amsterdam, 75008 Paris, France. The data you provide will be transmitted to SENDINBLUE Brevo for this purpose and processed on our behalf. SENDINBLUE Brevo acts as our processor under Art. 28 GDPR and processes your data solely according to our instructions and in compliance with applicable data protection regulations.
Storage Duration and Withdrawal
Your data will be stored for the duration of your newsletter subscription. You have the right to withdraw your consent at any time with future effect and unsubscribe from the newsletter. You can do this via the unsubscribe link in the newsletter or by sending an informal request to datenschutz@auftrag.at. After revocation, your data will be deleted without delay.
Further Information
For more information about data processing by SENDINBLUE Brevo, please refer to their privacy policy at: https://www.brevo.com/de/legal/privacypolicy/.
Online Forms (Typeform)
On our website, we provide links to online forms from Typeform S.L., Carrer Bac de Roda, 163, 08018 Barcelona, Spain (“Typeform”), through which you can submit inquiries, feedback, or declarations of participation. The use of these forms is voluntary.
Processing and Transmission
When accessing a form, you will be redirected to an external page of Typeform. Depending on the form, we collect your contact details (e.g., name, email address), your message, and technical data (e.g., IP address, timestamp, device used). Processing is based on your consent under Art. 6 para. 1 lit. a GDPR or our legitimate interest under Art. 6 para. 1 lit. f GDPR, particularly to efficiently process requests and communicate with you.
Typeform processes the data on our behalf based on a data processing agreement pursuant to Art. 28 GDPR. Typeform may use sub-processors located outside the EU. To ensure an adequate level of data protection, Typeform uses the EU Commission’s Standard Contractual Clauses pursuant to Art. 46 GDPR.
Storage Duration and Withdrawal
Your data is stored only as long as necessary to process your request or until you withdraw your consent. You can withdraw your consent at any time with future effect, e.g., by informal request to datenschutz@auftrag.at. After withdrawal, your data will be promptly deleted unless legal retention obligations apply.
Further Information
Further information on data processing by Typeform can be found in Typeform’s privacy policy at: https://admin.typeform.com/to/dwk6gt
Online Appointment Booking (Microsoft Outlook / Office 365)
We offer you the option to book appointments directly via our Outlook calendar (Microsoft Office 365). This service is provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (“Microsoft”).
Processing and Transmission
When you book an appointment, personal data such as your name, email address, appointment preferences, and any additional information you provide are collected. The data is processed to manage your appointment request and conduct the scheduled meeting.
The legal basis for processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR as well as our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in efficient appointment handling and communication.
Data processing takes place within our Microsoft 365 account. Microsoft acts as our processor under Art. 28 GDPR. Data transfers to third countries (in particular the USA) cannot be ruled out. However, Microsoft ensures an adequate level of data protection by using EU Standard Contractual Clauses and additional safeguards pursuant to Art. 46 GDPR.
Storage Duration and Withdrawal
The data collected during appointment booking is deleted once it is no longer needed for the intended purpose and no legal retention obligations exist. You may withdraw your consent for data processing at any time with future effect, e.g., via email to datenschutz@auftrag.at.
Further Information
For further information on data processing by Microsoft, see:
https://privacy.microsoft.com/de-de/privacystatement
Automated Data Processing via Zapier
To automate our technical processes, we use the service Zapier, provided by Zapier Inc., 548 Market St #62411, San Francisco, CA 94104-5401, USA (“Zapier”).
Processing and Transmission
If you submit a request via a form (e.g., via Typeform), your email address will automatically be forwarded to our communication service provider Brevo (formerly Sendinblue). This transmission takes place via Zapier, which acts as an integration service. The purpose of this automated transmission is to send a confirmation email regarding your inquiry via Brevo.
Processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you provide when using the form, and on our legitimate interest under Art. 6 para. 1 lit. f GDPR in efficiently and automatically handling your request.
Zapier acts as a technical processor under Art. 28 GDPR. Data transfers to third countries, particularly the USA, may occur. Zapier ensures an adequate level of data protection by implementing EU Standard Contractual Clauses pursuant to Art. 46 GDPR.
Storage Duration and Withdrawal
Zapier does not store data permanently but forwards it solely for technical transmission (“Task”) to Brevo. Your email address will only be stored there as long as necessary for communication purposes. You may withdraw your consent at any time with future effect, e.g., by contacting datenschutz@auftrag.at.
Further Information
For further information on data processing by Zapier, see:
https://zapier.com/privacy
Data Subject Rights
Under data protection law, you are entitled to the following rights as a data subject:
Right of Access
Upon request, we will provide you free of charge with information about the scope, origin, and recipients of your data as well as the purpose of the processing.
Right to Rectification
If your data is inaccurate or incomplete despite our best efforts, we will correct it immediately upon request.
Right to Erasure
Under certain conditions, you have the right to have your personal data erased (e.g., if it was unlawfully collected). If the legal requirements for erasure are met, we will comply without delay.
Right to Restriction of Processing
You may request restriction of processing if you assert a right to erasure and its legality is under review. During this review, your data will not be processed.
Right to Object
If data processing is based on legitimate interests, you may object to it. In the case of direct marketing, your objection is absolute and your data may no longer be used for that purpose.
Right to Withdraw Consent
You may withdraw your consent for the processing of your data for specific purposes at any time.
Right to Data Portability
If you want your data to be transferred to another controller, we will provide it in an electronically transferable format.
You can exercise these rights by emailing datenschutz@auftrag.at. If there are legitimate doubts about your identity, proof of identity may be required to ensure lawful processing and prevent unauthorized disclosure.
In the event of excessive exercise of rights, we reserve the right to charge a reasonable fee.
Right to Lodge a Complaint with the Data Protection Authority
You have the right to lodge a complaint with a supervisory authority if you believe your personal data is being processed unlawfully.
Changes to this Privacy Policy
Your data is subject to the current version of this Privacy Policy, which is always available at https://www.auftrag.at. Should this Privacy Policy be amended or extended, we will inform you accordingly or process your data only as outlined in the version known to you.
Last updated: April 2025