Privacy & Cookies
We, the Attraktion! Projects GmbH. take the protection of your personal data very seriously. Due to the entry into force of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter: "DS-GVO"), additional obligations have been imposed on us to ensure the protection of personal data of the person affected by a processing. With this statement (hereinafter: "Privacy Statement"), we inform you about the manner in which your personal data is processed by us.
This Privacy Policy applies both to the case that you visit our website immserium.com (hereinafter referred to as "our website"). The following statements apply to both cases, unless explicitly differentiated.
Name and contact details of the controller
In the case of visiting our website, we are, the Attraktion! Projects GmbH, Tuchlauben 7a, 1010 Vienna, Austria Email: [email protected], the controller of your personal data within the meaning of Art. 4 No. 7 DS-GVO ("Controller").
Contact details of our data protection officer
Our external data protection officer is available at all times to answer any questions you may have and to act as your contact person on the subject of data protection at our company. His contact information is:
Contact details of the data protection officer:
Attraktion! Projects GmbH
Tuchlauben 7a
1010 Vienna
Austria
When contacting the data protection officer, please name the company to which your inquiry relates. Please refrain from attaching sensitive information such as a copy of an ID to your request.
Collection and storage of personal data as well as type and purpose of their use
IP address of the requesting computer,
Date and time of access,
Name and URL of the retrieved file,
Website from which the access is made (referrer URL),
Operating system of your computer, hardware version and device settings,
Name of the access provider or mobile operator,
browser used, language and time zone,
preferred display language of the website.
The aforementioned data will be processed by us for the following purposes:
Ensuring a smooth connection of the website,
Ensuring a comfortable use of the website,
Evaluation of system security and stability.
The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.
The aforementioned data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case when you end the session. There is no possibility to object to the collection of the aforementioned data, as their processing is absolutely necessary for the use of the website.
When using contact forms on ours, the data you enter in the form will be processed (name and surname, address, company, e-mail address and the time of submission). The processing serves the handling of your request. We also use your email address to detect and prevent fraud, abuse and other harmful activities. The legal basis is Art. 6 para. 1 p. 1 lit. b or lit. f GDPR. We delete the data collected in this way, if the request is assigned to a contract, after the time limits for the term of the contract, otherwise after the storage is no longer necessary, or restrict the processing if there are legal obligations to retain data.
Any use of any of the aforementioned data for marketing purposes, such as sending customized offers, will only be made with your express consent. The legal basis in this case is Art. 6 para. 1 p. 1 lit. a GDPR.
Disclosure of data to third parties
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only share your personal information with third parties if:
You have provided us with your personal data in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO have given express consent to this,
the disclosure according to Art. 6 para. 1 p. 1 lit. f DSGVO is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
in the event that for the transfer according to Art. 6 para. 1 p. 1 lit. c DSGVO a legal obligation exists, as well as
this is legally permissible and in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO is necessary for the processing of contractual relationships with you.
We will inform you about the details of the transfer at the relevant points in this data protection declaration, in particular in sections 6 and 8.
Transfer of personal data to third countries
Any transfer of your personal data to countries outside the European Economic Area (EEA) will only take place in order to fulfill contractual and business obligations and to maintain your business relationship with us. We will inform you about the respective details of the transfer at the relevant points in this data protection declaration, in particular in sections 6 and 8.
The European Commission certifies data protection comparable to the EEA standard for some third countries by means of so-called adequacy decisions. However, in other third countries to which personal data may be transferred, there may not be a consistently high level of data protection due to a lack of legal provisions. Where this is the case, we ensure that data protection is adequately guaranteed. This is possible via binding company regulations, standard contractual clauses of the European Commission for the protection of personal data, certificates or recognized codes of conduct. Please contact our data protection officer (see section 2) if you would like more information on this.
Cooperation with processors
Like any larger company, we use external domestic and foreign service providers to handle our business transactions. They will only act on our instructions and have been contractually obligated to comply with the data protection provisions within the meaning of Art. 28 DS-GVO.
Specifically, we use the following processors:
Cookies
Analysis tools and tracking tools
In the case of visiting our website immersium.com, we also use analysis and tracking tools.
The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 p. 1 lit. a DSGVO, i.e. carried out with your consent. With the tracking measures used, we want to ensure a needs-based design and the ongoing optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you.
Google Analytics
On our website, we use Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The purpose of our use of the tool is to enable the analysis of your user interactions on websites and in apps and to use the statistics and reports obtained to improve our offer and make it more interesting for you as a user.
We collect interactions between you as a user of our website primarily through cookies, device/browser data, IP addresses, and website or app activity. Google Analytics also collects your IP addresses to ensure the security of the service and to provide us, as the website operator, with information about the country, region or location from which the respective user originates (so-called "IP location determination"). For your protection, however, we naturally use the anonymization function ("IP masking"), i.e. Google truncates the IP addresses by the last octet within the EU/EEA.
Google acts as a processor and have a corresponding standard contract with Google. The information generated by the cookie and the (shortened) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. For these cases, Google says it has imposed a standard on itself that is equivalent to the former EU-US Privacy Shield and has pledged to comply with applicable data protection laws when transferring data internationally. In addition, Google protects the collected data through so-called standard contractual clauses , the purpose of which is to maintain an adequate level of data protection in the third country.
The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your given consent (Art. 6 para. 1 p. 1 lit. a DS-GVO). The revocation of your consent is possible at any time without affecting the permissibility of the processing until the revocation. In apps, you can reset the advertising ID under Android or iOS settings. The easiest way to revoke your consent is to use the respective consent manager or to install Google's browser add-on, which can be accessed via the following link: https://tools.google.com/dlpage/gaoptout?hl=de/.
The personal data will be kept as long as they are necessary to fulfill the purpose of the processing. The data is deleted as soon as it is no longer required to achieve the purpose.
For more information on the scope of services provided by Google Analytics, please visit https://marketingplatform.google.com/about/analytics/terms/de/. Google provides information on data processing when using Google Analytics at the following link: https://support.google.com/analytics/answer/6004245?hl=de/. General information on data processing, which according to Google should also apply to Google Analytics, can be found in Google's privacy policy at www.google.de/intl/de/policies/privacy/
Data subject rights
You have the right,
to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
in accordance with Art. 16 DSGVO to immediately demand the correction of incorrect or completion of your personal data stored by us;
pursuant to Art. 17 DSGVO to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims; pursuant to Art. 18 DSGVO to restrict the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure, we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO;
pursuant to Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
according to Art. 7 par. 3 DSGVO to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing that was based on this consent for the future, and
complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence for this purpose.
Right of objection
If your personal data is collected on the basis of legitimate interests pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data in accordance with Art. 21 DSGVO, provided that there are grounds for doing so which arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
If you wish to exercise your right of revocation or objection, simply send an e-mail to [email protected].
Data security
We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
Actuality and change of this privacy policy
This privacy policy is currently valid and has the status May 2023.