Privacy Policy

Privacy policy
Last Updated: 24 July 2023
The protection of your personal data is very important to us, so we would like to list here all the information about the processing and storage of your data when you visit our website and in our companies.
In order to be able to use all the functions and services of our site, it is necessary to collect your personal data. However, processing and storage is only carried out in accordance with the legal guidelines and requirements of the Data Protection Regulation (GDPR) and the Telecommunications Act (TKG 2021).

RESPONSIBLE

Timelapse Systems GmbH
Friedrich-Hebbel-Gasse 9/13
8010 Graz
Austria
M: office@timelapsesystems.at
T: +43 699 81 93 05 97
W: www.timelapsesystems.at

You can find more information in the Imprint.

All employees are obliged to maintain confidentiality and to handle your data properly and to enter it correctly into our data processing systems.

ERHEBUNG UND VERARBEITUNG PERSONENBEZOGENER DATEN AUF DIESER WEBSITE
Note: In order to protect your data as comprehensively as possible from unwanted access, we take so-called technical and organisational measures and use an encryption process on our website. Your data is transmitted over the Internet from your computer to our computer and vice versa using so-called TLS encryption. TLS means "Transport Layer Security" and is an encryption protocol for data transmission on the Internet. You can usually recognise "TLS" by the fact that the lock symbol in the status bar of your browser is closed and the address begins with https://.

COLLECTION AND PROCESSING OF PERSONAL DATA ON THIS WEBSITE

This website automatically collects and stores server log file information that your browser sends to us.
These are
• IP address of the user,
• Date and time of access,
• Type of request,
• Customer information such as type and version,
• Operating system of the user (device, OS version of the device),
• Referrer information (i.e. the source of the access)

The legal basis for this data processing is the legitimate interest according to Art. 6 para. 1 lit. f) GDPR. The legitimate interest is based on being able to identify indications of illegal use of our website (e.g. defence against hacker attacks) and to ensure a smooth connection.

We have concluded an order processing contract with the provider of this website, EDIS Hosting GmbH, based in Graz, Austria, in accordance with Art. 28 GDPR. This is a contract required by data protection law, which ensures that EDIS Hosting GmbH only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR. In addition, we have concluded an order processing contract with commissioned IT service providers and web agencies in accordance with Art. 28 GDPR.
The collected data is stored in server log files that your browser automatically transmits to us in encrypted form. We only store the server log files longer in the event of attacks on our server infrastructure or other legal violations. This longer storage period is based on our legitimate interest according to Art. 6 para. 1 lit. f) GDPR and only serves to preserve evidence.

2. ENQUIRIES VIA THE CONTACT FORM , E-MAIL AND TELEPHONE

Any personal information that you provide to us on a voluntary basis will of course be treated confidentially. We use the personal data you provide exclusively to process and respond to your enquiry. The legal basis for data processing is our legitimate interest according to Art. 6 Para. 1 lit. f) GDPR. This results from our interest in answering enquiries from our customers, business partners and interested parties and in promoting or maintaining customer satisfaction. A further legal basis for natural persons is the initiation or fulfilment of a contract in accordance with Art. 6 (1) (b) GDPR.

All personal data that you transmit to us with your enquiry will be deleted or anonymised by us no later than 2 years after the final reply to you, unless a contract is concluded. The retention period of 2 years is due to the fact that it may occasionally happen that you contact us again about the same matter after a reply and refer to the previous correspondence. Experience has shown that after 2 years no further queries follow our replies.

3. ACCESS TO THE CUSTOMER PORTAL

As a customer, you can use our digital customer portal. You can access it here. The purpose of the customer portal is to provide you with the possibility of retrieving recordings and other optional services.
Your e-mail address is required for registration in the customer portal. You will then receive an e-mail to confirm the installation. We would like to expressly draw your attention to the fact that you choose a strong password. We process this data in order to provide you with secure access to our customer portal in accordance with the state of the art. The legal basis of the data processing is the fulfilment of the contract according to Art. 6 Para. 1 lit. b) GDPR. We do not process the collected e-mail addresses for any other purposes. Without disclosure of your e-mail address, the use of the customer portal is not possible.

We keep your data for the duration of our insurance relationship with you. After that, the data will be deleted.

4. USE OF WEB ANALYTICS TOOLS AND COOKIES

We use cookies to facilitate and improve the use of our website. Cookies are small pieces of text information that can be stored on your computer or smartphone via the browser when you visit a website. This is used to recognise the website visitor. Cookies can also provide us with information about how you use our website so that we can continually improve the design of the website.
Cookies themselves do not contain any personal data about users, they only serve to uniquely identify what our customers find interesting and useful on our website. We also use "web beacons" (small graphic images, also known as "pixel tags" or "clear GIFs") on our website. They are used together with cookies to track general user behaviour on the website.
The legal basis for the processing of personal data using cookies and other technologies is your consent pursuant to Art. 6 (1) lit. a) GDPR, which you give us via the so-called "Consent Banner" as soon as you access our website for the first time.

We use cookies for the following purposes:
• Technically necessary: These are cookies and similar methods without which you cannot use our services, for example to display our website correctly or to use functions you have requested.
• Statistics: These techniques allow us to compile anonymous statistics on the use of our services. This allows us to determine, for example, how we can better adapt our website to the habits of our users.
• Marketing: This enables us to show you advertising content tailored to you based on the analysis of your usage behaviour. Your usage behaviour can also be tracked across different websites, browsers or end devices using a user ID (unique identifier).

The data processed by necessary cookies are required for the purposes listed below to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 lit. f) GDPR.

Any use of cookies that is not absolutely technically necessary constitutes data processing that is only permitted with your explicit and active consent in accordance with Art. 6 (1) a) GDPR. Via our so-called "Cookie Consent Tool", you can set yourself which cookie categories you wish to consent to when visiting our website.

Any use of cookies that is not absolutely technically necessary constitutes data processing that is only permitted with your explicit and active consent in accordance with Art. 6 (1) a) GDPR. Via our so-called "Cookie Consent Tool", you can set yourself which cookie categories you wish to consent to when visiting our website.

Once cookies have been stored, you can delete them at any time via your web browser settings. You can also adjust the settings of your web browser so that no cookies are stored. Then not all functions of our website may be available.

We may use specialised service providers, in particular from the online marketing sector, as part of data processing (using cookies and similar techniques to process usage data). These process your data on our behalf as order processors, are carefully selected in each case and are contractually bound in accordance with Article 28 GDPR. All of the companies listed as providers in our cookie instructions act as so-called order processors.

CONSENT MANAGEMENT VIA REAL COOKIE BANNER

We use the cookie consent technology of devowl.io GMBH, based in Germany, to obtain your consent under data protection law for the storage of certain cookies on your end device or for the use of certain technologies and to document this consent in accordance with data protection law.
A data transfer to devowl.io GmbH does not take place, so that no contract for order processing according to Art. 28 DSGVO has to be concluded.
The use takes place in order to obtain the legally required consent for the use of cookies. The legal basis for this is our legitimate interest according to Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest lies in the legally secure documentation and verifiability of consents (Art. 6 para. 1 lit. c) DSGVO), to fulfill our accountability obligations pursuant to Art. 5 para. 2 DSGVO.

Once cookies have been stored, you can delete them at any time via your web browser settings. You can also adjust the settings of your web browser so that no cookies are stored. Then not all functions of our website may be available.

GOOGLE ADS

We use Google Ads with your consent in accordance with Art. 6 (1) a) GDPR in order to be able to show you advertisements on websites of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") and other third-party providers.
Our purpose is to show you advertising that is of interest to you and to make our website more interesting for you. With conversion tracking, we can determine how successful the individual advertising measures are. To do this, we use cookies that can be used to measure certain parameters for measuring reach, such as the display of ads or clicks by users. If users access our website via a Google ad, a cookie is stored by Google Ads on the corresponding end device. We only receive aggregated evaluations of user behaviour, on the basis of which we can determine which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media.
You can find more information about cookies in the cookie list above.
For more information on the privacy of Google services, please visit: https://policies.google.com/privacy?hl=de

GOOGLE TAG MANAGER

We use the Google Tag Manager of the provider Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.

Through Google Tag Manager, website tags are managed through one interface. This allows us as marketers to manage website tags through one interface. Tags are small sections of code that, for example, record (track) your activities on our website. The Google Tag Manager itself does not set any cookies, but ensures that other tags, which in turn may collect data, are activated, such as Google Analytics.

By implementing the Google Tag Manager, your IP address is transferred anonymously to Google. This may also result in data being transferred to Google servers in the USA. We have concluded an order processing contract with Google in accordance with Art. 28 GDPR. For the USA, there is an adequacy decision, so that the data transfer can take place without further measures. You can view Google's certification here.

In the Tag Manager account settings, we have not allowed Google to receive anonymised data from us.

The storage period of the integrated tracking tools, such as Google Analytics, depends on the respective tool used, which is loaded via the Google Tag Manager.

INTEGRATION OF EXTERNAL VIDEO AND MAP SERVICES

On our websites, we embed videos and map services that are not stored on our servers. To ensure that calling up our websites with embedded videos and maps does not automatically lead to content from the third-party provider being reloaded, we only display locally stored preview images of the maps in a first step. This does not provide the third-party provider with any information.
Only after clicking on the preview image or granting consent via the cookie consent banner under "External media" will content from the third-party provider be reloaded. This provides the third-party provider with the information that you have accessed our site as well as the usage data technically required in this context. We have no influence on the further data processing by the third-party provider. By clicking on the preview image, you give us your consent to reload content from the third-party provider. The embedding is based on your consent pursuant to Art. 6 para. 1 lit. a) GDPR, provided that you have previously given your consent by clicking on the preview image.
Please note that the embedding of some map services may result in your data being processed outside the EU/EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without you being informed or having any legal recourse. If we use providers in insecure third countries and you consent, the transfer to an insecure third country will be based on Article 49(1)(a) of the GDPR. For the USA, there is an adequacy decision, so that the data transfer can take place without further measures. You can view Google's certification here.

Video service provider:
Google Ireland Limited/Google LLC (USA) („YouTube“ und „Google Maps”)

Revocation of consent

If you have clicked on a preview image, the content of the third-party provider will be reloaded immediately. If you do not want such reloading on other pages, please stop clicking on the thumbnails or revoke your consent for reloading via the cookie consent banner.

Data processing in the context of application procedures

In order to receive and manage the application and thus for the purpose of (possibly) establishing an employment relationship, you can send us your application documents by e-mail. The legal basis for this data processing is Art. 6 para. 1 lit. b) GDPR. In the context of the application process, we only collect the data from you that is required to establish the employment relationship with us.
Within our company, only those people who are involved in the decision-making process will have access to your personal data.
In the event of a successful application, your personal data will be stored for the duration of your employment relationship. In addition, after its termination, your tax-relevant data will be archived within the framework of the statutory retention periods. In the event of an unsuccessful application, your personal data will be deleted 7 months after the rejection.

Data processing of business partners and customers

1. Fulfilment of contractual obligations (Art. 6 para. 1 lit. b) GDPR)

The purposes of the data processing result from the implementation of pre-contractual measures and the fulfilment of the obligations from the concluded contract.

a) Processing our contracts with customers

To process the contract with you, we process master data such as your first and last name, your billing address and your billing and payment data. We use your e-mail address for communication purposes. Furthermore, we process your data in our accounting system sevDesk of the company sevDesk GmbH based in Offenburg, Germany. There is an order processing contract with sevDesk GmbH in accordance with Art. 28 GDPR.

2. For the fulfilment of legal obligations (Art. 6 para. 1 lit. c) GDPR)

The purposes of data processing result from legal requirements in individual cases. These legal obligations include, for example, the fulfilment of retention and identification obligations, e.g. within the framework of requirements for tax control and reporting obligations and data processing within the framework of requests from authorities. In this context, data may also be transferred to our appointed tax advisor.

3. To fulfil our legitimate interests (Art. 6 para. 1 lit. f GDPR)

We process the contact data of contact persons at customers, interested parties, suppliers and other business partners for communication by e-mail, telephone and post. The legal basis for the data processing is the legitimate interest according to Art. 6 (1) f) GDPR. The legitimate interest here results from the interest in carrying out or initiating the business relationship with customers, interested parties, suppliers and other business partners as well as the personal contact with contact persons.

As a matter of principle, we exclude the transfer of data to third parties.

Personal data is stored for the purpose of carrying out business relationships for as long as there is a legitimate interest in doing so. It may be necessary to process the personal data provided by you beyond the actual performance of the contract with business partners. The legitimate interests here are in particular the selection of suitable business partners, the fulfilment of compliance measures, assertion of legal claims, defence against liability claims, prevention of criminal offences and the settlement of damages resulting from the business relationship.

4. Who receives the personal data you provide?

Within the framework of the contractual relationships, we may also commission processors or service providers who may have access to your personal data. Compliance with data protection regulations is contractually ensured.

5. Retention period

The personal data will be kept for as long as necessary to fulfil the above purposes.

6. Data processing to document compliance with the GDPR

Insofar as your data is processed on the basis of consent pursuant to Art. 6 (1) a) GDPR or Art. 9 (2) a) GDPR, we process your data exclusively for a specific purpose and after separate information in order to be able to prove, within the scope of the accountability incumbent upon us pursuant to Art. 5 (2) GDPR, that you have consented to the data processing in question.

Insofar as you assert data subject rights from the GDPR against us, we also process and store your data in order to be able to prove within the scope of accountability pursuant to Art. 5 (2) GDPR that we have complied with the GDPR when processing your request.

Insofar as you assert your rights against us under the GDPR, your data may be transferred to our external data protection consultancy (SCALELINE Data Protection).

Operating social media presences

We maintain the following social media presences:

LinkedIn: https://www.linkedin.com/in/judith-plzl-9474b7207/

YouTube:

"LinkedIn" is operated by the European subsidiary LinkedIn Ireland Unlimited Company with its registered office in Ireland. The parent company LinkedIn Inc. is based in the USA.

"YouTube" is operated within the EU by Google Ireland Limited with its registered office in Ireland. The parent company Alphabet Inc. is based in the USA.

Data processing by us:

a. Pflegen der oben genannten Social-Media-Seiten sowie Schalten von Ads („Werbungen)

The personal data entered on social media sites, such as comments, videos, pictures, likes, public messages, etc. are published by the respective social media platform. We reserve the right to delete content should this be necessary. If necessary, we share content on our site and contact you via the social media platform, for example via the messengers offered. In addition, we regularly place advertisements ("ads") via our social media pages. The legal basis for this data processing is the legitimate interest according to Art. 6 para. 1 lit. f) GDPR, which is in the interest of our public relations and communication.

b. Page Insights

The social media platforms provide anonymised statistics and insights that help us gain knowledge about the types of actions people take on our site (called "page insights"). These page insights are created based on certain information about people who have visited our site.

The legal basis for this data processing is our legitimate interest according to Art. 6 para. 1 lit. f) GDPR, which is based on obtaining information about the actions as well as visitors to our pages.

This processing of personal data is carried out by the social media platform and us as so-called joint controllers according to Art. 26 GDPR. In the event of joint responsibility, a separate agreement must be concluded.

LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum
YouTube: https://business.sfety.google/controllerterms/

If you wish to object to certain data processing over which we have control (e.g. deletion of comments), please contact us using the contact details above.

Note: The provision of your data is neither legally nor contractually required or necessary for the conclusion of a contract. You are not obliged to provide your personal data. The consequence of not providing it is that you will not be able to communicate or interact with us via our social media pages or participate in the competition. To contact us, please use the above-mentioned e-mail address.

Data processing by the operator of the social media platform:

In addition to us, there is also the operator of the social media platforms themselves. From a data protection perspective, this operator is also considered to be another data controller who carries out his/her own data processing. This means that the operator is also a separate responsible entity according to the GDPR. However, we have only limited influence on the data processing by the operator. At the points where we can exert influence (e.g. through parameterisation), we work towards data protection-compliant handling by the operator of the social media platform within the scope of our possibilities. In many places, however, we cannot influence the data processing by the operator of the social media platform and also do not know exactly what data they process. The respective operator will inform you about the processing of personal data in its own data protection declaration:

LinkedIn: https://de.linkedin.com/legal/privacy-policy?

YouTube: www.policies.google.com/privacy?hl=de

In the context of platform use, your personal data is usually also processed by the respective platform operator on servers in third countries, in particular in the USA and the United Kingdom. For TikTok, it is also processed in China. Certain third countries are granted a so-called adequacy decision by the European Commission. This means that the legal situation for the protection of privacy in these countries is comparable to that in the EU or the EEA. You can find more information on the current countries with an adequacy decision here. In all other cases, we conclude so-called standard contractual clauses with the platform operators for the transfer of personal data to third countries.

Note: The operator of the social media platform uses web tracking methods. The web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we can hardly influence the web tracking methods of the social media platform. For example, we cannot switch this off. Please be aware of this: It cannot be ruled out that the provider of the social media platform uses your profile and behavioural data, for example, to evaluate your habits or personal relationships and preferences, etc. We have no influence on the processing of your data by the provider of the social media platform.

Data subjects' rights

Your rights as a data subject

According to Art. 15 Para. 1 GDPR, you have the right to receive information about the personal data stored about you free of charge upon request. Furthermore, if the legal requirements are met, you have the right to correction (Art. 16 GDPR), deletion (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR) of your personal data. If you have provided the processed data yourself, you have a right to data transfer according to Art. 20 GDPR.
If the data processing is based on Art. 6 (1) e) or f) GDPR, you have the right to object pursuant to Art. 21 GDPR. If you object to data processing, this will not take place in the future unless the controller can demonstrate compelling legitimate grounds for further processing that outweigh the interest of the data subject in objecting.
If the data processing is based on consent pursuant to Art. 6 (1) a), Art. 9 (2) a) or Art. 49 (1) a) GDPR, you may revoke your consent at any time with effect for the future without affecting the lawfulness of the previous processing.
You also have the right to lodge a complaint with a data protection supervisory authority. In particular, you can lodge a complaint with a supervisory authority in the EU Member State where you live, work or where the alleged infringement took place.
Contact details for the competent data protection authority in Austria: dsb@dsb.gv.at

No automated decision making

We do not carry out automatic decision-making or profiling.

Provision

Unless otherwise stated in the previous chapters, the provision of personal data is neither legally nor contractually required or necessary for the conclusion of a contract. Failure to provide your personal data may mean that we are unable to respond to your enquiries, for example.

This data protection notice was created in cooperation with the consulting firm SCALELINE The legal texts are subject to copyright.