Privacy Policy

The controller of this website is:

Phoron Consulting GmbH

Sandra Spies, Michael Perfler

Guglgasse 15/3b

1110 Wien

office@phoron.com

+43 1 748 36 02

We, Phoron Consulting GmbH, are delighted that you are visiting our website and thank you for your interest. Protecting our users' personal data is a pivotal concern of ours. Please therefore note the information below:

1. Basic principles in the processing of personal data

Phoron Consulting GmbH, represented by its managing directors Sandra Spies and Michael Perfler, Guglgasse 15/3b, 1110 Vienna, Austria, tel.: +43 (0) 1 / 748 36 02, fax: +43 (0) 1 / 748 36 22, as the operator of the website www.phoron.com collects, processes and uses the personal data in compliance with the data privacy laws of the Republic of Austria, in particular the Data Protection Act (DSG), the Telecommunications Act (TKG) and the data privacy regulations of the European Union. It is the Controller pursuant to the GDPR. These data privacy provisions explain to the user the manner, scope and purposes of the collection and use of personal data by Phoron Consulting GmbH within the framework of its website and the mailing of its newsletter.

2. Personal data

Personal data are information with the help of which a person is determined or can be determined, i.e. data that can be traced back to a person. These include in particular a person's name, e-mail address or telephone number. But also data about preferences, hobbies, memberships or IP addresses are also personal data.

3. Collection, processing and usage of personal data

Phoron Consulting GmbH collects, processes and uses your personal data when you visit our website or receive our newsletter for the purposes listed below.

a. Contact

In the event of contact with Phoron Consulting GmbH (for instance via the contact form or e-mail), the name, the e-mail address and the user's message that is transmitted will be saved for the purpose of processing the enquiry and in the event that there are any follow-up questions. The legal basis for this processing is that this data processing is necessary so that we can receive, process and answer your contact (Art. 6 Par. 1 Letter b GDPR).

The data are not used for advertising or marketing purposes unless the user explicitly agrees to this usage.

b. Newsletter

We regularly send newsletters by e-mail to our existing and prospective customers in order to inform them about new developments at our company or in our business sector and about events and offers from our company or to send them greetings to mark certain occasions (e.g. Christmas greetings).

If we have provided services in the past for you or your company, the sending of the newsletter to you and the saving of your contact details are based on our legitimate interest in informing you about the news, offers, promotions or events of our company (Art. 6 Par. 1 Letter f GDPR, Section 107 Par. 3 of the Telecommunications Act [TKG]). You can object to receiving electronic information from our company at any time by clicking on the link "Unsubscribe to newsletter". You will find this link in the electronic mailing sent to you. Alternatively, you can also send a message to one of the contact options given above and we will no longer send you the newsletter.

If we have not provided any services in the past for you or your company, the sending of the newsletter to you and the saving of your contact details are based on your voluntary registration for the newsletter (Art. 6 Par. 1 Letter a GDPR, Section 107 Par. 2 of the Telecommunications Act [TKG]). You can revoke your consent at any time by clicking on the link "Unsubscribe to newsletter". You will find this link in the electronic mailing sent to you. Alternatively, you can also send a message to one of the contact options given above and we will no longer send you the newsletter.

When you register for our newsletter, we also save the date of the registration and your IP address. We require these data as proof that you have registered (in particular for the event that it is asserted that a third party has registered an e-mail address to receive the newsletter without permission from the authorised party). The legal basis for this saving is our legitimate interest in documenting our compliance with all statutory regulations and in defending ourselves against any legal claims that are raised or asserted (Art. 6 Par. 1 Letter f GDPR).

Within the framework of the sending of our newsletter, we can also collect and check data on the range and response of our mailings (e.g. opening rate) in order to improve the material sent by us with regard to content and formal aspects. The data processing for this purpose is based on our legitimate interest in continuously improving our mailings and where possible adapting them to the interests of the recipients (Art. 6 Par. 1 Letter f GDPR).

c. Access data / Server log files

Phoron Consulting GmbH collects data about each access to the website (so-called server log files). The access data include:

name of the website visited, file, date and time of the visit, data volume transmitted, report on the successful visit, browser type in addition to version, the user's operating system, referrer URL (the site visited beforehand), the IP address in anonymised form and the requesting provider.

Phoron Consulting GmbH only uses the log data for statistical analyses for the purpose of the operation, security and the optimisation of its services and the website. Phoron Consulting GmbH, however, reserves the right to check the log data retrospectively if there is justified suspicion of unlawful usage based on specific indications. The data processing for this purpose is based on our legitimate interest in guaranteeing the security, availability and optimisation of the functionality of our website (Art. 6 Par. 1 Letter f GDPR).

The retention of these log files is [DAUER].

d. Applications

Phoron Consulting GmbH collects and processes the personal data of applicants for the purpose of processing the application process. A separate Privacy Policy is available here: https://recruitingapp-2816.umantis.com/Vacancies/DataProtection?CompanyID=

4. Forwarding of personal data

To safeguard the security, availability and efficiency of our website and IT environment, we use IT service providers as processors. Under certain circumstances, your personal data may also be made available to them for the aforementioned purposes.

In order to be able to organise, personalise and statistically analyse our mailings, we use a marketing service provider and a signature management service provider to attain the aforementioned goals within the framework of our newsletter mailing; under certain circumstances, your aforementioned personal details may be made accessible to these providers for these purposes.

We do not transmit any personal data to third countries outside of the European Economic Area without your prior consent (which you can revoke at any time) unless this is absolutely necessary to answer your contact request or to send you a newsletter (Art. 49 Par. 1 Letter b GDPR).

5. Cookies

We use cookies. Cookies are small data sets that are generated when websites are called up and are stored on the computer of the respective user. With the aid of cookies, the web server can retrieve information that is used to make the usage of the website easier and more convenient for the visitor and/or to make certain functions possible in the first place.

Firstly, we use functionally necessary cookies that are required technically to offer our website.

Secondly, we use cookies for the statistical recording of the usage of our website (see below). We will only set these cookies if you give your consent to this within the framework of our "cookie banner". You can revoke this consent at any time by deleting the consent cookie "cookie agreed" in your browser settings or by using the other options listed below.

You can set your browser so that cookies are generally rejected or so that you have to confirm the acceptance of cookies in each case. If you fundamentally decide against cookies, you may possibly not be able to use certain functions on the website. The help function in the menu bar of most web browsers will explain to you how you can prevent your browser from accepting new cookies, how your browser can notify you when you receive a new cookie or also how you switch off all cookies that you have received.

6. Google Analytics

Our website uses functions of the web analysis service “Google Analytics” from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you agree to the processing, Google Analytics will set cookies and your IP address will be transferred to Google servers located in the EU, where it will be determined whether a website visit comes from the EU and therefore falls within the scope of the GDPR (location determination via IP address). As a result, device IP addresses of EU citizens are anonymized. Further processing of detailed measurement data (website usage data, location and device data) only takes place in connection with the anonymized IP address. These data sets are transferred to Google in the USA.

Opt-out: https://tools.google.com/dlpage/gaoptout

The admissibility of data transfer to the USA is based on the EU's adequacy decision of July 10, 2023 (EU U.S. Data Privacy Framework). Google is certified under this framework: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active

We process your data due to the legal regulations: § 96 Abs 3 TKG, Art 6 1. (a) (consent) and / or (f ) (legitimate interest) GDPR. Our legitimate interest the improvement of our offer and our website.

We have concluded a data processing contract with the provider.

7. Facebook

We operate a company page (fan page) on the platform “Facebook” of the company Meta Ireland Ltd.(formerly Facebook Ireland Ltd.), 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, and are jointly responsible for data collection (GDPR). The company Meta/Facebook guarantees on the basis of standard contractual clauses to comply with European data protection law. We would like to point out that the company Meta/Facebook collects a large amount of data when you visit our fan pages, including the IP address, information about the device, browser, origin and user behavior. This data may be transferred to countries outside the European Union. Facebook (and/or Instagram) users have given their consent for these data processing processes or this is part of their contract of use with Meta/Facebook.

We operate these fan page for marketing and communication purposes on the basis of our legitimate interest (Art. 6 (1) lit f GDPR).

The company's information on data collection and use can be found here:

https://www.facebook.com/about/privacy

We use the "Facebook Pixel" by Meta Platforms Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, respectively Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland ein. With the Facebook pixel, Facebook can, for example, determine our website visitors as a target group for the display of Facebook advertisements. This enables us to display our Facebook ads in a targeted manner. With the Facebook pixel, we can also check the effectiveness of Facebook advertising and e.g. see whether users have reached our website by clicking on an advertisement. You can manage data processing on the part of Facebook here: https://www.facebook.com/settings?tab=ads

8. Retention of your personal data

We will retain your personal data only for as long as we reasonably deem necessary in order to achieve the aforementioned purposes and as this is permitted pursuant to the applicable law. In all cases, we save your personal data as long as there are statutory retention obligations in this regard (in particular the seven-year retention period according to Section 212 of the Austrian Enterprises Code [UGB] for contact enquiries and newsletters sent) or if limitation periods of legal claims have not yet expired. We will retain your data longer than this period if and as along as we require them to enforce or defend against specific legal claims.

When you register for our newsletter, we save your contact data in our newsletter database until you revoke your consent to the receipt of the newsletter or we suspend sending the newsletter and we will then delete these data.

9. Voluntary nature of the provision of personal data

The provision of your personal data is fundamentally voluntary (cf. above on the option of rejecting data processing via cookies and Google Analytics and of unsubscribing to the newsletter). In our contact form and in our newsletter registration form, it is indicated in each case which data must be provided. The provision of further data is voluntary.

If you do not provide the data, however, you may possibly not be able to use all the functions of our website.

10. Your data privacy rights

You have the right to (i) find out from us whether and which personal data we have saved about you, and to receive copies of these data (Art. 15 GDPR), (ii) to request from us that we rectify, supplement or erase your personal data if these are false or are not processed in compliance with the law (Art. 16, 17 GDPR), (iii) to ask of us under certain circumstances that we restrict the processing of your personal data (Art. 18 GDPR), (iv) to receive your data under certain circumstances in a structured, conventional and machine-readable format or to send them to a third party (right to data portability, Art. 20 GDPR) and (v) under certain circumstances to object to the processing of your personal data (Art. 21 GDPR). If you wish to exercise one or more of these rights, please contact us.

You also have the right to file an appeal with the data protection authority responsible for you (contact details of the Austrian data protection authority cf. www.dsb.gv.at) if you believe that your data privacy rights have been breached.