ORATIS Technologies Ltd.
Within the framework of the Oratis platform (“Oratis”), personal data is processed. We, ORATIS Technologies GmbH, are the data controller for this data processing. The protection and security of your personal data is important to us. We process your personal data exclusively within the framework of the applicable data protection law; this includes, in particular, the provisions of the EU General Data Protection Regulation (hereinafter: “DSGVO”) and the Austrian Data Protection Act (hereinafter: “DSG”).
Our contact details are as follows:
ORATIS Technologies GmbH
c/o Impact Hub Coworking Space,
Phone: +43 660 284 65 68
In simple terms, “personal data” is information that allows conclusions to be drawn about your person. Specifically, this includes all information that relates to an identified (or identifiable) natural person. This includes, for example, your name, your date of birth, your address, your e-mail address or your IP address. Data that relates to your sex life and sexual orientation or religious or philosophical beliefs and allows conclusions to be drawn about your sex life and sexual orientation or religious or philosophical beliefs are special categories of personal data (“sensitive data”).
At Oratis, we process data that you provide to us yourself. On the other hand, we also process data at Oratis that is collected automatically (i.e. without your participation).
2. DATA PROCESSING AND ITS PURPOSES
Your data will be processed primarily in order to provide you with Oratis and all its functions. In the following, we will inform you in detail about the data processing at Oratis.
2.1 Data processing in connection with the use of the website
The use of our website, including access to the publicly available content, is generally possible without providing your personal data. The only information collected is that provided by your Internet provider, including in particular the IP address assigned to you, browser type, Internet service provider (ISP), your location, referring/exit pages, operating system, clickstream data, target page and referring URL, as well as the duration and time of your visit. This information is stored for the duration of your visit to the website; it is evaluated solely for statistical purposes while preserving the anonymity of individual users.
2.2 Data processing in connection with registration and the creation of a user profile on the platform
In order to use Oratis, it is necessary to register and create a user profile, which is an information page with details about the respective user. During the registration process as well as during the creation of a user profile, various data are requested and processed. The processing of this data is necessary for you to be able to use Oratis to its full extent. This data (together with the data collected as part of the registration process, “Profile Data”) is used by us to connect you with other users who we think are a good match for you based on the information you provide.
Specifically, the following categories of data are processed as part of the registration process as well as the creation of the user profile at Oratis:
Name (first, and last name);
Date of birth;
Time of birth;
Place of Birth;
Religious or ideological beliefs;
Cell phone number;
The legal basis for this data processing is Article 6 para 1 lit b DSGVO (data processing in the context of contract initiation or performance). Your data relating to your sex life and sexual orientation or religious or philosophical beliefs, we process only with your explicit consent in accordance with Article 9 para 2 lit a DSGVO.
It is not mandatory to provide all the data listed. However, the more and the more accurate you provide this data, the higher the probability that we can connect you with other suitable users. In this context, we refer in particular to device permissions: Mobile platforms may have permission systems for certain types of device data and notifications, such as phone contacts, pictures, location services, push notifications, and advertising identifiers. You can change your settings on your device to either consent to or decline the collection or processing of the relevant data or the display of the relevant notifications. Of course, if you do so, certain services we offer may no longer be functional.
After you have registered and created a user profile, you have the option at any time to review and change the information you have provided (except for the location information, as this is updated automatically).
3. TRANSFER AND DISCLOSURE OF DATA / RECIPIENTS OF YOUR DATA
We will only disclose your personal data to third parties if:
you have given your consent for this within the meaning of Article 6 para 1 lit a DSGVO (you can always revoke consent, see point 9);
this is necessary for the processing of contractual relationships with you according to Article 6 para 1 lit b DSGVO;
in the event that a legal obligation exists for the disclosure pursuant to Article 6 (1) (c) DSGVO or in order to comply with an enforceable official order; or
the disclosure pursuant to Article 6 (1) (f) DSGVO is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.
3.1 Disclosure of data to payment service providers
When processing the transaction process, your payment data (first and last name; credit card information or bank information) is passed on to the payment service provider selected by you, which primarily serves to process the transaction.
In some cases, the payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical integration in the ordering process. You can find more information about the data processing of our payment service providers under the following links:
3.2 Transfer of data to newsletter service providers
See point 4.
3.3 Contact possibility
If you have any further questions regarding the transfer of your data to our business partners, you can contact us (firstname.lastname@example.org) at any time by sending an email.
If you register for our newsletter on our website and give your consent in accordance with Article 6 para 1 lit a DSGVO, we will use the data you provide separately (name and email address) to send you our email newsletter on a regular basis. Unsubscribing from the newsletter (i.e. revoking consent, see point 9); is possible at any time and can be done either by sending an email to us (email@example.com) or via the link provided for this purpose in the newsletter. After revocation of consent/unsubscription from the newsletter, we will no longer send you a newsletter and will delete your data from our recipient list.
For newsletter dispatch, we use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as “The Rocket Science Group”. According to its own information, The Rocket Science Group complies with the legal framework for data transfers by basing data transfers to countries outside the EU or the EEA on standard contractual clauses – unless there is an adequacy decision for the recipient country (for more information, see https://mailchimp.com/legal/data-processing-addendum/ ). In addition, The Rocket Science Group offers further data protection information at http://mailchimp.com/legal/privacy/
5. AUTOMATIC DATA PROCESSING THROUGH COOKIES AND OTHER TECHNOLOGIES.
5.1. Data processing related to strictly necessary cookies.
These cookies are necessary to ensure basic functions of the Website. When you use Oratis, we automatically collect the following data: IP address, location, browser plug-in types and versions, log-in data, operating system and platform, usage time information. This is necessary to provide basic website functions and to ensure full functionality and best possible display of the website on your terminal device. This data processing is therefore based on the legal basis Article 6 para 1 lit f DSGVO (our legitimate interests in the proper and fully functional operation of the website).
5.2 Data processing in connection with analysis cookies & statistics cookies
Analysis cookies allow us to analyze your usage behavior. Statistics cookies allow us to collect data on the usual use of our website. The data processing associated with such cookies serves to better understand your user behavior and to continuously optimize our offer. In addition to the data categories listed under point 2, your user behavior is documented (e.g. which pages you view and for how long) and from this it is derived which content interests you. In addition, the behavior of all users is generally used to determine how our website is used in order to continuously improve our offer.
When registering, you can decide whether statistics and/or analysis cookies should be used. The use of statistics and analysis cookies only takes place if you have actively given your consent in accordance with Article 6 para 1 lit a DSGVO. This consent is voluntary. You can always revoke your consent (see point 9). If you do not give your consent, no statistics and/or analysis cookies will be used (the absolutely necessary cookies will be used independently – see point 5.1.).
You can find more information about the data processing by these providers under the following links:
6. LINKS TO OTHER WEBSITES
Oratis may provide, at certain points, links to other websites that are not under our control. These links are provided for informational purposes only. When you click on one of these links, data about you may be collected by the operators of the respective websites. The data processing may differ significantly from the data processing described here (for more information, please refer to the privacy statements of the respective websites). We have no influence on these data processing operations and therefore accept no responsibility or liability whatsoever. Likewise, we assume no responsibility or liability for their content.
7. DATA PROCESSING IN THE USA
It cannot be ruled out that personal data will be transmitted to the USA when visiting our website. If this is the case, we point this out at a separate point in this data protection declaration.
The DSGVO requires so-called suitable guarantees according to Art. 46 DSGVO for a data transfer to a third country or to an international organization. Such guarantees do not exist for the USA. Possible risks that cannot currently be excluded for you as a data subject in connection with the aforementioned information are in particular:
Your personal data could possibly be passed on to other third parties (e.g.: US authorities) by the respective service provider beyond the actual purpose of fulfilling the order.
You may not be able to sustainably assert or enforce your rights to information against the respective service provider.
There may be a higher probability that incorrect data processing may occur, as the technical organizational measures for the protection of personal data do not fully comply with the requirements of the GDPR in terms of quantity and quality.
With your consent to the processing of (advertising and marketing) cookies, you explicitly consent to the transfer of data to the USA. You can remove cookies stored on your PC yourself at any time by deleting the temporary internet files. Legal basis: Art. 6 para. 1 lit. a DSGVO
8. DATA RETENTION
We will only retain your data for as long as is necessary for our business purposes or due to legal obligations. We will delete your data within the legal deletion periods and therefore after seven years (tax retention period) if you have used services for which a fee is charged. In addition, data could be retained within the legal deletion periods as evidence for any legal disputes. Data retention is thus based either on the legal basis of Article 6(1)(c) DSGVO (if processing is necessary for compliance with a legal or statutory obligation to which we are subject) or on the legal basis of Article 6(1)(f) DSGVO (if processing is necessary to protect our legitimate interests; e.g. as evidence for legal disputes).
If you merely deactivate your user profile, we will only delete it if you do not reactivate it within two years.
9. SECURITY OF DATA
Protecting your privacy is important to us. Therefore, we use appropriate security measures to protect the data we process against unauthorized access, collection, use, disclosure, copying, modification or deletion.
10. YOUR RIGHTS ACCORDING TO THE DSGVO
Right to information: Upon request, we will provide you with comprehensive information on all data stored by us about you within the legally standardized period. This information includes, among other things, the purposes of processing, the categories of personal data and the categories of recipients.
Right to rectification: If you find that we are using your data without your consent, or if we are in breach of the law, or if your data is inaccurate, you can contact us at any time at the e-mail address below and request that the data be rectified. We will comply with this request in a timely manner and correct, supplement or amend your personal data, provided that this does not conflict with any legitimate interests on our part or legal obligations.
Right of deletion: Should you request that your data no longer be stored, you can also request deletion of your data at any time by sending a written request to the e-mail address below. We will then delete all of your data stored by us, unless we are required by law to continue storing data. In such a case, we will inform you that your data will continue to be stored by us. We cannot be held responsible for the deletion of your data by third parties to whom we have passed on data in order to fulfill a contract.
Right to data transfer: You have the right, insofar as this is technically possible, to have all data stored by us about you transferred to another company.
Right to object: You have the right to object to the processing of your data if the processing serves direct marketing purposes or is processed for another purpose based on our legitimate interest pursuant to Article 6 (1) (f) DSGVO. Insofar as we process your data for legitimate purposes, you have the right to object to this processing if grounds for doing so arise from your particular situation.
Right to revoke consent: If you have given your consent to data processing, you have the option to revoke this consent at any time in writing by sending an e-mail to us (firstname.lastname@example.org). This e-mail must clearly state who you are and that you wish to revoke your consent to data processing. However, an effective revocation does not affect the legality of the data processing by these cookies prior to the revocation of consent, because during this period a valid consent for this data processing was given by you.
11. CONTACT FOR DATA PROTECTION CONCERNS
If you have any questions about this privacy statement, wish to contact us with a privacy concern, or wish to exercise your rights, you may contact us by email at any time (email@example.com). We will provide you with feedback on your concern as soon as possible.
12. POSSIBILITY OF COMPLAINT TO THE SUPERVISORY AUTHORITY
In case you do not want to contact us directly, you can also file a complaint with the competent supervisory authority (Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna). The website of the data protection authority is available at the following link: https://www.dsb.gv.at.