Privacy Policy

DATA PROTECTION

Data protection declaration delux Leadership

The aim of this data protection declaration is to protect personal data that we provide

which is particularly important to us. The following notes will explain how we process your personal data. A possible processing takes place within the framework of the General Data Protection Regulation (GDPR) (EU) 2016/679.

By means of this data protection declaration, our enterprise would like to inform the general public of the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this data protection declaration, of the rights to which they are entitled.

0. Definitions

The data protection declaration of delux Leadership is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). In this data protection declaration, we use, the following terms:

a) Personal data

Personal data means any information relating to an identified or identifiable natural person (“data subject”).

b)    Data subject

Data subject is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.

c)    Processing

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d)    Pseudonymisation

Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

e)    Controller or controller responsible for the processing

Controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Controller or controller responsible in respect to the General Data Protection Regulation (GDPR) or other European Data Protection Regulation is:

delux Leadership, Kaiser Franz Josef Ring 41/13, Baden, Austria (Tel.: +436766457101; E-Mail: deluxleadership@gmail.com) 

f)    Processor

Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

g)    Recipient

Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.

g)    Third party

Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

i)    Consent

Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

  1. Subject of the Privacy Policy

  1. Server log files

In order to operate and maintain the security and functionality of our website and to provide information about our services, the operator of the respective website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

What can be recorded are (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub - websites, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information.

We reserve the right to subsequently check this data if we become aware of concrete indications of illegal use.

With respect to Activity Log information, where Activity Log is disabled or where Activity Log information remains in Squarespace's systems after the 7 day period, that Activity Log information is deleted or anonymized (not identifiable) within 90 days after collection.
For more information on how Squarespace processes personal data as a data controller, please see our Privacy Policy:
https://www.squarespace.com/privacy/
For information on how Squarespace processes personal data as a data processor, please see our Terms of Service and our DPA:
https://www.squarespace.com/terms-of-service/
https://www.squarespace.com/dpa/

The legal basis is, on the one hand, the fulfillment of the contract, specifically the free availability of our website (Article 6 Paragraph 1 lit b GDPR), in our overriding interest in the security and functionality of our website (Article 6 Paragraph 1 lit f GDPR) and, ultimately, what is technically necessary for the operation of the website (Section 165 Paragraph 3 TKG).

  1. Contact us via the contact form

If you decide to contact us via our website contact form, to process your request, we need your personal data (name, email address, your personal message explaining your request). If data is collected in this context, this is done exclusively for the purpose of processing your request. The legal basis is our legitimate interest in answering your request (Art. 6 Para. 1 lit. f GDPR). If the contact is aimed at concluding a contract, the additional legal basis is Art. 6 Para. 1 lit. b GDPR ((pre-)contractual communication).

Once the request has been completed, it will be deleted unless there are legal retention requirements.

  1. Hosting

We use the website builder system from Squarespace, Inc. (225 Varick Street

New York City, New York, United States) for our website. delux Leadership's website is also hosted by Squarespace, Inc. Your information may be stored through Squarespace, Inc.'s data storage, databases and general Squarespace, Inc. applications. Squarespace, Inc. stores your data on secure servers behind a firewall.

To carry out this processing activity, we use Squarespace, Inc. as a processor. Squarespace, Inc. also processes your data in the USA, among other places. The data is transmitted as an adequacy decision based on the EU-US Data Privacy Framework. Information about how Squarespace handles website visitor data, can be found in Squarespace's privacy policy: https://www.squarespace.com/privacy

2. Deletion of personal data

The person responsible for processing processes and stores personal data of the data subject only for the period necessary to achieve the purpose of storage or if this is required by the European legislator or another legislator in laws or regulations which the person responsible for processing is subject to.

If the storage purpose no longer applies or if one of the European directives and regulations applies prescribed by the regulator or another responsible legislator

After the storage period, the personal data will be stored routinely and accordingly deleted in accordance with legal regulations.

3. Rights of the data subject

Each data subject shall have the right granted by the European legislator;

  • to obtain from the controller the confirmation as to whether or not personal data concerning him or her are being processed

  • to obtain from the controller free information about his or her personal data stored at any time and a copy of this information

  • to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her

  • to obtain from the controller the erasure of personal data concerning him or her without undue delay whenever no legal grounds applies and as long as the processing is not necessary

  • to obtain from the controller restriction of processing where a legal ground applies

  • to receive the personal data concerning him or her, which was provided to a controller, in a structured, commonly used and machine-readable format

  • to object, on grounds relating to his or her particular situation, at any time, to processing of personal data concerning him or her, which is based on point (e) or (f) of Article 6(1) of the GDPR.  This also applies to profiling based on these provisions

  • to withdraw his or her consent to processing of his or her personal data at any time

If the data subject wishes to exercise the right to withdraw the consent, he or she may, at any time, contact delux Leadership at deluxleadership@gmail.com.

If you believe that the processing of your data violates data protection law or if your data protection claims have otherwise been violated in a way, you can submit a complaint to the supervisory authority. In Austria, this is the data protection authority: www.dsb.gv.at

 

4. Changes to This Privacy Policy 

We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page.

 

5. Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at deluxleadership@gmail.com.