Tbw research GesmbH (“tbwr”) takes the protection of personal data seriously. The protection of individual privacy when processing personal data is important to us. On the following pages you will find more information on data protection at tbwr.
Responsible
tbw research GesmbH
Grünbergstraße 15/ Stiege 1, 5.Stock
1120 Wien
Email: office(at)tbwresearch.org
In the absence of the requirements of Art. 37 DSGVO, the person responsible is not legally obliged to appoint a data protection officer.
Purpose of processing
The purpose of data processing is the initiation and fulfillment of contracts or assignments of various types of research processes for the provision of the following services in particular: project planning and calculation, consortium management, research management, research and funding advice, project management in the course of research projects, preparation of studies and advice in the different specialist areas of mobility, energy & bioresources, water and construction.
Legal basis for data processing
Personal data is primarily processed by tbwr to fulfill contracts or to carry out pre-contractual measures (Art 6 Paragraph 1 lit b GDPR). Any processing of personal data for marketing purposes (invitation to events, department-specific information events, etc.) takes place within the framework of the ongoing business relationship with customers or based on a legitimate interest of tbwr (Art 6 Paragraph 1 lit f DSGVO).
Categories of recipients of personal data
The person responsible transmits personal data to the following categories of recipients, although the transmission to all the groups of recipients listed does not automatically take place for each processing purpose:
- Banks (payment transactions)
- Tax advice (accounting) and auditing
- if necessary, courts, administrative authorities, other authorities (to assert claims or if there is an obligation to do so)
- Client or cooperation partners (e.g. subcontractors)
- Legal representation for the person responsible
- Insurance on the occasion of the conclusion of an insurance contract for the benefit or the occurrence of the insured event (e.g. liability insurance)
- Transmission to various contract processors for the fulfillment of the contractual relationship, e.g. operators of the website, e-mail providing, IT services (only the possibility of accessing data in the case of necessary maintenance work)
Transmission to recipients in third countries
Some of the above-mentioned recipients may be located outside of Austria or process personal data outside of Austria. The level of data protection in other countries may not correspond to that in Austria. The person responsible therefore takes measures, if necessary, to ensure that all recipients offer an adequate level of data protection. For example, standard contractual clauses (2010/87 / EC and / or 2004/915 / EC) are concluded for this purpose.
Storage duration / deletion periods
Personal data that serve to fulfill a contract will be stored by the person responsible until the expiry of the applicable statutory limitation and retention periods; in addition, until the end of any legal disputes in which the data is required as evidence.
In cases in which personal data were processed for the purpose of contract initiation, but no contractual relationship was established, or no order was placed, the data determined for these purposes will be deleted after three years at the latest.
Rights of the data subject
The data subjects are entitled (i) to check whether and which personal data about them are being processed and to receive copies of this data, (ii) to request the correction, addition, or deletion of the personal data, insofar as this are incorrect or are not processed in accordance with the law, (iii) to require the controller to restrict the processing of their personal data, (iv) to object to the processing of their personal data under certain circumstances or to revoke any consent previously given for the processing, whereby a revocation does not affect the legality of the processing carried out before the revocation, (v) to demand data portability (vi) to know the identity of third parties to whom the personal data of the data subjects are transmitted and (vii) to lodge a complaint with the data protection authority .
The data subjects can use all rights by sending an email to office@tbwresearch.org or contacting us personally (e.g. by phone or directly on site) or by sending a message by post.
In order to exercise the stated rights, the data subjects must identify themselves to the person responsible and contribute to the identification so that it is ensured that the data subject is addressed when responding to the exercise of the respective right.
Legal or contractual provisions for the provision of personal data / requirement for the conclusion of the contract / obligation of the person concerned to provide the personal data / possible consequences of failure to provide it
The person responsible points out that the provision of personal data and their processing is necessary to conclude a contract with the person responsible. In some cases, this is also required by law (e.g. tax and accounting regulations). Failure to provide personal data would mean that the contract with the data subject or with the company for which they are intervening cannot be concluded.
Existence of automated decision-making
The person responsible does not use automatic decision-making or profiling.