Privacy Policy/Information according to Art 13 and 14 GDPR

AYKA ParX Management GmbH
Weihburggasse 4/2/26
A-1010 Vienna

T: + 43 1 361 27 27
E-mail: office@​ayka-parx.com

1. General / Personal Data

We respect your privacy and are committed to protecting your personal data. This privacy policy informs you about how we handle your personal data when you visit our website and informs you about your privacy rights and how you are protected.

"Personal Data" means all information about a natural person that can be directly or indirectly identified, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier.

"Processing" means any operation or set of operations that is performed on personal data, such as collection, recording, organization, structuring, storage, adaptation or any form of disclosure or other use.

Please read this privacy policy to understand exactly how and why we use your personal data. We recommend that you read this privacy policy, which may be subject to changes, regularly to stay informed.

It is also important that the personal data you provide to us is accurate and up-to-date. Please inform us if your personal data changes during your relationship with us.

Please note that this privacy policy does not cover the use of cookies or pixels and other similar technologies (small data files stored on your hard drive or in your device's memory) that may be placed by third parties. In this regard, we ask you to read the privacy policies of these third parties.

2. For what purposes and on what legal basis is your personal data processed?

We only use your personal data for a specific purpose and when the law allows us to do so, particularly in the following circumstances:

• When processing is necessary to comply with a legal obligation to which we are subject.
• When processing is necessary to protect our legitimate interests or those of a third party, provided your interests or fundamental rights and freedoms requiring the protection of your personal data do not override those interests.
• When you have consented to the processing of your personal data for one or more specific purposes.

You have the right to withdraw your consent at any time by contacting us.

The table below describes the purposes/activities for which we use your personal data and on which legal basis we rely for data processing.

3. Who receives your personal data?

Within our company, only the departments or employees who need your personal data for the respective purposes have access to your personal data.

We only transfer your personal data to third parties if there is a valid legal basis for the transfer. This includes in particular the following recipients:

• Courts and authorities;
• Service providers (e.g., lawyers).

In addition, processors contracted by us (e.g., IT service providers) receive your personal data and process it only on our behalf and according to our instructions. In particular, processors are not allowed to use your personal data for their own purposes.

Some of the aforementioned recipients of your personal data may be located outside your country or process your personal data outside your country. The data protection standards in other countries may not be the same as those in Austria. However, we only transfer your personal data to countries for which the European Commission has determined that they offer an adequate level of data protection; if this is not the case, we take measures to ensure that all recipients provide an adequate level of data protection, for which we conclude standard contractual clauses (Implementing Decision (EU) 2021/914 in conjunction with Regulation (EU) 2016/679).

4. How long will your personal data be stored?

We process your personal data for as long as it is necessary to achieve the purposes mentioned above and beyond in accordance with the legal retention and documentation obligations, which arise in particular from the ABGB and UGB, or to assert, exercise, or defend legal claims.

In general, your personal data will be deleted after you withdraw your consent or object to the processing of your personal data unless the storage of the personal data is necessary to comply with a legal obligation or to assert, exercise, or defend legal claims. Further processing will only take place if you have expressly consented to the further use of your personal data or if we reserve the right to further processing of personal data that is legally permissible.

It is possible that the personal data will not be deleted but anonymized. In this case, the personal reference is irreversibly removed, so the data protection deletion obligations no longer apply. In this case, no personal reference can be restored.

5. Data Security

Your personal data is protected by appropriate technical and organizational measures. These measures include, among other things, protection against unauthorized, unlawful or accidental access, processing, loss, use, and manipulation.

Despite our efforts to maintain a consistently high level of care, it cannot be excluded that information you provide to us via the Internet may be viewed and used by others.

Please note that we therefore assume no liability for the disclosure of information due to errors in data transmission that were not caused by us and/or unauthorized access by third parties (e.g., hacker attacks on accounts).

6. Server Log Files

To optimize our website in terms of system performance, usability, and the provision of useful information about our services, our website provider automatically collects and stores information in so-called server log files that your browser automatically transmits to us. This includes your Internet Protocol (IP) address, browser and language settings, operating system, referrer URL, your Internet Service Provider, and the date/time.

This data will not be merged with other personal data sources. However, we reserve the right to retrospectively check this data if we become aware of concrete indications of illegal use. The legal basis for the aforementioned data processing is our legitimate interest in the functionality, stability, and security of our website.

7. SSL or TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us as the website operator. You can recognize an encrypted connection by the fact that the address line of your browser changes from 'http://' to 'https://' and the lock symbol appears in your browser address bar. If SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

8. What are your rights?

Under the data protection laws, you have the following rights regarding your personal data:

• Request access to your personal data.
• Request correction of your personal data.
• Request deletion of your personal data.
• Object to the processing of your personal data.
• Request restriction of processing of your personal data.
• Request transmission/transfer of your personal data.
• Withdrawal of consent.

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated, you can file a complaint with the supervisory authority. In Austria, the Data Protection Authority is responsible.

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Wien
Telefon: +43 152 152-0
E-mail: dsb@dsb.gv.at

9. Will my personal data be used for automated individual decisions, including profiling?

We do not use automated individual decision-making in accordance with Art. 22 GDPR.

10. Changes to this Privacy Policy

We reserve the right to update this privacy policy to adapt it to legal and technical requirements or changes in our company.

Cookies

Cookies (including other technologies with similar purposes, such as pixel tags) are small text files that are stored on your device during your visit to our website and contain specific information about you. They cannot access, read, or modify other data stored on your device.

Cookies are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit to the website. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.

Many cookies are technically necessary because certain functions of the website would not work without them. Other cookies that are not technically necessary (optional cookies) are used, for example, to analyze user behavior or to display advertisements. Your consent is required for these cookies.

Google Maps

We use the Google Maps service on our website. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. By using Google Maps, personal data is also transmitted to Google and stored on Google servers. We cannot exclude the possibility that data may also be stored on servers in the USA. Personal data includes, among other things, the search terms you enter, your IP address, and the latitude and longitude coordinates. You can learn more about Google's data processing at https://policies.google.com/privacy?hl=de.

Please note that your personal data will only be transmitted after you have given your consent. In order to prevent unauthorized transmission of personal data, we use a so-called two-click solution. A graphic or static image of the map is displayed in the place where the map should appear. This placeholder is uploaded to our website and does not transmit any data. If you hover over this placeholder with your mouse pointer, the text "Click / Touch to accept cookies and load Google Maps" will appear. Only after you have given your consent the desired map from Google Maps will appear at this point and your personal data will be transmitted.

Cookies used by Google (name, purpose, duration):

1P_JAR (Marketing/Tracking, 1 month)
OTZ (Aggregated analysis of website visitors, session or 2 years)
SOCS (used to support Google's advertising services, 13 months)
CONSENT (used to support Google's advertising services, 17 years)
NID (used to support Google's advertising services, 6 months)

We cannot exclude changes to the cookies used by Google.