WEBSITE PRIVACY POLICY

viridiusLAB AG (hereinafter referred to as “viridius”, “viridiusLAB” or “we”) is the responsible party within the meaning of Art 4 Z 7 of the EU General Data Protection Regulation (“DSGVO”) with regard to the processing of personal data of visitors to our website www.viridiuslab.com (for details, please see point I.).

In accordance with Art 13 GDPR, this privacy statement describes, among other things, the types of personal data we process, the purposes for which we process the personal data and the third parties with whom we share the data when you visit our website. In addition, you will be informed about your rights in relation to your personal data and how you can exercise these rights.

I. Who is responsible for data processing?

Responsible person in the sense of Art 4 Z 7 DSGVO is: viridiusLAB AG

Oppolzergasse 6 1010 Vienna FN 551300k ATU76840769

You can reach us at: Tel: +43 (1) 9093440 Email: office@viridiuslab.com^[a]

Contact details of the data protection officer: datenschutz@viridiuslab.com^[b]

II. What personal data do we process?

By personal data, we mean all information that relates to you as a person (Art 4 Z 1 DSGVO).

When you use our website, we may process those personal data that you voluntarily provide to us (e.g. via our contact options).

However, you can also visit our website without actively providing us with information about yourself. In this case, we only collect certain data that your browser transmits to our website server (log files) and data that we collect through the use of cookies or similar technologies.

III. For what purpose and on what legal basis do we process your personal data?

1. Our online offers

When you actively communicate with us via our website, we process those personal data that you voluntarily provide to us. This refers in particular to our following offers:

a) Contacting us: If you choose to contact us via the contact options provided on our website, we will process the personal data that you provide to us (e.g. name, email address, address, message content). We process this in order to answer your questions, fulfill your requests or otherwise communicate with you (legal basis: Art 6 para 1 lit b DSGVO – performance of contract or implementation of pre-contractual measures).

Some of the data we request in connection with our above offers may be marked as mandatory(*). You are not required to provide this data. However, without providing this information, we may not be able to process your request or provide our services.

2. Log files

You can also visit our website without actively providing us with information about yourself. In this case, we collect certain data that your browser transmits to our website server (log files)

Our log files contain the following information: The date and time our website is accessed, (ii) the type, version and settings of your web browser, (iii) your operating system and service provider, (iv) pages and files requested, (v) the website used prior to visiting our website, and (vi) your IP address.  An IP address is a specific number assigned to your computer that enables your device to communicate on a network using Internet Protocol (IP). IP addresses may qualify as personally identifiable information because, under certain circumstances, they allow us to identify the user.

The processing of these log files is necessary for us to ensure the functionality, stability and security of our website. We may also process them as part of forensic investigations in the event of a security incident or to create anonymized user statistics (legal basis: Art 6 para 1 lit f DSGVO – legitimate interest in maintaining the functionality, stability and security of our website).

3. Cookies

Furthermore, this website uses cookies. These are small text files that can be placed on your device while visiting our website and that store certain information about you. Cookies cannot access, read or modify other data stored on your device. When we talk about “cookies”, we include other technologies with similar purposes, such as pixel tags.

We use two types of cookies on our website :

• Necessary cookies: Without necessary cookies, the proper functionality of our website would not be guaranteed or only to a limited extent. The use of necessary cookies on our website is possible without your consent. However, you can disable cookies at any time by changing your browser settings. A detailed description of the necessary cookies used and the respective processing purposes can be found below (legal basis: Art 6 para 1 lit f DSGVO – legitimate interest).
• Optional cookies: These types of cookies may be used to improve our website, optimize your user experience, analyze user behavior or personalize marketing activities. Optional cookies may also be used by external advertising companies (“third party cookies”). Optional cookies are only used with your consent, which you can give by clicking the “OK” button (“I agree”) on the cookie banner of our website. This consent can be revoked at any time with future effect by deleting it in your browser or adjusting your preferences under “Edit cookie setting” in the footer of this website. ^[c]A detailed description of the optional cookies used and the respective processing purposes can be found below (legal basis: Art 6 para 1 lit a DSGVO – consent).

Used necessary cookies

Cookie name	Purpose	Storage duration
AcceptCookies	Necessary to identify the logged in user (necessary for logging in).	365 days

Optional cookies used

Cookie name	Purpose	Storage duration
_ga	This is a first-party cookie that registers a unique ID that is used to generate statistical information about how the user uses the website.	_ga expires after 2 years
_gat     _gid	Google Analytics: We use these cookies to record how visitors use our website. We use this information to generate reports and improve the website. More information on the use of Google Analytics can be found below. Cookie to distinguish individual users on the domain	_gat expires after 1 minute     _gid expires after 24 hours.

 

Google Analytics:

Our website uses Google Analytics,^[e] provided by Google Ireland Limited, Registration Number: 368047, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), which enables us to analyze the use of our website.

The information generated by the cookie about your use of this website (including your IP address and the URLs of the pages visited) may be transmitted to and stored by Google on servers in the United States. The USA does not have an adequate level of data protection and there is a risk that US authorities may gain access to your data.

Our website uses an IP anonymization function provided by Google Analytics. Your IP address will therefore be shortened/anonymized by Google immediately upon receipt. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for us and providing other services relating to website activity and internet usage. Under no circumstances will Google merge your IP address with other data.

Further information on the terms of use concluded by us with Google and on Google’s privacy policy and data protection measures can be found at the following link: https://www.google.com/analytics/terms/gb.html.

For more information on how Google Analytics works and the information we may collect and analyze, please visit https://support.google.com/analytics/answer/1012034?hl=lten&ref_topic=6157800.

The cookies used by Google Analytics are only set in the event of your consent. You can deactivate the collection of your data by Google Analytics at any time using the following link: https://tools.google.com/dlpage/gaoptout/.

IV. To whom do we transfer your personal data?

When operating our website, we also use external IT service providers who process personal data on our behalf as processors within the meaning of Art. 4 Z 8 DSGVO. We use the following categories of processors:

a) Service providers on whose servers our website is operated. b) Service providers who maintain the website on our behalf. c) Service providers on whose servers our appointment scheduling tools are operated. d) Service providers responsible for processing the contact forms .

We oblige these service providers in a contract pursuant to Art 28 DSGVO to adequately protect your personal data.

Some of these service providers may process data in the USA.  The EU Commission and the Court of Justice of the European Union have not attested to an adequate level of data protection in the USA. In particular, there is a risk that this data may be subject to access by local authorities or courts for control and monitoring purposes under the applicable provisions and that no effective legal remedies are available against this.

However, when we transfer personal data to such third countries, we implement appropriate security safeguards to ensure that your rights are protected in accordance with the provisions of the GDPR. This includes the conclusion of the standard contractual clauses for the transfer of personal data published by the EU Commission (Art 46 para 2 lit c DSGVO). Further details about the security guarantees used as well as copies of the respective agreements are available upon request at datenschutz@viridiuslab.com.^[f]

In addition, data may be transferred to a third country with your express consent (Art 49 para 1 lit a DSGVO). In the context of the cookies used on our website, we or third-party providers may also process personal data. These third-party providers also include Google LLC, which is based in the USA and processes data there. Before we set cookies and transfer your data to Google LLC, we ask for your express consent (Art 6 para 1 lit a DSGVO in conjunction with Art 49 para 1 lit a DSGVO). Corresponding information on the individual cookies regarding purposes, data categories and storage duration can be found above under point III. 3. You can revoke your consent to cookies at any time with effect for the future by deleting them in your browser.

V. How long will your personal data be stored?

Log files are generally retained for a period of 14 days. Beyond this period, log files are only stored for the purpose of investigating irregularities or security incidents in our systems. For the storage period of cookies, see point III.3 above.

Apart from that, we only store your personal data for as long as this is necessary for the fulfillment of the purpose for which they were collected. In any case, we therefore store your data for the duration of our contractual or service relationship with you. In addition, we store your personal data in accordance with further statutory retention periods. (e.g. retention obligation under tax law according to § 132 Abs 1 BAO: 7 years, beyond that as long as they are of importance for the tax authority in pending proceedings/ retention obligation under company law according to §§ 190, 212 UGB: 7 years/ retention obligation under turnover tax law for invoices according to § 11 Abs 2 UStG: 7 years).

VI. What data protection rights do you have?

With regard to your personal data, you have the right to information under Art 15 GDPR, the right to rectification under Art 16 GDPR, the right to erasure under Art 17 GDPR, the right to restriction of processing under Art 18 GDPR, the right to object under Art 21 GDPR and the right to data portability under Art 20 GDPR.

If the processing of your data is based on consent, you have the right to revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.

There is no automated decision-making in individual cases or profiling in the sense of Art 22 DSGVO.

You can find more information about your rights at: https://www.dsb.gv.at/rechte-der-betroffenen. Please exercise your data protection rights at datenschutz@viridiuslab.com.

In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 DSGVO). The competent supervisory authority for Austria is the Data Protection Authority, Barichgasse 40- 42, 1030 Vienna (https://www.dsb.gv.at/).