Data protection declaration

Who we are

The address of our website is: https://desertgreener.info

Data protection declaration:

Personal data is only collected, processed and used by Seawater BV GmbH in accordance with the requirements of the Austrian Data Protection Act and the General Data Protection Regulation. The responsible and secure handling of your data is important to us. We regularly check this data protection declaration for its up-to-dateness and reserve the right to make adjustments in order to react to new legal or technical developments. The processing of your personal data is subject to the current version of this data protection declaration.

Name and address of the person responsible:

Seawater BV GmbH
Liechtensteinstrasse 25/16
AT-1090 Wien
office@desertgreener.info

1. The desertgreener website

1.1 Log files

When interacting with our website, accesses are stored in log files:
a. Type of data IP address (truncated), date Time
b.
Purpose of processing Protection of our IT systems, documentation of security-relevant incidents, further development of our IT security infrastructure
c.
Legal basis of processing Legitimate interest (Art. 6 Para. 1 lit. f GDPR) in documenting our website accesses
d.
Data transfer We use an IT service provider to host and store the log files.
e. Duration of data storage Log files are stored for twelve months.

1.2 Cookies

The data processed when using our website is deleted as soon as the purpose of storage no longer applies, there are no statutory retention obligations that prevent the deletion of the data and no other information is given below regarding individual processing procedures. 
Session-Cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are stored on your device by the Internet browser you use. These cookies process certain information about you to an individual extent, such as your browser or location data or your IP address.
a. Type of data IP address
b.
Purpose of processing This processing makes our website more user-friendly, effective and secure
c.
Legal basis for processing The legal basis for this processing is Art. 6 Para. 1 lit. b.) GDPR, provided that these cookies process data for the purpose of initiating or executing a contract. If the processing is not for the purpose of initiating or executing a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.
d.
Data transmission Session cookies are not stored permanently and are not passed on to third parties.
e. Duration of data storage When you close your Internet browser, these session cookies are deleted.
Third-party cookies Our website may also use cookies from partner companies with whom we work together for the purposes of advertising, analysis or the functionality of our website. Please refer to the information below for details, in particular the purposes and legal basis for processing such third-party cookies. Removal option You can prevent or restrict the installation of cookies by changing the settings in your Internet browser. You can also delete cookies that have already been saved at any time. The steps and measures required for this depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. However, in the case of so-called Flash cookies, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you are using. If you have any questions, please use the help function or documentation of your Flash player or contact the manufacturer or user support. If you prevent or restrict the installation of cookies, this may mean that not all functions of our website are fully usable.

1.4 Google Analytics

We use Google Analytics on our website. This is a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”. Through certification under the EU-US Privacy Shield, Google guarantees that EU data protection regulations are also adhered to when processing data in the USA.
a. Type of data Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transferred to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. With this function, Google shortens the IP address within the EU or EEA.
b. Purpose of processing The data collected in this way is in turn used by Google to provide us with an evaluation of visits to our website and the usage activities there.
This data can also be used to provide other services related to the use of our website and the use of the Internet.
c.
Legal basis for processing The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
d.
Data transmission Data collected using Google Analytics will not be passed on to third parties.
e.
Duration of data storage The data is processed internally by HWSI and deleted after 3 years.
f.
Details about Google Analytics Google states that it does not link your IP address with other data. In addition,
Google provides you with further information on data protection, such as the options for preventing data use. In addition, Google offers a so-called deactivation add-on with further information on this at https://www.google.com/analytics/privacy/. This add-on can be installed with the common Internet browsers and offers you further control over the data that Google records when you visit our website. The add-on tells the JavaScript (ga.js) from Google Analytics that information about visiting our website should not be sent to Google Analytics. However, this does not prevent information from being sent to us or to other web analysis services. Of course, you can also find out whether and which other web analysis services we use in this privacy policy.

1.5 Google Maps

We use Google Maps on our website. This is a map service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”.
a. Type of data Statistical data in connection with the use of Google Maps.
b. Purpose of processing Providing a map service on the HWSI website.
The data collected can be used by Google to provide further services related to the use of our website and the use of the Internet.
c.
Legal basis for processing The legal basis for this is Art. 6 (1) (a) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
d.
Data transfer No data is transferred to third parties.
e. Duration of data storage The cookies used by Google Maps are stored for up to 2 years
f. Details about Google Maps Google has further information about data protection available for you, for example on the options for preventing data usage and deleting or deactivating cookies that are generated when using Google Maps.

2. Contact

2.1. Contact by telephone

We look forward to hearing from you by telephone. Your telephone number will be temporarily stored by our telephones, but the data is overwritten on an ongoing basis.
a. Type of data Name (first name, last name), telephone number(s), location/provider, duration
b.
Purpose of processing Communication with (potential) business partners and all interested parties
c.
Legal basis for processing Legitimate interest (Art. 6 para. 1 lit. f GDPR) in communication with all interested parties
d.
Data transfer No data is transferred to third parties.
e. Duration of data storage Our telephones store the last eight telephone numbers, and the data is overwritten on an ongoing basis.

2.2. Contact by email

We look forward to hearing from you by email. We process the following personal data:
a. Type of data Name (first name, last name), title, function, address, telephone number(s), email address
b.
Purpose of processing The purpose of processing is to communicate promptly with all interested parties. In the case of potentially long-term relationships, we save the contact details in our systems.
c.
Legal basis for processing • legitimate interest (Art. 6 Para. 1 lit. f GDPR) in prompt communication with all interested parties; • contractual or pre-contractual relationship with business partners (Art. 6 Para. 1 lit. b GDPR);
d.
Data transfer For security reasons, all of our emails are scanned for malware (viruses, etc.). The checks are carried out exclusively in data centers in the EU.
e.
Duration of data storage • The contact details are generally deleted after the end of a business relationship.
• If there is a business interest, contact details are retained and deleted after three years at the latest.

2.3. Personal contact

If you give us your business card at a personal meeting, we will keep it and store your data if necessary.
a. Type of data Name (first name, last name), title, function, address, telephone number(s), email address
b.
Purpose of processing Initiation of business and/or maintenance of the business relationship
c.
Legal basis of processing Initiation or fulfillment of contract (Art. 6 Para. 1 lit. b GDPR); legitimate interest in efficient communication or in making contact in the event of business (Art. 6 Para. 1 lit. f GDPR)
d.
Data transfer Data is not transferred to third parties. Your data will only be passed on with your express consent. e. Duration of data storage If contact details are stored, they will be deleted after three years at the latest.

2.4. Inquiries and urgency

If you send us inquiries or complaints by email or telephone, these will be processed and stored for quality assurance reasons.
a. Type of data Name (first name, last name), title, telephone number(s), email address
b.
Purpose of processing Management of inquiries and urgency
c.
Legal basis of processing Contractual or pre-contractual relationship with business partners (Art. 6 Para. 1 lit. b GDPR); Guarantee of processing of inquiries and complaints (Art. 6 Para. 1 lit. f GDPR)
d.
Data transfer Data will not be transferred to third parties. Your data will only be passed on with your express consent.
e.
Duration of data storage We store personal data in the context of urgency management until the urgency has been processed or for a period of 2 years for quality assurance reasons, after which the data will be deleted manually until the end of any legal disputes arising from the business relationship in which this data is required as evidence.

3. Inquiries to the processing directory

If you send us inquiries by telephone or email regarding the processing of your data, these will be processed and stored for quality assurance reasons.
a. Type of data Name (first name, last name), title, telephone number(s), email address, time of inquiry, email communication records, data from the DVV relating to the person, ID card (for identification)
b.
Purpose of processing Management of inquiries to the data processing directory
c.
Legal basis of processing Management of data within the framework of the proper implementation of the GDPR (Art. 6 para. 1 lit. c GDPR);
d.
Data transfer Data is not transferred to third parties.
e.
Duration of data storage We store personal data in the context of the provision of information until the request has been processed and, if necessary, for the purposes of quality assurance and evaluation for a period of two years, after which the data is manually deleted.

4. Business relationship

4.1. Suppliers

We process the following personal data of our (potential) suppliers or of contact persons employed by them:
a. Type of data Company name, name (first name, last name) of contact persons, address, email addresses, telephone number(s), fax number(s), VAT number, tax number, bank and credit card accounts, Intrastat identification number
b.
Purpose of processing Management of the business relationship with suppliers
c.
Legal basis of processing • Contract or pre-contractual relationship (Art. 6 Para. 1 lit. b GDPR); • statutory regulations (Art. 6 Para. 1 lit. a GDPR): GmbH Act, Commercial Code (UGB), Federal Tax Code (BAO) d. Data transfer • Tender lawyer • Tax advisor • Banks for processing payment transactions Legal representatives in business cases • Certified public accountants for auditing purposes • Courts • Competent administrative authorities,
e.g. tax authorities • Contractual or business partners who are or should be involved in the delivery or service • Insurance companies on the occasion of the conclusion of an insurance contract for the delivery/service or the occurrence of the insured event • Federal Institute of Statistics Austria for the preparation of the legally required (official) statistics • Tenants
e.
Duration of data storage • Data relating to wage tax and contribution obligations in accordance with Section 132 Paragraph 1 BAO: 7 years; • We also store our suppliers’ personal data • until the end of the business relationship or • until the expiry of the applicable guarantee, warranty, limitation or other statutory retention periods or • until the end of any legal disputes arising from the business relationship for which this data is required as evidence.

4.2. Customers

We process the following personal data of our (potential) customers or of the contact persons named by them:
a. Type of data Name (first name, last name) of contact persons, address, email addresses, telephone number(s), fax number(s), possibly bank and credit card accounts,
b. Purpose of processing: handling of the business relationship with customers
c.
Legal basis of processing • Contract or pre-contractual relationship (Art. 6 Para. 1 lit. b GDPR); • statutory regulations (Art. 6 Para. 1 lit. a GDPR): GmbH Act, Commercial Code (UGB), Federal Tax Code (BAO)
d.
Data transfer • Tender lawyer • Tax advisor • Banks for processing payment transactions Legal representatives in business cases • Certified public accountants for auditing purposes • Courts • Competent administrative authorities, e.g. tax authorities • Contractual or business partners who are or should be involved in the delivery or service • Insurance companies on the occasion of the conclusion of an insurance contract for the delivery/service or the occurrence of the insured event • Federal Institute of Statistics Austria for the preparation of the legally required (official) statistics e. Duration of data storage • Data relating to wage tax and contribution obligations in accordance with Section 132 Paragraph 1 BAO: 7 years;
We also store our suppliers’ personal data • until the end of the business relationship or • until the expiry of the applicable guarantee, warranty, limitation or other statutory retention periods or • until the end of any legal disputes arising from the business relationship for which this data is required as evidence.

4.3. Credit check

In the course of establishing new business relationships, credit checks on new suppliers or customers may be carried out, and the following personal data will be processed:
a. Type of data Name (first name, last name) in the case of sole proprietors, address details, email address, telephone number, fax number, VAT number
b.
Purpose of processing Checking the creditworthiness of new suppliers or customers to ensure proper performance of services or compliance with the legal requirements arising from the Federal Procurement Act.
c.
Legal basis for processing • statutory regulations (Art. 6 Para. 1 lit. a GDPR): Federal Procurement Act (BVergG) • Contract or pre-contractual relationship (Art. 6 Para. 1 lit. b GDPR); c. Data transfer We transmit personal data to our processors, the Credit Protection Association of 1870 (KSV) and the Austrian Contractor Register (ANKÖ), to obtain credit information.
d.
Duration of data storage • In procurement procedures according to the BVergG, the credit report is part of the procurement file, which is kept o until the expiry of the applicable guarantee, warranty, limitation or other statutory retention periods or o until the end of any legal disputes arising from the business relationship in which this data is required as evidence. • Credit reports on new contractual partners or customers are deleted after one year.

5. Applications

In the course of applications (e.g. in the case of unsolicited applications or applications for job advertisements), we process the following personal data until we meet you in person for the first time:
a. Type of data Name (first name, last name), address, date of birth and place of birth, telephone number, email address, name (first name, last name) of relatives, photo, educational path, professional positions, service certificates and all other personal data that applicants send to us in their CV and any cover letters.
b.
Purpose of processing The selection and finding of new employees
c.
Legal basis for processing Pre-contractual relationship (Art. 6 Para. 1 lit. b GDPR);
d.
Data transfer No data is transferred to third parties.
e.
Duration of data storage • Unsolicited application: Deletion period: 1 year after receipt. Legal basis: legitimate business interest or limitation periods according to the GlBG/B-GlBG • Application for a position: deletion period 3 years after filling the position (due to B-GlBG and the limitation period of claims according to ABGB 3 years)

6. Technical – organizational measures

Seawater BV GmbH is extremely sensitive when it comes to handling personal data and therefore pursues a structured IT security strategy. Seawater BV GmbH uses the expertise of an IT service provider to ensure the security of your data using the latest technology.

7. Your rights

As a data subject, you have the following rights in accordance with the applicable data protection regulations:
Right to rectification: If, despite our efforts to ensure that the data is correct and up-to-date, incorrect information is stored, we will correct it at your request.
Right to information: Upon request, we will provide you with information about the scope, origin and recipient of the stored data and the purpose of storage free of charge. Right to rectification: If, despite our efforts to ensure that the data is correct and up-to-date, incorrect information is stored, we will correct it at your request.
Right to erasure (“to be forgotten”): Under certain conditions, you have a right to erasure: for example in connection with an objection or in the event of unlawful processing of your data. If you wish the information we have stored about you to be erased, we will comply with this immediately.
Right to restriction of processing: You can also request restrictions on data processing for the same reasons that justify a right to erasure – however, the stored data must remain stored (e.g. for the purposes of preserving evidence), but may no longer be used for any other purpose.
Right to object/revocation: You can object to data processing that we carry out based on a legitimate interest. Consent given can be revoked at any time in writing and free of charge.
Right to data portability: If you want to pass on the data you have provided to another responsible party, we will provide it in an electronically transferable format.
To exercise your rights, please contact the management of Seawater BV GmbH:

Seawater BV GmbH
Liechtensteinstrasse 25/16
AT-1090 Wien
E-Mail. office@desertgreener.info

8. Data protection authority

If you are of the opinion that we are not processing your data in accordance with the legal regulations, or if you are of the opinion that we have not adequately protected your rights, you have the option of filing a complaint with the responsible supervisory authority.
For Austria, this is:
Österreichische Datenschutzbehörde
Wickenburggasse 8
1080 Wien
Tel.: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at
Web: www.dsb.gv.at