Privacy Policy

Thank you for visiting our website. This Privacy Policy describes how BASS Technology Management GmbH (hereinafter referred to as ”BASS“) processes and protects according to the European General Data Protection Regulation (GDPR) and subsequently the relevant Austrian data protection laws in particular the DSGVO, the data you provide us with when using our website. 

The security of personal data such as name, address, telephone number, email or any other data you provide us with is a serious and important concern for BASS. Therefore, we conduct our online activities in compliance with the respective statutory provisions relating to data protection and data security.

1. Legal basis for the processing of personal data

The legal basis of data processing for our purposes in the context of the EU GDPR is based on Art. 6 GDPR. Depending on the situation in which we process your data, different legal bases may arise.

Obtained consent
Insofar as your consent has been obtained for the processing of personal data, Art. 6 (1) lit a of the GDPR is the legal basis for the processing of personal data. A given consent for the processing of personal data can be withdrawn at any time.

Contract
When processing personal data collected for the completion of a contract of which you are a party, Art. 6 (1) lit b GDPR is the legal basis for the processing of personal data. This also applies to any processing required to perform pre-contractual measures.

Legal Obligations
If processing of personal data is necessary for compliance with a legal obligation to which BASS is subject, Art. 6 (1) lit c GDPR shall serve as the legal basis.

Vital Interests
In the event that the vital interests of the data subject or of another natural person necessitate the processing of personal data, Art. 6 (1) lit d GDPR shall serve as the legal basis.

Legitimate interests
If processing is necessary to safeguard the legitimate interests of our company or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1) lit f GDPR shall serve as the legal basis for processing. The legitimate interest of our company lies in the execution of our business activities.

2. Data automatically collected on our website/usage data

We welcome anybody to visit our website for free without providing any personal information. When you visit our website, we record the following general usage data in our Server-Log Files in order to assess which parts of our website you visit and how long you stay there. This includes:

• IP address of the device
• Browser information such as operating system and screen resolution
• Requested website
• Origin website
• Date and time
• Services and functions used on our website

Such data will be combined with the usage data of all visitors to our website in order to measure the number of visitors, the average time of the visits, pages visited, etc. The data we collect is combined and used for internal purposes only. The legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f GDPR.
We use this combined data for evaluating our products, services and the news we make available via our website, as well as for monitoring use of our website and generally improving its content. The data will be deleted as soon as it is no longer necessary for the purpose of its collection. If data is stored in log files, this is the case after no more than seven days. Further storage is possible. In this case, the users’ IP addresses are deleted or distorted, so that it is no longer possible to associate them with the calling client.
The collection of data in order to provide the website and the storage of the data in log files is essential for the operation of the website. Therefore the user cannot opt out.
Third party advertisements or links to other websites displayed on our website may collect user data if you click on them or otherwise follow their instructions. We have no control over the data collected either voluntarily or involuntarily via advertisements or websites of third parties. We recommend that you read the privacy policies of the promoted websites if you have any concerns regarding the collection and use of your data.

3. Personal Data

Protection of your personal data is of highest priority for BASS. You decide whether or not you wish to make such data known to us, for example in the course of any registration, survey or the like. Such information on your part is relevant for your enquiry, but you provide it on a voluntary basis. An exception to this rule is when prior consent cannot be obtained for practical reasons and the processing of data is permitted by law.

4. Cookies

To offer the best online experience, BASS sometimes uses the technology known as „cookies“ to collect information on how you use the website, and to ensure your visit runs smoothly. Cookies are text files that are stored in the internet browser or come from the internet browser on the device system. Some of the used cookies are deleted after your visit. Others are permanently stored on your device in order to uniquely identify you when you visit our website again. Our cookies neither disclose nor contain any personal data. Cookies cannot read any information from your device or interact with other cookies on your hard disk. However, cookies enable us to recognize you when you revisit our website. The following data is stored in the cookies:

• Language setting
• Volume settings where applicable

When accessing our website, the user is informed about the use of cookies and referred to this privacy policy. The legal basis for processing personal data using cookies required for technical and analytical purposes is Art. 6 (1) lit f GDPR. The purpose of using technically necessary cookies is to facilitate the use of websites for users.

The user data collected through technically necessary cookies is not used to create user profiles. Analysis cookies are used for the purpose of improving the quality of our website and its contents. Analysis cookies allow us to ascertain how the website is used and thus constantly optimize our service. These purposes are also the basis for our legitimate interests in processing personal data pursuant to Art. 6 (1) lit f GDPR.
If you do not want your browser to accept cookies, you can deactivate or restrict this option in your browser settings. Cookies that have already been saved can be deleted at any time. This can also be done automatically. Deactivation of cookies may prevent this website from functioning properly. You may not be able to access all the options and information on this website.

5. Collection of data and it’s use for contract settlement

We collect personal information if you voluntarily disclose it to us as part of our ”Innovation on Demand” service or when contacting us (for example, by contact form or e-mail). The data collected is shown in the respective input forms. We use the data you have provided for the contract fulfillment and processing of your inquiries. After completion of the contract, your data will be blocked for further use and deleted after expiry of the tax and commercial retention periods, unless you have consented to further use of your data or we reserve the right to further data use permitted by law.

6. Contact form and email contact

Our website offers options leave us your contact details. If a user takes advantage of one of these options, the data entered on the input screen will be transmitted to us and stored.
Alternatively, you can contact us via the email addresses provided on our website. In this case, the user’s personal data transmitted by email will be stored.
No data is passed on to third parties in this context. The data is used exclusively for processing the conversation.
The legal basis for processing the data transmitted in the course of sending an email is Art. 6 (1) lit f GDPR. If the purpose of the email is to conclude a contract, the additional legal basis for the processing shall be Art. 6 (1) lit b GDPR.
The personal data from the input screen is only processed in order for us to process the contact. In the event of contact via email, this is also the basis for the required legitimate interest in the processing of data.
Any other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the contact form input screen and the data sent by email, this is the case if the respective conversation with the user has ended. The conversation is deemed to be ended if it can be inferred from the circumstances that the relevant facts have been conclusively clarified.

7. Data deletion and storage duration

The data subject’s personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Data may be stored beyond this if provisions have been made for this by the European or national legislator in Union regulations, laws or other rules to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the standards mentioned above expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract (e.g.: Innovation on Demand service).

8. Use of services for marketing and analysis purposes

Our website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). The information generated by the cookie (which you can opt-out from) about your use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.  Further information about Google’s privacy policy may be obtained from http://www.google.com/privacy.html.

9. Social Media

Links to external social network services such as LinkedIn are embedded on our website. The responsibility for the internet services of these social network services lies solely with their operators. Below you will find further information, categorized according to the corresponding social network service.
None of your data is transferred to social media services as a result of our links to these services. These are normal hyperlinks, through which no regular data transmission takes place. If you click on the link, you will be taken directly to our social media page on the respective social media service. Data is only transmitted if you are logged into your user account of the corresponding social media service. You can then link to or share content from our websites directly using the social media service. Under certain circumstances, the social media service may thus ascertain which content you have viewed on our website.
The responsibility for the social media services linked to by BASS lies exclusively with:

• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, for LinkedIn and its website

For further information regarding the purpose and scope of data collection, and regarding the further processing and use of your data by the respective social media service, see the privacy rules of the relevant service. These are available online:

• LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=lithograph_footer-privacy-policy

Under the above-mentioned links you will also find information regarding settings for the protection of your privacy and regarding your further rights concerning the processing of your data by the respective social network service.

10. Security

BASS takes precautions to ensure the security of your personal data. Your data will be diligently protected against loss, destruction, manipulation and unauthorized access or unauthorized disclosure and transmission.
BASS protects collected customer data by saving it on servers protected by passwords and “firewalls” that use encryption technologies to prevent unauthorized access.
BASS does its utmost and implements state-of-the-art technology to provide you with a secure environment for the completion of your order; however, we cannot guarantee absolute security of your data.
We ask you to take every available precaution to protect your personal data when online. We encourage you to at least change your passwords on a regular basis, to use a combination of letters and numbers, and to ensure you use a secure browser when surfing the internet.

11. Rights as a data subject

If your personal data is processed, you are a data subject as defined in the GDPR and you have the following rights taken from the third chapter of the GDPR:

a. Information, rectification, restriction and deletion
You have the right to access the data stored about you by BASS and information concerning its origin and recipient and the purpose of data processing by BASS’s websites free of charge at any time. In addition, you have the right to rectify, delete or restrict the processing of your personal data, provided the legal requirements to do so are met. Details can be found in the relevant statutory provisions, Art. 15 to 19 GDPR.

b. Right to data portability
You have the right to receive the personal data concerning you that you have provided to BASS, in a structured, commonly used and machine-readable format. Details can be found in Art. 20 GDPR.

c. Right to information
If you have exercised your right of rectification, deletion or restriction of processing against the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or deletion of data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients by the controller.

d. Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you that is based upon point (e) or (f) of Art. 6 (1) GDPR, including profiling based upon those provisions.
The controller shall no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. According to Art. 77 GDPR you can contact our corporate office for exercising your rights of objection. You can find contact details below.

e. Revocability of declarations of consent under data protection law
You may also revoke your consent with regard to BASS at any time with effect for the future using the contact details given below.

f. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.

12. Responsible authority, contact for queries or exercising your rights as a data subject

If you have any questions, comments, complaints or would like to exercise your rights as a data subject in connection with our Privacy Policy and the processing of your personal data by BASS’s website, feel free to contact us. We will gladly take care of your data protection concerns. The current version of the European Data Protection Regulation (GDPR) is applicable. The responsible authority within the meaning of data protection regulations for all data processing through the BASS website is:

BASS Technology Management GmbH
Friedrich Schillerstraße 11
4840 Vöcklabruck
Austria

Telephone: +43 (0) 660 484 996 0
e-Mail: office@basstm.at

13. Update of the Privacy Policy

BASS may update this Privacy Policy from time to time. Any such changes will be displayed on the website. If you have any comments or questions regarding this Privacy Policy or any other guidelines on this website, please contact us.