1 Processing of personal data when visiting the website

1.1. Processing of access data

When you visit our website, we store the access data in so-called web server log files. We collect the following data from you:

• IP address
• Date and time of access
• Browser
• Operating system
• Your Internet service provider

These data are statistically evaluated to further improve our online offer and make it more user-friendly, to find and fix bugs faster, and to control server capacity. Only in case of a concrete indication of illegal use of our website, we will use this data in a personal form for the purpose of prosecution.

Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client.

The legal basis for the processing of access data is the legitimate interest of VMS (online service offer & data security) pursuant to Article 6 (1) (f) of the GDPR.

1.2. Cookies

1.2.1. Usage of Cookies

In order to make visiting our website attractive and to enable the use of certain functions, as well as to support our marketing activities, we use so-called cookies. These are small text files that are stored on your device. They enable us to recognize your browser on your next visit.

You can set your browser in such a way that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. However, deactivating cookies may restrict the functionality of our website.

The legal basis for the setting of cookies is, in the case of cookies that are necessary for the presentation of the website or the offer of a service requested by you, the legitimate interest of VMS in offering you this website and the corresponding offers, pursuant to Article 6 (1) of the GDPR. For all other cookies, data processing is based on your express consent in the cookie banner (Art 6 para 1 lit a GDPR; § 165 para 3 TKG 2021), which you may change or revoke at any time.

Cookies are deleted as soon as the purpose of storage no longer applies, at the latest after one year. The specific storage periods for each cookie set can be found in our Cookie Management Portal.

You can manage your cookie settings here: https://www.cookieyes.com/product/cookie-consent/

2 Linking

The website includes links to other websites. These references to websites of other Internet users are provided as a service to cover wider information needs of the accessing party. VMS has no influence on their content. VMS assumes no liability for this content. The provider of the linked website is exclusively responsible for the content and correctness of the information provided there.

3 Recipients

Insofar as this is absolutely necessary for the purposes of processing the data, we will transfer parts of your personal data to the following recipients:

• Service providers used by us (agencies, hosting providers …)
• administrative authorities, courts and public bodies
• other recipients specified by the user

Data will not be transferred to countries outside the EEA.

All possible processors have contractually committed themselves to us to comply with the applicable data protection standards.

4 Data security

The security of your personal data is very important to us.

Taking into account the state of the art in terms of technology, the implementation costs and the nature, scope, circumstances and purposes of the data processing, as well as the likelihood and severity of the risk to the rights and freedoms of natural persons, VMS implements appropriate technical and organizational measures within the meaning of Article 32 of the GDPR.

In this sense, the following measures, inter alia, are taken to protect your data and to protect against loss, destruction, access, modification and distribution by unauthorized persons:

• Ensuring the confidentiality, integrity, availability and resilience of systems and services related to data processing;
• Ensuring rapid restoration of the availability of personal data in the event of a physical or technical incident;
• Implementation of procedures for the periodic review, assessment and evaluation of the effectiveness of the technical and organizational measures to ensure the safety of the data processing.

Please note that we do not accept any liability for the disclosure of information due to errors that are not attributable or attributable to us in data transmission and/or unauthorized access by third parties.

5 Your rights

You have the following rights as a user of our website:

• Right of access to information (Article 15 of the GDPR): You have the right to obtain confirmation from VMS as to whether your personal data are being processed. In addition, you have the right to further information about the specific purposes of the processing, the categories of the personal data concerned, the recipients or categories of recipients of the personal data concerned, the storage period, the right to erasure or rectification of your personal data or restriction of processing and the right to object to such processing, the right to lodge a complaint and the right to any available information as to their source.
• Right to rectification(Article 16 of the GDPR): You have the right to obtain from VMS the immediate rectification of your personal data. This right includes the rectification of inaccurate data and the completion of incomplete personal data.
• Right to erasure(Article 17 of the GDPR): You have the right to obtain from VMS the immediate erasure of your personal data, provided that the reasons stated in Article 17 (1) (a) to (f) of the GDPR (e.g. the purpose for processing no longer applies) and the processing of your personal data is no longer required.
• Right to restriction of processing(Article 18 of the GDPR): In the cases mentioned in Article 18 of the GDPR (e.g. inaccuracy of the processed personal data, unlawfulness of the processing, etc.), you also have the right to obtain from VMS the restriction of processing.
• Right to data portability(Article 20 of the GDPR): You have the right to receive your personal data that you have provided to VMS in a structured and commonly used format and to have VMS transmit this data to another controller (e.g. to another law firm).
• Right to object (Article 21 of the GDPR): You have the right to object at any time to the processing of your personal data on this website.
• Withdrawal of consent(Article 7 of the GDPR): You have the option of withdrawing any consent given to VMS at any time.
• Right to lodge a complaint In addition, you can lodge a complaint at any time with the

Austrian Data Protection Authority at:

Österreichische Datenschutzbehörde [Austrian Data Protection Authority]
Wickenburggasse 8
1080 Vienna, Austria

Telephone: +43 1 521 52-25 69

With the exception of the right to lodge a complaint with the Austrian Data Protection Authority, you can assert your rights with VMS at the following address:

datenschutz@vamed.com