Imprint | Legal​

Controller for Data Processing

The controller pursuant to Art. 4(7) EU General Data Protection Regulation (GDPR) is:
Point Ann GmbH
Am Modenapark 10/17
A-1030 Vienna
Austria
Email: dataprotection@pointann.com

1. Data Processing of Persons in a Business Context

We process data provided to us by various individuals through their own submissions, for example, as part of an inquiry by email, for initiating and concluding a contract or a business relationship. We also process data from individuals who participate in events or attend training sessions.

1.1 Data Subjects

• Prospective clients: Company name, contact person’s name, and business contact and address details.
• Customers: Company name, title and names of contact persons, business address and contact details, bank details, contract data including creditworthiness data.
• Suppliers and business partners: Company name, title and names of contact persons, business address and contact details, bank details, contract data.

1.2 Disclosure of Data

Personal data is only disclosed to third parties if this is necessary for contract processing and fulfillment or required by legal provisions.

1.3 Retention and Deletion of Data

Data is deleted as soon as storage is no longer necessary or statutory retention obligations (e.g., tax-related retention periods) have expired. If processing is based on consent, we restrict processing or delete the data upon withdrawal of consent unless legal provisions require otherwise.

1.4 Contact by Email

When you contact us by email, the data you provide is stored based on your consent to answer your questions. We delete the data once processing is no longer necessary or restrict processing if statutory retention obligations exist.

1.5 Legal Bases

• Contract initiation and fulfillment: Art. 6(1)(b) GDPR
• Legal obligations: Art. 6(1)(c) GDPR (e.g., statutory retention and documentation duties)
• Legitimate interests: Art. 6(1)(f) GDPR (e.g., statistical evaluations)
• Consent: Art. 6(1)(a) GDPR (e.g., processing of image data or for advertising purposes)

2. Data Processing via Website, Newsletter, and Applications

2.1 Contact Requests

If you request contact via our web form or send us a message, we store the data necessary for contact: your first and last name, email address, phone number, and any information you provide in the form. Data is deleted once storage is no longer necessary or you object to processing.
Legal basis: Art. 6(1)(a) GDPR.

2.2 Newsletter

To subscribe to our newsletter, we require your email address. You can unsubscribe at any time. After unsubscribing, we will no longer use your data for newsletter distribution. If no business relationship exists and no statutory retention obligations apply, your data will be deleted after unsubscribing.
Legal basis: Art. 6(1)(a) GDPR.

2.3 Job Applicants

If you submit application documents, we process your personal data, CV, and certificates for recruitment purposes. In case of rejection, we delete your documents 7 months after notification.
Legal basis: Art. 6(1)(b) GDPR.
If you consent to being kept on file for future opportunities, we will request explicit consent. If no position arises within one year, we delete all applicant data one year after consent.
Legal basis: Art. 6(1)(a) GDPR.

3. Data Processing When Visiting Our Website

3.1 Informational Use

When using the website for informational purposes only, we collect only the data your browser transmits to our server, necessary for displaying the website and ensuring stability and security:

• IP address
• Date and time of request
• Time zone difference to UTC
• Requested content (specific page)
• Access status/HTTP status code
• Referrer website
• Browser
• Operating system and interface
• Language and browser version
  Legal basis: Art. 6(1)(f) GDPR.

3.2 Cookies

Cookies are stored on your device to make our website more user-friendly. They allow recognition without re-entering data.

• Session cookies: Deleted when browser closes.
• Persistent cookies: Deleted after a set duration.
• Third-party cookies: May collect data for advertising or analytics.
  You can configure your browser to block cookies or delete them manually.
  Legal basis: Art. 6(1)(f) GDPR (technical cookies), Art. 6(1)(a) GDPR (others).

3.3 Data Processing in the USA

Data may be transmitted to the USA when using certain services. Risks include possible disclosure to third parties (e.g., US authorities) and limited enforcement of rights. By consenting to marketing cookies, you explicitly agree to such transfers.
Legal basis: Art. 6(1)(a) GDPR.

4. Server Log Files

To optimize system performance and usability, our provider automatically collects and stores information in server log files, including IP address, browser, language settings, operating system, referrer URL, ISP, and date/time. No merging with other data sources occurs. Data may be reviewed if illegal use is suspected or shared with authorities in case of cyberattacks.
Legal basis: Art. 6(1)(f) GDPR.

5. Use of Google Fonts

Our website uses Google Fonts, a service provided by Google LLC, to ensure a consistent and visually appealing display of text. When you access our website, your browser may download fonts from Google servers. This process involves transmitting your IP address to Google.

Legal Basis:
Art. 6(1)(f) GDPR – Legitimate interest in optimizing the design and functionality of our website.

Data Processing by Google:
Google may process data in the United States. For more information on how Google handles data, please refer to Google’s Privacy Policy:
https://policies.google.com/privacy

Your Options:
If you do not wish to allow Google Fonts to load, you can configure your browser to block external font requests. Please note that this may affect the visual presentation of our website.

6. Your Rights

You have the following rights regarding your personal data:

• Right of access, rectification, and erasure
• Right to restrict processing
• Right to object
• Right to data portability

Please contact: dataprotection@pointann.com

You may also lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at

7. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy periodically. Changes will be published on this page. Please refer to the latest version.