Privacy Notice

Last updated: 23 July 2024

1. Who is responsible for the processing of your personal data?

Silvand, as data controller, is responsible for collecting, using and otherwise processing some of your personal data (the “Processing”). The purpose of this Privacy Notice is to inform you which personal data Silvand processes, why Silvand uses such data, how long Silvand keeps it, what your rights are and how you can exercise them.

2. Whom can you contact?

If you have any questions regarding this Privacy Notice, Silvand as Controller or more generally the Processing, you may contact:

Silvand
Privacy
Mauricio Brand
Mexikoplatz 1/3/15
1020 Vienna, Austria
Email: privacy@silvand.eu

Please use this email address for data protection related questions only. We cannot guarantee an answer for any question not related to data protection.

3. Which personal data are processed?

“Personal Data” includes any information relating to an identified or identifiable natural person (the “Data Subject”).

Silvand processes Personal Data to the extent necessary in the context of its activities, in particular:

  • identification and contact related information (e.g., name, email address, phone number, postal address if provided);

  • professional information (e.g., company / establishment name, role or function, city/country if provided);

  • technical information (e.g., IP address, device/browser information, date/time of access, and basic server logs); and

  • other data similar to the categories mentioned above that you choose to communicate to us.

In addition, Silvand may collect Personal Data that Data Subjects communicate to Silvand (e.g., by email, through a contact form, by telephone, or during a meeting or event).

4. How is your Personal Data collected?

Silvand receives and collects Personal Data:

  • directly from Data Subjects, in particular when filling in request or contact forms on our website, contacting us by email or telephone, or during a meeting; and

  • indirectly through service providers necessary to operate our website and email communications (e.g., website hosting and forms, email service), acting on our instructions.

5. For what purposes does Silvand process Personal Data?

Silvand generally processes and collects your Personal Data for the following purposes (collectively the “Purposes”):

  • to respond to inquiries and manage communications;

  • to comply with legal and regulatory obligations (where applicable);

  • to pursue Silvand’s legitimate interests; and

  • on the basis of the Data Subject’s consent, where required.

i. To respond to inquiries / steps prior to offline arrangements

Silvand processes Personal Data to communicate with you and handle requests, in particular:

  • to respond to messages and inquiries submitted via contact forms or email;

  • to schedule meetings or calls;

  • to prepare proposals or information requested by you.

(Any commercial arrangements, if applicable, are handled offline.)

ii. To its legal and regulatory obligations

Silvand may be subject to legal obligations (e.g., accounting/record-keeping obligations) if an offline transaction occurs or where otherwise required by law. In such cases, Silvand processes Personal Data as necessary to comply with applicable requirements.

iii. To pursue its legitimate interests

Silvand may process Personal Data to pursue legitimate interests, in particular:

  • to manage and operate the website and IT infrastructure, and ensure security and continuity;

  • to prevent misuse, fraud, or attacks and to troubleshoot technical issues;

  • to establish, exercise, or defend legal claims where necessary.

Silvand does not use personal data for profiling and does not carry out targeted advertising based on your behavior on our website.

6. Is your Personal Data shared?

Within Silvand, access to Personal Data is limited to persons who require it on a need-to-know basis.

Silvand may carry out operations with subcontractors (the “Processors”) in relation to its activities. In this context, Silvand may transfer Personal Data to the following categories of recipients:

  • website hosting and website form provider

  • email service provider / domain provider

  • IT/security support providers (if engaged);

  • legal or administrative authorities, upon request and to the extent permitted by law.

Silvand does not sell or otherwise make available your Personal Data to third parties for their own purposes.

7. Is your Personal Data transferred abroad?

Silvand is based in Austria. Depending on where our service providers and their infrastructure are located, Personal Data may be processed or stored outside Austria and potentially outside the EEA.

Where Personal Data is transferred to a country that does not provide an adequate level of protection, Silvand ensures appropriate safeguards are in place (for example, standard contractual clauses), where required by applicable law.

You may obtain further information regarding international transfers by contacting Silvand at the address provided in Section 2.

8. How long is your Personal Data kept?

Silvand keeps Personal Data for as long as necessary to fulfill the Purposes, unless a longer retention period is required or permitted by law.

In general:

  • inquiries and correspondence are kept for as long as needed to handle the request and for a reasonable follow-up period;

  • records connected to legal obligations (e.g., accounting records, where applicable) are retained for the legally required period.

You may obtain additional information about retention by contacting Silvand at the address provided in Section 2.

9. How is your Personal Data protected?

Silvand takes appropriate technical and organizational measures against unauthorized or unlawful Processing of Personal Data and against accidental loss, destruction, or damage.

Personal Data may be stored on Silvand’s systems and/or on the systems of Silvand’s Processors.

10. What are the Data Subjects’ rights in connection with data protection?

Subject to the limitations provided for by applicable regulations, Data Subjects have the following rights:

  • the right to access Personal Data and obtain a copy;

  • the right to have Personal Data rectified if inaccurate or incomplete;

  • the right to request deletion where applicable;

  • the right to object to processing on legitimate grounds, and to object to processing for direct marketing;

  • the right to request restriction of processing where applicable;

  • the right to receive the Personal Data provided, in a commonly used and machine-readable format, where applicable;

  • the right to withdraw consent at any time where processing is based on consent; and

  • the right to lodge a complaint with the competent supervisory authority.

Austria – Supervisory authority:
Österreichische Datenschutzbehörde (DSB), Barichgasse 40–42, 1030 Vienna, Austria, dsb@dsb.gv.at