Data protection

Trust is important, especially when it comes to your data. That is why we see it as our duty to manage your data with the utmost care and to do everything we can to protect your information from misuse.

UniCredit Center am Kaiserwasser GmbH strictly adheres to the data protection regulations when collecting and processing your data. The following information explains in detail what data is collected during your visit to our website and how we use it.

This privacy policy applies to the website http://kaiserwasser.unicreditcenter.at of UniCredit Center am Kaiserwasser GmbH. Individual pages may contain links to other providers within and outside our company to which the data protection declaration does not apply, i.e. we cannot accept any liability for this content.

1. who is responsible for data processing and who can you contact?

Responsible for data processing:

UniCredit Center am Kaiserwasser GmbH

Eiswerkstrasse 20

1220 Vienna

E-mail: UniCreditCenter@unicreditgroup.at

2 What data is processed and from which sources does this data originate?

We process the personal data that we receive from you in the context of a business relationship.

The personal data includes

• Your personal details (name, address, contact details, date of birth, nationality, etc.)
• Identification data (e.g. ID card data)

In addition, this may also include the following data

• Order data
• Data from the fulfillment of our contractual obligations
• Image and sound data (e.g. video or telephone recordings)
• Information from your electronic communications

3. for what purposes and on what legal basis is the data processed?

We process your personal data in accordance with data protection regulations:

- for the fulfillment of contractual obligations (Art. 6 para. 1b GDPR):

The processing of your data (personal data, Art 4 No. 2 GDPR) is necessary in order to be able to process our services with you.

The specific details on the purpose of data processing can be found in the respective contract documents and terms and conditions.

- for the fulfillment of legal obligations (Art. 6 para. 1c GDPR):

Certain legal obligations to which UniCredit Bank Austria AG is subject may require personal data to be processed.

- within the scope of your consent (Art. 6 para. 1a GDPR):

If you have given us consent to process your personal data, processing will only take place in accordance with the purposes set out in the declaration of consent and to the extent agreed therein. Consent given can be withdrawn at any time with effect for the future (e.g. you can object to the processing of your personal data for marketing and advertising purposes if you no longer consent to processing in the future).

4 Who receives your data?

Within UniCredit Center am Kaiserwasser GmbH, those departments and employees who need your data to fulfill their contractual and legal obligations will receive it. In addition, processors commissioned by us (media employees, marketing services) will receive your data if they need it to fulfill their respective tasks. All processors are contractually obliged to treat your data confidentially and to process it only within the scope of providing the service.

5 How long will your data be stored and processed?

For the duration of the entire business relationship (from the initiation to the execution to the termination of a contract) and beyond in accordance with the statutory retention and documentation obligations. These result, among other things, from

• the Austrian Commercial Code (UGB)
• the Federal Fiscal Code (BAO)

In addition, the statutory limitation periods, which can be up to 30 years in certain cases (the general limitation period is 3 years) according to the General Civil Code (ABGB), for example, must be taken into account for the storage period.

6 What data protection rights are you entitled to?

You have at all times

• the right to information, correction, deletion or restriction of the processing of your stored data
• a right to object to the processing
• a right to data portability in accordance with the requirements of data protection law

You can submit complaints to the Austrian Data Protection Authority: www.dsb.gv.at

7 Are you obliged to provide data?

You must provide the personal data that is required for the establishment and execution of our business relationship and that we are legally obliged to collect.

If you do not wish to provide us with the data, we will generally have to refuse to conclude the contract or execute the order. In this case, we can no longer execute an existing contract and must therefore terminate it.

However, you are not obliged to give your consent to the processing of data that is not relevant for the fulfillment of the contract or is not required by law and/or regulation.

8. web analytics

In order to analyze and improve the structure and navigation of our website and to tailor it to the needs of our customers and to provide you with advertising offers tailored to your individual needs, we have commissioned various service providers (Google) to create records on the website using cookies. Our service providers only receive anonymous data and are not able to establish a connection with your person.

UniCredit Center am Kaiserwasser GmbH receives statistical evaluations as a result, which we use to check the needs-based design of our website.

You still have the option of objecting to these recordings and not using the above-mentioned services:

Click here to

Deactivate retargeting with Google

Please note that in the event of an objection, not all functions of our website can be provided in full. By using this website, you consent to the processing of the data collected about you by our service providers.

9. social media

UniCredit Center am Kaiserwasser GmbH cooperates with various providers of social networks. As part of this cooperation, your browser is automatically connected to the selected service provider (e.g. Facebook) when you use the respective service. For example, your IP address, cookies and other information are transmitted to the respective service provider if you have previously visited their website. This data transfer is prevented by us as far as possible and only takes place when you interact with the social network. If you are logged in to the relevant social network platform, it can assign your visit to our website to your user account.

We also use plug-ins (e.g. Facebook symbol) from various platforms. By clicking on the respective symbol, you consent to communication with the respective platform and the transmission of information (e.g. IP address) to the respective service provider. For more information on the respective use of your data, please refer to the privacy policy of the selected service provider.

10 Data security

Your data security is our top priority. It is our declared aim to take all necessary technical and organizational measures to ensure the security of data processing and to process your personal data in such a way that it is protected against access by unauthorized third parties.

By using state-of-the-art security software, coding and encryption procedures, our IT infrastructure complies with the highest international security standards.

In addition, we promote the security of your data through the use of risk-minimizing measures and preventive safeguards.