Data protection information

We use cookies so that you can use this website without restriction. Cookies are small text files that enable us to recognize a user and analyse how you use our website. The text files contain a randomly generated unique identification number. A cookie also contains information about its origin and a storage expiry date. These cookies cannot store any other data. Setting cookies does not allow us to view files on your computer.

Cookies set by our website do not present any risk to a user’s computer system as they cause no damage and do not contain viruses, etc.

We use three types of cookie for operating our website:

• Functionally necessary cookies that ensure the technical operation and basic functions of our website. One purpose for this type of cookie is to store the selection you made on the cookie banner regarding which cookies are activated. 
• Statistical/marketing cookies that help us understand how visitors interact with our website and enable us to set up targeted advertising activities. Data is only collected and analysed anonymously. This allows us to gain valuable insights for optimizing our website and our range of products. 
• Third-party cookies if third-party media content is embedded, such as when you play a YouTube video.  

You can prevent the use of cookies by activating the relevant settings in your browser. If your browser supports ‘Do Not Track’ technology and you have activated it, no usage profile will be created for your visit. However, please note that without cookies you may not be able to benefit from the full functionality of this website.

Legal basis
The legal basis for using cookies that are necessary for technical reasons and do not require consent is our legitimate interest, in accordance with point (f) of Article 6(1) GDPR in connection with Section 165(3) Sentence 3 TKG 2021, in ensuring the technical operation and the basic functions of our website and in storing your selected cookie settings and operating the website based on those settings. 

The legal basis for using the cookies for marketing and analysis purposes (see the ‘Matomo’ section below) that you can allow in the cookie banner is your consent in accordance with point (a) of Article 6(1) GDPR.

The legal basis for using third-party cookies is solely your consent in accordance with point (a) of Article 6(1) GDPR, which you can give either in the cookie banner or by accessing the relevant content – for example by playing a YouTube video (see the ‘YouTube videos’ section).
Withdrawal and objection
You can withdraw any consent you have given at any time. In certain circumstances you may have the right to object to processing that is based on a legitimate interest of the data controller. For more information on your rights as a data subject, see section 5.

Recipient 
This data will be transferred at most to the data processor, but not to third parties.

Retention period
For information on how long the various cookies are stored, see the cookie overview in your browser.

Requirement to provide data
You are not obliged to provide this data. If you reject the functional cookies, you may have problems with accessing and using our website. Rejecting other types of cookie will not negatively impact your website experience.

If you have consented to the use of statistical/marketing cookies, our website uses ‘Matomo’ software (https://matomo.org/) as a web analysis tool that helps us enhance and refine our website even further. The software sets cookies on your computer that allow us to recognize your browser. The following data is stored when you access a page on our website:

• Date and time you access a page on our website
• Your browser type
• Browser settings
• Operating system
• Page you last visited
• Quantity of data transferred and access status (data transferred, file not found, etc.)
• Your IP address, shortened to the last two bytes (anonymized)

The data collected by Matomo is stored on our own servers. 
 

Our website includes embedded YouTube videos, which are stored at www.youtube.com and can be played directly from our website. YouTube is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter ‘Google’). We use the ‘privacy-enhanced mode’ provided by YouTube. This means that if you do not play any of the videos, YouTube will not receive any data about you as a user. 

Only when you play the videos are YouTube cookies stored on your computer and data is transferred to Google as the operator of YouTube. If you play videos stored by YouTube, the following data is transferred to Google as a minimum: IP address and cookie ID, the specific address of the page on our website you visited, your browser’s language setting, system date and time you accessed the page, and your browser ID. The data is transferred regardless of whether you are logged into a YouTube user account or whether you have a YouTube user account. If you are logged in to Twitter, the data is directly associated with your account. You can prevent this by logging out of YouTube before pressing the ‘play’ button on the video. YouTube, or rather Google, stores the data in usage profiles, which are used for advertising or market research purposes, and/or to design its website to better meet your requirements. You have the right to object to the creation of these usage profiles. This needs to be addressed to Google as the operator of YouTube. 

Google provides more information about data protection on YouTube here: https://policies.google.com/privacy. By playing the YouTube videos you consent to your data being processed by Google. We at x-tention do not process this data ourselves.

We use the Google Maps module on our website.

Using the module does not cause any cookies to be set. Please note that data is not transferred to Google until you interact with the module by clicking on the map and using the functions. The responsibility for the processing of personal data (e.g. IP address, location) in this regard lies solely with Google. We at x-tention have no access to this data.

The use of Google Maps and the information obtained via Google Maps is subject to Google’s terms of use https://policies.google.com/terms and to the additional terms and conditions for Google Maps, which can be found here: https://www.google.com/intl/gb_en/help/terms_maps/.

We cannot guarantee that data will not be transferred to the USA when you play a YouTube video or use Google Maps. The European Court of Justice (ECJ) Schrems II judgement (C-311/18) found that the USA does not ensure an adequate level of data protection, as US authorities can be granted access to the personal data of EU citizens, and EU citizens have no effective legal remedies against it. By playing the videos or using the maps on our website you give your express consent to the transfer of your data to the USA (point (a) of Article 49(1) GDPR).
 

Purpose

If you contact us using the contact form on the website, by email or by telephone, we store the data you give us for the purposes of processing your query and in case of follow-up questions.

Legal basis

Data processing is either based on our legitimate interest in accordance with point (f) of Article 6(1) GDPR to respond to your query or on a requirement to initiate or fulfil a contract in accordance with point (b) of Article 6(1) GDPR.

Retention period

The data is stored for as long as it takes to achieve the respective purpose, or for as long as required by statutory retention periods.

Recipient

In some circumstances, your personal data may be transferred within the x-tention group (see section 2) or to external processors, but not to third parties.

For the data protection consulting session we use the online scheduling software cituro to allow you to book your appointment. When you open the online scheduling tool, your IP address and the time you accessed the tool are stored as part of the tool operator’s technical log. This information is not used in any way beyond that.

Requirement to provide data

If you are contacting us 
-    with regard to initiating a contract, you are required to provide your data for the purpose of concluding the contract; 
-    with regard to fulfilling a contract, you are obliged to provide the data required for us to process your request correctly;
-    for a reason other than those mentioned above, you are not obliged to provide this data. 
Not providing your data would mean that we would not be able to continue processing your request. This could mean that you are breaching your existing duty to cooperate.

Purpose

On our website you can subscribe to our newsletter, so you can stay up to date and receive interesting company news, features on particular topics and invitations to our events. To set up the subscription we require your name, your email address and your consent to receiving the newsletter. If you subscribe to our newsletter we will also store your IP address plus the date and time of your subscription. This protects us and would serve as evidence if a third party were to abuse your email address and use it to subscribe to our newsletter without your knowledge. In addition we use the double opt-in procedure.

We also create statistics on open, read and click rates related to our newsletters. This allows us to improve our service and only send you information that you really find interesting. 

Legal basis

The legal basis for newsletter dispatch is your consent in accordance with point (a) of Article 6(1) GDPR in connection with Section 174(3) TKG 2021. The creation of statistics is based on our legitimate interest in accordance with point (f) of Article 6(1) GDPR, where our interest arises from the aforementioned purpose. Here, too, you can object by unsubscribing from the newsletter.

In addition, the following applies for x-tention Austria:

As well as accepting newsletter subscriptions on our website, if we receive your email through an existing contractual relationship with you, we will use it to send you a newsletter. When we collect your email address, and every time you receive an email from us, we will clearly indicate how you can easily unsubscribe from our emails, at no charge. In that case the legal basis is our legitimate interest in keeping you up to date with the information listed under ‘Purpose’, in connection with the exception for business relationships in accordance with Section 174(4) TKG 2021.

In addition, the following applies for x-tention Germany:

If we have received your email address because you purchased one of our products or services, we will use it to send you direct marketing for similar products or services that we offer. When we collect your email address, and every time you receive an email from us, we will clearly indicate how you can easily unsubscribe from our emails, at no charge. In that case the legal basis is our legitimate interest in keeping you up to date with the information listed under ‘Purpose’, in connection with the exception for business relationships in accordance with Section 7(3) German Act against Unfair Competition (UWG).

Recipient

In some circumstances, your personal data may be transferred within the x-tention group (see section 2) or to external processors, but not to third parties. We send our newsletters using the Mailworx tool from eworx Network & Internet GmbH. eworx has undertaken to comply with data protection laws.

Retention period

Once you unsubscribe from the newsletter, your data is erased and we cease processing it for the above-mentioned purpose.

Withdrawal

You can cancel your newsletter subscription at any time using the ‘Unsubscribe from newsletter’ button. Your cancellation will be forwarded to the following email address: marketing@x-tention.at. Of course you can also contact us by email or telephone. We will then erase your data relating to the newsletter subscription without delay. Any processing that occurred between you giving your consent and you withdrawing it remains legally valid.

Requirement to provide data

You are not obliged to provide this data. However, if you do not provide it, you cannot subscribe to our newsletter.

Purpose

Any personal data submitted by you as part of a job application (including correspondence) will be recorded, stored, coordinated and evaluated as part of the application process. With your consent we may also keep your application data on file for use in subsequent application processes. We will also store your application data to establish and defend legal claims. In addition, we perform an anonymized evaluation of candidate demographics.

If you do not provide application data, we cannot include your application in the application process, as without it we cannot judge whether you are suitable for the position in question.

Legal basis

Processing is based on the following legal bases:

• Initiation of a contract in connection with the specific application process – point (b) of Article 6(1) GDPR.
• Consent in connection with keeping data on file – point (a) of Article 6(1) GDPR.
• The legitimate interest of the company in keeping a record of candidate data as proof for defence against compensation claims in accordance with the Austrian Equal Treatment Act (GlBG) or the German Expenditure Compensation Act (AAG) – point (f) of Article 6(1) GDPR.

In addition, the following applies for x-tention Austria:

• Statistical purposes whose goal is not to obtain results in a form relating to specific data subjects – Section 7(1) Austrian Data Protection Act (DSG).

Retention period

If your application was unsuccessful, we store your personal data for eight (8) months and then erase it if it is not necessary to establish, exercise or defend legal claims. If you have consented to us keeping your application data on file, it will not be erased until two (2) years after the rejection. 

Exception for x-tention Germany:

Transferred data is stored for six (6) months following a rejection.

Recipient

In some circumstances, your personal data may be transferred within the x-tention group (see section 2) or to external processors, but not to third parties. We use the software solution from Sage GmbH to manage applications. 

Requirement to provide data

• Application process: You are required to provide data during the course of your application. This is necessary for a potential contract. If you do not make your data available, we cannot continue processing your application. 
• Keeping data on file: You are not required to provide data for us to keep on file. If you do not make your data available for us to keep on file, we can no longer contact you with regard to future recruitment opportunities.
   

Depending on the contract it may be necessary to process certain data so that you can access a particular service or so that we can provide it.

Purpose

For the initiation of a contract (quote creation, participation in tenders, etc.), we process the data necessary for those tasks.

Similarly for business relationships we maintain, we process data that is necessary for providing our services and for supporting and informing customers, including internal documentation and administration. In addition we store data to fulfil legal requirements (in particular the Austrian Tax Code (BAO)) as well to establish and defend legal claims.

Legal basis

The following legal bases apply here:

• Initiation or performance of a contract – point (b) of Article 6(1) GDPR.
• Compliance with legal obligations – point (c) of Article 6(1) GDPR.
• The legitimate interest of the company to store data as evidence when establishing or defending legal claims – point (f) of Article 6(1) GDPR.

Retention period

The data is stored for as long as is required to fulfil contractual obligations on both sides.
To comply with legal obligations (in particular Section 132 BAO, Sections 190 and 212 UGB), it is stored for a duration of seven (7) years from the end of the calendar year. In particular cases data may be stored for longer, such as for establishing and defending legal claims. In particular contracts and related data are stored for thirty (30) years, based on the general statute of limitations in accordance with Section 1489 ABGB. The data is restricted until the time when it is erased, so it cannot be further processed or accessed.

Exception for x-tention Germany:

Data is stored for ten (10) years from the end of the calendar year (see in particular Section 147 AO and Sections 238 and 257 HGB).

Exception for x-tention Switzerland:

Data is stored for ten (10) years from the end of the calendar year (see in particular Article 958f ZGB and Article 70(2) MWSTG).

Recipient

To provide our services, we may, where necessary, draw on the services of members of the x-tention group (see section 2) or various external contractors or business partners who participate in the delivery or service provision to the extent required. These are contractually obliged to maintain confidentiality. In addition, we may forward your data to authorities or courts if legally obliged to do so.

Requirement to provide data

-    You are required to provide data for the purposes of initiating or fulfilling a contract. If you do not provide the data, there may be delays in processing your request, or the contract may not be concluded or may be terminated.
-    In addition, you are required to make your data available so we can fulfil our legal obligations (in particular documentation obligations). Not providing your data would leave us unable to fulfil our legal obligations. This could lead to you being liable for compensation if we were to be sanctioned.
 

Activity as external data protection officer

Purpose

For our function as an external data protection officer for our customers, we need to process your data in line with the legal requirements in Articles 37 to 39 GDPR. 

Legal basis

The legal basis for processing your data is the fulfilment of the legal obligations of a data protection officer (point (c) of Article 6(1) GDPR) in accordance with Articles 38 and 39 GDPR, plus the fulfilment of contracts between us and our customers (point (b) of Article 6(1) GDPR). The legal basis for processing special categories of data is the public interest in safeguarding the fundamental right to data protection (point (g) of Article 9(2) in connection with point (c) of Article 6(1) GDPR).

Retention period

The data is stored for as long as is required to fulfil contractual obligations on both sides.
To comply with legal obligations (in particular Section 132 BAO, Sections 190 and 212 UGB), it is stored for a duration of seven (7) years from the end of the calendar year. In particular cases data may be stored for longer, such as for establishing and defending legal claims. In particular contracts and related data are stored for thirty (30) years, based on the general statute of limitations in accordance with Section 1489 ABGB. The data is restricted until the time when it is erased, so it cannot be further processed or accessed.

Exception for x-tention Germany:

Data is stored for ten (10) years from the end of the calendar year (see in particular Section 147 AO and Sections 238 and 257 HGB).

Exception for x-tention Switzerland:

Data is stored for ten (10) years from the end of the calendar year (see in particular Article 958f ZGB and Article 70(2) MWSTG).

Recipient

As well as transferring your data to possible data processors, we will forward it to authorities or courts if we are legally obliged to do so.

Requirement to provide data

You are legally required to provide your data (see legal basis above). If you do not provide your data, we cannot process your request.

Purpose

As is usual at events, photos and/or videos are also taken at events organized by members of the x-tention group. Our aim is not to identify individuals, but simply to document the event. For documentation purposes we store the photos and/or videos securely and may also publish them on the internet (on our website), in our company magazine or in a newsletter. They are also stored for archiving purposes. In addition, we may show these photos/videos at future events organized by the same member or other members of the x-tention group (e.g., anniversary events).

Legal basis

The processing (creation, presentation and publication of photos/videos) is based on our overriding legitimate interest in documenting the events of members of the x-tention group and storing them in an archive (point (f) of Article 6(1) GDPR and for Austria also Section 12 DSG). This also includes the interest in informing the public, our customers and interested parties about events of the x-tention group and in using photographic and video material to document our company history for coming generations.

Retention period

Any photos/videos created are stored for as long as is necessary for the purpose. Photographic/video material will be erased immediately if it is unsuitable for the above-mentioned purposes, if legitimate interests of the people appearing in the photos/videos are infringed, or if data subjects object.

Requirement to provide data

You are not obliged to have your photograph taken or be filmed. There are no downsides for you if you choose not to provide your data.

Objection

If you do not want to have your photo taken/be filmed, please inform the photographer at the event immediately. You can also contact us after photos/videos have been taken. For more information about your right to object, see below.

Purpose

For certain events, we would like to offer people who cannot attend in person the opportunity to follow the event through a live stream. Official speakers are usually mentioned by name. However, it might happen that people are captured on the live stream who, for example, are visiting a booth within the range of the camera. Although it is not our intention to allow such people to be identified, we cannot guarantee that it will not be possible.

The live streams are posted on the usual channels such as YouTube and are usually accessible to all. There is no intention to use the recordings for anything other than the live stream.

Legal basis

The processing (recording and streaming videos at the same time) is based on our overriding legitimate interest in making the event available to as many people as possible. Visitors to events are informed about the live stream at the event itself and can therefore avoid getting in front of the camera. 

Retention period

We do not intend to store the recordings beyond the duration of the live stream. The recorded sound and image files are therefore erased immediately after transmission.

Requirement to provide data

You are not obliged to consent to being filmed. There are no downsides for you if you choose not to provide your data.

Objection

If you do not wish to appear in our videos, we will offer you ways of participating in our events without being filmed.

Management of requests to exercise data subject rights

Purpose

The purpose is to process your requests in connection with data subject rights as set out in the GDPR. We also store this data after having completed the requests as proof that we have fulfilled our statutory obligation to respond to your request adequately and in good time.

Legal basis 

The legal basis for processing your requests is Article 12 et seq. GDPR. As stated there, we must send you any communication in connection with your rights as a data subject. The storage of data after the request has been completed is based on our legitimate interest in accordance with point (f) of Article 6(1) GDPR, where our interest arises from the aforementioned purpose.

Retention period

Your data is stored for three (3) years after the request has been completed. This is in line with the general limitation period as laid out in Section 24(4) DSG and Section 195 German Civil Code (BGB). The data is restricted until the time when it is erased, so it cannot be further processed for other purposes.

Requirement to provide data

You are legally required to provide your data (see legal basis above). If you do not provide your data, we cannot process your requests.
 

Meta (Facebook and Instagram)

LinkedIn

X (formerly Twitter)

XING

YouTube

The members of the x-tention group are represented in various social media with their own appearances:

x-tention Informationstechnologie GmbH (AT)

• Facebook
• LinkedIn 
• XING
• Twitter
• YouTube

FAKTOR D consulting GmbH

• Facebook
• LinkedIn
• YouTube
• XING 

it for industries

• Facebook
• LinkedIn
• Instagram