imc Express Privacy Policy
Privacy policy for product "imc Express"
imc Express (hereinafter referred to as the "Product") is operated by imc information multimedia communication GmbH, St. Peter Hauptstraße 27, 8042 Graz, Austria ("we" or "us"). This privacy policy describes how we, as the Controller, process your personal data in connection with this product.
1. What data we process about you
In the course of your use of this product and the processing of your enquiries, we collect the categories of personal data listed in the Annex.
There is no obligation to provide us with the personal data we ask you to provide. However, you will not be able to use this product if you do not provide your personal data. Should the provision of your data be legally obligatory in some cases, we will inform you of this separately.
2. Purposes of the data processing
We process the categories of your personal data listed in the Annex in order to
- provide you with this product and related information;
- fulfil our contractual and legal obligations;
- further improve and develop this product (for this purpose, we only analyse consolidated data and no personal data at user level);
- be able to compile usage statistics (for this purpose, we only analyse consolidated data and no personal data at user level);
- be able to detect, prevent and investigate attacks on our product; and
- ensure the enforcement of our rights.
3. Legal basis of the processing
We process the categories of your personal data listed in the Annex on the basis of
- the fulfilment of a contract concluded with you or the implementation of pre-contractual measures, insofar as this is necessary (Art. 6 (1)(b) General Data Protection Regulation) (“GDPR”)), or
- our overriding legitimate interest pursuant to Art. 6 (1)(f) GDPR, which consists in achieving the purposes mentioned under item 2 (c) and (d), or
- the necessity of fulfilling legal obligations to which we are subject (Art. 6 (1)(c) GDPR), or
- your consent (Art. 6 (1)(a) GDPR), insofar as we receive this from you in certain cases.
We do not make any automated individual decisions that would have legal effects for you or would significantly affect you in a similar way.
4. Transfer of your personal data
Where necessary for the above purposes, we will transfer your personal data to the following categories of recipients:
- IT service providers used by us (e.g. Amazon Web Services EMEA SARL);
- sales partners used by us;
- payment service providers;
- companies belonging to our Group; and
- other registered members of your team, insofar as they use corresponding functionalities of the product.
Some of the recipients mentioned above are located outside your country or process your personal data there. The level of data protection in other countries may not be the same as in your country. However, we only transfer your personal data to countries for which the EU Commission has decided that they have an adequate level of data protection or we take measures to ensure that all recipients have an adequate level of data protection. For example, we conclude standard contractual clauses for this purpose (2010/87/EC and/or 2004/915/EC). These are available on request (see the contact details under item 8).
5. Cookies
We use "cookies" to improve the operation of our product. Cookies are small text files that can be stored on your computer when you visit a website. Basically, cookies are used to provide users with additional functions on a website. Cookies cannot access, read or change any other data on your computer.
- We only use cookies that are absolutely necessary for our app to function (legal basis).
- We do not use any third-party tracking cookies (third-party cookies).
6. Duration of storage
We will only retain your personal data for as long as is necessary to achieve the purposes set out above.
We store your personal data in any case as long as (i) statutory retention obligations exist or (ii) any legal claims for the assertion or defence of which the personal data are required have not yet become time-barred.
7. Your rights in connection with personal data
In accordance with the relevant legal provisions, and subject to the applicable conditions, you are entitled to the following rights, in particular:
- Right to Access: You have the right to request information about whether and to what extent we process your personal data, and to receive copies of such data.
- Right to Rectification: You may request the prompt correction of any inaccurate or incomplete personal data.
- Right to Erasure: You have the right to request the deletion of your personal data, provided that the legal requirements for doing so are met.
- Right to Restrict Processing: You may request the restriction of processing of your personal data if the legal conditions are satisfied.
- Right to Object: You have the right to object to the processing of your personal data based on legitimate interests, on grounds related to your particular situation.
- Right to Withdraw Consent: If the processing of your personal data is based on your consent, you may withdraw your consent at any time with effect for the future. The withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.
- Right to Data Portability: You are entitled to request the provision of your personal data in a structured, commonly used, and machine-readable format.
- Right to Lodge a Complaint with a Supervisory Authority: You may file a complaint with the relevant data protection authority if you believe that the processing of your personal data violates data protection laws.
All other rights to which you are entitled are set out in the applicable legal provisions.
8. Our contact details
If you have any questions or concerns about the processing of your personal data, please contact us:
imc information multimedia communication GmbH,
St. Peter Hauptstraße 27,
8042 Graz,
Austria
E-mail: express-support@im-c.com
Tel: +43 316 25 36 65 - 0
Annex
- E-mail address
- First name, surname
- Customer ID
- Authentication status
- Preferred implementation language
- Account login name
- Password (hash value)
- Date of account deactivation
- Data and times of your use of our product
- IP address, name and version of your web browser