1 Name and address of the data controller

Your point of contact for the purposes of the European General Data Protection Regulation (GDPR) and other national data protection laws of the Member States, as well as other data protection provisions, is:

CONZEPTA’S RieVers Austria GmbH
Heiligenstädter Straße 28/Top 3
AT-1190 Vienna
Austria
Phone: +43 1 906 26
E-Mail: mailto:[email protected]
(hereinafter referred to as “we” or “our”)

2 Name and address of the Data Protection Officer

The protection of your personal data is of great importance to us. To reflect this, we have commissioned a consultancy firm specialising in data protection and data security to take charge of these key issues. We are advised by:

actago GmbH
Weidenstraße 66
94405 Landau an der Isar
Phone: +49 9951 99990-20
E-Mail: mailto:[email protected]

3 General information on data processing

3.1 Scope of personal data processing

We generally process your personal data only insofar as this is necessary for the provision of our services. The processing of your personal data is usually carried out solely on the basis of your consent. An exception applies in cases where the processing of personal data is justified on other grounds specified in Art. 6 (1) GDPR or where the processing of your personal data is permitted by another legal provision.

3.2 Legal basis for the processing of personal data

Where we seek your consent for the processing of personal data, Art. 6 (1) (a) GDPR serves as our legal basis.

Where the processing of personal data is necessary for the performance of a contract between you and us, Art. 6 (1) (b) GDPR serves as our legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

Where the processing of personal data is necessary for compliance with a legal obligation to which we are subject, Art. 6 (1) (c) GDPR serves as our legal basis.

Where the vital interests of you or another natural person necessitate the processing of personal data, Art. 6 (1) (d) GDPR serves as our legal basis.

If the processing is necessary to safeguard a legitimate interest of ours or of a third party, and your interests, fundamental rights and freedoms do not override the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing. 

3.3 Duration of storage of personal data

Your personal data will be erased or blocked as soon as the purpose for which it was stored no longer applies. Data may also be retained if this is provided for by European or national legislation in EU regulations, laws or other provisions to which we are subject. Data will also be blocked or erased when a retention period prescribed by the aforementioned provisions expires, unless there is a need to retain the data further for the conclusion or performance of a contract.

3.4 Your rights

Where we process personal data relating to you, you, as the data subject, have the following rights:

• You may request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to access those data, as well as further information relating to the processing (Art. 15 GDPR). Please note that this right of access may be restricted or excluded in certain cases.
• If inaccurate personal data are processed, you have the right to rectification (Art. 16 GDPR).
• Where the legal requirements are met, you may request the erasure or restriction of processing (Arts. 17 and 18 GDPR).
  However, the right to erasure pursuant to Art. 17 (1) and (2) GDPR does not apply where the processing of personal data is necessary in accordance with Art. 17 (3) GDPR.
• If you have consented to the processing and the processing is based on this consent, you may withdraw your consent at any time with effect for the future.
  The lawfulness of the data processing carried out on the basis of your consent up to the point of withdrawal remains unaffected by this.

• You have the right to object to the processing of your data at any time on grounds relating to your particular situation (Art. 21 GDPR). Provided the legal requirements are met, we will no longer process your personal data as a result.

Further restrictions, modifications and, where applicable, exclusions of the aforementioned rights may arise from the General Data Protection Regulation or national legislation.

You can also obtain more detailed information on these rights from our Data Protection Officer.

3.5 Right to lodge a complaint with the supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR
(Art. 77 GDPR).

The competent supervisory authority for us is:

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria
Phone: +43 1 52 152-0
E-Mail: mailto:[email protected]

The supervisory authority to which you have lodged a complaint will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 of the GDPR. Our Data Protection Officer is available at any time to answer any queries you may have.

4 Provision of the website and creation of log files

4.1 Description and scope of data processing

Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected in this process:

• information about the browser type and version used
• the user’s operating system
• the user’s IP address
• date and time of access
• the amount of data transferred in each instance
• referrer URL

The data is also stored in our system’s log files. This data is not stored together with any other personal data relating to the user.

4.2 Legal basis for data processing

The legal basis for the processing of your personal data in connection with the provision of the website and the creation of log files is Art. 6 (1) (f) of the GDPR.

4.3 Purpose of data processing

The temporary storage of your personal data by us is necessary to enable the website to be delivered to your computer. To this end, your personal data must be stored for the duration of the session. 

Your personal data is stored in log files to ensure the website functions properly. Furthermore, we use your personal data to optimise the website and to ensure the security of our IT systems. Your personal data is not analysed for marketing purposes in this context. 

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 (1) (f) of the GDPR.

4.4 Duration of storage

Your personal data will be erased as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of your personal data for the provision of the website, this is the case as soon as the respective session has ended. 

Where your personal data is stored in log files, it will be erased after seven days at the latest. Storage beyond this period is possible. In this case, your personal data will be erased or anonymised so that it is no longer possible to identify the client that accessed the site.

4.5 Options to object and have data removed

The collection of your personal data for the purpose of providing the website and the storage of your personal data in log files is strictly necessary for the operation of the website. Consequently, you have no right to object.

5 Cookies

We use cookies to ensure the correct technical and functional provision of this website. Cookies are small text files that are stored on the device you are using.

The legal basis for the storage of information and the processing of personal data by means of technically necessary cookies is Section 25 (2) of the German Telemedia Act (TTDSG) and Art. 6 (1) (f) of the General Data Protection Regulation (GDPR).

Technically necessary cookies are only valid for the current session and are automatically erased as soon as you close your browser.

The use of functional cookies is optional. If these cookies are blocked, certain functions may not be available in full.

The legal basis for the use of non-technically necessary cookies is the user’s consent in accordance with Art. 6 (1) (a) of the GDPR

When you access this website, we store cookies (small files) on your device. These are valid for:

                Name:                                                                                                

• borlabs-cookie
• cf_clearance
• PHPSESSID

6 Contact forms and contacting us by email

6.1 Description and scope of data processing

You can contact us via the email addresses provided. The personal data you provide in your email will be stored. In this context, your data will not be passed on to third parties. The data will be used exclusively for the purpose of handling the correspondence.

We use the application portal of CONZEPTA’S Assekuranzmakler AG to process job applications. By clicking on the application button, you will be redirected to the application portal of CONZEPTA’S Assekuranzmakler AG. Your application data will be processed in accordance with the privacy policy provided there.

6.2 Legal basis for data processing

The legal basis for the processing of your personal data transmitted when sending an email is Art. 6 (1) (f) of the GDPR. If the purpose of contacting us by email is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (b) of the GDPR.

6.3 Purpose of data processing

The processing of your personal data when you contact us by email is used solely for the purpose of handling your enquiry.

6.4 Duration of storage

Your personal data will be erased as soon as it is no longer required to fulfil the purpose for which it was collected.

For personal data sent by email, this is the case once the conversation has ended. The conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively resolved.

Any additional personal data collected during the sending process will be erased after a period of seven days at the latest.

6.5 Right to object and right to erasure

You have the right at any time to object, with future effect, to the processing of your personal data in connection with contacting us by email. In such a case, the conversation between you and us cannot be continued. All personal data stored in the course of the contact will be erased in this instance.

7 Reporting damage

7.1 Description and scope of data processing

On our website, we offer the option to submit claims directly online.
In doing so, we process personal data. This data is derived from the fields to be completed in the relevant PDFs. In addition, an email address must be provided when submitting the claim.

7.2 Legal basis for processing

The legal basis for the processing of personal data from the claim form is Art. 6 (1) (b) of the GDPR.

7.3 Purpose of data processing

The purpose of data processing is to enable claims to be reported quickly and to facilitate processing as swiftly as possible.

7.4 Duration of storage

The personal data contained in the claim notification will be stored until its processing has been completed and any contractual or statutory retention periods have expired.

7.5 Right to object and right to erasure

You may submit your claim at any time directly via the customer portal, by email, fax or post. 

8 Newsletter

8.1 Description and scope of data processing

Our website offers a newsletter in which we keep you informed about current events and updates. If you wish to subscribe to the newsletter, you must provide a salutation, a title (optional), a first name (optional), a surname and a valid email address . By subscribing to the newsletter, you agree to receive it and to the procedures outlined herein.

We use the so-called double opt-in procedure for registration. This involves logging the newsletter subscription, the sending of the confirmation email and the receipt of the confirmation requested therein.

The technical distribution of the newsletter is carried out by SEIMO Mobile Marketing GmbH, based at Museumstraße 7, 4020 Linz, Austria. The data required for this purpose is passed on to SEIMO Mobile Marketing GmbH for the purpose of the technical distribution of the newsletter. A contract for data processing has been concluded with SEIMO Mobile Marketing GmbH.

Information on the service provider’s privacy policy is available at: https://www.seimo.net/datenschutz/

8.2 Legal basis for data processing

The legal basis for the processing of your personal data in connection with the distribution of the newsletter is your consent pursuant to Art. 6 (1) (a) of the GDPR.

8.3 Purpose of data processing

The processing of your personal data serves to send you the newsletter and to inform you about current events and updates.

The processing of your form of address, title, first name and surname is used to address you personally in the newsletter.

The data processed as part of the double opt-in procedure is used to verify and confirm that the registration was actually carried out by the owner of the email address provided. Furthermore, the processing serves to prevent misuse of the email address. The data required for this purpose is passed on to SEIMO Mobile Marketing GmbH solely for the technical purpose of sending the newsletter.

8.4 Duration of storage

Your personal data will be erased as soon as it is no longer required to fulfil the purpose for which it was collected. Your personal data will therefore be stored for as long as your newsletter subscription remains active.

Once you have unsubscribed from the newsletter, your personal data will be erased, provided there are no statutory retention obligations to the contrary.

8.5 Right to object and right to erasure

You may cancel your newsletter subscription at any time. A link for this purpose is included in every newsletter. Your personal data will be erased following your cancellation. Cancelling your subscription also allows you to withdraw your consent.

9 Google Web Fonts

To ensure consistent font display, this website may use what are known as Google Web Fonts. When these fonts are used, your browser downloads the required fonts from our website system. These are then temporarily stored in the browser cache to ensure the fonts are displayed correctly. Your browser does not establish a connection to Google’s servers during this process. This ensures that Google does not gain any knowledge of your visit or your IP address.

Further information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

10 Direct marketing

10.1 Description and scope of data processing

Our company processes personal data, in particular your name, postal address, contact details and, where applicable, information regarding existing customer relationships, in order to send you advertising and marketing communications relating to our products and services by post, email or other means of communication.

10.2 Legal basis for data processing

Where you have given us your consent, we process your personal data for marketing purposes on the basis of Article 6 (1) (a) GDPR.

Where direct marketing is carried out by post, we process your personal data on the basis of Article 6 (1) (f) GDPR. Our legitimate interest lies in promoting our products and services and maintaining existing customer relationships.

10.3 Purpose of data processing

Your personal data is processed for the purposes of direct marketing, promoting our products and services, and maintaining existing customer relationships.

10.4 Duration of storage

Your personal data will be deleted as soon as it is no longer required for the purposes for which it was collected. In the event that you withdraw your consent or object to the processing of your personal data for marketing purposes, your personal data will no longer be processed for such purposes.

10.5 Right to Withdraw Consent and Right to Object

You may withdraw any consent you have given at any time with effect for the future in accordance with Article 7 (3) GDPR.

Where your personal data is processed for direct marketing purposes on the basis of Article 6 (1) (f) GDPR, you have the right, pursuant to Article 21 (2) GDPR, to object at any time to the processing of your personal data for direct marketing purposes. If you object, your personal data will no longer be processed for such purposes.

11 Legal defence and enforcement

11.1 Description and scope of data processing

Our company seeks to protect itself against unjustified claims through legal defence. We also enforce the claims and rights to which we are entitled.
To this end, it is necessary to process personal data.
This consists of the legally relevant data of the data subjects.

11.2 Purpose of data processing

The purpose of processing your personal data in the context of legal defence and enforcement is to defend against unjustified claims and to legally enforce claims and rights. This purpose constitutes our legitimate interest in data processing pursuant to Art. 6 (1) (f) of the GDPR.

11.3 Duration of storage

Your personal data will be erased as soon as it is no longer required to fulfil the purpose for which it was collected.

Your personal data will be erased as soon as it is no longer necessary for the purpose for which it was collected.

Die Verarbeitung Ihrer personenbezogenen Daten im Rahmen der Rechtsverteidigung und Rechtsdurchsetzung ist für die Rechtsverteidigung und Rechtsdurchsetzung zwingend erforderlich. Es besteht folglich für Sie keine Widerspruchsmöglichkeit.

12   Empfängerkategorien

Innerhalb unseres Unternehmens erhalten diejenigen Stellen und Abteilungen personenbezogene Daten, die diese zur Erfüllung der zuvor genannten Zwecke brauchen. Daneben bedienen wir uns zum Teil unterschiedlicher Dienstleister und übermitteln Ihre personenbezogenen Daten an weitere vertrauenswürdige Empfänger. Diese können z.B. sein:

• Banken
• Auskunfteien
• Scan-Service
• Druckereien
• Lettershops
• IT-Dienstleister
• Rechtsanwälte und Gerichte

13   Weitere Hinweise

Soweit nichts anderes geregelt ist, unterliegt die Nutzung sämtlicher Informationen, die wir über Sie haben, dieser Datenschutzerklärung.

Das Unternehmen behält es sich vor, diese Datenschutzerklärung den erforderlichen Sicherheitsmaßnahmen entsprechend der technologischen Entwicklung fortlaufend anzupassen, und wird etwaige Änderungen an dieser Stelle bekannt geben.

Stand: Mai 2026