Privacy Policy

We take the protection of your personal data very seriously. We process your personal data in accordance with the statutory data protection regulations as well as this Privacy Policy. The use of our website is generally possible without providing personal data. If personal data (such as name, address, or email addresses) is collected on our pages, this is always done, as far as possible, on a voluntary basis.

Controller
The controller responsible for processing your personal data on our website is Digituu.

Server Log Files
For the purpose of monitoring technical functionality and increasing the operational security of the web server, we process your personal data such as IP address in a server log file on the legal basis of legitimate interest pursuant to Art. 6 (1) lit. f GDPR (technical security measures) for a maximum duration of 7 days.

Cookies / Local Storage
This website stores personal data and information in cookies and local storage. Cookies and local storage make websites more user-friendly and efficient. Processing is carried out on the legal basis of legitimate interest pursuant to Art. 6 (1) lit. f GDPR (cookies and local storage improve the quality of services and are used to store user preferences, provide recommendations for content and search results, and track user trends). Furthermore, processing is also based on the consent you have given pursuant to Art. 6 (1) lit. a GDPR. How the web browser handles cookies, session storage, and local storage—what storage operations are allowed or denied and for how long the data is processed—can be set in the browser’s settings.

Third Party Cookies
If cookies from third parties are used as part of integrated services, we are not responsible under data protection law for the processing of personal data in this context. Please refer to the information on these data processing activities in the separate details provided for the integrated services and their privacy policies.

Processors / Recipients
We process your personal data with the support of the processors listed below. Our processors are strictly obliged to protect your personal data and may not use it for any purpose other than providing our services. Apart from our processors, your personal data is only passed on to typical business service providers. If data processing activities are carried out by processors or service providers beyond the purposes mentioned in this Privacy Policy, the processor or service provider is the data controller for these additional processing activities. Please refer to the privacy policy of the respective processor or service for information on these data processing activities.

Data Transfer to Third Countries
A transfer of your personal data to the USA takes place exclusively on the basis of the Privacy Shield. More information about the Privacy Shield can be found below under the respective service.

Hosting
For hosting our website, we use the following processor:
Service: Amazon AWS
Provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA
Privacy Policy: https://aws.amazon.com/privacy/
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4&status=Active

Content Delivery Networks
For the purpose of securely and efficiently providing, analyzing, and optimizing our website, we use Content Delivery Networks. Our web server connects to a large number of other servers in order to shorten loading times, among other things. Your personal data is processed on the legal basis of legitimate interest pursuant to Art. 6 (1) lit. f GDPR (demand-oriented design of the website) for a maximum of 7 days or until objection.
We use the following service:
Service: StackPath / Bootstrap CDN
Provider: Stackpath, LLC, 2021 McKinney Ave. Suite 1100, Dallas, TX 75201, USA
Privacy Policy: https://www.stackpath.com/legal/privacy-statement/
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000CbahAAC&status=Active

Web Fonts
We process your personal data for the purpose of demand-oriented presentation of our website using web font services on the legal basis of legitimate interest pursuant to Art. 6 (1) lit. f GDPR (uniform and appealing presentation of the website). The font provider becomes aware that you have accessed our website. The transmission (IP address) occurs only once for each visit to the website.
We use the following service:
Service: Google Fonts
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy Policy: https://policies.google.com/privacy

Social Plug-Ins
Our website includes buttons on some pages for sharing content on social media platforms. These buttons are designed in such a way that the underlying script (computer program) does not process personal data.

Application Form
Our website offers you the option of submitting your application online. The personal data you provide in the application form will be processed by the controller for the purpose of handling your application on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR until revocation or for a maximum of 6 months after completion of the application process. There is no legal or contractual obligation to provide personal data. The only consequence of not providing such data is that we cannot process your application. Your applicant data will not be shared with third parties.

Newsletter
By checking the box or clicking the confirmation link, you consent to the processing of the personal data you have entered for the purpose of receiving information about current products, news, and events by the controller via electronic direct marketing until revocation. Within our legitimate interest pursuant to Art. 6 (1) lit. f GDPR (defense against legal claims), we also process technical data such as your IP address or the time of your consent for the purpose of proving your consent pursuant to Art. 6 (1) lit. a GDPR for the same period. There is no legal or contractual obligation to provide personal data. If you do not give your consent, you will not receive our email newsletter.
We use the following service:
Service: MailChimp
Provider: The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
Privacy Policy: https://mailchimp.com/legal/
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active

Web Analytics Services
We process your personal data for the purpose of web analysis on the legal basis of legitimate interest pursuant to Art. 6 (1) lit. f GDPR (analysis of the use of our online offering, creation of reports about activities within this online offering, provision of other services related to the use of this online offering) as well as on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR until revocation or objection.
We use the following service:
Service: Google Analytics
Provider: Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Policy: https://policies.google.com/privacy
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Opt-Out: If you want to prevent Google Analytics from processing your personal data in the future, you can set an opt-out cookie. More information can be found at: https://tools.google.com/dlpage/gaoptout

Facebook Fanpage
When you visit our Facebook Fanpage, personal data is collected and processed jointly by the controller and Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). A joint controller agreement has been concluded with Facebook. Further information about this agreement can be found at: https://www.facebook.com/legal/terms/page_controller_addendum

The processing of your personal data serves to improve interactions with you and to evaluate their development. For this purpose, we are provided with various metrics and statistics (Insight Data), such as general demographic and interest-based information (e.g., that an ad was viewed by a woman aged 25–34 living in Madrid interested in software engineering), reactions, comments and shared content, video views and playback behavior, or confirmations of which Facebook ad ultimately led you to make a purchase or take an action. Data that personally identifies you (such as name or email address) is not provided to us in the scope of joint processing. Further information on Page Insights Data can be found at: https://www.facebook.com/legal/terms/information_about_page_insights_data

These data are available to us for 2 years after collection. The legal basis for processing your data is our legitimate interest (marketing) pursuant to Art. 6 (1) lit. f GDPR. If you have given Facebook your consent for a processing activity, this consent constitutes the legal basis pursuant to Art. 6 (1) lit. a GDPR. Please note that as part of Facebook’s processing, your personal data may be processed outside the European Economic Area. Facebook is Privacy Shield certified and thus committed to complying with EU data protection standards. Further information about the Privacy Shield can be found at: https://www.facebook.com/about/privacyshield

Facebook is primarily responsible for providing you with information about joint processing and enabling you to exercise your rights under the GDPR. You can learn more about these rights in your Facebook settings: https://www.facebook.com/settings?tab=your_facebook_information
Further information about the right of access and data portability: https://www.facebook.com/help/contact/2032834846972583
Further information about the right to object: https://www.facebook.com/help/contact/367438723733209
Facebook’s cookie and privacy policies: https://www.facebook.com/about/privacy, https://www.facebook.com/policies/cookies/

Right to Object
If the processing of your personal data is based on legitimate interest, you have the right to object to this processing. Unless there are compelling legitimate grounds for the processing, it will be stopped. You also have the right to object to the processing of your personal data for direct marketing purposes. In the event of objection, your personal data will no longer be processed for this purpose. The lawfulness of data processed prior to the objection remains unaffected.

Right to Withdraw Consent
You have the right to withdraw your consent at any time. If consent was given in writing, the withdrawal must also be made in writing. If consent was given for receiving electronic advertising, this can usually also be withdrawn by clicking the unsubscribe link. In this case, processing will cease unless another legal basis exists. The lawfulness of data processed prior to withdrawal remains unaffected.

Rights of Data Subjects
You have the right to access, rectify, erase, and restrict the processing of your personal data. If the legal basis for processing your personal data is your consent or a contract concluded with you, you also have the right to data portability. You have the right to withdraw any consent you may have given for processing your personal data. The lawfulness of processing carried out up to the withdrawal remains unaffected. You have the right to object to the processing of your personal data for direct marketing purposes. In the event of objection, your personal data will no longer be processed for this purpose. Furthermore, you have the right to lodge a complaint with the supervisory authority.

The contact details of the Austrian Data Protection Authority are as follows:
Austrian Data Protection Authority, Barichgasse 40–42, A-1030 Vienna.