PRIVACY POLICY
OF EMSA CAPITAL GMBH
- In General
- We, the team of EMSA Capital GmbH, FN 337464x (the “Company“), e-mail address: office@emsacap.com (the „E-Mail Address“), process your personal data when you use our website, www.emsacap.com (the “Website”). We deal with your provided personal data in a confidential and responsible way. The processing of your personal data takes place in compliance with the General Data Protection Regulation (”GDPR“) and the Austrian data protection act in its current form.
- In this privacy policy we want to provide you with information about ourselves, the nature, scope and purposes of the data collection and use, trying to offer you an insight into the processing of your personal data.
- To avoid unauthorized access to your personal data and generally secure such data, we and our partners apply the following safety measures: an authorization concept together with a data backup concept, physical safety measures for servers. Those safety measures are constantly revised to comply with the latest technological developments.
- Controller
- Controller. The controller for the data processing within the meaning of the GDPR is the Company. You can contact us via mail under the address listed here https://www.emsacap.com/index.php/contact/ or via e-mail to the E-Mail Address.
- Data we process
- When you use our Website, we process certain of your personal data (“Data”).
- Website Data. If you visit our Website, we process only Data that your browser communicates to our server. We collect the following Data, which is necessary for us in order to display the Website correctly and guarantee the necessary stability and safety (“Website Data”):
- IP-address;
- date and time stamp;
- time difference to GMT;
- requested site;
- access status/HTTP status code;
- transmitted data volume;
- site from which the request was sent;
- browser;
- operating system and interface; and
- language and version of the browser software.
- Contact Data. If you contact us via the contact form on our Website, www.emsacap.com/index.php/contact/ (the “Contact Form”), regarding the subjects (a) Deals for EMSA (“Deals”); (b) Jobs at EMSA (“Jobs”); or (c) Invest with EMSA (“Invest”, and, together with Deals and Jobs, the “Subjects”) we process the following Data (“Contact Data”):
- first name (if provided);
- last name (if provided);
- e-mail address;
- telephone (if provided);
- website (if provided);
- country (if provided);
- respective Subject; and
- your message.
- Why we process your Data
- Purpose Website. The processing of Data pursues the following purposes regarding the general use of the Website (“Purposes Website”):
- providing the Website;
- marketing our products and services;
- customer relations management (e.g. support);
- communicating with you, e.g. through the Contact Form; and
- protecting our legitimate business interests and legal rights.
- Purpose Deals. The processing of Data pursues the following purposes regarding the use of the Contact Form for the Deals (“Purposes Deals”):
- contacting potential clients;
- project management; and
- information about the products and services of the Company.
- Purpose Jobs. The processing of Data pursues the following purposes regarding the use of the Contact Form for the Jobs (“Purposes Jobs”):
- human resource management;
- communicating with applicants for job interviews or further information; and
- sending rejection emails.
- Purpose Invest. The processing of Data pursues the following purposes regarding the use the Contact Form for Invest (“Purposes Invest”, and, together with the Purposes Website, the Purposes Deals and the Purposes Jobs, the “Purposes”):
- answering to requests;
- communicating information about the Company; and
- support.
- Lawfulness. The lawfulness of processing (Art. 6 GDPR) stems from
- the necessity in order to take steps at the request of the data subject prior to entering into a contract pursuant para 1 subpara. b GDPR; and/or
- the necessity for the purposes of the legitimate interests pursued by the Company.
- Transfer of Data
- Transfer General. We transmit Data to third parties only if this is necessary for the Purposes, due to a request from a national authority, due to a court ruling, or if you have consented beforehand.
- Recipients.
- For some tasks we use the help of service providers (e.g. tax advisors) which we have chosen and instructed carefully, or other third parties.
- Some service providers are situated outside of the European Union, namely the USA. Therefore, Data is transferred to recipients in third countries, all of which adhere to the EU-US privacy shield (see here for more information):
- Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”).
- Storage and Deletion
- Storage Period. We store your Data differently depending on the respective type of Data and respective Purpose of the processing of your Data.
- Website Data. We process your Website Data only as long as you are using the Website. After leaving the Website your Website Data is deleted automatically.
- Contact Data. We store your Contact Data with respect to the relevant Purpose as follows:
- We store your Data regarding Deals until (i) we rejected your offer, (ii) we responded but did not hear back from you for more than six months, or (iii) it becomes certain, that there will be no further correspondence between the Company and you regarding the proposed deal, whichever is the earliest.
- We store any Data regarding Jobs until we rejected, or you withdrew your application via e-mail. We may save qualified applications for a period of six months for future consideration.
- We store any Data regarding Invest only as long as we need them for the processing of your enquiry. We may save contact information for a period of six months for future communications.
- Deletion. Data will be deleted if you (a) revoke your consent to the storage (b) Data is not needed for the Purposes anymore, or (c) the storage is or becomes legally impermissible. A deletion request does not affect Data, if the storage is legally necessary, for example for accounting purposes.
- Information about Rights
- Exercise of Rights. To exercise the rights defined in Section 7.2 to 7.8, please send a request via e-mail to the E-Mail Address or via mail to the postal address depicted in the legal notice on the Website. Please find the current contact details under https://www.emsacap.com/index.php/contact/
- Revocation of Consent. You can revoke the consent for future data processing at any time. However, this does not affect the lawfulness of Data processing based on the consent before the revocation. Should the processing of Data be lawful due to another reason stated in 4.2, we may continue to process your Data on these grounds.
- Right of Access. You have the right to obtain (i) confirmation as to whether or not your Data is being processed by us and, if so, (ii) more specific information on the Data. The more specific information concerns, among others, processing purposes, categories of Data, potential recipients or the duration of storage.
- Right to Rectification. You have the right to obtain from us the rectification of inaccurate Data concerning you. In case the Data processed by us is not correct, we will rectify these without undue delay and inform you of this rectification.
- Right to Erasure. Should you decide, you do not want us to process your data any further, please contact us under our current contact details https://www.emsacap.com/index.php/contact/ We will erase your Data immediately and inform you of this process. Should mandatory provisions of law prevent such erasure, we will inform you without undue delay thereof.
- Right to Restriction of Processing. You have the right to obtain from us a restriction of processing of your Data in the following cases:
- You make an inquiry pursuant para. 7.4, if you so request;
- you are of the opinion, that the processing of your Data is unlawful, but are opposed to an erasure of Data;
- you still require the Data for the establishment, exercise or defense of legal claims; or
- you have objected to the processing pursuant para. 7.8.
- Right to Data Portability. You have the right to (i) receive your Data in a structured, commonly used and machine-readable format and (ii) transmit those Data to another controller without hindrance from us.
- Right to Object. You have the right to object at any time to the processing of Data based on our legitimate interests, including profiling and direct marketing purposes.
- Right to Lodge a Complaint. You have the right to lodge a complaint with a supervisory authority (in Austria: Datenschutzbehörde), if you think that the processing of Data infringes applicable law, especially the GDPR.
- Cookies and Analytics
- We do not use any ‘cookies’ or web analysis tools for our Website.
- Changes to the Privacy Policy
- We may decide to change this privacy policy. When you visit the Website, the respective current version of the privacy policy, available here https://www.emsacap.com/index.php/privacypolicy/ will apply. This privacy policy was last modified on May 22, 2018.