Privacy Policy

Controller and Owner

Objectbay Software GmbH
Johann Roithner-Strasse 131
4050 Traun

Owner e-mail address: privacy@objectbay.com

Represented by: Daniel Haslinger, MSc

https://whistleblower.objectbay.cloud

Information on Data Processing

Protecting your personal data is particularly important to us. We therefore process your data exclusively on the basis of legal regulations (DSGVO, TKG 2003, DSG). In this data protection information, we inform you about the most important aspects of data processing on our website.

Information security and Risikopolitik.pdf

Processing methods

The responsible body processes user data properly and takes appropriate security measures to prevent unauthorized access and transmission, modification or destruction of data.
Data processing is carried out using computers or IT-based systems, following an organizational process and mode that are strictly aimed at the specified purposes. In addition to the responsible body, access to the data may also be granted to certain categories of controllers involved in the operation of the website (personnel administration, sales, marketing, law, system administrators) or external parties (such as third-party providers of technical services, delivery companies, hosting providers, IT companies or communication agencies), which, if necessary, are used by the owner as contract processors. An up-to-date list of these participants can be requested from the responsible body at any time.

Location

The data is processed at the operating location of the responsible body and at all other locations where the parties involved in data processing are located. For further information, please contact the responsible body.

Storage period

The data is stored for as long as is necessary to provide the services requested by the user or is specified for the purposes listed in this document, or there is no further need to store your personal data with regard to follow-up questions, contract conclusion or contract performance, and there is no other legitimate interest or legal storage obligation to store your personal data.

Use of collected data

The data about the user is collected so that the owner can provide the services. In addition, data is collected for the following purposes: analytics, viewing content from external platforms, heat mapping (path tracking) and session recording (session recording), hosting and backend infrastructure, monitoring infrastructure, managing contacts and sending messages, and interaction with external social networks and platforms.

The personal information used for the purposes listed is set out in the relevant sections of this document.

Detailed information on the processing of personal data

Personal data is collected for the following purposes using the following services:

Cookies

We want our website and services to be informative, personal, and as easy to use as possible. That is why we use “cookies” on our website. We primarily use these cookies to improve performance and usability. The cookies used by our web services do not store any data that makes users of our website (you) personally identifiable until you personally register with us and give your consent to personal identification. The cookie technology used cannot harm your computer.

Finsweet Cookie Consent
We use a tool from Finsweet to manage cookie settings. This prevents scripts from being loaded from third-party scripts unless the user specifically allows it. The user can also edit cookie settings at any time. A cookie is set which is automatically deleted after 6 months.

Cookies that are not technically necessary for the operation of the website are stored on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time via the “Cookie settings” link.

Cookie settings

Google Analytics 4

We also use Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics 4 uses cookies and similar technologies to analyze the use of our website. This includes data about:
terminal devices used,
browser information, pages visited,
interaction events (e.g. clicks, scrolling behavior),
IP address (in anonymized form)
collected and statistically evaluated.

IP anonymization:
Your IP address is anonymized within the EU or the EEA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and anonymized there.

Data transfer:
Data transmission to the USA is based on EU—US data privacy frameworks in accordance with Art. 45 DSGVO. Google is certified for this.

legal basis: Art. 6 para. 1 lit. a DSGVO (consent via cookie banners).

Storage period: 14 months

You can prevent cookies from being saved by making the appropriate settings in your browser, or prevent the collection of your data via the browser add-on:
https://tools.google.com/dlpage/gaoptout?hl=de

More information:
https://policies.google.com/privacy

Google Tag Manager

Google Tag Manager is an analysis service provided by Google Inc. Personal data collected: Cookies and usage data. Place of processing: USA — Privacy statement

Google AdWords conversion tracking

AdWords conversion tracking is an analysis service provided by Google Inc., which combines data from the Google AdWords advertising network with actions carried out through this application. Personal data collected: Cookies and usage data. Place of processing: USA — Privacy statement

Facebook Pixel

On its website, we use the Facebook Pixel function from Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

Facebook Pixel is an analysis tool that allows Objectbay to evaluate the effectiveness of its Facebook ads. This makes it possible to display only relevant advertisements to target groups that are tailored to their interests. The Facebook code implemented on this page can analyze the behavior of those website visitors who came to this website from a Facebook ad. This can be used to continuously optimize Facebook ads. The data collected in this way is collected and stored by Facebook. The data cannot be viewed by Storebox, but can only be used as part of advertising. Cookies are also set by using the Facebook pixel.

By using the Facebook pixel, Facebook registers visits to this website so that visitors can see suitable advertisements on Facebook. If you have a Facebook account and are logged in there, your visit to this website will be associated with your Facebook account.

You can find out how the Facebook pixel is used for advertising campaigns here: https://www.facebook.com/business/learn/facebook-ads-pixel.

You can set your ad preferences on Facebook here: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen change, provided you are logged into your Facebook account.

Here: https://bit.ly/3EP4Ucn
You can also manage your preferences with regard to usage-based online advertising. You can activate or deactivate many providers at once or make settings for individual providers.

Facebook Pixel - Custom Audiences

On our website, we use the Facebook Pixel - Customer Audience function from Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).

This website uses Facebook's “Custom Audiences” remarketing feature. With the “extended reconciliation”, personal data is transmitted to Facebook in encrypted form. Using “Custom Audiences from File”, the email address, name and telephone number are also uploaded to Facebook in encrypted form as the recipient of the newsletter. This is used to determine the recipient of the Facebook ads and to ensure that the ads are only shown to interested users. Storebox has no influence on the quantity, quality or storage time of the transferred data. Facebook may share the data with third parties.

Objectbay obtains your consent to use this service via an opt-in. This means that the cookie, tracking pixel, or similar methods used to process personal data via this service will only be activated if you have consented to this. In this case, we rely on Art. 6 (1) lit. f GDPR as the legal basis. If you are in Germany and have not yet reached the age of 16 (in Austria and Switzerland the age of 14), you are not yet in a position to provide effective data protection consent.

You can deactivate Facebook Custom Audiences by logging into your Facebook account and setting this up under the following link https://www.facebook.com/settings/?tab=ads #.

Alternatively, you can use the “Custom Audiences” remarketing feature here: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen#_=_ deactivate.

Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law. You can find more information about this here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

HubSpot

We use the HubSpot product for our online marketing activities. This is an integrated software solution with which we cover various aspects of our online marketing. This includes reporting (e.g. traffic sources or accesses), contact management (e.g. user segmentation & CRM), contact forms and declarations of membership. This enables visitors to our website to learn more about our organization, download content and provide their contact information, in particular their last name, first name, email address, postal address and telephone number and/or mobile number, as well as other demographic information. This information is stored on servers of our software partner HubSpot. They can be used by us to get in touch with visitors to our website and to determine which projects from our organization are of interest to you. All information we collect is subject to this privacy policy. We use all information collected to optimize our projects and marketing measures. HubSpot is a software company from the USA with a branch in Ireland. HubSpot is certified under the terms of the “EU — U.S. Privacy Shield Framework” and is subject to the TRUSTe's Privacy Seal and the “U.S. — Swiss Safe Harbor” framework. We also use HubSpot on the basis of EU standard contractual clauses. We have also concluded a “data processing agreement” with HubSpot. This is a contract in which HubSpot undertakes to protect our users' data, to process it on our behalf in accordance with its data protection regulations and, in particular, not to pass it on to third parties.

More information about HubSpot's privacy policy can be found at https://legal.hubspot.com/de/privacy-policy

You can find more information about the cookies used by HubSpot under the following links:
https://bit.ly/3keRIny

https://bit.ly/3xUozpR

Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500

If you generally do not want Hubspot to collect data, you can prevent the storage of cookies at any time by changing your browser settings accordingly.

Hotjar

We use Hotjar to better understand the needs of our users and to optimize the offer and experience on this website. Hotjar technology gives us a better understanding of our users' experiences (e.g. how much time users spend on which pages, which links they click on, what they like and don't like, etc.) and this helps us to tailor our offer to feedback from our users. Hotjar works with cookies and other technologies to collect data about the behavior of our users and about their devices, in particular the IP address of the device (only collected and stored in anonymized form during your use of the website), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language to view our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data collected on our behalf.

For more information, see the “about Hotjar” section on Hotjar's help page. We have concluded a contract with Hotjar for order data processing. More details about the privacy policy and which data is collected by Hotjar and how can be found at https://www.hotjar.com/legal/policies/privacy.

Web analysis with Plausible

On our website, we use the privacy-friendly analysis service Plausible Analytics, operated by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible works without cookies and does not store any personal data. Only anonymized usage data (e.g. page views, referrers, devices used, operating systems, browser type) is processed in an aggregated manner. The IP address is only collected in abbreviated, anonymized form and is not stored. Processing is carried out on the basis of Art. 6 para. 1 lit. f DSGVO, based on our legitimate interest in analyzing website usage in accordance with data protection regulations.

For more information, see https://plausible.io/data-policy.

LinkedIn Insight Tag

On our website, we also use so-called conversion tracking with LinkedIn Insights Tag, a tool from LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland. For this purpose, the LinkedIn Insight Tag is integrated on our pages and a cookie is set on your device by LinkedIn. With the help of this technology, visitors to this website can be shown personalized advertisements on LinkedIn. It is also possible to create anonymous reports on the performance of advertisements and information on website interaction. For this purpose, the LinkedIn Insight Tag is integrated into this website, which creates a connection to the LinkedIn server if you visit this website and are logged into your LinkedIn account at the same time.

For more information, see https://www.linkedin.com/legal/privacy-policy You will find further information on data collection and use as well as the options and rights to protect your privacy. If you are logged in to LinkedIn, you can deactivate data collection at any time using the following link: https://www.linkedin.com/psettings/enhanced-advertising.

Youtube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to YouTube's servers is established. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

For more information on the handling of user data, please see YouTube's privacy policy at: https://www.youtube.at/t/privacy.

Interaction with external social networks and platforms

We provide you with links to social media platforms (such as Facebook, Instagram, LinkedIn) in various areas of our website. You can recognize them by the logo of the respective social media provider. When you use our website, no personal data is initially passed on to the providers of the social media platforms. Only when you click on these links will you be redirected to the website of the respective social media provider and then transfer personal data to the provider. You are leaving our website and we have no influence on the data and data processing processes then collected, nor are we aware of the full scope of data collection, the purposes and the storage periods. If you click on such a link, the social media provider receives the information that you have accessed the corresponding subpage of our online offering. In addition, the data specified in the “Collection of personal data for informational use” section of this statement will be transmitted. This is done regardless of whether you have an account with this social media provider and are logged in there. If you are logged in to the social media provider, this data is directly assigned to your account. The social media provider stores the personal data as user profiles and uses them for advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to display appropriate advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact the respective social media provider to exercise this right. For more information on the purpose and scope of data collection and processing by the social media provider, please see the privacy policies of these providers provided below. There you will also find further information about your rights in this regard and settings options to protect your privacy.

Disclaimer for links to external sites

Our website contains links to external websites of third parties over whose content we have no influence. For this reason, we cannot assume any liability for this external content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking and no illegal content was discernible at the time the link was created. However, continuous monitoring of the content of the linked pages is not reasonable without concrete evidence of an infringement of law. If we become aware of legal violations, we will remove such links immediately.

Your rights

In principle, you have the rights to information, correction, deletion, restriction, data portability, revocation and objection with regard to your data stored by us.

Right to lodge a complaint

If you believe that the processing of your personal data violates applicable legal data protection regulations, you have the right to complain to the competent supervisory authority.

Supervisory authority

Austrian data protection authority
Barichgasse 40-42
1030 Vienna

Amendments or additions

We reserve the right to make changes or additions to the information content at any time and without notice. If parts or individual formulations of this text do not, no longer or not completely comply with the applicable legal situation, the content and validity of the remaining parts of the document remain unaffected.