Data Protection Declaration

This data protection declaration informs users about the type, scope and purpose of the collection and use of personal data by the responsible provider WaveVision GmbH, Gassergasse 29/12, 1050 Wien, Austria on this website (hereinafter referred to as “offer”).

1. Access Data/Server Log Files

The provider (or its web space provider) collects data about every access to the website (so-called server log files). The access data includes:

• Name of the website accessed
• File, date and time of access
• Amount of data transferred
• Notification of successful access
• Browser type and version
• The user’s operating system
• Referrer URL (the previously visited page)
• IP address and the requesting provider

The provider uses the log data only for statistical evaluations for the purpose of operation, security and optimization of the offer. However, the provider reserves the right to check the log data retrospectively if there is a justified suspicion of unlawful use based on concrete evidence.

2. Legal Basis for the Processing of Personal Data

With the exception of the data mentioned in point 2, no personal information is processed. Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) is the legal basis for the processing of personal data. Insofar as the fulfillment of legal obligations requires the processing of personal data, Art. 6 para. 1 lit. c GDPR serves as the legal basis. If vital interests require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis. In the case of legitimate interests, provided that the interests, fundamental rights and freedoms of the data subject do not outweigh this, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing. A compliant data protection agreement has been concluded with all processors within the framework of the GDPR. Under no circumstances will data be passed on or sold to third parties.

3. Data Deletion and Storage Duration

Personal data will be deleted or blocked after the purpose of storage has expired. Data can only be stored beyond this point if this is permitted by the legislator in EU regulations, laws or other provisions. The data will be deleted or blocked as soon as the prescribed storage period is reached. Storage beyond this period is possible if the conclusion or fulfillment of a contract makes this necessary.

4. Rights of the Data Subject

Under the GDPR, you have the following rights vis-à-vis the controller if personal data is stored:

4.1 Right to Information

You can request information about processed personal data concerning you personally. Shockwaveexperts.com does not store any information beyond the data mentioned in point 2.

If personal data is processed, you can obtain the following information or have the following rights:

1. The purpose for which the respective data is processed
2. The categories of the respective data
3. The recipients or categories of recipients to whom the processed data is or has been disclosed
4. The duration of storage of the respective data. If no specific details are possible, the criteria for the storage period to be applied
5. The right to rectification or erasure of the respective data, the right to restriction of processing and the right to object to processing
6. The right to lodge a complaint with the competent supervisory authority
7. Information about the origin of the respective data, if these were not collected directly from the data subject
8. In the case of profiling in accordance with Art. 22 para. 1 and 4 GDPR, information about the logic applied and the effects on the respective person
9. Information as to whether the respective data is transferred to a third country or an international organization. In this case, you have the right to be informed about suitable guarantees in accordance with Art. 46 GDPR in connection with the transfer.

4.2 Right to Rectification

In the event of incorrect or incomplete data about you, you may exercise your right to rectification and/or completion. The changes must be made immediately.

In the case of data processing for scientific, historical or statistical research purposes, the right to rectification may be restricted if this makes the research or statistical purposes impossible.

4.3 Right to Restriction of Processing

Restriction of the processing of personal data concerning you is possible in the following circumstances:

1. If you contest the accuracy of the relevant data for a period enabling the controller to verify the accuracy.
2. You can request restricted use of the personal data if the data has been processed unlawfully and you do not wish it to be deleted.
3. If the personal data are no longer required by the processor, but you need them for the defense, exercise or assertion of legal claims.
4. If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, but it is not certain that the reasons you have put forward outweigh the reasons of the data processor.

After restriction of processing, the data may only be processed in the following circumstances:

a) With your consent b) For the establishment, exercise or defense of legal claims c) For the protection of the rights of another natural or legal person d) For reasons of public interest of the Union or of a Member State

In the cases mentioned above, you will be informed by the controller before the restriction is lifted. In the case of processing for scientific, historical or statistical research purposes, the right to restriction may also be limited if there is likely to be an impairment of the research or statistical purpose.

4.4 Right to Erasure

a) Obligation to Erase

If one of the following points applies, you are entitled to request the erasure of your personal data. The deletion must be carried out immediately by the controller:

1. The data in question is no longer required for the purpose for which it was originally collected or processed.
2. You can revoke your consent to processing in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR at any time.
3. If there are no other, more important reasons for data processing, you can object to the processing in accordance with Art. 21 para. 1 GDPR. You can also object in accordance with Art. 21 para. 2 GDPR.
4. If the respective data has been processed unlawfully
5. The deletion of the respective data is also necessary if the controller is subject to the legal obligation under Union law or the law of the member states.
6. If the respective data was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.

b) Information to Third Parties

If the controller is obliged to erase your personal data in accordance with Art. 17 (1) GDPR and has made it accessible to third parties, appropriate measures must be taken, taking into account the technology available and the implementation costs, to inform the data controllers that you as the data subject request the erasure of the data.

c) Exceptions

The right to erasure does not exist with the following exceptions:

1. In the context of the right to freedom of expression and information;
2. To fulfill an obligation under the law of the Union or of the Member States to which the controller is subject
3. For the performance of a task carried out in the public interest, in particular in the area of public health pursuant to Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
4. For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right mentioned under section a) makes these purposes impossible
5. For the exercise, defense or assertion of legal claims.

4.5 Right to Information

If you exercise the right to rectification, erasure or restriction of processing, the controller is obliged to inform all recipients of the respective data, insofar as this is possible and does not involve a disproportionate effort.

You have the right to be informed of these recipients by the controller.

4.6 Right to Data Portability

The controller is obliged to provide you with your personal data in a machine-readable format upon request. If it is technically feasible and the rights of other persons are not affected, you have the right to have your personal data transmitted directly from the controller to another controller.

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, provided that consent to the processing has been given in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR and the processing is carried out using automated procedures.

Your right to data portability does not apply if the processing is carried out in the public interest or in connection with the exercise of official authority.

4.7 Right to Object

You have the right to object, on grounds relating to your particular situation, to data processing carried out on the basis of Article 6(1)(e) or (f) GDPR. Unless the controller can provide compelling legitimate grounds for the processing which override your interests, the processing shall cease; this includes, for example, the exercise, assertion or defense of legal claims.

You also have the right to object to data processing for scientific, statistical and historical purposes. In this case, the right to object may be restricted if it is likely to render impossible or seriously impair the realization of the research or statistical project.

4.8 Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the competent supervisory authority. The supervisory authority that receives the complaint will inform the complainant of the status and outcome of the complaint and of the possibility of a judicial remedy pursuant to Art. 78 GDPR.

5. Data Security

Shockwaveexperts.com protects your data to the best of its knowledge and belief. This includes measures to prevent loss, manipulation and access by unauthorized persons. The measures are taken on a technical, organizational and legal level.

All data is stored on our servers or on the systems of our service providers. Contracts for commissioned data processing have been concluded with the service providers. All data processing steps and the systems required for this are documented in a processing directory.