Skip to content
Start » Imprint

Imprint

Information pursuant to the information obligation under Section 5 of the E-Commerce Act, Section 14 of the Austrian Commercial Code, Section 63 of the Trade, Commerce and Industry Regulation Act and disclosure obligation under Section 25 of the Media Act.

nContacts is developed by FriTec
Your contact person for contractual and sales-related matters is Andreas Handler, employee of AH trade it GmbH

AH trade it GmbH
Obersafen 60,
8232 Grafendorf bei Hartberg,
Austria

Company purpose: Trading in software licenses
VAT identification number: ATU79672702
GISA: 36236930
Company register number: FN607076i
Company register court: Graz
Registered office: Grafendorf bei Hartberg

E-mail: team@ah-trade-it.com

Supervisory authority / trade authority: District Authority of Hartberg-Fürstenfeld
Professional designation: Trade
Country in which the professional designation was awarded: Austria

Contact details of the data protection controller

If you have any questions about data protection, you will find the contact details of the responsible person or body below:
AH trade it GmbH
Obersafen 60
8232 Grafendorf
E-mail address: team@ah-trade-it.com

Imprint: https://ah-trade-it.com/impressum/

EU Dispute Resolution

In accordance with the Regulation on Online Dispute Resolution in Consumer Matters (ODR Regulation), we would like to inform you about the Online Dispute Resolution platform (ODR platform).
Consumers have the possibility of submitting complaints to the European Commission’s Online Dispute Resolution platform at https://ec.europa.eu/consumers/odr/main/index.cfm?event=main.home2.show&lng=DE. The necessary contact details can be found above in our imprint.

However, we would like to point out that we are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.

Liability for the Content of this Website

We are constantly developing the content of this website and make every effort to provide correct and up-to-date information. Unfortunately, we cannot assume liability for the correctness of all content, especially content provided by third parties. As a service provider, we are not obliged to monitor the information you transmit or store or to investigate circumstances indicating illegal activity.

Our obligations to remove information or block the use of information under general laws based on judicial or official orders remain unaffected even in the event that we are not responsible.

If you notice any problematic or illegal content, please contact us immediately so that we can remove the illegal content. You can find our contact details in the imprint.

Our website contains links to other websites for whose content we are not responsible. We are not liable for linked websites because we had and have no knowledge of any illegal activities, nor have any such illegalities come to our attention, and we would remove links immediately if we became aware of any illegal activities.

If you notice any illegal links on our website, please contact us. You can find our contact details in the imprint.

Copyright Notice

All content on this website (images, photographs, texts, videos) is protected by copyright. Please ask us before distributing, reproducing or exploiting the content of this website, for example by republishing it on other websites. If necessary, we will take legal action against the unauthorized use of parts of the content of our website.

If you find any content on this website that infringes copyright, please contact us.

All texts are protected by copyright.

Source: Created with the Imprint Generator by AdSimple

Privacy Policy

Table of Contents

Introduction and Overview

We have prepared this Privacy Policy (version 02.08.2023-122555478) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (in short: data) we, as the controller, and the processors commissioned by us (e.g. providers) process and will process in the future, and what lawful options you have. The terms used are to be understood as gender-neutral.

In short: We provide you with comprehensive information about the data we process about you.

Privacy policies are usually very technical and use legal terminology. This Privacy Policy, however, is intended to describe the most important matters to you as simply and transparently as possible. Where this contributes to transparency, technical terms are explained in a reader-friendly manner, links to further information are provided and graphics are used. We therefore inform you in clear and simple language that, in the course of our business activities, we only process personal data where an appropriate legal basis exists. This is certainly not possible if explanations are kept as brief, unclear and legally technical as is often standard on the internet when it comes to data protection. I hope you find the following explanations interesting and informative and perhaps discover some information you did not know before.

If questions nevertheless remain, we ask you to contact the responsible body named below or in the imprint, follow the available links and obtain further information from third-party websites. Our contact details can of course also be found in the imprint.

Scope

This Privacy Policy applies to all personal data processed by us within the company and to all personal data processed by companies commissioned by us (processors). By personal data, we mean information within the meaning of Art. 4 No. 1 GDPR, such as a person’s name, e-mail address and postal address. The processing of personal data enables us to offer and invoice our services and products, whether online or offline. The scope of this Privacy Policy includes:

  • all online presences (websites, online shops) that we operate
  • social media presences and e-mail communication
  • mobile apps for smartphones and other devices

In short: The Privacy Policy applies to all areas in which personal data is systematically processed within the company through the channels mentioned above. If we enter into legal relationships with you outside these channels, we may provide you with separate information where applicable.

Legal Bases

In the following Privacy Policy, we provide you with transparent information about the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which enable us to process personal data.

With regard to EU law, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. You can of course read this EU General Data Protection Regulation online on EUR-Lex, the access point to EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679.

We process your data only if at least one of the following conditions applies:

  1. Consent (Article 6 paragraph 1 lit. a GDPR): You have given us your consent to process data for a specific purpose. An example would be the storage of the data you entered in a contact form.
  2. Contract (Article 6 paragraph 1 lit. b GDPR): We process your data in order to fulfill a contract or pre-contractual obligations with you. For example, if we conclude a purchase agreement with you, we require personal information in advance.
  3. Legal obligation (Article 6 paragraph 1 lit. c GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally obliged to retain invoices for accounting purposes. These generally contain personal data.
  4. Legitimate interests (Article 6 paragraph 1 lit. f GDPR): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data in order to operate our website securely and economically efficiently. This processing therefore constitutes a legitimate interest.

Other conditions, such as the performance of tasks carried out in the public interest or in the exercise of official authority, as well as the protection of vital interests, generally do not apply to us. If such a legal basis should nevertheless be applicable, it will be indicated at the relevant point.

In addition to the EU Regulation, national laws also apply:

  • In Austria, this is the Federal Act on the Protection of Natural Persons in the Processing of Personal Data (Data Protection Act), abbreviated DSG.
  • In Germany, the Federal Data Protection Act, abbreviated BDSG, applies.

If further regional or national laws apply, we will inform you about them in the following sections.

Contact Details of the Controller

If you have any questions about data protection or the processing of personal data, you will find the contact details of the responsible person or body below:
AH trade it GmbH
Obersafen 60
8232 Grafendorf

E-mail: [team@ah-trade-it.com](mailto:team@ah-trade-it.com)

Imprint: https://ah-trade-it.com/impressum/

Storage Duration

As a general criterion, we only store personal data for as long as is absolutely necessary to provide our services and products. This means that we delete personal data as soon as the reason for processing the data no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose no longer applies, for example for accounting purposes.

If you wish to have your data deleted or withdraw your consent to data processing, the data will be deleted as quickly as possible, provided there is no obligation to retain it.

We will inform you about the specific duration of the respective data processing below, where we have further information available.

Rights under the General Data Protection Regulation

In accordance with Articles 13 and 14 GDPR, we inform you of the following rights to which you are entitled in order to ensure fair and transparent processing of data:

  • Under Article 15 GDPR, you have the right to obtain information as to whether we process data about you. If this is the case, you have the right to receive a copy of the data and to obtain the following information:
    • the purpose for which we carry out the processing;
    • the categories, i.e. the types of data that are processed;
    • who receives this data and, if the data is transferred to third countries, how security can be guaranteed;
    • how long the data is stored;
    • the existence of the right to rectification, erasure or restriction of processing and the right to object to processing;
    • that you can lodge a complaint with a supervisory authority (links to these authorities can be found below);
    • the origin of the data if we have not collected it from you;
    • whether profiling is carried out, i.e. whether data is automatically evaluated in order to create a personal profile of you.
  • Under Article 16 GDPR, you have the right to have data rectified, which means that we must correct data if you identify errors.
  • Under Article 17 GDPR, you have the right to erasure (“right to be forgotten”), which specifically means that you may request the deletion of your data.
  • Under Article 18 GDPR, you have the right to restriction of processing, which means that we may only store the data but may not continue to use it.
  • Under Article 20 GDPR, you have the right to data portability, which means that, upon request, we will provide your data in a commonly used format.
  • Under Article 21 GDPR, you have a right to object, which, once exercised, results in a change to the processing.
    • If the processing of your data is based on Article 6 paragraph 1 lit. e (public interest, exercise of official authority) or Article 6 paragraph 1 lit. f (legitimate interest), you may object to the processing. We will then examine as quickly as possible whether we can legally comply with this objection.
    • If data is used for direct advertising, you may object to this type of data processing at any time. We may then no longer use your data for direct marketing.
    • If data is used for profiling, you may object to this at any time. We may then no longer use your data for profiling.
  • Under Article 22 GDPR, you may have the right not to be subject to a decision based solely on automated processing (e.g. profiling).
  • Under Article 77 GDPR, you have the right to lodge a complaint. This means that you can lodge a complaint with the data protection authority at any time if you believe that the processing of personal data violates the GDPR.

In short: You have rights – do not hesitate to contact the responsible body listed above!

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority, whose website can be found at https://www.dsb.gv.at/. In Germany, there is a data protection commissioner for each federal state. For further information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI). The following local data protection authority is responsible for our company:

Austrian Data Protection Authority

Head: Mag. Dr. Andrea Jelinek

Address: Barichgasse 40-42, 1030 Vienna

Telephone no.: +43 1 52 152-0

E-mail address: [dsb@dsb.gv.at](mailto:dsb@dsb.gv.at)

Website: https://www.dsb.gv.at/

Data Processing Agreement (DPA)

In this section, we would like to explain what a Data Processing Agreement is and why it is required. Because the German word “Auftragsverarbeitungsvertrag” is quite a tongue twister, we will often use the acronym AVV in the text below. Like most companies, we do not work alone but also make use of services provided by other companies or individuals. By involving various companies or service providers, we may pass on personal data for processing. These partners then act as processors with whom we conclude an agreement, the so-called Data Processing Agreement (DPA). The most important thing for you to know is that the processing of your personal data takes place exclusively according to our instructions and must be governed by the DPA.

Who are processors?

As a company and website owner, we are responsible for all data that we process from you. In addition to controllers, there may also be so-called processors. This includes every company or person that processes personal data on our behalf. More precisely, according to the GDPR definition: any natural or legal person, public authority, agency or other body that processes personal data on our behalf is considered a processor. Processors may therefore include service providers such as hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.

For a better understanding of the terminology, here is an overview of the three roles under the GDPR:

Data subject (you as a customer or prospect) → Controller (we as the company and contracting party) → Processor (service providers such as web hosts or cloud providers)

Content of a Data Processing Agreement

As already mentioned above, we have concluded a DPA with our partners who act as processors. Above all, it states that the processor processes the data to be handled exclusively in accordance with the GDPR. The agreement must be concluded in writing, although electronic conclusion of the agreement also qualifies as “written” in this context. The processing of personal data takes place only on the basis of the agreement. The agreement must contain the following:

  • Commitment to us as the controller
  • Duties and rights of the controller
  • Categories of data subjects
  • Type of personal data
  • Type and purpose of data processing
  • Subject matter and duration of data processing
  • Place where the data processing is carried out

The agreement also contains all obligations of the processor. The most important obligations are:

  • Ensure data security measures
  • Take possible technical and organizational measures to protect the rights of the data subject
  • Maintain a record of processing activities
  • Cooperate with the data protection supervisory authority upon request
  • Carry out a risk analysis with regard to the personal data received
  • Sub-processors may only be appointed with the written authorization of the controller

You can see what such a DPA looks like, for example, at https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-mustervertrag-auftragsverarbeitung.html. A sample agreement is provided there.

Cookies

Cookie Summary👥 Data subjects: Website visitors
🤝 Purpose: depends on the respective cookie. More details can be found below or from the software provider that sets the cookie.
📓 Data processed: Depends on the cookie used. More details can be found below or from the software provider that sets the cookie.
📅 Storage duration: depends on the respective cookie and can range from hours to several years
⚖️ Legal bases: Art. 6 paragraph 1 lit. a GDPR (consent), Art. 6 paragraph 1 lit. f GDPR (legitimate interests)

What are cookies?

Our website uses HTTP cookies to store user-specific data.
Below, we explain what cookies are and why they are used so that you can better understand this Privacy Policy.

Whenever you browse the internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most websites store small text files in your browser. These files are called cookies.

There is no denying that cookies are really useful little helpers. Almost all websites use cookies. More precisely, these are HTTP cookies, as there are also other cookies for other areas of application. HTTP cookies are small files that are stored by our website on your computer. These cookie files are automatically placed in the cookie folder, so to speak the “brain” of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

Cookies store certain user data about you, such as language or personal page settings. When you visit our site again, your browser sends the “user-related” information back to our site. Thanks to the cookies, our website knows who you are and provides you with the settings you are accustomed to. In some browsers, each cookie has its own file, while in others, such as Firefox, all cookies are stored in a single file.

The following graphic shows a possible interaction between a web browser such as Chrome and the web server. The web browser requests a website and receives a cookie from the server, which the browser uses again as soon as another page is requested.

HTTP Cookie interaction between browser and web server

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our website, while third-party cookies are created by partner websites (e.g. Google Analytics). Each cookie must be assessed individually, as each cookie stores different data. The expiration period of a cookie also varies from a few minutes to several years. Cookies are not software programs and do not contain viruses, Trojans or other “malware”. Cookies also cannot access information on your PC.

For example, cookie data can look like this:

Name: _ga Value: GA1.2.1326744211.152122555478-9 Purpose: Distinguishing website visitors Expiration date: after 2 years

A browser should be able to support the following minimum sizes:

  • At least 4096 bytes per cookie
  • At least 50 cookies per domain
  • At least 3000 cookies in total

What types of cookies are there?

The question of which cookies we specifically use depends on the services used and is clarified in the following sections of the Privacy Policy. At this point, we would like to briefly discuss the different types of HTTP cookies.

There are 4 types of cookies:

Essential cookies These cookies are necessary to ensure basic functions of the website. For example, these cookies are needed when a user adds a product to the shopping cart, continues browsing on other pages and only goes to checkout later. These cookies ensure that the shopping cart is not deleted even if the user closes their browser window.

Functional cookies These cookies collect information about user behavior and whether the user receives any error messages. These cookies are also used to measure loading times and behavior of the website in different browsers.

Preference cookies These cookies provide a better user experience. For example, entered locations, font sizes or form data are stored.

Advertising cookies These cookies are also called targeting cookies. They are used to provide users with individually tailored advertising. This can be very practical, but also very annoying.

Usually, when you visit a website for the first time, you are asked which of these types of cookies you would like to allow. And, of course, this decision is also stored in a cookie.

If you would like to know more about cookies and do not shy away from technical documentation, we recommend https://datatracker.ietf.org/doc/html/rfc6265, the Request for Comments of the Internet Engineering Task Force (IETF) called “HTTP State Management Mechanism”.

Purpose of Processing via Cookies

The purpose ultimately depends on the respective cookie. More details can be found below or from the software provider that sets the cookie.

What data is processed?

Cookies are small helpers for many different tasks. Unfortunately, it is not possible to generalize what data is stored in cookies, but we will inform you about the data processed or stored within the following Privacy Policy.

Storage Duration of Cookies

The storage duration depends on the respective cookie and is specified in more detail below. Some cookies are deleted after less than an hour, while others may remain stored on a computer for several years.

You also have an influence on the storage duration yourself. You can manually delete all cookies at any time via your browser (see also “Right to Object” below). Furthermore, cookies based on consent are deleted at the latest after you withdraw your consent, whereby the lawfulness of storage up to that point remains unaffected.

Right to Object – How Can I Delete Cookies?

You decide yourself whether and how you want to use cookies. Regardless of which service or website the cookies originate from, you always have the option of deleting, deactivating or only partially allowing cookies. For example, you can block third-party cookies while allowing all other cookies.

If you want to find out which cookies are stored in your browser, or if you want to change or delete cookie settings, you can find this in your browser settings:

Chrome: Delete, enable and manage cookies in Chrome

Safari: Manage cookies and website data with Safari

Firefox: Delete cookies to remove data that websites have placed on your computer

Internet Explorer: Delete and manage cookies

Microsoft Edge: Delete and manage cookies

If you generally do not want any cookies, you can configure your browser to always notify you when a cookie is set. This allows you to decide whether or not to allow each individual cookie. The procedure varies depending on the browser. It is best to search Google for instructions using the search term “delete cookies Chrome” or “disable cookies Chrome” if you are using Chrome.

Legal Basis

Since 2009, there have been so-called “Cookie Policies”. They state that storing cookies requires your consent (Article 6 paragraph 1 lit. a GDPR). Within the EU member states, however, there are still very different responses to these policies. In Austria, this policy was implemented in Section 96 paragraph 3 of the Telecommunications Act (TKG). In Germany, the Cookie Policies were not implemented as national law. Instead, the policy was largely implemented in Section 15 paragraph 3 of the Telemedia Act (TMG).

For strictly necessary cookies, even where no consent has been given, there are legitimate interests (Article 6 paragraph 1 lit. f GDPR), which in most cases are economic in nature. We want to provide website visitors with a pleasant user experience, and certain cookies are often absolutely necessary for this.

Where cookies that are not strictly necessary are used, this only takes place with your consent. The legal basis in this case is Art. 6 paragraph 1 lit. a GDPR.

The following sections provide more detailed information about the use of cookies where the software used employs cookies.

Explanation of Terms Used

We always strive to formulate our Privacy Policy as clearly and understandably as possible. However, this is not always easy, particularly with technical and legal topics. It often makes sense to use legal terms (such as personal data) or certain technical terms (such as cookies or IP address). However, we do not want to use these without explanation. Below you will find an alphabetical list of important terms used that we may not have sufficiently covered in the previous sections of this Privacy Policy. If these terms are taken from the GDPR and constitute definitions, we will also include the GDPR texts here and, where applicable, add our own explanations.

Processor

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:


“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

Explanation: As a company and website owner, we are responsible for all data that we process from you. In addition to controllers, there may also be so-called processors. This includes every company or person that processes personal data on our behalf. Processors may therefore include, in addition to service providers such as tax advisors, hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.

Consent

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:


“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them;

Explanation: On websites, such consent is generally given via a cookie consent tool. You certainly know this. Whenever you visit a website for the first time, you are usually asked via a banner whether you agree to or consent to data processing. You can usually also make individual settings and decide for yourself which data processing you allow and which you do not. If you do not give consent, your personal data may not be processed. Of course, consent can also be given in writing, i.e. without using a tool.

Personal Data

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:


“personal data”

means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more special characteristics that express the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

Explanation: Personal data is therefore all data that can identify you as a person. This generally includes data such as:

  • Name
  • Address
  • E-mail address
  • Postal address
  • Telephone number
  • Date of birth
  • Identification numbers such as social security number, tax identification number, identity card number or student identification number
  • Bank details such as account number, credit information, account balances, etc.

According to the European Court of Justice (ECJ), your IP address also constitutes personal data. IT experts can use your IP address to determine at least the approximate location of your device and subsequently identify you as the subscriber. Therefore, storing an IP address also requires a legal basis within the meaning of the GDPR. There are also so-called “special categories” of personal data, which require particularly strong protection. These include:

  • racial and ethnic origin
  • political opinions
  • religious or philosophical beliefs
  • trade union membership
  • genetic data, such as data obtained from blood or saliva samples
  • biometric data (information relating to mental, physical or behavioral characteristics that can identify a person).
    Health data
  • data concerning sexual orientation or sex life

Profiling

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:


“Profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements;

Explanation: In profiling, various pieces of information about a person are collected in order to learn more about that person. On the web, profiling is often used for advertising purposes or for creditworthiness checks. Web or advertising analytics programs, for example, collect data about your behavior and interests on a website. This results in a specific user profile, which can be used to display targeted advertising to a specific target group.

Controller

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:


“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for their nomination may be provided for by Union or Member State law;

Explanation: In our case, we are responsible for the processing of your personal data and are therefore the “controller”. If we pass on collected data to other service providers for processing, these are “processors”. For this purpose, a “Data Processing Agreement (DPA)” must be signed.

Processing

Definition according to Article 4 of the GDPR

For the purposes of this Regulation, the term means:


“Processing”

means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

Note: When we refer to processing in our Privacy Policy, we mean any type of data processing. As mentioned above in the original GDPR definition, this includes not only the collection but also the storage and processing of data.

All texts are protected by copyright.

Source: Created with the Privacy Policy Generator by AdSimple