Privacy Policy

Introduction and overview

We have written this data protection declaration (version 03/15/2024-112747240) in order to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data (data for short) we as controllers – and the processors commissioned by us (e.g. providers) – process, will process in the future and what legal options you have. The terms used are to be understood as gender-neutral.

In short: We inform you comprehensively about the data that we process about you.

Data protection declarations usually sound very technical and use legal terms. This data protection declaration, however, is intended to describe the most important things to you as simply and transparently as possible. To the extent that it promotes transparency, technical terms are explained in a reader-friendly manner, links to further information are provided and graphics are used. We thereby inform you in clear and simple language that we only process personal data as part of our business activities if there is a corresponding legal basis.

If you still have questions, we would like to ask you to contact the responsible body named below or in the legal notice, follow the existing links and look at further information on third-party sites. You can of course also find our contact details in the legal notice.

Scope of application

This data protection declaration applies to all personal data processed by us in the company and to all personal data that companies commissioned by us (contract processors) process. By personal data we mean information within the meaning of Article 4 No. 1 GDPR such as a person’s name, email address and postal address. The processing of personal data ensures that we can offer and bill our services and products, be it online or offline. The scope of this data protection declaration includes:

all online presences (websites, online shops) that we operate
social media appearances and email communication
mobile apps for smartphones and other devices

In short: The data protection declaration applies to all areas in which personal data is processed in a structured manner within the company via the channels mentioned. If we enter into legal relationships with you outside of these channels, we will inform you separately if necessary.

Legal basis

In the following data protection declaration we provide you with transparent information about the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which enable us to process personal data. As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016. You can access this EU General Data Protection Regulation online at EUR-Lex under eur-lex.europa.eu.

We only process your data if at least one of the following conditions applies:

Consent (Article 6 paragraph 1 lit. a GDPR): You have given us your consent to process data for a specific purpose. An example would be saving the data you entered on a contact form.
Contract (Article 6 paragraph 1 lit. b GDPR): In order to fulfill a contract or pre-contractual obligations with you, we process your data. For example, if we conclude a purchase contract with you, we require personal information in advance.
Legal obligation (Article 6 paragraph 1 lit. c GDPR): If we are subject to a legal obligation, we process your data. For example, we are legally obliged to keep invoices for accounting purposes. These usually contain personal data.
Legitimate interests (Article 6 paragraph 1 lit. f GDPR): In the case of legitimate interests that do not restrict your fundamental rights, we reserve the right to process personal data. For example, we need to process certain data in order to operate our website securely and economically efficiently. This processing is therefore a legitimate interest.

In addition to the EU regulation, national laws also apply:

In Austria this is the Federal Law for the Protection of Natural Persons with regard to the Processing of Personal Data (Data Protection Act), or DSG for short.
The Federal Data Protection Act, or BDSG for short, applies in Germany.

If other regional or national laws apply, we will inform you about them in the following sections.

Contact details of the person responsible

If you have any questions about data protection or the processing of personal data, you will find the contact details of the responsible person or body below:

Authorized representatives: Virgil Widrich, Stefan Unger, Marc Schuran

E-mail: contact@checkpointmedia.com

Telephone: +43 (1) 513 00 00

Storage period

We only store personal data for as long as it is absolutely necessary to provide our services and products. This means that we delete personal data as soon as the reason for data processing no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased, for example for accounting purposes.

If you wish your data to be deleted or revoke your consent to data processing, the data will be deleted as quickly as possible and provided there is no obligation to store it.

Rights under the General Data Protection Regulation

In accordance with Articles 13, 14 GDPR, we inform you about the following rights to which you are entitled so that data is processed fairly and transparently:

According to Article 15 GDPR, you have a right to information about whether we process your data. If this is the case, you have the right to receive a copy of the data and further information.
According to Article 16 GDPR, you have a right to rectification of data, which means that we must correct data if you find errors.
According to Article 17 GDPR, you have the right to deletion (“right to be forgotten”), which specifically means that you may request the deletion of your data.
According to Article 18 GDPR, you have the right to restrict processing, which means that we are only allowed to store the data but not use it any further.
According to Article 20 GDPR, you have the right to data portability, which means that upon request we will provide you with your data in a common format.
According to Article 21 GDPR, you have a right to object, which, once enforced, will result in a change to the processing.
According to Article 22 GDPR, you may have the right not to be subject to a decision based solely on automated processing (e.g. profiling).
According to Article 77 GDPR, you have the right to lodge a complaint with the data protection authority at any time if you believe that the processing of personal data violates the GDPR.

In short: you have rights – please do not hesitate to contact the responsible body listed above!

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can complain to the supervisory authority. This is the data protection authority for Austria, whose website you can find at dsb.gv.at. In Germany you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

Cookies

Our website uses HTTP cookies to store user-specific data. HTTP cookies are small files that our website stores on your computer. A cookie consists of a name and a value. Cookies store certain user data about you, such as language or personal page settings. When you visit our site again, your browser transmits the “user-related” information back to our site.

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites. There are four types of cookies:

Essential cookies are necessary to ensure basic functions of the website.
Appropriate cookies collect information about user behavior and measure the loading time and behavior of the website.
Target-oriented cookies ensure a better user experience, for example by saving locations, font sizes or form data.
Advertising cookies (targeting cookies) serve to provide the user with individually tailored advertising.

You decide for yourself how and whether you want to use cookies. You always have the option of deleting cookies, deactivating them or only partially allowing them. If you want to change or delete cookie settings, you can do this in your browser settings.

Legal basis: The storage of cookies requires your consent (Article 6 Para. 1 lit. a GDPR). In Austria this directive was implemented in Section 165 Paragraph 3 of the Telecommunications Act (2021). For absolutely necessary cookies there are legitimate interests (Article 6 Para. 1 lit. f GDPR).

Explanation of terms used

We always strive to make our data protection declaration as clear and understandable as possible. Below you will find a list of important terms as defined in Article 4 GDPR.

Processor means a natural or legal person, authority, institution or other body that processes personal data on behalf of the controller. This includes, for example, hosting or cloud providers, payment or newsletter providers.

Consent of the data subject means any voluntary, informed and unambiguous expression of will in the specific case in the form of a statement or other clear confirmatory act by which the data subject indicates that he or she agrees to the processing of personal data concerning them.

Personal data means any information relating to an identified or identifiable natural person. This includes name, address, email address, telephone number, date of birth, identification numbers and bank details. According to the European Court of Justice, your IP address is also considered personal data.

Profiling means any type of automated processing of personal data, which consists in using that personal data to evaluate or predict certain personal aspects relating to a natural person.

Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, decides on the purposes and means of processing personal data.

Processing means any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data, such as collecting, recording, organizing, storing, using, disclosing, deleting or destroying.

All texts are copyrighted. This English version is a translation. The original German version shall prevail.