Privacy Policy
Content
- Responsible Body (Controller) and Contact
- Cookie Policy
- Website Activities and Logfiles
- Terms & Conditions Confirmation Log
- Further processing activities
- Self-Service-Software Subscription
- Usage and log information in ADONIS/ADOIT Community Edition
- ADONIS/ADOIT Mobile Applications
- Online Platform User Registration
- Atlassian Marketplace Apps
- BOC Apps for M365
- Trainings and E-Learning
- Webinar
- Newsletter
- Support, Contact, Info, Offer, Marketplace, Event– Request
- Recommendation
- Job Applications
- Optional Surveys
- Event Registration
- Processing of Photos at Events
- Processing of Appointment Bookings
- Right to Object
- Your Rights
- List of Recipients of Personal Data
Preamble
BOC Products & Services AG (hereinafter: BOC Group) takes your privacy very seriously. As we are obliged to comply with regulations for the protection of personal data as well as data security, we strictly adhere to the rules of data protection law. Personal data will only be processed for the intent stated in the service descriptions and under this privacy policy. All service descriptions and the processing activities are documented to the best of our knowledge.
The following declaration provides an overview of how BOC Group assures the protection of data, what kind of data we collect and for which purposes the data in the context of BOC Group websites, services and applications is processed.
This privacy statement is constantly updated to reflect our processing activities and changing legal requirements. We therefore ask you to regularly inform yourself about the handling of your data on this page.
Further processing activities
BOC Group offers several services on its online platforms, such as newsletter service, trainings and e-learning or software try-outs. In order to be able to use these services, additional data is collected. Detailed information about which data is processed for which purpose can be found in the descriptions of the individual processing activity:
Self-Service-Software Subscription
BOC Group offers a variety of cloud-based software solutions on its websites. Depending on the type of service, different personal data is processed.
- The BOC Academy Programme is focused on educating students in Business Process Management or Enterprise Architecture. To lecturers the programme provides lecture content, access to the Business Process Management and Enterprise Architecture community, and free, cloud-based, multi-user accounts of BOC Group’s Business Process Management tool ADONIS or BOC Group’s Enterprise Architecture tool ADOIT for use in teaching at academic institutions worldwide.
- The ADONIS NP Starter Edition is a fully-preconfigured professional edition of BOC Group’s Business Process Management tool ADONIS, available exclusively as Software-as-a-Service. It can be ordered online in self-service with credit card payment and is based on a monthly subscription for recurring payment.
- ADOIT/ADONIS Community Edition is a free, cloud-based, single-user version of BOC Group’s Business Process Management tool ADONIS or BOC Group’s Enterprise Architecture tool ADOIT with a restricted feature set.
ADONIS/ADOIT Community Edition is only available for ADONIS/ADOIT Community members. The table below gives you an overview of the data collected by registering for the ADOIT/ADONIS Community.
The ADONIS/ADOIT Community is an online platform for people interested in Business Process Management or Analysis (BPM / BPA) or Enterprise Architecture (EA).
This platform allows registered people to interact with each other, exchange ideas and opinions, and provides ADONIS/ADOIT Community members with a free cloud-based software account, the Community Edition of ADONIS/ADOIT.
The membership to the ADONIS/ADOIT Community is concluded for an indefinite time period and can be cancelled by unsubscribing from the ADONIS/ADOIT Community membership list.
By unsubscribing from the ADONIS/ADOIT Community the ADONIS/ADOIT Community Edition expires.
The following table gives an overview of which data can be processed in which software service.
Academy (Lecturers) | Starter Edition | Community | |
---|---|---|---|
Provided through User | |||
Form of address | x | x | x |
First name | x | x | x |
Last name | x | x | x |
Email address | x | x | x |
Telephone | x | x | x |
Company | x | x | |
Address (street and street number) | x | ||
Zip, City | x | x | |
Country | x | x | x |
VAT-No. | x | ||
Software language | x | x | x |
Account content data | x | x | x |
User type | x | ||
System-generated | |||
Anonymous statistical data | x | x | x |
Account start and end date | x | x | |
Account start date | x | ||
Payment status | x | ||
Payment history | x | ||
Invoices | x | ||
Language (for communication) | x | x | x |
Subscription status | x | x | x |
Assigned BOC operation | x | x | x |
Statistical data about email consumption and behaviour | x | x | x |
Recipients or Categories of Recipients |
|
|
|
Usage and log- information (for details on this processing activity, see section “Usage and log- information in ADONIS/ADOIT Community Edition” below) | x |
For Academy Accounts, additional course information (course name), account start and end date, course start and end date, software language, number of lecturers, number of students), use case scenario and institution information (institute/university, city, country) are collected.
All Users can receive service-related information via email through the Mailing Service Provider.
Therefore, we process the following data via the Mailing Service Provider
- when we sent which message to you,
- if you’ve opened these,
- whether you clicked on links and if so which ones.
After submitting the form, users may receive personalized communication according to their expressed field of interest. New subscribers receive an email upon this subscription where they can edit their email preferences. Unsubscription from further email communication is possible at any time.
Purpose of Data Processing
The processing of your data is necessary for the performance of a contract as well as for tax and company law obligations.
Legal Basis
Legal basis for the processing activity is Article 6 para. 1 lit. b and c GDPR.
Storage Period
BOC Group retains the mentioned data in principle for up to 7 years after termination of the Software Subscription. Notwithstanding the foregoing, personal data for which BOC Group is subject to a legal obligation to retain or document shall be stored for the prescribed period.
Content data are available for download after termination of the software subscription in accordance with the contractual agreement (e.g.: 6 months in the Starter Edition) and are then automatically deleted.
Recipients or Categories of Recipients
The data required for payment processing (credit card holder, credit card number, expiry date (month), expiry date (year), CVC) are collected and processed directly by the Payment Service Provider.
The Software Subscription is processed through the Subscription Service.
Your data is written to the CRM System via the Transfer Interface.
BOC Group uses the Hosting Service Provider and the Fallback Data Center to provide the hardware infrastructure.
In addition, your data will be processed by the Mailing Service Provider.
For further details on the recipients, please refer to the List of Recipients of Personal Data at the end of this document.
Optional Surveys
BOC Group includes survey links to its cloud-based software applications and to the lifecycle mailing in software subscription management in order to collect feedback on service quality and customer needs and expectations. Please refer to section “Optional Surveys”.
Usage and log information in ADONIS/ADOIT Community Edition
BOC Group collects and stores certain information about your behavior when you use the Community Edition.
We analyze which functions of the services are used by which users and to what extent, and how user behavior changes over time. Information about your activities will be combined with your account details. You might be contacted based on your activity.
At the latest three years after deactivation of your Community Edition account, the collected activity data will be anonymized. (Deactivated accounts can be reactivated after up to three years upon request)
Purpose of Data Processing
We use this data to understand how our services are used by our users and to adapt and improve our services to certain user behavior and to increase IT and network security.
Furthermore, this data may be used to provide you with personalized offers on our products according to your usage (direct marketing).
Legal Basis
The legal basis for this processing is the legitimate interest of BOC Group (Art 6 para 1 lit. f GDPR) in the aforementioned processing activities.
Our legitimate interests are to increase the IT and network security, to inform the users of our services about new products (direct marketing), and to improve our services and make them more attractive.
Storage Period
BOC Group keeps the data for up to three years after deactivation of your account. After that, this data can be processed anonymously by BOC Group.
Recipients or Categories of Recipients
Your data is written to the CRM System and will be processed through our Hosting Service Provider.
ADONIS/ADOIT Mobile Applications
Using the application without login
Unless a user logs in to a dedicated account, all users of the app work on the same repository. This means that the content you create can be viewed, edited or deleted by all users of the app. In addition, the repository is reset automatically once a day.
By using the app without registration no further personal data will be collected.
Using the application with login
By logging in with your ADONIS/ADOIT Community credentials, the user of the application receives personalized access to his ADONIS/ADOIT Community Account.
When signing in to the app on your mobile device for the first time, your credentials (username and password) can also be saved on your device (Key Storage).
The data transfers for authentication and authorization take place via an encrypted SSL connection.
Speech Recognition
The ADONIS/ADOIT Mobile Applications may use the speech recognition service of Apple/Google.
When you give the permission to use Speech Recognition, your spoken words will be transferred to either Google (Android users) or Apple (IOS-devices) to transform your spoken words to text.
You can revoke your permission at any time in the settings of your mobile device. Instructions can be found here: IOS: https://support.apple.com/en-us/HT203033 ; Android: https://support.google.com/googleplay/answer/6270602
Apple/Google may use this data to improve its speech recognition technology.
For more details on Apples speech recognition service see: https://developer.apple.com/documentation/speech
For more details on Googles speech recognition service see: https://developer.android.com/reference/android/speech/SpeechRecognizer
If you do not give permission, no data will be collected or transferred, but the speech to text service will not be available to you.
Optional Surveys
BOC Group includes survey links to its cloud-based software applications and to the lifecycle mailing in software subscription management in order to collect feedback on service quality and customer needs and expectations. Please refer to section “Optional Surveys”.
Online Platform User Registration
BOC Group offers visitors to its websites the opportunity to register for the online platform. Such registration allows users to view enhanced content, participate in events or use services. When registering for the Online Platform, you must provide certain data, such as surname, first name, e-mail, company, etc.. Certain content or services may require you to provide additional data. To ensure an ideal user experience, such data may be linked to other associated user profiles (e.g. community account with the same e-mail address) and usage information of specific services.
Registered Users can receive service-related information via email through the Mailing Service Provider.
Therefore, we process the following data via the Mailing Service Provider
- when we sent which message to you,
- if you’ve opened these,
- whether you clicked on links and if so which ones.
Purpose of Data Processing
The processing of your basic data is necessary for the purpose of fulfilling the contract.
We process additional data to understand how our content and services are used by our users and to improve them according to user behaviour. Your data will also be used to prevent misuse, in particular copyright infringement.
Furthermore, this data may be used to provide you with personalised offers on our products according to your usage (direct marketing).
Legal Basis
The legal basis for this processing is Art 6 para 1 lit. b and f GDPR.
Our legitimate interests are to protect our intellectual property, to inform users of our services about new products (direct marketing), and to improve our services and make them more attractive.
Storage Period
BOC Group retains the data for up to 7 years after deactivation of your account.
Recipients or Categories of Recipients
Your Data is processed by the CRM System, the Mailing Service Provider and the Hosting Service Provider.
Additional recipients may result from the individual content or services obtained (see recipients or categories of recipients of the respective service).
For further details on the recipients, please refer to the List of Recipients of Personal Data at the end of this document.
Atlassian Marketplace Apps
BOC offers Apps (ADONIS Process Manager for Confluence or ADOIT Enterprise Architect for Confluence) to connect your Confluence installation with BOC Products. These apps allow the connected Confluence users to access the content of BOC Products.
The Apps are provided either as Server, Data Center or Cloud edition, depending on your choice in the Atlassian Marketplace. Server and Data Center Apps needs to be installed on your Infrastructure (please follow the installation guide https://docs.boc-group.com/adonis/en/modules/COIS/Installation-Manual/). Cloud Apps can use BOC Cloud Services, which are hosted with our Hosting Service Provider, Amazon Web Services.
The Apps may display information from connected BOC Products on your Confluence pages deliberately using connector widgets (macros). In some cases we store information you have accessed via the App to enhance the search by adding data to the search index. The macros included on your Confluence page only store data necessary to reference the artifacts such as models and objects in BOC Products in order to be able to display them. Further, configuration data for connecting the App to the respective BOC Products are stored when using the App.
We process data which is communicated by Atlassian to us via the Sales and Evaluations Reports. Such data may contain your name, company name as well as details on your Confluence installation.
Furthermore, if you want to give us feedback or new ideas for the app, you can do so via a link in the app’s footer. Please note that this service is provided by a third party, namely our Customer Feedback Service Provider. When you give us feedback, the Customer Feedback Service Provider will process the data provided by you. Please find the details about our Customer Feedback Service Provider in the list of Recipients of Personal Data below. We do not collect or process any further personal data when using these Apps.
Access to Data Center and Server Apps:
The access is established via REST and is restricted to the authorization of a configurable technical user of the BOC Product. Community Edition Users can connect the App with their Community Edition Credentials.
This means that all users of your Confluence installation have access to content (including personal data) of your connected BOC Product (ADONIS/ADOIT/ADOGRC). Access restrictions can be configured at the technical user level of your connected BOC Product. Community Edition Users always have full access to their content.
Access to Cloud Apps:
Cloud Apps use REST and OAuth 2.0 for secure connection between the respective BOC Product and your Confluence instance. Therefore, the same access restrictions as configured in the respective BOC Product apply to Cloud Apps.
Purpose of Data Processing
If you have chosen a Cloud App, the processing of your Data via our Hosting Service Provider is necessary to provide you with the requested service.
We use this data to evaluate our sales made through the Atlassian Marketplace and to improve our visibility to certain user behavior and to increase IT and network security.
Furthermore, this data may be used to provide you with personalized offers on our products (direct marketing).
Legal Basis
The processing via our Hosting Service Provider is necessary for the performance of a contract.
The legal basis for this processing is the legitimate interest of BOC Group (Art 6 para 1 lit. f GDPR) in the aforementioned processing.
Our legitimate interests are to inform the users of our services about new products (direct marketing), and to improve our services and make them more attractive.
Storage Period
BOC Group keeps the data together with information of your connected BOC Product. For specific retention time, please see the according section of such BOC Product.
Recipients or Categories of Recipients
Depending on the type of your Confluence installation (Server, Data Center, Cloud), Atlassian has access to the data stored in the App. For details on the processing of personal data by Atlassian, please refer to https://www.atlassian.com/legal/privacy-policy.
In addition, when using Cloud Apps, your data may be processed by our Hosting Service Provider and our Customer Feedback Service Provider.
BOC Apps for M365
BOC Group offers Apps to connect your M365 installation with BOC Products. These apps allow the connected M365 users to access the content of BOC Products.
“BOC Apps for M365”:
- ADONIS Process Manager for SharePoint
- ADOIT Enterprise Architect for SharePoint
- ADONIS Report Creator for Word
BOC Apps for M365 can use BOC Cloud Services, which are hosted with our Hosting Service Provider, Amazon Web Services.
The Apps may display or process information from connected BOC Products deliberately using widgets(e.g. web parts). In some cases we store information you have accessed via the App to enhance the search by adding data to the search index. The widgets only store data necessary to reference the artifacts such as models and objects in BOC Products in order to be able to display or process them. Further, configuration data for connecting the App to the respective BOC Products are stored when using the App.
We process data which is communicated by Microsoft to us via the Sales and Evaluations Reports. Such data may contain your name, company name as well as details on your M365 installation.
Furthermore, if you want to give us feedback or new ideas for the app, you may do so via a link in the app’s footer. Please note that this service is provided by a third party, namely our Customer Feedback Service Provider. When you give us feedback, the Customer Feedback Service Provider will process the data provided by you. Please find the details about our Customer Feedback Service Provider in the list of Recipients of Personal Data below. We do not collect or process any further personal data when using these Apps.
The Apps use REST and OAuth 2.0 for secure connection between the respective BOC Product and your M365 instance. Therefore, the same access restrictions as configured in the respective BOC Product apply to the Apps.
Purpose of Data Processing
The processing of your Data via our Hosting Service Provider is necessary to provide you with the requested service.
We use this data to evaluate our sales made through Microsoft and to improve our visibility to certain user behavior and to increase IT and network security.
Furthermore, this data may be used to provide you with personalized offers on our products (direct marketing).
Legal Basis
The processing via our Hosting Service Provider is necessary for the performance of a contract.
The legal basis for this processing is the legitimate interest of BOC Group (Art 6 para 1 lit. f GDPR) in the aforementioned processing.
Our legitimate interests are to inform the users of our services about new products (direct marketing), and to improve our services and make them more attractive.
Storage Period
BOC Group keeps the data together with information of your connected BOC Product. For specific retention time, please see the according section of such BOC Product.
Recipients or Categories of Recipients
For details on the processing of personal data by Microsoft, please refer to https://privacy.microsoft.com/en-us/privacystatement
In addition, when using Cloud Apps, your data may be processed by our Hosting Service Provider and our Customer Feedback Service Provider.
Trainings and E-Learning
BOC Group offers a variety of professional trainings via its B2B Marketplace.
Access to the professional trainings can be purchased via the BOC Marketplace either as a package for several users or for single users.
If packages are purchased for several users, the main user can invite further users to register (up to the agreed maximum number of users).
In order to be able to use this service, each user must register. Therefore, the data provided by the user (first name, last name, email address, company, country) will be processed.
In addition, the progress of each user in the training is continuously recorded and (if applicable) made available to the main user.
Payment and the corresponding data processing are carried out exclusively for the main user.
After submitting the form, users may receive personalized communication according to their expressed field of interest. New subscribers receive an email upon this subscription where they can edit their email preferences. Unsubscription from further email communication is possible at any time.
After a user submits a form, BOC Group processes the data entered in the said form, as well as a few additional attributes related to the form submission (e.g.: time stamp and submission URL).
Purpose of Data Processing
The processing of your data is necessary for the performance of a contract as well as for tax and company law obligations.
Legal Basis
Legal basis for the processing activity is Article 6 para. 1 lit. b and c GDPR.
Storage Period
BOC Group retains the data for up to 7 years after deactivation of your account.
Recipients or Categories of Recipients
Users’ data is written to the CRM System via the Transfer Interface and passed on to the Mailing Service Provider.
The training themselves are carried out and processed through the Learning Management System.
The data required for payment processing (credit card holder, credit card number, expiry date (month), expiry date (year), CVC) are collected and processed directly by the Payment Service Provider.
For further details on the recipients, please refer to the List of Recipients of Personal Data at the end of this document.
Webinars
BOC Group offers a series of webinars evolving around business- and tool-related topics, featuring experts from BOC Group and its associates. Registered Online Platform Users have access to live and on-demand webinars .
Webinar includes data processing for the following activities related to a webinar registration:
- providing access to a live webinar for those signing in in-time before a live webinar,
- providing access to an on-demand webinar,
- providing the webinar recording to everyone who signed in for the webinar,
- handling participant requests via email or phone,
- as well as screening of attendee reports for follow-up activities.
After submitting the form, users may receive personalized communication according to their expressed field of interest. New subscribers receive an email upon this subscription where they can edit their email preferences. Unsubscription from further email communication is possible at any time.
After a user submits a form, BOC Group processes the data entered in the said form, as well as a few additional attributes related to the form submission (e.g.: time stamp and submission URL).
In addition, for live webinars we may collect additional information such as: attendance/non-attendance, duration of attendance, questions or comments posted into the conversation stream.
Purpose of Data Processing
The processing of your data is necessary for the performance of a contract and to improve our service.
Legal Basis
Legal basis for the processing activity is Article 6 para. 1 lit. b and f GDPR.
Storage Period
BOC Group retains the data for 2 years since the last form submission by the user.
Recipients or Categories of Recipients
Your data is written to the CRM System via the Transfer Interface.
In order to participate in live webinars, your data is transferred to the Web Conferencing Service.
In addition, your data will be processed by the Mailing Service Provider.
In certain cases, when the webinar is hosted together with partners, your registration data might be shared with this specific partners.
For further details on the recipients, please refer to the List of Recipients of Personal Data at the end of this document.
Optional Surveys
BOC Group includes survey links to its cloud-based software applications and to the lifecycle mailing in software subscription management in order to collect feedback on service quality and customer needs and expectations. Please refer to section “Optional Surveys”.
Support, Contact, Info, Offer, Marketplace,Event– Request
Within the BOC Group Websites and Services, request forms (Support, Contact, Info, Offer, Marketplace, Event- Request) for various inquiries are provided for interested parties at various points.
Depending on the type of request, the requested content is displayed immediately after your data has been submitted, or is sent to you by email or post after the request has been validated manually.
After a user submits a form, BOC Group processes the data entered in the said form, as well as a few additional attributes related to the form submission (e.g.: time stamp and submission URL).
If you have registered for our “Article Series” using a request form, you can receive service-related information from our mailing service provider.
Therefore, we process the following data via the Mailing Service Provider
- when we sent which message to you,
- if you’ve opened these,
- whether you clicked on links and if so which ones.
In addition, there is the option of ticking the box, containing the text similar to: “Yes, I want to receive personalized communication based on my field of interest (e.g. industry news, free events, product updates, etc.)”. By ticking the box, users agree to being placed on the BOC mailing list. New subscribers receive an email upon this subscription where they can edit their email preferences. Unsubscription from further email communication is possible at any time.
Purpose of Data Processing
The processing of your data is necessary to deal with your request.
Legal Basis
Legal basis for the processing activity is Article 6 para. 1 lit. b GDPR.
Storage Period
BOC Group retains the data for 2 years since the last form submission by the user.
Recipients or Categories of Recipients
If users agreed to being placed on the BOC mailing list, then their data will be further processed by the Mailing Service Provider.
If you have registered for our “Article Series” using a request form, your data will be processed in addition by the Mailing Service Provider.
For further details on the recipients, please refer to the List of Recipients of Personal Data at the end of this document
Content
BOC Group offers a collection of free content pieces revolving around business- and tool-related topics, featuring experts from BOC Group and its associates. Users can access the content either by registering for the Online Platform or by submitting a form, depending on the content piece at hand.
Content pieces include:
- Posters
- Whitepapers
- Cheatsheet downloads
- And others
After a user submits a form, BOC Group processes the data entered in the said form, as well as a few additional attributes related to the form submission (e.g.: time stamp and submission URL).
In addition, after submitting the form, users may receive personalized communication according to their expressed field of interest. New subscribers receive an email upon this subscription where they can edit their email preferences. Unsubscription from further email communication is possible at any time.
Purpose of Data Processing
The processing of your data is necessary for the performance of a contract and to improve our service.
Legal Basis
Legal basis for the processing activity is Article 6 para. 1 lit. b and f GDPR.
Storage Period
BOC Group retains the data for up to 2 years since the last form submission by the user.
Recipients or Categories of Recipients
Your data is written to the CRM System via the Transfer Interface.
In addition, your data will be processed by the Mailing Service Provider.
For further details on the recipients, please refer to the List of Recipients of Personal Data at the end of this document.
Recommendation
BOC offers a recommendation service where you can share our content with your friends and contacts to connect with our Service. Therefore, we will contact the persons you recommended and will include your name to let them know that you are the person extending the invitation. In addition, we also send a confirmation email to you.
By submitting the recommendation form, the following data provided by you can be processed: Form of address, first name, last name, email address, company, telephone number.
Purpose of Data Processing
The processing is done to inform you about current topics and to improve our service.
Legal Basis
Legal basis for the processing activity is Article 6 para. 1 lit. a GDPR.
Storage Period
BOC Group retains the data for up to eighteen (18) months after submitting the request.
Recipients or Categories of Recipients
Your data is written to the CRM System via the Transfer Interface.
For further details on the recipients, please refer to the List of Recipients of Personal Data at the end of this document
Job Applications
BOC Group maintains a career portal on its website. On this portal, vacancies are published, so that interested people are provided with an opportunity to apply for these positions. Furthermore, the career portal offers a possibility to submit unsolicited applications. The applications are handed over electronically to the responsible regional BOC office in charge.
Processing job applications via the Career Portal includes all activities related to submitting a job application to the responsible BOC operation.
After a user submits a form, BOC Group processes the data entered in the said form, as well as a few additional attributes related to the form submission (e.g.: time stamp and submission URL).
Which additional personal data you enter in the application documents is up to you.
In addition, there is the option of ticking the box, containing the text similar to: “Yes, I want to receive personalized communication based on my field of interest (e.g. industry news, free events, product updates, etc.)”. By ticking the box, users agree to being placed on the BOC mailing list. New subscribers receive an email upon this subscription where they can edit their email preferences. Unsubscription from further email communication is possible at any time.
Purpose of Data Processing
The processing serves the purpose of checking your application.
Legal Basis
Legal basis for the processing activity is Article 6 para. 1 lit. b GDPR.
Legal basis for keeping your application in record is Article 6 para. 1 lit. a GDPR.
Storage Period
If you have given your consent to keep your application in record, BOC Group retains the data for up to five years after your application. You can revoke this consent at any time by email: privacy@boc-group.com
Without this consent, BOC Group retains the data for up to 7 months from the end of the application process.
Recipients or Categories of Recipients
If your application relates to the BOC location Vienna, your data will be processed by our Personnel Administration System.
For further details on the recipients, please refer to the List of Recipients of Personal Data at the end of this document.
Event Registration
BOC Group hosts and attends a number of client and partner events throughout the year (e.g. BOC Infoday). The BOC Group website offers the possibility to register for such events online.
After a user submits a form, BOC Group processes the data entered in the said form, as well as a few additional attributes related to the form submission (e.g.: time stamp and submission URL).
Users who have registered for an Event can receive service-related information via email through the Mailing Service Provider.
Therefore, we process the following data via the Mailing Service Provider
- when we sent which message to you,
- if you’ve opened these,
- whether you clicked on links and if so which ones.
Please note any further processing of personal data at events under the heading “Processing of photos at events”.
In addition, there is the option of ticking the box, containing the text similar to: “Yes, I want to receive personalized communication based on my field of interest (e.g. industry news, free events, product updates, etc.)”. By ticking the box, users agree to being placed on the BOC mailing list. New subscribers receive an email upon this subscription where they can edit their email preferences. Unsubscription from further email communication is possible at any time.
Purpose of Data Processing
Processing is done for the purpose of registering you for a specific event.
Legal Basis
Legal basis for the processing activity is Article 6 para. 1 lit. f GDPR.
Storage Period
BOC Group retains the data for 2 years since the last form submission by the user.
Recipients or Categories of Recipients
If users agreed to being placed on the BOC mailing list, then their data will be further processed by the Mailing Service Provider.
For further details on the recipients, please refer to the List of Recipients of Personal Data at the end of this document
Processing of Photos at Events
As part of the event documentation, BOC Group produces photographs or films during the event. By registering for (or participating in) the event, you acknowledge that photographs and video material depicting you may be used for press coverage and may be published in popular media, publications and on BOC Group Websites.
Purpose of Data Processing
The processing is carried out for the purpose of BOC Group’s public relations work and for documentation purposes.
Legal Basis
Legal basis for the processing activity is Article 6 para. 1 lit. f GDPR.
Storage Period
BOC Group retains the photos as long as the legal basis of the legitimate interest exists.
The legitimate interest shall cease when BOC Group no longer needs the photos for its public relations work. Selected photos may be stored indefinitely for archive purposes.
Recipients or categories of recipients
Selected photos can be passed on to various media for publication in accordance to the purpose of data processing.
Within BOC Group’s websites and services you might have the possibility to book an appointment with our staff by selecting one of the offered time slots. BOC uses Microsoft Bookings to provide a simplified way to get in touch with our staff. We process the data provided by you (name and contact information).
Purpose of Data Processing
BOC Group uses Microsoft Bookings to provide a direct way to make appointments and to contact you after such appointment has taken place.
Legal Basis
Legal basis for the processing activity is Article 6 para. 1 lit. f GDPR.
Storage Period
BOC Group retains your information for as long as necessary to fulfill the purpose described herein or as required by applicable law.
Recipients or categories of recipients
Your Data is processed by the CRM System and Microsoft Office.
For further details on the recipients, please refer to the List of Recipients of Personal Data at the end of this document.
Right to Object
Insofar as the legal basis for the processing is legitimate interests of BOC Group pursuant to Art. 6 (1) lit. f GDPR, you have the right to object to the processing in accordance with Art. 21 GDPR to the extent that grounds relating from its particular situation are raised. BOC Group will no longer process the personal data unless the BOC Group demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. Please direct an objection to: privacy@boc-group.com.
Your Rights
You have the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing. If the processing is based on your consent, you can withdraw it at any time.
For any privacy-related inquiry, please contact privacy(at)boc-group.com
Furthermore, you have the right to lodge a complaint with a supervisory authority.
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Wien
Telefon: +43 1 52 152-0
email: dsb@dsb.gv.at
Website: dsb.gv.at
List of Recipients of Personal Data
Service | Name | Address | Further Information about Privacy | Contact | Data Processing | Adequate Level of Data Protection |
---|---|---|---|---|---|---|
Payment Service Provider | Stripe Payments Europe, Ltd | 510 Townsend Street San Francisco, CA 94103, USA | https://stripe.com/at/privacy | dpo@stripe.com | A Data Processing Agreement (DPA) is in place. | |
Mailing Service Provider | The Rocket Science Group LLC (Mailchimp) | 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA | https://mailchimp.com/legal/privacy/ | privacy@mailchimp.com | A Data Processing Agreement (DPA) is in place. | |
Transfer Interface | Zapier Inc., | 548 Market St #62411, San Francisco, California 94104, USA | https://zapier.com/privacy | contact@zapier.com | A Data Processing Agreement (DPA) is in place. | The data transmission is based on the standard contractual clauses C(2010) 593 |
Mailing Service Provider | LogMeIn Ireland Limited (GoToWebinar) | The Reflector 10 Hanover Quay Dublin 2 | https://www.logmeininc.com/de/legal/privacy | privacy@logmein.com | A Data Processing Agreement (DPA) is in place. | The data transmission is based on the standard contractual clauses C(2010) 593 |
Subscription Service | FastBill GmbH (Monsum) | Bockenheimer Anlage 15 60322 Frankfurt am Main | https://www.fastbill.com/datenschutz | datenschutz@fastbill.com | A Data Processing Agreement (DPA) is in place. | EU |
Hosting Service Provider | CloudSigma AG | Badenerstrasse 549 8048 Zürich Schweiz | https://www.cloudsigma.com/legal-switzerland/ | legal@cloudsigma.com | A Data Processing Agreement (DPA) is in place. | Adequacy decision https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX%3A32000D0518 |
Amazon Web Services EMEA Sàrl | 38 Avenue John F. KennedyL-1855 Luxembourg | https://aws.amazon.com/compliance/data-privacy/ | N.A. | A Data Processing Agreement (DPA) is in place. | Data Location: Frankfurt and Paris | |
Fallback Data Center | 1&1 IONOS Cloud GmbH | Elgendorfer Str. 57, 56410 Montabaur | https://www.ionos.de/terms-gtc/terms-privacy?linkId=ft.nav.privacypolicy | info@cloud.ionos.com | A Data Processing Agreement (DPA) is in place. | EU |
CRM System | Sugar CRM | 10050 N. Wolfe Rd. Cupertino, CA 95014 | https://community.sugarcrm.com/docs/DOC-6108-data-privacy-in-sugar-cloud-faq | dataprivacy@sugarcrm.com | A Data Processing Agreement (DPA) is in place. | EU |
Learning Management System | Epignosis LLC (TalentLMS) | 315 Montgomery Street, 9th Floor, San Francisco,CA 94104, USA | https://www.talentlms.com/gdpr | privacy@talentlms.com | A Data Processing Agreement (DPA) is in place. | |
Survey Tool | Typeform SL | C/Bac de Roda, 163 (Local), 08018 – Barcelona (Spain) | https://admin.typeform.com/to/dwk6gt/ | gdpr@typeform.com | A Data Processing Agreement (DPA) is in place. | EU |
Appointment Bookings | One Microsoft Place | South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland | https://privacy.microsoft.com/en-us/privacystatement | https://www.microsoft.com/en-ie/contact.aspx | A Data Processing Agreement (DPA) is in place. | |
Personnel Administration System | Personio GmbH | Rundfunkplatz 4,80335 München, Germany | https://www.personio.com/privacy-policy/ | info@personio.de | A Data Processing Agreement (DPA) is in place. | EU |
Customer Feedback Service Provider | Aha! Labs Inc. | 20 Gloria Circle Menlo Park, CA 94025, USA | https://www.aha.io/legal/privacy_policy | support@aha.io | Independent Controller | Data Location: Amazon Web Services EU-West (primary; Ireland) and Amazon Web Services EU-Central (backup and disaster recovery; Frankfurt) |