Status December 2021

The protection of personal data is an important concern for us. Therefore, we conduct our activities by the applicable legal provisions on the protection of personal data and data security. Disclosed personal data is treated confidentially and in compliance with the provisions of the DSG and the DSGVO. In the following, you will learn what information we process, how we handle it and to whom we may make it available.

Responsible
Caritas Association of the Archdiocese of Salzburg
Friedensstraße 7
5020 Salzburg
Phone: +43 5 1760 0
Mail: office@caritas-salzburg.at

You can reach the data protection officer at datenschutz@caritas-salzburg.at.

Data collection in the context of website visits

Every time you access our website, your browser automatically transmits the data listed below to our web servers for technical reasons. This data is stored exclusively for statistical and technical purposes, for example, to evaluate the frequency of page visits or to detect malfunctions in server operation.

The following data is logged:

- Request (file name of the requested file)
- Browser type and browser version
- Operating system used
- Referrer URL (the website from which you visit our website)
- IP address
- Date and time of your visit
- The web pages visited within our website
- Any form of content
- User name and password (when logging into the backend)

We collect this data based on our legitimate interest (see Art. 6 para. 1 lit. f DSGVO) and store it as "server log files" on the website server. The server log files are stored for a maximum of 1 week and then deleted. If data must be retained for evidentiary reasons, e.g. to clarify security breaches, they are exempt from deletion until the incident has been finally clarified.

Further personal data, such as name, home address, e-mail address or date of birth are only collected if you provide them yourself. On our website, for example, you can provide such data when making an appointment for counselling and during the counselling itself. You can find further information in the respective subsections of the data protection declaration.

We use selected processors for the technical and organisational implementation of our website. All processors are contractually obliged to treat your personal data confidentially and to process it only within the framework of the service provision by our instructions.

Cookies

To present our website, to offer certain functionalities or to analyse and improve website visits, we use cookies on the website. Cookies are small text files that are stored on your device in order to recognise you during your visit or when you use our website again. Cookies can be stored permanently or only during a session. Different types of cookies can be used which are either absolutely necessary to display the website and ensure various functions, or are optional and only become active with your consent. Mandatory cookies are processed based on Art. 6 para. 1 lit. f

DSGVO. Optional cookies are processed based on your consent pursuant to Art. 6 para. 1 lit. a DSGVO. You can revoke any consent you have given at any time. You can also prevent the installation of all types of cookies by setting your browser accordingly.

The following cookies are set on the website:

Cookieconsent_status

- Purpose: Stores whether the cookie banner has already been displayed.
- Storage period: 1 year
- Status: Necessary

dp_cookieconsent_status

- Purpose: Stores the selected cookie settings
- Storage time: 1 year
- Status: Necessary

fe_typo_user

- Purpose: Stores the user ID for the duration of the session.
- Storage duration: Session
- Status: Necessary

Online counselling via webmail, chat or video

You can contact us via this website by webmail, chat or video.

To arrange counselling (except live chat) you will need to create a user account. This requires you to enter a username, password and postcode. The latter is necessary to assign you to our regional service points and counsellors. Mandatory fields are marked with an "*". Other information provided during registration is voluntary and will only be collected with your consent. Some functions, e.g. to forward information about the availability of an answer in the webmail, a reminder about an agreed appointment or a postponement of an appointment, require your personal e-mail address. The legal basis for this is Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time.

For the online counselling itself, it is generally not necessary to provide personal data. You are welcome to use a pseudonym - an invented name - or your user name. This makes it easier for us to keep track of the counselling process. In the case of video counselling, you are free to use the camera function of your device and thus show your face.

If we are to support you in the context of counselling, e.g. when dealing with authorities, with specific enquiries to third parties or similar, we will in any case ask you for precise information about yourself. For those counselling cases in which you provide us with personal data or an allocation to your person is possible, we may hereby inform you about the use of data:

Depending on the counselling tool selected and the counselling setting, different personal data may be collected which are necessary for the fulfilment of the service. The processing of personal data takes place for the fulfilment of (pre-)contractual measures according to Art. 6 para. 1 lit. b DSGVO in conjunction with Art. 9 para. 2 lit. h DSGVO for care and treatment in the health and social sector.

The following data may be processed in this context:

- Master data (e.g. name, gender, date of birth),
- Contact data (e.g. address, e-mail address, telephone number),
- Data on occupation and training (e.g. occupational and training aspirations, employment history, job search, skills and abilities, barriers to employment),
- Data on economic and social conditions (e.g. marital status, reference persons, size and composition of the household, legal form of housing, household income, receipt of benefits, care obligations, residence status in the case of third-country nationals, experiences of flight),
- data on health status (e.g. health restrictions, disabilities, accidents).

The provision of personal data is not contractually required. However, we must point out that certain services may not be provided without the disclosure of personal data.

Data will not be passed on to third parties without your consent. However, we use selected service providers, so-called order processors, to provide advisory tools. All order processors are contractually obliged to treat your personal data confidentially and to process it only in the context of providing the service by our instructions.

There is no automated decision-making or profiling according to Art. 22 (1) and (4) DSGVO.

Your personal data can be accessed for a maximum of 12 months and will be automatically deleted from the online account. If you wish to have your data deleted from the online account earlier, please inform your counsellor. We keep the documentation on the counselling for 10 years after the counselling service has ended. This is due to our legitimate interest according to Art. 6 Para. 1 lit. f DSGVO in a high-quality and continuous support of our clients as well as the traceability and control of the services provided. In the case of funded counselling services, this may also be necessary due to our contractual obligation towards the funding body according to Art. 6 para. 1 lit. b DSGVO.

Data security

The security of your data in our systems is very important to us. Our aim is to manage your data with the utmost care and to take all necessary technical and organisational security measures to protect your personal data from loss and misuse.

All our employees are bound to secrecy regarding personal data that has become known to them and have been trained accordingly in the legal and operational requirements.

Access to our website is secured via HTTPS if your browser supports SSL. This means that communication between your terminal device and our servers is encrypted. Furthermore, all counselling data is only stored in encrypted form and regularly backed up.

Your rights

About the processing of your data, you have the right to information, correction, deletion, restriction, data portability, revocation and objection. The right of revocation applies to data processing based on your consent. You have the right to object to data processing based on the legitimate interests of the controller or a third party. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in some way, you can complain to the supervisory authority. In Austria, this is the data protection authority. If you wish to exercise any of these rights, you can also contact us at any time using the contact details provided in "Person responsible".

Updating the data protection declaration

We reserve the right to adapt this data protection declaration to technical developments and legal changes if necessary or to update it in connection with the offer of new services or products.