Dr. Eva Schwarz

Management Consultancy

Privacy Policy

Name and contact of the responsible person according to Article 4 (7) DSGVO

Dr. Eva Schwarz, MPH
Management Consultancy

Starkfriedgasse 46a
1190 Vienna
Austria

Tel.: +43 1 470 69 40
E-Mail: eva.schwarz@es-consult.at
Web: www.es-consult.at

Privacy Policy

We consider it our primary task to maintain the confidentiality of the personal data you provide and to protect it from unauthorized access. That is why we take the utmost care to ensure maximum protection of your personal data.

Lawfulness of processing

The processing of personal data is only lawful if there is a legal basis for the processing. In accordance with Article 6 (1) (a) – (f) GDPR, the legal basis for the processing may be in particular:

  • the data subject has given his or her consent to the processing of personal data concerning him or her for one or more specific purposes.
  • the processing is necessary for the fulfillment of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject.
  • the processing is necessary to comply with a legal obligation to which the person in charge is subject.
  • the processing is necessary to protect the vital interests of the person concerned or another natural person.
  • the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority delegated to the person in charge.
  • the processing is necessary to safeguard the legitimate interests of the person in charge or of a third party, unless the interests or fundamental rights and freedoms of the person concerned requiring the protection of personal data prevail, in particular if the person concerned is a child.
Information about the collection of personal data
  1. In the following, we inform you about the collection of personal data when using our website. Personal data are i.e., name, address, e-mail address, telephone number.
  2. If you contact us by e-mail, the data provided by you (your e-mail address, your name, address, telephone number, etc. if provided) will be stored by us to contact you.
Collection of personal data when visiting our website
  • We do not use cookies on our website and do not store cookies on your computer. We also do not use technologies to store your user data (such as your IP address, information about your browser, etc.) on our server.
  • We do not use Google Analytics or other data collection and analysis services.
  • We do not use links to social networks that also collect information about you and your user behavior on the Internet.
  • Since we do not collect any data about your visit to our website, no data can be passed on to third parties.
  • We do not use Google Maps on our website, but links to them. If clicking on a link redirects you to an external site such as Google Maps, this site may store cookies on your computer and collect and store data about your visit on their website. Here you will find Google's privacy policy and terms of use.
Collection of personal data in e-mail traffic, telephone calls or various messaging apps
  • If you send us an e-mail, you accept that we will use your e-mail address and possibly receive and store further personal data from you.
  • For telephone calls, you send your own telenon number in most cases when you call us. Thus, you voluntarily provide us with this information. This fact also applies to SMS messages.
  • Please note that e-mails are generally not a secure type of communication, and their content are usually transmitted unencrypted over the Internet and thus it can read and stored by third party.

Rights of the visitor / person concerned

(1) Revocation of consent

You can revoke your consent to the storage and processing of your data at any time. To exercise the right of withdrawal, you can contact us at any time.

(2) Right to confirmation

You have the right to request confirmation from us as to whether we are processing personal data concerning you. You can request confirmation at any time using the above contact details.

(3) Right to information

If personal data is processed, you can request information about this personal data and the following information at any time:

  • the purposes of the processing.
  • if possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria for determining that period.
  • the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by us or a right to object to such processing.
(4) Right to rectification

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.

(5) Right to erasure (right to be forgotten)

You have the right to request that we delete personal data concerning you without undue delay and we are obliged to delete personal data without undue delay if one of the following reasons applies:

  1. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  2. The data subject withdraws consent on which the processing was based pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) GDPR and there is no other legal basis for the processing.
  3. You as the person concerned object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
  4. The personal data have been unlawfully processed.
  5. The erasure of the personal data is necessary to fulfil a legal obligation under the Union law or the law of the Member States to which the person in charge is subject.
  6. The personal data have been collected in relation to information society services offered in accordance with Article 8(1) GDPR.

The right to erasure ("right to be forgotten") does not exist if the processing is necessary:

  • to comply with a legal obligation requiring processing under the Union or Member State law to which the person in charge is subject, or to fulfil a task carried out in the public interest or in the exercise of official authority vested in the person in charge.
  • for reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) GDPR.
  • to assert, exercise or defend legal claims.