Privacy policy

viridiusLAB AG (hereinafter referred to as “viridius”, “viridiusLAB” or “we”) is the controller within the meaning of Article 4(7) of the EU General Data Protection Regulation (“GDPR”) with regard to the processing of personal data of visitors to our website www.viridiuslab.com (for details see point I.).

In accordance with Art. 13 GDPR, this privacy policy describes, among other things, the types of personal data we process, the purposes for which we process the personal data and the third parties with whom we share the data when you visit our website. In addition, you will be informed about your rights in relation to your personal data and how you can exercise these rights.

I. Who is responsible for data processing?

is the controller within the meaning of Art. 4(7) GDPR:

You can reach us at:

Tel: +43 (1) 9093440
E-Mail: office@viridiuslab.com

Contact details of the data protection officer: datenschutz@viridiuslab.com

II. What personal data do we process?

By personal data we mean all information that relates to you as a person (Art. 4 Z 1 GDPR).

When you use our website, we may process the personal data that you voluntarily provide to us (e.g. via our contact options).

However, you can also visit our website without actively providing us with information about yourself. In this case, we only collect certain data that your browser transmits to our website server (log files) and data that we collect through the use of cookies or similar technologies.

III For what purpose and on what legal basis do we process your personal data?

1. our online offers

If you actively communicate with us via our website, we process the personal data that you voluntarily provide to us. This relates in particular to our following offers:

a) Making contact:

If you decide to contact us via the contact options provided on our website, the personal data that you provide to us (e.g. name, email address, address, message content) will be processed. We process these in order to answer your questions, fulfill your requests or otherwise communicate with you (legal basis: Art 6 para 1 lit b GDPR – contract fulfillment or implementation of pre-contractual measures).

Some of the data that we request in connection with our above-mentioned offers may be marked as mandatory fields(*). You are not obliged to provide this data. However, without providing this information, we may not be able to process your request or provide our services.

2. log files

You can also visit our website without actively providing us with information about yourself. In this case, we collect certain data that your browser transmits to our website server (log files)

Our log files contain the following information: Date and time of access to our website, (ii) type, version and settings of your web browser, (iii) your operating system and service provider, (iv) pages and files requested, (v) the website used prior to visiting our website, and (vi) your IP address. The IP address is a specific number assigned to your computer that enables your device to communicate on a network via the Internet Protocol (IP). IP addresses may qualify as personal data as they allow the user to be identified in certain circumstances.

The processing of these log files is necessary for us to ensure the functionality, stability and security of our website. We may also process them as part of forensic investigations in the event of a security incident or to compile anonymized user statistics (legal basis: Art 6 para 1 lit f GDPR – legitimate interest in maintaining the functionality, stability and security of our website)

3. cookies

This website also uses cookies. These are small text files that can be stored on your device when you visit our website and that store certain information about you. Cookies cannot access, read or modify other data stored on your device. When we refer to “cookies”, we include other technologies with similar purposes, such as pixel tags.

We use two types of cookies on our website :

• Necessary cookies: Without necessary cookies, the proper functionality of our website would not be guaranteed or only to a limited extent. The use of necessary cookies on our website is possible without your consent. However, you can deactivate cookies at any time by changing your browser settings. A detailed description of the necessary cookies used and the respective processing purposes can be found below (legal basis: Art. 6 para. 1 lit. f GDPR – legitimate interest).
• Optional cookies: These types of cookies can be used to improve our website, optimize your user experience, analyze user behavior or personalize marketing activities. Optional cookies may also be used by external advertising companies (“third party cookies”). Optional cookies are only used with your consent, which you can give by clicking on the “OK” button (“I agree”) on the cookie banner of our website. This consent can be revoked at any time with effect for the future by deleting it in your browser or adjusting your preferences under “Edit cookie settings” in the footer of this website. A detailed description of the optional cookies used and the respective processing purposes can be found below (legal basis: Art 6 para 1 lit a GDPR – consent).

Necessary cookies used

Optional cookies used

Google Analytics:

Our website uses Google Analytics, provided by Google Ireland Limited, registration number: 368047, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), which enables us to analyze the use of our website.

The information generated by the cookie about your use of this website (including your IP address and the URLs of the pages visited) may be transmitted to and stored by Google on servers in the United States. The USA does not have an adequate level of data protection and there is a risk that US authorities may gain access to your data.

Our website uses an IP anonymization function provided by Google Analytics. Your IP address will therefore be shortened/anonymized by Google immediately upon receipt. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for us and providing other services relating to website activity and internet usage. Under no circumstances will Google merge your IP address with other data.

Further information on the terms of use we have concluded with Google and on Google’s data protection provisions and data protection measures can be found at the following link: https://www.google.com/analytics/terms/gb.html.

For more information on how Google Analytics works and the information we can collect and analyze, please visit https://support.google.com/analytics/answer/1012034?hl=lten&ref_topic=6157800.

The cookies used by Google Analytics are only set with your consent. You can deactivate the collection of your data by Google Analytics at any time by clicking on the following link: https://tools.google.com/dlpage/gaoptout/.

IV. To whom do we transfer your personal data?

When operating our website, we also use external IT service providers who process personal data on our behalf as processors within the meaning of Art. 4 (8) GDPR. We use the following categories of processors:

a) Service providers on whose server our website is operated.

b) Service providers who maintain the website on our behalf.

c) Service providers on whose servers our appointment scheduling tools are operated.

d) Service providers who are responsible for processing the contact forms.

We oblige these service providers to adequately protect your personal data in a contract in accordance with Art. 28 GDPR.

Some of these service providers may process data in the USA. The EU Commission and the Court of Justice of the European Union have granted the USA does not attest to an adequate level of data protection. In particular, there is a risk that this data is subject to access by local authorities or courts for control and monitoring purposes in accordance with the applicable provisions and that no effective legal remedies are available against this.

However, when we transfer personal data to such third countries, we implement appropriate safeguards to ensure that your rights are protected in accordance with the provisions of the GDPR. This includes the conclusion of the standard contractual clauses published by the EU Commission for the transfer of personal data (Art 46 para 2 lit c GDPR). Further details on the security guarantees used and copies of the respective agreements are available on request at datenschutz@viridiuslab.com.

In addition, data may be transferred to a third country with your express consent (Art 49 (1) (a) GDPR). We or third-party providers may also process personal data as part of the cookies used on our website. These third-party providers include Google LLC, which is based in the USA and processes data there. Before we set cookies and transmit your data to Google LLC, we ask for your express consent (Art. 6 para. 1 lit. a GDPR in conjunction with Art. 49 para. 1 lit. a GDPR). Corresponding information on the individual cookies regarding purposes, data categories and storage duration can be found above under point III. 3. You can revoke your consent to cookies at any time with effect for the future by deleting them in your browser.

V. How long will your personal data be stored?

Log files are generally stored for a period of 14 days. Beyond this period, log files are only stored for the purpose of investigating irregularities or security incidents in our systems. For the storage period of cookies, see point III.3 above.

Otherwise, we only store your personal data for as long as is necessary to fulfill the purpose for which it was collected. In any case, we therefore store your data for the duration of our contractual or service relationship with you. In addition, we store your personal data in accordance with other statutory retention periods. (e.g. retention obligation under tax law pursuant to § 132 para. 1 BAO: 7 years, beyond that as long as they are relevant for the tax authorities in pending proceedings/ retention obligation under company law pursuant to §§ 190, 212 UGB: 7 years/ retention obligation under VAT law for invoices pursuant to § 11 para. 2 UStG: 7 years).

VI What data protection rights do you have?

With regard to your personal data, you have the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to object under Art. 21 GDPR and the right to data portability under Art. 20 GDPR.

If the processing of your data is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

There is no automated decision-making in individual cases or profiling within the meaning of Art. 22 GDPR.

You can find more information about your rights at: https://www.dsb.gv.at/rechte-der-betroffenen. Please assert your rights as a data subject at datenschutz@viridiuslab.com.

In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Art 77 GDPR). The competent supervisory authority for Austria is the Data Protection Authority, Barichgasse 40- 42, 1030 Vienna[](https://www.dsb.gv.at/).