1. Controller, Contact and Data Protection Officer
The processing of the personal data collected from you in connection with the provisioning of our products and services is carried out by matokeo GmbH, Donau-City-Str. 1, 1220 Vienna, Austria ("matokeo") as controller.
Should you have questions concerning this document or want to lodge a complaint with regard to the collection and processing of your personal data by matokeo, you can contact us as follows:
Email: office@matokeo.at
Phone: +43 676 844187 222

2. Categories of Data, Processing Purposes and Legal Basis
We collect and process the following personal data: Title, name, company, position, address, email address, IP-address. We collect these data in order to fulfill our mandate and to send you (personalized) information about our products and services. Legal basis for the processing is your consent in accordance with Article 6(1) (point) (a) of the General Data Protection Regulation of the EU.

3. Recipients and Categories of Recipients
At matokeo, access to your personal data is restricted to such persons who have a need to know in order to fulfill their professional tasks. We only disclose your personal data to third parties (e.g. manufacturers or distributors) if we are obliged to do so pursuant to contractual or statutory provisions, if you have given your respective consent or if such disclosure is otherwise permitted by contract or law.
In particular, we can transfer your personal data for the respective purposes to the recipients and categories of recipients listed below:
a. Private third parties: Other, private bodies, irrespective of whether or not they are affiliated with matokeo.
b. Processors: Just like other controllers, we also depend on the services of third parties. Our service providers are subject to local privacy laws and, moreover, contractually obliged to exclusively process the personal data on our behalf and according to our instructions. We also oblige our service providers to comply with technical and organizational measures guaranteeing the protection of the personal data.
c. Public authorities, courts, external advisors and similar third parties that are public bodies: To the extent this is required or permitted by applicable law.

4. Retention Period and Erasure
We will keep your personal data as long as this is necessary to fulfill the purposes of the consent. If we do no longer need your personal data for compliance with contractual or statutory obligations, we will erase them from our systems or anonymize them accordingly so that identification is no longer possible. This shall not apply if we must comply with statutory or official obligations, e.g. statutory retention periods that may be specified in the Austrian Commercial Code or the Austrian General Tax Code and that can generally extend to 6 to 10 years, or if evidence must be secured during statutory limitation periods. While these periods usually amount to 3 years, they amount to up to 30 years in some cases.

5. Your Rights
Under applicable data privacy law, you can have the following rights in addition to the right to lodge a complaint with a supervisory authority. To exercise your rights, please contact us by using the contact details provided above.
a. Right of access: You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed. Where this is the case, you have a right to request access to the personal data. The right of access in particular relates to information about the processing purposes, the categories of the personal data processed, and about the recipients or categories of recipients to whom we have disclosed or will disclose the personal data. Please note that the right of access is no absolute right and justified interests of other persons can result in a restriction of the right of access.
b. Right to rectification: You have the right to request the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
c. Right to erasure (‘right to be forgotten’): If the corresponding requirements are met, you can request that personal data concerning you be erased without undue delay.
d. Right to restriction of processing: If the corresponding requirements are met, you can request the restriction of the processing. In such case, the respective personal data are designated accordingly and, if applicable, only processed for specific purposes.
e. Right to data portability: If the corresponding requirements are met, you have a right to data portability in respect of personal data concerning you which you have provided to us, i.e. the right to receive these data in a structured, commonly used and machine-readable format and, if applicable, the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
f. Right to object: Under certain circumstances, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you. This also applies to any related profiling. Moreover, you have the right to object to the processing of your personal data for purposes other than contractual or statutory obligations at any time and free of charge.