Data Privacy

Website Data Privacy Notification

This website is operated by NTS Netzwerk Telekom Service AG Parkring 4, 8074 Raaba-Grambach Austria („we“ respectively „us“). This notification describes how we, as the responsible party in terms of data protection law, process your data in context of this website.

A general data protection declaration of our board can be found on PRIVACY STATEMENT.

What Kind of Personal Data Will Be Processed by Us?

In the course of your visit to this website we gather the following information: the date and the time when you visit a page on our website, your IP address, the name and the version of your web browser, the operating system that you use, the amount in byte of data sent, the website (URL) that you visited prior to visiting this website, certain cookies (see the next topic below) and the information that you provide yourself by means of one of the following activities:

Registration as an interested party (in order to receive the newsletter or in order to register for an event), see also INTERESTED PARTIES
Applicant details in case of a job application, see also data privacy notification applicants APPLICANTS

Cookies

On this website we use so-called cookies. A cookie is a small file that may be stored on your computer when you are visiting a website. In principle, cookies are used in order to offer users additional functions on a website. As an example, they can be used in order to help you to navigate on a website, to make it possible for you to continue browsing a website exactly where you left it and/or to save your preferences and settings when you visit the website again. Cookies are not able to access, read or modify other files on your computer.

Most cookies on this website are so-called session cookies. These will be deleted automatically once you have left our website. Persistent cookies however remain on your computer until you manually delete them in your browser. We use persistent cookies in order to acknowledge when you visit our website the next time.

In case you want to monitor cookies on your computer, you can choose your browser setting is such a way that you receive a notification as soon as a website wants to store cookies. You are also able to block or delete cookies in case they are already stored on your computer. If you want to know more about on how to implement these steps, then please use the “help” function in your browser.

Open Cookie Settings

Please note that the blocking or the deletion of cookies may affect your online experience or it may prevent you from fully using this website.

Purpose of Data Processing

We will use your personal data for the purposes listed below:

In order to make this website available to you and to further improve and develop this website
In order to be able to create usage statistics
In order to identify, prevent and analyze attacks onto our website

Legal Foundation for the Processing

The legal foundation for the processing of your personal data is our overriding legitimate interest (according to Article 6, Paragraph 1, lit f of the general data protection regulation – GDPR of the EU), which is based on the fact in reaching the above-mentioned purposes.

Transmission of Your Personal Data

Our partners (provider of subcontracts) will transmit personal data that is collected for the above-mentioned purposes, to us:

Conversory GmbH, Kaiserfeldgasse 19, 8010 Graz, Austria; supports us in the design and in the development of the website
EDIS GmbH, Hauptplatz 3, 8010 Graz, Austria; operates our website in their data center

Duration of Storage

As a general rule, we store your data for a period of 30 days. A storage for a longer period occurs only in case it is necessary for the purpose of investigation of confirmed attacks onto our website.

In case of a registration to our newsletter or in case of applicant information, please refer to the more detailed regulations by following the above-mentioned links.

Your Rights in Connection to Personal Data

Amongst other things, you are entitled (under precondition of the applicable law), (i) to check if and which personal data we have stored about you and to receive copies of such data, (ii) to demand the correction, amendment and the deletion of those parts of your personal data that has been processed incorrectly or that is not compliant with the legal provisions, (iii) to demand from us to restrict the processing of your personal data and (iv) to object under certain circumstances the processing of your personal data or to revoke the already given consent to the processing of your personal data, (v) to demand data portability, (vi) to know the identity of third parties to whom your personal data was submitted and (vii) to lodge a complaint with the competent authorities.

Data Privacy Notification Regarding Google Analytics

This website uses the service “Google Analytics”, which is provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) for analysis of website usage by users. Google Analytics uses so-called “cookies”, text data that are stored on the user’s device. The information obtained by these cookies is usually transferred and stored on one of Google’s servers in the USA.

IP anonymization is activated on this website. Within the member states of the European Union and the European Economic Area, the user’s IP address will be truncated in order to eliminate the personal reference to your IP address. As part of the agreement on commissioned data processing, which the website operators have concluded with Google Inc., Google Inc. uses the collected information to evaluate the use of the website as well as website activity and provides services associated with the Internet usage. You have the option of preventing cookies from being stored on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all functions of our website without restrictions if your browser does not allow cookies.

Furthermore, with the help of a browser plug-in, you will be able to prevent that data gathered by cookies (including your IP address) is sent to Google Inc. and thus can be utilized by Goole Inc.. Prevent the storage of cookies with the appropriate plug-in. Here you can find further information about the data utilization by Google Inc..

Usage of Social Media Plugins

This website uses Facebook social plugins, which are run by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). These embedded elements are noticeable by the Facebook logo respectively by the terms ”Like“or “Share” in the Facebook colors (blue and white). Here you can find all information about Facebook plugins.

The plugin creates a direct connection between your browser and the Facebook servers. The website owner has no influence whatsoever on the nature and extent of the data, which the plugin transmits to the servers of Facebook Inc.. Obtain further information about data transmission to Facebook. The plugin informs Facebook Inc. that the user went onto this website. There might be the possibility that your IP address will be stored. In case you are logged into your Facebook account when visiting this website, the mentioned information will be linked with your account. In case you are using the functions of the plugin, when you for instance share or “like” a post, the corresponding information will be transmitted to Facebook Inc. as well. If you want to prevent that Facebook Inc. is linking the data to your Facebook account, then please log out of Facebook prior to visiting this website.

Furthermore, this website uses the Twitter button, which is operated by Twitter Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107, USA). In case you are visiting a site that contains such a button, a direct connection between your browser and the Twitter servers is established. The website owner has no influence whatsoever over the nature and extent of the data, which the plugin transmits to the servers of Twitter Inc.. According to Twitter Inc., solely IP addresses will be captured and stored. Learn more about the handling of personal data by Twitter Inc..

Our Contact Information and Your Right to Appeal

Don’t hesitate to contact us in case of questions about data protection and data safety or if you are of the opinion that the mentioned procedures are unlawful. You can each our Data Privacy Coordination Team on dataprivacy@nts.eu

Under the circumstance that the clarification is not leading to a result that is satisfactory to you, you have the possibility to contact the regulatory authority for data protection.

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
Austria

Last updated in October 2018.

USAGE OF PERSONAL DATA

NTS Netzwerk Telekom Service AG processes personal data in order to support employee and customer relationships as well as for its product development. At any time, NTS respects the right of each individual to protect personal data, which includes groups of data subjects like employees, interested parties, applicants, suppliers, partners as well as customers.

This privacy statement is the expression that NTS strives to be open and transparent with each data processing step and that NTS adheres to the laws of data protection.

NTS complies with all legal provisions when dealing with personal data. Additionally, the following principles have been established in the company-wide data protection policy and these are consequently applicable for each individual employee:

• Personal data is only used for legally authorized purposes or with explicit consent of the person concerned.
• Personal data is only used for the specific purpose of the business for which it was gathered.
• Whenever possible, personal data will be pseudonymized. If a personal reference is not required any longer, data will be anonymized.
• Personal data will be protected against access by unauthorized or external persons by using the latest technology.
• Data is kept up-to-date at any time to prevent faulty information.
• Personal data will be used sparsely: as much as necessary, as little as possible.
• Personal data will not be kept beyond the centrally registered storage period. The storage period will be kept as short as possible.

TECHNICAL AND ORGANIZATIONAL MEASURES

As an expert for IT-infrastructure, NTS has implemented comprehensive technical and organizational measures to protect employee and customer data. To ensure confidentiality, integrity and availability of Personal Data NTS has implemented periodical trainings of our staff and has successfully undergone an external certification according to ISO 27001.

CONFIDENTIALITY

Physical Access Control

Unauthorized access to systems, which process personal data, is not allowed. The relevant systems are protected by electronic key cards, keys and alarm systems, as well as super-vised by CCTV systems.

Logical Access Control

Unauthorized use of systems is not possible, because systems are protected by passwords. A clear password policy exists, which enforces the use complex passwords according to industry wide standards. The involved systems use password protected login-locks. Re-mote access to the NTS network is protected by two-factor authentication or similar technology.

According to valid security policies and procedures, supervised by ISO 27001 certification, it is not allowed to store customer data on client laptops permanently. Customer data is only stored on systems dedicated for this use. As an additional measure (defense in depth) all client laptops must use disk encryption.

Digital Access Control

Unauthorized reading, copying, change or destruction of data is not allowed on relevant systems. Specific access rights designed for a specific use of data must exist, prior to granting access. All access is logged.

Separation of Data Control

Data collected for a certain purpose are not merged or linked.

Transport

Unauthorized reading, copying or destruction of data is prevented during electronic transport of data. NTS provides platforms and systems which provide encryption on transport via public networks (e.g. secure transport to NTS file share platform). In addition, admin access to customer systems is encrypted with VPN (virtual private network) technology upon customer’s request.

INTEGRITY

In case of electronic transmission of sensitive data encryption technologies (see chapter Transport above) can be used on customer’s request. This is an effective countermeasure against unwanted alteration of data in transport.

Input Control
Access to relevant systems is controlled and change of data is logged.

AVAILABILITY AND RESILIENCE

NTS has ISO27.001 certified Business Continuity planning cycles in place, which are designed to improve data security on a regular basis. NTS uses anti-malware protection to minimize the risk of data loss.

PROCESS FOR REGULARY TESTING, ASSESSING AND EVALUATING

NTS’s ISO 27.001 certified Information System Management System (ISMS) ensures a valid Information Systems Security Policy. The whole ISMS is regularly reviewed and evaluated.

In addition, a Data Privacy Management System is established, which is regularly reviewed and evaluated.

Through these systems clear security roles and responsibilities are guaranteed. NTS regularly and voluntarily undergoes internal and external audits to recognize possible vulnerabilities in processes or systems. This enables NTS to be able to react promptly to such findings.

Incident handling processes ensure that threats are found fast and efficiently and are contained and eliminated as soon as possible.

PRIVACY STATEMENT

We not only regard data protection and data safety as a legal requirement, but as a special assignment by our customers, who place high levels of trust in us. We hope that by providing this information, we are able to strengthen your trust in our company.

Do not hesitate to contact us if you have questions regarding data protection and data safety. You can reach our data privacy coordination team at dataprivacy@nts.eu.

Alexander Albler
CEO, NTS Netzwerk Telekom Service AG

DATA PRIVACY STATEMENT FOR INTERESTED PARTIES

We are pleased that you are interested in our business. We have got in touch with you via one of our employees or you registered for an NTS event or you are receiving our customer newsletter. We would like to share with you the following information concerning the processing of personal data.

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

The responsible Data Controller is dependent on the location of the Data Subject:

Austria:
NTS Netzwerk Telekom Service AG
Parkring 4
8074 Raaba-Grambach
Austria

Germany:
NTS DEUTSCHLAND GMBH
Goerdelerring 9,
04109 Leipzig
Germany

Italy:
NTS ITALY GMBH/SRL
Schlachthofstraße/Via Macello 30,
39100 Bozen/Bolzano
Italy

You can find additional information about our business, details about the authorized company representatives and additional contact possibilities at https://www.nts.eu/en/imprint

WHAT KIND OF PERSONAL DATA WILL BE PROCESSED BY US? AND FOR WHAT PURPOSE?

In order to conduct our events in an orderly manner and to be able to stay in touch with you too, we process the data that you have given to us in the context of an event registration or when you handed over your business card (usually your name, the name of the company you work for, your role and your department in the company, business e-mail address and business telephone numbers, interest in our events and in the related product categories, interest in technology and general interests). We will also use this data in order to be able to enter a business relationship with you in the future.

During events, it may happen that picture and video recordings are made. You grant your free consent to the production of photographs and videos immediately before, during and after the event for subsequent usage by NTS for promotional purposes.

In case you registered to receive our newsletter, we solely process for this purpose your name, your e-mail address and the company you work for.

WHAT LEGAL FOUNDATION IS THIS BASED UPON?

The legal foundation for the processing of personal data is Article 6, Paragraph 1, lit f of the General Data Protection Regulation (GDPR). This Article gives us the right to process the data for the purpose of a legitimate interest pursued by us. Relationship Management is in our legitimate interest as a business. It enables us to stay in close relationship, conducting events and to be able to stay in touch in future. For the same reason, the processing of photographs and videos of NTS events takes place out of our overriding legitimate interest in a functional documentation and for the sake of professional promotional activities.

In case you have also registered for our newsletter, the processing of data follows Article 6, Paragraph 1, lit a of the GDPR. This is your prior agreement that we may process your data.

FOR HOW LONG WILL THE DATA BE STORED?

In your case as an interested party, we will store your data for a period of three years. Upon expiry of the 3-year period your data will be reviewed by the responsible employee (in most cases this will be the key Account Manager) and then released for deletion. However, should you still be in touch with us frequently (registration for follow-up events, you already became a customer of ours, telephone or e-mail contact with NTS employees, …), then your data will be stored for an additional period of three years.

Upon your cancellation of the newsletter registration, the registration data will be deleted.

WHO WILL RECEIVE YOUR DATA?

Internally only the persons that require your data for the appropriate fulfillment of the above-mentioned purpose will have access to it. As a general principle, we will never pass on your data to third parties with the exemption of the service provider that handles the distribution of the newsletter on our behalf, respectively our partner that maintains our web presence and that supports the webpage design. Both parties are contractually bound to process your data solely for the purpose as prescribed by us and are not allowed to further disclose this data to anyone.

WHERE IS THE DATA PROCESSED?

Your data will be processed within as well as outside of Europe. However, in third countries the processing of data takes place solely on the basis of “Model Contract Clauses” (decision by the European Commission 2010/87/EU).

YOUR RIGHTS AS DATA SUBJECT

You are entitled to receive information about your personal data that has been processed by us. This right is fulfilled by this document.

You also have the right to access your personal data that is processed by us. We ask for your understanding that in case of an inquiry that has not been submitted in writing, we have to ask for proof that you are the person that you say you are.

Additionally, you are entitled to rectification, erasure, restriction, data portability of processed data, under the conditions of Articles 15 – 19 in the legal framework.

In case you want to exercise your rights that are mentioned herein, we ask you to contact us at the following e-mail address: dataprivacy@nts.eu

SUPERVISORY AUTHORITY

In case that you are of the opinion that the processing mentioned herein is conducted in an unlawful manner, we ask you to contact us at dataprivacy@nts.eu.

Under the circumstance that the clarification is not leading to a result that is satisfactory to you, or if you do not wish to contact us at all, you have the possibility to contact the regulatory authority for data protection.

Austria:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
Austria

Germany:
Datenschutzbeauftragte Sachsen
Devrientstraße 1
01067 Dresden
Germany

Italy:
Garante per la protezione die dati personali
Piazza Venezia 11
00187 Roma
Italy

DATA PRIVACY STATEMENT FOR APPLICANTS

We are pleased that you are interested in us and that you are applying or already have applied for a position in our company. We would like to share with you the following information concerning the processing of personal data with regards to your application.

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

The responsible Data Controller is dependent on the location of the Data Subject:

Austria:
NTS Netzwerk Telekom Service AG
Parkring 4
8074 Raaba-Grambach
Austria

Germany:
NTS DEUTSCHLAND GMBH
Goerdelerring 9,
04109 Leipzig
Germany

Italy:
NTS ITALY GMBH/SRL
Schlachthofstraße/Via Macello 30,
39100 Bozen/Bolzano
Italy

You can find additional information about our business, details about the authorized company representatives and additional contact possibilities at Imprint.

WHAT KIND OF PERSONAL DATA WILL BE PROCESSED BY US? AND FOR WHAT PURPOSE?

We process data that you have sent to us in connection with your application in order to check your suitability for the position (or where applicable for a different job opening in our company) and in order to conduct the application procedure.

WHAT LEGAL FOUNDATION IS THIS BASED UPON?

The legal foundation for the processing of personal data in this application procedure is Article 6, Paragraph 1, lit b of the General Data Protection Regulation (GDPR). According to this, processing is necessary for the performance of a contract or in order to take steps at the request of you prior to entering into a contract, such as the conduction of an application procedure.

Should data be required, after the completion of an application procedure, possibly for any legal proceedings, then the processing of data may happen based on the conditions following Article 6 of the GDPR, in particular the safeguarding of legitimate interests, which follows Article 6, Paragraph 1, lit f of the GDPR. Our interest will then be in the assertion or in the defense of claims.

FOR HOW LONG WILL THE DATA BE STORED?

In the event of an unsuccessful application, the data of applicants will be deleted after 7 months.

Should you have agreed that we continue to store your personal data, we will transfer the data into our pool of applicants. There, your data will be deleted after a period of additional two years.

In case your application is successful during the course of the application process, your data will be transferred from the applicant data system into our human resources management system.

WHO WILL RECEIVE YOUR DATA?

In the event that you submitted your application data via our e-recruiting system, then you are already familiar with the data privacy statement on this platform (https://nts-netzwerk-telekom-service-ag.jobbase.io/policy). The e-recruiting system is operated by our partner New Work SE. Should your application data have reached us via a different route, then your data will be entered into the e-recruiting system.

Your application will be screened by the human resources department and suitable applications will be forwarded to the department head that is responsible for the respective job vacancy. Afterwards, further proceedings will be aligned internally. In principle, only those persons have access to your data that require it for the proper handling of our application procedure.

WHERE IS THE DATA PROCESSED?

Your data will be stored solely in data centers in Europe and processed at the European location that is relevant for the position.

YOUR RIGHTS AS DATA SUBJECT

You are entitled to receive information about your personal data that has been processed by us. This right is fulfilled by this document.

You also have the right to access your personal data that is processed by us. We ask for your understanding that in case of an inquiry that has not been submitted in writing, we have to ask for proof that you are the person that you say you are.

Additionally, you are entitled to rectification, erasure, restriction, data portability of processed data, under the conditions of Articles 15 – 19 in the legal framework.

In case you want to exercise your rights that are mentioned herein, we ask you to contact us at the following e-mail address: dataprivacy@nts.eu

SUPERVISORY AUTHORITY

In case that you are of the opinion that the processing mentioned herein is conducted in an unlawful manner, we ask you to contact us at dataprivacy@nts.eu

Under the circumstance that the clarification is not leading to a result that is satisfactory to you, or if you do not wish to contact us at all, you have the possibility to contact the regulatory authority for data protection.

Austria:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
Austria

Germany:
Datenschutzbeauftragte Sachsen
Devrientstraße 1
01067 Dresden
Germany

Italy:
Garante per la protezione die dati personali
Piazza Venezia 11
00187 Roma
Italy

DATA PRIVACY STATEMENT FOR CUSTOMER

We are pleased that you have decided to be associated with us as a client. We got in touch with you via one of our employees and we already have (or will soon have) a contractual agreement with your company. For that reason, we would like to share with you the following information concerning the processing of personal data.

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

The responsible Data Controller is dependent on the location of the Data Subject:

Austria:
NTS Netzwerk Telekom Service AG
Parkring 4
8074 Raaba-Grambach
Austria

Germany:
NTS DEUTSCHLAND GMBH
Goerdelerring 9,
04109 Leipzig
Germany

Italy:
NTS ITALY GMBH/SRL
Schlachthofstraße/Via Macello 30,
39100 Bozen/Bolzano
Italy

You can find additional information about our business, details about the authorized company representatives and additional contact possibilities at https://www.nts.eu/en/imprint

WHAT KIND OF PERSONAL DATA WILL BE PROCESSED BY US? AND FOR WHAT PURPOSE?

We process order information that may also contain personal data. Order information includes offers, orders, order confirmations, purchase orders, delivery notes, invoices, credit notes, service contracts and service contract renewals, service tickets and other order specific project data, including the connection and protocol records of NTS Monitoring System. For all this, we of course require information that is stored on the client database such as your name, the name of the company you work for, your role and your department in the company, business e-mail address and business telephone numbers.

In order to conduct our events in an orderly manner and to be able to provide you with news and invitations to events that are tailor-made to your interests, we also process your interest in our events and the related product categories as well as interest in technology and in general matters in our CRM. We do this to be able to enhance our ability to stay in touch with you.

During events, it may happen that picture and video recordings are made. There, you grant your free consent to the production of photographs and videos immediately before, during and after the event for subsequent usage by NTS for promotional purposes.

In case you consented to receive our newsletter, we solely process for this purpose your name, your e-mail address and the company you work for.

WHAT LEGAL FOUNDATION IS THIS BASED UPON?

The above-mentioned order information and the client database are processed according to the General Data Protection Regulation (GDPR) Article 6, Paragraph 1, lit b. This Article gives us the right to process your personal data in order to be able to fulfil a contract or to be able to put pre-contractual measures in place.

The legal foundation for the processing of personal data in our CRM is Article 6, Paragraph 1, lit f of the GDPR. This Article gives us the right to process the data for the purpose of a legitimate interest pursued by us. Customer Relationship Management is in our legitimate interest as a business. It enables us to stay relevant for our Customers by focusing information on your interests, conducting events and to be able to stay in touch in the future, which includes direct marketing (see Recital 47 GDPR). For the same reason, the processing of photographs and videos of NTS events takes place out of our overriding legitimate interest in a functional documentation and for the sake of professional promotional activities.

In case you have also registered for our newsletter, the processing of data is based on Article 6, Paragraph 1, lit a of the GDPR. This is your prior agreement that we may process your data.

FOR HOW LONG WILL THE DATA BE STORED?

Personal data of NTS customers will be stored as long as the contractual relationship exists respectively for the duration as prescribed by the legal provisions (such as § 132 BAO – article 132 of the Austrian Federal Fiscal Code). After this period, you will be classified as an interested party.

In the case that you are an interested party, we will store your data for a period of three years. Upon expiry of the 3-year period your data will be reviewed by the responsible employee (in most cases this will be the Key Account Manager) and then released for deletion. However, should you still be in touch with us frequently (registration for follow-up events, you again become a customer of ours, telephone or e-mail contact with NTS employees, …), then your data will still be stored for an additional period of three years.

Upon your cancellation of the newsletter registration, the registration data will be deleted.

WHO WILL RECEIVE YOUR DATA?

Internally only the persons that require your data for the appropriate fulfillment of the above-mentioned purpose will have access to it. As a general principle, we will never pass on your data to third parties unless it is required for the purpose of the completion of an order.

Order and project data will only be passed on to those partners (manufacturers of hardware and software) that are required to work on your project or your support request. These partners can be found within the EU as well as outside of the EU (so-called third countries). The transmission of data into third countries follows the basis of “Model Contract Clauses” (Decision by the European Commission 2010/87/EU).

Such order data comprises of general order conditions, project numbers, company and location information (non-person related), the contact person for deliveries (name and business telephone number), the contact person for license sales (name, business e-mail address and telephone number).

Additionally, the following project and support data will be passed on only in relation to a certain project or in the course of a support order to a certain partner/manufacturer: name, company address, company registration number, UID number, business e-mail address, business phone number of the contact person on your side.

In case of event registrations via the web or when sending newsletters, we are supported by partners that maintain our web presence and support the design. These partners are contractually obliged to process your data solely for the purpose described by us and are for their part not allowed to pass on the data.

WHERE IS THE DATA PROCESSED?

Your data will be processed within as well as outside of Europe. However, in third countries the processing of data takes place solely on the basis of “Model Contract Clauses” (decision by the European Commission 2010/87/EU).

YOUR RIGHTS AS DATA SUBJECT

You are entitled to receive information about your personal data that has been processed by us. This right is fulfilled by this document.

You also have the right to access your personal data that is processed by us. We ask for your understanding that in case of an inquiry that has not been submitted in writing, we have to ask for proof that you are the person that you say you are.

Additionally, you are entitled to rectification, erasure, restriction, or data portability of processed data, under the conditions of Articles 15 – 19 the legal framework.

In case you want to exercise your rights that are mentioned herein, we ask you to contact us via the following e-mail address: dataprivacy@nts.eu

SUPERVISORY AUTHORITY

In case that you are of the opinion that the processing mentioned herein is conducted in an unlawful manner, we ask you to contact us at dataprivacy@nts.eu.

Under the circumstance that the clarification is not leading to a result that is satisfactory to you, or if you do not wish to contact us at all, you have the possibility to contact the regulatory authority for data protection.

Austria:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
Austria

Germany:
Datenschutzbeauftragte Sachsen
Devrientstraße 1
01067 Dresden
Germany

Italy:
Garante per la protezione die dati personali
Piazza Venezia 11
00187 Roma
Italy

DATA PRIVACY STATEMENT FOR NTS SUPPLIERS

We are pleased that you are our supplier. This group comprises of all employees of suppliers that sell products and services directly to NTS. Some of these employees also have access rights to NTS systems or Remote-Access-Rights (VPN).

WHO IS RESPONSIBLE FOR PROCESSING OF YOUR DATA?

The responsible Data Controller is dependent on the location of the Data Subject:

Austria:
NTS Netzwerk Telekom Service AG
Parkring 4
8074 Raaba-Grambach
Austria

Germany:
NTS DEUTSCHLAND GMBH
Goerdelerring 9,
04109 Leipzig
Germany

Italy:
NTS ITALY GMBH/SRL
Schlachthofstraße/Via Macello 30,
39100 Bozen/Bolzano
Italy

You can find additional information about our business, details about the authorized company representatives and additional contact possibilities in our imprint on our web page at Imprint.

WHAT KIND OF PERSONAL DATA WILL BE PROCESSED BY US? AND FOR WHAT PURPOSE?

We process contract information that may also contain personal data. Contract information includes offers, orders, order confirmations, purchase orders, delivery notes, invoices, credit notes, service contracts and service contract renewals, service tickets and other order specific project data. For all this, we of course require information that is stored on the supplier database such as your name, the name of the company you work for, your role and your department in the company, business e-mail address and business telephone numbers.

Furthermore, it may become necessary that we would have stored login data from you so that you may have the possibility to log into our network or server infrastructure. In the event that you are logged into our network, we save protocol and monitoring data for the purpose of a properly conducted operation of the IT systems and to ensure the traceability of the usage of IT resources. This data consist of log files of servers, databases and applications, access control logs, protocols of accesses onto blocked or unsecure web pages, login name and the user rights onto the relevant platforms that go with it.

We also process your interest in our events and the related product categories as well as interest in technology and in general matters in our CRM for the purpose of business expansion and event organization. We also do this to be able to enhance our ability to stay in touch with you.

WHAT LEGAL FOUNDATION IS THIS BASED UPON?

The above-mentioned contract information and the supplier database are processed according to the general data protection regulation (GDPR) Article 6, Paragraph 1, lit b. This Article gives us the right to process your personal data in order to fulfil a contract or to be able to put pre-contractual measures in place.

The protocol and monitoring data will be processed according to Article 6, Paragraph 1, lit c GDPR. This means that we comply with a legal obligation and that we process our data securely in line with Article 32 GDPR.

The legal foundation for the processing of personal data is Article 6, Paragraph 1, lit f of the General Data Protection Regulation (GDPR). This Article gives us the right to process the data for the purpose of a legitimate interest pursued by us. Relationship Management is in our legitimate interest as a business. It enables us to stay in close relationship, giving you all relevant Information according your interests, conducting events and to be able to stay in touch in future.

FOR HOW LONG WILL THE DATA BE STORED?

Personal data of NTS partners will be stored as long as the contractual relationship exists respectively for the duration as prescribed by the legal provisions (such as § 132 BAO – Article 132 of the Austrian Federal Fiscal Code). After this period, you will be classified as an interested party.

In the case that you are an interested party, we will store your data for a period of three years. Upon expiry of the 3-year period your data will be reviewed by the responsible employee (in most cases this will be the Partner Manager) and then released for deletion. However, should you still be in touch with us frequently (registration for events, you again become a supplier of ours, telephone or e-mail contact with NTS employees, …), then your data will still be stored for an additional period of three years.

We will delete the protocol and monitoring data after three months. Audit logs that are relevant for our customers will be deleted after three years in order to defend labor-law related proceedings or to adhere to periods of limitation.

WHO WILL RECEIVE YOUR DATA?

Internally only the persons that require your data for the appropriate fulfillment of the above-mentioned purpose will have access to it. As a general principle, we will never pass on your data to third parties unless there is a legal obligation to do so.

WHERE IS THE DATA PROCESSED?

Your data will be processed within as well as outside of Europe. However, in third countries the processing of data takes place solely on the basis of “Model Contract Clauses” (decision by the European Commission 2010/87/EU).

SUPERVISORY AUTHORITY

In case that you are of the opinion that the processing mentioned herein is conducted in an unlawful manner, we ask you to contact us at dataprivacy@nts.eu

Under the circumstance that the clarification is not leading to a result that is satisfactory to you, or if you do not wish to contact us at all, you have the possibility to contact the regulatory authority for data protection.

Austria:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
Austria

Germany:
Datenschutzbeauftragte Sachsen
Devrientstraße 1
01067 Dresden
Germany

Italy:
Garante per la protezione die dati personali
Piazza Venezia 11
00187 Roma
Italy

YOUR RIGHTS AS DATA SUBJECT

You are entitled to receive information about your personal data that has been processed by us. This right is fulfilled by this document.

You also have the right to access your personal data that is processed by us. We ask for your understanding that in case of an inquiry that has not been submitted in writing, we have to ask for proof that you are the person that you say you are.

Additionally, you are entitled to rectification, erasure, restriction, data portability of processed data, under the conditions of Articles 15 – 19 in the legal framework.

In case you want to exercise your rights that are mentioned herein, we ask you to contact us at the following e-mail address: dataprivacy@nts.eu

DATA PRIVACY STATEMENT FOR PARTNERS

We are pleased that you have decided to be associated with us as a partner. By partner, we understand all employees of partners, whose products, Cloud services and services sold to customers by NTS. For the most part these are products that are installed, configured, but also trouble-shooted at the customer by NTS employees. For that reason, we would like to share with you the following information concerning the processing of personal data.

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

The responsible Data Controller is dependent on the location of the Data Subject:

Austria:
NTS Netzwerk Telekom Service AG
Parkring 4
8074 Raaba-Grambach
Austria

Germany:
NTS DEUTSCHLAND GMBH
Goerdelerring 9,
04109 Leipzig
Germany

Italy:
NTS ITALY GMBH/SRL
Schlachthofstraße/Via Macello 30,
39100 Bozen/Bolzano
Italy

You can find additional information about our business, details about the authorized company representatives and additional contact possibilities at Imprint.

WHAT KIND OF PERSONAL DATA WILL BE PROCESSED BY US? AND FOR WHAT PURPOSE?

We process contract information that may also contain personal data. Contract information includes offers, orders, order confirmations, purchase orders, delivery notes, invoices, credit notes, service contracts and service contract renewals, service tickets and other project data. For all this, we of course require information that is stored on the partner database such as your name, the name of the company you work for, your role and your department in the company, business e-mail address and business telephone numbers.

In order to conduct our events in an orderly manner and to be able to provide you with news and invitations to events that are tailor-made to your interests, we also process your interest in our events and the related product categories as well as interest in technology and in general matters in our CRM. We do this to be able to enhance our ability to stay in touch with you.

During events, it may happen that picture and video recordings are made. There, you grant your free consent to the production of photographs and videos immediately before, during and after the event for subsequent usage by NTS for promotional purposes.

In case you consented to receive our newsletter, we solely process for this purpose your name, your e-mail address and the company you work for.

WHAT LEGAL FOUNDATION IS THIS BASED UPON?

The above-mentioned contract information and the partner database are processed according to the General Data Protection Regulation (GDPR) Article 6, Paragraph 1, lit b. This Article gives us the right to process your personal data in order to be able to fulfil a contract or to be able to put pre-contractual measures in place.

The legal foundation for the processing of personal data in the CRM is Article 6, Paragraph 1, lit f of the GDPR. This Article gives us the right to process the data for the purpose of a legitimate interest pursued by us. Relationship Management is in our legitimate interest as a business. It enables us to stay in close relationship, giving you all relevant information according your position and responsibilities, conducting the right events and to be able to stay in touch in future. For the same reason, the processing of photographs and videos of NTS events takes place out of our overriding legitimate interest in a functional documentation and for the sake of professional promotional activities.

In case you have also registered for our newsletter, the processing of data will follow Article 6, Paragraph 1, lit a of the GDPR. This is your prior agreement that we may process your data.

FOR HOW LONG WILL THE DATA BE STORED?

Personal data of NTS partners will be stored as long as the contractual relationship exists respectively for the duration as prescribed by the legal provisions (such as § 132 BAO – Article 132 of the Austrian Federal Fiscal Code). After this period, you will be classified as an interested party.

In the case that you are an interested party, we will store your data for a period of three years. Upon expiry of the 3-year period your data will be reviewed by the responsible employee (in most cases this will be the Partner Manager) and then released for deletion. However, should you still be in touch with us frequently (registration for follow-up events, telephone or e-mail contact with NTS employees, …), then your data will still be stored for an additional period of three years.

Upon your cancellation of the newsletter registration, the registration data will be deleted.

WHO WILL RECEIVE YOUR DATA?

Internally only the persons that require your data for the appropriate fulfillment of the above-mentioned purpose will have access to it. As a general principle, we will never pass on your data to third parties unless it is required for the purpose of the execution of a specific contract.

Contract data that will be passed on to customers are offers, order confirmations, purchase orders, delivery notes, invoices, credit notes, service contracts, service contract renewals, service tickets and partner contacts that are required for the execution of a contract (for example the transfer of the support engineer during support cases).

Additionally, the following data will be passed on only in relation to a certain project or in the course of a support order to a customer: name, company address, company registration number, UID number, business e-mail address, business phone number.

The above-mentioned customer and project data will only be submitted to those customers that are required in order to execute a project or a support request of a customer. The customers are situated in the EU as well as in Switzerland.

In case of event registrations via the web or when sending newsletters, we are supported by service companies that maintain our web presence and support the design. These service companies are contractually obliged to process your data solely for the purpose described by us and are for their part not allowed to pass on the data.

WHERE IS THE DATA PROCESSED?

Your data will be processed within as well as outside of Europe. However, in third countries the processing of data takes place solely on the basis of “Model Contract Clauses” (decision by the European Commission 2010/87/EU).

YOUR RIGHTS AS DATA SUBJECT

You are entitled to receive information about your personal data that has been processed by us. This right is fulfilled by this document.

You also have the right to access your personal data that is processed by us. We ask for your understanding that in case of an inquiry that has not been submitted in writing, we have to ask for proof that you are the person that you say you are.

Additionally, you are entitled to rectification, erasure, restriction, data portability of processed data, under the conditions of Articles 15 – 19 in the legal framework.

In case you want to exercise your rights that are mentioned herein, we ask you to contact us at the following e-mail address: dataprivacy@nts.eu

SUPERVISORY AUTHORITY

In case that you are of the opinion that the processing mentioned herein is conducted in an unlawful manner, we ask you to contact us at dataprivacy@nts.eu

Under the circumstance that the clarification is not leading to a result that is satisfactory to you, you have the possibility to contact the regulatory authority for data protection.

Austria:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
Austria

Germany:
Datenschutzbeauftragte Sachsen
Devrientstraße 1
01067 Dresden
Germany

Italy:
Garante per la protezione die dati personali
Piazza Venezia 11
00187 Roma
Italy

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

The responsible Data Controller is dependent on the location of the video system:

Austria:
NTS Netzwerk Telekom Service AG
Parkring 4
8074 Raaba-Grambach
Austria

Germany:
NTS DEUTSCHLAND GMBH
Goerdelerring 9,
04109 Leipzig
Germany

Italy:
NTS ITALY GMBH/SRL
Schlachthofstraße/Via Macello 30,
39100 Bozen/Bolzano
Italy

You can find additional information about our business, details about the authorized company representatives and additional contact possibilities at Imprint.

WHAT PURPOSE AND WHICH LEGAL FOUNDATION IS THIS BASED UPON?

The video surveillance takes place to secure our house right, to prevent criminal offenses as well as to gather evidence in case of criminal activities. The legal basis for video surveillance is Art. 6 para. 1 lit. f) GDPR; our interests materialize in the aforementioned purposes.

FOR HOW LONG WILL THE DATA BE STORED?

We store the data for maximum 7 days. The data will be deleted automatically. In case of criminal offenses, we reserve the right to store the data for the duration of criminal proceedings.

WHO WILL RECEIVE YOUR DATA?

The video material will only be viewed by authorized NTS personal, if a criminal offense has been committed or if there is a suspicion of a criminal offense. Furthermore, the material is forwarded to authorities (police, court, administrative authorities) in case of need for evidence and also to insurance companies and lawyers for law enforcement.

WHERE IS THE DATA PROCESSED?

Your data will be processed solely within the European Union or, if transferred outside the EU (e.g. for technical support services) processing is based on approved “Model Contract Clauses” (Commission Decision 2010/87/EU).

YOUR RIGHTS AS DATA SUBJECT

You are entitled to receive information about your personal data that has been processed by us. This right is fulfilled by this document.

You also have the right to access your personal data that is processed by us. We ask for your understanding that in case of an inquiry that has not been submitted in writing, we have to ask for proof that you are the person that you say you are. Please keep in mind that access to personal data that may affect other person’s privacy rights, may be restricted. This is generally the case with video surveillance data.

Additionally, you are entitled to rectification, erasure, restriction, data portability of processed data, under the conditions of Articles 15 – 19 in the legal framework.
In case you want to exercise your rights that are mentioned herein, we ask you to contact us at the following e-mail address: dataprivacy@nts.eu

SUPERVISORY AUTHORITY

In case that you are of the opinion that the processing mentioned herein is conducted in an unlawful manner, we ask you to contact us at dataprivacy@nts.eu.

Under the circumstance that the clarification is not leading to a result that is satisfactory to you, or if you do not wish to contact us at all, you have the possibility to contact the regulatory authority for data protection.

Austria:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
Austria

Germany:
Datenschutzbeauftragte Sachsen
Devrientstraße 1
01067 Dresden
Germany

Italy:
Garante per la protezione die dati personali
Piazza Venezia 11
00187 Roma
Italy

WHO IS RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA?

The responsible Data Controller is dependent on the location of the data subject:

Austria:
NTS Netzwerk Telekom Service AG
Parkring 4
8074 Raaba-Grambach
Austria

Germany:
NTS DEUTSCHLAND GMBH
Goerdelerring 9,
04109 Leipzig
Germany

Italy:
NTS ITALY GMBH/SRL
Schlachthofstraße/Via Macello 30,
39100 Bozen/Bolzano
Italy

You can find additional information about our business, details about the authorized company representatives and additional contact possibilities at Imprint.

WHICH DATA AND FOR WHAT PURPOSE DO WE PROCESS YOUR DATA?

In order to properly enable the provision of the NTS guest WLAN, we process the date and time of access, source and destionation IP address, MAC address of the device and amount of data sent in bytes. The processing of this data is necessary in order to guarantee the establishment of a connection and to ensure IT security.

WHICH LEGAL FOUNDATION IS THIS BASED UPON?

The legal basis for collecting this data is Art. 6 para. 1 lit. b) and f) GDPR; our interests materialize in the aforementioned purposes.

FOR HOW LONG WILL THE DATA BE STORED?

This data is stored for 3 months in order to be able to follow up technical incidents.

WHO WILL RECEIVE YOUR DATA?

Internally, only people who need this for the proper fulfillment of the above-mentioned purpose have access to your data. We never pass your data on to any third parties. The exception is the service provider that operates the GAST WLAN, this is NTS AG, in 8074 Raaba-Grambach.

WHERE IS THE DATA PROCESSED?