1. Introduction
In the following, we inform you about the processing of personal data when using our website https://bluebridge.at and our profiles on social media.
Personal data is any data that can be related to a specific natural person, e.g., their name or IP address.
1.1. Contact details
Controller pursuant to Art. 4(7) EU General Data Protection Regulation (GDPR): DUFINANCE – FZCO IFZA Business Park, DDP Dubai United Arab Emirates Email: info@bluebridge.at
1.2. Scope of data processing, processing purposes, and legal bases
We detail the scope of data processing, processing purposes, and legal bases below. The following legal bases may apply:
Art. 6(1)(a) GDPR serves as the legal basis for processing operations for which we obtain consent.
Art. 6(1)(b) GDPR is the legal basis insofar as the processing of personal data is necessary for the performance of a contract. This also applies to processing necessary for pre-contractual measures.
Art. 6(1)(c) GDPR applies when we process personal data to fulfill a legal obligation.
Art. 6(1)(f) GDPR serves as the legal basis when we can invoke legitimate interests for processing personal data, e.g., for cookies required for the technical operation of our website.
1.3. Data processing outside the EEA
Insofar as we transfer data to service providers or other third parties outside the EEA, the security of data in transit is guaranteed by adequacy decisions of the EU Commission (Art. 45(3) GDPR), where available.
Where no adequacy decision exists, the legal basis for data transfer is generally Standard Contractual Clauses. These are a set of rules adopted by the EU Commission and part of the contract with the respective third party. Pursuant to Art. 46(2)(b) GDPR, they ensure the security of data transfer.
1.4. Storage duration
Unless expressly stated in this privacy policy, data stored by us will be deleted as soon as it is no longer required for its intended purpose and deletion is not contrary to any statutory retention obligations. Where data is not deleted because it is required for other legally permissible purposes, its processing is restricted.
1.5. Rights of data subjects
Data subjects have the following rights regarding their personal data: - Right of access - Right to rectification or erasure - Right to restriction of processing - Right to object to processing - Right to data portability - Right to withdraw consent at any time
Data subjects also have the right to lodge a complaint with a data protection supervisory authority about the processing of their personal data.
1.6. Obligation to provide data
Clients, prospective clients, or third parties only need to provide us with personal data that is required for establishing, conducting, and terminating the business relationship, or that we are legally obligated to collect.
1.7. No automated decision-making
DUFINANCE – FZCO does not use automated decision-making within the meaning of Art. 22 GDPR that produces legal effects or similarly significantly affects data subjects.
1.8. Contact
When contacting us, e.g., by email or telephone, the data communicated to us (e.g., names and email addresses) is stored by us to answer inquiries. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in answering inquiries directed to us.
2. Newsletter
We reserve the right to inform clients who have already used our services from time to time by email about our offers, unless they have objected. The legal basis is Art. 6(1)(f) GDPR. Clients can object to the use of their email address for advertising purposes at any time.
3. Data processing on our website
3.1. Informational use of the website
When using the website for informational purposes, we collect the personal data that the browser transmits to our server to ensure the stability and security of our website. The legal basis is Art. 6(1)(f) GDPR.
This data includes: - IP address - Date and time of the request - Time zone difference to Greenwich Mean Time (GMT) - Content of the request (specific page) - Access status/HTTP status code - Amount of data transferred - Website from which the request originates - Browser - Operating system and its interface - Language and version of the browser software
This data is stored in log files and deleted when storage is no longer required, at the latest after 14 days.
3.2. Web hosting and website provision
Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (Privacy Policy: https://vercel.com/legal/privacy-policy). The provider processes personal data transmitted via the website. The legal basis is Art. 6(1)(f) GDPR.
3.3. Contact form
When contacting us via the contact form on our website, we store the data requested there and the content of the message. The legal basis is Art. 6(1)(f) GDPR.
3.4. Third-party tools
3.4.1. Microsoft Advertising (Bing Ads)
We use the tool Microsoft Advertising (Bing Ads) for analysis and advertising. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. The legal basis is Art. 6(1)(a) GDPR. Processing is based on consent. More information: https://privacy.microsoft.com/en-us/privacystatement
3.4.2. Facebook Custom Audiences
We use the tool Facebook Custom Audiences for advertising. The provider is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The legal basis is Art. 6(1)(a) GDPR. More information: https://www.facebook.com/policy.php
3.4.3. Google Webfonts
We use the tool Google Webfonts for fonts on the website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is Art. 6(1)(a) GDPR. More information: https://policies.google.com/privacy?hl=en
3.4.4. Google Ads
We use the tool Google Ads for advertising. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is Art. 6(1)(a) GDPR. More information: https://policies.google.com/privacy?hl=en
3.4.5. Google Analytics
We use the tool Google Analytics for analysis. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is Art. 6(1)(a) GDPR. More information: https://policies.google.com/privacy?hl=en
3.4.6. Google Marketing Platform
We use the tool Google Marketing Platform for analysis and advertising. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is Art. 6(1)(a) GDPR. More information: https://policies.google.com/privacy?hl=en
3.4.7. Google Tag Manager
We use the tool Google Tag Manager for analysis and advertising. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is Art. 6(1)(a) GDPR. More information: https://policies.google.com/privacy?hl=en
3.4.8. Facebook Pixel
We use the tool Facebook Pixel for analysis. The provider is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The legal basis is Art. 6(1)(a) GDPR. More information: https://www.facebook.com/policy.php
4. Data processing on social media platforms
We maintain a presence on social media networks to present our company and services. The operators of these networks regularly process user data for advertising purposes.
5. Changes to this privacy policy
We reserve the right to amend this privacy policy with effect for the future. A current version is always available here.