{"id":2634,"date":"2024-05-20T09:52:01","date_gmt":"2024-05-20T07:52:01","guid":{"rendered":"https:\/\/www.kennys.at\/data-protection\/"},"modified":"2025-09-05T11:52:28","modified_gmt":"2025-09-05T09:52:28","slug":"data-protection","status":"publish","type":"page","link":"https:\/\/www.kennys.at\/en\/data-protection\/","title":{"rendered":"Data protection"},"content":{"rendered":"\t\t
We have prepared this privacy policy (version 01.07.2024-112823252) in order to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016\/679<\/a> and applicable national laws, which personal data (data for short) we as the controller – and the processors commissioned by us (e.g. providers) – process, will process in the future and what lawful options you have. The terms used are to be understood as gender-neutral. Data protection declarations usually sound very technical and use legal jargon. This privacy policy, on the other hand, is intended to describe the most important things to you as simply and transparently as possible. Where it is conducive to transparency, technical terms are explained in a reader-friendly<\/strong> way, links to further information are provided and graphics<\/strong> are used. We thus inform you in clear and simple language that we only process personal data as part of our business activities if there is a corresponding legal basis. This is certainly not possible by providing explanations that are as concise, unclear and legally technical as possible, as is often standard on the Internet when it comes to data protection. I hope you find the following explanations interesting and informative and perhaps there is one or two pieces of information that you did not yet know. This privacy policy applies to all personal data processed by us in the company and to all personal data processed by companies commissioned by us (processors). By personal data, we mean information within the meaning of Art. 4 No. 1 GDPR, such as a person’s name, email address and postal address. The processing of personal data ensures that we can offer and bill our services and products, whether online or offline. The scope of this privacy policy includes <\/p> In short,<\/strong> the privacy policy applies to all areas in which personal data is processed in the company in a structured manner via the channels mentioned. If we enter into legal relationships with you outside of these channels, we will inform you separately if necessary. <\/p> In the following privacy policy, we provide you with transparent information on the legal principles and regulations, i.e. the legal bases of the General Data Protection Regulation, which enable us to process personal data. We only process your data if at least one of the following conditions applies:<\/p> Other conditions such as recording in the public interest, the exercise of official authority and the protection of vital interests do not generally apply to us. If such a legal basis is relevant, it will be indicated at the appropriate point. <\/p> In addition to the EU regulation, national laws also apply:<\/p> If other regional or national laws apply, we will inform you of this in the following sections.<\/p> If you have any questions about data protection or the processing of personal data, you will find the contact details of the person or body responsible below: Authorized to represent: Kenan Koc<\/span><\/p> E-Mail: office@kennys.at<\/a><\/p> Phone: +43 699 19851005<\/a><\/p> Imprint: https:\/\/www.kennys.at\/impressum\/<\/a><\/p> It is a general criterion for us that we only store personal data for as long as is absolutely necessary for the provision of our services and products. This means that we delete personal data as soon as the reason for the data processing no longer exists. In some cases, we are legally obliged to store certain data even after the original purpose has ceased to exist, for example for accounting purposes. <\/p> If you wish your data to be deleted or revoke your consent to data processing, the data will be deleted as quickly as possible and insofar as there is no obligation to store it.<\/p> We will inform you below about the specific duration of the respective data processing if we have further information on this.<\/p> In accordance with Articles 13, 14 GDPR, we inform you of the following rights to which you are entitled in order to ensure fair and transparent processing of data:<\/p> In short:<\/strong> You have rights – do not hesitate to contact the responsible office listed above!<\/p> If you believe that the processing of your data violates data protection law or your data protection claims have been violated in any other way, you can complain to the supervisory authority. For Austria, this is the data protection authority, whose website can be found at https:\/\/www.dsb.gv.at\/<\/a>. In Germany, there is a data protection officer for each federal state. For more information, you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI)<\/a>. The following local data protection authority is responsible for our company: <\/p> Director: <\/strong>Dr. Matthias Schmidl<\/p> Address: Barichgasse 40-42, 1030 Vienna<\/p> Telephone number: +43 1 52 152-0<\/p> E-mail address: Website: We only transfer or process data to countries outside the scope of the GDPR (third countries) if you consent to this processing or other legal permission exists. This applies in particular if the processing is required by law or necessary to fulfill a contractual relationship and in any case only to the extent that this is generally permitted. In most cases, your consent is the most important reason for us to process data in third countries. The processing of personal data in third countries such as the USA, where many software manufacturers offer services and have their server locations, may mean that personal data is processed and stored in unexpected ways. <\/p> We expressly point out that, in the opinion of the European Court of Justice, an adequate level of protection for data transfers to the USA currently only exists if a US company that processes personal data of EU citizens in the USA is an active participant in the EU-US Data Privacy Framework. You can find more information on this at: https:\/\/commission.europa.eu\/document\/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en<\/a> <\/p> Data processing by US services that are not active participants in the EU-US Data Privacy Framework may result in data not being processed and stored anonymously. Furthermore, US government authorities may be able to access individual data. In addition, data collected may be linked to data from other services of the same provider if you have a corresponding user account. Where possible, we try to use server locations within the EU, if this is offered. In order to protect personal data, we have implemented both technical and organizational measures. Where possible, we encrypt or pseudonymize personal data. In this way, we make it as difficult as possible for third parties to infer personal information from our data. <\/p> Art. 25 GDPR speaks here of “data protection by design and by default” and thus means that both software (e.g. forms) and hardware (e.g. access to the server room) should always be designed with security in mind and appropriate measures should be taken. If necessary, we will discuss specific measures below. <\/p> TLS, encryption and https sound very technical – and they are. We use HTTPS (the Hypertext Transfer Protocol Secure stands for “secure hypertext transfer protocol”) to transmit data tap-proof on the Internet. We have thus introduced an additional layer of security and comply with data protection by design(Article 25(1) GDPR<\/a>). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data.
In short:<\/strong> We provide you with comprehensive information about the data we process about you.<\/p>
If you still have any questions, please contact the responsible body named below or in the legal notice, follow the links provided and look at further information on third-party websites. Our contact details can of course also be found in the legal notice. <\/p>Area of application<\/h2>
Legal basis<\/h2>
As far as EU law is concerned, we refer to REGULATION (EU) 2016\/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016. You can of course read this EU General Data Protection Regulation online at EUR-Lex, the access point to EU law, at https:\/\/eur-lex.europa.eu\/legal-content\/DE\/ALL\/?uri=celex%3A32016R0679<\/a>. <\/p>Contact details of the controller<\/h2>
Kennys Management GmbH
Sissy-L\u00f6winger-Weg5\/11
1100 Vienna<\/span><\/p>Storage duration<\/h2>
Rights under the General Data Protection Regulation<\/h2>
Austria Data Protection Authority<\/h2>
dsb@dsb.gv.at<\/a><\/p>
https:\/\/www.dsb.gv.at\/<\/a><\/p>Data transfer to third countries<\/h2>
We will inform you in more detail about data transfer to third countries, if applicable, in the appropriate sections of this privacy policy. <\/p>Security of data processing<\/h2>
TLS encryption with https<\/h2>
This means that the complete transmission of all data from your browser to our web server is secured – nobody can “eavesdrop”. <\/p>
You can recognize the use of this data transmission security by the small lock symbol at the top left of the browser, to the left of the Internet address (e.g. For example, examplepage.com) and the use of the https scheme (instead of http) as part of our Internet address.
If you would like to know more about encryption, we recommend a Google search for “Hypertext Transfer Protocol Secure wiki” to obtain good links to further information. <\/p>Communication<\/h2>