1. Who is responsible for the handling of your data?

1.1 The association post.sozial ("we", "us"), a welfare institution of the Austrian Post AG ("Post"), is responsible for adequately protecting your personal data. Therefore, we comply with all legal provisions for the protection, lawful handling, and confidentiality of personal data, as well as data security.

1.2 We process your personal data in accordance with data protection regulations, particularly the General Data Protection Regulation (GDPR), the Data Protection Act (DSG), the special provisions of the Postal Market Act, and all other applicable laws.

1.3 These privacy notices apply to the eligible persons regarding the services of the association post.sozial.

1.4 We receive the personal data for utilizing the services of the association directly from you.

1.5. We receive your contact details from the Post to be able to inform you about our services.

2. What interest does post.sozial have in your data and for what reason and purpose may post.sozial process it?

2.1 Fulfillment of contracts and implementation of pre-contractual as well as post-contractual measures: We process your personal data according to Art 6 para 1 lit b GDPR to clarify your claims against post.sozial to fulfill the association's purpose of social care according to the applicable articles of association, such as the provision of material grants. Special categories of personal data may also be processed. We observe all legally mandated special provisions for their processing. The conclusion and fulfillment of the respective service by post.sozial itself constitutes a processing of your personal data and, under certain circumstances, also a processing of your personal data of a special category. In particular, it is generally or in the specific case necessary to process among others but not exclusively the following categories of your personal data: personal identification data, address data, contact data, identification data, employment contract data, payment data, absence data, health data, data of travel companions or data of minor dependents of the entitled party.
If you do not provide us with the necessary data in each case, the respective service of post.sozial cannot be provided.

2.2 Your data may also be processed in the interest of post.sozial or a third party. In particular, it is generally or in the specific case necessary to process among others but not exclusively the following categories of your personal data: title, first name, last name, date of birth, address, personnel number, child allowance / child subsidy, marital status, extent of your discount in income-dependent or room rate and whether you are a sole earner or sole provider.

2.3 This data processing takes place according to Art 6 para 1 lit f GDPR for the following purposes: • Sending informational material about the services of post.sozial • Quality surveys • Ensuring IT security and IT operations, conducting load tests, developing new and adapting existing products and systems, migrating data to ensure the viability and integrity of the systems and thus also the processed data in a broader sense. The specified personal data will primarily be used for testing when this cannot be done with reasonable economic effort based on anonymous data. Data security according to Art 32 GDPR is, of course, ensured throughout. 2.3 Fulfillment of legal obligations: post.sozial has legal obligations, e.g., club law requirements, documentation obligations, duties arising from labor and social law, as well as tax or corporate law requirements. To fulfill these, we process your personal data according to Art 6 para 1 lit c GDPR to the extent required by the respective law. This usually involves the following data categories: title, first name, last name, date of birth, address, payment data.

2.4 Consent: We obtain your consent separately according to Art 6 para 1 lit a GDPR. We will, of course, fully adhere to any additional regulations (including telecommunications laws).

2.5 The articles of association are published on the website of post.sozial and on the intranet of the Austrian Post AG in their current version.

3. Cookies

3.1 To make the visit to our websites attractive and to enable you to use certain functions, we use various cookies. These cookies ensure functions without which you cannot use this website correctly. So-called session cookies are deleted when you close your browser. No user consent is necessary for these cookies.

4. To whom may your data be passed on?

4.1 Data transmission within the Austrian Post corporate group: We may pass on individual data processes to specialized areas or companies within our corporate group. This is done to simplify internal administration.

4.2 External service providers: We comply with legal and contractual obligations. In our collaborative society, required data processing is often handled by specialized companies, known as service providers (contract processors). These companies can provide such services efficiently and at a high level of quality. Therefore, we transfer your personal data to these companies to the extent necessary for the respective service provision. Such services include data storage in secure data centers, printing of invoices and advertising materials, and digitization of contracts (creating a digital, unchangeable image). Our contract processors include, in particular, IT service providers, service providers in customer care, contract management, postal and courier services, and advertising agencies.

4.3 Courts and authorities: There are also legal obligations that post.sozial can only fulfill by transmitting your personal data to authorities (such as social insurance carriers, tax authorities, or law enforcement agencies) or courts to the necessary extent.

4.4 Further recipients: In the context of the contractual relationship and particularly in connection with our service obligations, there may be further transmissions of your personal data depending on the individual case (such as other postal service providers, experts, appraisers, lawyers, interest groups, banks, capital management companies, market research institutes, auditors).

5. May your data also be passed on to another country (including outside the EU)?

5.1 Yes, if that third country has been confirmed by the European Commission as having an adequate level of data protection or if other suitable data protection guarantees are in place (e.g., binding corporate rules or EU standard contractual clauses)

5.2 In special cases, transmission to a third country may also occur with your explicit consent, provided we have informed you about the possible risks of the intended transmission and the lack of suitable data protection guarantees (point 4.1).

6. How long will your data be stored?

6.1 As soon as we no longer need your personal data for the purposes outlined above, we will delete it unless other legal retention periods apply.

6.2 The statutory limitation period is between three and thirty years. Within this time, claims can be made against post.sozial. As long as it is necessary depending on the possible claim, we may retain your necessary personal data.

7. What rights do you have?

7.1 If you wish, we will provide you with information at any time about all your personal data that we process. Additionally, in some cases, you also have the right to data portability and thus the release of your personal data that you have provided us in a structured, commonly used, and machine-readable format.

7.2 You have the right to request correction or deletion of your personal data concerning you or to request restriction of the processing of this data by us under certain conditions, as well as the right to object to the processing by us under certain conditions.

7.3 Additionally, you have a right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.

8. Your right to object

8.1 According to Art 21 GDPR, you have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.

8.2 If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such direct marketing.

8.3 If you wish to lodge an objection, you can do so by email to pm.datenschutz@post.at or by writing to Personnel Management, Rochusplatz 1, 1030 Vienna.

9. Contact

For questions and suggestions regarding data protection, please contact the management of post.sozial at post.sozial@post.at or by mail to the association post.sozial, to the attention of the management, Steinheilgasse 1, 1210 Vienna.