DATA PROTECTION CLAUSE
Brains and Bodies | CoWorking
Graecon GmbH
Triester Straße 40/4/4a
1100 Vienna
(subsequently briefly: Graecon)
1. GENERAL
1.1 The use of personal data by Graecon is governed by the applicable legal provisions and the consent given by the user for the use of his data.
1.2 Graecon betreibt einen CoWorking Space mit integriertem Yoga- und Surfstudio. Through Graecon, various coworking, yoga and surf training services and products (collectively, the “Offer”) can be booked, reserved or purchased. The offer is provided by Graecon in its own distribution. The subject matter of the Agreement is the use of Graecon’s services (the “Service”), more specifically: co-working spaces, workshops and the use of meeting rooms. The use of Graecon’s services is carried out by clients or users (the “user” – used neutrally for both genders).
1.3 Graecon is aware that the protection and careful handling of the user’s personal data is very important. Since data protection is of great importance to Graecon, Graecon strictly adheres to the legal provisions applicable in Austria (DSGVO, Telecommunications Act (TKG/TMG)) when using this data.
1.4 The user is required to read Graecon’s General Terms and Conditions (GTC) concerning the subject matter of the contract, the user’s obligations, limitations of liability and numerous other important information on Graecon’s website at the domain
(www.brainsandbodies.space) to visit.
2. COLLECTION OF DATA
2.1 Graecon collects and stores any information that the user of the CoWorking offer provides and that is transmitted to Graecon in the course of an online booking or that the user provides to Graecon in any other way, for example on site, in the financial accounting system Sevdesk.
Graecon uses the personal data of the user to the extent permitted by law and otherwise only with the consent of the user.
2.2 Graecon uses the following personal data of the user:
- Name (first and last name)
- E-mail address
- Address
- Phone number
- Date of birth
- Partial: Account number (to process direct debits for term contracts).
- and partly the IP address (“cookies”: are processed automatically – e.g. by Google
Analytics – and are not directly associated with user profiles).
3. PURPOSE OF THE USE OF DATA
3.1 We process your data within the scope of contract performance for the following purposes:
a) Execution of reservations and storage of open products.
b) Preparation of invoices
c) Creation of a booking history
d) Information about current schedule changes and innovations in the yoga offer (newsletter)
e) Web analysis (see point 6.)
f) Processing of requests
You may object to these data processing operations. A revocation has the consequence that we will no longer process your data for the above-mentioned purposes from this point on. It should be noted that the services of Graecon can no longer be used in the event of a revocation and a deletion of the user profile must be carried out in compliance with the legal requirements. To revoke, please contact: welcome@brainsandbodies.space.
3.2 If you have subscribed to our newsletter via the on-site registration form, we will process your data to send you our newsletter. You also have the option to subscribe to our newsletter via our website. For this we need your e-mail address and your declaration that you agree to receive the newsletter.
You can cancel your subscription to the newsletter at any time directly via a link in the newsletter e-mails or by sending an e-mail to: welcome@brainsandbodies.space.
3.3 We store your data for the duration of the contractual relationship. Data that are on an invoice or are necessary for invoicing are kept longer due to the legal retention period. After the retention period has expired, this data is also deleted.
4. DATA SECURITY
4.1 Personal data are stored in a closed system (Sevdesk) and protected with a password for reasons of data security.
4.2 Sevdesk is an order data processor of Graecon and has taken appropriate measures to ensure data security.
4.3 If Graecon becomes aware that data of the user has been systematically and seriously used unlawfully and that the user is threatened with damage as a result, Graecon will inform the user immediately.
4.4 Graecon’s website (www.brainsandbodies.space) contains links to other services or websites. Graecon is not responsible for the privacy policies and/or practices of other websites. If the user follows the link to another website, the user is solely responsible for familiarizing himself or herself with the privacy policy of that other website. Graecon’s privacy policy is limited only to information processed by Graecon.
4.5 In addition to Sevdesk, Graecon uses other processors for data processing. We share your data with the following additional recipients or categories of recipients:
- Software provider for processing bookings, managing products, cash registers
- Web analytics
- Communication tools for customer communication
Your data is processed within the EU or EEA // at least in part also processed outside the EU or EEA, namely in the USA. The adequate level of protection results from an adequacy decision of the European Commission according to Art 45 GDPR.
5. USE OF COOKIES
In order to make the visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies).
Other cookies remain on your terminal device and enable us or our partner companies to recognize your browser on your next visit (persistent cookies). You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.
6. WEBANALYSIS
This website uses functions of the web analytics services Google Analytics.
The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Both providers use methods that enable an analysis of your use of the website, such as so-called “cookies”, text files that are stored on your computer. We have concluded an order data processing agreement with Google. More information about the handling of user data at Google Analytics can be found in the privacy policy and the terms of use of Google:
https://support.google.com/analytics/answer/6004245?hl=de https://www.google.com/analytics/terms/de.html
You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link(https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser plugin, you can click this link(https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable) to prevent Google Analytics from collecting data on this website in the future. In the process, an opt-out cookie is placed on your end device. If you delete your cookies, you will need to click the link again. We use the function “Activation of IP anonymization” on this website. This means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. We process this data in our legitimate interest, the legal basis for the use of Google Analytics is Art. 6 para. 1 lit. f GDPR.
7. privacy policy for the use of Facebook
Plugins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our pages. You can recognize the Facebook plugins by the Facebook logo or the “Like button” (“Like”) on our page. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.
When you visit our pages, a direct connection between your browser and the Facebook server is established via the plugin. Facebook thereby receives the information that you have visited our site with your IP address. If you click on the Facebook “Like” button while logged into your Facebook account, you can link the content of our pages on your Facebook profile. This allows Facebook to assign the visit to our pages to your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. For more information, see the facebook privacy policy at https://www.facebook.com/policy.php. If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
8. privacy policy for the use of Instagram
Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.
For more information, please see Instagram’s privacy policy at https://www.instagram.com/about/legal/privacy/.
9. DECLARATION OF CONSENT TO THE DATA PROTECTION PROVISIONS
By checking the box in the course of an online booking with Eversports as well as with Cobot, the user confirms that he/she has read Graecon’s privacy policy. When booking on site, the user confirms that he/she has read Graecon’s privacy policy by signing the privacy policy on site. The user acknowledges that the personal data mentioned in point 2.2 will be used for the purposes mentioned in point 3.1.
10. LEGAL REMEDIES
10.1 You can reach us at the following contact details:
By mail to: Graecon GmbH, Triester Straße 40/4/4a, 1100 Vienna. :
By email to: welcome@brainsandbodies.space
10.2 You are generally entitled to the rights of information, correction, deletion, restriction, data portability and objection. For this purpose, please contact us. If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated in any way, you can contact us directly. If we cannot resolve your case to your satisfaction, you have the right to contact the supervisory authority at any time. In Austria, the data protection authority is responsible for this.