Data Protection and Privacy Notice for this website.
This website is intended only to provide information for possible clients. Mag. Krista Rothschild does not collect data to analyze or sell. If data is gathered, as noted below, it is simply used to provide an optimal, modern website for you as the user (possible client).
1. Name and contact details of the person responsible: Mag. Krista Rothschild, Rotenturmstrasse 23, Suite 16, 1010 Vienna, Austria
2. Processing of personal data in the context of the operation of this site:
Personal data of the users of this website are processed insofar as this is necessary for the purpose of operating a functional website. The following data is automatically collected from the computer accessing this page:
– the IP address of the computer with which this website is accessed;
– the type of browser software used;
– the previously accessed website;
– the configuration of the computer accessing this page;
– date and time.
The IP address is only stored for as long as is necessary for the provision of proper services, in particular for the detection and defense against improper use. The IP address of the computer accessing this page will be anonymized at the latest after seven days.
The legal basis for this processing of personal data is Article 6 (1) Sentence 1 (f) Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR). The legitimate interest in data processing lies in the proper operation of this website.
3. Categories of recipients of personal data
The data collected as part of the operations described in point 2 above are processed by a contract data processor in Austria. This provides services for the technical operation and maintenance of this website.
4. Rights of those affected
Persons, whose data are collected in the course of the operations described in point 2 above, have the following rights:
a) Right to information
The person concerned has the right to request confirmation from the person responsible as to whether personal data relating to them are being processed; if this is the case, s/he has the right to information about this personal data and the following information:
aa) the processing purposes;
bb) the categories of personal data that are processed;
cc) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
dd) if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
ee) the existence of a right to correction or deletion of the personal data concerning him/her or restriction of processing by the person responsible or a right to object to this processing;
ff) the right to lodge a complaint with a supervisory authority, (Österreichische Datenschutzbehörde, Wickenbburggasse 8, 1080 Vienna Austria); and
gg) if the personal data is not collected from the data subject, all available information about the origin of the data.
The controller provides a copy of the personal data that are the subject of the processing.
b) Right to rectification
The person concerned has the right to request that the controller immediately correct any incorrect personal data relating to him/her. Taking into account the purposes of the processing, the person concerned has the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
c) Right to deletion
The data subject has the right to request that the controller delete personal data concerning him/her immediately, and the controller is obliged to delete personal data immediately if one of the following reasons applies:
aa) The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
bb) The data subject withdraws their consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR and there is no other legal basis for the processing.
cc) The data subject objects to the processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in accordance with Article 21 (2) GDPR.
dd) The personal data was processed unlawfully.
ee) The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the controller is subject.
ff) The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.
If the person responsible has made the personal data public and is obliged to delete them in accordance with the preceding paragraph, s/he will take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, in order to ensure that persons responsible for data processing who process the personal data to inform that a data subject has asked them to delete all links to this personal data or to copy or replicate this personal data.
The above paragraphs do not apply if processing is necessary:
aa) to exercise the right to freedom of expression and information;
bb) to fulfill a legal obligation that requires processing in accordance with the law of the Union or the Member States to which the controller is subject, or to perform a task that is in the public interest or in the exercise of official authority vested in the controller;
cc) for reasons of public interest in the area of public health in accordance with Article 9 (2) (h) and (i) and Article 9 (3) GDPR;
dd) to assert, exercise or defend legal claims.
d) Right to restriction of processing
The person concerned has the right to request the controller to restrict processing if one of the following conditions is met:
aa) the accuracy of the personal data is contested by the person concerned, for a period of time that enables the person responsible to check the accuracy of the personal data,
bb) the processing is unlawful and the data subject refuses to delete the personal data and instead requests that the use of the personal data be restricted;
cc) the controller no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims, or
dd) the data subject has objected to the processing in accordance with Article 21 (1) GDPR, as long as it is not certain whether the legitimate reasons of the person responsible outweigh those of the person concerned.
If processing was subsequently restricted, this personal data – apart from its storage – may only be obtained with the consent of the person concerned or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest Union or a Member State are processed.
A data subject who has subsequently restricted the processing will be informed by the person responsible before the restriction is lifted.
e) Right to object to processing
The data subject has the right to object at any time to the processing of personal data relating to him/her, which is based on Article 6 (1) (e) or (f) GDPR, for reasons arising from his/her particular situation. The person responsible no longer processes the personal data unless s/he can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
f) Right to data portability
The person concerned has the right to receive the personal data concerning him/her, which s/he has provided to a responsible person, in a structured, common and machine-readable format, and s/he has the right to transfer this data to another responsible person without hindrance from the responsible person to whom the personal data have been provided, if
aa) the processing is based on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) GDPR or on a contract pursuant to Article 6 (1) (b) GDPR and
bb) the processing is carried out with the aid of automated processes.
When exercising his/her right to data portability, the person concerned has the right to have the personal data transferred directly from one person responsible to another person responsible, insofar as this is technically feasible.
The exercise of the right does not affect Article 17 GDPR. This right does not apply to processing that is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been assigned to the person responsible.
g) Right to restriction of processing
The person concerned has the right to lodge a complaint with a competent supervisory authority (Österreichische Datenschutzbehörde, Wickenbburggasse 8, 1080 Vienna Austria).
5. Further information
The provision of personal data is not required by law or contract. A contract is not necessary. There is no obligation to provide personal data. If personal data is not provided in the scope described in point 2, this website cannot be used.
Automated decision making and so-called profiling do not take place.