In order to create more transparency in the processing of personal data by companies, the European legislator has introduced a new obligation of information. As soon as data are collected, you should know what happens with your personal data and for which purposes these are processed. The following information is provided pursuant to Article 13 GDPR.
1. Controller and data protection officer
The controller for the processing of personal data is the SMARTCRM GmbH, Friedensstraße 12, AT- 5082 Grödig, represented by the CEOs, Mr. Benedikt Metz and Mr. Ralph Rastert.
Contact details:
Phone +43 662 870 952 0
E-Mail: info@smartcrm.at
2. Purposes, legal regulations and provision of your data
2.1 Contracts
Your personal data will be processed to initiate and conclude contracts for CRM solutions and interface implementations, for the communication in the context of the execution of contracts, billing and payment processing. In addition, your personal data is processed for the efficient and contractually owed provision of remote maintenance and support services.
The admissibility of the processing is governed by Article 6(1)(b) GDPR (implementation of a contract or a pre-contractual measure).
The admissibility of the processing is further governed by Article 6(1)(f) GDPR (legitimate interest). Our legitimate interests lie, for instance, in the electronic and more efficient data processing and the optimization of work processes as a whole.
The provision of your personal data is required for the conclusion of a contract with us. Non-provisioning means that no contract can be concluded and executed.
2.2 Direct advertising and internal analysis
We process your personal data to provide you with information about our offers such as product information. Furthermore, your data will be used for internal analyses to allow individualized approach.
The admissibility of the processing is governed by article 6(1)(f) GDPR (legitimate interest). We have a legitimate interest in actively offering our services, advertising to customers and making the advertising approach as individual as possible.
2.3. Storage of links to social media presences
We store links to your and/or your company’s social media profiles in our CRM solution. This serves to simplify the establishment and maintenance of contact.
The admissibility of the processing is based on article 6(1)(f) GDPR (legitimate interest). We have a legitimate interest in making contact with our customers and interested parties as simple and flexible as possible.
2.4. Online demos
You have the option of booking an appointment for an online demo via a link in the e-mail signature of our (sales) staff. You will receive the access data for this separately from us by e-mail.
We use the Microsoft Bookings scheduling service (MS Bookings for short) from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, for this purpose.
The connection to the service is only established if you access the online booking function via the link in the e-mail signature.
We use the service for the purpose of (facilitated) booking of online demos in relation to our CRM solutions. We would like to offer our customers and interested parties the opportunity to book appointments online quickly and flexibly. This involves processing your personal data, in particular your name and e-mail address. Furthermore, metadata such as your IP address, date and time of access can be processed via MS Bookings. You can also provide voluntary information, such as writing a note to us. Further information on data processing via Microsoft can be found here.
The admissibility of this processing is based on Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures). Furthermore, the admissibility of the processing, in particular with regard to voluntary information, may be based on Article 6(1)(f) GDPR (legitimate interest). Our legitimate interests lie, for example, in facilitating communication with you and in processing your inquiries more efficiently. It is not possible to make an online appointment via Microsoft Bookings without providing the (at least mandatory) data. We would like to point out that you are not obliged to use Microsoft Bookings. You can also arrange online appointments via another contact option, e.g. by telephone or e-mail.
3. Recipients
As part of the provision of services, your personal data will be forwarded to the respective departments and processed and may also be passed on to other companies (e.g., tax consultants). In these cases, the transfer is covered by a legal regulation or takes place within the scope of an order processing.
In connection with the execution of the contractual relationship and the use of digital media and tools to optimize work processes, it may be necessary in individual cases for your personal data to be processed in a third country outside the EU or the EEA. As a matter of principle, this only takes place within the framework of the use of established software customary in the market and in compliance with the special requirements of Article 44 et seq. GDPR (here either the existence of an adequacy decision by the European Commission or the use of standard data protection clauses).
4. Storage of your data
The initial storage of your data occurs when establishing contact for example by e-mail, by phone or with the exchange of e-mails or written documents. We will delete your personal data once the contractual relationship has been terminated, all mutual claims have been fulfilled and there are no legal storage obligations or legal regulations for storage. We will continue to use your postal address for advertising purposes even after termination of the contract unless you object.
Provided that your data have been anonymized for analysis purposes, they will be stored and used without any time limit.
5. Rights of the data subject
You have the following rights:
You have the right of access (Article 15 GDPR), the right to rectification (Article 16 GDPR), the right to erasure (Article 17 GDPR), the right to restriction of processing (Article 18 GDPR) as well as the right to data portability (Article 20 GDPR). We strive to process inquiries in a timely manner.
Provided that your personal data are processed in the context of the Article 6(1)(f) GDPR, you have a right to object as far as there are reasons for this arising from your particular situation or if the objection is aimed at direct advertising (Article 21 GDPR).
6. Revocation of consent
Any consent granted for the processing of personal data can be revoked at any time. The lawfulness of the processing on the basis of the consent until revocation remains unaffected.
7. Questions or complaints
You have the right to lodge a complaint with a supervisory authority.
