Data Privacy

ÖVKG Privacy Policy

We take the protection of personal data—and thus your privacy—very seriously. We would like to explain here how we protect your data and what it means for you when you use our personalized services. To ensure the greatest possible protection of your privacy, it goes without saying that we comply with all current and future legal requirements regarding data protection.

Who is responsible for data processing, and who can I contact?

The data controller is:

ÖVKG Visa und Konsular Gesellschaft mbH

Wohllebengasse 12-14, 5th Floor, Top 5.3

1040 Vienna

Managing Director: Dr. Julius Heintz

Email: impressum@oevkg.at

You can contact our Data Protection Officer at:

ÖVKG Visa und Konsular Gesellschaft mbH

Data Protection Officer

Wohllebengasse 12-14, 5th Floor, Top 5.3

1040 Vienna

Email: datenschutz@oevkg.at

What is personal data?

Relevant personal data is information that can be individually associated with you. Examples include personal details (name, address, and other contact information; date and place of birth; and nationality), identification data (e.g., ID card information), and authentication data (e.g., signature). In addition, this may also include transaction data (e.g., payment orders), data arising from the fulfillment of our contractual obligations, and information about your financial situation (e.g., proof of financial means for a Russian visa).

What sources and data do we use?

We process personal data that we receive from you as our customer or from other data subjects in the course of our business relationship. In addition, we process—to the extent necessary for the provision of our services—personal data that is lawfully transferred to us by other companies within ÖVKG Visa und Konsular Gesellschaft mbH (e.g., DVKG Deutsche Visa und Konsular Gesellschaft mbH) or from other third parties (e.g., inviting companies) for one or more specific purposes.

For individuals whose personal data is transferred to ÖVKG Visa und Konsular Gesellschaft mbH by third parties, we will send an email to the provided email address indicating i) which entity carried out the processing and ii) a direct link to the privacy policy of ÖVKG Visa und Konsular Gesellschaft mbH.

Why do we process your data (purpose of processing) and on what legal basis?

We process personal data in accordance with legal provisions, primarily the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG),

  • based on your consent (Art. 6(1)(a) GDPR)

We process personal data that we have received from you for the purpose of fulfilling the contract with you. To the extent that you have given us your consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. Consent to the processing of personal data is given for one or more specific purposes. The consent you have provided may be withdrawn at any time. This also applies to the withdrawal of consent given to us prior to the GDPR’s entry into force, i.e., before May 25, 2018. The withdrawal of consent applies only to the future and does not affect the lawfulness of the data processed prior to the withdrawal. Please send your withdrawal to

ÖVKG Visa und Konsular Gesellschaft mbH

Subject: Withdrawal

Wohllebengasse 12-14, 5th Floor, Top 5.3

1040 Vienna

Email: datenschutz@oevkg.at

However, we must point out that orders that are currently in the application process and are terminated due to the withdrawal of consent cannot be processed further.

  • to fulfill contractual obligations (Art. 6(1)(b) GDPR)

The processing of personal data is carried out for the purpose of providing and arranging consular services within the scope of fulfilling our contracts with our clients or for carrying out pre-contractual measures requested by clients. The purposes of data processing depend primarily on the specific product (e.g., visa application, legalization, A1 application, immigration) and may include, among other things, needs assessments and consultations.

Who receives my data?

Within ÖVKG Visa und Konsular Gesellschaft mbH, access to your data is granted to those departments that require it to fulfill our contractual obligations. Service providers and agents engaged by us may also receive data for these purposes. These are companies in the categories of consular services (e.g., obtaining invitations, translations), IT services, logistics, printing services, telecommunications, consulting, as well as sales and marketing.

With regard to the transfer of data to recipients outside of ÖVKG Visa und Konsular Gesellschaft mbH, we, as a consular service provider, are obligated to maintain confidentiality regarding all customer-related data. We disclose information about our customers only when required by law or when necessary for the fulfillment of a contract. Under these conditions, recipients of personal data may include, for example:

  • Consulates / Embassies. Please note that “third countries” also include countries for which there is no EU adequacy decision and with which there are no regulations governing data processing.
  • Companies that handle the procurement of invitations. These companies may also be based in third countries outside the EU. Please note that third countries also include countries for which there is no EU adequacy decision and with which there is no data processing agreement in place.
  • Austrian authorities (e.g., state government, Chamber of Commerce)
  • Logistics service providers that we engage to fulfill our contractual obligations.
  • Partners in the credit card business (e.g., AirPlus, American Express). However, please note that your credit card data (i.e., identification and payment data) is not collected or managed by ÖVKG. Credit card management (payment service) is handled by HOBEX AG, located at Josef-Brandstätter-Straße 2b in 5020 Salzburg. www.hobex.at
  • Service providers we engage in connection with our contractual obligations.
  • Other recipients of your data may include those entities for which you have given us your consent to transfer your data. We use your contact information and email address to provide you with information regarding your visa application process. We use your email address to inform you about relevant changes to visa regulations and our own services. If you prefer a different method of communication, please let us know.

Important Note

These recipients use the data you have provided—just as they would with applications submitted in person—  exclusively under their own responsibility and in accordance with the laws applicable to them. Please note that third countries may often be countries whose data protection standards are lower than those within the EU, for which no EU adequacy decision exists, and with which there are no regulations governing data processing.

Is data transferred to a third country or to an international organization?

Data is transferred to entities in countries outside the European Union (so-called third countries) to the extent that

  • It is necessary to fulfill your requests (e.g., obtaining an invitation)
  • It is required by law (e.g., tax reporting obligations)
  • You have given us your consent.

Please note that third countries often include countries whose data protection standards are lower than those within the EU, for which there is no EU adequacy decision, and with which there are no regulations governing data processing.

How long will my data be stored?

We process and store your personal data for as long as necessary to fulfill our contractual and legal obligations. Once the data is no longer required to fulfill contractual or legal obligations, the following deletion policy applies:

  • Order data and information specific to the individual order are automatically and completely deleted after 4 years. However, you have the option to independently preserve the orders for a longer period for a fee.
  • Traveler profiles will be contacted after 4 years of inactivity. The profile owner has the option to either delete the profile or keep it active. If the owner chooses to delete it, the profile and all associated orders and requests will be completely deleted.
  • User account holders will be contacted after 4 years of inactivity. The user account holder has the option to either delete or retain their user account. If deletion is chosen, the user account and the associated traveler profiles, orders, and applications will be completely deleted.
  • If you wish to have your user account deleted outside of this routine process, please submit a request stating your name and contact address:

ÖVKG Visa und Konsular Gesellschaft mbH

Subject: Deletion of User Account

Wohllebengasse 12-14, 5th Floor, Top 5.3

1040 Vienna

Email: datenschutz@oevkg.at

Please note that the deletion of data may be restricted by statutory retention requirements (including §11 (2) of the Austrian Value-Added Tax Act of 1994), which we are required to comply with. In this case, the data in question will be blocked, meaning it will only be used to fulfill these legal obligations. In addition, courts, law enforcement agencies, or other authorities designated by law may, where applicable, access data or request information on a legal basis.

What data protection rights do I have?

Every data subject has the following rights, provided the legal requirements are met:

  • the right of access under Article 15 of the GDPR,
  • the right to rectification under Article 16 of the GDPR,
  • the right to erasure under Article 17 of the GDPR,
  • the right to restriction of processing under Article 18 of the GDPR,
  • the right to object under Article 21 of the GDPR, as well as
  • the right to data portability under Article 20 of the GDPR.

In addition, you have the right to lodge a complaint with a data protection supervisory authority (Article 77 of the GDPR). The supervisory authority responsible for the ÖVKG is:

Austrian Data Protection Authority
Wickenburggasse 8
1080 Vienna

www: https://www.dsb.gv.at/home

You may revoke your consent to the processing of personal data at any time. This also applies to the revocation of consent given to us prior to the GDPR’s entry into force, i.e., before May 25, 2018. Please note that the withdrawal takes effect only for the future. Processing that took place prior to the withdrawal is not affected.

Is there automated decision-making?

We do not use fully automated decision-making pursuant to Article 22 of the GDPR to establish or carry out the business relationship.

Notes and Special Features of the Website

Security, SSL Technology

ÖVKG has implemented technical and organizational measures to protect your personal data, particularly against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. These security measures are continuously updated in line with technological developments. The transmission of personal data between your computer and our server is always encrypted (using SSL, Secure Socket Layer).

Cookies

When you visit our websites, we may store information on your computer in the form of a “cookie.” "Cookies" are small text files that are copied from a web server to your hard drive. Cookies contain information that can later be read by a web server in the domain where the cookie was assigned to you. Cookies cannot execute programs or place viruses on your computer.

We use only session cookies, which are necessary to maintain consistency during your visit—that is, to ensure, for example, that you do not have to log in again and that the preferences or other information you entered during the application process are retained throughout the session. In addition, we need session cookies to ensure that a specific service you have clicked on is assigned to your request.

No tracking cookies, such as Google Analytics, a web analytics service provided by Google Inc. (“Google”), are used.

You have the option to accept or reject cookies. Most web browsers automatically accept cookies. However, you can usually configure your browser settings to reject cookies. If you reject cookies, you may no longer be able to use some features of the website. If you accept cookies, you can delete the accepted cookies at a later time. If you delete the cookies, all settings controlled by these cookies will be deleted and may not be recoverable.

Last updated – May 11, 2018

Log in/Registration

Register

New visa application