Privacy Policy

About Quality Austria - Trainings, Zertifizierungs und Begutachtungs GmbH (Quality Austria Training, Certification and Evaluation Ltd.)

Quality Austria - Trainings, Zertifizierungs und Begutachtungs GmbH (Quality Austria Training, Certification and Evaluation Ltd.) (hereinafter referred to as "Quality Austria"), headquartered in Vienna, Austria, is a leading partner in the field of system and product certification, verification and validation, assessment, training and certification of persons, as well as the Austria Quality Seal (hereinafter referred to as "services"). qualityaustria"). The basis is accreditation from the BMDW ("Bundesministerium für Digitalisierung und Wirtschaftsstandort" – "Federal Ministry of Digital Affairs and Economy"). Furthermore, since 1996, in cooperation with the BMDW, the company has awarded the Austrian Excellence Award. A key strength of Quality Austria is its competence as a national market leader in the field of integrated management systems, which helps ensure and increase business excellence. Quality Austria is therefore an important driver in setting trends for the Austrian economy and ensuring "Success with Quality.".

QUALITY AUSTRIA-POLSKA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (in short "Quality Austria - Polska Sp. z o. o.") is a daughter company of Quality Austria - Trainings, Zertifizierungs und Begutachtungs GmbH and represents it in Poland and Ukraine in the full scope of its activities.

Who is responsible for data processing and who can I contact?

The personal data administrator is:
QUALITY AUSTRIA-POLSKA LIMITED LIABILITY COMPANY
(Quality Austria – Poland Sp. z o. o.)
Żwirki i Wigury 14
43-190 Mikołów, Poland, Europe
Tel.: (+48 32) 226 60 07
Fax: (+48 32) 216 26 41
E-mail: iod(at)qualityaustria.com.pl

What sources and data do we use?

When providing our services in the field of certification, verification and validation of systems, as well as certification and training of persons and further education, we process personal data that the Client (the party ordering the service) qualityAustria, including its contact person, or the person participating in the service qualityAustria) makes available to us, understood as data that we obtain ourselves when providing services qualityaustria (e.g. during an audit or examination). Quality Austria cannot generally provide the requested services without this data.

Relevant personal data includes detailed data (e.g. name, address and other contact details, date and place of birth), authorization data, contract data (e.g. audit documentation, event documentation, certificate data, accounting data, bank details).

For what purpose do we process your data (data processing purpose)? And on what legal basis?

Personal data that we obtain when providing the service qualityaustria will be processed for the purpose of fulfilling contracts in accordance with the most important contractual documents and our General Terms and Conditions and Online Shop Regulations, as well as for the required documentation in accordance with normative requirements (primarily ISO/IEC 17021, ISO/IEC 17024, ISO/IEC 17065 and any additional requirements to be audited on behalf of the Client), for keeping accounting and bookkeeping records, for establishing and defending legal claims, as well as for managing customer relationships, including preparing offers for further services qualityAustria (e.g. recertification and extension of certification or appropriate training). The legal basis for this type of processing is Article 6(1)(b) of the General Data Protection Regulation (GDPR) (performance of a contract and pre-contractual measures) (if the person concerned is a party to the contract itself) and Article 6(1)(f) of the GDPR (legitimate interests in the provision of the services accepted). qualityAustria to enhance business excellence, which are implemented by Quality Austria – Polska Sp. z o. o. and the Client) and Article 9 paragraph 2 letter f of the GDPR (establishment, exercise or defense of legal claims). Partial processing is also provided for by law (e.g. tax rules, accounting and bookkeeping; legal requirements set out in the Act on Conformity Assessment and Market Surveillance Systems).
We process your data to fulfill our legal obligations, including:

• In order to conclude and perform obligations arising from offers and concluded contracts
• Handling of inquiries regarding certification and training submitted via forms on the website www.qualityaustria.com.pl/
• Carrying out activities related to booking a place for training, purchasing training through the online store, providing training materials, issuing certificates and proof of participation in the training
• Issuing invoices for services provided
• Debt collection, conducting court and arbitration proceedings

In order to maintain our legitimate interests in direct marketing for our range of services, we use your personal data (name, title, address, contact details, order details, previous orders) for our own advertising and marketing purposes, to send you information and advertisements about services and products, news and other information that may be of interest to you, unless you have objected to processing for marketing purposes.

If you have consented to our processing of personal data for specific purposes (e.g., participation in events, providing information), the lawfulness of this processing will be determined based on your consent. You may withdraw your consent at any time. This also applies to withdrawal of declarations of consent submitted before the GDPR came into force.
We process your data because you have given us your prior consent, for the following purposes:

• Sending information on management systems based on ISO standards – information aimed at developing knowledge
• Sending newsletters with news and information that may be relevant to you
• Providing information about organized on-site and online training courses and related promotions (generating quantity discount codes, promotional prices, early registration)
• Processing the purchase of training courses by using the "My Profile" registration form on the website www.qualityaustria.com.pl/ (creating a Customer Account in the Online Store)
• For purposes related to the promotional activities of Quality Austria – Polska Sp. z o. o., in particular via e-mail and telephone, due to our legitimate interest (Article 6, paragraph 1, letter f of the GDPR)
• Saving data in cookies, collecting data from websites and mobile applications

Who will receive my data?

Within Quality Austria – Polska Sp. z o.o., only departments and branches that need your data to fulfill contractual and legal obligations or for processing based on legitimate interests will be granted access to your data.

It is for the purpose of providing services qualityAustria, in which the Client is interested, Quality Austria – Polska Sp. z o. o. will transfer the data to external auditors qualityaustria, trainers, assessors, and technical experts acting as entities cooperating with Quality Austria – Polska Sp. z o. o. Furthermore, Quality Austria – Polska Sp. z o. o. uses services provided by external IT providers.

In accordance with the Conformity Assessment and Market Surveillance Systems Act and the relevant standards (in particular ISO/IEC 17021 and ISO/IEC 17024), Quality Austria – Polska Sp. z o. o. is obligated to provide a publicly available list of completed certifications. The list, available on the Quality Austria website, lists the applicable certificates and their holders.

Based on the normative requirements, Quality Austria – Polska Sp. z o. o. is also obliged to provide information on services qualityaustria to accreditation bodies and/or grant these bodies access upon request. In this process, this also includes personal data that may be transferred to accreditation and certification bodies. Furthermore, Quality Austria – Polska Sp. z o. o. may transfer personal data to additional recipients (e.g., public authorities) to fulfill legal reporting obligations.

When booking certification and/or training products that are marked as such, personal data is transferred to partners.
The recipients of personal data within the scope of the business activities of Quality Austria – Polska Sp. z o. o. are:

• Certification, Training and Marketing Departments and the Customer Service Center within the organizational structure of Quality Austria – Polska Sp. z o. o.
• Auditors, trainers, assessors, and external experts as entities cooperating with Quality Austria – Polska Sp. z o. o. and Quality Austria
• Entities supporting the business activities of Quality Austria – Polska Sp. z o.o., such as providers of IT, courier, postal, telephone and accounting services, as well as payment service providers
• Certification and training body CIS Certification & Information Security Services Sp. z o. o. in areas that complement the services qualityAustria
• The parent company Quality Austria - Trainings, Zertifizierungs und Begutachtungs GmbH and the company CIS Certification & Information Security Services GmbH, which form the capital group

Is data transferred to a third country or international organisation?

Data will be transferred to countries outside the European Union to the extent necessary for the execution of orders by Quality Austria – Polska Sp. z o. o. (e.g. if the auditee is based in a third country), in accordance with law or if you have given your express consent.

How long will my data be stored?

Data will be stored for the period necessary to enable Quality Austria – Polska Sp. z o.o. to fulfill its contractual and legal obligations. Master data relating to the customer (including bodies with general representation rights and contact persons at the customer) as well as order history will be archived until the end of the business relationship and, in addition, until the expiry of warranty periods, limitation periods, and statutory retention periods. Application documents, audit and verification reports, and other certification-related documents will generally be stored for 12 years, unless standard or legal requirements require a longer retention period. The data processing period after the completion of the contractual purposes is extended by the periods resulting from the exercise and defense of claims, for the period resulting from the running of general limitation periods for claims.

With respect to marketing communications, your personal data will be processed until you object. Every piece of information and newsletter sent by Qualitya Austria – Polska Sp. z o.o. includes a direct link to delete your data from our database. In such a case, we will cease processing your data for these purposes, while taking into account the overriding legal basis.

What data protection rights do I have?

Under the General Data Protection Regulation (GDPR), every data subject has the right to obtain information about the personal data we process about them, as well as the right to rectification, erasure, restriction of processing, and data portability. Furthermore, data subjects may, for reasons relating to their particular situation, object at any time to our processing of personal data relating to them in the future, based on legitimate interests. Furthermore, they may object at any time to the future use of their personal data for direct marketing purposes, free of charge and without providing any justification. If you object to processing for direct marketing purposes, we will no longer use your personal data for these purposes.

Furthermore, you have the right to lodge a complaint with the competent data protection authority by submitting it directly to the President of the Personal Data Protection Office at ul. Stawki 2 in Warsaw ( https://uodo.gov.pl ). The consent granted may be withdrawn at any time.

In order to exercise the rights of data subjects and in case of questions regarding the data protection guaranteed by Quality Austria – Polska Sp. z o. o., interested parties may contact iod(at)qualityaustria.com.pl.

To what extent are decisions made in an automated manner?

No automated decisions are made at all!

Is profiling taking place?

To provide you with targeted information and consultation regarding our products, we use evaluation tools. These tools enable needs-based communication and advertising, including market and opinion research. You can object to profiling for direct marketing purposes at any time.

Is user behavior on the website analyzed?

If you visit this website, we will track some of your personal data in connection with your visit. In this section, we inform you about how we process your personal data.

Categories of data processed and the purpose of data processing
When you visit our website, we automatically collect and process the following personal data:

• date and time of visit to certain pages of our website
• Your IP address
• the type and version of the web browser used to access our website
• previously visited website (URL)
• some cookies (see below)

Providing the information and data requested on our website is optional. However, providing this information will help us improve your online experience. Without providing this information, you may not be able to use all the features of our website.

Your data is processed for the following purposes:

• to provide you with the best possible experience when visiting the website and to further improve and develop our website
• to be able to create statistics on user activity
• to identify, prevent and investigate potential attacks or fraud on our website, and
• to provide users with a user account on our website, if necessary

Legal basis for processing
We process your personal data on the basis of:

• Your consent expressed by accepting the cookie banner (within the scope of your choice), in accordance with the "Privacy by Default" principle„
• our legitimate interests within the meaning of Article 6(1)(f) of the GDPR, which provide a user-friendly website and protect our website against fraud

Storage period
Typically, your data is stored for 1 hour. If you use our shopping cart in the Online Shop, your data may be stored for up to 30 days. Your IP address, anonymized and sent back to us, for example, by Google Analytics, is stored only for as long as necessary to improve your user experience (such data is no longer personal data). Data will be stored longer only if necessary to investigate abuse or fraud on our website. Furthermore, data is only stored until the expiry of applicable limitation periods, statutory retention periods, or any legal disputes in which data is required as evidence. We also store the collected data to provide you with a user account in the Online Shop for as long as the account exists.

Cookies
This website uses cookies. Cookies are small files stored on your computer when you visit a website. Cookies are typically used to provide visitors with additional features on a website. For example, cookies make it easier for you to navigate a website and help the website remember information about your visit, such as your preferences and settings, when you return. Cookies cannot access, read, or change any other data or information on your computer.

Most cookies used on our website are so-called session cookies. These are temporary cookies that are automatically deleted when you leave our website. Persistent cookies, on the other hand, remain on your computer until you manually delete them in your browser. We use persistent cookies to recognize you when you return to our website.

If you want to control cookies on your computer, you can change your browser settings to receive notifications when a website wants to store cookies. You can also block or delete cookies if they are already stored on your computer. For more information on managing cookie settings, visit your browser's "Help" function. To ensure the most user-friendly cookie experience, we use a "Cookie Manager" (cookie banner) to make managing cookie settings even easier. Please note that blocking or deleting cookies may negatively impact the functionality of our website and your online experience.

The right to object
Cookie settings

Google Analytics
Our website uses features of the web analytics service "Google Analytics", which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies to measure how you interact with the content on our website.

The information generated by this cookie about your activities on this website (including your IP address, URLs of the pages you visit, and website attributes) is transferred to and stored on Google servers in the United States. We do not store any of your data collected in connection with Google Analytics.

Our website uses the IP anonymization option provided by Google Analytics. This means that your IP address is shortened and anonymized by Google as soon as Google receives your IP address. Google uses this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide other services related to website activity and internet usage. Google does not associate the IP address transmitted by your browser via Google Analytics with any other data.

For more information about Google's Terms of Use and Privacy Policy, please visit https://marketingplatform.google.com/about/analytics/terms/pl i https://policies.google.com/?hl=at&gl=at.

Right to object to data transfer to non-EU countries and data processing: You can prevent Google Analytics from collecting your data on this website via our Cookie settings, and an opt-out cookie is set to prevent your data from being collected in the future when you visit this website).

ATTENTION: At this point, we would like to draw your attention to the recent judgment of the European Court of Justice (ECJ) "Schrems II" (C-311/18), which classifies the adequacy of data protection provided by certain US cloud service providers, including Google Analytics, as incompatible with data protection law. Our data protection team will be happy to answer any questions you may have (iod(at)qualityaustria.com.pl) or you can disable tracking via Google Analytics on our website at any time (Cookie settings).

Mouse pointer tracking
Our legitimate interests under the GDPR are to improve our services and our website. In doing so, we use Hotjar to better understand the needs of our users and optimize that service and experience. Hotjar is a technology service that helps us better understand our users' experiences (e.g., how much time they spend on which pages, which links they click, what users do and don't like, etc.), which allows us to build and maintain our service based on user feedback. Hotjar uses cookies (see above) to collect data about our users' behavior and their devices. This includes your device's IP address (processed during the session and stored in de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from using or selling any data collected on our behalf. For more information, please see Hotjar's Privacy Policy: https://www.hotjar.com/legal/policies/privacy.

Presence on social networks (social media)

Quality Austria – Polska Sp. z o.o. has an online presence on various social networks. User data processed on these websites is used to communicate with users there or to offer information about Quality Austria – Polska Sp. z o.o. and our services.

Quality Austria – Polska Sp. z o.o. expressly states that user data may be transferred outside the European Union. For a detailed description of the relevant processing activities and the right to object (opt out), we refer to the privacy information of the respective network.

Facebook
Quality Austria – Polska Sp. z o. o., together with Facebook Ireland Ltd., is responsible for the collection (but not further processing) of our visitors' data on the Facebook page (so-called "Fanpage"). This joint responsibility means that both parties are legally responsible. The data concerned includes the content viewed by the aforementioned users, as well as the content with which these active users interact. As part of this joint relationship, there is also a joint agreement on the terms of processing. This agreement is issued by Facebook Ireland Ltd.

Services and service providers used:
Facebook:
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland - Ireland
Parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA
Website: https://www.facebook.com
Privacy Policy: https://www.facebook.com/about/privacy
Right to object (opt out): in the case of advertising: https://www.facebook.com/settings?tab=ads

LinkedIn:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland - Ireland
Website: https://www.linkedin.com
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Right to object (opt out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out