Privacy Policy

Attention! The following English translation of the Privacy Policy is provided for convenience only.
Only the German-language original is legally binding.

Privacy Policy for Website, Contact, Direct Marketing and Events pursuant to Art. 13 and 14 GDPR

The protection of your personal data is a particular concern of Trident Immobilien GmbH (“Trident”, “we”, “us”). We therefore process your personal data exclusively on the basis of the statutory provisions, in particular the General Data Protection Regulation (“GDPR”), the applicable Data Protection Act (“DSG”) and the Telecommunications Act (“TKG”). Below you can find out which information we collect, process and use, among other things when you visit our website www.trident.co.at (“Website”).

1. Name and address of the controller

Trident Immobilien GmbH
Schönburgstraße 30 Top 2
1040 Vienna
Tel: +43 664 406 46 10
E-mail: office@trident.co.at

Please feel free to contact us directly if you have any questions regarding the processing of data concerning you.

2. Data processing on the Website

2.1. Scope of processing of personal data when using the website

In the course of your visit to our website, we will automatically collect the following personal data about you:

Date and time a page on our website is accessed; data about your end device (device ID); IP address; name and version of your web browser; session ID.

For the cookies we collect during your visit to our website, please refer to our cookie statement.

2.2. Legal basis for the processing of personal data

Insofar as the data from your visit to our website and online services are concerned, we rely on our legitimate interest pursuant to Art. 6 (1) (f) GDPR, namely, to make our website user-friendly and to protect you against attacks.

2.3. Purpose of data processing

We process your data in connection with your visit to our website for the following purposes:

  • to provide you with our website, including all its functions, and to continue improving and developing it;
  • to compile usage statistics;
  • to detect, prevent and investigate attacks on our website and online services.

2.4. Storage period

We will generally store your data relating to your visit to the website for 14 days. Longer storage only takes place if necessary to investigate detected attacks on our website and, beyond that, only until the expiry of relevant statutes of limitation, statutory retention periods or any legal disputes.

2.5. Recipients of data

To operate and manage the website we regularly engage IT service providers who, acting on our instructions and under our directions, may have access to personal data in order to perform the contracted IT services.

We also transfer your personal data to the following recipients:

  • other external third parties to the extent required (e.g. auditors, insurers in the event of an insurance claim, legal representatives in individual cases, etc.);
  • authorities and other public bodies to the extent required by law (e.g. tax authorities, etc.).

Your data will not be passed on to any other third parties for their own purposes without your consent.

If we process your data in a third country outside the European Union (EU) or the European Economic Area (EEA), or if this occurs in the course of using services of third parties, this will take place only where necessary to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation, or on the basis of our legitimate interests. We have implemented appropriate and adequate safeguards to ensure that transfers to the respective third country comply with data-protection requirements. On request, we will provide you with a copy of these safeguards if we process your data in third countries.

Where a transfer is made to states without an adequacy decision under Art. 45 (3) GDPR and without appropriate safeguards under Art. 46 GDPR, in particular the USA, we draw your attention to the risk that your data may be subject to access by authorities in such third countries for control and monitoring purposes and that no effective legal remedies are available against this.

3. Data processing when contacting us

3.1. Scope of processing of personal data when contacting us

If you contact us by e-mail, telephone, fax, post, via our social-media channels or through our contact form, we process the personal data you provide (e-mail address, name, telephone number, etc.) together with the content of your enquiry.

If you get in touch with us via our social-media pages on Facebook, Instagram or LinkedIn, we receive your personal data from the respective platform operators and also transfer your personal data to those operators.

3.2. Legal basis for the processing of personal data

To answer your enquiry we rely on our legitimate interest pursuant to Art. 6 (1) (f) GDPR, namely, to respond to your question in an individually satisfactory manner.

3.3. Purpose of data processing

We process your data in connection with your enquiry in order to give you an individual and satisfactory response.

3.4. Storage period

As a rule, we store your data relating to enquiries and contacts for six months after answering the enquiry so that we can respond to any follow-up questions. Longer storage only takes place where necessary to investigate attacks detected on our website and, beyond that, only until the expiry of relevant statutes of limitation, statutory retention periods or any legal disputes.

3.5. Recipients of data

To answer enquiries we regularly engage IT service providers who, acting on our instructions and under our directions, may have access to personal data in order to perform the contracted IT services.

We also transfer your personal data to the following recipients:

  • other external third parties to the extent required (e.g. auditors, insurers in the event of an insurance claim, legal representatives in individual cases, etc.);
  • authorities and other public bodies to the extent required by law (e.g. tax authorities, etc.).

Your data will not be passed on to any other third parties for their own purposes without your consent.

If we process your data in a third country outside the European Union (EU) or the European Economic Area (EEA), or if this occurs in the course of using services of third parties, this will take place only where necessary to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation, or on the basis of our legitimate interests. We have implemented appropriate and adequate safeguards to ensure that transfers to the respective third country comply with data-protection requirements. Upon request, we will provide you with a copy of these safeguards if we process your data in third countries.

Where a transfer is made to states without an adequacy decision under Art. 45 (3) GDPR and without appropriate safeguards under Art. 46 GDPR, in particular the USA, we draw your attention to the risk that your data may be subject to access by authorities in such third countries for control and monitoring purposes and that no effective legal remedies are available against this.

4. Data processing for direct marketing

4.1. Scope of processing of personal data for direct marketing

If you give us your voluntary consent to be contacted for advertising purposes, we will process your e-mail address, your name, your telephone number and your title as well as your salutation for sending you direct-marketing materials about real-estate properties and related offers, well-founded market reports, events and similar services from the real-estate sector by e-mail and by telephone.

If, in this context, you receive a download link for documents via our CRM system, we can also see whether and when (date and time) you downloaded the files.

4.2. Legal basis for the processing of personal data

We process your data in connection with direct marketing solely on the basis of your explicit consent (Art. 6 (1) (a) GDPR). You can withdraw your consent to advertising contact at any time without stating reasons, for all or individual purposes and with effect for the future (e.g. via a link at the end of every newsletter).

4.3. Purpose of data processing

We process your data in connection with direct marketing in order to provide you with information about real-estate properties and related offers, well-founded market reports, events and similar services from the real-estate sector by e-mail and by telephone.

4.4. Storage period

If you have only subscribed to our newsletter and the receipt of direct marketing and are not our customer, we store your personal data until you withdraw your consent and for a maximum of three years.

4.5. Recipients of data

For direct marketing we regularly engage IT service providers and other service providers who support us in providing our services and act on our behalf (including providers of marketing tools, marketing agencies, communication service providers and call centres) (processors).

We also transfer your personal data to the following recipients:

  • other external third parties to the extent required (e.g. auditors, insurers in the event of an insurance claim, legal representatives in individual cases, etc.);
  • authorities and other public bodies to the extent required by law (e.g. tax authorities, etc.).

If we process your data in a third country outside the European Union (EU) or the European Economic Area (EEA), or if this occurs in the course of using services of third parties, this will take place only where necessary to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation, or on the basis of our legitimate interests. We have implemented appropriate and adequate safeguards to ensure that transfers to the respective third country comply with data-protection requirements. On request, we will provide you with a copy of these safeguards if we process your data in third countries.

Where a transfer is made to states without an adequacy decision under Art. 45 (3) GDPR and without appropriate safeguards under Art. 46 GDPR, in particular the USA, we draw your attention to the risk that your data may be subject to access by authorities in such third countries for control and monitoring purposes and that no effective legal remedies are available against this.

5. Data processing for events

5.1. Scope of processing of personal data for events

During events, photographs and/or films / videos may be produced by us or on our behalf. By registering for an event, you acknowledge that photographs and video material showing you may be stored, used for press coverage and published in various (social) media, publications and on Trident Immobilien websites (including in blog posts).

5.2. Legal basis for the processing of personal data

We (as the organiser) base the processing of your personal data on our legitimate documentation interest pursuant to Art. 6 (1) (f) GDPR.

5.4. Storage period

Photographs and/or films / videos from events are stored for three years from the date of the event.

5.5. Recipients of data

For producing photographs, films / videos, press coverage, publications and content for our various (social) media channels as well as the Trident Immobilien websites (including blog posts), we regularly engage (IT) service providers who, acting on our instructions and under our directions, may have access to personal data in order to perform the contracted (IT) services.

We also transfer your personal data to the following recipients:

  • other external third parties to the extent required (e.g. auditors, insurers in the event of an insurance claim, legal representatives in individual cases, etc.);
  • authorities and other public bodies to the extent required by law (e.g. tax authorities, etc.).

Your data will not be passed on to any other third parties for their own purposes without your consent.

If we process your data in a third country outside the European Union (EU) or the European Economic Area (EEA), or if this occurs in the course of using services of third parties, this will take place only where necessary to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation, or on the basis of our legitimate interests. We have implemented appropriate and adequate safeguards to ensure that transfers to the respective third country comply with data-protection requirements. Upon request, we will provide you with a copy of these safeguards if we process your data in third countries.

Where a transfer is made to states without an adequacy decision under Art. 45 (3) GDPR and without appropriate safeguards under Art. 46 GDPR, in particular the USA, we draw your attention to the risk that your data may be subject to access by authorities in such third countries for control and monitoring purposes and that no effective legal remedies are available against this.

6. Data security

We implement appropriate technical and organisational security measures to protect your personal data against accidental or unauthorised deletion, alteration or loss, theft, and unauthorised viewing, disclosure, reproduction, use, modification or access. In addition, we and our employees are bound by data secrecy and confidentiality. Our processors, who must have access to your personal data in order to perform their professional duties, will likewise receive access and be subject to the same obligations of data secrecy and confidentiality.

7. Your data-subject rights

7.1. Right of access

You have the right to obtain from us information about all personal data concerning you that we process. You also have the right to know whether personal data concerning you have been transferred to a third country or an international organisation. In this connection you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR that apply to such transfers.

7.2. Right to rectification and right to restriction of processing

You may request the correction or completion of inaccurate or incomplete data. Under certain circumstances—for example, if the accuracy of the data is contested for a period enabling verification—you may request that processing be restricted so that the data are processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest.

7.3. Right to data portability

You may request that we send you—or, where technically feasible, a third party designated by you—a copy of your data in a structured, commonly used and machine-readable format. You also have the right to transmit these data to another controller without hindrance from the controller to which the data were provided, provided that

  • the processing is based on consent under Art. 6 (1)(a) or Art. 9 (2)(a) GDPR, or on a contract under Art. 6 (1)(b) GDPR, and
  • the processing is carried out by automated means.

In exercising this right you may also have the personal data transmitted directly from us to another controller, where technically feasible. The freedoms and rights of others must not be adversely affected.

7.4. Right to erasure

You have the right to have data erased in certain circumstances, e.g. where the data have not been processed in compliance with data-protection requirements.

If you exercise your right to rectification, erasure or restriction of processing, we must notify all recipients to whom the personal data have been disclosed of this rectification, erasure or restriction, unless this proves impossible or involves disproportionate effort.

7.5. Right to object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is based on Art. 6 (1)(e) or (f) GDPR.

We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.

7.6. Right to withdraw consent

You may withdraw any consent given under data-protection law at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

7.7. Supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with the national supervisory authority of your place of residence if you believe that the processing of personal data concerning you is unlawful. In Austria the competent authority is the Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, e-mail dsb@dsb.gv.at, tel. +43 1 52 152-0.

7.8. Exercise of your rights

To allow us to process your request and to ensure that personal data are not disclosed to unauthorised third parties, please submit your request with clear proof of identity and a brief description of the scope in which you wish to exercise the above rights.