Information about data use pursuant to the General Data Protection Regulation (GDPR):

Mandatory information according to Art 13 and 14 GDPR of a purely informative nature.

Status: September 2023

1. What information is available on this page?

Österreichische Post AG (hereinafter referred to as "Austrian Post", "we", "us") processes your personal data in full compliance with the provisions of data protection law, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act and all other applicable laws.

In this document, you will find information about data processing performed in relation to our customer management. This document includes the following sections:

To whom is this information addressed? (item 2)
Who is responsible for the processing of your data? (item 3)
Information about possible data processing (item 4), in particular
- customer satisfaction surveys (4.1)
- our customer management (4.2)
- processing inquiries and complaints (4.3)
- customer data analysis (4.4)
With whom are we allowed to share your data? (item 5)
Automated decision-making and profiling (item 6)
What rights do you have? (item 7)
How can you get in touch us? (item 8)

Information about the use of cookies on our websites is available at Data protection.

You will find the general data protection information with links to information about specific Austrian Post products or services such as letter and parcel delivery, marketing and advertising or business customer relations in the selection box on the right-hand side. If you need printed copies of the information provided on this page or on additional pages, please contact the staff at our service locations.

2. To whom is this information addressed?

This privacy policy is addressed to all our private clients.

3. Who is responsible for the processing of your data?

The responsible party for data processing described on this page is

Österreichische Post AG,
Rochusplatz 1,
1030 Vienna,
Austria

4. Information about possible data processing

4.1. Customer satisfaction surveys
We may process your data as part of our customer satisfaction surveys in order to continuously improve our services.

Which of your data can we process for this purpose?
For this purpose, we may process the following data categories:

Contact information
Personal master data

What is the legal basis for this processing?
The legal basis for this processing is our legal obligation (Art. 6 (1) (c) of the GDPR) as defined in Section 32 (3) of the Austrian Postal Market Act.

How long can your data be stored?
For the purpose of customer satisfaction surveys, your data will be stored for a maximum of one year.

With whom are we allowed to share your data?
For customer satisfaction survey purposes, your data may be transmitted to the following categories of recipients:

Processors

Other information about this processing:
You are under no contractual or legal obligation to provide your data for our customer satisfaction surveys.

To meet the quality assessment and customer satisfaction surveys required by Austrian Postal Market Act, we carry out customer satisfaction surveys after our customers have gotten in touch with us. If you do not wish to take part in this survey, you can share this information during your conversation with your customer advisor or let us know later via our website (detailed information is available under item 8 of the general data protection policy: Data protection) or by writing to the Austrian Post customer service, Bahnsteggasse 17-23, 1210 Vienna.

4.2. Customer management (private clients)
We may process your data within the scope of customer management for the purpose of processing/handling general master data from private clients and interested parties in the course of contract initiation and execution.

Which of your data can we process for this purpose?
For this purpose, we may process the following data categories:
address data, contact data, identification data, personal master data, usage data, payment data, marketing, document content data, call content data

What is the legal basis for this processing?
The legal basis for this processing is

the contract for products and services of Austrian Post (Art. 6 (1) (b) of the GDPR) that we have concluded with you
our legitimate interest in the management of our customers (Art. 6 (1) (f) of the GDPR).
our legal obligation (Art. 6 (1) (c) of the GDPR) as defined in Section 132 (1) of the Austrian Federal Tax Code

How long can your data be stored?
For the purpose of customer management, your data will be stored no longer than 3 years from your objection or from the last contact we had with you, depending on the category. Data on payments are stored for 7 years from the end of the calendar year in which the payment was made.

With whom are we allowed to share your data?
For customer management purposes, your data may be transmitted to the following categories of recipients:

Processors

Other information about this processing:
If you do not provide the above data, it will not be possible to conclude a contract for products and services of Austrian Post.

4.3. Inquiries and complaints (private clients)
We may process your data in the context of inquiries and complaints.

Which of your data can we process for this purpose?
For this purpose, we may process the following data:
Address data, Identification data, Contact information, Usage data, Personal master data, Document content data, Contract content

What is the legal basis for this processing?
The legal basis for this processing is

our legal obligation (Art. 6 (1) (c) DSGVO) as defined in Section 132 (1) of the Austrian Federal Tax Code
our legitimate interest (Art. 6 (1) (f) of the GDPR) to process your inquiries and complaints
the contract for products and services of Austrian Post (Art. 6 (1) (b) of the GDPR) that we have concluded with you.

With whom are we allowed to share your data?
For the purpose of inquiries and complaints, your data may be transmitted to the following categories of recipients:

Processors

4.4. Analysis of customer data (private clients)
We may process your data for the analysis of customer data.

Which of your data can we process for this purpose?
For this purpose, we may process the following data:
Address data, personal master data, contact data, usage data, identification data, payment data, marketing data (for more detailed information, see below under "Other information on this processing"), document content data, conversation content

What is the legal basis for this processing?
The legal basis for this processing is

our legitimate interest (Art. 6 (1) (f) of the GDPR) in the analysis of customer data
our legitimate interest (Art 6. (1) (f) of the GDPR) in profiling for customised marketing purposes of Austrian Post (see also "Other information on this processing“);
your consent (Art. 6 (1) (a) of the GDPR and Austrian Telecommunications Act), which we obtain as necessary in accordance with the law.

How long can your data be stored?
Depending on the category, your data will be deleted for the purpose of customer administration either immediately after your revocation or objection or after a maximum of 3 years from the last contact with you or after the conclusion of the business case.

With whom are we allowed to share your data?
For the purpose of customer data analysis, your data may be transmitted to the following categories of recipients:

Processors

Other information about this processing:

To provide the best possible use of our Austrian Post products and services, we rely on (partially) automated data processing that can, among others, analyse the Austrian Post products you use and your user behaviour regarding such products (e.g., purchase frequency, purchase volume, and purchase amount). Your usage behaviour can also be analysed in connection with demographic data (rural compared to urban areas) and the respective weather conditions at the time of the product or service purchase. These analyses allow us to provide you physical or electronic advertising for our products and services that matches your interests and preferences (e.g., relevant product updates or special offers) and to create profiles about our customers that anticipate future interests and profit ratios. This kind of data processing is called profiling and is performed based on our legitimate interest in providing targeted advertising to our clients. However, in this context, no automated decisions that would have legal or any other considerable consequences for you are made. You can object to profiling for marketing purposes at any time. In the case of such an objection, you would no longer receive any direct advertising that is based on your preferences and personal behaviour. For more information on how you can make such an objection, please refer to items 7 and 8 of the general data protection policy.

5. With whom are we allowed to share your data?

To learn with which recipient categories we are allowed to share your data, please see the section "Information about possible data processing". A detailed description of Austrian Post recipients and/or categories of recipients is available under item 5 of the document Data protection.

6. Automated decision-making and profiling

As a general rule, no automated decision-making or profiling pursuant to Article 22 (1) and (4) of the GDPR is carried out in data processing at Austrian Post. Information on general profiling is available under item 4.4 of this policy.

7. What rights do you have?

You have the right of access to your personal data that we process as a controller. For more information, please refer to Article 15 of the GDPR.

Under certain conditions, you may request the restriction of processing as well as the rectification and deletion of your personal data. For more information, please refer to Articles 16 to 19 of the GDPR.

In addition, under certain conditions, you also have the right to data portability, meaning that we would give you all personal data you have disclosed to us in a structured, standard, and machine processable format. For more information, please refer to Article 20 of the GDPR.

As a data subject, you have the right to object to the use of your data if the processing serves the purpose of direct marketing. In addition, you have the right to object at any time to the processing of your data carried out in the legitimate interests of Austrian Post or third parties if reasons arise from your specific circumstances. For more information, please refer to Article 21 of the GDPR. The processing of your personal data may be based on your consent pursuant to Art. 6 (1) (a) of the GDPR. You can revoke this consent at any time without the need to state reasons with future effect. Until then, we will lawfully process your data.

For information about the legal basis of our data processing, please see item 4 ("Information about possible data processing").

In addition, you have the option of filing a complaint with the Austrian Data Protection Authority:

Austrian Data Protection Authority,
Barichgasse 40-42,
1030 Vienna
Austria

Telephone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at

8. How can you get in touch with us?

Would you like to exercise your rights or do you have further questions, suggestions, or feedback?
To contact Austrian Post's data protection officer or to exercise your rights, please use one of the contact options listed under item 8 of our general data protection policy: post.at/Datenschutz.