Privacy and Security Policy

General Information – Scope

Data protection is a matter of trust and your trust is important to us. We want you to feel safe, especially when visiting our website, so we would like you to know about our approach when it comes to data privacy. The data protection statement below lists the data that is processed on our websites, how it is processed, and whom you can contact in case of need.

Responsible party: TTControl GmbH, Schönbrunner Straße 7, 1040 Vienna, Austria.

You can contact our data protection officer via datenschutz@tttech.com

When you visit our website https:///www.theia-xr.eu

This data protection statement applies to the use of this website and the accompanying collection and processing of personal data.

Data we collect: Each time you access our website, your computer (terminal) sends the following information needed to allow you to visit the website:

Purpose: We process your personal data for 5 purposes: (1) to provide the website to you; (2) to keep our website operated and secure, particularly by detecting and removing bugs; (3) to determine the utilization of our website; (4) to optimize and/or improve our website, and (5) for marketing purposes such as B2B Lead Generation.

Legal Basis: (1) consent to see our website, and consent to use cookies, pixels and similar technologies for statistical-, tracking-, and marketing purposes (Article 6(1)(a) GDPR); and (2) our legitimate interests to improve our website (i.e., by detecting and removing bugs), to determine utilization, and to fulfil our obligation to provide a secure webpage (Article 6(1)(f) GPDR).

Storage: Your IP address is only stored temporarily during the time that you are using the website. Afterwards, the IP address will be deleted or shortened for anonymization. In exceptional cases, longer storage is necessary in order to ensure the functionality and security of the website (for example when internet attacks occur). The remaining data is stored for a limited time only.

Processors: We use the following service providers: (1) eworx (https://www.eworx.at) for providing the mailing services, contact forms, and the newsletter; (2) Digimagical (https://digimagical.com) for hosting our website on their physical server; (3) Instant Design (https://www.instant.at/) for maintaining our website; (4) Google (https://analytics.google.com) to provide analytics of the website use; (5) LinkedIn (https://linkedin.com) for identifying LinkedIn users; (6) Meltwater (https://www.meltwater.com/en) for (social) media monitoring- and analysis;; and (7) Emplifi (https://emplifi.io/) for social media analysis- and publishing.

Other Recipients: No other recipients receive personal data.

Transfers to third countries: We may transfer personal data to third countries, since the servers of Google, LinkedIn etc. are located in the United States of America. Currently, there is no valid adequacy decision since the USA does not ensure an adequate level of protection. Moreover, even the most recent Standard Contractual Clauses adopted by the European Commission do not ensure this adequate level since, as a data subject, you do not have effective legal remedies and enforceable data subject rights. After a data transfer to the USA, there is a risk that US authorities will access your data for control- and monitoring purposes. Hence, we only transfer your personal data if you have explicitly consented to such a transfer (Article 49(1)(a) GDPR).

You can revoke your consent at any time without providing a reason. To do so, please contact us: webmanagement@tttech.com

When you are subscribed to our newsletter

In addition to the processing described under (1), we use your email to send you the requested newsletter.



Data we collect: If you subscribe to our newsletter, we collect your title, first- and last name, the company you work for, your email-address, the city and country you live/work in, and (optionally) the state you live/work in.

Purpose: Sending the newsletter and customization of the newsletter.

Legal Basis: We rely on your consent to receive the newsletter (Article 6(1)(a) GDPR). Moreover, to send the newsletter, we use the email address you have provided and then require your confirmation that as the owner of the email address, you agree to receive it (so-called double opt-in).

Storage: Your personal data is only stored for as long as you are subscribed to our newsletter.

Processors: We use the following service providers: (1) eworx (https://www.eworx.at) for providing the mailing services, contact forms, and the newsletter; (2) Meltwater (https://www.meltwater.com/en) for newsletter design- and distribution.

Other Recipients: No other recipients receive personal data.



You can cancel your subscription at any time using the unsubscribe link provided in the newsletter or via email: addressdb@tttech.com

When participating in our customer satisfaction survey

We process your personal data to survey existing customers.



Data we collect: Your first- and last name, the company you work for, your position in that company.

Purpose: To determine customer satisfaction.

Legal Basis: We rely on your consent to participate in such a survey (Article 6(1)(a) GDPR).

Storage: We retain the data for 7 years. This retention period is based on AS 9100/ISO 9001 requirements.

Processors: Wissma Marktforschungs GmbH, Ettenreichgasse 13/20, 1100 Vienna.

Other Recipients: No other recipients receive personal data.



You can revoke your consent of your personal data at any time, by sending an email to: addressdb@tttech.com

When you contact us via the contact form

We process your personal data when you contact us via the contact form.



Data we collect: Your title, first- and last name, company you work for, position in that company, address, language, email address, phone number, and website.

Purpose: To respond to your contact request.

Legal Basis: Firstly: your consent (you consent to the collection of your personal data by sending this information to us) (Article 6(1)(a) GDPR). Moreover, we also rely on our legitimate interest or legal obligation to retain, in certain cases, such information if this contact request would lead to any legal claims (Article 6(1)(f) GDPR).

Storage: For as long as the data is needed in order to respond to your requests, to fulfil our agreement, and to assert claims arising from this agreement.

Processors: We use eworx (https://www.eworx.at) for providing the mailing services, contact forms, and the newsletter.

Other Recipients: No other recipients receive personal data.



You can cancel the use of your data at any time via email: addressdb@tttech.com

Cookies and Social Plugins

General information

When using our websites, so-called “cookies” are placed on your terminal. These are small text files that store particular settings and data for exchange with our system via your browser. A cookie contains the name of the domain from which the cookie data was sent as well as information about the age of the cookie and an alphanumeric identifier (“cookie ID”). Cookies help us improve our web presence and allow us to offer you optimized services.

The “session cookies” that we use temporarily store only the above-mentioned data about your use of the website. These store a so-called “session ID” that can be associated with various requests from your browser in a single session. This makes it possible to recognize your computer when you return to our website. Session cookies are deleted when you close the browser. In addition, so-called “persistent cookies” are used (Google Analytics and LinkedIn, see below), which are automatically deleted after a preset amount of time. These make it possible not only to recognize the terminal you have already used to visit our website, but also non-personal analysis of behavior on our website. Persistent cookies from TTTech do not process any personal data.

Non-essential cookies will only be set based on your consent. You can adjust the cookie-settings by clicking on the fingerprint symbol in the bottom left of the webpage. If you reject non-essential cookies, please note that you may not be able to use all functions of the website.

Google Analytics

Our website uses Google Analytics, a web analysis service offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for the purpose of analyzing website usage by users. The service uses “cookies” – text files which are stored on your device, and which enable analysis of your use of the website. The information generated by the cookie about your use of the website is transmitted to a Google server in the USA and stored there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.

On this website, Google Analytics has been enhanced with the code “anonymizeIP” in order to ensure an anonymized detection of IP addresses (so-called IP masking). If the anonymization is active, which means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. However, we want to inform you that IP-anonymization does not affect other identifiers from being sent in the clear, like device data. Moreover, because the IP anonymization only takes place after the transmission of your IP address, Google still initially collects your un-shortened IP-address.

Lastly, we want to mention that Google provides a browser plug-in at tools.google.com/dlpage/gaoptout that allows for you to deactivate Google Analytics. If you do not want browser cookies used, then you can set your browser so that it does not accept the storage of cookies. If you prevent the storage of cookies, then please note that you may not be able to make full use of our website.

LinkedIn

On our website, we use functions of the social media network LinkedIn provided by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Certain pages on our website have a LinkedIn pixel incorporated and use the functions of LinkedIn. When you visit these pages, your IP address, browser data, date, and time of visit, cookies, are transmitted to LinkedIn, stored, and evaluated. If you have a LinkedIn account and are logged in, this data is associated with your personal account and the data stored in it.

For more information about the personal data LinkedIn collects and how they process this data, please visit www.linkedin.com/legal/privacy-policy.

Legal basis for international data transfers

Because the servers of Google, LinkedIn etc. are located in the United States of America, your personal data will be transferred to the USA if you explicitly consent to the use of these services. Currently, there is no valid adequacy decision since the USA does not ensure an adequate level of protection. Moreover, also the most recent Standard Contractual Clauses adopted by the European Commission do not ensure this adequate level since, as a data subject, you do not have effective legal remedies and enforceable data subject rights. After a data transfer to the USA, there is a risk that US authorities will access your data for control- and monitoring purposes. Hence, we only transfer your personal data if you have explicitly consented to such a transfer (Article 49(1)(a) GDPR).

Data security

We use cutting-edge technical measures to guarantee data security, particularly in order to protect your personal data from risks during data transfers and from discovery by third parties; in particular, our website uses an encrypted transmission when you access our website.

Your rights as a data subject

In cases, you have the right to:

• be informed about the processing of your personal data;
• obtain access to your personal data that we process;
• have incorrect, inaccurate, or incomplete personal data rectified;
• request to have your personal data erased without undue delay;
• object to the processing of your personal data on grounds relating to your particular situation;
• request the restriction of processing in particular cases (as listed in Article 18(1)(a)-18(1)(d);
• receive your personal data in a structured, commonly used, and machine-readable format and have that data transmitted to another controller (‘data portability’);
• withdraw your consent if you have given your consent (i.e., by subscribing to our newsletter);
• lodge a complaint with your (local) supervisory authority.

You can exercise (most of) the above-mentioned affected rights by sending an email to datenschutz@tttech.com, or alternatively, by sending a letter to the following address: Schönbrunner Strasse 7, 1040 Vienna, Austria.

We are governed by the Austrian Data Protection Authority (‘Datenschutzbehörde’ or ‘DSB’). Their contact details are:

Barichgasse 40-42, 1030 Vienna, Austria,

Phone +43 1 521 52-25 69

Email: dsb@dsb.gv.at.