We, onebytezero GmbH (hereafter “onebytezero,” “we,” or “us”) value your privacy and security. This document outlines the collection, processing, and protection of personal and other data in compliance with Art. 13 GDPR when visiting one of our websites: goalifypro.com, goalifyapp.com, goalify.link, goalify.pro, goalify.app, onebytezero.com, and onebytezero.at and their respective country-domain equivalents and sub-domains.
I/ Data collection and data processing during your visit to our websites
We offer our websites to keep you informed about our business offers, promotions, latest news, and provide training and learning resources for these services.
In the case of internet access to our websites, your internet browser automatically supplies data, such as the URL of the referring web page, browser type, browser version, date and time of your access, amount of data sent, your IP address, the file you requested and other similar data and information to our web server.
When using this general data and information, we draw no conclusions about the person involved with this access. Rather, this information is needed to (1) correctly deliver the contents of our websites, (2) to optimize the contents of our websites, (3) to ensure the continued functioning of our information technology systems and the technology of our websites, and (4) to provide the information necessary for prosecution to law enforcement agencies in the case of a cyberattack. This collected data is statistically evaluated and used to improve data protection and data security and in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by an affected person.
1/ Contact possibility
Due to legal regulations and for your own benefit, our websites contain information that enables quick electronic contact to our company as well as direct communication with us, which also includes a general e-mail address. If you contact us by e-mail or via a contact form, the personal data you provide (such as personal data and contact details) will be automatically saved. Such personal data transmitted by you to us on a voluntary basis will be stored to process your request or to contact you.
When using our contact forms, we may collect your first name, last name, company name, telephone number, e-mail address, your current timezone, and ip address.
2/ Live Chat
By using cookies the information and offers on our websites can be optimized for the user. Cookies allow us, as already mentioned, to recognize the users of our websites. The purpose of this recognition is to make it easier for users to use our websites. For example, the user of an internet page using cookies does not have to re-enter his credentials every time he visits the internet site because this is done by the cookie and the cookie stored on the user’s computer system.
You can prevent the setting of cookies through our websites at any time by means of an appropriate setting of the internet browser used and thus permanently deny the use and storage of cookies. Furthermore, already set cookies can be deleted at any time via the browser's settings or other software programs. This is possible in all common internet browsers. If you deactivate the setting of cookies in the internet browser used, not all functions of our websites may be fully usable and our services may remain unaccessible.
4/ Subscription to our newsletter
We offer you the chance to sign up for our promotional newsletter. Our newsletter is sent out regularly to provide you with updates on offers, insights and other promotional information related to our services. To receive the newsletter, you must have a valid email address and be registered for it.
For legal reasons, we will send a confirmation email to the email address you have registered for the newsletter dispatch in a double-opt-in procedure. This confirmation email is essential to check whether the owner of the email address has authorized the receipt of the newsletter or not.
When subscribing to the newsletter, we will store the IP address of the computer system used by the person at the time of registration, as well as the date and time of registration. The collection of this data is necessary to be able to understand the (possible) misuse of the data subject’s email address at a later date and serves as a legal safeguard for us.
When signing up for our promotional newsletter we may collect your first name, last name, company name, telephone number, e-mail address, current timezone, and ip address. Additionally, our system tracks your email activity, including opens and link clicks.
If you wish to unsubscribe from our newsletter, you can do so by clicking on the unsubscribe link in each newsletter.
Personal data collected during the registration for the newsletter will be used exclusively to send the newsletter. There is no transfer of personal data collected in the context of the newsletter service to third parties. You can revoke your consent to the storage of personal data, which you have given us for the newsletter, at any time.
II/ Purposes of data processing
We will process your personal information for the following purposes:
- to make our websites available to you and to further improve and develop these websites;
- to respond to your requests and inquiries;
- to be able to handle any existing contractual relationship with you;
- to send you our newsletter – if you have subscribed to it.
Your personal data is provided voluntarily or might be required to execute a respective contractual relationship (use of our services, etc.). We collect your personal data only to the extent necessary for the fulfillment of the specific request or inquiry. If you do not provide us with your personal data, we may not be able to respond to your request or inquiry or enter into any contractual relationship with you.
III/ Legal basis of data processing
Article 6 (1) (a) GDPR serves our company as the legal basis for data processing operations, in which we obtain consent for a specific processing purpose as described in this document and the Goalify User Agreement.
Is the processing of personal data necessary to fulfill a contract of which you are a party, as is the case, for example, in data processing operations that are required for the provision of a service (settlement of a purchase contract for goods offered by us, participation in a contract, or use of our services), the processing is based on Art 6 para 1 lit b GDPR. The same applies to data processing operations that are necessary to carry out pre-contractual measures, such as in cases of inquiries about our products or services offered by us.
If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Article 6 (a) (c) GDPR.
Furthermore, processing operations could be based on Art. 6 para 1 lit. f GDPR. On this legal basis, data processing operations that are not covered by any of the above legal bases are required if the processing is necessary to safeguard a legitimate interest of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the data subject prevail. Such processing operations are particularly permitted because they have been specifically mentioned by the European legislator. In that regard, it is considered that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, second sentence, GDPR). The transmission of direct mail to our customers is based on this legal basis.
IV/ Withdrawal of granted consent
You are entitled to withdraw your consent to data processing at any time; the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
V/ Transmission of your personal data
To enable our websites to function effectively, we enlist the services of specialized providers, such as email software providers, testing and analysis service providers. Any data transfer that takes place is in accordance with data protection laws and solely for the purposes stated above. These providers process data on our behalf and within the scope of our express instructions. They are prohibited from using the data received for their own purposes or sharing it with third parties.
In some instances, these providers may be located in countries outside the European Economic Area (EEA) or may use sub-processors in third countries. Regardless, we ensure that these recipients have an adequate level of data protection, equivalent to that prevailing in the EEA, based on an adequacy decision by the Commission or contractual agreements in accordance with Article 46 of the GDPR.
In addition, we may disclose your personal information if we believe it is appropriate and necessary to comply with laws, regulations and legal procedures or comply with regulatory requests to protect the safety of individuals, to counter fraud, or to resolve security or technology issues or to protect our rights and property or the rights and property of users of our services.
VI/ Duration of storage
We retain your data for as long as it is necessary to provide our services to you. This includes the duration of our business or contractual relationship and beyond, in compliance with legal retention and documentation obligations. These obligations are set forth in the Austrian Commercial Code (UGB), the Federal Tax Code (BAO), and other relevant laws. If we need your consent to process your data, the duration of retention depends on when you withdraw your consent.
VII/ Your rights in connection with personal data
You are, among other things, entitled (under the conditions of applicable law),
- to check if and what personal data we have stored and to obtain copies of this data;
- to request the correction, addition or deletion of your personal data that is incorrect or improperly processed;
- to require us to limit the processing of your personal data, and
- in certain circumstances, to object to the processing of your personal data or to withdraw the prior consent for processing;
- to require data portability;
- to know the identity of third parties to whom your personal data is transmitted to and
- to file a complaint with the responsible authority.
VIII/ Our contact information
If you have any questions or concerns regarding the processing of your personal data, please contact us:
Villefortgasse 13, A-8010 Graz