Data Protection and Privacy Statement - XARIS GmbH

This data protection and privacy policy is divided into two parts and applies to the processing of personal data by XARIS GmbH both in the context of visiting this website and in connection with debt collection and receivables realization activities. It meets the requirements of the General Data Protection Regulation (GDPR) and the supplementary legal provisions in Austria (DSG, ECG).

Contacts:

XARIS GmbH
Mariahilfer Straße 32/4
1070 Wien, Austria

Phone: +43 1 3060 100
E-Mail: office@xaris.at
Website: www.xaris.com

Managing director: Rainer Wolfgang Dinkhoff
Data privacy Contact:Lukas Louca
E-Mail: lukas.louca@xaris.at oder datenschutz@xaris.at

General Data Privacy Statement
Art. 13 DSGVO, § 165 TKG 2021 (AT) und § 25 TTDSG (DE)

Collection and storage of access data

When you visit our website, technically necessary data is collected in order to deliver the website and ensure the security of the system. This includes the IP address of your device, the date and time of access, the page accessed, browser type and version, the operating system used, and the previously visited page (HTTP referrer). This processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

Use of the contact form and email contact

If you contact us via the contact form, your name and email address will be collected and processed in order to process your request. This data will be forwarded to us by email. In sensitive cases, we recommend that you contact us directly by telephone. Processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the effective processing of your request. If your request relates to the initiation or fulfillment of a contract, we also rely on Art. 6 (1) lit. b GDPR. Email communication is handled via a mail server from ANEXIA® Internetdienstleistungs GmbH (Feldkirchner Straße 140, 9020 Klagenfurt, Austria). A corresponding data processing agreement in accordance with Art. 28 GDPR is in place. The transfer of personal data to third countries (e.g., the USA) is excluded.

Retention Period

We only store personal data for as long as is necessary to fulfill the respective purpose or as long as there are legal retention obligations.

Rights of Affected Persons

You have the right at any time to request information about your personal data stored by us (Art. 15 GDPR), to have incorrect data corrected (Art. 16 GDPR), to request the deletion of your data (Art. 17 GDPR), to restrict processing ( (Art. 18 GDPR), to receive your data in a machine-readable format (Art. 20 GDPR), to object to processing (Art. 21 GDPR), and to withdraw your consent at any time (Art. 7 (3) GDPR). If you believe that the processing of your personal data violates data protection regulations, you can lodge a complaint with a supervisory authority. In Austria, this is the Data Protection Authority, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

Change to the Privacy Policy

We reserve the right to amend this privacy policy if legal requirements or our data processing procedures change. The current version is available on this website at any time.

Privacy Policy for Collection Services
Art. 13 und 14 DSGVO, § 94 Z 62 GewO (AT) und § 10 RDG (DE)

Purpose of data processing

As part of our debt collection activities, we process personal data in order to assert and collect claims on behalf of our clients. The processing serves to execute contracts, enforce The processing serves the purpose of executing contracts, enforcing legitimate claims, performing receivables management, and fulfilling legal obligations, particularly in the area of money laundering prevention.

Legal basis for Data Processing

The processing of personal data in the context of our debt collection services is based on the following provisions of the General Data Protection Regulation (GDPR):
- Art. 6 Abs. 1 lit. b DSGVO - Verarbeitung zur Erfüllung eines Vertrags zwischen Ihnen und unserem Auftraggeber.
- Art. 6 Abs. 1 lit. f DSGVO - Verarbeitung zur Wahrung berechtigter Interessen von uns oder unserem Auftraggeber, insbesondere zur Durchsetzung von Forderungen.
- Art. 6 Abs. 1 lit. c DSGVO - Verarbeitung zur Erfüllung gesetzlicher Pflichten.


Our activities as a debt collection service provider in Austria are based on the trade license „Inkassobüro gemäß § 94 Z 62 GewO“. These regulations govern our licensing and supervision, but do not constitute an independent legal basis for data protection.

Categories of Processed Data

In particular, we process master data such as names, addresses, and contact details, contract and claim data, payment information, and, where necessary, creditworthiness and credit agency data. We do not usually receive this data from you yourself, but from our client, who is the creditor of the claim, or from public registers, credit agencies, and other permissible sources.

Recipients of the Data

Within the scope of our activities, we only pass on personal data to recipients who are necessary for the fulfillment of the aforementioned purposes. These include, in particular, the respective client, assignee, credit agencies, third-party debtors, These include, in particular, the respective client, assignees, credit agencies, third-party debtors, residents' registration offices, courts, bailiffs, lawyers, and, if necessary, other third parties involved in the enforcement of claims

Transfer of Data to Third Countries

Data will only be transferred to countries outside the European Union or the European Economic Area if the EU Commission has issued an adequacy decision or if appropriate safeguards within the meaning of Art. 46 GDPR, such as standard contractual clauses, are in place.

Retention Period

After payment of the outstanding claim or after completion of the order for claim realization, a review will be conducted after a period of three years to determine whether the personal data is still required for legal retention obligations or other legitimate purposes. If there is no legal retention period, the data will be deleted; otherwise, it will be deleted at the latest upon expiry of the legal retention period. If there is no statutory retention period, the data will be deleted; otherwise, it will be deleted at the latest upon expiration of the statutory retention period.

Rights of Affected persons

Data subjects have the right at any time to request information about the personal data we have stored (Art. 15 GDPR), to have incorrect data corrected (Art. 16 GDPR), to request the deletion of data (Art. 17 GDPR), restrict processing (Art. 18 GDPR), receive their data in a machine-readable format (Art. 20 GDPR), object to processing (Art. 21 GDPR), and withdraw consent at any time (Art. 7(3) GDPR). Complaints about the processing of personal data can be addressed in Austria to the Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

Supervisory and Regulatory Authorities

For our activities in Austria, we hold a trade license as a "collection agency in accordance with § 94 Z 62 GewO" (Commercial Code) and are subject to the supervision of the Municipal District Office for the 6th/7th district in Vienna.

Automated Decision-Making

Automated decision-making within the meaning of Article 22 GDPR does not take place within the scope of our debt collection services.