EVALUS
Evalus Arbeitssicherheit und Gesundheitsschutz GmbH, Leobersdorfer Straße 26, 2560 Berndorf, Austria. For privacy enquiries: office@evalus.at, telephone +43 2672 20161.
The web server processes connection data needed to provide the website. This may include IP address, date and time, requested address, transferred data volume, status messages, browser and operating system information. These data support delivery, stability, troubleshooting and prevention of misuse. The legal basis is our legitimate interest in a secure website (Article 6(1)(f) GDPR).
The website is hosted by easyname GmbH, Canettistraße 5/10, 1100 Vienna, Austria. The hosting provider processes data for technical delivery. Logs should be retained only as long as required for these purposes; data relating to a specific security incident may be needed until the incident is resolved.
When you contact us by form, email or telephone, we process your contact details and enquiry to respond. For contractual enquiries the legal basis is Article 6(1)(b) GDPR; for other enquiries it is our legitimate interest in handling your message under Article 6(1)(f) GDPR. Fields marked * are required for handling the form. We need a means of contacting you to reply.
We retain enquiries for handling, subsequent correspondence and the protection of legal claims where necessary. Statutory retention obligations take precedence. Using the form is optional; you may also contact us by email or telephone.
To arrange and fulfil bookings and assignments, we process names, contact and billing details, selected services, dates and necessary participant or qualification information. The legal bases are Article 6(1)(b) GDPR and legal obligations under Article 6(1)(c). Where an employer or another person books for participants, we obtain necessary information from that person; organising and documenting participation may additionally rely on our legitimate interest under Article 6(1)(f).
EVALUS remains the contractual partner and invoicing party for courses delivered by external institutes. Necessary participant details are shared with the delivering institute identified in the course offer to organise and deliver training and document qualifications. A general partnership alone does not justify sharing personal data.
Bookings are managed through WordPress, WooCommerce and course management software on our web server. Installing this software does not automatically transmit booking data to its developers. Payment is by invoice; this website does not collect credit card details for invoice payments.
We deliver online courses mainly through Microsoft Teams and, in some cases, Zoom. The platform is specified in the joining instructions. Depending on the functions used, participation involves processing your name or display name, email address, connection and device data, and audio, video, chat or screen content you share. Other participants may see your display name and shared content. The purpose is to deliver the booked online training. The legal basis is Article 6(1)(b) GDPR; for employer-booked participation, our legitimate interest in delivering the training under Article 6(1)(f) GDPR may also apply.
The providers are Microsoft (for customers in the European Economic Area, in particular Microsoft Ireland Operations Limited) and Zoom Communications, Inc. Depending on the platform, contractual arrangement and functions used, processing may take place outside the European Economic Area. The providers describe their processing, recipients and transfer arrangements in the Microsoft privacy statement and the Zoom privacy statement. Booking a course alone does not authorise recording; any intended recording, its purpose and applicable legal basis must be communicated separately in advance.
The platform evalcard.com is operated by EvalCert GmbH, Leobersdorfer Straße 26, 2560 Berndorf, Austria, company register number FN 673183 a, Regional Court of Wiener Neustadt. For services including EVALCARD, EVALUS sends the relevant participants’ first name, last name, date of birth and email address to EvalCert to identify and administer their training record. Where necessary for the agreed service, processing relies on Article 6(1)(b) GDPR; for employer bookings it serves the legitimate interest in correctly identifying and documenting qualifications under Article 6(1)(f) GDPR.
In future, participants are expected to enter these details directly on evalcard.com. In that workflow, EvalCert receives the information directly from participants rather than through a transfer of those entries by EVALUS. EvalCert’s privacy information on the platform also applies to processing there. This planned self-registration has not yet generally replaced the transfer process described above.
The online withdrawal function processes your name, contract identification, email address and receipt timestamp to handle and document the declaration and issue the legally required receipt (Article 6(1)(b) and (c) GDPR). The declaration is stored as evidence. You do not need to state a reason.
Access is limited to people and providers needing the data for their tasks, including hosting and IT providers, relevant training partners, providers of the payment method you select and, where necessary, tax or legal advisers and authorities. Providers are engaged under arrangements reflecting their actual roles.
Invoices and tax-relevant business records must generally be retained for seven years, or longer during relevant proceedings. Other data are deleted or anonymised when their purpose ends and no retention obligation or legitimate evidential need remains. Qualification records may be needed for longer to document training. Indefinite retention of all enquiries is not intended.
Language selection uses the page address. Shopping carts, bookings and customer accounts may use strictly necessary cookies and session storage, including to associate a cart or maintain a secure login. Necessary storage is governed by section 165(3) of Austria’s Telecommunications Act 2021; subsequent processing relies on Article 6(1)(b) or (f) GDPR.
The new website is designed without analytics or advertising tracking. Maps and social networks are offered as external links. You visit the provider only when following a link, at which point that provider’s privacy information applies. Additional non-essential services may be loaded only after valid consent where required.
Subject to statutory conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation; you may object to direct marketing at any time. You can withdraw consent prospectively at any time without affecting the lawfulness of earlier processing.
Contact office@evalus.at to exercise these rights. If your identity is uncertain, we may request information necessary to verify it. You may also complain to a supervisory authority, including the Austrian Data Protection Authority.
The website functions described here do not provide for solely automated decisions producing legal or similarly significant effects.