The Federal Office for Consumer Health (BAVG) handles your personal data very carefully and the following data protection information is intended to give you an overview of how your data is processed and what measures we take to protect it. We therefore process your data exclusively on an existing legal basis (in particular DSGVO, DSG, TKG 2003, GESG, contract, legitimate interest, consent).

The data controller is the Federal Office for Consumer Health, Spargelfeldstraße 191,1220 Vienna.

The data protection officer can be contacted at datenschutz@bavg.gv.at .

The legal framework is laid down in the Health and Food Safety Act (GESG), Federal Law Gazette I No. 63/2002 as amended. In fulfilling its legal tasks, the BAVG is entitled to process personal data and, in addition, the rights and obligations pursuant to Art 13 (duty to inform if personal data are collected from the data subject), Art 14 (duty to inform if personal data are not collected from the data subject), Art 18 (right to restrict processing) and Art 21 (right to object) of the GDPR are excluded.

Personal data is data and information that is traceable to an identified or identifiable individual. Examples: Name, address, telephone number, email, profession, education, health data, hobbies, IP address, etc.

Depending on the specific processing purpose, in particular inventory data, customer data, contact data, order data, health data, communication data and image data are processed.

The following legal bases apply to the processing of personal data:

a. Legal basis

The tasks of the BAVG are defined in § 6c GESG. In the performance of these tasks, the BAVG is entitled to process personal data pursuant to section 9 para 7 GESG.

In addition, personal data are processed on the basis of the material laws assigned to the BAVG for enforcement or enacted on the basis of these material laws.

This applies in particular to foodstuffs and veterinary legislation.

Legal basis: Art. 6 para. 1 lit c DSGVO

b. Consent

The processing of personal data is also lawful if the data subject has given his or her legally valid consent. On the basis of granted consent, we process personal data, among other things, to send newsletters or process your contact requests. Consent granted can be revoked informally at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Legal basis: Art. 6 para 1 lit a and Art. 9 para 2 lit a DSGVO

Personal data may be passed on to authorities and international organisations, in particular on the basis of relevant legal obligations, as well as to service providers for the performance of contracts. In all cases, we ensure that a uniform level of data protection is guaranteed.

The relevant provisions authorizing the BAVG with regard to the transfer of personal data can be found in the relevant material laws.

The BAVG provides for technical and organisational measures in the following areas, among others: Access control, system access control, data access control, data transmission control, ensuring availability and resilience of the system, control procedures to ensure the security of processing, and personnel (training) measures.

In principle, you have the following rights:

• Right to information according to Art. 15 DSGVO
• Right to rectification according to Art. 16 DSGVO
• Right to erasure ("right to be forgotten") according to Art. 17 DSGVO
• Right to restriction of processing according to Art 18 DSGVO
• Right to data portability according to Art 20 DSGVO
• Right to object according to Art 21 DSGVO

The following restriction of data subject rights are provided for by law:

In fulfilment of the tasks according to § 6c GESG, the rights and obligations according to Art 13, 14, 18 and 21 Data Protection Regulation are excluded by law with regard to the processing of personal data according to para 9 (7).

Insofar as the personal reference is indispensable for the achievement of the purpose in the case of further processing of personal data for scientific or historical research purposes, the rights of the data subjects pursuant to Article 15 (right of access), Article 16 (right of rectification), Article 18 (right to restriction of processing) and Article 21 (right to object) may be excluded by the FADP, insofar as these rights would make the achievement of the specific purposes impossible or seriously impair them.

Personal data is generally deleted or pseudonymised in accordance with a deletion concept after the purpose has been fulfilled or the legal retention period has ended.

The obligation to delete does not apply if processing is necessary for the following purposes:

• To exercise the right to freedom of expression and information,
• To comply with a legal obligation
• For reasons of public interest in the area of public health in accordance with Art 9 (2) (h) and (i) and Art 9 (3) DSGVO.
• For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Art 89 (1) DSGVO, insofar as the right referred to in (1) is likely to make it impossible or seriously impair the attainment of the objectives of this Agreement, or
• For the assertion, exercise or defence of legal claims.

If you contact us by form on the website or by e-mail, the data you provide will be stored and processed for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.

Questions regarding data protection law can be directed to datenschutz@bavg.gv.at.

Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause any damage. We use cookies to make our offer user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognise your browser on your next visit.

It is possible to object to the collection, processing and use of the aforementioned data for the aforementioned purposes by clicking on the link below. This will cause "webstatistik.ages.at" to set a cookie called "piwik_ignore". As long as the data storage is objected to, this cookie may not be deleted. If you use a different computer or a different web browser, you must complete the deactivation procedure again.

If you do not wish to do this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases.

When deactivating cookies, the functionality of our website may be limited.

These cookies are needed for the basic functions of the site to work correctly.

Cookie Manager To show/hide the cookie consent message. Provider: bavg Cookie name: supi Runtime: 1 year

Cookies for statistics Statistics cookies anonymize your data and use it. This information helps us learn how visitors use our website. Matomo Provider: Matomo Cookie name: _pk_ses (persistent cookie, lifetime: 30 min (will be renewed automatically)); _pk_id (persistent cookie, lifetime 1 year), MATOMO_SESSID.

Statistik-Cookies anonymisieren Ihre Daten und verwenden sie. Diese Informationen helfen uns zu erfahren, wie Besucher unsere Website nutzen.
Matomo
Anbieter: Matomo
Cookie-Namen: _pk_ses (permanenter Cookie, Lebensdauer: 30 min (wird automatisch verlängert)); _pk_id (permanenter Cookie, Lebensdauer 1 Jahr), MATOMO_SESSID

Our website uses functions of the Matomo web analysis tool. Cookies are used for this purpose, which enable an analysis of the use of the website by your users. The information thus generated is transferred to the provider's server and stored there.

You can prevent this by setting your browser so that no cookies are stored or by clicking on the link below.

BAVG does not engage in active profiling for automated decision making.

We reserve the right to adapt this data protection information. The currently valid version is available at www.bavg.gv.at/datenschutzerklärung.

Austrian Data Protection Authority Barichgasse 40-42, A-1030 Vienna Telephone: +43 1 52 152-0 E-mail:dsb@dsb.gv.at

You have the option to prevent actions you take here from being analyzed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving the usability for you and other users.