Personal Data Policy

DIMOCO takes data protection very seriously and as such, We will process the information (including personal data) that You provide Us with utmost care and confidentiality in accordance with this Personal Data Policy for the DIMOCO Website (the “Policy”) as well as applicable laws.

This Policy provides You with the information about essential aspects of data processing at DIMOCO.

General information

The DIMOCO Website is operated by DIMOCO Payments GmbH, a company incorporated under FN 199901 y of the company register of the Regional Court of Wiener Neustadt, Austria, having its registered offices at Campus 21, Europaring F15/302, A-2345 Brunn am Gebirge, Austria. As such, DIMOCO Payments GmbH is to be seen as being the controller of any personal data processed via the DIMOCO Website.

For the purposes of this Policy:

“DIMOCO Website” shall mean all web pages accessible under the domain “dimoco.com” as presented in the relevant Terms of Use.
Any reference to “You” or “Your” shall mean the visitor of the DIMOCO Website.
Any reference to “DIMOCO”, “We”, “Us” or “Our” shall mean DIMOCO Payments GmbH.

What data will be processed?

Depending on the circumstances, the consent for processing expressed by You on the DIMOCO Website and the functions offered on the DIMOCO Website that You decide to use, the following categories of personal data might be processed:

When visiting the DIMOCO Website: The date and time of Your request/visit, the requested page(s), device information such as the type and version of Your browser, Your operating system, the type of Your device and its display resolution, the geographical location where You are visiting from, website interaction data, user behaviour and interactions, online identifiers, user IDs, advertising identifiers, Your consent status, the URL-address that directed You to the DIMOCO Website and Your IP address.
When completing a contact form: Name, salutation, contact data (such as e-mail address, phone number, etc.), Your comments and content of your message and its annexes as well as data related to the company You are representing.

The DIMOCO Website also uses small text files (cookies) that enable the storage of device-specific information on the system on Your device. Some cookies are saved on Your device and stay there until manually deleted. The cookies are used in order to recognize Your browser next time You visit the DIMOCO Website as well as to optimize its functionality, including use of third-party provider cookies as defined in section 5. below.

Please note that You can change the handling of cookies of the DIMOCO Website by use of the implemented cookie manager and/or the preference of Your browser at any time, such that You are informed in case that cookies are being used and have the possibility to allow the use thereof on a case-to-case basis. Please be advised that the deactivation of cookies could limit the functionality of the DIMOCO Website.

What is the purpose and legal basis of the data processing?

Depending on the circumstances and the functions offered on the DIMOCO Website that You decide to use, We will process the relevant personal data provided by You exclusively for following purpose(s) (the “Purpose”):

When visiting the DIMOCO Website: Presentation of the DIMOCO Website and its contents, protection of the DIMOCO Website against unlawful and criminal attacks, and gathering statistical data in order to optimize functionality of the DIMOCO Website.

When completing a contact form: Communication with You and assessment and exploration of Your request and potential business cooperation, including contacting You directly.

Unless stated otherwise in this Policy, the processing of Your data is based on Our legitimate interest (Article 6 para1 lit f GDPR), such as provision of the DIMOCO Website, marketing and contacts as well as security of network and information, or – where relevant – on Your voluntary consent given expressly for a specific Purpose (Article 6 para 1 lit a GDPR), or insofar processing oi required prior to entering into a contract (Article 6 para 1 lit b GDPR), if Your request relates to a potential business cooperation or service. We are not permitted to and shall not process any of Your personal data without legal such legal basis.

Even though the provision of certain information for the realisation of a specific Purpose might be stated as being “required”, please note that You are by no means under any legal obligation to disclose such information to Us. Please be advised, however, that the non-provision of the information stated as being “required” could have the result that We will not be able to process Your request.

How will the data be processed?

The personal data You provide Us will be kept confidential and will be processed with due care, appropriately and in a way adequate to the relevant Purpose expressly stated in this Policy. The data will be processed in compliance with applicable laws, in particular the General Data Protection Regulation (GDPR) of the EU as well as with the relevant provisions of the Austrian national law. The confidentiality and security of Your data is secured by appropriate technological and organizational means.

Who has access to Your data?

Unless otherwise specifically stated, no personal data that You provide Us for any of the Purposes stated in this Policy will be made available or transmitted to any third party without Your express permission.

Access to the data provided by You will only be granted to authorized personnel of DIMOCO or its third party partners (as stipulated below) responsible for the realisation of the relevant Purpose:

Easyname Website Hosting

In order to provide the DIMOCO Website and optimize its functionality, We cooperate with easyname GmbH, Vienna, which as an external partner for hosting services has technical access to the data processed via the DIMOCO Website, which is required in order to provide the DIMOCO Website in Our legitimate interest (Art 6 para 1 lit f GDPR).

Borlabs Cookie & Consent Manager

The DIMOCO Website uses Borlabs Cookie & Consent Manager (“Borlabs Cookie”), which sets a technically necessary cookie (borlabs-cookie) to store Your cookie consent expressed on the DIMOCO Website, as required under current data protection laws interest (Art 6 para 1 lit c GDPR). Borlabs Cookie stores the consent You gave when You entered the website. If You wish to revoke this consent, delete the cookie in Your browser. When You re-enter/reload the website, You will be asked for Your cookie consent again. You can also change the relevant cookie settings in Borlabs Cookie manager at any time. Borlabs Cookie may process certain non-personal usage data to ensure the quality, security and further development, details of which can be fund here:

https://borlabs.io/borlabs-cookie/telemetry/

Wordfence

The DIMOCO Website uses Wordfence Security Plugin and web application firewall to protect the DIMOCO Website from unwanted access, malware, cyberattacks and exploits, provided by Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA. To do so, Wordfence checks and eventually blocks DIMOCO Website access based on Wordfence database entries. This is technically necessary in order to protect the DIMOCO Website. The use of Wordfence is based on Our legitimate interest (Art 6 para 1 lit f GDPR) to establish effective protection of the DIMOCO Website against malicious access. Any data transmission in this regard to Wordfence is based on the standard contractual clauses of the EU Commission. Details on processing of data by the third-party-provider can be found here: https://www.wordfence.com/help/general-data-protection-regulation/.

Matomo

The DIMOCO Website uses Matomo to analyze traffic and collect anonymous usage statistics for the DIMOCO Website in order to help Us to improve Your user experience. We process the data specified in section 2. “What data will be processed” above. Matomo is self-hosted by Us (“on premises”). The information gathered is not at any point used in a way that could allow an identification of specific users. All data is only processed by Us and Our web hosting platform and no information is forwarded to third parties. The use of Matomo is based on Our legitimate interest (Art 6 para 1 lit f GDPR) to provide and optimize the DIMOCO Website and its structure.

Google Tag Manager

The DIMOCO Website uses Google Tag Manager, a tag management system that allows Us to manage website tags (i.e. code snippets for tracking and analytics) through a single, centralized interface. Google Tag Manager does not set cookies or collect any personal data itself or for its own use; it only serves to trigger other third party tools, subject to Your consent, if necessary, and stores records about the triggering of website tags. We have implemented the necessary configurations within Google Tag Manager to ensure that tags which process personal data or set non-essential cookies are only activated with Your consent, as managed through Our consent management platform.

Google Tag Manager is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The use of Google Tag Manager is based on Our legitimate interest (Art 6 para 1 lit f GDPR) and technically necessary in order to provide the DIMOCO Website and the functionalities triggered by it. Details on processing of data by the third-party-provider can be found here: https://support.google.com/policies/contact/general_privacy_form and https://support.google.com/tagmanager/answer/7207086

Google Analytics v4 (Consent Mode)

The DIMOCO Website uses Google Analytics v4 (Consent Mode) to measure and analyze website traffic and visits and compile reports and usage statistics for the DIMOCO Website in order to help Us to improve Your user experience based on such analyses. We process the data specified in section 2. “What data will be processed” above. The DIMOCO Website implemented Google Consent Mode v2, which adapts how Google services collect and process data depending on Your consent choices. When You do not give consent for statistic or marketing cookies, Google tools operate in a restricted mode and collect only aggregated and anonymized information. This allows us to measure website performance in a privacy-compliant way while respecting Your preferences.

Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The use of Google Analytics is based on Your consent (Art 6 para 1 lit a GDPR) when operating under consent mode or Our legitimate interest (Art 6 para 1 lit f GDPR) when operating in restricted mode to measure the use of the DIMOCO Website in order to optimize the DIMOCO Website and its structure. You may revoke this consent at any time via Our cookie settings.

With Your Consent, also data transfer to third countries outside the EEA is possible. Data transfer to the umbrella company of the third-party-provider Google LLC and its subsidiaries in the USA is based on the standard contractual clauses of the EU Commission and Google LLC is certified under the EU-US Data Privacy Framework.

Details on processing of data by the third-party-provider can be found here: https://support.google.com/policies/contact/general_privacy_form and https://support.google.com/analytics/answer/6004245?hl=en

Microsoft Clarity

The DIMOCO Website uses Microsoft Clarity to measure and analyze website usage and interactions by visitors to understand how users interact with the DIMOCO Website and help improve the DIMOCO Website’s structure, fix errors, and optimize the user experience. Microsoft Clarity is operated by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland and compiles website usage data, such as mouse movements and clicks, scrolling activity, input interactions (excluding typed text), IP address, date and time of visit, Unique User ID and Session ID (via cookies), device and browser information and referrer URL, in order to generate the respective reports and create “heatmaps” and “session recordings” of visits to allow us to see how a user interact with the DIMOCO Website.

The use of Microsoft Clarity is based on Your consent (Art 6 para 1 lit a GDPR). Microsoft Clarity will not collect website usage data unless consent is given for the relevant cookie category (Statistics/Analytics). You may revoke this consent at any time via Our cookie settings.

Your data may also be transferred to Microsoft Corporation in the USA. Microsoft is certified under the EU-US Data Privacy Framework (DPF), ensuring a level of data protection compliant with EU standards.

Details on processing of data by the third-party-provider can be found here:

https://privacy.microsoft.com/privacystatement and https://learn.microsoft.com/en-us/clarity/faq#privacy

Leadfeeder – B2B Lead Generation and Analytics

The DIMOCO Website uses the lead generation service “Leadfeeder” provided by Dealfront Group GmbH, Durlacher Allee 73, D-76131 Karlsruhe, Germany, to help Us identify which companies visit the DIMOCO Website to allow us to optimize Our B2B marketing strategies and improve the quality of the DIMOCO Website. Leadfeeder collects certain data of website visitors, such as IP Address, date and time of visit, referrer URLs, device and browser information, domain name and pages visited on the DIMOCO site and duration, which are then compared and matched against a global database of company IP-addresses, if possible, to create a report. Leadfeeder identifies companies, not private individuals, and thus does not process personal names, email addresses, or phone numbers of private visitors.

We have also integrated Leadfeeder with Our CRM system (Salesforce) and Our analytics tool (Google Analytics) to allow us to correlate website visits with existing business contacts, analyze traffic sources and advertisement conversion rates and optimize sales processes.

The use of Leadfeeder and the storage of the associated cookies is based on Your consent (Art 6 para 1 lit a GDPR). You may revoke this consent at any time via Your cookie settings.

No data will be processed outside the EU. Details on processing of data by the third-party-provider can be found here: https://www.dealfront.com/privacy-center/ and https://www.dealfront.com/privacy-policy/

Google Ads Conversion Tracking

The DIMOCO Website uses Google Ads and its conversion tracking feature to measure the success of Our advertising measures on the Google Network (e.g., in search results, on YouTube, or on third-party websites), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If You reach the DIMOCO Website via an advertisement placed by Google, Google Ads sets a cookie or comparable recognition feature on Your device to allow us to recognize that You clicked on an ad and were redirected to the DIMOCO Website. We do not receive any information that personally identifies You. Instead, we receive aggregated statistical reports from Google generated based on data like IP address, cookie identifiers, Google click identifier, browser and device information and page visits/actions, that tell us which ads were effective.

The processing of Your data takes place solely on the basis of your consent (Art 6 para 1 lit a GDPR). You can revoke this consent at any time via the Cookie Manager on the DIMOCO Website or by deleting the relevant cookie.

The data may be transmitted to Google LLC in the USA. Google participates in the EU-US Data Privacy Framework (DPF), which ensures that data transferred to the US complies with European data protection standards. Details on processing of data by the third-party-provider can be found here: https://policies.google.com/technologies/ads

Google reCAPTCHA

The DIMOCO Website uses the reCAPTCHA service provided by Google to ensure the security of the DIMOCO Website and to protect forms (such as the Contact Form or Carrer Portal Form) from abuse, automated spying, and spam by automated bots. reCAPTCHA is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA analyzes the behavior of the website visitor based on various characteristics such as IP address, duration of the stay on the website, mouse movements made by the user and device and browser information to determine whether the data entry is being made by a human or by an automated program, once the website visitor enters a part of the DIMOCO website with reCAPTCHA enabled. The data collected is forwarded to Google for analysis.

The use of reCAPTCHA is based on Our legitimate interest (Art 6 para 1 lit f GDPR) in protecting its web offerings from abusive automated crawling and spam.

Cloudflare Content Delivery Network (CDN)

The DIMOCO Website uses the “Cloudflare” Content Delivery Network (CDN) service, operated by Cloudflare, Inc., located at 101 Townsend St., San Francisco, California 94107, USA, in order to increase the availability, loading speeds and security of the DIMOCO Website by technically routing information requested from the DIMOCO Website by Your browser via the Cloudflare CDN and its international and regional distribution servers in Your area, where parts of the DIMOCO Website are cached. In providing the service, Cloudflare may analyze traffic between the DIMOCO Website and Your browser (e.g. Your IP-address, routing and traffic data, performance data, browser data) to act as content distributor and efficiently provide the DIMOCO Website and Cloudflare also filters traffic for potentially malicious access.

The use of Cloudflare is based on Our legitimate interest (Art 6 Para 1 lit f GDPR) in providing the DIMOCO Website as fast, error-free and secure as possible. Data transfer to the USA is based on the standard contractual clauses of the EU Commission and Cloudflare is certified under the EU-US Data Privacy Framework. Details on processing of data by the third-party-provider can be found here: https://www.cloudflare.com/privacypolicy/.

ShareThis

The DIMOCO Website uses ShareThis plugin as bookmarking service and tool for sharing links to the DIMOCO Website to other websites, online services or social networks, provided by ShareThis Inc., 3000 El Camino Real, Palo Alto, CA, USA. When visiting the DIMOCO Website ShareThis is informed of Your IP address and that You have visited the DIMOCO Website. If You are signed in with the receiving online service when using ShareThis, the visit to the DIMOCO Website can be allocated to Your user profile on such service. ShareThis itself obtains no personal data. It does, however, compile anonymised usage statistics about the shared content. This data is erased by ShareThis at regular intervals. Details on processing of data by the third-party-provider can be found here: https://sharethis.com/privacy/. The use of ShareThis is based on Your consent (Art 6 para 1 lit a GDPR).

External Links

The DIMOCO Website may also include links to external websites, such as YouTube (www.youtube.com) or LinkedIn (www.linkedin.com). Clicking on and following such links results in You being forwarded to the websites of the respective third-party provider, that You are using subject to their respective terms of service and data privacy policies. We have no control over the functions and data processing activities of such third-party websites, nor over the extent of the personal data collected thereby. Details on their data processing as well as Your rights in this regard and Your browser setting options may be obtained from the respective policies available on the respective third-party websites.

Where it is necessary in order to respond to a request You made via the DIMOCO Website, Your personal data might be transferred to DIMOCO’s affiliated companies (e.g. where Your request can be addressed more accurately by such affiliated company).

When completing a contact form on the DIMOCO Website, Your associated data will be shared with the relevant department in DIMOCO and stored in DIMOCO’s CRM software, which is currently operated by salesforce.com Germany GmbH, and data stored in Salesforce cloud data centres in Germany or Sweden, Europe. The use of Salesforce is based on Our legitimate interest (Art 6 Para 1 lit f GDPR) in utilizing a state-of-the-art CRM standard software. Details on processing of data by the third-party-provider can be found here https://www.salesforce.com/company/legal/customer-agreements/.

How long will Your data be processed?

Depending on the circumstances and the functions offered on DIMOCO Website that You decide to use, Your relevant personal data will be stored for the following period:

When visiting the DIMOCO Website: All data will be automatically erased 26 (twenty-six) months following Your visit.

When completing a contact form: All data provided by You will be automatically erased from Our database 6 (six) months following their receipt by DIMOCO. This period can be extended accordingly, if such extension is necessary for maintaining contact between You and DIMOCO or otherwise required by the purpose of the communication or if there is an ongoing business relationship.

- Third party recipients (see section 5.) are processed for the duration given in their respective privacy policy.

The legal basis of processing and Your permission and rights

You should know that You have the following rights with respect to the personal data that You provide Us:

You have the right to limit or withdraw the consent You gave Us to process Your data and/or request the deletion thereof.
You have the right to request Us to inform You about the personal data We have stored about You.
You have the right to request Us to amend any incorrect data that We have stored about You.
You have the right to object grounds relating to Your particular situation to processing of data based on Art 6 para 1 lit f GDPR.
You have the right to data portability, which means that upon request, We will transfer Your data to a third party that You nominate.
You have the right to lodge a complaint to the Austrian Data Protection Authority (Datenschutzbehörde) in the event that You are of the opinion that a breach of data security has occurred.

You can exercise the aforementioned rights at any time.

If You have any questions relating to data protection at DIMOCO, please do not hesitate to contact Us:

DIMOCO Payments GmbH

Campus 21, Europaring F15/302

2345 Brunn am Gebirge, Austria

E-mail: [email protected]

Telephone: +43 1 33 66 888 – 0