Information about data use pursuant to the General Data Protection Regulation (GDPR):

Mandatory information according to Art 13 and 14 GDPR of a purely informative nature.

Status: September 2024

1. What information is available on this page?

Österreichische Post AG (hereinafter referred to as "Austrian Post", "we", "us") processes your personal data in full compliance with the provisions of data protection law, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act and all other applicable laws.

In this document, you will find information about data processing performed in relation to our marketing and advertising activities. This document includes the following sections:

  • To whom is this information addressed? (item 2)
  • Who is responsible for the processing of your data? (item 3)
  • Information about possible data processing (item 4), in particular
    • Advertising activities and sending newsletters (item 4.1)
    • E-mail marketing and addressed leaflet of choice (item 4.2)
    • Data updating (item 4.3)
    • Info.Mail select (IPS) & Branchen.Mail select (BMS) (item 4.4)
    • Sweepstakes for Austrian Post customers (item 4.5)
    • Market research (item 4.6)
  • With whom are we allowed to share your data? (item 5)
  • Automated decision-making and profiling (item 6)
  • What rights do you have? (item 7)
  • How can you get in touch us? (item 8)

Information about the use of cookies on our websites is available at Data protection.

You will find the general data protection policy with links to information about specific Austrian Post products or services such as letter and parcel delivery, customer support and administration or business customer relations in the selection box on the right-hand side. If you need printed copies of the information provided on this page or on additional pages, please contact the staff at our service locations.

2. To whom is this information addressed?

This privacy policy is addressed to all our customers whom we contact as part of our marketing and advertising activities or whose data we handle in the process.

3. Who is responsible for the processing of your data?

The responsible party for data processing described on this page is

Österreichische Post AG
Rochusplatz 1
1030 Vienna
Austria

4. Information about possible data processing

4.1. Advertising activities and sending newsletters
We process your data within the scope of advertising activities and/or newsletter sending (private clients) for direct marketing purposes in order to be able to offer maximum benefit from our products and services.

Which of your data can we process for this purpose?
For this purpose, we may process the following data:
contact data, personal master data, address data, marketing data, usage data, identification data

What is the legal basis for this processing?
The legal basis for this processing is

  • our legitimate interest (Art. 6 (1) (f) of the GDPR and TKG) in advertising activities and sending newsletters
  • Your consent (Art. 6 (1) (a) of the GDPR), which we obtain as necessary in accordance with the law. You can revoke this consent at any time without giving reasons with future effect.

How long can your data be stored?
Your data used for the purpose of advertising measures and/or sending newsletters (private customers) depending on the category in the case of unconfirmed advertising/newsletter registration will be deleted after a maximum of 2 weeks, immediately after your revocation or objection or after a maximum of 3 years from the last contact with you.

With whom are we allowed to share your data?
For the purpose of advertising activities and newsletter sending, your data may be transmitted to the following categories of recipients: 

Processors

Other information about this processing:
You are under no contractual or legal obligation to provide your data for the purpose of advertising and/or newsletter sending (private clients). If you do not provide the aforementioned information, we will not be able to send you information about our products and services.

Please note that advertising measures and newsletter mailing are based on the results of our customer analysis. As a private customer, you can find further information on this data processing under item 4.4. of the specific data protection policy for customer support and administration, as a business customer under item 4.1. of the specific data protection policy business customer administration, products and services.

4.2. E-mail marketing and addressed flyer of choice
We process your data within the scope of our e-mail marketing service and the addressed flyer of choice for the implementation (collection, administration, sending, evaluation) of direct marketing campaigns with exciting information e.g., from the areas of retail, household, technology, automotive, fashion, lifestyle, etc.

Which of your data do we process for this purpose?
For this purpose, we process the following data: 
address data, identification data, contact data, marketing data, usage data, personal data

What is the legal basis for this processing?
The legal basis for this processing is your consent (Art. 6 (1) (a) of the GDPR), which we obtain as necessary in accordance with the law. You can revoke this consent at any time without giving reasons with future effect.

How long will your data be stored?
Your data collected for these purposes will be deleted no longer than 3 years after the last direct marketing campaign or within 3 days after you unsubscribe/cancel, depending on the category.

For these purposes, your data will be transmitted to the following recipients / categories of recipients:

Processors
Leaflet senders selected by you

Other information about this processing:
You are under no contractual or legal obligation to provide your data for this service.
If you do not provide the aforementioned data, we will not be able to deliver the aforementioned services.

4.3. Data updating
We process your data within the scope of Section 151 of the Austrian Industrial Code (activity as an address broker and direct marketing company) for the preparation and implementation of third-party marketing campaigns. With these activities, Austrian Post supports businesses in their active and targeted client communication processes.
However, the data can also be bought from other address brokers and direct marketing businesses. In that case, you have received information from the data collector about the planned use of data.
The names and addresses determined in this process can then be passed on to advertising companies for marketing purposes in accordance with Section 151 of the Austrian Industrial Code.
In addition, we process data from the Robinson list of the Austrian Federal Economic Chamber (WKÖ) to ensure that data of persons who are registered on this list are not passed on to third parties for marketing purposes.

Which of your data do we process for this purpose?
For this purpose, we process the following data:

address data, identification data, personal master data, marketing data

What is the legal basis for this processing?
The legal basis for processing your data for the purpose of data updating is our legitimate interests (Art. 6 (1) (f) of the GDPR) as an address broker and direct marketing company, defined by Section 151 of the Austrian Industrial Code 1994 (concerning the exercise of the trade of an address broker and direct marketing company), according to which data may be processed by us for marketing purposes under the conditions specified therein.

How long will your data be stored?
For the purpose of data updating, your data will be processed no longer than until another address broker objects to the processing or requests deletion (according to Art. 19 of the GDPR).

For the purpose of data updating, your data may be transmitted to the following recipients:

Processors

In addition, as part of our address broker activities, we may forward your data to advertising companies. These include companies that provide mail-order service or retail services, financial service providers and insurances, IT and telecommunication companies and utilities as well as associations such as charities and NGOs.

4.4. Info.Post select (IPS) & Branchen.Mail select (BMS)
We process address data as part of our products IPS and BMS in order to offer our business clients partially addressed advertising items that allow them to acquire new clients and reduce wastage. Data will never be matched with a natural person.

Which of your data do we process for this purpose?
For this purpose, we process the following data:
address data, marketing data

What is the legal basis for this processing?
The legal basis for this processing is our legitimate interest (Art. 6 (1) (f)) to sufficiently anonymise address data for marketing purposes.

How long will your data be stored?
The marketing-ready address data are generated monthly for the purpose of IPS/BMS postings lists and deleted immediately thereafter.

For the purpose of Info.Post select & Branchen.Mail select, your data may be transferred to the following recipients/categories of recipients:

Processors

4.5. Sweepstakes for Austrian Post customers
We may process your data for the purpose of conducting sweepstakes for Austrian Post customers provided that you participate in them. 

Which of your data can we process for this purpose?
For this purpose, we process the following data:
Address data
Identification data
Contact information
Personal master data

What is the legal basis for this processing?
The legal basis for this processing is your consent to the conditions of participation in the sweep-stakes in question and the resulting contract (Art. 6 (1) (b) of the GDPR).

How long will your data be stored?
For the purpose of sweepstakes for postal customers, your data may be stored for up to 3 months after a valid winner has been reported back. 

With whom are we allowed to share your data?
For the purpose of conducting sweepstakes for Austrian Post customers, your data may be transferred to the following categories of recipients:

Processors
Affiliated group companies

Other information about this processing:
You are under no contractual or legal obligation to provide your data for the execution of sweep-stakes for Austrian Post customers. If you do not provide the aforementioned data, you will not be able to participate in sweepstakes for Austrian Post customers.

4.6. Market research
We may process your data as part of market research activities, whose results are provided by our market research service partners in an anonymised form and broken down by target group.

Which of your data can we process for this purpose?
For this purpose, we may process the following data:
personal master data, address data, marketing data

What is the legal basis for this processing?
The legal basis for this processing is

  • your consent (Art. 6 (1) (a) of the GDPR), which we obtain as necessary in accordance with the law.

How long can your data be stored?
Personal data are only available to the market research company. Austrian Post receives the market research results in an anonymised form and broken down by target groups. The listed deletion periods therefore only refer to the contents of the anonymised results.

With whom are we allowed to share your data?
For market research purposes, your data may be transmitted to the following categories of recipients:

Processors (market research companies)

5. With whom are we allowed to share your data?

To learn with which recipient categories we are allowed to share your data, please see the section "Information about possible data processing". A detailed description of Austrian Post recipients and/or categories of recipients is available under item 5 of our general data protection policy: post.at/Datenschutz.

6. decision-making and profiling

As a general rule, no automated decision-making or profiling pursuant to Article 22 (1) and (4) GDPR is carried out in data processing at Austrian Post.

7. What rights do you have?

You have the right of access to your personal data that we process as a controller. For more information, please refer to Article 15 of the GDPR.

Under certain conditions, you may request the restriction of processing as well as the rectification and deletion of your personal data. For more information, please refer to Articles 16 to 19 of the GDPR.

In addition, under certain conditions, you also have the right to data portability, meaning that we would give you all personal data you have disclosed to us in a structured, standard, and machine processable format. For more information, please refer to Article 20 of the GDPR.

As a data subject, you have the right to object to the use of your data if the processing serves the purpose of direct marketing. In addition, you have the right to object at any time to the processing of your data carried out in the legitimate interests of Austrian Post or third parties if reasons arise from your specific circumstances. For more information, please refer to Article 21 of the GDPR. The processing of your personal data may be based on your consent pursuant to Art. 6 (1) (a) of the GDPR. You can revoke this consent at any time without giving reasons with future effect; until then, we will process your data lawfully.

For information about the legal basis of our data processing, please see item 4 "Information about possible data processing").

Would you like to exercise your rights or do you have further questions, suggestions, or feedback? In this case, please go to item 8 ("How can you get in touch with us?") and contact the indicated person.

In addition, you have the option of filing a complaint with the Austrian Data Protection Authority:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Austria

Telephone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at

8. How can you get in touch with us?

Would you like to exercise your rights or do you have further questions, suggestions, or feedback?
To contact Austrian Post's data protection officer or to exercise your rights, please use one of the contact options listed under item 8 of our general data protection policy: post.at/Datenschutz.