We are one of the largest Austrian providers of top-up vouchers. You can use the products we mediate through numerous distribution partners or our website dcom.at (our “Website”). In order for you to use our services, we need to process certain personal data about you. The protection of your data and the transparency of our data processing are very important to us. This document describes the data processing activities we conduct so that you can use our services in the usual quality.

We use the following data:

• Your first and last name, as well as your IBAN and BIC if you have paid via EPS (payment data).
• Your mobile phone number.
• Your email address.
• Your order information (including the type and quantity of the ordered product, order time, and payment method used).
• Your IP address.

The data entered by you for the payment of the ordered products (e.g., credit card or account information) is processed exclusively by our respective payment service provider, and we do not have access to it.

Data processing on behalf of the user:

Even when we engage a data processor, we remain responsible for the protection of your data. We only use data processors outside the European Union if there is an adequacy decision by the European Commission for the respective third country or if we have agreed on appropriate guarantees or binding internal data protection regulations with the data processor.

We delete:

• Your mobile phone number, email address, payment data, and order information according to the Austrian Commercial Code (UGB) and Federal Fiscal Code (BAO) seven years after the completion of your order.
• Your IP address three years after the completion of your order.

There is the possibility that instead of deletion, data anonymization may be carried out. In this case, any personal reference is irretrievably removed, and, therefore, data protection deletion obligations are also waived.

Processing of your data:

We use your mobile phone number, email address, payment data, and order information to carry out the delivery of the mediated product through the channel you have chosen. In case of any issues with the transaction, we can also contact you through these channels.

If you have obtained products through our website dcom.at, we also store your IP address from our legitimate interest in preventing fraud or misuse of our services.

The above-mentioned processing of your data is necessary for providing our services. If you do not provide us with this data or provide it incompletely, we may not be able to fully fulfill our contractual obligations to you or may be unable to enter into a contract with you.

We also process your order information internally based on our legitimate interest in understanding how our customers use our services, so that we can continuously improve and expand them. This helps us tailor the information and offers sent to you (if you have consented to such communication) to better suit your needs.

If you have given us the appropriate consent, we process your data in a way that allows us to:

• Provide you with information about our services or services with additional benefits, as well as products and services of third parties until revocation. We use the following communication channels if you have provided them: phone, email, SMS.

Please note: You can revoke consents given to us at any time. Simply use the contact options mentioned on our websites. Revoking a given consent does not affect the fulfillment of our contractual obligations. If you revoke your consent, we will no longer use your personal data for the purposes mentioned.

Use of cookies on our websites:

Cookies are used on our website. Cookies are small text files that are placed on the device and recognize a user when they revisit the site. We use cookies to tailor our offerings to your needs, facilitate your use of our services, and analyze how our services work and are used. You can make settings in your browser to control the use of cookies, such as requiring your consent before using a cookie or blocking cookies altogether. However, our services will only function properly if the use of cookies is not disabled.

Google Analytics:

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies,” which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. If IP anonymization is activated on this website, your IP address will be truncated within member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be sent to a Google server in the US and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services regarding website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. You can prevent the storage of cookies by setting your browser software accordingly; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google from collecting and processing data generated by the cookie about your use of the website (including your IP address) by downloading and installing the browser plug-in available at the following link. If there is no add-on support for your browser, you can set a cookie to prevent tracking. This website uses Analytics features for remarketing, reports on impressions in the Google Display Network, integration of DoubleClick Campaign Manager, Google Analytics reports on performance by demographic characteristics and interests. You can disable Google Analytics for display advertising and customize the ads in the Google Display Network by accessing the ad settings.

Facebook conversion:

Our website www.dcom.at uses Facebook conversion, further details of which can be found at https://de-de.facebook.com/business/help/460491677335370

You can exercise the following rights regarding the processing of your data:

Right to information: You can request confirmation from us as to whether and to what extent we process your data. To do this, simply use our contact options: DCOM Distribution GmbH, Maria-Theresien-Straße 19, 1090 Vienna or our contact options on our website. Please sign personally and enclose a legible copy of a valid photo ID with a signature.

Right to correction: If we process your personal data that is incomplete or incorrect, you can request their correction or completion from us at any time. Simply use our contact options on our websites.

Right to deletion: You can request the deletion of your personal data from us if we process it unlawfully or if the processing disproportionately interferes with your legitimate protection interests. Please note that there may be reasons that preclude immediate deletion, such as legally regulated retention obligations. Simply use our contact options on our websites.

Right to restriction of processing: You can request us to restrict the processing of your data if you dispute the accuracy of the data, for a period that allows us to verify the accuracy of the data, if the processing of the data is unlawful but you reject deletion and instead demand a restriction of data use, if we no longer need the data for the intended purpose, but you still need this data for the assertion or defense of legal claims, or if you have objected to the processing of the data.

You can exercise this right from May 25, 2018. Simply use our contact options on our websites.

Right to data portability: You can request us to provide you with your data, which you have entrusted to us for storage, in a structured, common, and machine-readable format, provided that we process this data based on your consent or for the fulfillment of a contract between us, and this processing takes place using automated procedures.

You can exercise this right from May 25, 2018. Simply use our contact options on our website.

Right to object: If we process your data to perform tasks in the public interest, exercise public authority, or if we base the processing on the need to protect our legitimate interests, you can object to this data processing if there is a predominant protection interest in your data. You can object to the sending of a quotation or advertising at any time without giving reasons. Simply use our contact options on our websites.

Right to complain: If you believe that we violate national or European data protection law when processing your data, we ask you to contact us so that we can clarify any questions. Of course, you also have the right to complain to the national data protection authority in your country (in Austria, this is the data protection authority), from May 25, 2018, also to a supervisory authority within the EU.

Exercise of rights: If you want to assert one of the mentioned rights against us, simply use the contact options provided.

Confirmation of identity: In case of doubt, we can request additional information to confirm your identity, e.g., a legible copy of a valid photo ID with a signature. This serves to protect your rights and your privacy.

Exercising rights excessively: If one of the mentioned rights is obviously unfounded or particularly frequent, we can charge a reasonable processing fee or refuse to process your request.

Scope of consent: Please inform co-users of your contact details (e.g., relatives) about the processing and transmission of your data to the extent of your consent. Do not give consents to us unless co-users of your contact details also agree.

Validity period: This data protection declaration of DCOM Distribution GmbH is valid from May 22, 2018.