The Federal Office for Food Safety (BAES) handles your personal data very carefully and the following data protection information is intended to give you an overview of how your data is processed and what measures we take to protect it. We therefore process your data exclusively on an existing legal basis (in particular DSGVO, DSG, TKG 2003, GESG, contract, legitimate interest, consent).

The data controller is the Federal Office for Food Safety, Spargelfeldstraße 191,1220 Vienna.

The data protection officer can be reached at datenschutz@baes.gv.at.

The legal framework is laid down in the Health and Food Safety Act (GESG). In the performance of its legal duties, the BAES is entitled to process personal data and, in addition, the rights and obligations pursuant to Art 13 (duty to inform if personal data have been collected from the data subject), Art 14 (duty to inform if personal data have not been collected from the data subject), Art 18 (right to restrict processing) and Art 21 (right to object) of the GDPR are excluded.

1. category and type of personal data

Personal data are data and information that are traceable to an identified or identifiable person. Examples: Name, address, telephone number, email, profession, education, health data, hobbies, IP address, etc. Depending on the specific processing purpose, in particular inventory data, customer data, contact data, order data, health data, communication data and image data are processed.

2. basis and purpose of data processing

The following legal bases come into question for the processing of personal data: a. Legal basis The tasks of the BAES are defined in § 6 para 5 GESG. In the performance of these tasks, the BAES is entitled to process personal data pursuant to Section 9 (7) GESG. In addition, personal data are processed on the basis of the material laws assigned to the BAES for enforcement or enacted on the basis of these material laws. This applies in particular to food and veterinary legislation. Legal basis: Art. 6 para. 1 lit c DSGVO b. Consent The processing of personal data is also lawful if the data subject has given legally valid consent. On the basis of granted consents, we process personal data, among other things, for sending newsletters or process your contact requests. Consents granted can be revoked informally at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. Legal basis: Art. 6 para 1 lit a as well as Art. 9 para 2 lit a DSGVO

3 . Transfer to third parties

The transfer of personal data may take place in particular on the basis of relevant legal obligations to authorities and international organizations as well as to service providers for contract performance. In all cases, we take care to ensure a consistent level of data protection. The relevant provisions for authorizing the BAES with regard to the transfer of personal data can be found in the relevant material laws.

4 Data security/technical and organizational measures The BAES provides for technical and organizational measures in the following areas, among others: Access control, system access control, data access control, data transmission control, ensuring the availability and resilience of the system, control procedures to ensure the security of processing, and personnel (training) measures.

5. your rights You are generally entitled to the following rights:

• Right to information according to Art 15 DSGVO.
• Right to rectification according to Art. 16 DSGVO
• Right to erasure ("right to be forgotten") according to Art 17 DSGVO
• Right to restriction of processing according to Art 18 DSGVO
• Right to data portability according to Art 20 DSGVO
• Right of objection according to Art 21 DSGVO

The following restriction of data subject rights are provided for by law: In fulfillment of the tasks according to § 6 Abs 5 GESG, with regard to the processing of personal data according to Abs. § 9 Abs. 7, the rights and obligations according to Art. 13, 14, 18 and 21 Data Protection Regulation are excluded by law. Insofar as the personal reference is indispensable for the achievement of the purpose in the case of further processing of personal data for scientific or historical research purposes, the rights of the data subjects pursuant to Article 15 (right of access), Article 16 (right of rectification), Article 18 (right to restriction of processing) and Article 21 (right to object) may be excluded by the BAES, insofar as these rights would make the achievement of the specific purposes impossible or seriously impair them.

6. retention of data

Personal data are generally deleted or pseudonymized in accordance with a deletion concept after the purpose has been fulfilled or the legal retention period has ended. The obligation to delete does not apply if processing is necessary for the following purposes:

• To exercise the right to freedom of expression and information,
• To fulfill a legal obligation
• For reasons of public interest in the area of public health according to Art 9 para 2 lit h and i as well as Art 9 para 3 DSGVO.
• For archival, scientific or historical research purposes in the public interest or for statistical purposes pursuant to Art 89 (1) DSGVO, to the extent that the right referred to in (1) is likely to render impossible or seriously prejudice the achievement of the objectives of this Agreement, or
• For the assertion, exercise or defense of legal claims.

7. contact option

If you contact us by form on the website or by e-mail, the data you provide will be stored and processed for the purpose of processing the request and in case of follow-up questions. We do not pass on this data without your consent. Questions regarding data protection law can be directed to datenschutz@baes.gv.at.

8 Cookies

Our website uses so-called cookies. These are small text files that are stored on your terminal device with the help of the browser. They do not cause any damage. We use cookies to make our offer user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognize your browser on your next visit. It is possible to object to the collection, processing and use of the aforementioned data for the aforementioned purposes by clicking on the link below. This will cause "webstatistik.ages.at" to set a cookie called "piwik_ignore". As long as the data storage is objected to, this may not be deleted. If you use a different computer or a different web browser, you must complete the deactivation procedure again. If you do not wish to do this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. When disabling cookies, the functionality of our website may be limited.

Required cookies

These cookies are required for the basic functions of the site to work correctly.

Cookie Manager To show/hide the cookie consent message.
Provider: BAES
Cookie name: supi
Term: 1 year

Session management
Provider: BAES
Cookie name: SERVERID
Runtime: end of session

Cookies for statistics
Statistics cookies anonymize your data and use it. This information helps us learn how visitors use our website. Matomo
Provider: Matomo
Cookie name: _pk_ses (persistent cookie, lifetime: 30 min (is automatically extended)); _pk_id (persistent cookie, lifetime 1 year), MATOMO_SESSID

9 . Web Analysis

Our website uses functions of the Matomo web analysis tool. Cookies are used for this purpose, which enables an analysis of the use of the website by your users. The information generated by this is transferred to the provider's server and stored there. You can prevent this by setting your browser to not store cookies or by clicking on the link below.

10 Profiling

The BAES does not engage in active profiling for automated decision-making.

11. modification of this data protection information

We reserve the right to modify this data protection information. The currently valid version is available at www.baes.gv.at/datenschutz.

12. supervisory authority

Austrian Data Protection Authority
Barichgasse 40-42, A-1030 Vienna
Phone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at

13. revocation of data collection for statistical purposes

You have the option to prevent actions you take here from being analyzed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving the usability for you and other users.