Data Protection Declaration

1. Controllers

We take data protection very seriously and treats your personal data confidentially and in accordance with the statutory regulations. This Data Protection Declaration aims to inform you in accordance with Articles 12, 13 and 14 GDPR of the purpose, lawful basis and your rights regarding the processing of personal data by us.

2. Subjects of data processing

Participants in research studies who want to receive payment for their participation.

3. Purpose: Facilitation of Payments to Participants

3.1. Purpose

The data is being processed to facilitate payments to the participants. For this purpose, we process the data listed in the following section.

3.2. Types of data

• First and last name
• Email address
• Place of residence
• IBAN
• BIC
• Bank name
• Payment amounts

3.3. Source of the personal data according to Article 14 GDPR

This data is provided by the participants themselves or transmitted to the payment platform from the study platform.

3.4. Lawful basis for data processing

The basis for processing the data is the necessity of processing for the performance of a contract (Article 6 (1) (b)). Participants consent to their data being processed for the purpose of receiving payment for their participation in the study (Article 6 (1) (a)).

4. Retention period

The data will be stored either until you withdraw consent or until the purpose of data’s use has been achieved. The purpose of the data’s use will be considered to have been achieved once all payments have been made and the legal requirements for storing payment related data have been fulfilled.

5. Your rights

You have the following rights associated with the processing of your personal data at all times:

• right of access to the personal data in question (Article 15 GDPR),
• right to rectification (Article 16 GDPR) and erasure (Article 17 GDPR) or to restriction of processing (Article 18 GDPR),
• right to data portability (Article 20, GDPR),
• right to object (Article 21 GDPR),
• right to withdraw consent (Article 7 (3) GDPR), which shall not affect the lawfulness of processing based on consent given before the withdrawal.

You also have the right to lodge a complaint (Article 77 GDPR) to the relevant supervisory authority, which in Austria is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, telephone: +43 1 52 152-0, e-mail: dsb@dsb.gv.at.

6. Contact details

Christian König gen. Kersting
Innsbrucker Str. 1
6060 Hall in Tirol
Austria

Email: email@ckgk.com