Planet 9 Consulting & Investment

Privacy Policy

Introduction

We have prepared this Privacy Policy (version 11.12.2024-122919920) to explain to you, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national laws, what personal data we collect, how we process it, and what rights you have as a data subject. The protection of your personal data is important to us. Therefore, we process your data exclusively on the basis of the legal provisions (GDPR and applicable national data protection laws). In this Privacy Policy we inform you about the most important aspects of data processing in the context of our website and our business activities.

If you have any questions after reading this policy, please contact us using the contact details provided below or in the legal notice (Imprint).

Scope of Application

This Privacy Policy applies to all personal data processed by our company and to all personal data processed by third parties acting on our behalf (data processors). This includes in particular:

  • our websites and online services
  • social media profiles and communication via email
  • mobile applications and offline business interactions where personal data is processed

Personal data refers to any information relating to an identified or identifiable natural person, such as a name, email address, postal address, telephone number, or IP address.

Legal Basis for Data Processing

In the following privacy policy, we provide you with transparent information about the legal principles and regulations—that is, the legal basis under the General Data Protection Regulation—that allow us to process personal data.
With regard to EU law, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of April 27, 2016. You can, of course, access this EU General Data Protection Regulation online at EUR-Lex, the portal for EU law, at https://eur-lex.europa.eu/legal-content/DE/ALL/?uri=celex%3A32016R0679 .

We process personal data only when there is a lawful basis under Article 6 GDPR, including the following:

  1. Consent (Art. 6(1)(a) GDPR) You have given us your consent to process your personal data for a specific purpose, for example when submitting information through a contact form.
  2. Contract (Art. 6(1)(b) GDPR) Processing is necessary for the performance of a contract with you or for taking steps prior to entering into a contract.
  3. Legal Obligation (Art. 6(1)(c) GDPR) We may process your data if necessary to comply with legal obligations, for example accounting or tax regulations.
  4. Legitimate Interests (Art. 6(1)(f) GDPR) We may process personal data where necessary for our legitimate interests, provided that your fundamental rights and freedoms are not overridden. This may include ensuring the secure and efficient operation of our website.


In addition to the GDPR, national laws may apply, such as:

  • the Austrian Data Protection Act (DSG)
  • the German Federal Data Protection Act (BDSG) where applicable

If additional regional or national laws apply, we will provide you with information about them in the following sections.

Controller

The controller responsible for data processing under the GDPR is:
Mag. Jürgen Kraupa
Mag. Clemens Foisner

E-Mail: office@planetnine.at

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by applicable legal obligations.

For example, certain data may need to be retained for accounting or tax purposes in accordance with statutory retention periods.

If you request deletion of your data or withdraw your consent to data processing, the data will be deleted as soon as possible, unless legal retention obligations apply.

Your Rights Under the GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access (Art. 15 GDPR) You have the right to request confirmation as to whether we process your personal data and to obtain a copy of the data.
    • for what purpose we process the data;

    • who receives this data, and if the data is transferred to third countries, how security can be ensured;
    • how long the data is stored;
    • the existence of the right to rectification, erasure, or restriction of processing, and the right to object to processing;
    • that you can file a complaint with a supervisory authority (links to these authorities are provided below);
    • the source of the data, if we did not collect it from you;
    • whether profiling is carried out—that is, whether data is automatically analyzed to create a personal profile of you.
  • Right to Rectification (Art. 16 GDPR) You have the right to request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Art. 17 GDPR) You have the right to request deletion of your personal data (“right to be forgotten”) where legally permitted.
  • Right to Restriction of Processing (Art. 18 GDPR) You may request that we restrict the processing of your personal data under certain circumstances.
  • Right to Data Portability (Art. 20 GDPR) You have the right to receive your personal data in a commonly used and machine-readable format.
  • Right to Object (Art. 21 GDPR) You have the right to object to the processing of your personal data where processing is based on legitimate interests. If your personal data is processed for direct marketing purposes, you have the right to object at any time.
    • If the processing of your data is based on Article 6(1)(e) (public interest, exercise of official authority) or Article 6(1)(f) (legitimate interest), you may object to the processing. We will then review as soon as possible whether we can legally comply with this objection.
    • If your data is used for direct marketing purposes, you may object to this type of data processing at any time. We will then no longer be permitted to use your data for direct marketing.
    • If your data is used for profiling, you may object to this type of data processing at any time. We will no longer be permitted to use your data for profiling after that.
  • Automated Decision-Making (Art. 22 GDPR) You have the right not to be subject to decisions based solely on automated processing, including profiling, where such decisions produce legal effects concerning you.
  • Right to Lodge a Complaint (Art. 77 GDPR) If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority.


If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority.

In Austria, the responsible authority is:
Austrian Data Protection Authority
https://www.dsb.gv.at/


Definitions

For clarity, the following key terms used in this Privacy Policy are defined in accordance with Article 4 GDPR.

Data processor

Definition pursuant to Article 4 of the GDPR

For the purposes of this regulation, the term:

“Processor” a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller;

Explanation: As a company and website owner, we are responsible for all data we process from you. In addition to the data controllers, there may also be so-called data processors. This includes any company or individual that processes personal data on our behalf. Data processors may therefore include, in addition to service providers such as tax advisors, hosting or cloud providers, payment or newsletter providers, or large companies such as Google or Microsoft.

Consent

Definition pursuant to Article 4 of the GDPR

For the purposes of this regulation, the term:

“Consent” of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

Explanation: On websites, this consent is typically obtained through a cookie consent tool. You’re probably familiar with this. Whenever you visit a website for the first time, you are usually asked via a banner whether you agree to or consent to data processing. In most cases, you can also configure individual settings and thus decide for yourself which data processing you allow and which you do not. If you do not consent, no personal data about you may be processed. In principle, consent can of course also be given in writing, i.e., not via a tool.

Personal Data

Definition pursuant to Article 4 of the GDPR

For the purposes of this regulation, the term:

“personal data” any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”); A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;

Explanation: Personal data is any data that can be used to identify you as an individual. This typically includes data such as:

  • name
  • address
  • email address
  • phone number
  • date of birth
  • identification numbers
  • financial information
  • IP address

Certain categories of personal data are considered special categories and require additional protection, including:

  • racial or ethnic origin
  • political opinions
  • religious or philosophical beliefs
  • trade union membership
  • genetic data
  • biometric data
    health data
  • data concerning a person's sex life or sexual orientation

Profiling

Definition pursuant to Article 4 of the GDPR

For the purposes of this regulation, the term:

“Profiling” any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements;

Explanation: Profiling involves gathering various pieces of information about a person in order to learn more about them. On the web, profiling is frequently used for advertising purposes or for credit checks. Web and advertising analytics programs, for example, collect data about your behavior and interests on a website. This results in a specific user profile that can be used to deliver targeted advertising to a specific audience.

Controller

Definition pursuant to Article 4 of the GDPR

For the purposes of this regulation, the term:

“Controller” means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

Explanation: In our case, we are responsible for the processing of your personal data and are therefore the “data controller.” If we transfer collected data to other service providers for processing, they are “data processors.” A “Data Processing Agreement (DPA)” must be signed for this purpose.

Processor

Definition pursuant to Article 4 of the GDPR

For the purposes of this regulation, the term:

“Processing” any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or any other form of disclosure, the alignment or combination, restriction, erasure, or destruction;

Note: When we refer to “processing” in our privacy policy, we mean any type of data processing. As mentioned above in the original GDPR statement, this includes not only the collection but also the storage and processing of data.

Final Remarks

We take the protection of your personal data very seriously and strive to handle it responsibly and transparently. This Privacy Policy aims to explain what data we process, why we process it, and what rights you have under data protection law. If you have any questions about data protection or the processing of your personal data, please feel free to contact us at any time.

All texts are protected by copyright.

Source: Privacy Policy created with the data protection generator by AdSimple.