{"id":478,"date":"2025-02-02T10:03:57","date_gmt":"2025-02-02T10:03:57","guid":{"rendered":"https:\/\/10-q.at\/?page_id=478"},"modified":"2025-07-26T12:21:07","modified_gmt":"2025-07-26T10:21:07","slug":"data-protection-declaration","status":"publish","type":"page","link":"https:\/\/www.10-q.at\/en\/datenschutzerklaerung\/","title":{"rendered":"privacy policy"},"content":{"rendered":"<section class=\"wf_intro\">\n\n\n\n    \t<figure\n\t\t\t\titemscope=\"\"\n\t\titemtype=\"http:\/\/schema.org\/ImageObject\">\n\t\t\t<picture>\n\t\t\t\t\t\t<source\n\t\t\t\t\tmedia=\"(min-width: 1024px)\"\n\t\t\t\t\tsrcset=\"https:\/\/www.10-q.at\/wp-content\/uploads\/2025\/07\/data-privacy-9611622_1920-1920x9999-1.jpg\"\n\t\t\t\t\twidth=\"1920\"\n\t\t\t\t\theight=\"1280\">\n\t\t\t\t\t\t\t\t<source\n\t\t\t\t\tmedia=\"(min-width: 600px)\"\n\t\t\t\t\tsrcset=\"https:\/\/www.10-q.at\/wp-content\/uploads\/2025\/07\/data-privacy-9611622_1920-1024x9999.jpg\"\n\t\t\t\t\twidth=\"1024\"\n\t\t\t\t\theight=\"683\">\n\t\t\t\t\t\t\t\t<source\n\t\t\t\t\tmedia=\"(min-width: 1px)\"\n\t\t\t\t\tsrcset=\"https:\/\/www.10-q.at\/wp-content\/uploads\/2025\/07\/data-privacy-9611622_1920-600x9999.jpg\"\n\t\t\t\t\twidth=\"600\"\n\t\t\t\t\theight=\"400\">\n\t\t\t\t\t    <img\n\t    \t\t    \tsrc=\"https:\/\/www.10-q.at\/wp-content\/uploads\/2025\/07\/data-privacy-9611622_1920-1920x9999.jpg\"\n\t    \twidth=\"1920\"\n\t    \theight=\"1280\"\n\t    \talt=\"\">\n\t<\/picture>\n\t<noscript>\n\t    <img\n\t    \tsrc=\"https:\/\/www.10-q.at\/wp-content\/uploads\/2025\/07\/data-privacy-9611622_1920-1920x9999.jpg\"\n\t    \talt=\"\">\n\t<\/noscript>\n\t\t<\/figure>\n\t\n    <div class=\"wf_intro_content\">\n        <h1 class='t1'>Privacy policy<\/h1><p class='wf_intro_subtitle'><p>Here you can find everything you need to know about GDPR.<\/p>\n<\/p>\n                    <a href=\"https:\/\/www.10-q.at\/wp-content\/uploads\/2025\/07\/datenschutz-10-q-vers.-1.0-04.07.25.pdf\" download=\"https:\/\/www.10-q.at\/wp-content\/uploads\/2025\/07\/datenschutz-10-q-vers.-1.0-04.07.25.pdf\" class=\"cta\">        <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"i i-pdf\">\n            <use xlink:href=\"https:\/\/www.10-q.at\/wp-content\/themes\/webfactor\/assets\/newicons\/sprite-main.svg#pdf\"><\/use>\n        <\/svg>\n         Download PDF<\/a>\n            \n    <\/div>\n\n    <a href=\"#\" class=\"wf_scroll\">\n                <svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"i i-arrow-right\">\n            <use xlink:href=\"https:\/\/www.10-q.at\/wp-content\/themes\/webfactor\/assets\/newicons\/sprite-main.svg#arrow-right\"><\/use>\n        <\/svg>\n            <\/a>\n<\/section>\n\n<section class=\"wf_article\">\n    <h2 class='wf_article_title'>10 Q - GDPR<\/h2>    <article>\n        <h2><a name=\"_Toc204424320\"><\/a>1. introduction &amp; scope of application<\/h2>\n<h2><\/h2>\n<p>This privacy policy informs you about the type, scope and purpose of the processing of personal data (hereinafter \"data\") by our company and about your rights as a data subject.<\/p>\n<p>It applies to all users of the website <a href=\"http:\/\/www.10-q.at\/en\/\">www.10-q.at<\/a> as well as for persons who submit bookings or applications via our forms or act as subcontractors.<\/p>\n<p>&nbsp;<\/p>\n<h2><a name=\"_Toc204424321\"><\/a>2. responsible person<\/h2>\n<p><strong>\u00a0<\/strong><\/p>\n<p><strong>Company: <\/strong>10\/kju:\/e.U.<br \/>\n<strong>Company headquarters:<\/strong> Wehlistra\u00dfe 157\/19, 1020 Vienna, Austria<br \/>\n<strong>Owner &amp; responsible person:<\/strong> Amid Amidov<br \/>\n<strong>E-Mail:<\/strong> office@10-q.at<br \/>\n<strong>Operational support:<\/strong> Marian Hadjiev <em>(not legally responsible)<\/em><\/p>\n<p>&nbsp;<\/p>\n<h2><a name=\"_Toc204424322\"><\/a>3. data protection officer<\/h2>\n<h2><\/h2>\n<p><strong>Amid Amidov<\/strong><br \/>\n<strong>E-Mail:<\/strong> office@10-q.at<\/p>\n<p>&nbsp;<\/p>\n<h2><a name=\"_Toc204424323\"><\/a>4. safety &amp; protective measures<\/h2>\n<h2><\/h2>\n<p>Our website uses SSL\/TLS encryption. Further technical and organizational measures:<\/p>\n<ul>\n<li>Internal role and authorization concept<\/li>\n<li>Regular backups via our hosting provider<\/li>\n<li>PGP encryption (in preparation)<\/li>\n<li>AV contracts with all processors<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2><a name=\"_Toc204424324\"><\/a>5. hosting &amp; technical infrastructure<\/h2>\n<p>&nbsp;<\/p>\n<ul>\n<li><strong>Hosting:<\/strong> All-Inkl.com (Germany)<\/li>\n<li><strong>CMS:<\/strong> WordPress<\/li>\n<li><strong>CDN:<\/strong> planned - Cloudflare or Amazon CloudFront<\/li>\n<li><strong>Plugins:<\/strong> Borlabs Cookie CMP, WP Rocket, TranslatePress, RankMath Pro, Gravity Forms<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2><a name=\"_Toc204424325\"><\/a>6. server log data<\/h2>\n<h2><\/h2>\n<p>Automatically collected and stored for a maximum of 14 days:<\/p>\n<ul>\n<li>IP address (anonymized)<\/li>\n<li>Date\/Time<\/li>\n<li>Browser type\/version<\/li>\n<li>Operating system<\/li>\n<li>Referrer URL<br \/>\n<strong>Legal basis:<\/strong> 6 para. 1 lit. f GDPR (legitimate interest)<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2><a name=\"_Toc204424326\"><\/a>7. cookies &amp; consents (Borlabs CMP)<\/h2>\n<h2><\/h2>\n<p>Our website uses the cookie consent tool <strong>Borlabs Cookie<\/strong>to obtain your consent to the use of cookies and integrated third-party services.<\/p>\n<p><strong>When you visit the website for the first time, you will receive the following information:<\/strong><\/p>\n<p>We need your consent before you can continue to visit our website. If you are under the age of 16 and wish to give your consent to optional services, you must ask your parent or guardian for permission.<br \/>\nWe use cookies and other technologies on our website. Some of them are essential, while others help us to improve this website and your experience. Personal data may be processed (e.g. IP addresses), e.g. for personalized ads and content or the measurement of ads and content.<br \/>\nThere is no obligation to consent to the processing of your data in order to use this offer. You can revoke or adjust your selection at any time via the cookie symbol.<\/p>\n<p>Please note that not all functions of the website may be available due to individual settings.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>Data transfer to the USA:<\/strong><\/p>\n<p>Some services (e.g. Google, Meta, Microsoft, TikTok) process personal data in the USA. By consenting to the use of these services, you also consent to the transfer of data to the USA in accordance with Art. 49 para. 1 lit. a GDPR.<\/p>\n<p>The European Court of Justice classifies the USA as a country with an inadequate level of data protection. In particular, there is a risk that US authorities may be able to access your data without you as an EU citizen having effective legal remedies at your disposal.<\/p>\n<p><strong>Cookie categories &amp; storage duration:<\/strong><\/p>\n<ul>\n<li><strong>Essential cookies<\/strong> (cannot be deselected) - technically required<\/li>\n<li><strong>Statistics cookies<\/strong> (e.g. Google Analytics)<\/li>\n<li><strong>Marketing cookies<\/strong> (e.g. Google Ads, Meta Ads)<br \/>\n<strong>Storage duration:<\/strong> 12 months<br \/>\n<strong>Legal basis:<\/strong> 6 para. 1 lit. a GDPR (consent)<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2><a name=\"_Toc204424327\"><\/a>8. tracking &amp; online marketing<\/h2>\n<h2><\/h2>\n<p>Only with active consent:<\/p>\n<ul>\n<li>Google Analytics 4 (with anonymized IP)<\/li>\n<li>Google Ads incl. remarketing &amp; conversion tracking<\/li>\n<li>YouTube Ads <em>(planned)<\/em><\/li>\n<li>Facebook, TikTok, LinkedIn, Microsoft Ads <em>(planned)<\/em><\/li>\n<li>Hotjar (heatmaps, user behavior)<br \/>\n<strong>Legal basis:<\/strong> 6 para. 1 lit. a GDPR<\/li>\n<\/ul>\n<h2><a name=\"_Toc204424328\"><\/a>9. contact forms &amp; communication<\/h2>\n<h2><\/h2>\n<ul>\n<li><strong>Tools:<\/strong> Gravity Forms, SendGrid, Brevo, WhatsApp Business (only with active use), Airtable<\/li>\n<li><strong>Planned integration:<\/strong> reCAPTCHA<\/li>\n<li><strong>Data collected:<\/strong> Name, telephone number, e-mail, travel request, flight number, etc.<\/li>\n<li><strong>Corporate clients:<\/strong> additionally company name, address, UID<\/li>\n<\/ul>\n<h2>10. \u00a0<a name=\"_Toc204424329\"><\/a>Booking &amp; payment processing<\/h2>\n<h2><\/h2>\n<ul>\n<li><strong>Payment provider:<\/strong> Stripe Payments Europe Ltd.<\/li>\n<li><strong>Payment:<\/strong> directly in the form via credit card (PCI-DSS compliant)<\/li>\n<li><strong>Card data:<\/strong> are not stored by us<\/li>\n<li><strong>Utilization:<\/strong> also for customer analysis (e.g. customer lifetime value)<br \/>\n<strong>Legal basis:<\/strong> 6 para. 1 lit. b GDPR<\/li>\n<\/ul>\n<h2>11. \u00a0<a name=\"_Toc204424330\"><\/a>Driver communication &amp; subcontractors<\/h2>\n<h2><\/h2>\n<ul>\n<li>Only receive trip-related data<\/li>\n<li>No access to customer data or prices outside the journey<\/li>\n<li>Communication via WhatsApp, Airtable or SMS<\/li>\n<li>GPS positioning for quality assurance<\/li>\n<\/ul>\n<h2>12. \u00a0<a name=\"_Toc204424331\"><\/a>Applications<\/h2>\n<h2><\/h2>\n<ul>\n<li><strong>Processed data:<\/strong> Name, ID, driver's license, GISA, UID, vehicle data, insurance<\/li>\n<li><strong>Storage duration:<\/strong> 6 months (rejected), 7 years (discontinued)<\/li>\n<li><strong>Deletion on request:<\/strong> Art. 17 GDPR possible<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2>13. \u00a0<a name=\"_Toc204424332\"><\/a>Third-party providers &amp; tools used<\/h2>\n<h2><\/h2>\n<p>All with AV contract and SCC (standard contractual clauses) where applicable:<\/p>\n<ul>\n<li>Google Ireland Ltd - Analytics, Ads, Tag Manager, reCAPTCHA<\/li>\n<li>YouTube (Google LLC) - Video playback<\/li>\n<li>SendGrid (Twilio Inc.) - e-mail dispatch<\/li>\n<li>Brevo (Sendinblue GmbH) - E-mail communication<\/li>\n<li>Hotjar Ltd - UX Analysis<\/li>\n<li>Airtable (Formagrid Inc.) - CRM<\/li>\n<li>Zapier Inc - Automation<\/li>\n<li>Stripe Payments Europe Ltd. - Payment processing<\/li>\n<\/ul>\n<h2>14. \u00a0<a name=\"_Toc204424333\"><\/a>Transfer to third countries<\/h2>\n<p>&nbsp;<\/p>\n<p>Only for:<\/p>\n<ul>\n<li>Existence of <strong>SCCs<\/strong><\/li>\n<li>Existence of a <strong>Appropriateness decision<\/strong><\/li>\n<li>Or <strong>explicit consent<\/strong> Art. 49 para. 1 lit. a GDPR<\/li>\n<\/ul>\n<h2>15. \u00a0<a name=\"_Toc204424334\"><\/a>Storage duration<\/h2>\n<h2><\/h2>\n<table>\n<thead>\n<tr>\n<td><strong>Data type<\/strong><\/td>\n<td><strong>Storage duration<\/strong><\/td>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>Booking\/invoice data<\/td>\n<td>7 years (tax law)<\/td>\n<\/tr>\n<tr>\n<td>Contact forms<\/td>\n<td>12 months<\/td>\n<\/tr>\n<tr>\n<td>Applicant data<\/td>\n<td>6 months (rejected)<\/td>\n<\/tr>\n<tr>\n<td>Analytics data (Google)<\/td>\n<td>max. 26 months<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>16. \u00a0<a name=\"_Toc204424335\"><\/a>Rights of the data subjects<\/h2>\n<h2><\/h2>\n<p>You have the following rights under the GDPR:<\/p>\n<ul>\n<li>Information (Art. 15)<\/li>\n<li>Rectification (Art. 16)<\/li>\n<li>Deletion (Art. 17)<\/li>\n<li>Restriction of processing (Art. 18)<\/li>\n<li>Data portability (Art. 20)<\/li>\n<li>Objection (Art. 21)<\/li>\n<li>Withdrawal of consent (Art. 7 para. 3)<br \/>\n<strong>Contact for all matters:<\/strong> datenschutz@10-q.at<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2>17. \u00a0<a name=\"_Toc204424336\"><\/a>Automated decisions \/ profiling<\/h2>\n<h2><\/h2>\n<ul>\n<li>Stripe can carry out a credit check<\/li>\n<li>No further automated profiling takes place<\/li>\n<\/ul>\n<h2>18. \u00a0<a name=\"_Toc204424337\"><\/a>Newsletter<\/h2>\n<h2><\/h2>\n<p>We currently ship <strong>none<\/strong> newsletters or automated e-mail campaigns.<\/p>\n<h2>19. \u00a0<a name=\"_Toc204424338\"><\/a>Data security<\/h2>\n<h2><\/h2>\n<ul>\n<li>Password-protected systems<\/li>\n<li>SSL\/TLS encryption<\/li>\n<li>Use of Google Drive <em>(no local firewall)<\/em><\/li>\n<\/ul>\n<h2>20. \u00a0<a name=\"_Toc204424339\"><\/a>Changes to this privacy policy<\/h2>\n<h2><\/h2>\n<p>This declaration is updated regularly.<br \/>\n<strong>Last update:<\/strong> 04.07.2025<br \/>\n<strong>Previous versions:<\/strong> available on request<\/p>\n    <\/article>\n\n<\/section>\n\n\n<p class=\"wp-block-paragraph\"><\/p>","protected":false},"excerpt":{"rendered":"","protected":false},"author":4,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-478","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.10-q.at\/en\/wp-json\/wp\/v2\/pages\/478","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.10-q.at\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.10-q.at\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.10-q.at\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.10-q.at\/en\/wp-json\/wp\/v2\/comments?post=478"}],"version-history":[{"count":0,"href":"https:\/\/www.10-q.at\/en\/wp-json\/wp\/v2\/pages\/478\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.10-q.at\/en\/wp-json\/wp\/v2\/media?parent=478"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}