PRIVACY POLICY

This data protection declaration describes how Good Rebel GmbH („controller“) processes your personal data.

1. Controller

Controller within the meaning of the General Data Protection Regulation („GDPR“):

Good Rebel GmbH
Address: Tuchlauben 7a, 1010 Vienna
Registered at the Commercial Court of Vienna under: FN 539439 v
Director: Ana Babaja
Phone number: + 43 676 76 10373
E-mail: office@goodrebel.eu

2. Personal data

Personal data is information that relates to an identified or identifiable natural person (so- called „data subject“). Examples include name, address, e-mail address, telephone number, date of birth, age, gender, social security number. There are also special categories of personal data (so-called „sensitive data“). The GDPR understands this to include, for example, health data or data relating to criminal proceedings. The data that we process depends on the type of contract and which data you provide yourself.

3. Categories of data collected and processed by us

a) Use of our services

If you use our services, the following categories of data are collected in particular:

■   First and last name
■   Phone number
■   Payment details
■   VAT (UID) number
■   Consulting requests

If you do not wish to disclose personal data to us, we will not be able to provide our services.

b) Newsletter

If you register for our newsletter, the following data will be collected to send you the newsletter and tailor it to your situation:

■   E-mail address
■   First and last name
■   Company name
■   Position.

c) Website

If you visit our website https://www.goodrebel.eu the following data will be collected to make your visit as user-friendly as possible and to be able to offer all available functions:

■   IP address
■   Device used by you
■   Operating system of your device
■   Mobile carrier
■   Browser type and version
■   Date and time of access

i) We can place cookies on your device, including mobile device, in accordance with the preferences set on your device. Depending on the settings on your device, information may be collected through cookies to remember choices you make (such as your username, language or the region you are in) and provide enhanced, personal features. Cookies are text files containing small amounts of information which are downloaded to your computer or mobile device when you visit a site and allow a site to recognize your device. They may also be used to help us to show advertisements relevant to you and to help us analyze the use and performance of our website. For more details on how cookies are used for our website, please read the cookie policy on the website of our website provider Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103 on https://webflow.com/legal/cookie-policy. Webflow processes the personal data that is collected when you visit our website (e.g.: data related to cookies and and social media plug-ins) on our behalf and stores it data in the U.S. The transfer of your personal data to Webflow Inc. is subject to appropriate safeguards as we have entered into standard contractual clauses adopted by the European commission.

ii) If you do not accept cookies, you may not be able to use some sections of our website.

4. Automated decision making (Art 22 GDPR)

There are no automated decision-making processes according to Art 22 GDPR.

5. Legal grounds for the processing of your data

Your personal data will only be collected, processed and used by us if a legal basis in the sense of GDPR is given.

5.1. Legitimate interest (Art 6 Para 1 letter f GDPR)

If the processing of your personal data is necessary to protect a legitimate interest of our company or a third party, Art 6 Para 1 letter f GDPR serves as the legal basis. In particular, our legitimate interest is to ensure the operation and administration of our website; to guarantee network and data security, but only if our legitimate interest is in accordance with the applicable law and with the rights and freedoms of our users; to enforce or defend legal claims.

5.2. Performance of a contract (Art 6 Para 1 letter b GDPR)

The legal basis for data processing on the basis of a contract is based on the legal basis of Article 6 Para 1 letter b GDPR. This also includes data that we process on the basis of pre- contractual obligations, which you may have communicated to us in the course of contacting us.

5.3. Consent (Art 6 Para 1 letter a GDPR)

The processing of the data that you provide us with when registering for our newsletter is based on your consent. The scope and the purposes of the processing are based on the underlying declaration of consent. You can revoke a given consent at any time with effect for the future by contacting us by e-mail to office@goodrebel.eu or by mail to the address Tuchlauben 7a, 1010 Vienna and revoke your declaration of consent.

5.4. Legal obligations (Art 6 Para 1 letter c GDPR)

If the controller is subject to a legal obligation requiring the processing of personal data, Art 6 Para 1 letter c GDPR serves as the legal basis. An example of this is the obligation to retain data under § 132 BAO (Federal Fiscal Code).

6. Transmission of data to third parties

If necessary for the purposes mentioned above, we will transfer your personal data to the following recipients:

■   Co-operation partners that work jointly with the controller and are licensed under the WAG in order to provide „investment advice“ according to § 1 Sect 3 lit e) WAG;

■   Other co-operation partners that work jointly with the controller but are not licensed under the WAG (e.g. associated agencies, clients when providing lead generation),

■   „Target companies“, meaning any companies that the controller is hired to contact for the purpose of pursuing business opportunities.

Our website provider for the purpose of the operation, ongoing analysis and improvement of our website.

7. Storage of data

The data will be stored for as long as necessary to fulfil our contractual and legal obligations, to ward off any liability claims and for the duration of your declaration of consent. We ensure that your personal data is treated in accordance with this Privacy Policy for the entire period.

8. Your rights as a data subject

As a data subject within the meaning of the GDPR, you have rights within the meaning of the GDPR:

■   The right to information about your stored personal data, its origin and recipients and the purpose of the data processing.

■   In addition, you have the right to correct and transfer your data and, if applicable, to object to the processing, to restrict processing or to delete processed data.

■   Your request for information, deletion, correction, objection, restriction of processing and/or transfer of your data can be sent to the contact details listed above under point 1.

If you are of the opinion that the processing of your personal data violates the applicable data protection law or that your data protection rights have been violated in any other way, you can file a complaint with the responsible supervisory authority. In Austria, the data protection authority (www.dsb.gv.at) is competent for these complaints.

9. Changes to this Privacy Policy

We reserve the right to adapt this Privacy Policy if necessary, for example due to new technical developments and legal changes, or to update it in connection with the offer of new services or products.


Version: 02, 22.12.2022.