In accordance with Articles 13 and 14 of the GDPR, we hereby inform you about our individual processing activities, the categories of data processed, the purposes and legal bases of the respective data processing, and the storage period.

1. Visiting the website

Each time you access this website, information is automatically transmitted by your browser to our server and temporarily stored in so-called log files. The following data is collected:

Date and time of access
Name and URL of the file accessed
Browser and operating system used

Purpose of processing: To ensure trouble-free connection establishment, system security and stability.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in the operation and security of the website).

Storage period: Log files are generally deleted after 7 days. Longer storage only occurs in the event of security-related incidents.

2. Contact form

If you contact us via the contact form, we process the following data:

Name
Email address
Company name
Content of your message
Any other voluntary information

Purpose of processing: Processing and responding to your enquiry.

Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or lit. f GDPR (legitimate interest in processing enquiries).

Storage period: The data will be deleted as soon as your enquiry has been finally processed, unless there are legal retention obligations to the contrary.

2a. Use of contact details for marketing purposes

By using the contact form, you also consent to us using the data you provide (in particular your name and email address) to send you information about our products and services by email.

Legal basis: Processing is based on your voluntary consent in accordance with Art. 6(1)(a) GDPR.

Revocation: You can revoke your consent at any time with effect for the future, e.g. via the unsubscribe link in every marketing email or by sending a message to contact@bigbluemarble.com. The legality of the processing carried out on the basis of the consent until revocation remains unaffected.

Storage period: Your data will be stored for marketing purposes until you withdraw your consent or we stop sending marketing emails.

3. Data recipients

In order to ensure a high level of service and quality, we need the support of our specialised, trustworthy service providers (including processors). Your data may be passed on to the following recipients as part of our standard process:

IT service providers: Österreichischer Rundfunk; Amazon Web Services EMEA Sarl
Marketing service providers: Platform Communication, Projekt 21 Mediendesign GmbH; Havas Wien GmbH
In certain cases: authorities, police, lawyers, debt collection agencies or courts;

4. Data transfers to a third country or international organisation

Some of our IT service partners and/or their sub-processors are based in a third country within the USA. If these service providers have not submitted to the adequacy decision of the European Commission (adequacy decision), the appropriate safeguards for the transfer to a third country or the USA are provided, among other things, by the conclusion of standard data protection clauses of the European Commission or approved codes of conduct. If you would like a free copy of the safeguards in place, please contact us.

5. Your rights

You have the right to:

Information (Art. 15 GDPR)
Correction (Art. 16 GDPR)
Deletion (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Objection to processing (Art. 21 GDPR)
Data portability (Art. 20 GDPR)

To exercise your rights, please contact us using the contact details above.

6. Right to lodge a complaint

You also have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data.

The supervisory authority responsible is the data protection authority of your place of residence or the supervisory authority responsible for the controllers.

7. Security

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content.