Data Protection Declaration 

If you apply to the ABA, we process the data supplied to us by you to review and process your application. You can send applications to the responsible specialised department directly by e-mail. In some cases, you will be redirected to a special application portal.  

Legal basis 

Implementation of the application process and preparation for an employment relationship pursuant to Art. 6 para. 1 lit. b GDPR. With your consent (which you can revoke at any time), your application (if your job application has not been accepted) will be stored, where appropriate, for future job offers (Art. 6 para. 1 lit. a GDPR). If special categories of personal data are included in the application documents, Art. 9 para. 2 lit. a GDPR also applies.  

Purpose 

The purpose is to manage your application for one or several positions as well as the transmission of e-mail messages and other announcements, the request for additional information or to contact you about your application.  

Retention period 

Inasmuch as you agreed to have your data processed for other job offers, we will store your data for a period of up to one year after the completion of the application process. Otherwise, we will delete the data after six months.  

We reserve the right to use the collected data to make up-to-date, relevant information available to you via e-mail within the context of our ongoing business relationship, provided you do not object to this use or have not previously done so. We consider you to be an existing customer of ABA if you have used at least one of the services provided by ABA (participation in an event, consultations, downloading of our brochures, etc.). Marketing communication targeting existing customers exclusively encompasses information on other proprietary benefits and services provided by ABA such as the services you have already used.  

Legal basis 

We have a legitimate interest (Art. 6 para. 1 lit. f GDPR in connection with Sect. 174 para. 4 TKG) to provide up-to-date and relevant information to our clients on similar services to build up and maintain a long-term client relationship with them.  

Purpose 

We process your data to enable us to convey information to you about other proprietary benefits and services provided by ABA such as the services you have already used.  

Retention period 

We will store your data provided you do not object to receiving marketing targeting existing customers or our marketing service for existing customers is terminated. You have the right to object at any time. Please send your objection by e-mail to office@aba.gv.at. Moreover, you will find a link to unsubscribe at the end of a newsletter.  

We make use of various social media platforms, above all for marketing purposes. You can interact with us via our social media sites by commenting on our posts, reacting to them (e.g., via the “like” button), sharing them or sending them to other users. All personal information or other information which you contribute on social media uses can be read, collected, and used by other users of this social media app. We do not have any control over this. For this reason, we are not responsible for the misuse or abuse by other users of personal information or other information you have contributed to a social media site. We process your interactions, your usernames and, if applicable, the personal data of third parties. In this connection, your data can also be processed by these platforms. More information on the processing of your data can be found at: 

Facebook: https://www.facebook.com/privacy/policy/   

Instagram: https://help.instagram.com/155833707900388?cms_id=155833707900388 

LinkedIn: https://www.linkedin.com/legal/privacy-policy   

X: https://x.com/en/privacy   

YouTube: https://www.youtube.com/howyoutubeworks/our-commitments/protecting-user-data/ 

Legal basis  

Our legitimate interest as well as your legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR involves processing your inquiry and responding to it as well as commenting on your feedback and promoting our services.  

Purpose 

We process your personal data to interact with you, to comment on your feedback and to market our services. 

Retention period 

We store your personal data for as long as we deem it necessary to fulfil the above-mentioned purposes. Your data will be subsequently deleted.

If you register to participate in an event which we organise, we process the personal data supplied by you as well as recordings (photos and videos) made during the event. The data required for your registration will either be derived from our CRM system or provided by you in case you have not previously participated in any of our events or any similar event in terms of contents. Supplying personal data is done voluntarily. However, please note that under certain circumstances, it may not be possible for you to participate if you do not provide any information to us or the information you provide is incomplete. 

Legal basis 

We process your data to fulfil our (pre-)contractual obligations towards the participants of the event pursuant to Art. 6 para. 1 lit. b GDPR as well as based on our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR (administrative preparation and holding of the event; data storage in our CRM system). If the event takes place within the context of our statutory mandate, the legal basis is Art. 6 para. 1 lit. e GDPR in connection with Sect. 20 Act Governing the Employment of Foreign Nationals (for events held by WORK in AUSTRIA) and Art. 6 para. 1 lit. e GDPR in connection with Sect. 9 Film Location Act 2023 (for events held by FILM in AUSTRIA).  

The publication of photographs and/or video recordings, including audio recordings, takes place in the public interest, as well as in safeguarding our interests and in effectively communicating our events. We do not publish any recordings which infringe upon your personal rights and your right to privacy. 

Purpose 

We process your data to prepare for the event and to be able to ensure your access to the event on the day it is held. The information on your participation is stored in our centralised CRM system. Personal data (name, employer, photo) of certain individuals (e.g., the speaker and participants of a panel discussion) are published for the purpose of marketing the event. Photos and/or video recordings including audio recordings are regularly made for media relations and public relations purposes. We publish these photos or recordings on our website, in social media channels, in business network portals and in print media to the extent that this is legally permissible by law. 

Retention period 

We store your data for as long as we deem it necessary to carry out the event, or for as long as it is deemed necessary to process the data within the context of statutory retention periods or for as long as legal claims can be made against ABA.  

Dissemination of your data 

We can forward your data in line with legal regulations or contractual stipulations to the following third parties inasmuch as they are directly involved in the various phases of the event and the organisational process makes it necessary: hotels, transport services, printers, agencies involved for the purpose of promoting the event in newsletters or on billboards, caterers, other conference participants, internal and external IT providers needed for the purpose of providing technical support within the context of the event, online video conference operators as well as event/cooperation partners listed on the invitation. 

In principle, we do not actively disseminate data in third countries. A possible exception is the publication of pictures on our social media channels (e.g., Instagram, Facebook), which could lead to a dissemination of data in the USA. If photos are published on our social media channels, this data can also be processed by the platforms themselves.  

If you do not agree with the publication of your photo and/or video recordings including audio recordings, please tell the photographer immediately or contact us prior to the event. Moreover, you can subsequently object to the use of your data.  

Online participation in events 

Various events are held as hybrid events or online video conferences. In this case, we use the following tools: “Zoom", “Microsoft Teams” and “B2Match”. 

“Zoom” is a service provided by Zoom Video Communications, Inc., which is headquartered in the USA and with which we have concluded a processing agreement. You can find the terms and conditions of use and data protection policy of Zoom here: https://www.zoom.com/en/trust/privacy/ 

– You have approved this by registering for the event.  

“Microsoft Teams” is a function of Microsoft 365 and a service provided by Microsoft Ireland Operations, with which we have concluded a processing agreement. You can find the terms and conditions of use and data protection policy of Microsoft Teams here: https://learn.microsoft.com/en-us/microsoftteams/privacy/location-of-data-in-teams 

– You have approved this by registering for the event.  

“B2Match” is a service provided by B2Match GmbH headquartered in Vally-Weigl Street 5⁄456, 1100 Vienna, Austria, Company Number 396478g. We have concluded a corresponding processing agreement with the company. You can find the terms and conditions of use and data protection policy of B2Match here: https://www.b2match.com/privacy-policy – You have approved this by registering for the event.  

As a consequence of the use of B2Match, Zoom or Microsoft Teams, the respective service provider receives certain personal data which is necessary for the use of the software (e.g., your IP address). In using B2Match, Zoom or Microsoft Teams, various other kinds of data can also be processed. The exact extent of the processing depends on which data you have submitted yourself before or during the participation in the online video conference (e.g., your voice, contributions, and commentaries) which has been heard or seen by other participants. If you register to participate using your first and last names, this personal data is transmitted to us and, if applicable, stored by us within the context of the simultaneous recording of the video conference. If we record online events, this fact will be announced to you before the beginning of the event or shown within the context of the online meeting. If necessary, you will be asked for your consent. The consent can take place by means of an approving message in the chat. Please note that this is always voluntary. If you do not consent to the forwarding of your personal data, you will not be able to participate in the video conference.  

A recording of the audio and video stream only takes place if there is a legitimate reason and if the moderator has announced this beforehand (especially when it comes to conferences or events which are in the public interest). 

The purpose of operating the video conference services B2Match, Zoom and Microsoft Teams is to enable participation in events or the ability to follow the event if one is not physically present. 

The processing of your data within the context of using the services provided by B2Match, Zoom and Microsoft Teams takes place on the following level basis: Art. 6 para. 1 lit. b GDPR, provided the online video conference is conducted within the context of a contractual relationship. If no contractual relationship exists, the legal basis is Art. 6 para. 1 lit. f GDPR. In this case, our interest is effectively organising and holding “online video conferences.”  

The following stipulations apply within the context of consulting and supporting companies which are based in Austria or have a permanent establishment in the country so that they can obtain the authorisation to employ international skilled workers (employed persons without Austrian citizenship) and/or to provide advisory services and support to the international skilled workers themselves.  

A consultation on the part of ABA is only possible if the company itself or the skilled worker makes personal data of the international skilled worker (hereafter: employee data) available as well as the documents required for the application. This data and these documents particularly involve the following: a filled-out application form; birth certificate (if applicable, those of the family members); curriculum vitae of the skilled worker; Police Clearance Certificate; if need be, the marriage certificate or Partnership Certificate; passport; if need be, the existing residence permit or visa; education (e.g., certificates, university diplomas); proof of professional experience and/or years of prior employment (references/recommendations, confirmation(s) of periods of social insurance contributions, etc.); language certificates.  

Legal basis 

We process the data which you have provided to us to fulfil our legally stipulated and other 

(pre-)contractual obligations within the context of our consulting activities pursuant to Art. 6 para. 1 lit. b GDPR; otherwise, the legal basis is Art. 6 para. 1 lit. e GDPR in connection with the Act Governing the Employment of Foreign Nationals, especially Sect. 20. Moreover, we base our activities on the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR (entering of data into our CRM; cultivating the business relationship, to ensure that you are provided with up-to-date and relevant information - see section on marketing for existing customers).  

Please note that we may possibly not be able to accept you as a customer if you do not provide the required information to us or the information you provide is incomplete. 

Dissemination of data  

ABA only forwards data and documents to third parties if there is a valid legal basis for doing so, the third party is directly involved in the consultation process and the consulting and support services provided by ABA require this information to be forwarded. Third parties include public authorities or relevant bodies which may be involved such as the Austrian Public Employment Service; the Immigration Authority offices located in Austria’s federal provinces, especially the district administrative offices and offices of the provincial governments; various federal ministries; Austrian representative bodies abroad; the Austrian chapter of the Association for Information Systems, ENIC NARIS (National Academic Recognition Centre) AUSTRIA. If data and/or documents which have been supplied refer to family members of the skilled worker, the skilled worker declares the consent has been provided by the affected family member so that ABA may freely act on behalf of the skilled worker.  

Purpose 

Consulting and support for Austrian employers and international skilled workers in obtaining the required authorisation to employ the international skilled worker.  

Retention period 

We store the data you have provided to us for as long as it is deemed necessary to achieve the agreed upon objective or is otherwise necessary. The retention period is also subject to legally stipulated deadlines, including statutory limitation periods, for example as pursuant to the regulations contained in Sect. 1478 ff. of the Austrian Civil Code.  

Agreement pursuant to Art. 28 GDPR about order processing (company, business location agency, personnel service provider) 

Inasmuch as companies provide data to ABA, especially employee data and documents, consulting and support by ABA takes place on behalf of the company in its role as the controller (Art. 28 GDPR); this is done in accordance with the following stipulations in which case, if a business location agency of an Austrian federal province and/or a personnel service provider is involved, they apply analogously or equally to the agency and/or to the personnel service provider.  

The object of the contract is the consulting and support of companies in obtaining the required authorisation to employ the respective international skilled worker.  

The contractual relationship ends when the desired consultations and support have been provided. For example, this can occur when the desired permit has been issued or with the expiration of the commissioned deadline monitoring, if applicable.  

ABA pledges to exclusively process data and/or processing results within the context of the work contracted to it by the company. If ABA is commissioned by a public authority to publish data or documents entrusted to it, ABA is required, if legally permissible, to immediately inform the company and refer the public authority to it. 

ABA declares that it obliges all individuals assigned the task of data processing to maintain confidentiality. This is done before these people begin their work on behalf of ABA. Or else, these individuals are subject to an appropriate legal obligation of confidentiality, and it has taken all required measures to ensure the security of processing pursuant to Art. 32 GDPR.  

ABA implements all technical and organizational measures so that the company can comply with the rights of the affected skilled worker pursuant to Chapter III of the GDPR within the legally stipulated deadlines and forwards all the required information for this to the company. If a corresponding application (by the skilled worker) has been sent to ABA and indicates that the applicant mistakenly considers ABA to be the controller responsible for data processing, ABA must immediately forward the application to the company and must also inform the applicant about this fact. 

The ABA also supports the company in fulfilling the obligations stipulated in Art. 32-36 GDPR. 

With respect to the processing of data entrusted to the care of the company, the company has the right to exert control at any time. Furthermore, ABA will inform the company if it takes the view that instructions provided by the company violate valid data protection regulations.  

After termination of the contractual relationship, the ABA is obliged to forward all processing results and documents containing data to the company or to delete the data on the company’s behalf.  

If the skilled worker claims that a violation of data protection regulations has taken place, the company, which ABA designated as the controller, shall indemnify, and hold ABA harmless.  

From ABA’s point of view, all data processing work is carried out exclusively within the EU and EEA.  

Within the context of an ongoing business relationship, registered customers can share documents with ABA by using the “WORK in AUSTRIA Customer Area” portal, as well as convey inquiries to ABA and enjoy the advice and support of ABA employees. For our portal, we make use of   

SharePoint Online, which is a collaboration and data exchange platform of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park Leopoldstown Dublin 18, D18 P521 Ireland. This platform enables the efficient and rapid, location-independent retrievability of documents. In using SharePoint, personal data about you is processed. Please note that this data protection information is only designed to inform you about the processing of your personal data by us when you use Microsoft applications together with us. You can find further information about the processing by Microsoft here: https://www.microsoft.com/en-us/privacy/privacystatement 

In using our portal, various types of data are processed. The scope of the data depends on which information you supply as a user. Certain kinds of information are already automatically processed as soon as you use a SharePoint application, especially the following: your IP address; your username (access data for the SharePoint application); information about yourself which you supply as a user, supplier and recipient of data within the SharePoint application (family name, first name, telephone number, e-mail address and other data such as a profile picture provided by you); your user activities such as the time of access, date, type of access, information on the data/files/documents which you access and other activities in connection with the use, such as the creation, revision or deletion of a document; taking of notes; and diagnostic data so that the service can be provided free from error. The processing of diagnostic data serves the purpose of improving and updating the software as well as ensuring the security of the services and quick troubleshooting on the part of Microsoft. 

Legal basis 

We process the data which you have provided to us to fulfil our legally stipulated and other (pre-) contractual obligations within the context of our consulting activities pursuant to Art. 6 para. 1 lit. b GDPR. Otherwise, the legal basis is Art. 6 para. 1 lit. e GDPR in connection with the Act Governing the Employment of Foreign Nationals, especially Sect. 20. 

Please note that we may possibly not be able to accept you as a customer if you do not provide the required information to us or the information you provide is incomplete. 

Purpose 

Consulting and support for Austrian employers and international skilled workers in obtaining the required authorisation to employ the international skilled worker.  

Retention period 

We store the data you have provided to us for as long as it is deemed necessary to achieve the agreed upon objective or is otherwise necessary. The retention period is also subject to legally stipulated deadlines, including statutory limitation periods, for example as pursuant to the regulations contained in Sect. 1478 ff. of the Austrian Civil Code.  

Dissemination of your data 

The same stipulations apply as laid down in Section 12 ABA IMMIGRATION & RESIDENCE SERVICES of this Data Protection Declaration (see above). 

Furthermore, Microsoft can access the documents/data/information uploaded to the portal by the user. Microsoft is a so-called processor. The processing of personal data by Microsoft takes place exclusively on servers located in the EU. In principle, data is not forwarded to third parties or to third countries outside of the EU. The exception is when the user himself or herself resides in such a country. 

Agreement pursuant to Art. 28 GDPR about processing (company, business location agency, personnel service provider) 

The same stipulations apply as laid down in Section 12 ABA IMMIGRATION & RESIDENCE SERVICES of this Data Protection Declaration (see above). 

Interactive modules (e.g., the Immigration Guide Austria) are embedded into our website. These modules enable you to receive information on residence permits and other issues by clicking a button. If you access the subsection of this website, into which such a module is embedded, your IP address, date and time of day of your accessing the module, time zone, access status/http-status code, data volume, address of the referring page, browser, operating system, language and version of the browser software are processed so that we are able to make the module available to you in this form.  

Legal basis 

This processing of your personal data is justified pursuant to Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in making the functions of this website available and technically ensuring the integration of the module.  

Purpose 

To provide support to Austrian employers and international skilled workers in obtaining the required authorisation to employ the international skilled worker.  

Retention period 

The above-mentioned information is stored for a maximum period of three months and then deleted.  

We use the provider YouTube to integrate videos on our website. YouTube is a service supplied by Google Inc. The videos are stored on www.youtube.com and can be directly played when using our website.  

We have at least one YouTube plugin embedded on our website. When visiting our website your browser establishes a direct connection with the YouTube servers. Thus, the information is transmitted to YouTube that your browser has visited the corresponding page on our website, even if you do not have a YouTube account or are not logged in to your account. This information is directly sent by your browser to a YouTube server in the USA and stored there. In principle, your IP address cannot be assigned to you, provided you have not logged into YouTube or any other Google service before accessing the website or are not permanently logged into the same. If you are logged in, it is possible to assign your page visit to your YouTube account and you would enable YouTube to directly assign your surfing behaviour to your personal profile. Please note that as the provider of the websites, we do not receive any information from YouTube about the content of transmitted data or their use. For more information on YouTube’s official data protection policy, please refer to the following: https://policies.google.com/privacy?hl=en-US 

If you wish to prevent this transmission and storage of your data and surfing behaviour on our website by YouTube, you must log out of YouTube before you visit our website, and, if necessary, delete the cookies placed by YouTube.  

Our collection of data is based on your giving your consent pursuant to Art. 6 para. 1 lit. a EU-GDPR.  

The company has obtained certification in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards when data is processed in the USA. Every company certified in accordance with the DPF is committed to complying with these data protection standards. You can receive further information on this from the provider under the following link: https://www.dataprivacyframework.gov/participant/5780 

On this website we use the Facebook Pixel (known also as the Meta-Pixel) from the social media network Facebook, which is operated by Meta Platforms Technologies Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The code implemented on this site can evaluate the behaviour of visitors who ended up on this website due to a Facebook advertisement. This can be used to improve Facebook’s advertisements, and this data is registered by Facebook and stored. The recorded data is not visible or accessible to us but can only be used within the context of advertisements. The use of the Facebook Pixel means that cookies are also set.  

By using the Facebook Pixel, Facebook is informed about the visit to this website, so that visitors to Facebook get to see suitable advertisements. If you have a Facebook account and are registered, the visit of this website is assigned to your Facebook user account. Here you can find out how the Facebook Pixel is used for advertising campaigns: https://en-gb.facebook.com/business/tools/meta-pixel 

You can change your settings for advertisements in Facebook at https://www.facebook.com/help/109378269482053 provided that you are registered in Facebook.

On our website we make use of the LinkedIn Insight Tag, a conversion tool of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. 

Personalised advertisements on LinkedIn can be shown to visitors to this website with the help of this technology. Furthermore, there is the possibility to generate anonymous reports on the performance of advertisements as well as information on website interaction. Furthermore, the LinkedIn Insight Tag is embedded on this website, enabling a connection to be established to the LinkedIn server, providing that you visit this website and are simultaneously logged into your LinkedIn account. 

In the LinkedIn Privacy Policy at https://www.linkedin.com/legal/privacy-policy, you can find further information on data collection and data use as well as the possibilities and rights to protect your privacy. If you are logged into LinkedIn, you can deactivate the data collection at any time under the following link: https://www.linkedin.com/psettings/enhanced-advertising. 

We apply the marketing automation and web tracking solution of ClickDimensions LLC, 6849 Peachtree Dunwoody Road, Building B-1, Suite 200, Sandy Springs, GA 30328, United States of America (“ClickDimensions”) on our website. This uses so-called cookies (refer also to cookies and tracking pixel) stored on your computer, which enable an analysis of website use.  

ClickDimensions makes use of its own HTML browser cookies when it comes to the web tracking technology. This means that visitors to our website can set their own browser so that it rejects cookies or can easily remove cookies installed by us or others.  

For example, to set the browser Internet Explorer so that it rejects cookies, select in the menu: Extras > Internet options > Privacy > and choose the desired privacy level under Settings with the slider. If you wish to delete cookies in Internet Explorer, select Extras > Internet options > General >, click the button “Delete” under the browser history and activate the option Cookies in the subsequent dialogue. 

If you do not want the site to set a cookie, you can activate the private browsing mode in your browser. The designations for the respective private browser mode are as follows:  

InPrivate mode in Microsoft Edge 

InPrivate mode in Microsoft Internet Explorer 

Incognito mode in Google Chrome 

Private browsing mode in Mozilla FireFox 

Private browsing mode in Apple Safari 

ClickDimensions never stores information in the LSO area of your computer i.e., we never use so-called “Flash Cookies” (Local Shared Objects, in short LSO). 

ClickDimensions does not make use of any visitor identification technologies, in which uploaded information can be exchanged with other websites.  

If you want to download photos from a Work in Austria newsletter or click on a link in one of these e-mails, this process is automatically recorded via the e-mail service of ClickDimensions LLC, 6849 Peachtree Dunwoody Road, Building B-1, Suite 200, Sandy Springs, GA 30328, USA (“ClickDimensions”). The generated usage information is transmitted from the servers of ClickDimensions in the Netherlands to our servers in Germany and stored there for statistical usage analyses. The findings help us to continuously improve the contents of our newsletter and to design the information available on our websites to be more interesting for you. If you do not approve of the storage and evaluation of this data, you can unsubscribe via the link found at the end of every newsletter.  

Cloudflare 

We use the “Cloudfare” service to make our website faster and more secure. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereafter “Cloudflare”). Cloudfare offers a global content delivery network (CDN). This is a network of connected servers which determines the fastest path to transmit our contents to you when you visit our website. At the same time, Cloudfare offers security services to protect our website, by analysing whether the visit involves unauthorised or improper access or not. This encompasses a reverse proxy, a pass-through security service and a content distribution network. Cloudfare records and uses information from the website visitor to operate, maintain and improve its services in line with the client agreement concluded with us. This information can include the IP address, system configuration information (browser type, operating system) and other information about the traffic from and to the website. Cloudfare works on our behalf as a processor and may only process the data in accordance with our instructions and not for its own purposes.  

You can find further information in the Cloudfare Privacy Policy: https://www.cloudflare.com/privacypolicy 

An adequacy decision of the EU Commission exists for the USA, namely the “EU-US Data Privacy Framework” (DPF). Cloudfare is certified according to DPF and is thus committed to complying with these data protection standards. 

The use of Cloudfare is based on our legitimate interests to ensure the secure use of our Internet presence and to repel malicious attacks from the outside as well as our interest in not having to operate our own content delivery network. Accordingly, the legal basis is Art. 6 para. 1 lit. f GDPR.

On our website we use the cookie manager of the company Objectis Ltd., Laisves st. 60, LT-05120 Vilnius, Lithuania (hereafter “Cookie Script”). This entails software which scans our website, identifying and categorising all existing cookies. As a website visitor, you are informed about the use of cookies via a privacy-compliant cookie information script and can decide yourself which cookies you permit and which ones you reject.  

If you access our website, Cookie Script sets a cookie to store your consent preferences so that your preferences can be taken into account during later visits to this website. Furthermore, your masked IP address (a technical security measure in which the IP address is shortened) is determined. The elicitation of the masked IP address is only for the purpose of verifying the given approval.  

You can find detailed information on the purpose of data collection and the Privacy Policy of Cookie Script at: https://cookie-script.com/legal/privacy-policy 

If you wish to revoke your consent, simply delete the cookie in your browser. Compulsory legally stipulated retention periods remain unchanged.  

The use of Cookie Script is based on our legal obligation to obtain your consent to store certain cookies on your terminal and to document this in a privacy-compliant manner, as well as our legitimate interest in the legally compliant design of our website. Accordingly, the legal basis is Art. 6 para. 1 line 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR.