The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Riverside Change Consultants GmbH
Leechgasse 29
8010 Graz
Tel. +43 316 418 118
e-mail: office@riverside-change.com
UID: ATU80694018
FN 627312, FG Graz

Contact details for data protection questions: office@riverside-change.com

No data protection officer has been appointed as this is not legally necessary.

We use the terms of the General Data Protection Regulation (GDPR) in our information. To ensure that this information is easily understandable for all users, we try to avoid legal terms as much as possible.

Your Rights:

You have the following rights:

• Right to information (request for information)
• Right to rectification
• Right to deletion (right to be forgotten)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Rights related to automated decisions (including profiling)
• Right to complain to the data protection authority (https://www.dsb.gv.at/)

You can assert your rights at any time. To do this, we ask you to contact us by post or electronic message via email office@riverside-change.com.

We ask for your understanding that we cannot answer telephone or verbal inquiries as we cannot ensure that the information is actually given to the authorized person. Please help us identify you when you contact us.

If you have any questions, we are happy to help you at any time and look forward to receiving feedback on our information content.

Data processing in general

To provide consulting services, we process personal data based on a contractual relationship or upon request. The data will be processed for the following purposes:

• Processing of order services
• Organization of training and further education measures
• Organizing meetings (video conferences) and scheduling them
• Carrying out marketing activities
• Billing of services and debt collection
• Creation, management and updating of customer data
• Documentation of customer projects and feedback/comments

The following data categories are recorded:

• Personal data (first and last name, date of birth)
• Bank and payment details
• Contact details and correspondence data
• Data on projects and project teams (list of participants with information about their function and role in the company)
• Data for service billing
• Master data (address and contact details)

We work with established strategic partners for global projects – where necessary and legally permissible, they also receive personal data. In addition, the following recipients may receive your data:

• Transmission recipients, such as insurance companies
• Contract processors, such as shipping service providers, printing companies, IT service providers
• Foreign authorities
• Domestic authorities and courts
• Lawyers, tax advisors and chartered accountants

Our customers’ data is generally stored for the duration of the ongoing contractual relationship. After the contractual relationship has ended, only the data absolutely necessary due to the applicable legal provisions or retention obligations (UGB, ABGB, BAO, etc.) will be stored for the duration of these legal retention obligations. The data without a legal retention obligation is generally stored for a period of two years after the last contact. If the storage period is longer, we will explicitly inform you of this.

Webseite

When using the website and its subpages and service offerings, Riverside processes personal data for the following purposes:

• Presentation of the website and its contents
• Contact
• Company presentations
• Ensuring functionality
• Marketing activities
• Analysis of website usage by users

For this the following data will be collected:

• IP-Address
• Date and time of your website accesss
• Browser types and functions
• The operating system used by the accessing system
• Website or subpage from which an accessing system accesses our website (when using a link)
• Internet service providers which access the accessing system
• Collection of data generated by cookies

Which services do we use? Who receives the data?

Processors, such as web hosting services, IT service providers

When using cookies (based on consent via cookie banner):

“Google Analytics”, Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA

“Youtube”, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The server protocols (log files) are stored for up to two years. The legal basis for the processing of access data (web server log files), user evaluations and the data collected through cookies is, in accordance with Article 6 Paragraph 1 lit f GDPR, the legitimate interest of the person responsible (presentation of online services, data security).

Please note: Cookies may also be used by us and third parties to process personal data. Third-party providers such as Google, among others, have their branches in the USA without an adequate level of data protection. There is a risk that EU citizen data will be processed by the US authorities without an effective legal remedy. We therefore ask you to take this into account when giving your consent. You can revoke your consent at any time (change the settings for the cookie banner).

Newsletter

The newsletter offered contains information about seminars organized by Riverside-Change Consultants GmbH, news and recommendations from the company and specialist articles on the subject of change management and consulting.

When you use the newsletter, Riverside processes personal data for the following purposes:

• Company presentation
• Marketing activities
• Analysis of newsletter usage

The following data categories are recorded:

• Name and E-Mail address
• Time of delivery
• Time of opening, duration of opening, IP address of opening
• Email program used (mail client), which link was clicked and the time of the click

Which services do we use and who receives the data?

• Processors like Mailchimp from Rocket Science Group

We process the data based on your consent and store it until your consent is revoked. After unsubscribing from the newsletter, we delete the data immediately after unsubscribing or for as long as legal retention requirements apply. You can unsubscribe at any time using the unsubscribe link in the mailings.

Online training, events & training programs

Riverside Change Consultants GmbH offer the opportunity to book and attend seminars, workshops and large group events online. Riverside is also hosting virtual events. When you participate, Riverside processes personal data for the following purposes:

• Maintaining list of team members
• Recordings during online team meetings
• Event organization
• Online collaboration
• Project implementation, implementation of seminars, workshops and large group events
• Meeting organization

The following data categories are recorded:

• Name and postal address
• Position in the company
• Areas of interest
• Seminar topic/ event content
• Project data

Which services do we use and who receives the data?

• MS Teams, Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA
• Zoom Video Communications, Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA
• Miro Online Whiteboard, RealtimeBoard, Inc., 201 Spear Street, Suite 1100, San Francisco, CA 94105
• Mentimeter AB (publ), Tulegatan 11, SE-113 86 Stockholm, Sweden

We process the data based on your consent or to fulfill the contract and store it until the consent is revoked or after the business relationship has ended. After registering for our events, we delete the data from our system within 3 years or for as long as legal retention requirements exist. Data will only be transferred to unsafe third countries (including the USA) after consent has been given. If you would like to revoke your consent, please contact us by post or electronic message to office@riverside-change.com.

On-site training, events & training programs

Riverside offers the opportunity to attend or book seminars, workshops and large group events. Riverside also hosts corporate events. If you participate, Riverside processes personal data for the following purposes:

• Conducting seminars, workshops and large group events
• Maintaining list of team members/participants
• Photo/video recordings during online meetings
• Event organization
• Project implementations
• Meeting organization
• Documentation of events
• Follow up reporting
• Marketing (e.g. website, newsletter, social media)

The following data categories are recorded:

• Name and postal address
• Position in the company
• Areas of interest
• Seminar topics/ event content/ project data
• Video and photo material

Which services do we use and who receives the data?

• Processors, such as shipping services, newsletter providers, photographers
• Social media services, like LinkedIn
• Press agencies for broadcasts

We process the data based on your consent or to fulfill the contract and store it until the consent is revoked or after the business relationship has ended. After registering for our events, we delete the data from our system within 3 years of last contact or as long as legal retention requirements apply. If you would like to revoke your consent, please contact us by post or electronic message to office@riverside-change.com.

Disclaimer about photos & videos during events

During Riverside events, including virtual or web-based events (online meetings, telephone conferences, webinars), photos/videos are created for documentation/application purposes. The person depicted gives his/her express consent to photographs of himself/herself being taken. He/she acknowledges that this consent is given free of charge. Furthermore, the person depicted gives his/her consent that his/her images can be used and published free of charge for the purposes of follow-up reporting, advertising and documentation in electronic media (e.g. website, newsletter, social media).

Changes to this privacy policy

If we introduce new services or services, change Internet procedures or if Internet and computer security technology develops, we reserve the right to update our “Privacy Policy”. In the cases mentioned above, the data protection regulations may be changed or supplemented without prior notice.

July 15th, 2024