Data Protection

Information obligations on data processing in accordance with Art. 13,14 GDPR

Below we offer you an overview of the processing of your personal data and the rights to which you are entitled under data protection law.

1. Contact details of the person responsible for data processing and the data protection officer:


OeNPAY Financial Innovation HUB GmbH
Seegasse 3/1, 1090 Wien

Data Protection Officer:

Mag. Dr. Michael Foerster
Phone number: 0676/6672365

Information, complaints, data information at

2. Information about the data processed by us

We process the personal data that we receive as part of our business relationship, applicants for funding or interested parties.

  • Contact details for the organization and implementation of events, training courses and workshops
  • Applications/reports in connection with Projects of the person responsible, presentation of the respective project
  • Processing and keeping records of personal data for payroll accounting and compliance with recording, information and reporting obligations, insofar as this is required on the basis of laws or standards of collective legal structures or contractual obligations. Use and recordkeeping of personal data from applicants if this data was provided by the person concerned.
  • Business initiation, preparation of offers, transmission of order confirmations, preparation of contracts and other agreements with customers; Complaints processing, customer satisfaction queries, maintenance of business relationships, marketing activities
  • E-mail communication and documentation of e-mails as part of the day-to-day business operations of the person responsible, as well as the organization of appointments and the administration of contact data
  • Creation of meeting notes or other documents – in which not primarily personal data are processed and which arise in the context of the business operations of the person responsible
  • Carrying out all procurement/purchasing activities for those responsible
  • Documentation of business conduct and corporate governance

3. Purpose and Legal Basis

The processing of the aforementioned personal data takes place in accordance with the data protection regulations and exclusively on the basis of one of the justifications specified in Art. 6 Para. 1 DSGVO, primarily for:

a. To fulfill contractual obligations

The processing of personal data takes place in order to fulfill the contractual obligations.

b. to comply with legal obligations or public interests

Personal data can be processed for the purpose of fulfilling various legal obligations.

c. Based on your consent

Processing based on your consent is lawful if you have given us consent to process your personal data for specific purposes. Your personal data will only be processed in accordance with the purposes specified in the consent and to the extent agreed therein. A given consent can be revoked at any time with effect for the future.

4. Data transfer to third parties or to third countries

Data transfers outside the European Union (so-called third countries) do not take place.

5. Your Rights and Obligations

a. Provision of your data

As part of our business relationship, you must provide the personal data that is necessary for the establishment and implementation of a business relationship and the fulfillment of the associated contractual obligations or that we are legally obliged to collect. If you do not provide us with the necessary information and documents, we may not enter into the business relationship you require, conclude the contract or execute the order.

b. Your data protection rights, in particular the right to information, correction and deletion

Every person whose personal data we process or have processed in the past is entitled to the following data subject rights, provided these are not subject to legal restrictions or violate legal provisions:

  • The right to information as to whether and, if so, which personal data is being processed and to what extent this processing is taking place;
  • The right to rectification, supplementation or deletion of personal data;
  • The right to restrict the processing of personal data;
  • The right to portability of personal data;
  • The right to object to a processing activity, under certain conditions;
  • The right to withdraw consent at any time. This revocation does not affect the legality of the processing carried out as a result of the consent until the consent was revoked.

    The restrictions of Section 4 (2) of the Data Protection Amendment Act 2018 apply to the right to rectification and the right to erasure. There is also a right of appeal to the data protection authority.

6. Information about your right to object

a. Individual right of objection

You have the right to object at any time to the processing of your personal data, which is in the public interest and based on a balance of interests. If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

revocation can be made informally

OeNPAY Financial Innovation HUB GmbH, Seegasse 3/1, 1090 Vienna or by email to

b. Further information

Supervisory authority for compliance with data protection regulations in Austria:

Austrian data protection authority
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0