Privacy policy

Rights of data subjects/your rights under data protection law

You have the following rights under applicable data protection law with regard to personal data concerning you.

Right of access: You may obtain information from us at any time about whether and which personal data we store about you. The provision of information is free of charge for you.

The right of access does not exist or is subject to limitations if and to the extent that confidential information, such as information that is subject to professional secrecy, is disclosed.

Right to rectification: If your personal data stored with us is inaccurate or incomplete, you have the right to obtain the rectification of this data from us at any time.

Right to erasure: You have the right to obtain from us the erasure of your personal data if and to the extent that the data are no longer needed for the purposes for which they were collected or, if processing is based on your consent, you have withdrawn your consent. In this case, we must stop processing your personal data and remove it from our IT systems and databases.

A right to erasure does not exist insofar as

• the data may not be erased due to a legal obligation or must be processed due to a legal obligation;
• the processing of data is necessary for the establishment, exercise or defence of legal claims.

Right to restriction of processing: You have the right to obtain from us the limitation of the processing of your personal data.

Right to data portability: You have the right to receive from us the data you have provided in a structured, common and machine-readable format, as well as the right to have this data transferred to another controller. This right only exists if

• you have made this data available to us on basis of consent or an agreement entered into with you;
• the processing is carried out by automated means.

You may assert all of the above-described data subject rights against PwC Strategy& by addressing your specific request to the following contact details:

Postal address:
PwC Strategy& (Austria) GmbH
Donau-City-Straße 7
1220 Wien

E-Mail:
Vienna.Reception@strategyand.at.pwc.com

Right to lodge a complaint with a data protection supervisory authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

Provision of data

Even if partial automatic transmission of data takes place when you call up our website, you are not legally or contractually obliged to provide data in connection with the use of our homepage.

In connection with the contact form and contacting us by email, you are free to send us data via these channels, but without providing us your personal data in the context of contacting us in this way we cannot process and answer any enquiries from you in this respect.

In connection with the order of high-quality publications (e.g. studies, whitepapers), data are required for the conclusion of a contract with us; the provision of this data is also free in this respect, but without the data we cannot conclude a contract with you or provide you the publications.

Description of data processing on the website/app and legal basis for the processing

Recipient of the data
In order to fulfil the processing purposes listed below, data is also transferred to third parties. This may also include the transfer of personal data to European and non-European countries and the storage of data outside the EU or the European Economic Area (EEA).

Recipients bound by instructions
We share your data with service providers bound by instructions, both within the PwC network and with other third parties, such as IT service providers, who support us in our activities, e.g. as part of the administration and maintenance of the websites and the related systems and/or for other internal or administrative purposes.

PwC Strategy& is amember of the global PwC network, which consists of the individual legally independent PwC firms. In the course of our activities, we use other German or foreign PwC network companies as network-internal IT service providers bound by instructions, which provide services for the operation, maintenance and care of the IT systems and applications used by the PwC network companies. This is in particular PwC IT Services Ltd. based in the United Kingdom (UK).

If we pass on data to service providers bound by instructions, we do not require a separate legal basis for this.

Independent recipients
In addition, we share your data in individual cases both within the PwC network and with other third parties who use your data under their own responsibility. For example, in individual cases we also transfer personal data to other companies in the PwC network to support and improve the effectiveness of our business processes (including coordinated marketing activities).

In addition, in individual cases, we also pass on your data to other third parties, such as public authorities, courts or other bodies, if we are required by law or by official or court order of an EU member state to disclose personal data to these bodies. These bodies also use the data on their own responsibility.

Insofar as you have explicitly consented, Art 6 para 1 lit a) GDPR is the legal basis for the data transfer. If there is a legal obligation to disclose the data, the legal basis for the data transfer is Art 6 para 1 lit c) GDPR. If, on the other hand, the disclosure is necessary for the fulfilment of a contractual or pre-contractual measure with you as a natural person, Art 6 para 1 lit b) GDPR is the legal basis. Otherwise, the transfer is based on our legitimate interests and the legal basis is Art 6 para 1 lit f GDPR. We and the other companies in the PwC network have an interest in making our work processes efficient and in sharing business processes within the PwC network for this purpose.

Data transfer to recipients in third countries outside the EU/EEA
Insofar as any of the above-mentioned data transfers are made to a recipient outside the EEA (to so-called “third countries”), an appropriate level of data protection for the foreign transfer is ensured by means of suitable security measures.

For data transfers within the PwC network, the PwC network companies have, among other things, concluded an internal data protection agreement which provides for compliance with the EU standard contractual clauses of the EU Commission within the meaning of Art 46 para 2 lit c) GDPR for the transfer of personal data from EU/EEA countries to PwC network companies outside the EU/EEA.

If you have any questions about such data protection contracts based on the EU standard contractual clauses or if you would like more information about further security mechanisms and security measures for the transfer of data to third countries, please feel free to contact our Data Protection Officer, e.g. at DE_Datenschutz@pwc.com.

Use of cookies

In order to make visiting our website attractive and to enable the use of certain functions, we and certain third parties use cookies on our website. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies to recognise your browser the next time you visit us (so-called persistent cookies).

The following cookie categories are used:

Cookies strictly necessary for the operation of our website (hereinafter “required Cookie”)
These cookies are required for the operation and functionality of the website. They make the website technically accessible, secure and usable and provide essential and basic functionalities, such as navigation on the website, correct display of the website in the internet browser or consent management.

• Provider: Microsoft, Hostname: bhw-computer.azurewebsites.net, Name: ARRAffinity, Cookie category: required cookie, Function: Set by websites running on the Microsoft Azure cloud platform. It is used for load balancing to ensure that visitors' page requests are directed to the same server in each browser session, Duration: Closing the browser.
• Provider: Microsoft, Hostname: eeg-computer.azurewebsites.net, Name: ARRAffinity, Cookie category: required cookie, Function: Set by websites running on the Microsoft Azure cloud platform. It is used for load balancing to ensure that visitors' page requests are directed to the same server in each browser session, Duration: Closing the browser.
• Provider: Microsoft, Hostname: spk-calculator.azurewebsites.net, Name: ARRAffinity, cookie category: required cookie, Function: Set by websites running on the Microsoft Azure cloud platform. It is used for load balancing to ensure that visitors' page requests are directed to the same server in each browser session, Duration: Closing the browser.
• Provider: Microsoft, Hostname: bhw-computer.azurewebsites.net, Name: ARRAffinitySameSite, Cookie category: required cookie, Function: Set by websites running on the Microsoft Azure cloud platform. It is used for load balancing to ensure that visitors' page requests are directed to the same server in each browser session, Duration: Closing the browser.
• Provider: Microsoft, Hostname: eeg-computer.azurewebsites.net, Name: ARRAffinitySameSite, Cookie category: required cookie, Function: Set by websites running on the Microsoft Azure cloud platform. It is used for load balancing to ensure that visitors' page requests are directed to the same server in each browser session, Duration: Closing the browser.
• Provider: Microsoft, Hostname: spk-calculator.azurewebsites.net, Name: ARRAffinitySameSite, Cookie category: required cookie, Function: Set by websites running on the Microsoft Azure cloud platform. It is used for load balancing to ensure that visitors' page requests are directed to the same server in each browser session, Duration: Closing the browser.
• Provider: www.pwc.de, Name: JSESSIONID, Cookie category: required cookie, Function: general purpose platform session cookie, used by pages written in JSP. Normally used to maintain an anonymous user session by the server. Duration: Closing the browser.
• Provider: apps.pwc-host.de, Name: PHPSESSID, Cookie category: required cookie, Function: Serves the proper display of surveys. Duration: Closing the browser.
• Provider: pwcdeapps.pwc.de, Name: NLSessionSpwcdeapps, Cookie category: required cookie, Function: Serves the proper display of the event search. Duration: Closing the browser.
• Provider: pwcdeapps.pwc.de, Name: WhlWFLB, Cookie category: required cookie, Function: Serves the proper display of the event search. Duration: Closing the browser.
• Provider: app.powerbi.com, Name: ai_session, Cookie category: required cookie, Function: Used to properly display Microsoft Power BI interfaces. Duration: Closing the browser.
• Provider: www.pwc.de, Name: ppms_privacy, Cookie category: required cookie, Function: Stores the visitor's consent to data collection and use. Duration: 365 days.
• Provider: www.pwc.de, Name: Salesforce__s9744cdb192d044faa1bf201d29fafd1e, Cookie category: required cookie, Function: Store user preferences (if any). Duration: Closing the browser.
• Provider: www.pwc.de, Name: Salesforcext_0d95e, Cookie category: required cookie, Function: Store user preferences (if any). Duration: Closing the browser.
• Provider: www.pwc.de, Name: AKA_A2, Cookie category: required cookie, Function: This cookie is set by Akamai. This cookie is used for DNS Prefetch and HTTP2 Push. It helps in improving the performance. Duration: 1 hour.

Analytics cookies
These cookies enable us to recognise you as a visitor to our website, to collect information on user behaviour on the website and to analyse it statistically.

• Provider: www.pwc.de, Name: pk_ses.<websiteID>.<domainHash>, Cookie category: Analysis cookie, Function: Indicates an active session of the visitor. If the cookie is not present, the session ended over 30 minutes ago and was counted in a pk_id cookie. Duration: 30 minutes.
• Provider: www.pwc.de, Name: pk_id.<websiteID>.<domainHash> , Cookie category: Analytics cookie, Function: Used to recognise visitors and record their various characteristics. Duration: 13 months.
• Provider: www.pwc.de, Name: piwik_auth, Cookie-Category: Analytics-Cookie, Function: Stores session information for the user interface (UI) of Piwik PRO. As long as this cookie is valid and contains a login and a token_auth parameter, a visitor is considered to be logged in and a PIWIK_SESSID cookie is updated. Duration: 24 minutes.
• Provider: www.pwc.de, Name: PIWIK_SESSID, Cookie-Category: Analysis-Cookie, Function: Stores a PHP-Session-ID. Duration: 24 minutes.
• Provider: www.pwc.de, Name: stg_traffic_source_priority, Cookie category: Analytics cookie, Function: Stores the type of traffic source that explains how the visitor arrived at your website. Duration: 30 minutes.
• Provider: www.pwc.de, Name: stg_last_interaction, Cookie-Category: Analysis-Cookie, Function: Determines whether the session of the last visitor is still running or a new session has started. Duration: 365 days.
• Provider: www.pwc.de, Name: stg_returning_visitor, Cookie-Category: Analysis-Cookie, Function: Determines whether the visitor has been on your website before - these are returning visitors. Duration: 365 days.
• Provider: www.pwc.de, Name: stg_fired__, Cookie category: Analytics cookie, Function: Determines whether the combination of a tag and a trigger was triggered during the current visitor session. Duration: Closing the browser.
• Provider: www.pwc.de, Name: stg_utm_campaign, Cookie category: Analytics cookie, Function: Stores a name of the campaign that directed the visitor to your website. Duration: Closing the browser.
• Provider: www.pwc.de, Name: stg_pk_campaign , Cookie category: Analytics cookie, Function: Stores a name of the campaign that directed the visitor to your website. Duration: Closing the browser.
•  Provider: www.pwc.de, Name: stg_externalReferrer, Cookie category: Analytics cookie, Function: Stores a URL of a web page that referred a visitor to your website.... Duration: Closing the browser.
• Provider: www.pwc.de, Name: _stg_opt_out_simulate, Cookie-Category: Analytics-Cookie, Function: Used to simulate the behaviour of the opt-out snippet in the debugger. It turns off all tracking tags in the tested domain. Duration: 365 days.
• Provider: www.pwc.de, Name: __stg_optout, Cookie category: Analysis cookie, Function: Used to disable all tracking tags in the tested domain. Duration: 365 days.
• Provider: www.pwc.de, Name: stg_global_opt_out (deprecated), Cookie category: Analytics cookie, Function: Used to disable all tracking tags on websites belonging to a Piwik PRO account. Duration: 365 days.
• Provider: www.pwc.de, Name: ppms_webstorage, Cookie category: Analysis cookie, Function: A so-called stringified object that contains information about created cookies for each module. It stores data about each cookie created, such as a key, a value, an expiry date, a path, a domain and more. This is the same data that was used to create a cookie. Duration: A ppms_webstorage item is not automatically removed. However, a visitor can delete it manually. Individual entries in the item are removed after a corresponding cookie has expired.

The legal basis for the use of technically necessary cookies is Section 15 (1) sentence 1 of the German Telemedia Act ("TMG") or on the basis of Art. 6 (1) f) DSGVO to protect our legitimate interests. Our legitimate interests here lie in particular in being able to provide you with a technically optimized website that is user-friendly and tailored to your needs, as well as to ensure the security of our systems. Furthermore, we use cookies on the basis of the consent you have given us in accordance with Art. 6 (1) a) DSGVO.

The consent includes all cookies selected by you and the associated storage of information on your terminal device as well as their subsequent reading and the subsequent processing of personal data.

Your revocation does not affect the lawfulness of the processing carried out until the revocation.

Disabling the cookie settings

Most browsers are pre-set to accept cookies automatically. You can object to the creation of cookies by disabling cookies in your browser’s system settings. Please note, however, that some of the cookies are technically necessary for the functionality of our website, otherwise the page cannot be requested and displayed. By disabling cookies, you will not be able to use parts of the website (without restrictions).

We will only use cookies that are not technically necessary for the functionality of our website if you have provided us with your prior express consent.

In addition, you can also control the installation of cookies yourself at any time by changing your browser settings and/or deleting all cookies.

Videos

When you view a video displayed with thumbnail on the website (not just link to another platform with video), we collect the data necessary to show you the video. The following personal data is required for this purpose:

• IP address
• Time and duration of use

The processing of this personal data is based on Art. 6 para. 1 lit. f) DSGVO. Since the communication runs via the Internet/intranet and this communication is established on the basis of the Internet protocol (IP), this is necessary. Furthermore, the use of the stream is determined on the basis of the IP communication. The video cannot be called up and offered without the use of this data; there is a legitimate interest in making the call-up and use of the video technically possible.

The above data is stored for the duration of viewing/streaming and then deleted. If there are legal storage obligations, the data will be stored for the duration of the legally prescribed storage obligation.

This data is stored on our servers. Our server location is exclusively in Germany. A data transfer abroad does not take place.