We deal with confidential, sometimes even sensitive information, on a daily basis in all our business areas. For that reason alone, OeKB CSD GmbH (OeKB CSD) is very concerned about handling data carefully. As such, we adhere strictly to the applicable laws on data protection. We will keep your personal data strictly confidential.

Content of the Privacy Policy

  1. General information
  2. Contact persons and details
  3. Identification and storage of personal data
  4. Use and disclosure of personal data
  5. Right to information, rectification, erasure or restriction of the processing of your stored data as well as to objection and to data portability
  6. Data security
  7. Cookies
  8. Logging e-mail traffic
  9. Updating this Privacy Policy

1. General information

We at OeKB CSD GmbH (OeKB CSD) are committed to handling your personal data with the utmost care during your visit to our website – from collecting to processing and storing it. Austrian and European laws on data protection form the basis for this.

This Privacy Policy applies only to the website of OeKB CSD. Individual pages may refer to links of other providers within and outside OeKB CSD not covered by the privacy policy, i.e. we cannot assume any liability for the content therein or for how data is used and processed.

2. Contact persons and data

The following company is responsible for data processing:
OeKB CSD GmbH (OeKB CSD)
Strauchgasse 1-3
A-1010 Vienna
Telephone: +43 1 53 127-2100
Fax: +43 1 53127-4100
E-mail: csd@oekb-csd.at

The Data Protection Officer of OeKB CSD is:
Harald Sommer
Strauchgasse 3
A-1010 Vienna
Telephone: +43 1 53 127-2366
E-mail: dataprotection@oekb-csd.at

Information on data processing according to art. 13 and 14 DSGVO

Below you will also find information about the nature, extent and purpose of the collection and use of data when you visit our websites.

3. Identification and storage of personal data

For technical reasons, every time you access our website, your browser automatically transmits the data listed below to our web servers. Storage is solely for statistical and technical purposes, for example, to evaluate the frequency of page visits or to detect disruptions to server operations.
The following data is logged and evaluated:

  • IP address
  • browser type and version
  • operating system
  • device (PC, tablet or smartphone)
  • resolution of the computer
  • source (country and city)
  • language
  • page views
  • date, time and duration of the visit
  • bounce rate
  • traffic sources (social media, search engines or referring websites)
  • click or conversion rate
  • request (filename of the requested file)
  • Username and password (only for pages with login details, such as the Login-Portal)
  • any content of forms

Additional personal data, such as name, home address, e-mail address, date of birth or business-related data, are only recorded if you indicate them yourself. For example, on our website you may indicate such information when using the feedback form and when registering for an event (incl. online event).

4. Use and disclosure of personal data

Personal data transmitted by you will only be used to handle your request, as part of the fulfilment of services concluded according to our General Terms and Conditions (GTC) or for technical administration.

If you have consented to the processing of your personal data, processing will take place only in accordance with the purposes set out in the declaration of consent and to the extent agreed therein. As such, you will only receive mailings from us on the basis of your consent here. You can revoke consent at any time, free of charge, with effect for the future.

Moreover, your data will be received only by those bodies or employees within OeKB CSD who or which require it to fulfil, in regards to our GTC, contractual, legal and regulatory obligations and to serve legitimate interests. We also use selected processors for the technical and organisational implementation of our website. All processors will be placed under a corresponding contractual obligation to handle your personal data confidentially and only to process it within the framework of the provision of their service according to our instructions.

5. Right to information, rectification, erasure or restriction of the processing of your stored data as well as to objection and to data portability

You have a right to information, rectification, erasure or restriction of the processing of your stored data, a right to object to the processing and a right to data portability in accordance with the prerequisites of data protection law.

You can address any appeals to the Austrian Data Protection Authority.

6. Data Security

The security of your data in our systems is very important to us. Our goal is to manage your data with the utmost care and to take all necessary technical and organisational security measures to protect your personal data from loss and misuse.

Access to nearly all our websites is secured via HTTPS if your browser supports SSL. This means that communication between your device and our servers is encrypted. If you wish to contact us or our employees by e-mail, we would like to point out that the confidentiality of the information provided is not guaranteed. The content of e-mails may be viewed by third parties due to their technical design, unless special technical security measures are taken.

7. Cookies

a) General information on cookies

OeKB CSD uses cookies for optimising your experience while you are on our website. Cookies are small text files that are stored on your device. Cookies help us to make our website and our offer more user-friendly and more effective. 

What cookies do we use

We use so-called session cookies, which will automatically be deleted from your device after you leave our website, and persistent cookies, which remain stored on the device for identification purposes. Persistent cookies are valid for a precisely defined period and will also be automatically deleted after its expiry.

In addition, we use so-called first-party cookies. Such cookies are generated by OeKB CSD itself, as website operator, and stored on your device. Finally, we use third-party cookies, which are stored in your browser by a third-party provider.

The following kinds of cookies are used for our website:

  1. Technically required cookies
  2. Performance cookies
  3. Personalisation cookies

Legal basis for cookie placement

Technically required cookies are stored on the basis of Art. 6 (1) (f) GDPR. As website operator, OeKB CSD has a legitimate interest in storing cookies for the purpose of providing its services in a technically flawless and optimised manner. Functionality, performance and personalisation cookies are stored exclusively based on your consent under Art. 6 (1) (a) GDPR. 

The cookie settings for our website can be changed at any time via the privacy note in the footer on the bottom of the website or here.

In section 7 b, the various cookies that are used on our website and their purpose are described in greater detail.

You can configure your browser so that you will be informed about cookies to be placed and only admit them in individual instances, that you exclude the acceptance of cookies generally or in certain cases, and that you enable cookies to be automatically deleted when the browser is closed. Disabling cookies generally may restrict the functionality of this website.

The steps and measures required for this depend on the specific Internet browser you use. Use the links below for more information on how to proceed with standard browsers:

b) The following cookies are used on the OeKB CSD website

1. Technically required cookies 

Technically required cookies help you use a website by allowing basic functions such as site navigation and access to secure areas of the website. Without such cookies, the website cannot function correctly. The use of such cookies is based on protecting our legitimate interests (Art. 6 (1) (f) GDPR), i.e. safeguarding operation, security and optimisation of our website.

The following technically required cookies are used on our website:

Provider Type Name Purpose Service life
OeKB CSD First Party Cookie JSESSIONID Allows session Session Cookie
OeKB CSD First Party Cookie TS0149ea30 Web Application Firewall Session Cookie
OeKB CSD First Party Cookie acceptCookies Stores the settings chosen in the cookie banner Persistant Cookie
1 year

These cookies allow us to collect information on how our website is used, in order to subsequently improve its attractiveness, content and functionality. For instance, we will be informed about which contents raise particular interest or which subpages of our website are visited. Performance cookies are stored exclusively based on your consent under Art. 6 (1) (a) GDPR. 

2. Performance Cookies

The following performance cookies are used on our website:

Provider Type Name Purpose Service life
Google Third Party Cookie _ga Contains a unique, randomly generated ID; allows the identification of recurrent users and the merging of data from earlier visits Persistent Cookie
2 years
_gat Restricts specific data transmissions to Google Analytics Session Cookie
_gid Contains a unique, randomly generated ID; allows the identification of recurrent users and the merging of data from earlier visits Persistant Cookie
24 hours
gtm_auth Is used to forward data to the Google Tag Manager and thus indirectly allows specific traffic analyses Session Cookie
gtm_debug Is used to forward data to the Google Tag Manager and thus indirectly allows specific traffic analyses Session Cookie
gtm_preview Is used to forward data to the Google Tag Manager and thus indirectly allows specific traffic analyses Session Cookie


2.1. Google Analytics

Below you find further information on the third-party cookies we use: 

In order to analyse and improve the structure and navigation of our website and tailor them to your needs, we use the Google Analytics tool, a web analysis service provided by Google Ireland Limited, on our website. Google Analytics collects the information listed in item 3 relating to website navigation. Any data generated by these cookies on the use of this website will be forwarded to and stored on a Google server in the USA, in the context of using the Google Analytics web analysis service.

However, your IP address will immediately be truncated and thus anonymised, so that it can no longer be attributed to you, within the Member States of the European Union or in other countries that are signatories of the treaty on the European Economic Area. This means that personal data is neither collected nor analysed, nor linked to other such data. In order to allow continuous optimisation of the website, the anonymised data will initially be stored for 26 months and then deleted automatically.

By downloading and installing the Google-Browser-Add-on you can stop the data collected by the cookie and relating to your use of our website (including your IP address) from being stored and processed by Google Analytics. Thus, opt-out cookies can be set to prevent your data from being used by Google Analytics when you visit websites (including ours). In order to prevent data collection by Google Analytics across various devices, you need to choose this opt-out option on all systems you use. Click here to set an opt-out cookie: Disable Google Analytics

2.2. Google Data Studio

In addition, we use the “Google Data Studio” data management tool, a service provided by Google LLC (USA) to create user-defined visual reports and interactive dynamic dashboards. Such visualisation options allow us to optimise our offer and tailor it to our customers’ needs.

For this purpose, we use anonymised data from the sources of Google Analytics, Google Ads, Facebook and Linkedin (see below). Such data is accessed via a web browser, the data sources are linked directly via Google Data Studio. For further information on the use of Google Data Studio see here.

3. Personalisation cookies

We also use personalisation cookies on our website. Personalisation cookies are provided by external advertising companies and are used to determine the effectiveness of ad campaigns (conversions), to collect information about the websites visited by the user or to create target-group-specific advertising. Personalisation cookies are stored exclusively based on your consent under Art. 6 (1) (a) GDPR. 

The following personalisation cookies are used on our website:

Provider Type Name Purpose Service life
Google Third Party Cookie _gcl For determining user actions in the context of ad campaigns (conversion tracking, ad analysis) Persistent Cookie
3 months
NID Browser settings (e.g. preferred language, SafeSearch filter) and browser ID in order to optimise and/or personalise advertising Persistent Cookie
6 months

3.1. Google Ads (Remarketing und Conversion Tracking)

Below you find further information on the third-party cookies we use:

We use the “Google Ads” online advertising program of Google LLC (Google).

We use the remarketing function within the Google Ads service. This function allows us to present on other websites within the Google Display Network (on Google itself, so-called “Google ads”, or on other websites) to all users of our website ads based on their interests. Therefore, interactions on our website are analysed, e.g. which offers the user was interested in, so that targeted ads can be displayed on other websites as well, even after the user has left our website. For this purpose, Google stores a cookie in the browsers of the users who visit specific Google services or websites within the Google Display Network. Their visits are recorded by this cookie. The cookie is used for identifying a particular web browser on a specific device and not for identifying an individual. This cookie becomes invalid after 30 days and does not contain any personal data. During a visit to our website, such data will be transferred – in an encrypted manner – to and stored on Google servers part of which may be located in the USA.

In addition, we use conversion tracking within the Google Ads service. Whenever you click on an ad published by Google, a cookie will be placed on your device. This cookie will become invalid after 30 days, does not contain any personal data and can therefore not be used for identifying individuals. Various values are measured and collected on a regular basis, among them the Unique Cookie ID (advertising ID), the number of ad impressions per placement, the last impression (post-view conversions), opt-out information and other conversion events.

Whenever you click on an ad published by Google, a cookie for conversion tracking will be placed on your computer. If you visit certain pages of our website and the cookie has not yet expired, Google and we can detect that you have clicked on the ad and have been redirected to this page. Every individual using Google AdWords will receive a different cookie. Thus, it will not be possible to track cookies of AdWords users across websites.

Based on anonymised analyses provided by Google it can be determined which ads are essential or effective for achieving the target. In the process, we do neither receive, collect or process personal data nor can we identify users based on this information.

Google is not going to link such data with personal data from your Google account unless you expressly allowed Google to do so. For more information on how Google processes data, see the following links:

Google is certified under the Privacy Shield agreement and thereby guarantees compliance with European data protection law: Google certification under the Privacy Shield agreement  

There are various ways to prevent the Google Ads cookies from being placed (as described above). On the one hand, you can use a Google plugin, which permanently disables such cookies in your browser (Chrome, Firefox or Internet Explorer): Call up Google-Plugin 

In order to disable the Google Ads cookie on our website, you may set the following opt-out cookie: Disable Google Ads cookie. This cookie will, however, be deleted whenever you delete your cookies.

You may also directly object to personalised advertising by Google. To do so, you need to call up the link www.google.de/settings/ads from every browser you use and choose the appropriate settings there. These settings will, however, be deleted whenever you delete your cookies.

8. Logging of e-mail traffic

To ensure an appropriate level of information and system security and to detect malicious software, we store log data of e-mail traffic. When you send an e-mail to one of our addresses, the following information is logged: e-mail and IP addresses of the recipient and the sender, number of recipients, subject, date and time of receipt at the server, file name of any attachments, message size, risk classification for spam and delivery status. E-mails are checked purely automatically in the first step. Individual e-mails are manually checked by responsible persons only in the event of a suspected threat to the security of the IT systems.

In addition, we process your personal data in connection with e-mails, as far as necessary, for the duration of the entire business initiation phase and beyond in accordance with statutory retention and documentation obligations.    

9. Update of this Privacy Policy

We reserve the right to amend this privacy policy as necessary to reflect technical developments and legal changes or to update it in connection with the offer of new services or products.