Privacy Policy


for data subjects pursuant to Art 13 and 14 GDPR


is serious

Controller pursuant to Art 24 GDPR:

Kwizda Holding GmbH („KWIZDA“)
Universitätsring 6, A-1010 Vienna
Tel. +43 / (0)5 9977 850101
Fax. +43 / (0)5 9977 10 260

represented by:
Mag. Richard P. Kwizda und
Dkfm. Dr. Johann F. Kwizda

Data Protection Officer of KWIZDA pursuant to Art 37 et seq. GDPR

Mag. Siegfried Gruber, CISM
Universitätsring 6, 1010 Wien
Tel. +43 / (0)5 9977 850101
Fax. +43 / (0)5 9977 10 260

Handling personal data

KWIZDA takes the protection of personal data very seriously.

Personal data are pieces of information that can be associated individually with you. Examples include your address, name, postal address, e-mail address or telephone number. Information such as the number of users visiting a site are not deemed to be personal data, because they are not allocated to a specific person.

KWIZDA treats personal data in accordance with the statutory data protection regulations (in particular the basic EU Data Protection Regulation, Data Protection Act DSG 2018), and with this data protection declaration.

With regard to the unlawful processing of your data by us, you have the possibility, under Art. 77 GDPR, to lodge a complaint with a supervisory authority. In general you can contact the supervisory authority of your usual residence or place of employment, or that of our company headquarters for this purpose. In Austria this is the Austrian Data Protection Authority DSB, Barichgasse 40-42, 1030 Vienna, +43 1 52 152-0,

Rights of data subjects

You have the right:

– pursuant to Art. 15 GDPR, to demand information about your personal data that we have processed. In particular, you can obtain information about the purposes of the processing, The categories of personal data concerned, the recipients or category of recipients to whom you data have been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to request rectification, erasure, or restriction of the processing, or to object to it, the right to lodge a complaint with a supervisory authority, the source of your data, if these have not been collected by us, and on the existence of automated decision-making, including profiling, and any other meaningful information about their details or the logic involved;

– pursuant to Art. 16 GDPR, to demand the immediate rectification or completion of inaccurate personal data stored by us;

– pursuant to Art. 17 GDPR, to demand the erasure of personal data stored by us, unless their processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;

– pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data in cases where you contest the accuracy of the data, where the processing is unlawful yet you oppose the erasure of the personal data, where we no longer need the data but you still require them to establish, exercise or defend legal claims, or where you have objected to the processing of the data pursuant to Art. 21 GDPR;

– pursuant to Art. 20 GDPR, to obtain your personal data that you have provided to us in a structured, commonly used and machine-readable format and to demand the transfer of these data to another controller;

– pursuant to Art. 7 (3) GDPR, to withdraw your consent at any time, which will mean that in future we may no longer carry out the data processing that was contingent upon this consent.


Assertion of data subject rights

You yourself decide on the use of your personal data. Therefore, should you wish to assert one of your rights as outlined above against us, you are welcome to contact us per e-mail To ensure clear identification, please send together with your application a copy of official photo ID and support us in concretising your application by answering questions posed by our responsible staff with regard to the processing of your personal data. Please also state in your application the role you held in relation to us (employee, applicant, supplier, customer, etc.) and during which period of time. This will allow the speedy processing of your request.


Insofar as your personal data is processed on the basis of legitimate interests in accordance with Art. 6 (1) f GDPR, you have the right, under Art. 21 GDPR, to object to the processing of your personal data, provided there are reasons relating to your particular situation or if the objection relates to direct marketing. In the latter case, you have a general right to object, which shall be implemented by us without any reference to a particular situation.

If you wish to avail of your right to withdraw or object, an e-mail to  will suffice.

Storage duration and limitation

In accordance with valid data protection requirements, we are obliged under Art 5 (1) e GDPR to erase personal data immediately as soon as the purpose of the processing has been fulfilled. In this context we wish to point out that statutory retention requirements and time limits represent a legitimate purpose for the processing of personal data.

In all cases data will be stored and kept by us in personal form until the end of the business relationship or until the expiry of valid guarantee or limitation periods; in addition, until the end of any legal disputes in which the data are required as evidence; or in any case until the expiry of the third year after the last contact with a business partner.

Industry-specific terms:

  • Records from producers and pharmaceutical wholesalers concerning psychotropic substances in accordance with § 8 Austrian of the Austrian Act on Psychotropic Substances: 3 years
  • Reservations from producers and pharmaceutical wholesalers in accordance with § 8 of the Austrian Act on Narcotic Drugs: 3 years
  • Retention of documents in accordance with Art 3 and 4 of the EC Regulation 111/2005 concerning the monitoring of trade with drug precursors: 3 years
  • Record keeping obligation in accordance with § 46 of the Austrian Drug Law (AMG): 15 years
  • Record keeping obligation in accordance with § 15 (1) of the Austrian Regulation on Pharmaceuticals (AMBO): 5 years
  • Record keeping obligation for batch documents in accordance with § 15 (9) of the Austrian Ordinance on Pharmaceuticals (AMBO): 15 years
  • Identification obligation within the supply chain in accordance with Art 7 of the EC Regulation 1223/2009 on cosmetics: 3 years
  • Product information file in accordance with Art 11 EC Regulation 1223/2009 on cosmetics: 10 years
  • Record keeping obligation in accordance with § 11 (3) of the Austrian Plant Protection Product Act: 5 years
  • Record keeping obligation in accordance with § 2 (6) of the Austrian Fertiliser Regulation: 2 years

Accounting and Tax Legislation:

  • Fiscal record keeping obligation in accordance with §§ 207 (2), 209 of the Austrian Federal Fiscal Code (BAO): 10 years


  • Purchase price claim for movable objects in accordance with § 1062 in conjunction with § 1486 of the Austrian Civil Code (ABGB): 3 years
  • Purchase price claim for immovable objects (from the contract § 1486 of the Austrian Civil Code (ABGB): 30 years
  • Rights contained in a service contract in accordance with § 1486 of the Austrian Civil Code (ABGB) (when the services were provided through a commercial enterprise or any other kind of commercial operation): 3 years
  • Generalized right to damages in accordance with § 1489 of the Austrian Civil Code (ABGB) (compensation claim): 3 years (when the damages and the damaging party are known) / otherwise 30 years

Employment relationships:

  • The right to be issued a letter of recommendation in accordance with § 1163 in conjunction with § 1478 of the Austrian Civil Code (ABGB): 30 years
  • Employment relationship in accordance with the Austrian Civil Code (ABGB) (subsidiary to the Austrian Employees Act): remuneration claims from the employee and from the employer, advances and any other claims resulting from the employment relationship in accordance with § 1153 et seq. in conjunction with § 1486 of the Austrian Civil Code (ABGB): 3 years
  • Accounting-relevant data concerning the employee, such as bookkeeping.
  • The deadline for the assertion of claims in accordance with §§ 15 (1) and (29) of the Austrian Equal Treatment Act because of discrimination in promotion and recruitment: 6 months from the rejection of the promotion or application or according to the declaration of consent of the employee even 3 years for application documents.

Forwarding of data

Your personal data will not be transferred to any third party for any purpose other than those listed below.

We shall forward your personal data to third parties only when:

– you have given your explicit consent, in accordance with Art. 6 (1) a GDPR,

– under Art. 6 (1) f GDPR, the transfer is made to protect operational interests, or is necessary for the establishment, exercise or defence of legal claims, and there is no reason to assume that you have an overriding interest, which must be protected, in the non-forwarding of your data,

– in the event that there is a legal obligation to forward the data under Art. 6 (1) c GDPR, and

– this is legally permissible and necessary under Art. 6 (1) b GDPR for the processing of contractual relationships with you.

Use of our website

  1. a) When accessing our website, the browser used on your end device automatically send information to our website’s server. This information is stored temporarily in a so-called log file. Without any action on your part, the following information is collected and stored until its automatic erasure:

– IP address of the accessing computer
– Date and time of the access
– Name and URL of the retrieved file
– Website, from which access was made (referrer URL)
– Browser used and, where applicable, the operating system of your computer and the name of your access provider.

The aforementioned data will be processed by us for the following purposes:
– Guaranteeing the smoothconnection setup of the website
– Guaranteeing the comfortable use of our website
– Evaluating system security and stability and
– Other administrative purposes

The legal basis for data processing is Art. 6 (1) f GDPR. Our legitimate interest is derived from the purposes listed above for data collection. Under no circumstances shall we used the data collected for the purpose of making any inferences to your person.

In addition, we also use cookies and analytical services for visits to our website. More information on this can be found in the section “Cookies” in this data protection declaration.

  1. b) When using our contact form
    For queries of all kinds we offer you the possibility to contact us by means of a form provided on the website. This requires the input of a valid e-mail address, so that we know from whom the request has come and in order to be able to reply. Additional information can be provided voluntarily.

We process data for the purpose of making contact in accordance with Art. 6 (1) a GDPR on the basis of your voluntary consent. The personal data collected by us for the use of the contact form will be erased automatically once your query has been dealt with.


Our website uses so-called cookies. These are small text files that are installed on your end device with the help of the browser. They do not cause any damage.

We use cookies in order to be able to design our offer in a user-friendly manner. Some cookies remain stored on your end device until you delete them. These allow us to recognise your browser when you next visit our website.

If you do not wish this, you can set up your browser in such a manner that it informs you about the installation of cookies, which you may permit on a case-by-case basis. Deactivating cookies may restrict the functionality of our website.

Server log files

The website provider automatically collects and stores information in so-called server log files, which your browser sends to us automatically. These are:

– Browser type/ browser version
– Operating system used
– Referrer URL
– Host name of the accessing computer
– Time of the server request

These data cannot be attributed to any particular person. These data are not merged with other data sources. We reserve the right to check these data in retrospect, should we become aware of concrete indications of unlawful use.

Web analysis

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer to allow the analysis of your use of the website. The information generated by the cookies about your use of this website is generally sent to a Google server in the USA and stored there.

We use Google Analytics only with activated IP anonymisation. This means that on this website your IP address is truncated beforehand by Google in member states of the European Union or in other states party to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities, and to provide other services relating to internet use and website activity. Google will not correlate the IP address transmitted by your browser within the framework of Google Analytics with any other data.

You can prevent the installation of cookies by selecting the appropriate settings in your browser software; however, we draw your attention to the fact that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the data generated by the cookie relating to your use of the website (incl. your IP address) from being tracked and processed by Google by downloading and installing the browser plugin that is available at the following link:

More information on data use for advertising purposes by Google, setup and objection options, can be found on the Google websites:… (“How Google uses data when you use our partners’ sites or apps”), (“How Google uses cookies in advertising”), as well as and (“Control the information Google uses to show you ads”).


Our website may contain links to third-party websites (“external links”). These external links are subject to the liability of the respective operator. KWIZDA has no influence whatsoever on the current and future design or the contents of the linked pages. Placing external links does not mean that the contents are KWIZDA contents. It is not possible or reasonable for KWIZDA to conduct ongoing checks of the external links without any concrete indications of legal violations. However, should we become aware of any legal violations, such external links will be deleted immediately.


The entire website content is property of Kwizda Holding GmbH and is protected by copyright.
The user may load, print or copy the website content for private purposes only.
Any kind of change, reproduction, distribution or public display of the website or parts thereof is unlawful without prior written consent from Kwizda Holding GmbH and would constitute the offence of forgery in the event of violation.


All product names and logos that appear on this website are protected trademarks, regardless of font size or brand symbol presence.
Use or misuse of the product name and logos is expressly forbidden without prior written consent from Kwizda Holding GmbH and shall be prosecuted in accordance with the applicable law.


If you send us queries by e-mail, your information, including the contact data you provide, will be stored by us for the purpose of answering your query and for any follow-up questions. KWIZDA draws explicit attention to the fact that the transfer of data on the internet (e.g. during e-mail communication) can be vulnerable to security gaps and cannot be protected seamlessly against third-party access.

Commercial advertising

The use of the contact data in our imprint or our website for commercial advertising is explicitly undesired, unless we have granted our written consent. KWIZDA, and all persons named on this website, hereby object to any commercial use or forwarding of these data.

Data security

During your visit to our website we use the widespread SSL (Secure Socket Layer) method in combination with the currently highest encryption level that is supported by your browser. This is generally a 256-bit encryption. If your browser does not support 256-bit encryption, we revert instead to 128-bit v3 technology. You can see whether individual pages of our website are transmitted in encrypted form by means of the closed illustration of the key or lock symbol in your browser’s status bar.

Furthermore, we avail of suitable technical and organisation security measures in order to protect your data against random or deliberate manipulation, partial or complete loss, destruction, or unauthorised third-party access. Our security measures are improved on an ongoing basis in accordance with technological developments.

Currency of and amendments to this data protection declaration

The further development of our website and offers, or altered statutory or official requirements may necessitate amendments to this data protection declaration. You can retrieve and print the updated data protection declaration at any time from our website

Download: Data protection declaration

Vienna, 1st of March 2018
Kwizda Holding GmbH