SDBB ID Check Data Protection Declaration
Scope
The protection and security of your data are of paramount interest to us. For this reason, we provide comprehensive information about how we handle your data. You will learn how we collect your personal data, what we do with it, for what purposes and on what legal bases, and what rights and claims are associated with it for you. The data protection declaration applies to data processing at Österreichische Staatsdruckerei GmbH and within the scope of the SDDB ID check App.
Österreichische Staatsdruckerei GmbH Tenschertstraße 7, 1230 Vienna, Austria
Phone.: +43 1 206 66-0 Email: office@staatsdruckerei.at
Website: https://www.staatsdruckerei.at/
You can reach the data protection officer by email at: privacy@staatsdruckerei.at
1. Collection and processing of personal data from business partners
1.1. Purposes of processing, categories of personal data
The app serves as a tool for verifying the authenticity of dedicated documents with a specific SDDB QR-Code by comparing the identity data read from the QR code with the data on the document.
The authenticity of the QR code is verified with the help of certificates. The technical protocol is created to ensure data security and availability of the service.
The app can be used by both private individuals and public authorities.
1.2. The following categories of personal data may be processed for the aforementioned purposes:
With the help of the SDDB ID Check App, the following data can be read from a dedicated QR code: Photograph, name, gender, citizenship, date of birth, issuing country, document type, passport or ID card number and validity period.
When the app is started, certificates and verification steps are checked to ensure they are up to date and downloaded again if necessary. During this process, the IP address and the user agent (name and version of the app) are also logged.
The app does not collect any cookies, sessions or market research data.
1.3. Legal basis for data processing
The data is processed for the fulfillment of a contract or the performance of pre-contractual measures based on Art. 6 (1) lit. b GDPR.
1.4. Duration of data storage
The identity data is displayed in the app until the user closes the app.
The technical log data ( including the IP address and user agent) is being deleted after 30 days.
1.5 The categories of recipients of the personal data:
Processors: Austrian State Printing House GmbH; Hetzner Online GmbH; Youniqx identity AG (for maintenance and support)
2. Data Subject Rights:
2.1. Right to Information:
You can request information about your personal data processed by us under Article 15 GDPR.
2.2. Right to Rectification:
You can request the correction or completion of your data under Article 16 GDPR if the information concerning you is incorrect or incomplete.
2.3. Right to Erasure:
Under Article 17 GDPR, you can request the deletion of your personal data.
2.4. Right to Restriction of Processing:
Under Article 18 GDPR, you can request the restriction of the processing of your personal data.
2.5. Right to Data Portability:
If the conditions of Article 20 (1) GDPR are met, you have the right to receive the data processed based on your consent or in fulfillment of a contract in a structured, commonly used, and machine-readable format. To exercise your rights, contact our data protection officer at privacy@staatsdruckerei.at