Privacy policy
This policy describes what personal data Österreichische Unterstützungskasse ÖUK processes for membership administration, voluntary contribution collection, and support-case handling — for members in Austria and in Germany alike.
1. Data controller
Österreichische Unterstützungskasse ÖUK, ZVR no. 162639382, Prinz Eugen Str. 68, A-1040 Vienna. Contact for privacy inquiries: office@unterstuetzungskasse.at, subject line “Datenschutz”.
2. What data we process
Membership data (name, country, member number, join date); voluntary contribution data (SEPA mandate, contribution history, chosen contribution tier); employer affiliation, where membership runs through an employer; support-case data including uploaded evidence — for illness claims this can include medical certificates (special category data under Art. 9 GDPR), for unemployment claims e.g. employment-office decisions, for bereavement claims death certificates; the resulting recommendation and the board's written decision.
3. Purposes and legal bases
Membership administration and voluntary contribution collection: Art. 6(1)(b) GDPR (performance of the membership relationship). Processing support applications, including health data: Art. 9(2)(a) GDPR, explicit consent given at the time of application. Statutory retention obligations (association and tax law): Art. 6(1)(c) GDPR. Immutable logging of decisions for evidentiary purposes: Art. 6(1)(f) GDPR, legitimate interest in the traceability of discretionary decisions.
4. Recipients and processors
Within ÖUK, only the board and authorized staff can access application documents. Hosting and payment processors will be added here once selected; a data processing agreement under Art. 28 GDPR will be in place with each one. No data is currently transferred outside the EU/EEA.
5. Retention
Membership and voluntary contribution data are kept for the duration of membership and afterward per statutory retention periods (including seven years under § 132 BAO). Application documents containing health data are deleted once the purpose of processing the application ends or the statutory retention period expires.
6. Cookies
The member-facing site currently uses no analytics or marketing cookies. The internal admin console sets a single strictly-necessary cookie to remember the chosen interface language. If that changes, this policy will be updated and consent obtained where required.
7. Data subject rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17) within statutory retention periods, restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). Any consent you have given can be withdrawn at any time with effect for the future.
8. Right to complain
Members resident in Austria can contact the Austrian data protection authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at). Members resident in Germany can contact the data protection authority responsible for their state of residence.