Data protection policy of Austrian Post for yelllow.at

Information about the use of data pursuant to the General Data Protection Regulation (GDPR):
Mandatory information pursuant to Articles 13 and 14 of the GDPR, provided for informational purposes only
Updated: January 2026

The general data protection information of Österreichische Post AG ("Austrian Post," "we," "us") is available here: Data protection policy - Post AG – there you will also find further links to information about other data processing activities carried out by Austrian Post.

1. What information is available on this page?

Austrian Post ("Austrian Post", "we", "us") processes your personal data exclusively in accordance with the provisions of data protection law, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act, the Austrian Postal Market Act and all other applicable laws.
On this page, you will find information about data processing for Yelllow.at. This document includes the following sections:

• To whom is this information addressed? (item 2)
• Who is responsible for the processing of your data? (item 3)
• Information about possible data processing (item 4), in particular
  - Advertising activities and sending newsletters ( 4.1)
• With whom are we allowed to share your data? (item 5)
• Automated decision-making and profiling (item 6)
• What rights do you have? (item 7)
• How can you get in touch with us? (item 8)
• Information about cookies (item 9)

If you need printed copies of the information provided on this page or on additional pages, please contact the staff at our service locations.

2. To whom is this information addressed?

This data protection policy is addressed to all interested parties and our customers within the scope of Yelllow.at.

3. Who is responsible for the processing of your data?

The responsible party for data processing described on this page is

Österreichische Post AG
Rochusplatz 1
1030 Vienna
Austria

4. Information about possible data processing

4.1. Advertising activities and sending newsletters

We process your data within the scope of advertising activities and/or newsletter sending for direct marketing purposes in order to be able to offer maximum benefit from our products and services.

Which of your data can we process for this purpose?
For this purpose, we may process the following data:
Contact details, personal master data, address data, marketing data, usage data, internet/online usage data

What is the legal basis for this processing?
The legal basis for this processing is your consent (Art. 6 (1) (a) of the GDPR and Telecommunications Act), which we obtain as necessary in accordance with the law. You can revoke this consent at any time without giving reasons with future effect.

How long can your data be stored?
Your data will be deleted for the purpose of advertising measures and/or newsletter sending, depending on the category, after a maximum of 2 weeks if your advertising/newsletter registration has not been confirmed, immediately upon your revocation, or after a maximum of 3 years from the last contact with you.

With whom are we allowed to share your data?
For the purpose of advertising activities and/or newsletter sending, your data may be transmitted to the following categories of recipients:
Processors

Other information about this processing:
You are under no contractual or legal obligation to provide your data for the purpose of advertising and/or newsletter sending (private clients). If you do not provide the aforementioned information, we will not be able to send you information about our products and services.
Please note that advertising measures and newsletter mailing are based on the results of our customer analysis. As a private customer, you can find further information on this data processing under item 4.4. of the specific data protection policy for customer assistance administration as a business customer, under item 4.1 of the specific data protection policy for business customer managment, products, and services.

5. With whom are we allowed to share your data?

To learn with which recipient categories we are allowed to share your data, please see the section "Information about possible data processing". A detailed description of Austrian Post recipients and/or categories of recipients is available under item 5 in the document post.at/datenschutz.

6. Automated decision-making and profiling

No automated decision-making or profiling pursuant to Art. 22 (1) and (4) of the GDPR is performed in the data processing by Austrian Post described on this page.

7. What rights do you have?

You have the right of access to your personal data that we process as a controller. For more information, please refer to Article 15 of the GDPR.
Under certain conditions, you may request the restriction of processing as well as the rectification and deletion of your personal data. For more information, please refer to Articles 16 to 19 of the GDPR.

In addition, under certain conditions, you also have the right to data portability, meaning that we would give you all personal data you have disclosed to us in a structured, standard, and machine processable format. For more information, please refer to Article 20 of the GDPR.

As a data subject, you have the right to object to the use of your data if the processing serves the purpose of direct marketing.  In addition, you have the right to object at any time to the processing of your data carried out in the legitimate interests of Austrian Post or third parties if reasons arise from your specific circumstances. For more information, please refer to Article 21 of the GDPR. The processing of your personal data may be based on your consent pursuant to Art. 6 (1) (a) of the GDPR. You can revoke the consent at any time without giving reasons with future effect; until then, we will process your data lawfully.

For information about the legal basis of our data processing, please see item 4 ("Information about possible data processing").

Would you like to exercise your rights or do you have further questions, suggestions, or feedback? In this case, you can contact the contacts listed under item 8 ("How can you get in touch with us?").

In addition, you have the option of filing a complaint with the Austrian Data Protection Authority:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Austria
Telephone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at

8. How can you get in touch with us?

To contact Austrian Post's data protection officer or to exercise your rights, please use one of the following options:

• The contact form at datenschutzanfrage.post.at
• the address 
  Austrian Post customer service
  Attention: Data Protection Officer
  Bahnsteggasse 17-23
  1210 Vienna
  Austria
• the e-mail address team-datenschutz@post.at

In order for your request to exercise your rights as a data subject to be complete and to be properly assigned and processed in our databases, we require the following information:

• Description of the issue
• First name, last name
• Date of birth (in particular to resolve any name ambiguities when processing your request)
• mailing address
• E-mail address (if you have provided this to Austrian Post for the purpose of providing a service or contacting you)
• Proof of identity – either a digitally signed request or a (blacked-out) official ID card or other (blacked-out) official documents such as residence registration form and birth certificate provided that at least the name, date of birth, and issuing authority are legible.

No photo ID or digital signature is required when exercising the following rights: "Revocation of consent/objection to advertising purposes" and "Deletion of data for third-party marketing purposes".

If you request information in accordance with Article 15 of the GDPR and there are doubts about your identity because you have not provided us with proof of identity or cannot otherwise be clearly identified, we can send you the information by mail (registered and personally delivered) upon request after you have provided us with your address and date of birth.

We process your request on the basis of the data you provide. Please make sure your information is correct - especially your name and address in case of hyphens, commas, spaces etc.

9. Use of cookies and similar technologies

Several parts of our website rely on cookies and similar technologies (hereinafter referred to as "cookies"). They make our offer more user-friendly and more efficient. 

Cookies are small text files that are saved on your computer or smartphone and that your browser will store. They usually contain information about which websites/passages a user has visited on a website and enable the targeted display of information to users and the analysis of access to our websites.

Our business partners, so-called cookie providers, may also place cookies on our websites. These are used to improve our own products and services as if we had placed these cookies ourselves. For instance, to understand how our websites are used, we work with analysis partners including Google (for additional in the cookie banner, please see item 8.3.2). However, cookie providers may also rely on cookies used on our websites for their own purposes, e.g. to place (their own or third-party) advertising on our websites and to measure their effectiveness. In such case, Austrian Post has no influence on the purpose and means of the cookie-based data processing while also not benefiting from this data processing. Cookies from these third-party providers may fall into any of the cookie categories listed in the cookie management tool (cookie settings).

Information about the use, scope and type of cookie is available in our cookie banner where you can edit your cookie preferences.

9.1. Cookie settings and management, legal basis

Other than technically required cookies (functionally necessary cookies) that may be placed on our websites even without your consent  pursuant among others to Section 165 of the Telecommunications Act and because of our legitimate interest (providing a functional online service offer) pursuant to Article 6(1)(f) of the GDPR, you can actively accept or reject the use of  cookies for marketing purposes before they are placed. A cookie can be classified as "strictly necessary" if it is essential for the provision of the website. This means that the website would not function properly without the cookie.

To that effect, we have created a cookie consent management tool that displays a cookie banner with additional information about the cookies we use when you access the website in question for the first time (especially name, purpose, lifespan, provider). Via this cookie banner, you have the option of generally agreeing to the use of cookies or to make a more detailed selection depending on the cookie category. You can even select specific cookies or cookie providers within a specific cookie category. 

If, after you have provided your consent, more cookies or cookie providers  are added, the cookie banner will be displayed once again and you will be able to make your selection. In the cookie consent management tool, all cookie providers are listed individually and links to their privacy  policies are provided. These policies include additional information, including without limitation, information about additional options for deactivating these cookies.

Once you have given your consent and selected cookies, you can revoke or change your selection at any time under "Edit cookie settings" (found in the footer of the website) in the cookie management platform.

If you have activated an ad blocker in your browser, this will also affect the behavior of the cookie banner. The ad blocker prevents a cookie banner from being displayed and allows you to configure individual cookies via "Edit cookie settings". If the ad blocker is activated, only strictly necessary cookies are set, without which the website would not function properly. To read details about the strictly necessary cookies, you would need to disable the ad blocker for this purpose.

In addition, you have the option of going to your browser settings to determine whether you want to allow cookies or not. Your device might also allow you to manage your cookies. To learn how this works, please see the user manual provided by the manufacturer of your device.

If users opt out of storing cookies, certain functions of the website might not be available.