We only process your personal data within the framework of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz) 2018.
Note: To make this policy easier to read, the term “data" is generally used, even though personal data is meant. Legal provisions without any details refer exclusively to those in the GDPR, unless stated otherwise.
We inform you below about the nature, scope and purpose of data collection and its use according to the GDPR regulations:
Tel.: +43 (0) 5572 / 25350
General Information on Data Processing
Legal Basis for Processing Personal Data
If we obtain any consent from you for methods of personal data processing, Art. 6(1) Point a EU General Data Protection Regulation (GDPR) serves as the legal basis.
If processing personal data is necessary for the performance of a contract with you, Art. 6(1) Point b GDPR serves as the legal basis. This also applies to processing methods required to take steps prior to entering into a contract.
Where personal data processing is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1) Point c GDPR serves as the legal basis.
If processing is necessary for the purposes of any legitimate interest pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, the legal basis for processing is Art. 6(1) Point°f°GDPR.
Erasure of Data and Retention Period
Your data will be erased or blocked once the purpose of such storage ceases to be relevant. Data can be retained beyond this period if this is provided for by European or national legislators in EU regulations, laws or other regulations to which we are subject. The data shall in such cases be blocked or erased once the retention period specified by the aforementioned standards expires, unless further retention of the data is required for the conclusion or fulfilment of a contract.
Provision of the Website and Creation of Log Files
The following data are collected:
- Information on the browser type and version used
- The operating system of the user
- The IP address of the user
- Date and time of access
- Websites from which the user’s system accessed our Internet pages
- Websites that were accessed by the user’s system through our website
Legal Basis for Data Processing
The legal basis for temporary data retention and log files is Art. 6(1) GDPR.
Purpose of Data Processing
Temporary system storage of the IP address is necessary to allow the website to be provided on the computer of the user. The user’s IP address has to be retained for this until the log files are erased.
Storage in log files occurs to ensure the functionality of the website. In addition, the data serves to optimise the website, and ensure the security of our IT systems. The data will not be evaluated for marketing purposes in this context.
Such purposes are also the basis for our legitimate interest in personal data processing according to Art. 6(1) Point f GDPR.
The data are erased as soon as they cease to be required for the purpose for which they were collected. In the case of collection of data for the provision of the website, this is the case when the session in question ends.
In the case of storage in log files, this is the case after four weeks at the latest. Storage beyond this time is possible. In this case, the IP addresses of the users are erased or modified so that they can no longer be associated with the accessing client.
Option of Objection and Elimination
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. The user therefore has no option of objection.
- Search terms entered
- Frequency of page views
- Use of website functions
The legal basis for personal data processing using technically required cookies is Art. 6(1) Point f GDPR. The legal basis for the processing of personal data using cookies for analysis purposes where you have given your consent is Art. 6(1) Point°a°GDPR.
The purpose of the use of technically required cookies is to analyse how users surf. All our website functions can be offered without the use of these cookies.
Analysis cookies are used for the purpose of improving the quality of our website and its content. Via the analysis cookies, we find out how the website is used, allowing us to continually optimise our content.
Such purposes are also the basis for our legitimate interest in data processing acc. to Art. 6(1) Point f GDPR.
There is the option of subscribing to a free newsletter on our website. When subscribing to the newsletter, the data entered in the input screen is sent to us. We specifically need your email address, first name and last name.
The following data are also collected when subscribing:
- The IP address of the computer accessing the page
- Date and time of registration
In the context of data processing to deliver our newsletter, data is disclosed to third parties by sending our newsletter using the MailChimp services provided by Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA. These include a web beacon, also called a tracking pixel. This can establish whether the emails have been opened or whether the links in the emails have been clicked on. We use this information to improve our email service and analyse which information is read or clicked on most. We link this data with your actions on our website. The data collected in this way is stored by the newsletter provider MailChimp on its server in the USA. MailChimp is entitled to disclose your user data to third parties in certain cases. You can object to this tracking at any time by clicking the separate link provided in every email or by informing us by email at [firstname.lastname@example.org].
Mailchimp is a Privacy Shield certified company. These data transfers are permissible as a result of the Adequacy Decisions by the European Commission (EU) 2016/1250.
The web beacon is automatically erased when the email is deleted. Our normal text emails do not contain any web beacons.
With the exception of the use of the MailChimp newsletter tool, your data is only used to send the newsletter and is not disclosed to any third parties by us.
Legal Basis for Data Processing
The legal basis for personal data processing following subscription to the newsletter where the user has given their consent thereto is Art. 6(1) Point a GDPR.
Purpose of Data Processing
Your email address is collected to send the newsletter.
The data are erased as soon as they cease to be required for the purpose for which they were collected. The user’s email address is retained for as long as the newsletter subscription is active.
Any other data collected as part of the subscription process are generally erased after a period of seven days.
Option of Objection and Elimination
The newsletter subscription can be cancelled by the user concerned at any time. A suitable link for this purpose can be found in every newsletter.
The web beacon is automatically erased when the mail is deleted. Our normal text emails do not contain any web beaons.
This also allows for the withdrawal of consent to retain the personal data collected during the subscription process.
Web Analysis Services
We use different tools on our website to analyse how our users surf. The software places a cookie on the user's computer (see above for information on cookies (see above for cookies). When our website’s individual pages are accessed, the following data is retained:
- Two bytes of the IP address of the user system that has requested the page
- The accessed website
- The website from which the user accessed the accessed website (referrer)
- The subpages accessed from the accessed website
- The duration of the visit to the website
- The frequency of the website visit
We use various web analysis services including Google Analytics provided by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA. These analysis services use “cookies", text files that are stored on your computer and allow for analysis of your use of the website. The information about your use of this website (including your IP address) that is generated by the cookie is transferred to a Google server in the USA and stored there. These analysis services will use this information to analyse your use of the website, to compile reports about the website activities for the website operator and to provide other services related to website use andthe Internet. The IP address which is transmitted by the user’s browser will not be combined with other data from Google.
You can prevent the installation of the cookies by changing the settings of your browser software accordingly; however, please note that in this case you might not be able to use all functions of this website. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link (tools.google.com/dlpage/gaoptout?hl=us).
We point out that Google Analytics was extended to the code ““anonymizeIp" on this websites to ensure anonymised collection of IP addresses (so-called IP masking).
Web analysis services are used to constantly improve our functions and services. Only non-personal data is used here for analysis and reporting purposes. This data is not combined with any other personal data by us.
The legal basis for processing the user’s personal data is Art.6(1) Point f GDPR.
Purpose of Data Processing
Processing the personal data of users allows us to analyse how our users surf. By analysing the collected data we are able to compile information about the use of our website’s individual components. This helps us to continuously improve our website and its user-friendliness. Such purposes are also the basis for our legitimate interest in data processing acc. to point (f) Art. 6(1) GDPR. The anonymisation of the IP address sufficiently protects the user's interest in the protection of their personal data.
The data are deleted as soon as they cease to be required for our recording purposes.
Option of Objection and Elimination
We offer our users the option to opt out of the analysis process on our website. You have to follow the corresponding link for this. This places a cookie in your system that tells our system not to save the user data. If the user deletes the opt-out cookie from their system at any point, they will have to set it again.
Please see the statements above for more detailed information about the privacy settings for the web analysis tools we use.
User Rights Nutzers (Rights of Data Subjects)
If your personal data is processed, you are the data subject as defined in the GDPR and you have the following rights vis-à-vis us as the controller:
You have the right to request confirmation from us as to whether personal data concerning you is processed.
If such processing takes place, you can request the following information from us:
The purposes and categories of personal data that are processed, including the recipients or recipient categories who your data has been is being disclosed to and the planned retention period for the data concerned. If we use profiling technologies, we must provide you with meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing. In addition to that, you have a right to lodge a complaint with the competent supervisory authority.You also have a right to information as to whether the personal data relating to you are transmitted to a third country or to an international organisation.
Right to Rectification
You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data related to you is incorrect or incomplete. If this applies, we will rectify the data immediately.
Right to Restriction of Processing
Under the following circumstances, you can request us to restrict processing of the personal data relating to you:
- if you contest the accuracy of the personal data relating to you for a period that enables the Controller to verify accuracy of the personal data;
- if processing is unlawful, but you refuse erasure of the personal data, requesting instead that use of the personal data be restricted;
- we no longer require the personal data for the purposes of processing, but you require them in order to assert, exercise or defend legal claims, or
- you have objected to processing pending the verification of whether our legitimate grounds override those of you.
Where processing has been restricted, such data may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. Where processing has been restricted pursuant to the aforementioned conditions, you shall be notified by us before the restriction is lifted.
Right to Erasure
We are obliged to erase your data without undue delay where one of the following grounds applies:
- Your data is no longer necessary in relation to the purposes for which they were collected;
- You withdraw your consent and there is no other legal basis for processing.
- You object to processing according to Art. 21(1) and there are no overriding legitimate grounds for processing, or you object to processing according to Art. 21(2)°GDPR.
- Your data has been unlawfully processed.
The right to erasure does not apply to the extent that processing is necessary
- For compliance with a legal obligation which requires processing (e.g. by official authorities and offices), or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
- For the establishment, exercise or defence of legal claims.
Right of Information
If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the latter is obliged to notify all recipients, to whom your personal data have been disclosed, of such rectification or erasure of the data or restriction of processing, unless this turns out to be impossible or produces unreasonable burdens.
You have a right to be informed about these recipients.
Right to Objection
You have the right to object, on grounds relating to your particular situation, at any time to any processing of your personal data which is based on Art. 6(1) Point e or f GDPR, including profiling based on those provisions.
In this case we no longer process your data, unless we demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where your data is processed for direct marketing purposes, you have the right to object at any time to any processing of your data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
Right to Withdraw Consent Given Under Data Protection Law
You have the right to withdraw your consent given under data protection law at any time. The withdrawal of consent does not affect the legality of the previous processing.
Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the Austrian Data Protection Authority, in accordance with Art.°24ff°DSG 2018, if you consider that the processing of your personal data infringes the GDPR.
The Austrian Data Protection Authority informs the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy.
Dornbirn, May 2018