DATA PROTECTION DECLARATION
The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the General Data Protection Regulation (GDPR and in accordance with national data protection regulations. With this privacy policy, we inform you about the content and purpose of data processing within the scope of our website. In addition, you will receive an overview of the rights to which you are entitled.
1 GENERAL INFORMATION
1.1 Responsibility for processing in the Wietersdorfer Group
The responsible party within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection regulations is:
Wietersdorfer Alpacem GmbH
Ferdinand-Jergitsch-Straße 15
9020 Klagenfurt
Austria
There is no internal data protection officer within the Wietersdorfer Group, as this is not required by law. However, the Wietersdorfer Group does have a central data protection officer (data protection coordinator), who will support you in all matters
Therefore, if you have any questions about the processing of your personal data or in general about data protection within the Wietersdorfer Group, you can contact our data protection coordinator at privacy@wietersdorfer.com..
1.2 Legal basis for the processing of personal data
The EU General Data Protection Regulation (GDPR) protects the fundamental rights and freedoms of natural persons and in particular their right to the protection of personal data. Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address or IP address. Information for which we cannot (or can only with a disproportionate effort) establish a link to your person, e.g. by anonymizing the information, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis or your consent.
Insofar as we obtain your consent for the processing operations of personal data, Art. 6 (1) lit. a GDPR serves as the legal basis.
When processing your personal data that is necessary for the performance of a contract with you, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as the processing of your personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not outweigh the former interests, Art. 6 (1) lit. f GDPR serves as the legal basis for the processing.
1.3 Passing on data
We only pass on your data within the Wietersdorfer Group if this serves to fulfill your request or your interest. We always maintain the confidentiality of your data.
Your personal data will only be passed on to third parties if you have given your express consent to this (Art. 6 para. 1 lit. a GDPR), if this is necessary to fulfil a contractual relationship with you (Art. 6 para. 1 lit. b GDPR), if there is a legal obligation to do so (Art. 6 para. 1 lit. c GDPR) or if the disclosure is necessary for the protection of legitimate business interests and for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data (Art. 6 para. 1 lit. f GDPR).
1.4 Cooperation with processors
We carefully select our service providers who process personal data on our behalf. If we commission third parties with the processing of personal data on the basis of a contract processing agreement, this is done in accordance with Art. 28 GDPR.
1.5 Storage period in general
Unless an explicit storage period is specified when collecting data, we are obliged to delete personal data as soon as the purpose of their processing no longer exists, in accordance with Art. 5(1)(e) GDPR. In this context, we would like to point out that legal retention obligations to which we are subject constitute a legitimate purpose for the further processing of the personal data collected by them.
Data will be stored and retained by us in personal form in principle until the termination of a business relationship or until the expiry of applicable guarantee, warranty or limitation periods, beyond that until the termination of any legal disputes in which the data is required as evidence, or in any case until the expiry of the third year after the last contact with a business partner.
Below (under point 2) you will find specific information on the individual data processing operations on our website.
1.6 Your rights
You are generally entitled to the following rights:
Right to revoke your consent pursuant to Art. 7 (3) GDPR: You may revoke the consent you have given at any time. The revocation of your consent does not affect the lawfulness of the processing carried out until the revocation.
Right to information pursuant to Art. 15 GDPR: You can request information about the personal data we process (e.g. processing purposes, category of personal data, categories of recipients, etc.).
Right to rectification pursuant to Art. 16 GDPR: You may request the rectification of any inaccurate personal data concerning you without undue delay. Likewise, you may request the completion of incomplete data.
Right to deletion pursuant to Art. 17 GDPR: You may request that we delete personal data concerning you without undue delay. The right does not apply if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest, in the exercise of official authority, for reasons of public interest in the area of public health services, for archiving purposes in the public interest or for the assertion, exercise or defense of legal claims.
Right to restriction of processing pursuant to Art. 18 GDPR: You may request us to restrict processing if the accuracy of your personal data is disputed by you, the processing is unlawful, but you object to the erasure of the personal data, your data is no longer required by us, but you need it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 GDPR.
Right to data portability pursuant to Art. 20 GDPR: You have the right to receive the personal data concerning you, in a structured, common or machine-readable format. However, this only covers those of your personal data that we have processed with the help of automated processes after your consent or on the basis of a contract.
Right to object pursuant to Art. 21 GDPR: You may object to the processing of your personal data that is processed on the basis of our legitimate interest, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct marketing. The right does not exist if there are compelling legitimate grounds on our part for further processing that override your interests, rights and freedoms, or if the processing serves the assertion, exercise or defense of legal claims.
Right to lodge a complaint with the supervisory authority pursuant to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you may lodge a complaint with a supervisory authority.
The competent supervisory authority in Austria is:
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Wien
Tel.: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at
2 TECHNOLOGIES ON OUR WEBSITE
This privacy policy only covers the data processing operations described below. In addition, further processing of your personal data may take place. In this respect, the special data protection declarations provided by the Wietersdorfer Group for the respective data processing operations apply.
2.1 Contact
a.) Scope and purpose of data processing:
On our website, you have the opportunity to contact us via a provided form. Additionally, you may contact us via email, telephone, or postal mail. The purpose of providing your personal data in this context is to process your request accordingly.
If you make use of the contact options, the following personal data will be processed:
- Title
- Name
- E-mail adress
- Telephone number
- Your message
The purpose of providing your title, name and e-mail address is to process your request. When using one of the contact options, your personal data will not be passed on to third parties.
b.) Legal basis of data processing
Your consent pursuant to Art. 6 (1) lit. a GDPR serves as the legal basis for this data processing. The processing of the aforementioned data is carried out for the purpose of contacting you and on the basis of your declaration of consent given voluntarily during the sending process.
c.) Storage period and deletion
As soon as the request you have made has been dealt with and the relevant matter has been conclusively clarified, the personal data processed via our contact form, email, telephone or postal mail will be deleted. If required by law, further storage may also take place.
2.2 Cookies
a.) Scope and purpose of data processing
We use cookies on our website to make our Internet presence more user-friendly and functional. Cookies are small text files that are stored on your computer during your visit to our website and saved by your browser. They do not cause any damage. Some functions of our website cannot be offered without the use of technically necessary cookies.
b.) Legal basis of data processing
Our legitimate interest in a functioning website pursuant to Art. 6 (1) lit. f GDPR serves as the legal basis for this data processing. If you have given us your consent to use cookies (“cookie banner”), your consent also serves as the legal basis pursuant to Art. 6 (1) lit. a GDPR.
c.) Storage period and deletion
In principle, the data transmitted to us via the cookies are deleted as soon as they are no longer required to achieve the purposes described above. If required by law, further storage may also take place in individual cases. In the following, you will receive concrete information about the cookies we use.
Functional cookies
cookie ID | duration | type |
PHPSESSID | Session | System |
pll_language | 1 week | System |
advanced_cookie | 1 year | System |
analytics_cookie | 1 year | System |
necessary_cookie | 1 year | System |
Marketing cookies
cookie ID | duration | type |
_fbp | 90 days | |
last_pysTrafficSource | 1 week | Pixel Your site |
last_pys_landing_page | 1 week | Pixel Your site |
pbid | 180 days | Pixel Your site |
pysTrafficSource | 1 week | Pixel Your site |
pys_first_visit | 1 week | Pixel Your site |
pys_landing_page | 1 week | Pixel Your site |
pys_session_limit | 1 year | Pixel Your site |
d.) Browser settings
You have the option of setting your browser in such a way that the storage of cookies is generally prevented on your end device or you are asked each time whether you agree to the setting of cookies. In addition, you also have the option of deleting cookies once they have been set. Please use the help function of your browser for this purpose. Please note, however, that if you do not accept cookies, the functionality of our website may be limited.
2.3 Google Analytics
a.) Scope and purpose of data processing
We use Google Analytics on some of our websites to analyze user behavior and to optimize our website. This is a web analytics service provided by Google Ireland Limited, Barrow Street, Dublin 4, Ireland (“Google”).
ATTENTION: Within the scope of this service, data may be transferred to the USA. In the opinion of the European Court of Justice, there is currently no adequate level of data protection in the case of data transfer to the USA and thus different risks (e.g. access by US secret services) may exist.
Google Analytics uses “cookies”, which are small text files placed on your computer, to help the website analyze how users use the site.
Information about the use of the website such as browser type/version, operating system used, the previously visited page, host name of the accessing computer (IP address), time of server request are usually transmitted to a Google server and stored there. We have concluded a contract with Google for this purpose.
On our behalf, Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. According to Google, the IP address transmitted by your browser is not merged with other data from Google.
We only use Google Analytics with IP anonymization enabled by adding the code “anonymizeIP” to this website. This guarantees the masking of your IP address so that all data is collected anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there. Moreover, the use requires your explicit consent.
During your visit to the website, the following data is collected, among other things:
- the pages you visit, your “click path”
- achievement of “website goals” (conversions, e.g. newsletter sign-ups)
- your user behavior (for example, clicks, dwell time, bounce rates)
- Your approximate location (region)
- your IP address (in shortened form)
- technical information about your browser and the terminal devices you use (e.g. language setting, screen resolution)
- your internet service provider
- the referrer URL (via which website/advertising medium you came to our website)
b.) Storage period and deletion
The data about the use of our website will be deleted immediately after the end of the retention period set by us in each case. Google Analytics gives us the following options for the retention period: 14 months, 26 months, 38 months, 50 months, do not delete automatically. You can ask us at any time for the retention period currently set by us.
c.) Legal basis of data processing
The processing of your data using Google Analytics is based on your express consent pursuant to Art 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future.
In addition, you can prevent the collection of data by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout.
Here you can find out where exactly Google data centers are located: https://www.google.com/about/datacenters/inside/locations/
For more information about Google’s use of data, settings and opt-out options, please see Google’s privacy policy at https://policies.google.com/privacy.
The data processing terms and conditions for Google products and the standard contractual clauses for data transfers to third countries can be found at https://business.safety.google/adsprocessorterms/.
2.4 Newsletter
a.) Scope and purpose of data processing
You have the option to subscribe to our newsletter via our website. A subscription to the newsletter requires your consent that you agree to receive the newsletter. We process your data in order to send you the newsletter as well as information regarding activities in the Wietersdorfer Group. By subscribing to the newsletter on our website, the following data will be processed from you:
- Name
- Salutation
- e-mail address
- IP address, the date
- time of subscription
- Your consent to receive the newsletter
b.) Storage period and deletion
You can cancel your subscription to the newsletter at any time. Please send your cancellation to the following e-mail address: office@wietersdorfer.com. We will then immediately delete your data in connection with the newsletter dispatch.
c.) Legal basis for data processing
The processing of the data entered in the newsletter registration form is based exclusively on your express consent in accordance with Art. 6 (1) lit. a GDPR.
2.5 Plug-Ins
a.) Scope and purpose of data processing
Our website incorporates plugins from various providers to offer you interactive features and enhance our presence on these platforms. These plugins may transmit data to the servers of the providers as soon as you visit our website. The following data will be processed from you:
- IP Adress, the date
- date and time of your visit
- browser details
- the pages you visit, your “click path”
This data may be used for purposes such as advertising, analytics, and market research.
The following Plug-Ins are used by us:
- pixelyoursite
b.) Storage period and deletion
The data collected via our plugins will be retained for as long as necessary to provide and improve the services offered through our website, or as required by law. We do not control the data retention policies of the platforms, and we encourage you to read their privacy policies for further information on their data processing activities.
c.) Legal basis for data processing
The use of these plugins is based on our legitimate interests in increasing our website’s visibility and user engagement, in accordance with Article 6(1) lit. f GDPR.
3. Changes
This privacy policy is revised from time to time. We therefore recommend that you check the data protection declaration regularly.