DATA PRIVACY WEBSITE
I. Name and Address of the Data Controller
In terms of the General Data Protection Regulation and other national data protection laws of the EU member states and Switzerland and other applicable data protection-related regulations ("applicable data protection legislation"), the data controller is:
EDAG Engineering Austria GmbH
Betriebspark 21
4400 St. Ulrich bei Steyr
Österreich
Tel.: +43(0)644 01981500
II. General Data Processing Information
Insofar as we obtain the consent of the data subject to process his or her personal data, Art. 6 para. 1 p. 1 point a of the EU General Data Protection Regulation (GDPR) and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis for the processing of personal data.
Art. 6 para. 1 p. 1 point b of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis for the processing of personal data necessary for the performance of a contract to which the data subject is party. This shall also apply to processing necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 p. 1 point c of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis.
Should it be necessary to process personal data in order to protect the vital interests of the data subject or another natural person, Art. 6 para. 1 p. 1 point d of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis.
Should processing be necessary to protect the legitimate interests of our company or a third party and such interests are not overridden by the interests, fundamental rights and freedoms of the data subject, then Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions pursuant to applicable data protection legislation shall serve as the legal basis for processing.
III. Provision of the Website and Creation of Log Files
Every time our website is accessed, our system automatically acquires data and information from the computer system of the calling computer. The following data is collected:
(1) The user's IP address
(2) Date and time of access
(3) Website visited
(4) Quantity of data sent in bytes
(5) Source/link from which you accessed the website
(6) Browser used
(7) Operating system used
The data is also stored in the log files of our system. This data is not stored with other personal data of the user.
The temporary storage of the IP address by the system is necessary in order to be able to deliver the website to the user's computer. The data that has been acquired is used for statistical analyses and to improve the website. Your personal data (IP address) is first anonymised.
Data is stored in log files to ensure that the website functions properly. In addition, the data serves to optimise the website and to guarantee the security of our IT systems. No data evaluation is carried out for marketing purposes in this context.
These purposes are also in our legitimate interests in data processing under Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
In the case of data stored in log files, this is the case after a maximum of seven days. Storage beyond this point in time is possible. In this case, the user's IP address will be deleted or distorted, so that it can no longer be attributed to the accessing client.
IV. USE OF COOKIES
V. E-Mail Contact
If the user contacts us by e-mail, he or she can object to the storage of his or her personal data at any time. If this is the case, then the communication cannot be continued.
In this case, all personal data collected as a result of contact being made will then be erased.
VI. Registration for recruiting portal
On our website, we offer users the opportunity to register on our recruiting portal; when using this, they are required to provide personal data. The data is entered in an input mask, transmitted to us, and stored. The following data is collected during the registration process:
(1) Form of address
(2) Surname, first name
(3) E-mail address
(4) Telephone number
(5) Nationality
The following data is also stored at the time the registration is submitted:
(10) The user's IP address
(11) Date and time of registration
During the registration process, we refer to the data privacy statement for applicants for further processing of the application documents.
VII. Online presence in Social Media
We maintain online presences within social networks in order to communicate with any customers, interested parties and users active there, and to inform them about our services. In this context, only simple links are used, or only social media plug-ins that do not establish any connection to the network in question when the page is loaded. This is the difference between the social media plug-ins used here and the the widespread Like buttons, which transmit data to the social networks as soon as the page is loaded, without the button having to be clicked. Additional information on the processing of data can be found in the following social media data privacy statement.
VIII. Web Tracking
This website uses Google Analytics, a web analytics service of Google Inc. ("Google"). This makes it possible for data, sessions and interaction across multiple devices to be assigned to a pseudonymised user-ID, permitting the cross-device analysis of the activities of a user.
Google Analytics makes use of "cookies", data records which are stored on your computer and enable the use of the website to be analysed. As a rule, the information relating to your use of this website generated by the cookie is transferred to a Google server in the USA, where it is saved. If IP address anonymisation has been activated on this website, Google will truncate your IP address within member states of the European Union or other states party to the Agreement on the European Economic Area (including Switzerland). Only in exceptional cases is the IP address transferred to a Google server in the USA and truncated there. On behalf of the owner of this website, Google will use this information to evaluate your usage of the website, to compile reports on the website activities, and to perform further services relating to the use of the website and Internet for the website owner.
To do this, the following data concerning you is processed:
The purpose behind the use of the web analytics service is to analyse and make regular improvements to the use of our website. The statistics obtained enable us to improve our services and make them more interesting to you, our users. For any exceptional cases in which personal data is transferred to the USA, standard contractual clauses have been agreed with Google under the terms of the contractual arrangements.
You can prevent cookies from being stored by adjusting your browser software accordingly; we would, however, like to draw your attention to the fact that if you do so, this might possibly result in your not being able to use all the functions offered on this website to the full. Further, you can prevent the acquisition of the data generated by the cookie and relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in: tools.google.com/dlpage/gaoptout.
Opt-out cookies prevent the future acquisition of your data when visiting this website. To prevent acquisition across multiple devices by Universal Analytics, you will have to activate the opt-out for all systems in use. Click here to set the opt-out cookie: ga-optout text=“Deactivate Google Analytics“
This website uses Google Analytics with the "_anonymizeIp()" function. This ensures that IP addresses are processed in truncated form, making it impossible to trace them to a specific user. Should the data about you that has been collected produce a direct personal link, this is immediately blocked, so the personal data is instantly deleted.
To this purpose, we have also entered into a data processing contract with Google.
If you accept the functional cookies above and beyond those that are technically necessary, and cookies for analysis and advertising purposes, you also consent to the processing of your data in the USA pursuant to Art. 49 para. 1 p. 1 point a of the GDPR. We would like to point out that the European Court of Justice regards the US as a country with a level of data protection that is insufficient by EU standards. In view of this fact, no other suitable data protection safeguards exist. There is therefore a risk of your data being processed by U.S. authorities for control and monitoring purposes, possibly without the possibility of legal recourse. If you do not want this to happen, click Refuse.
To this purpose, we have also entered into a data processing contract with Google.
We use Google Tag Manager. Google Tag Manager is a solution that enables marketers to manage website tags via one interface. The Tool Tag Manager itself, which implements the tags, is a service that can collect personal data by setting cookies. The tool triggers other tags that under certain circumstances may themselves collect data. Google Tag Manager does not access this data. If deactivation has been effected at domain or cookie level, it will remain in force for all tracking tags implemented with Google Tag Manager. More information can be found here: https://www.google.de/tagmanager/use-policy.html.
Click here for exclusion from data collection by the Google Tag Manager.
IX. Use of Google Adwords
This website uses Google Adwords in order to draw attention to our attractive range of products and services on external websites with the help of advertising media (known as Google Adwords). In relation to the data from the advertising campaigns, we can establish how successful each advertising activity has been.
This advertising material is delivered by Google via "ad servers". To this end, we use ad server cookies, by means of which certain performance assessment parameters, such as the number of advertisement impressions or user clicks, can be measured. If you reach our website via a Google advertisement, Google Adwords will store a cookie in your computer. As a rule, these cookies become invalid after 30 days have expired, and are not intended to identify you personally. The following data is generally saved as analysis values for this cookie:
(1) The unique cookie ID
(2) Number of ad Impressions per placement (frequency)
(3) Last impression (relevant for post-view conversions)
(4) Opt-out information (indication that the user does not wish to be contacted again)
These cookies enable Google to recognise your Internet browser. Should a user visit certain pages of the website of an Adwords customer and the cookie stored on his or her computer has not yet expired, Google and the customer can see that the customer has clicked on the advertisement and been redirected to this page. Every Adwords customer is assigned a different cookie. This means that cookies cannot be tracked across the websites of Adwords customers. We do not collect and process personal data in the above-mentioned advertising activities. All we receive from Google are statistical evaluations. With the help of these evaluations, we can see which of the advertising activities that have been implemented have been particularly effective. We receive no further data relating to the use of advertising media, and in particular, we are not able to identify users from this information.
Further information on Google's data protection can be found here: https://policies.google.com/privacy?hl=de and https://services.google.com/sitestats/de.html.
Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.
These purposes are also in our legitimate interest in data processing under Art. 6 para. 1 p. 1 point f of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
As a rule, the cookies used become invalid after 30 days have expired, and are not intended to identify you personally.
On account of the marketing tools used, your browser automatically creates a direct link to the Google server. We have no influence on the volume and any further use of the data that is collected due to the use of this tool by Google, and the information we are giving you therefore reflects the state of our knowledge: by implementing AdWords Conversion, Google receives the information that you have activated the corresponding part of our website or have clicked on one of our advertisements. If you have registered for a Google service, Google can assign the visit to your account. Even if you have not registered or logged on with Google, there is still a chance that the provider might find out your IP address and store it.
There are a number of ways of preventing this tracking process: a) by setting your browser software accordingly, the suppression of third party cookies in particular has the effect that you will not receive advertising from third parties; b) by deactivating the cookies for conversion tracking: to do this, set your browser so that cookies from the "www.googleadservices.com" domain are blocked, www.google.de/settings/ads: however this setting will be deleted if you delete your cookies; c) by deactivating the interest-based advertisements of providers involved in the self-regulatory campaign "About Ads", using this link www.aboutads.info/choices: however this setting will be deleted if you delete your cookies; d) by permanently deactivating in your Firefox, Internet Explorer or Google Chrome browsers, using this link www.google.com/settings/ads/plugin. In this case, we draw your attention to the fact that this might possibly result in your not being able to use this website to the full.
X. Integration of Google Maps
We use the Google Maps service on this website. This enables us to display interactive maps directly on the website, making it easy and convenient for you to use the map function.
Should you visit the website, Google receives the information that you have activated the corresponding subpage of our website. In addition, the following data is transmitted:
(1) IP address of the accessing computer
(2) Date and time of enquiry
This happens regardless of whether or not Google has provided a user account by means of which you have logged on. If you have logged on to Google, your data is assigned directly to your account. If you do not wish the data to be assigned to your profile with Google, you must log out before clicking on the link.
Further, depending on what settings the user has made, it is even possible for Google to collect location data. Your consent (insofar as legally required) to such data being used may be necessary, and you can refuse to let Google have this in your response to the query.
Further information concerning the purpose and scope of data acquisition and its processing by the plugin provider can be found in the provider's data privacy statements, where you will also find additional information on your rights in this respect and setting options to protect your private sphere:
https://policies.google.com/privacy?hl=en&gl=en.
XI. Use of Google Web Fonts
We use the web fonts provided by Google and downloaded to our local server to ensure that font types are shown consistently. To this end, the required web fonts are loaded into your browser cache so that texts and fonts are displayed correctly. If your browser does not support web fonts, a default font from your computer is used.
No cookies are set when you call up the page. Also, no direct connection to Google's servers is established, as the fonts are integrated locally into our website.
Google Web Fonts is a freely available library of over 800 fonts. Google Web Fonts allows us to present our website to the user in an attractive design and in the same quality across all devices. This is the only way of making it technically possible for all visitors to our homepage to have a consistent and pleasant user experience.
This is also a legitimate interest within the meaning of Art. 6 para. 1 p. 1 point f of the GDPR.
Data is stored for as long as it is needed for the purpose for which it was collected. You have the option of objecting to the use by changing your browser settings.
XII. Integration of YouTube Videos (via Plugin)
We have integrated YouTube videos into our online service; these are stored at www.YouTube.com and can be played directly from our website. These are all embedded in “enhanced privacy mode,” which means that no data about you as a user is transferred to YouTube unless you play the videos. The data mentioned below will not be transmitted until you play the videos. We have no influence on this data transmission.
Should you visit the website, YouTube receives the information that you have activated the corresponding subpage of our website. In addition, basic data such as IP address and time stamp is also transmitted.
This happens regardless of whether or not YouTube has provided a user account by means of which you have logged on. If you have logged on to Google, your data is assigned directly to your account.
XIII. Rights of data subject
If personal data concerning you is processed, you are the data subject as defined in the GDPR and the analogous provisions pursuant to applicable data protection legislation, and have the following rights against the data controller:
You can ask the controller to provide you with confirmation as to whether or not personal data concerning you is processed by us.
If such processing is being undertaken, you can ask the controller to provide you with information concerning the following:
(1) The purposes for which the personal data is processed;;
(2) The personal data categories which are processed;
(3) The recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
(4) The planned storage duration of the personal data concerning you or, if it is not possible to provide concrete information on this point, criteria for defining the storage duration;
(5) The existence of a right to correct or delete the personal data concerning you, a right to limit processing by the controller, or a right to object to such processing;
(6) The existence of a right to lodge a complaint with a supervisory authority;
(7) All available information concerning the origin of the data, if the personal data was not acquired from the data subject him or herself;
(8) The existence of automated decision-making and profiling in accordance with Art. 22 para. 1 and 4 of the GDPR and the analogous provisions pursuant to applicable data protection legislation and – at least in these cases – meaningful information on the logic involved and the implications and intended impact of such processing for the data subject.
You have the right to request information on whether or not the personal data concerning you is transmitted to a third country or international organisation. In this context, you may ask for information on appropriate guarantees in accordance with Art. 46 of the GDPR and the analogous provisions pursuant to applicable data protection legislation relating to the transmission of data.
Subject to the following conditions, you can request that processing of the personal data concerning you be restricted:
(1) If you dispute the accuracy of the personal data concerning you for a period which allows the controller to check the accuracy of the personal data;
(2) The processing is unlawful and you refuse deletion of the personal data, instead requesting that use of the personal data be restricted;
(3) The controller no longer needs the personal data for processing purposes, but you need it in order to establish, exercise or defend legal claims, or
(4) If you have filed an objection to the processing of the data in accordance with Art. 21 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.
If the processing of the personal data concerning you has been restricted, then, storage aside, this data may only be processed with your consent (insofar as legally required), or to establish, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of substantial public interest on the basis of Union or Member State law.
If the processing has been restricted under the above-mentioned conditions, you will be informed by the controller before the restriction is lifted.
a) Obligation to delete
You can ask the controller to delete the personal data concerning you without undue delay, and the controller is obliged to delete this data without delay if one of the following reasons applies:
(1) The personal data concerning you is no longer needed for the purposes for which it was collected or otherwise processed.
(2) You revoke your consent, which served as the basis for processing in accordance with Art. 6 para. 1p. 1 point a or Art. 9 para. 2 point a of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and there is no other legal basis for the processing.
(3) You file an objection to processing in accordance with Art. 21 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and there are no overriding legitimate reasons for the processing, or you file an objection to processing in accordance with Art. 21 para. 2 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
(4) The personal data concerning you has been unlawfully processed.
(5) Deletion of the personal data concerning you is necessary in order to ensure compliance with a legal obligation under Union or Member State law to which the data controller is subject.
(6) The personal data concerning you has been acquired in relation to the offer of information society services in accordance with Art. 8 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
b) Information to third parties
If the controller has made the personal data concerning you public, and is obliged to delete such data in accordance with Art. 17 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, then, taking into account the technologies available and implementation costs, he - the controller - applies appropriate measures, which may also be of a technical nature, to inform the people responsible for processing personal data that, as the data subject, you have requested that they should delete all links to this personal data as well as all copies or replications of this personal data.
c) Exceptions
The data subject does not have the right to have his or her data deleted if processing is necessary
(1) to exercise the rights to freedom of expression and freedom of information;
(2) to comply with a legal obligation calling for processing on the basis of Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
(3) for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 points h and i and Art. 9 para. 3 of the GDPR and the analogous provisions pursuant to applicable data protection legislation;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, insofar as the right set out in section a) is likely to render impossible or seriously impair the achievement of the purposes of this processing, or
(5) to establish, exercise or defend legal claims.
(1) processing is based on consent in accordance with Art. 6 para. 1 p. 1 point a of the GDPR or Art. 9 para. 2 point a of GDPR and the analogous provisions pursuant to applicable data protection legislation, or on a contract in accordance with Art. 6 para. 1 p. 1 point b of the GDPR and the analogous provisions pursuant to applicable data protection legislation, and
(2) the processing is carried out by automated means.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This shall not adversely affect the rights and freedoms of others.
The right to data portability does not apply to processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
The controller will no longer process the personal data concerning you unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims.
If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling, insofar as it is related to such direct marketing.
Should you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
In the context of the use of information society services – notwithstanding Directive 2002/58/EG and the analogous provisions pursuant to applicable data protection legislation – you are entitled to exercise your right to object by automated means using technical specifications.
(1) is necessary for entering into or the performance of a contract between you and the data controller,
(2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and your legitimate interests, or
(3) is made with your explicit consent.
These decisions must not, however, be based on special categories of personal data referred to in Art. 9 para. 1 of the GDPR and the analogous provisions pursuant to applicable data protection legislation, unless Art. 9 para. 2 point a or g and the analogous provisions pursuant to applicable data protection legislation apply, and suitable measures have been undertaken to safeguard your rights and freedoms and your legitimate interests.
With regard to the cases described in points (1) and (3), data controller will implement suitable measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy in accordance with Art. 78 of the GDPR and the analogous provisions pursuant to applicable data protection legislation.
Version: January 2024