Data Privacy
Protecting your personal data is of paramount importance to us. For this reason, we process your data exclusively on the basis of the General Data Protection Regulation (GDPR) and in compliance with national data protection regulations. This privacy policy informs you about the content and purpose of data processing undertaken in connection with our website. In addition, it provides an overview of the rights that you may exercise.
1 General Information
1.1 Controller & contact person at Baufeld-Austria
Baufeld-Austria GmbH
Matthias Grojer
grojer@baufeld-austria.com
+43 664 819 68 99
1.2 Legal basis for processing personal data
The EU General Data Protection Regulation (GDPR) protects the fundamental rights and freedoms of natural persons and in particular their right to the protection of their personal data. Personal data are any information relating to an identified or identifiable natural person.
GDPR Article 6 (1a) provides the legal basis where we obtain your consent for the processing of personal data.
GDPR Article 6 (1b) provides the legal basis for processing your personal data that is required for the fulfilment of a contract with you. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
GDPR Article 6 (1c) provides the legal basis for processing your personal data where this is necessary to comply with a legal obligation that is applicable to our company.
GDPR Article 6 (1f) provides the legal basis for processing your personal data where processing is necessary to protect a legitimate interest of our company or a third party and where your interests, fundamental rights and freedoms do not outweigh the aforementioned interests.
1.3 Disclosure of data
We will only disclose your data within Baufeld-Austria GmbH if this serves to comply with your request or your interest. We will always maintain the confidentiality of your data.
Your personal data will only be disclosed to third parties if you have given your explicit consent (Article 6 (1a) GDPR), if this is necessary for the fulfilment of a contractual relationship with you (Article 6 (1b) GDPR), if there is a legal obligation to do so ( Article 6 (1c) GDPR) or
if the disclosure is necessary to protect legitimate business interests and to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data ( Article 6 (1f) GDPR).
1.4 Cooperation with data processors
We carefully select the service providers who process personal data on our behalf. Insofar as we commission third parties with the processing of personal data on the basis of a contract processing agreement, this will be done in compliance with Article 28 GDPR.
1.5 Storage period in general
Unless an explicit storage period is specified when collecting data, we are obliged to delete personal data as soon as the purpose of their processing no longer exists, in compliance with Article 5 (1e) GDPR.
We would like to point out in this connection that statutory retention obligations that we are subject to constitute a legitimate purpose for the further processing of the personal data covered by them.
As a matter of principle, we store and retain data in a person-related form until the business relationship ends or until applicable guarantee, warranty or limitation periods expire, and beyond that until the end of any legal disputes requiring the data as evidence or, in any case, until the end of the third year after the last contact with a business partner.
1.6 Your rights
As a matter of principle, you have the following rights:
Right to withdraw consent in accordance with Article 7 (3) GDPR: You can withdraw consent you have given at any time. The withdrawal of your consent will not affect the lawfulness of the processing carried out until such withdrawal.
Right of access in accordance with Article 15 GDPR: You may request information about the personal data we process (e.g. the purposes of processing, category of personal data, categories of recipients etc.).
Right to rectification in accordance with Article 16 GDPR: You may request the rectification of any inaccurate personal data relating to you with immediate effect. You can also request that incomplete data be supplemented.
Right to erasure in accordance with Article 17 GDPR: You can demand that we erase personal data relating to you with immediate effect. This right will not apply where processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for the performance of a task performed in the public interest, in the exercise of official authority, for reasons of public interest in the field of public health, for archiving purposes in the public interest or for the establishment, exercise or defence of legal claims.
Right to restriction of processing in accordance with Article 18 GDR): You may request us to restrict processing if you dispute the accuracy of your personal data, if processing is unlawful but you object to the erasure of the personal data, if your data is no longer required by us but you need it to assert, exercise or defend legal claims or if you have objected to the processing in accordance with Article 21 GDPR.
Right to data portability in accordance with Article 20 GDPR: You have the right to receive personal data relating to you in a structured, commonly used or machine-readable format. However, this only covers your personal data that we have processed with the help of automated procedures after your consent or on the basis of a contract.
Right to object in accordance with Article 21 GDPR: You may object to the processing of your personal data processed on the basis of our legitimate interest, insofar as there are grounds for doing so that arise from your particular situation or the objection is raised against direct advertising. This right does not apply if we have compelling legitimate grounds for further processing that override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims.
Right to lodge a complaint with the supervisory authority in accordance with Article 77 GDPR: You may lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.
The relevant supervisory authority in Austria is:
Österreichische Datenschutzbehörde
(Austrian Data Protection Authority)
Barichgasse 40-42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at
2 Technologies Used on our Website
This privacy policy only applies to the data processing operations described below. Further processing of your personal data may also take place.
2.1 Provision and use of the website
a.) Scope and purpose of data processing
As a matter of principle, we only collect and use your personal data insofar as this is necessary in order to provide a functioning website as well as our content, services or information.
When you access and use our website, we capture the personal data that your browser automatically transmits to our server. This information is stored temporarily in a so-called log file.
In this process, the following information is captured without any action on your part and stored until it is erased automatically:
- IP address of computer sending the request
- Date and time of access
- Name and URL of the file requested
- Website from which access was made (referrer URL)
- Browser used and, where applicable, the operating system of your computer
- Name of your access provider
b.) Legal basis for data processing
Article 6 (1f) GDPR provides the legal basis for this data processing. The processing of the aforementioned data is necessary in order for us to provide our website and to ensure secure and easy use, and therefore serves to protect our legitimate interests. In addition, there are no overriding interests on your part, so that our interest prevails.
c.)Storage period and deletion
The aforementioned data will be deleted as soon as they are no longer required to operate the website. Further storage may also occur if this is legally prescribed.
2.2 Contact form
a.) Scope and purpose of data processing:
Our website gives you the opportunity to contact us via the form provided. The provision of your personal data in this context serves the purpose of processing your enquiry accordingly.
The following personal data will be processed if you choose to use the contact form:
- Name
- E-mail address
- Your message
b.) Legal basis for data processing
Article 6 (1a) GDPR provides the legal basis for this data processing. The processing of the aforementioned data will be performed for the purpose of contacting you and on the basis of your declaration of consent given voluntarily during the process of submission.
c.) Storage period and deletion
The personal data processed via our contact form will be deleted once we have dealt with your enquiry and conclusively clarified the matter in question. Further storage may also occur if this is legally prescribed.
2.3 Cookies
a.) Scope and purpose of data processing
We use cookies on our website to make it more user-friendly and functional. Cookies are small text files stored on your computer when you visit our website and saved by your browser. They do not cause any harm. Some functions of our website cannot be provided without the use of cookies that are technically necessary.
b.) Legal basis for data processing
The legal basis for this data processing is our legitimate interest in a functioning website in accordance with Article 6 (1f) GDPR. Your consent also provides the legal basis in accordance with Article 6 (1a) GDPR where you have given us your consent to the use of cookies (“cookie banner”).
c.) Storage period and deletion
As a matter of principle, the data transmitted to us via the cookies will be deleted as soon as they are no longer required to achieve the purposes described above. Further storage may also occur in individual cases if legally prescribed. You will find specific information on the cookies we use below:
We only use cookies that are technically necessary for the operation of the website.
d.) Browser settings
You have the option of setting your browser in such a way that the storage of cookies on your end device is always prevented or that you are asked each time whether you agree to cookies being set. Furthermore, you also have the option of deleting cookies once they have been set. Please use your browser’s help feature for this purpose. Please note, however, that non-acceptance of cookies may limit the functionality of our website.
e.) Borlabs
Our website uses the Borlabs cookie consent tool provided by Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany (“Borlabs”), which sets technically necessary cookies to store your cookie preferences. The aforementioned processing is performed in accordance with Article 6 (1f) GDPR based on our legitimate interest in providing cookie preference management for visitors to our website. The Borlabs cookie does not process any personal data. If you wish to revoke such consent, simply delete the cookie in your browser. You will be asked for your consent to the cookie again when you re-enter/reload our website.
3 Amendments
This privacy policy is revised from time to time. We therefore recommend that you regularly review this privacy policy.
Last updated: 17/01/2023