Steyr
Atoms/Icons/Hambuger Menu Copy

Privacy Policy

This privacy statement sets out, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, what personal data is processed either by us or on our behalf.  In addition, you will be informed about your rights as a data subject.

This privacy policy applies to personal data processed by us in the course of operating this website, as well as data obtained by contacting us, and to all personal data processed by processors commissioned by us. Personal data is information within the meaning of Article 4(1) DSGVO that relates to an identified or identifiable person. The processing of personal data enables us to offer this website and the associated services.

Personal data may only be processed in a lawful manner. According to Art 6 DSGVO, lawfulness is established if one of the legal bases for processing listed in Art 6 (1) DSGVO is given. Personal data is therefore only processed by us if one of the following conditions is met:

  1. consent (Art 6 para 1 lit. a DSGVO): You have given us your consent to process your personal data for one or more specific purposes.
  2. contract (Art 6 para 1 lit. b DSGVO): We process your personal data in order to fulfil a contract concluded with you.
  3. legal obligation (Art 6 para 1 lit. c DSGVO): We process your personal data because this is necessary to fulfil legal obligations.
  4. legitimate interests (Art 6 para 1 lit. f DSGVO): We process your personal data because this is necessary to protect the legitimate interests of us or third parties and these outweigh your interests and your fundamental rights and freedoms.
  5. other legal grounds (Art 6 para 1 lit. d & e DSGVO): Processing is necessary to protect vital interests or to fulfil a task in the public interest or is carried out in the exercise of official authority.

In addition to EU law, the Data Protection Act (DSG) is applicable in Austria.

If other regional or national laws apply, we will inform you about them in the following sections.

If you have any questions regarding data protection, please find below the contact details of the responsible person or office:

Steyr Automotive GmbH

Schönauerstraße 5, 4400 Steyr, Austria

Authorised to represent: DI (FH) Johann Ecker, Mag. Florian Mayrhofer

E-mail: info@steyr-automotive.com

Phone: +43 7252 585-0

Imprint: https://www.steyr-automotive.com/en/impressum

Personal data is only stored as long as it is necessary for the provision of our services. If the reason for data processing ceases to apply, we delete the personal data concerned. Exceptions to this are legal obligations to store data for a longer period after the original basis for the data processing has ceased to exist.

If you exercise your right to request the deletion of data, we will comply with this as quickly as possible and delete your personal data, unless this is covered by an obligation to store it.

We inform you about the actual duration of data processing in the respective section.

In accordance with Art 13 (2) DSGVO, we inform you about your rights vis-à-vis us:

  • You have a right to information (Art 15 DSGVO) as to whether we process personal data about you. If so, you have the right to be informed about this data and about the following information:
    • the purposes of processing;
    • the categories of personal data processed;
    • the recipients or categories of recipients to whom your personal data are disclosed, in particular in the case of recipients in third party countries
    • the period for which the personal data are to be stored
    • the existence of a right to rectification or erasure of their personal data and the right to restrict and object to processing
    • the existence of a right of appeal to the data protection authority
    • the origin of the data, if it has not been collected from you
    • whether profiling (automatic data evaluation to create a profile about you) is taking place;
  • You have the right to rectification (Art 16 DSGVO) of inaccurate personal data concerning you;
  • You have the right to request the deletion (Art 17 DSGVO) of personal data concerning you;
  • You have the right to request restriction of processing (Art 18 DSGVO) ofyou’re your personal data;
  • You have the right to request data portability (Art 20 DSGVO) i.e. the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to forward it to another controller;
  • You have a right to object (Art 21 DSGVO). This includes the following rights:
    • If the processing is based on public interests, in the exercise of official authority (Art 6(1)(e) DSGVO) or on the basis of a legitimate interest (Art 6(1)(f) DSGVO), we will stop the processing unless there are legitimate grounds which override your interests, rights and freedoms.
    • If your personal data is processed for direct marketing or profiling, you may object at any time.

If you are of the opinion that the processing of your data violates data protection law or your data protection rights are violated in any other way, you can complain to the supervisory authority. For Austria, this is the data protection authority, whose website can be found at https://www.dsb.gv.at/.

Head: Dr. Andrea Jelinek, M.D.

Address: Barichgasse 40-42, 1030 Vienna

Telephone number: +43 1 52 152-0

E-mail address: dsb@dsb.gv.at

Website: https://www.dsb.gv.at/

Your personal data to is transferred to countries outside the EU (third party countries) only based on your consent, legal obligations or contractual necessities, but in any event only to the extent that such transfer is permitted. The processing of your personal data in third party countries may result in personal data being processed and stored in unexpected ways.

It is expressly pointed out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. Data processing by US services (such as Google Analytics) may potentially result in personal data not being processed and stored anonymously. In addition, there is the possibility that US government authorities may access individual personal data. It is also possible that personal data collected may be linked to data from other services of the same provider, if you have a corresponding user account. Where possible, we use server locations within the EU.

If data is transferred to third party countries, we will inform you about this at the relevant points in this data protection declaration.

To ensure the protection of personal data, we have implemented technical and organisational measures. As far as possible, personal data is encrypted or pseudonymised. This ensures that the processing of personal data meets the requirements of the DSGVO and that your rights are protected.

Upon contacting us, your personal data may be processed. The personal data processed will be processed for the purpose of dealing with your request and will only be stored for as long as is necessary for the processing or as required by law.

Data subjects are those persons who contact us by whatever means.

If you contact us by telephone, the call data will be stored on the respective terminal device and with the telecommunications provider. Further data, such as your name and telephone number, may be sent and stored in the course of processing your request by e-mail.

The data will be deleted as soon as your request has been dealt with and there are no legal regulations to the contrary.

If you contact us by e-mail, the corresponding data (e-mail address, name etc) will be stored on the respective end device and the e-mail server.

The data will be deleted as soon as your request has been dealt with and there are no legal regulations to the contrary.

If you contact us using our online form, data is stored on the web server, forwarded to an e-mail address and stored accordingly on end devices and the e-mail server.

The data will be deleted as soon as your request has been dealt with and there are no legal regulations to the contrary.

The processing of your data is based on your consent (Art. 6 para. 1 lit. a DSGVO) to process and store your data for the purpose of processing your request, to fulfil a contract concluded with you (Art. 6 para. 1 lit. b DSGVO), based on our legitimate interest (Art. 6 para. 1 lit. f DSGVO) to be able to process customer requests professionally, or several of these legal bases.

This website uses cookies. These are small text files that are placed and stored on a computer by the internet browser. These cookies store personal data, such as language settings or which browser is used. When you visit our website again, the cookies are sent back to our website and we can display the website according to your settings.

There are 4 categories of cookies that can be distinguished:

Necessary cookies

Such cookies are necessary to provide the functions of our website as intended. For example, settings are saved so that they are not lost each time the website is reloaded or changed.

Performance cookies

Such cookies collect information about user behaviour, whether error messages are displayed, but also loading times and the behaviour of the website is measured with performance cookies.

Functional cookies

Such cookies are not absolutely necessary for the operation of the website, but improve the user experience. For example, form data can be saved so that it does not have to be entered again.

Advertising or targeting cookies

Such cookies make it possible to display individualised advertising to the user.

You decide yourself on the use of cookies and the extent to which they are used. It is possible to delete existing cookies at any time. You can find this option in the settings of your internet browser. You also have the option of deactivating or restricting the use of cookies by our website.

If you would like to find out which cookies are stored on your device, you can also find this information in the settings of your browser.

We process personal data through cookies, insofar as they are absolutely necessary cookies, on the basis of our legitimate interest (Art 6 para 1 lit f DSGVO). We only process cookies that go beyond this on the basis of consent (Art 6 para 1 lit a DSGVO).

In the following sections of this data protection declaration, you will be informed in more detail about the use of cookies, insofar as the software used uses cookies.

When visiting our website, information, including personal data, is automatically collected and stored. This data processing is subject to the principles of the DSGVO such as data economy and purpose limitation and lawfulness.

This website and all sub-pages are provided by a web hosting provider to ensure reliable and error-free operation. When establishing a connection and transferring data between your terminal device and the web server, personal data may be processed in order to enable proper operation.

The purposes of data processing are:

  1. hosting the website and securing its operation;
  2. maintenance of operational and IT security;
  3. anonymised evaluation of access behaviour to improve our offer and, if necessary, for criminal prosecution or prosecution of claims.

During the visit to the website, the following data in particular are collected:

The complete Internet address (URL), the browser used and its version, the operating system used, the Internet address, the website previously visited, host name and IP address of the device from which access is made, date and time.

As a rule, this data is automatically deleted after two weeks. With the exception of inspection by the authorities in the event of unlawful conduct, the data is not passed on.

The basis for processing personal data in the context of web hosting is the protection of legitimate interests (Art 6 para 1 lit f DSGVO), as professional hosting is necessary to ensure a user-friendly, secure presentation of the company on the Internet.

There is a contract on commissioned processing between us and the hosting provider in accordance with Art 28f DSGVO, which ensures compliance with data protection rules and guarantees data security.

We use Digital Ocean, a cloud infrastructure service, for our website. The service provider is the American company DigitalOcean LLC, 101 6th Ave, New York, NY, USA.

Digital Ocean also processes data in the USA, among other places. In the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with different risks for the lawfulness and security of the data processing.

Digital Ocean uses standard contractual clauses approved by the EU Commission (= Art. 46. para. 2 and 3 DSGVO) as the basis for data processing with recipients based in third party countries (in particular in the USA) or a transfer of data there. These clauses oblige Digital Ocean to comply with the EU level of data protection when processing relevant data outside the EU. These clauses are based on the EU Commission’s Implementing Decision (EU) 2021/914 on standard contractual clauses for the transfer of personal data to third party countries.

You can find out more about the data processed through the use of Digital Ocean in the privacy policy at https://www.digitalocean.com/legal/privacy-policy/.

If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses cookies that enable an analysis of your use of our website. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

We use the function User ID. With the help of User ID, we can assign a unique, permanent ID to one or more sessions (and the activities within these sessions) and analyse user behaviour across devices.

We use Google signals. This allows Google Analytics to collect additional information about users who have enabled personalised ads (interests and demographics) and to deliver ads to these users in cross-device remarketing campaigns.

We use the ‘anonymizeIP’ function (so-called IP masking): Due to the activation of IP anonymisation on this website, your IP address will be shortened by Google within member states of the European Union. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, the following data is collected, among other things:

  • The pages you visit, your “click path”;
  • Achievement of “website goals” (conversions, e.g. newsletter sign-ups, downloads, purchases);
  • Your user behaviour (for example, clicks, dwell time, bounce rates);
  • Your approximate location (region);
  • Your IP address (in shortened form);
  • Technical information about your browser and the end devices you use (e.g. language setting, screen resolution);
  • your internet service provider;
  • the referrer URL (via which website/ via which advertising medium you came to this website).

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as a processor. We have concluded an order processing agreement with Google for this purpose. Google LLC, based in California, USA, and, if applicable, US authorities can access the data stored by Google.

A transfer of data to the USA cannot be ruled out.

The data sent by us and linked to cookies are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by not giving your consent to the setting of the cookie or by downloading and installing a browser add-on to deactivate Google Analytics.

You can also prevent cookies from being stored by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may limit functionalities on this and other websites.

The legal basis for this data processing is your consent (Art 6 para 1 lit a DSGVO). You may withdraw your consent at any time with effect for the future by calling up the cookie settings and changing your selection there.

For more information on the terms of use of Google Analytics and data protection at Google, please visit Terms of Service | Google Analytics – Google and Privacy Policy – Privacy & Terms – Google.

We use functions of the provider Cookiebot on our website. The service provider is Cybot A/S, Havnegade 39, 1058 Copenhagen, DK. Among other things, Cookiebot enables us to provide you with a comprehensive, automatically generated, DSGVO-compliant cookie notice and to overview and control all cookies and tracking measures on our website. By using this service, personal data can be sent to Cookiebot or Cybot, stored and processed.

We use Cookiebot to provide you with a legally compliant, transparent notice of data processing and storage on our website. In addition, Cookiebot enables us to securely obtain your consent to data processing.

If you consent to the use of cookies, the following data will be transmitted to Cybot, stored and processed.

  • IP address (in anonymised form);
  • Date and time of your consent;
  • our website URL;
  • technical browser data;
  • encrypted, anonymous key;
  • the cookies you have allowed (as proof of consent).

Cybot states that it does not resell personal data. However, Cybot may share data with third parties or subcontractors to pursue its own operational interests. In addition, data is shared when legally required.

All data collected will be transferred, stored and forwarded exclusively within the European Union. All end user data will be deleted by Cookiebot according to your privacy policy after 12 months from registration (cookie consent) or immediately after cancellation of the Cookiebot service.

You have the right to access and delete your data at any time. You can prevent data processing by rejecting the use of cookies in the cookie notice. In addition, most browsers offer management options for cookies.

The processing of your personal data is based on your consent (Art 6 (1) (a) DSGVO) in the cookie notice or on the basis of a legitimate interest (Art 6 (1) (f) DSGVO), namely our interest in operating the website in compliance with the law, which is enabled by the use of the Cookiebot service in an efficient manner.

The privacy policy of Cookiebot can be found at Privacy Policy (cookiebot.com).

On our website, we use functions that allow you to share posts from our website directly on your social media channels. The service provider is the operator of the respective social network.

We use social sharing features to give you the opportunity to share our posts and to achieve our marketing objectives.

Introduction and overview

This privacy statement sets out, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, what personal data we process now or in the future as the controller and processors engaged by us. In addition, you will be informed about the rights to which you are entitled as a data subject.

 

Scope of application

This privacy policy applies to personal data processed by us in the course of operating this website, as well as data obtained by contacting us, and to all personal data processed by processors commissioned by us. Personal data is information within the meaning of Article 4(1) DSGVO that relates to an identified or identifiable person. The processing of personal data enables us to offer this website and the associated services.

 

Legal basis

Personal data may only be processed in a lawful manner. According to Art. 6 DSGVO, lawfulness exists if one of the legal bases for processing listed in Art. 6 (1) DSGVO is given. Personal data is therefore only processed by us if one of the following conditions is met:

  1. consent (Art 6 para 1 lit. a DSGVO): You have given us your consent to process your personal data for one or more specific purposes.
  2. contract (Art 6 para 1 lit. b DSGVO): We process your personal data in order to fulfil a contract concluded with you.
  3. legal obligation (Art 6 para 1 lit. c DSGVO): We process your personal data because this is necessary to fulfil legal obligations.
  4. legitimate interests (Art 6 para 1 lit. f DSGVO): We process your personal data because this is necessary to protect the legitimate interests of us or third parties and these outweigh your interests and your fundamental rights and freedoms.
  5. other legal grounds (Art 6 para 1 lit. d & e DSGVO): Processing is necessary to protect vital interests or to fulfil a task in the public interest or is carried out in the exercise of official authority.

In addition to the EU Regulation, the Data Protection Act (DSG) is applicable in Austria.

If other regional or national laws apply, we will inform you about them in the following sections.

 

Contact details of the responsible person

Should you have any questions regarding data protection, you will find the contact details of the responsible person or office below:

Steyr Automotive GmbH

Schönauerstraße 5, 4400 Steyr, Austria

Authorised to represent: DI (FH) Johann Ecker, Mag. Florian Mayrhofer

E-mail: info@steyr-automotive.com

Phone: +43 7252 585-0

Imprint: https://www.steyr-automotive.at/impressum

 

Storage period

Personal data is only stored for the period of time that is absolutely necessary for the provision of our services. If the reason for data processing ceases to apply, we delete the personal data concerned. Exceptions to this are legal obligations to store data for a longer period after the original basis for the data processing has ceased to exist.

If you exercise your right to request the deletion of data, we will comply with this as quickly as possible and delete your personal data, unless this is covered by an obligation to store it.

We provide information on the actual duration of data processing in the relevant section.

 

Rights according to the DSGVO

Pursuant to Art 13 (2) DSGVO, we inform you of the rights to which you are entitled vis-à-vis us:

  • You have a right to information (Art 15 DSGVO) as to whether we process personal data about you. If yes, you have the right to be informed about this data and about the following information:
    • the purposes of processing;
    • the categories of personal data processed;
    • the recipients or categories of recipients to whom your personal data are disclosed, in particular in the case of recipients in third party countries
    • the period for which the personal data are to be stored
    • the existence of a right to rectification or erasure of their personal data and the right to restrict and object to processing
    • the existence of a right of appeal to the data protection authority
    • the origin of the data, if it has not been collected from you
    • whether profiling (automatic data evaluation to create a profile about you) is taking place;
  • You have the right to rectification (Art 16 DSGVO) of inaccurate personal data concerning you;
  • You have the right to request the deletion (Art 17 DSGVO) of personal data concerning you;
  • You have the right to restriction of processing (Art 18 DSGVO) of the personal data concerning you;
  • You have the right to data portability (Art 20 DSGVO). This is the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and to forward it to another controller;
  • You have a right to object (Art 21 DSGVO). This includes the following rights:
    • If the processing is based on public interests, in the exercise of official authority (Art 6(1)(e) DSGVO) or on the basis of a legitimate interest (Art 6(1)(f) DSGVO), we will stop the processing unless there are legitimate grounds which override your interests, rights and freedoms.
    • If your personal data is processed for direct marketing or profiling, you may object at any time and we shall stop the processing.

If you are of the opinion that the processing of your data violates data protection law or your data protection rights are violated in any other way, you can complain to the supervisory authority. For Austria, this is the data protection authority, whose website can be found at https://www.dsb.gv.at/.

 

Data Protection Authority

Head: Dr. Andrea Jelinek, M.D.

Address: Barichgasse 40-42, 1030 Vienna

Telephone number: +43 1 52 152-0

E-mail address: dsb@dsb.gv.at

Website: https://www.dsb.gv.at/

 

Data transfer to third party countries

The transfer of your personal data to countries outside the EU (third party countries) only takes place on the basis of your consent, legal obligations or contractual necessities, but in any case only to the extent that this is permitted. The processing of your personal data in third party countries may result in personal data being processed and stored in unexpected ways.

It is expressly pointed out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. Data processing by US services (such as Google Analytics) may potentially result in personal data not being processed and stored anonymously. In addition, there is the possibility that US government authorities may access individual personal data. It is also possible that personal data collected may be linked to data from other services of the same provider, if you have a corresponding user account. Where possible, we use server locations within the EU.

If data is transferred to third party countries, we will inform you about this at the relevant points in this data protection declaration.

 

Data processing security

To ensure the protection of personal data, we have implemented technical and organisational measures. As far as possible, personal data is encrypted or pseudonymised. This ensures that personal data is processed in a way that meets the requirements of the DSGVO and protects your rights.

 

Communication

When you contact us, personal data may be processed. The personal data processed in this way will be processed for the purpose of dealing with your request and will only be stored for as long as is necessary for processing or as required by law.

 

Data subjects

Data subjects are those persons who contact us by whatever means.

 

Telephone

If you contact us by telephone, the call data will be stored on the respective terminal device and with the telecommunications provider. Further data, such as your name and telephone number, may be sent and stored in the course of processing your request by e-mail.

The data will be deleted as soon as your request has been dealt with and there are no legal regulations to the contrary.

 

E-mail

If you contact us by e-mail, the corresponding data (e-mail address, name etc) will be stored on the respective end device and the e-mail server.

The data will be deleted as soon as your request has been dealt with and there are no legal regulations to the contrary.

 

Online forms

If you contact us using the online form, data is stored on the web server, forwarded to an e-mail address and stored accordingly on end devices and the e-mail server.

The data will be deleted as soon as your request has been dealt with and there are no legal regulations to the contrary.

 

Legal basis

The data is processed on the basis of your consent (Art. 6 para. 1 lit. a DSGVO) to process and store your data for the purpose of processing your request, to fulfil a contract concluded with you (Art. 6 para. 1 lit. b DSGVO), on the basis of our legitimate interest (Art. 6 para. 1 lit. f DSGVO) to be able to process customer requests professionally, or several of these legal bases.

 

Cookies

This website uses cookies. These are small text files that are placed and stored on a computer by the internet browser. These cookies store personal data, such as language settings or which browser is used. When you visit our website again, the cookies are sent back to our website.

 

Types of cookies

There are 4 categories of cookies that can be distinguished:

 

Necessary cookies

Such cookies are necessary to provide the functions of our website as intended. For example, settings are saved so that they are not lost each time the website is reloaded or changed.

Performance cookies

Such cookies collect information about user behaviour, whether error messages are displayed, but also loading times and the behaviour of the website is measured with performance cookies.

Functional cookies

Such cookies are not absolutely necessary for the operation of the website, but improve the user experience. For example, form data can be saved so that it does not have to be entered again.

Advertising or targeting cookies

Such cookies make it possible to display individualised advertising to the user.

 

Right of objection

You decide yourself on the use of cookies and the extent to which they are used. It is possible to delete existing cookies at any time. You can find this option in the settings of your internet browser. You also have the option of deactivating or restricting the use of cookies by our website.

If you would like to find out which cookies are stored on your device, you can also find this information in the settings of your browser.

 

Legal basis

We process personal data through cookies, insofar as they are absolutely necessary cookies, on the basis of our legitimate interest (Art 6 para 1 lit f DSGVO). We only process cookies that go beyond this on the basis of consent (Art 6 para 1 lit a DSGVO).

In the following sections of this data protection declaration, you will be informed in more detail about the use of cookies, insofar as the software used uses cookies.

 

Web hosting

When you visit this website, information, including personal data, is automatically collected and stored. This data processing is subject to the principles of the DSGVO such as data economy and purpose limitation and lawfulness.

This website and all sub-pages are provided by a web hosting provider to ensure reliable and error-free operation. When establishing a connection and transferring data between your terminal device and the web server, personal data may be processed in order to enable proper operation.

 

The purposes of data processing

The purposes of data processing are:

  1. hosting the website and securing its operation;
  2. maintenance of operational and IT security;
  3. anonymised evaluation of access behaviour to improve our offer and, if necessary, for criminal prosecution or prosecution of claims.

 

Scope of data processing

During a visit to the website, the following data in particular is collected:

The complete Internet address (URL), the browser used and its version, the operating system used, the Internet address, the website previously visited, host name and IP address of the device from which access is made, date and time.

 

Storage period

As a rule, this data is automatically deleted after two weeks. With the exception of inspection by the authorities in the event of unlawful conduct, the data will not be passed on to third parties.

 

Legal basis

The basis for the processing of personal data in the context of web hosting is the protection of legitimate interests (Art 6 para 1 lit f DSGVO), as professional hosting is necessary to ensure a user-friendly, secure presentation of the company on the Internet.

There is a contract on commissioned processing between us and the hosting provider in accordance with Art 28f DSGVO, which ensures compliance with data protection rules and guarantees data security.

 

Digital Ocean

We use Digital Ocean, a cloud infrastructure service, for our website. The service provider is the American company DigitalOcean LLC, 101 6th Ave, New York, NY, USA.

Digital Ocean also processes data in the USA, among other places. In the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with different risks for the lawfulness and security of the data processing.

Digital Ocean uses standard contractual clauses approved by the EU Commission (= Art. 46. para. 2 and 3 DSGVO) as the basis for data processing with recipients based in third party countries (in particular in the USA) or a transfer of data there. These clauses oblige Digital Ocean to comply with the EU level of data protection when processing relevant data outside the EU. These clauses are based on the EU Commission’s Implementing Decision (EU) 2021/914 on standard contractual clauses for the transfer of personal data to third party countries.

You can find out more about the data processed through the use of Digital Ocean in the privacy policy at https://www.digitalocean.com/legal/privacy-policy/.

 

Google Analytics

Where you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

 

Scope of processing

Google Analytics uses cookies that enable an analysis of your use of our website. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

We use the function User ID. With the help of User ID, we can assign a unique, permanent ID to one or more sessions (and the activities within these sessions) and analyse user behaviour across devices.

We use Google signals. This allows Google Analytics to collect additional information about users who have enabled personalised ads (interests and demographics) and to deliver ads to these users in cross-device remarketing campaigns.

We use the ‘anonymizeIP’ function (so-called IP masking): Due to the activation of IP anonymisation on this website, your IP address will be shortened by Google within member states of the European Union. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, the following data is collected, among other things:

  • The pages you visit, your “click path”;
  • Achievement of “website goals” (conversions, e.g. newsletter sign-ups, downloads, purchases);
  • Your user behaviour (for example, clicks, dwell time, bounce rates);
  • Your approximate location (region);
  • Your IP address (in shortened form);
  • Technical information about your browser and the end devices you use (e.g. language setting, screen resolution);
  • your internet service provider;
  • the referrer URL (via which website/ via which advertising medium you came to this website).

 

Purposes of the processing

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.

 

Recipient

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as a processor. We have concluded an order processing agreement with Google for this purpose. Google LLC, based in California, USA, and, if applicable, US authorities may access the data stored by Google.

 

Transmission to third party countries

A transfer of data to the USA cannot be ruled out.

 

Storage period

The data sent by us and linked to cookies are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by not giving your consent to the setting of the cookie or by downloading and installing a browser add-on to deactivate Google Analytics.

You can also prevent cookies from being stored by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may limit functionalities on this and other websites.

 

Legal basis and possibility of revocation

The legal basis for this data processing is your consent (Art 6 para 1 lit a DSGVO). You may withdraw your consent at any time with effect for the future by calling up the cookie settings and changing your selection there.

For more information on the terms of use of Google Analytics and data protection at Google, please visit Terms of Service | Google Analytics – Google and Privacy Policy – Privacy & Terms – Google

 

Cookiebot

We use functions of the provider Cookiebot on our website. The service provider is Cybot A/S, Havnegade 39, 1058 Copenhagen, DK. Among other things, Cookiebot enables us to provide you with a comprehensive, automatically generated, DSGVO-compliant cookie notice and to overview and control all cookies and tracking measures on our website. By using this service, personal data can be sent to Cookiebot or Cybot, stored and processed.

 

Purpose of data processing

We use Cookiebot to provide you with a legally compliant, transparent notice of data processing and storage on our website. In addition, Cookiebot enables us to securely obtain your consent to data processing.

 

Scope of processing

If you consent to the use of cookies, the following data will be transferred to Cybot, stored and processed.

  • IP address (in anonymised form);
  • Date and time of your consent;
  • our website URL;
  • technical browser data;
  • encrypted, anonymous key;
  • the cookies you have allowed (as proof of consent).

Cybot states that it does not resell personal data. However, Cybot may share data with third parties or subcontractors to pursue its own operational interests. In addition, data is shared when legally required.

 

Storage period

All data collected will be transferred, stored and forwarded exclusively within the European Union. All end user data will be deleted by Cookiebot according to your privacy policy after 12 months from registration (cookie consent) or immediately after cancellation of the Cookiebot service.

 

Possibility of revocation

You have the right to access and delete your data at any time. You can prevent data processing by rejecting the use of cookies in the cookie notice. In addition, most browsers offer management options for cookies.

 

Rechtsgrundlage

The processing of your personal data is based on your consent (Art 6 (1) (a) DSGVO) in the cookie notice or on the basis of a legitimate interest (Art 6 (1) (f) DSGVO), namely our interest in operating the website in compliance with the law, which is enabled by the use of the Cookiebot service in an efficient manner.

The privacy policy of Cookiebot can be found at Privacy Policy (cookiebot.com).

 

Social sharing functions

On our website, we use functions that allow you to share posts from our website directly on your social media channels. The service provider is the operator of the respective social network.

 

Purposes of using the social sharing features

We use social sharing features to enable you to share our posts and to achieve our marketing objectives.

 

Scope and duration of data processing

The social sharing functions collect personal data such as, in particular, IP addresses, browser and terminal device information, date and time at which the function is used and Internet addresses.

This data is stored in cookies and can be linked to your profile.

All data collected via a social sharing function is stored on the servers of the providers. Therefore, only they have access to the data and can provide you with information or make changes.

If possible, you should address requests for information and the assertion of other user rights directly to the operators of the social medium, as only they have access to all user data and can provide the requested information or take action.

You can obtain further information about the data processing in the respective social medium, its duration, as well as your option to object to the processing of your personal data (opt-out) via the links listed below, which each refer to the information of the operators of the respective social network.

You also have the right and the possibility to revoke your consent to the use of cookies or third-party providers such as embedded social media elements at any time. This works either via our cookie management tool or via other opt-out functions. For example, you can also prevent data collection through cookies by managing, deactivating or deleting cookies in your browser.

Since cookies may be used with social media tools, we also recommend that you read our general data protection declaration on cookies. To find out exactly what data is stored and processed by you, you should read the privacy statements of the respective tools.

The social sharing functions process personal data only after and on the basis of your consent (Art 6 para 1 lit a DSGVO). If you have given your consent for the data processing, the personal data will also be processed on the basis of a legitimate interest (Art 6 para 1 lit f DSGVO). This is the interest in providing social sharing services in a user-friendly and secure manner.

We may embed YouTube videos on our website to present videos directly to you on our website. The service provider is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all data processing in Europe. If you call up a page on our website on which a YouTube video is embedded, a connection is automatically established with the servers of YouTube or Google. This also involves the transfer of personal data.

In order to offer you the best possible user experience, we use the option of presenting videos directly from Youtube on our site.

YouTube sets at least one cookie that stores your IP address and our internet address. If you are logged into your Google account, YouTube may be able to associate your interactions on our website with your profile through cookies. In particular, data such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution, your ISP, contact details, any ratings, sharing of content via social media or adding to your favourites on YouTube are processed.

YouTube stores your data on servers located both in the EU and in third party countries.

Google stores the collected data for different lengths of time. The exact periods can be found in Google’s privacy policy, here: Privacy Policy – Privacy & Terms – Google.

As the data is processed and stored by Youtube or Google, we recommend that you address requests for information and the assertion of other user rights directly to the operators, if possible, as only they have access to all user data and can provide the requested information or take measures. Of course, you have all the rights provided for by the DSGVO vis-à-vis them.

If you have consented to your data being processed and stored by embedded YouTube elements, this consent is deemed to be the legal basis for data processing (Art. 6 para. 1 lit. a DSGVO). In principle, your data will also be stored and processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f DSGVO) in fast and good communication with you or other customers and business partners.

YouTube also processes data in the USA, among other places. According to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks to the lawfulness and security of data processing.

As a basis for data processing with recipients located in third party countries (in particular in the USA) or a data transfer there, YouTube uses standard contractual clauses approved by the EU Commission (= Art. 46. para. 2 and 3 DSGVO). These clauses oblige YouTube to comply with the EU level of data protection when processing relevant data outside the EU. These clauses are based on an implementing decision of the EU Commission.

We use Google Maps from Google Inc. on our website. Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services in Europe. Google Maps allows us to better show you locations. By using Google Maps, data is transmitted to Google and stored on Google servers.

By integrating Google Maps, we can provide you with the most important information about our locations and provide you with directions.

In order for Google Maps to fully provide their service, the company must process and store data from you. This includes, among other things, the search terms entered, your IP address, location data and addresses entered. However, this data storage does not happen on Google Maps websites by us. Since we have integrated Google Maps into our website, Google sets at least one cookie in your browser. This cookie stores data about your user behaviour. Google uses this data primarily to optimise its own services and to provide you with individual, personalised advertising.

Google Maps stores your data on servers located both in the EU and in third party countries.

Google stores the collected data for different lengths of time. The exact periods can be found in Google’s privacy policy, here: Privacy Policy – Privacy & Terms – Google.

As the data is processed and stored by Google, we recommend that, where possible, requests for information and the assertion of other user rights should be addressed directly to the operators, as only they have access to all user data and can provide the requested information or take action. Of course, you have all the rights provided for by the DSGVO vis-à-vis them.

If you have consented to your data being processed and stored by integrated Google Maps elements, this consent is deemed to be the legal basis for data processing (Art. 6 para. 1 lit. a DSGVO). In principle, your data will also be stored and processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f DSGVO) in fast and good communication with you or other customers and business partners.

Google also processes data in the USA, among other places. According to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be associated with various risks for the legality and security of the data processing.

As a basis for data processing with recipients located in third party countries (in particular in the USA) or a data transfer there, YouTube uses standard contractual clauses approved by the EU Commission (= Art. 46. para. 2 and 3 DSGVO). These clauses oblige Google to comply with the EU level of data protection when processing relevant data outside the EU. These clauses are based on an implementing decision of the EU Commission.