In order to fulfill these above listed purposes, it may be necessary to disclose your personal data to following third parties:
|Recipient||Purpose||Legal Basis for transfer||Location of data processing||Legal Basis for data transfer to a third country|
|Facebook Ireland Limited||(re)identification of website users for placing personalized advertisements||Prevailing legitimate interests (Art 6 para 1 (f) GDPR): Analysis of user behavior to improve our website||EU (Ireland) as well as transfers the group companies||Standard data protection clauses (Art 46 para 2 (c) GDPR) together with supplementary measures|
|Google LLC||Integration of Google Maps for display and route planning to our company headquarters||Prevailing legitimate interests (Art 6 para 1 (f) GDPR): Using professional IT service providers for the presentation of our company headquarters and offering the possibility of route planning to our company headquarters||USA||Standard data protection clauses (Art 46 para 2 (c) GDPR) together with supplementary measures|
|Google LLC||ReCaptcha: Analysis of user behavior on our website||Prevailing legitimate interests (Art 6 para 1 (f) GDPR): Filtering out requests from botst o prevent misuse of our website||USA||Standard data protection clauses (Art 46 para 2 (c) GDPR) together with supplementary measures n|
|Host Europe GmbH||Hosting the website||Prevailing legitimate interests (Art 6 para 1 (f) GDPR): use of professional IT-infrastructure||EU (Luxembourg)||No transfer to third country|
|Matomo||Analytics||Prevailing legitimate interests (Art 6 para 1 (f) GDPR): Analysis of user behavior to improve our website||EU (Germany)||No transfer to third countries|
|Polylang (WP SYNTEX)||Multilingualism||Prevailing legitimate interests (Art 6 para 1 (f) GDPR): Use of professional IT infrastructure for language selection of the website system||EU (France)||No transfer to third countries|
|XQueue GmbH||E-Mail-dispatch||Prevailing legitimate interests (Art 6 para 1 (f) GDPR): Using professional E-Mail-infrastructure||EU (Germany)||No transfer to third countries|
In the event of a legal obligation, we transmit personal data to public bodies and institutions (e.g. law enforcement agencies, courts).
We store and process your personal data only as long as this is necessary for the fulfillment of the respective processing purpose.
Personal data in connection with the use of the contact form are stored for a period of seven years due to company law requirements (§ 212 UGB). In individual cases, for example in the case of pending official or court proceedings, this storage period may also be longer than seven years. In the event of foreseeable legal disputes, your personal data may also be stored for longer, at the longest until the expiry of the relevant limitation periods of the underlying legal claims.
When using our website, cookies are set to temporarily store certain information. Some cookies are (technically) necessary for the functionality of our website and are set in any case. Other cookies, on the other hand, are not necessary for the functionality of the website, but are used, for example, to increase user-friendliness or to analyze user behavior.
Details about the individual cookies can be found via the link “Individual privacy settings” in our cookie banner.
We process your personal data
In the event that your application is rejected, we will store your application documents for a period of seven months from the date of notification of the rejection (statutory period of six months pursuant to §§ 15 para. 1, 29 para. 1 Equal Treatment Act plus one month).
If you give us your consent to keep a record of your application documents, we will store them for the processing period covered by the consent or at the latest until you withdraw your consent.
As a data subject, you have the rights described below. If we have reasonable doubt about the identity of your person in the context of exercising one of the data subject rights, we may request additional information from you that is necessary to confirm the identity of your person.
For those rights that are asserted by means of a request, the time limit to comply with these requests is one month by law.
Right of access – Art 15 GDPR
You have the right to obtain information about the personal data we process concerning you at any time. The right to obtain information also includes the right to receive a copy of the data, provided that this does not affect the rights and freedoms of other persons. For the creation of such a data copy, we may charge you a reasonable fee based on the administrative costs.
Right to rectification – Art 16 GDPR
You have the right to obtain the rectification of inaccurate personal data concerning yourself and to have incomplete personal data completed.
Right to erasure – Art 17 GDPR
You have the right to obtain the erasure of personal data concerning you. However, this right to erasure does not apply to the extent that processing is necessary
Right to restriction of processing – Art 18 GDPR
You have the right to obtain the restriction of processing where at least one of the following applies:
If you have exercised your right to restriction of processing, we may process this personal data – with the exception of the storage of such data – only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.
Right to object – Art 21 GDPR
You have the right to object to processing that is carried out on the basis of an overriding legitimate interest on our part or on the part of a third party (pursuant to Art 6 para 1 (f) GDPR). In the event of an objection, we will no longer process your data unless the processing serves the establishment, exercise or defense of legal claims or we demonstrate compelling legitimate grounds for the processing that override your interests.
An objection to the processing of personal data for direct marketing purposes is possible at any time and will result in us no longer being allowed to process your data for this purpose in any case.
Right to data portability – Art 20 GDPR
In principle, you also have the right to receive the data a structured, common and machine-readable format and to transfer this data to another controller. However, the right to data portability only exists if the processing is based on your consent or on a contract and the processing is carried out with the help of automated processes.
Right to lodge a complaint with a supervisory authority – Art 77 GDPR
If you believe that the processing of your data is unlawful and in breach of the GDPR, you have the right to lodge a complaint with the competent data protection authority. The jurisdiction depends on your place of residence or place of work.
You can reach the Austrian supervisory authority via: