Adatvédelmi szabályzat

2.1. Data types and data categories

We collect and use your data only in so far as this is required for the provision of a functioning website as well as our content and services. We therefore only process the data which you, as the user of the website and/or as customer / potential customer, provide us with, for example in an enquiry, request or application or for the completion of an agreement.

The below data types may be processed by us or one of our services:

• Master data (e.g., name and address)
• Content data (e.g., text entries, photographs and videos)
• Contact data (e.g., e-mail, telephone numbers)
• Data associated with an enquiry or request
• Meta/communication data (e.g., device information, IP address)
• Usage data (e.g., viewed websites, content interest, viewing times)
• Contract data (e.g., object of agreement, duration, customer category)
• Application data (e.g., curriculum vitae, covering letter, references, contact details etc.)
   

Furthermore, we process the above-named data types of the below-named person categories:

• Customers
• Potential customers
• Users (e.g., website visitors, online service users)
• Business and contract partners
• Communication partners
• Suppliers
• Applicants, prospective trainees
• Contest and competition participants   
  
   

2.2. Purpose of processing

We process your data for the following purposes:

• The provision of our website
• The continuous optimisation and development of our website
• The fulfilment of contractual services (contract agreement) and customer service
• Replying to / processing of customer queries
• The identification, prevention and investigation of attacks on our website
• The compilation of user profiles (profiles with user-related information)
• Reach measurement (e.g., viewing statistics, identification of returning visitors)
• The completion of the electronic application process
   

There is no obligation to provide the requested data. However, failure to do so will mean that certain processes e.g., application processes, will be delayed or not possible. If data is required by law, this will be indicated separately.
 

2.3. Legal basis

The legal basis of data processing is:

• Your consent: if we request your consent for processing, Article 6 Para. 1 lit a GDPR serves as the legal basis.
• Contract fulfilment and or replying to pre-contractual enquiries (in accordance with Article 6 Para. 1 lit b GDPR). We require your data so that we can fulfil your enquiry as best as possible or contact you.
• The fulfilment of a legal obligation of our company (in accordance with Article 6 Para. 1 lit c GDPR) whereby we forward your data to the authorities for example the tax office, health insurance companies or other public bodies.
• The protection of a legitimate interest of our company (in accordance with Article 6 Para. 1 lit f GDPR). This includes marketing and advertising measures in general. As a customer of our services, we would like to keep you informed with news and offers involving our services and activities which is tailored to your needs. These activities are subject to a weighing up of interests and your basic rights and freedoms will not be affected.
   

2.4. Data deletion and storage duration

Your data is stored only for as long as is required to fulfil the above-named purposes.

Your data is, in all cases, stored for as long as is legally required or if legal claims exist which have not expired yet which require the data for their assertion or refusal.

4.1. Purpose of processing

We process your data for the provision of our website and for this purpose we process your IP address, which is necessary for transmitting the content and functions of our website to your browser or end device.

For the secure and efficient hosting of our website we employ the services of a web hosting company whose servers (servers managed by them) may be used to access our online offer. For these purposes we may also use infrastructure and platform services, computing capacity, storage space and data base services as well as security services and technical maintenance services.

Log files

Every time our website is viewed our system automatically collects data and information of the computer system of the viewer’s computer (server log files). Server log files may be used for security purposes e.g., to prevent a server being overloaded (in the case of improper attacks, so-called DDoS attacks) and to ensure server utilization and stability.

Hereby the following data is collected:

• Information on browser type and the version used
• Your operating system
• Your internet service provider
• Your IP address
• Date and time website was viewed
• Websites from which your system accessed our website
• Websites viewed by your system via our website         
   

Plug-ins

Our online offer incorporates functions and content elements obtained from the servers of the respective providers (hereinafter referred to as “third party providers”). This may include e.g., graphics, videos, data transmission or city maps (hereinafter jointly referred to as “content”).

This incorporation requires the third parties of this content to process your IP address as they are otherwise unable to send the content to your browser without the IP address. Your IP address is therefore required for the depiction of this content or functions. We strive to use only such content if the providers of this only use the IP address for the provision of their content. Third party providers may also use so-called pixel tags (invisible graphics also known as “web beacons”) for statistical or marketing purposes. The pixel tags enable the evaluation of information such as visitor traffic on the pages of this website. The anonymised information may also be stored in cookies on your device and include technical information on the browser and operating system, linked websites, time the website was viewed as well as further details on the use of our online offer and be associated with such information from other sources.

We use the following services, among others:

•    Leaflet/OpenStreetMap (OpenStreetMap Foundation (OSMF) https://www.openstreetmap.de). We incorporate the “Leaflet” map of the “OpenStreetMap“ service, which is provided on the basis of the Open Data Commons Open Database License (ODbL) by the OpenStreetMap Foundation (OSMF). OpenStreetMap only uses your data for the depiction of the map functions and for the caching of the chosen settings. This data may include your IP addresses and location data although this will not be collected without their permission (usually within the settings of your mobile end devices). The privacy policy is available on: https://www.fossgis.de/datenschutzerkl%C3%A4rung/.

•    YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (https://www.youtube.com)). The website includes videos available on YouTube. The privacy policy is available on: https://policies.google.com/privacy.

4.2. Legal basis

The use of the above-named services as well as the plug-ins is based on Article 6 Para. 1 lit f GDPR. We have a legitimate interest in our website and online offer being presented as reliably as possible. If a corresponding permission has been requested, processing is based on Article 6 Para. 1 lit a GDPR.         

4.3. Duration of storage / refusal and removal option

Data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website this is no longer necessary once the session has ended. If data is stored in log-in files this is deleted after 30 days. Data is not stored beyond this purpose. In this case, your IP address is deleted.

The collection of data for the provision of the website and the storage of the data in the log files is essential for the operation of the website. In this case you, as user, are therefore unable to object to this.

6.1. Purpose of processing

Web analysis (also described as “reach measurement”) evaluates website visitor flow and can include information relating to user behaviour and interests and demographics e.g., age or gender which is recorded as anonymised values. With the aid of reach analysis, we can e.g., identify at what time our website or its functions and content are most frequently used or re-used. We can also identify areas in need of optimisation. This helps us to continuously improve our website and its user-friendliness.

Alongside web analysis we may also use test procedures e.g., for the testing and optimisation of various versions of our website or its components.

Unless stated otherwise below, profiles, summarised data on a usage procedure, may be created for this purpose and information stored in a browser or end device and read out from this. The information collected may, for example, include visited websites and elements used here as well as technical details such as the browser and computer system used and details of usage times. If you have given us, or a service provider used by us, permission for the collection of your location data, your location data will also be processed.

Your IP address will be saved whereby we use an IP masking procedure (anonymisation by shortening the IP address) to protect your privacy. In general, web analysis, A/B testing and optimisation does not store any of your person-related data (e.g., e-mail address or name) but, instead, pseudonyms. This means that we as well as the providers of the software used do not know your actual identity, only details stored in profiles for the purposes of the respective procedures.

We use the following analysis tool:

Matomo (InnoCraft, 7 Waterloo Quay PO625, 6140 Wellington, New Zealand (https://matomo.org/)). Matomo involves open-source software. The use of Matomo creates cookies which are stored on your end device. The data collected using Matomo is only processed by us and not shared with third parties. The Matomo privacy policy is available here: https://matomo.org/privacy-policy/?footer. Hereby the software only operates on our website’s servers and your data is only stored here. The data is not forwarded to third parties (Matomo).

6.2. Legal basis

The legal basis for the processing of your data is your permission in accordance with Article 6 Para. 1 lit a GDPR.

6.3. Duration of storage

The data is deleted as soon as it is no longer required for our documentation. The refusal options for the respective services are stated above.  

Matomo’s cookies are stored for a maximum of 13 months (https://matomo.org/faq/general/faq_146/).

8.1. Purpose of processing

Our website (https://www.rondo-ganahl.com/de) includes an online application form which can be used for the application process. You may also use our trainee website (https://lehre.rondo-ganahl.com/de) to apply for a traineeship with our company. For this purpose, if you apply you will send us your data and documents using the designated forms. The following data is collected:

• Work-related details (preferred location, area of work and working hours)
• (Choice of trainee position)
• Personal details (e.g., name, address, e-mail, telephone number, date of birth, place of birth, nationality, gender, marital status, whether you are on military or community service, whether you have children or not etc)
• Driving license details
• Form for sending us a message (optional)
• Application documents (CV, covering letter, references)
   

By sending your application, the following data is also stored:

• Your IP address
• Date and time the page was viewed
• Identification of mobile device
• Web browser data (name, version, settings)
• Operating system of your PC or notebook

The processing of the application data serves the application process, the use of the received applications also in the future in the case of potential employment and HR planning and HR management purposes including finding suitable employees for vacancies as well as the planning and management of abilities of potential employees.

8.2. Legal basis

By sending your application your permission is requested in advance in accordance with Article 6 Para. 1 lit a GDPR with reference to this privacy policy. Your permission for the processing of your data for the keeping of records/evidence is requested in a separate process (Article 6 Para. 1 lit a GDPR).

We also process the above-named data based on our legitimate interest in accordance with Article 6 Para. 1 lit f GDPR which involves being able to guarantee an efficient application process and optimum recruitment for vacancies.

8.3. Duration of storage

The data is deleted as soon as it is no longer required for the purpose for which it was collected, in this case as soon as the application process is completed and at the latest after 7 months unless you have given us permission to keep your data for longer (for future reference).

If your data is processed you are an affected person in accordance with the GDPR and have the following rights with us as the responsible party:

Right to information

You have the right to request confirmation on whether your data has been processed and information about the data as well as further information on and a copy of the data in accordance with legal provisions.

Right to rectification

In accordance with legal provisions, you have the right to request completion or rectification of your data.

Right to erasure and restriction of processing

In accordance with legal provisions, you have the right to request the erasure of your personal data and/or the restricted processing of your data in accordance with the statutory provisions.

Right to data portability

You have the right in accordance with legal provisions to receive your personal data in a structured, commonly used, and machine-readable format or request the transmission of this to another controller.

Right to object

You have the right for reasons relating to your own personal situation, to object to the processing of your data at any time in accordance with Article 6 Para. 1 lit e or f GDPR. This also applies to a profiling based on these terms. If your personal data is being processed for direct marketing you have the right to object to this processing at any time. This also applies to the profiling in so far as this is associated with such direct marketing.

Right of withdrawal of consent

You have the right to withdraw your consent at any time (with effect for the future). The withdrawal of your consent does not affect the legitimacy of the processing based on your consent which has occurred up until the time of withdrawal of this consent.

Right to complain to the regulating authority

Irrespective of a further judicial remedy, you have the right to complain to the regulating authority if you think that the processing of your data is not compliant with the GDPR. The relevant regulating authority is the Data Protection Authority, Barichgasse 40 - 42, 1030 Vienna, Tel: +43/1-52 152-0, E-Mail: dsb@dsb.gv.at.

The data protection authority will inform you on the status and outcome of your complaint including the possibility of judicial remedy.