Privacy Policy of the Website of Österreichische Beteiligungs AG

This Privacy Policy describes how Österreichische Beteiligungs AG, Kolingasse 14-16, 1090 Vienna (“we” or “us”), as the responsible party under data protection law, processes your personal data (i) as a visitor to this website (see point I), (ii) as a business contact (see point II) or (iii) as an applicant. For further information on your rights and our contact details, please see point V.2.

I. Data generated with your visit to our website

1. Which data we process about you

In the course of your visit to this website, we collect the following categories of personal data:

• IP address, date and time of the request, time zone difference to GMT, content of the request (specific page), access status/HTTP status code, amount of data transferred, requesting website, operating system and interface, browser language and version software
• Fulfillment of a legal obligation pursuant to Art. 6 (1) lit. c DSGVO;
• Technical data for analysis tools;
• Name and version of your web browser;
• Data which you enter in the contact form;
• E-mail address (if you sign up for the newsletter).

There is no obligation to provide us with this personal data. However, you will not be able to use all the functions of this website if you do not provide us with this personal data.

• Legal basis: legitimate interest (Art 6 para 1 lit f DSGVO), § 96 para 3 TKG 2003.

2. Contact form

After sending the contact form, the personal data entered by you will be processed by us for the purpose of processing your request. There is no obligation to provide personal data. The only consequence of not providing it is that you do not transmit your request and we cannot process it. There will be further processing of the data, which is compatible with the original purpose of processing, on the same legal basis for the purpose of direct marketing in forms not subject to consent, such as the addressed postal dispatch of advertising, until objection. In this case, the data will be transferred to the mailing service provider. You have the right to object to the use of your personal data for the purpose of direct advertising at any time by written notification. In the event of an objection, your personal data will no longer be processed for the purpose of direct advertising.

•  Legal basis: consent (Art 6 para 1 lit a DSGVO), fulfillment of a contract, necessary for the implementation of pre-contractual measures (Art 6 para 1 lit b DSGVO), legitimate interest (Art 6 para 1 lit f DSGVO), § 96 para 3 TKG 2003.

3. Newsletter

With our newsletter we inform you about us and our offers. Please send us a short email to the email address provided on the website if you would like to receive the newsletter. We require a valid e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address or that the owner agrees to receive the newsletter. Further data will not be collected. This data is only used for sending the newsletter and will not be passed on to third parties. With the registration for the newsletter, we store your IP address and the date of registration. This storage serves solely as evidence in the event that a third party misuses an e-mail address and registers to receive the newsletter without the knowledge of the authorized person. You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time. The revocation can be made via a link in the newsletters themselves, or by sending a message to the contact options specified in point V.2.

• Legal basis: consent (Art 6 para 1 lit a DSGVO), § 107 TKG 2003.

4. analysis tools / cookies

This website uses cookies. Cookies make websites more user-friendly and efficient for the user. A cookie is a small text file that is used to store information. When a website is visited, the website may place a cookie on the website visitor’s computer. If the user visits the website again later, the website can read the data from the previously stored cookie and thus determine, for example, whether the user has visited the website before and which areas of the website the user was particularly interested in. More information about cookies can be found on Wikipedia in the article HTTP cookie.

Changing the cookie settings

How the web browser handles cookies, which cookies are allowed or rejected, can be defined by the user in the web browser settings. Where exactly these settings are located depends on the respective web browser. Detailed information can be accessed via the help function of the respective web browser. If the use of cookies is restricted, not all functions of this website may be fully usable.

Cookies on our website

You can adjust your personal cookie settings here:

[borlabs-cookie type=”btn-cookie-preference” title=”Privacy”/]

To improve the functionality of our website, we use the following tools; only anonymized IP addresses are used for this purpose:

 

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”).

We use in the analysis of user behavior to optimize both our website and our advertising. We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. A transfer of the collected information to a third country without a comparable level of security cannot be ruled out. With your expressed consent to the processing of cookies, you also agree to a possible processing of your data in the USA.

The information may also be passed on to contractual partners of Google.  Our service provider has concluded an order data processing contract with Google.

For detailed information on how Google Analytics handles user data, please refer to Google’s privacy policy.

Google Fonts

This website uses external fonts, so-called “Google Fonts”. These web fonts are integrated by means of a server call, which is regularly a Google server in the USA.

• Purpose: Cross-platform uniform presentation of our web content.
• The following data is processed: IP address.

With your expressed consent to the processing of cookies, you also consent to the possible processing of your data in the USA. There is a transfer of the collected information to a third country without an equivalent level of security.

You can find more information on Google Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy

 https://www.google.com/policies/privacy

Yoast SEO

This is a plugin of Yoast BV, Don Emanuelstraat 3, 6602 GX Wijchen, Netherlands, which serves the technical and content optimization of our website for search engines.

For more information, please refer to Yoast BV’s privacy policy, which you can view at https://yoast.com/privacy-policy/.

5. purposes of data processing

We process the categories of your personal data listed in point 1 of  Section I in order to further improve and develop this website; to compile usage statistics and to be able to detect, prevent and investigate attacks on our website.

6. transfer of your personal data

If required for the above purposes, we will only transfer your personal data to IT service providers used by us.

7. duration of storage

We will generally store your data for a period of 30 days. Longer storage will only take place (i) insofar as this is necessary to investigate identified attacks on our website or (ii) as long as there are statutory retention obligations or (iii) as long as any legal claims have not yet become time-barred, for the assertion of which or the defence against which the personal data is required. Please refer to the storage period of the cookies used in each case

[borlabs-cookie type=”btn-cookie-preference” title=”Privacy”/]

8. social media

In addition to our website, we also maintain presences in social networks, in particular LinkedIn and YouTube. When you visit one of our presences, personal data may be transmitted to the operator of the social network. In addition, the operator may associate your profile with ours, provided you are logged into the respective network.

The scope and purpose of the data processing by the respective service and the further processing and use of your data there can be found in the data protection information directly from the website of the respective service. There you can also find further information about your rights and setting options.

LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l=de_DE 

YouTube: https://www.youtube.com/static?gl=DE&template=terms&hl=de and https://policies.google.com/privacy

A transfer of the collected information to a third country without a comparable level of security cannot be ruled out.

• Legal basis: consent (Art 6 para 1 lit a DSGVO), legitimate interest (Art 6 para 1 lit f DSGVO), explicit consent (Art 49 para 1 lit a DSGVO).

In addition, ÖBAG operates profiles on the social media YouTube and LinkedIn to draw attention to service offerings and to interact with an interested public. The processing of your personal data may also take place in the USA, a third country without a comparable level of security.

Recommendation buttons to LinkedIn and WhatsApp are included on the website as direct HTML links. When viewing the page, no data is transmitted to external platforms. You can use these functions to share content from our website with others.

Information on how your personal data is processed after activating the link is available here:

LinkedIn: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

WhatsApp: https://www.whatsapp.com/legal/privacy-policy-eea?eea=1

ÖBAG has no influence on the content and data protection standards of the linked websites.

Vimeo

We use Vimeo, a service of Vimeo, Inc, 555 West 18th Street, New York, New York 10011, USA for the appealing presentation of our videos.

When viewing the page, no data such as your IP address  is transmitted to Vimeo.

A transfer of the collected information to a third country without a comparable level of security cannot be ruled out.

Information on how your personal data is processed can be found at https://vimeo.com.

II. data from business contacts

1. what data we process about you

In the course of our business relationship with you, we collect the following categories of personal data:

• Serial number
• Name or designation
• Salutation/gender
• Address
• Telephone and fax numbers and other information required for addressing, which results from modern communication techniques (e.g. e-mail)
• Company register data
• Blocking indicators (e.g. contact block, invoice block, delivery block, booking block, payment block)
• identification numbers for official statistical purposes, such as UID number and Intrastat identification number
• Affiliation with a particular group of companies
• Subject of the delivery or service
• Contact person for handling the delivery or service
• Third parties involved in the provision of the service, including information on the nature of their involvement
• Terms and conditions of delivery and performance (including information on the place of delivery or performance, packaging, etc.)
• Data on customs clearance (e.g. country of origin, customs tariff number) and export control
• Data on insurance of the supply or service and its financing
• Data on tax liability and tax calculation
• Financing and payment terms
• Bank details
• Data on the performance behavior of the data subject
• Claim data
• Account and voucher data

Your personal data is either provided to us directly by you (in particular through communication via e-mail or in the context of events) or we collect your data ourselves, for example in the course of processing services that you provide to us.

In cases where we ask you to provide your data, this is generally voluntary. However, business processes could be delayed or in some cases impossible if you do not provide your personal data. Should the provision of your data be legally obligatory in some cases, we will inform you separately.

2. purposes of data processing

We process the categories of your personal data listed under point 1 of this section II for the following purposes:

• to initiate business contacts
• to maintain our business contacts and to position ourselves publicly
• to efficiently manage our procurement activities
• to enable the processing of services provided to us
• to disseminate information about our activities

3. legal basis of the processing

We process the categories of your personal data listed under point 1 of this section II on the basis of our overriding legitimate interest pursuant to Art. 6 (1) lit. f DSGVO, which is to achieve the purposes listed under point 2 of this section II, or the necessity of the performance of any contract concluded with you (Art. 6 (1) lit. b DSGVO), performance of a legal obligation pursuant to Art. 6 (1) lit. c DSGVO.

4. transmission of your personal data

If necessary for the above purposes, we will transfer your personal data to the following recipients:

• Banks for the processing of payment transactions in the business case
• Contractual or business partners who participate or are to participate in the delivery or service
• IT service providers used by us
• Legal representatives in the business case
• Auditors for auditing purposes
• courts
• Competent administrative authorities, in particular tax authorities

Some of the above-mentioned recipients may in individual cases be located in countries outside the EU or the EEA. The level of data protection in these third countries may not correspond to that of the European Union. However, we only transfer your personal data to third countries for which the EU Commission has decided that they have an adequate level of data protection or we take measures to ensure that all recipients have an adequate level of data protection. For example, we conclude standard contractual clauses (2010/87/EC and/or 2004/915/EC) for this purpose. These are available upon request (see point V.2 below).

5. Duration of storage

Your personal data will be stored by us (i) until the end of the business relationship or the exchange of information with you or (ii) beyond that as long as legal storage obligations exist or (iii) as long as any legal claims for the assertion of which the personal data are required have not expired.

III. applicant management

1. what data we process about you

We process the following categories of personal data in the course of the application process:

• Name or designation;
• Salutation/gender;
• Address;
• Telephone and fax numbers and other information required for addressing purposes, which results from modern communication technologies (e.g. e-mail);

2. purposes of data processing

The use and record keeping of provided personal data of applicants for the purpose of job allocation, if these data have been provided by the data subject.

3. legal basis of the processing

The use of personal data of applicants is based on the legal grounds of consent (Art 6 para 1 lit a DSGVO), explicit consent (Art 9 para 2 lit a DSGVO) and the assertion, exercise and defense of legal claims (Art 9 para 2 lit f DSGVO) and legitimate interest (Art 10 DSGVO in conjunction with § 4 para 3 Z 2 DSG).

4. transfer of your personal data

Applicant data is only passed on when filling certain positions.

5. duration of storage

Applicant data will be deleted immediately after the advertised position has been filled or after expiry of the claim period under the Equal Treatment Act (7 months), unless consent has been given to keep records. Unsolicited applications are kept on record for the appropriate purpose until revoked by the person concerned.

IV. Video recordings

1. what data we process about you

In the course of video recordings, we collect the following personal data:

• Image data.

2. purposes of data processing

For the protection of property and protection of employees, protection of responsibility (performance of traffic safety obligations, contractual liability to customers, etc) and for the purpose of prevention, containment and clarification of criminally relevant behavior with exclusive evaluation in the occasion defined by the purpose, our premises are monitored with video.

3. legal basis of the processing

Fulfillment of a legal obligation (Art 6 para 1 lit c DSGVO); legitimate interest (Art 6 para 1 lit f DSGVO); § 12 para 2 DSG idF Datenschutz-DeregulierungsG 2018; § 80 StPO; § 353 ff ABGB; assertion, exercise or defense of legal claims (Art 9 para 2 lit f DSGVO); legitimate interest – transmission of records of criminal data to the competent law enforcement authorities for prosecution (Art 10 DSGVO iVm § 4 para 3 DSG).

4. transmission of your personal data

We transmit the image data to courts and authorities in case of need.

5. duration of storage

The data is deleted a maximum of 72 hours after recording, unless a longer storage period has been expressly stipulated by law, by an official legal act, in a company agreement or with the consent of the staff representatives. In case of an incident, the data will be stored until the incident has been resolved or until it has been forwarded to the competent authority.

V. Your rights and our contact details

1. your rights in connection with personal data

Under applicable law, you have the right (if the respective requirements of applicable law are met) to

• Request confirmation as to whether and which of your personal data we are processing and to receive copies of such data
• to request the rectification or erasure of your personal data
• To request us to restrict the processing of your personal data
• Object to the processing of your personal data
• To request data portability
• revoke your consent at any time, whereby the lawfulness of the data processing is not affected until revocation
• lodge a complaint with the data protection authority. Please address the complaint to: Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.

2. our contact details

If you have any questions or concerns about the processing of your personal data, please contact us:

Österreichische Beteiligungs AG

Kolingasse 14-16

1090 Vienna

kontakt@oebag.gv.at

Last updated February 25, 2021. Errors, misprints and technical changes excepted.

Image material

If you require the ÖBAG logo, please send an e-mail to presse@oebag.gv.at stating the purpose of use.

All photos are the property of ÖBAG and may only be used for editorial and non-commercial purposes after release, stating the reasons.

Copyright and photographic material

When using individual photographs, changes to the content of the photograph are prohibited.

Exceptions to this are size changes, minor color corrections and minor cropping changes that do not alter the meaning or presentation.

By downloading the images, the terms of use stated here are accepted. ÖBAG accepts no liability in the event of infringement of third party rights.