Privacy Policy

This privacy policy describes how Österreichische Beteiligungs AG, Kolingasse 14-16, 1090 Vienna ("we" or "us"), as the data controller, processes your personal data (i) as a visitor to this website (see Section I) or (ii) as a business contact (see Section II) or (iii) as an applicant. Information on your rights and our contact details can be found under Section V.2.

I. Data related to your visit to our website

  1. What data we process about you

When you visit this website, we collect the following categories of personal data:

  • IP address, date and time of the request, time zone difference to GMT, content of the request (specific page), access status/HTTP status code, amount of data transferred, requesting website, operating system and interface, language and version of the browser software, fulfillment of a legal obligation according to Art. 6 (1) (c) GDPR;
  • Technical data for analysis tools;
  • Name and version of your web browser;
  • Data you enter in the contact form;
  • Email address (if you sign up for the newsletter).

There is no obligation to provide us with this personal information. However, you will not be able to use all the features of this website if you do not provide us with this personal information.

  • Legal basis: legitimate interest (Article 6 (1) (f) GDPR), Section 96 (3) TKG 2003.
 
  1. Contact form

After you have submitted the contact form, the personal data you have entered will be processed by the person responsible for data protection for the purpose of processing your enquiry. There is no obligation to provide personal data. Failure to provide it will simply mean that you will not be able to submit your request and we will not be able to process it. The data will be further processed in a manner compatible with the original processing purpose on the same legal basis for the purpose of direct marketing in forms that do not require consent, such as sending addressed postal advertising, until you object. In this case, the data will be passed on to the shipping service provider. You have the right to object to the use of your personal data for the purpose of direct marketing at any time by written notification. If you object, your personal data will no longer be processed for the purpose of direct marketing.

  • Legal basis: Consent (Article 6 (1) (a) GDPR), fulfillment of a contract, necessary to carry out pre-contractual measures (Article 6 (1) (b) GDPR), legitimate interest (Article 6 (1) (f) GDPR), Section 96 (3) TKG 2003.
 
  1. Analysis tools / cookies

This website uses cookies. Cookies make websites more user-friendly and efficient. A cookie is a small text file used to store information. When a website is visited, the website can place a cookie on the visitor's computer. If the user later visits the website again, the website can read the data from the previously stored cookie and thus determine, for example, whether the user has visited the website before and which areas of the website the user was particularly interested in.

Changing cookie settings

The user can determine how the web browser handles cookies, and which cookies are accepted or rejected, in the web browser settings. The exact location of these settings depends on the respective web browser. Detailed information can be found in the help function of the respective web browser. If the use of cookies is restricted, not all functions of this website may be fully available.

Cookies on our website

You can adjust your personal cookie settings here: Privacy Policy

To improve the operation of our website, we use the following tools, using only anonymized IP addresses:

Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”).

We use the analysis of user behavior to optimize both our website and our advertising. We have implemented the function IP anonymization activatedThis means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. A transfer of the collected information to a third country without a comparable level of security can not be excluded.

By giving your express consent to the processing of cookies, you also agree to the possible processing of your data in the USA.

The information may also be passed on to Google’s contractual partners.

Our service provider has concluded a contract for order data processing with Google.

Detailed information on how Google Analytics handles user data can be found in the privacy policy of Google.

Google Fonts

This website uses external fonts, so-called “Google Fonts”. These web fonts are integrated by calling a server, which is usually a Google server in the USA.

  • Purpose: Uniform presentation of our web content across platforms.
  • The following data is processed: IP address.

With their express consent to the processing of cookies, you also agree to the possible processing of your data in the USA. The collected information will be transferred to a third country without an equivalent level of security instead.

For more information about Google Fonts, see developers.google.com/fonts/faq and in Google's privacy policy at google.com/policies/privacy

Yoast SEO

This is a plugin from Yoast BV, Don Emanuelstraat 3, 6602 GX Wijchen, Netherlands, which serves to technically and content-wise optimize our website for search engines.

For further information, please refer to Yoast BV’s privacy policy, which you can find at yoast.com/privacy-policy can see.

  1. Purposes of data processing

We process the categories of your personal data listed under point 1 of this Section I in order to further improve and develop this website; to compile usage statistics; and to detect, prevent, and investigate attacks on our website.

  1. Transfer of your personal data

If this is necessary for the purposes stated above, we will only transmit your personal data to IT service providers employed by us.

  1. Duration of storage

We will generally store your data for a period of 30 days. Longer storage will only occur (i) if this is necessary to investigate identified attacks on our website, (ii) as long as statutory retention periods exist, or (iii) as long as any legal claims for which the personal data is required to assert or defend against them have not yet expired. Please refer to the storage period for the cookies used in each case. Privacy Policy.

  1. Social Media

If this is necessary for the purposes stated above, we will only transmit your personal data to IT service providers employed by us.

In addition to our website, we also maintain presences in social networks, in particular LinkedIn and YouTubeWhen you visit one of our websites, personal data may be transmitted to the operator of the social network. Furthermore, the operator may link your profile to ours if you are logged in to the respective network.

For information on the scope and purpose of data processing by the respective service, as well as how your data is further processed and used, please refer to the privacy policy directly on the respective service's website. There you can also find further information about your rights and settings options.

LinkedIn: linkedin.com/legal/privacy-policy?_l=de_DE

YouTube: youtube.com/static?gl=DE&template=terms&hl=de and policies.google.com/privacy.

A transfer of the collected information to a third country without a comparable level of security can not be excluded.

  • Legal basis: Consent (Article 6 (1) (a) GDPR), legitimate interest (Article 6 (1) (f) GDPR), explicit consent (Article 49 (1) (a) GDPR).

In addition, ÖBAG operates profiles/fan pages on the social media platforms YouTube and LinkedIn to promote service offerings and engage with an interested public. Your personal data may also be processed in the USA, a third country without a comparable level of security.

On the website are Recommendation buttons to LinkedIn and WhatsApp are integrated as direct HTML links. When you view the page, no data is transferred to external platforms. You can use these features to share content from our website with others.

Information about how your personal data will be processed after activating the link can be found here:

LinkedIn: linkedin.com/legal/privacy-policy?_l=de_DE

WhatsApp: whatsapp.com/legal/privacy-policy-eea?eea=1

ÖBAG has no influence on the content and data protection standards of the linked websites.

LinkedIn (Insight Tag): Furthermore, we use conversion tracking on our website with LinkedIn Insights Tag, a tool provided by LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland. For this purpose, the LinkedIn Insight Tag is integrated into our website, and LinkedIn places a cookie on your device.

  • Purpose: Conversion tracking and retargeting advertising measures, improving the targeting of advertising. When you visit one of the pages equipped with the LinkedIn Insight Tag, a connection to the LinkedIn server is established. The LinkedIn server is informed which of our pages you have visited and how you have interacted with the website content. If you are logged into your LinkedIn account at the same time, LinkedIn will also establish a link to your account.
  • The following data is processed: IP address, page views, timestamps, events
  • Storage period: see cookie list

The data collected is not visible to us as website operators.

If you are logged into your LinkedIn account, you allow LinkedIn to associate your browsing behavior directly with your personal profile. This allows personalized ads to be displayed to you on LinkedIn. Further information on conversion tracking can be found at LinkedIn Conversion TrackingYou can prevent this by logging out of your LinkedIn account. Furthermore, you can deactivate data collection at any time using the following link: linkedin.com/psettings/guest-controls/retargeting-opt-out. For further information on how user data is handled, please see LinkedIn’s privacy policy at linkedin.com/legal/privacy-policy.

By expressly consenting to the processing of cookies, you also agree to the possible processing of your data in the USA. The collected information may be transferred to a third country without an adequate/comparable level of security.

II. Data from business contacts

  1. What data we process about you

In the course of our business relationship with you, we collect the following categories of personal data:

  • serial number;
  • Name or designation;
  • Salutation/Gender;
  • Titel; Address;
  • Telephone and fax numbers and other information required for addressing purposes, which results from modern communication technologies (e.g. e-mail); Application documents (CV, certificates, references, etc.); Correspondence data; Internal notes (especially regarding interviews conducted); Statements and recommendations (e.g. from recruitment consultants);
  • Commercial register data;
  • Blocking indicators (e.g. contact block, invoice block, delivery block, booking block, payment block);
  • Identification numbers for official statistical purposes such as UID numbers and Intrastat identification numbers;
  • Belonging to a particular group;
  • Subject of the delivery or service;
  • Contact person for processing the delivery or service;
  • Third parties involved in the provision of services, including information on the nature of their involvement;
  • Terms and conditions of delivery and service (including information on the place of delivery or service, packaging, etc.);
  • Customs clearance data (e.g. country of origin, customs tariff number) and export control;
  • Data on the insurance of the supply or service and its financing;
  • Data on tax liability and tax calculation;
  • Financing and payment terms;
  • Bank details;
  • Data on the performance of the person concerned;
  • Claim data;
  • Account and receipt data.

Your personal data is either provided to us directly by you (in particular through communication via email or in the context of events) or we collect your data ourselves, for example in the course of processing services that you provide to us.

In cases where we ask you to provide your data, this is generally voluntary. However, business processes may be delayed or, in some cases, impossible if you do not provide your personal data. If the provision of your data is required by law in certain cases, we will notify you separately.

  1. Purposes of data processing

We process the categories of your personal data listed under point 1 of this Section II for the following purposes:

  • to initiate business contacts;
  • to maintain our business contacts and position ourselves publicly;
  • to efficiently manage our procurement processes;
  • to enable the processing of services provided to us;
  • to disseminate information about our activities.
  1. Legal basis of processing

We process the categories of your personal data listed under point 1 of this Section II on the basis of our overriding legitimate interest pursuant to Art. 6 (1) (f) GDPR, which consists in achieving the purposes stated under point 2 of this Section II, or the necessity of fulfilling a contract concluded with you (Art. 6 (1) (b) GDPR), fulfilling a legal obligation pursuant to Art. 6 (1) (c) GDPR.

  1. Transfer of your personal data

If necessary for the purposes stated above, we will transfer your personal data to the following recipients:

  • Banks to process payment transactions in business transactions;
  • Contractual or business partners who are or are to be involved in the delivery or service;
  • IT service providers we use.
  • Legal representative in business transactions;
  • Chartered accountants for auditing purposes;
  • Dishes;
  • Competent administrative authorities, in particular tax authorities.

Some of the above-mentioned recipients may, in individual cases, be located in countries outside the EU or EEA. The level of data protection in these third countries may not correspond to that of the European Union. However, we only transfer your personal data to third countries for which the EU Commission has decided that they have an adequate level of data protection, or we take measures to ensure that all recipients have an adequate level of data protection. To this end, we conclude, for example, standard contractual clauses (2010/87/EC and/or 2004/915/EC). These are available upon request (see Section V.2 below).

  1. Duration of storage

We will store your personal data (i) until the end of the business relationship or the exchange of information with you or (ii) beyond that as long as statutory storage obligations exist or (iii) as long as any legal claims for the assertion of which the personal data are required have not yet expired.

III. Applicant management

This applies to applicants for positions directly at ÖBAG as well as applicants for supervisory board, advisory board and management board positions at affiliated companies.

  1. What data we process about you

We process the following categories of personal data in the course of the application process:

  • Name or designation;
  • Salutation/Gender;
  • Titel; Address;
  • Telephone and fax numbers and other information required for addressing purposes, which results from modern communication technologies (e.g. e-mail); Application documents (CV, certificates, references, etc.); Correspondence data; Internal notes (especially regarding interviews conducted); Statements and recommendations (e.g. from recruitment consultants);
  1. Purposes of data processing

The personal data provided by applicants is used and stored for the purpose of filling vacancies, documenting the careful selection of applicants and considering applicants for future positions (if desired by the applicant).

  1. Legal basis of processing

Your data will be used in the selection process as part of pre-contractual measures to review your application for positions advertised by us or our subsidiaries (Art. 6 (1) lit. b, Art. 9 (2) lit. b GDPR). The storage of applicants' personal data is based on the legal grounds of consent (Art. 9 (2) lit. a and Art. 10 (4) lit. a GDPR), our legitimate and public interests in documenting the careful review and selection of applicants (Art. 3 (2) lit. e, f GDPR in conjunction with § XNUMX (XNUMX) Z XNUMX DSG and ÖIAG-G) and the assertion, exercise and defence of legal claims (Art. XNUMX (XNUMX) lit. f and Art. XNUMX (XNUMX) lit. f GDPR). You have the right to revoke your consent at any time with effect for the future. To assert your revocation, you can send us an email to kontakt@oebag.gv.at or use one of our other contact channels.

  1. Transfer of your personal data

Applicant data will only be passed on if this is necessary to fill the respective position (e.g. to members of the company's executive and supervisory boards, or to affiliated personnel consultants), and if we engage service providers who process data on our behalf (in particular IT service providers).
respective position is necessary (e.g., to board members and supervisory board members of the
company, or affiliated recruitment consultants), as well as when we
Involve service providers who process data on our behalf (in particular...)
IT service providers).

  1. Data source
We receive data about you if you provide it to us directly (e.g. by email or at networking events) or from recruitment consultants with whom we work to fill vacant positions. In individual cases, your data (e.g. name, contact details) may be disclosed to us through a personal recommendation from another third party (e.g. former colleagues or business partners). You are not obliged to provide your data. However, if the necessary information is missing, we will unfortunately not be able to consider your application.


6. Duration of storage

Applicant data will be deleted immediately after the advertised position has been filled or after the expiry of the limitation period under the Federal Equal Treatment Act, including the delivery period (7 months), unless consent has been given for the data to be retained, or if there are other legal retention obligations or legitimate or public interests in further retention (in particular for the purpose of documenting the careful filling of positions within the scope of the statutory tasks pursuant to ÖIAG-G 2000). Spontaneous applications will be kept on file for appropriate purposes until the applicant revokes their consent. You are not obliged to provide your data. However, if the necessary information is missing, we will unfortunately not be able to consider your application.

Unsolicited applications will be kept on file for the intended purpose until they are withdrawn by the applicant.

IV. video recordings

  1. What data we process about you

During the video recordings we collect the following personal data:

  • Image data
  1. Purposes of data processing

To protect property and employees, to protect our responsibilities (fulfillment of traffic safety obligations, contractual liability towards customers, etc.) and to prevent, contain and investigate criminally relevant conduct with exclusive evaluation in the eventuality defined by the purpose, our premises are monitored by video.

  1. Legal basis of processing

Fulfillment of a legal obligation (Article 6 (1) (c) GDPR); legitimate interest (Article 6 (1) (f) GDPR); Section 12 (2) DSG as amended by the Data Protection Deregulation Act 2018; Section 80 StPO; Section 353 et seq. ABGB; assertion, exercise, or defense of legal claims (Article 9 (2) (f) GDPR); legitimate interest – transmission of records of criminal data for legal prosecution to the competent law enforcement authorities (Article 10 GDPR in conjunction with Section 4 (3) DSG)

  1. Transfer of your personal data

We will transmit the image data to courts and authorities if necessary.

  1. Duration of storage

Applicant data will be deleted immediately after the advertised position has been filled or after the expiry of the limitation period under the Federal Equal Treatment Act, including the delivery period (72 months), unless consent has been given for the data to be retained, or if there are other legal retention obligations or legitimate or public interests in further retention (in particular for the purpose of documenting the careful filling of positions within the scope of the statutory tasks pursuant to ÖIAG-G XNUMX). Spontaneous applications will be kept on file for appropriate purposes until the applicant revokes their consent.

V. Your rights and our contact details

  1. Your rights in connection with personal data

Under applicable law, you are entitled to do so (if the relevant requirements of the applicable law are met)

  • to request confirmation as to whether and which of your personal data we process and to receive copies of this data;
  • to request the rectification or erasure of your personal data;
  • to request that we restrict the processing of your personal data;
  • to object to the processing of your personal data;
  • to request data portability;
  • To withdraw your consent at any time, without affecting the legality of data processing until the withdrawal;
  • to lodge a complaint with the data protection authority. Please address your complaint to: Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.
  1. Our contact details

If you have any questions or concerns regarding the processing of your personal data, please contact us:

Österreichische Beteiligungs AG
Kolingasse 14-16
1090 Vienna / Austria
kontakt@oebag.gv.at

Last updated in summer 2025. Errors, misprints, and technical changes reserved.

Pictures

All photos are the property of ÖBAG and may only be used for editorial and non-commercial purposes after approval and with indication of the reasons.

Copyright and images

When using individual photographs, any changes to the content of the photograph are prohibited.

This does not include changes in size, minor color corrections, and minor cropping changes that do not change the meaning or presentation.

By downloading the images, you accept the terms of use stated here. ÖBAG assumes no liability for infringement of third-party rights.