1. Personal data
Personal data is, for example, the name, address, date of birth, telephone number and email address.
Anonymous or anonymised data, by contrast, does not constitute personal data. It is not subject to the scope of data protection regulations. The Company tries to process data in an anonymised form wherever possible. This is carried out, for example, by the acquired data not being collected with your name but under a pseudonym, so that it is not possible to trace it back to a specific or identifiable person.
2. Determining and collecting personal data
The Company does not collect and gather personal data without a reason. In fact, personal data is collected in order to:
make this website as user friendly as possible for you,
process information requests or complaints quickly,
respond to service and product enquiries,
provide information, marketing or newsletter content that is relevant to you,
allow you to navigate this website,
handle your job application,
process orders and
conduct statistical surveys on the usage of this Website.
The Company collects the personal data used to do this in a variety of ways. Personal data is collected when you share the specific personal data directly as part of data acquisition (e.g. form when you register, a product enquiry or subscribe to the newsletter). But personal data is also collected by ‘cookies’ when you navigate on or through this website. Such data includes the type of browser you are using, the language, the login times, the end device used, the data volumes transmitted, the navigation history, and the referrer. Anonymisation of the IP address is accomplished through Google Analytics.
3. Use of personal data
Generally, the Company only uses personal data solely within the scope and on the basis of the applicable data protection regulations, such as the EU General Data Protection Regulation, in particular.
The Company only uses personal data if this is covered by the Company’s legal authority in terms of content and purpose of data usage and if your interests requiring protection are not breached. The Company’s legal authority arises on the basis of the granted business licence and the articles of association.
If consent is required, the Company will invite you to give such consent directly when this personal data is collected. The Company will explain to you in advance what types of data are used and for what purposes. Should usage also include transmission to third parties, you will also be informed about the recipients and purpose of the transmission. You will further be advised, once again, about your right to withdraw consent at any time.
The Company also safeguards your interests in secrecy requiring protection in that the Company’s or a third party’s overriding, legitimate interests require the use of your personal data. Your interests in protecting the particular personal data and the interests of the Company or of a third party in using this data will be considered. The interests of the Company or a third party predominate, in particular, if data is required to fulfil a contractual obligation between the Company and you or to assert, exercise or defend the Company’s legal claims.
If the Company has an overriding, legitimate interest in using the data, your personal data will only be used to the extent required to fulfil this particular purpose. For example, personal data that is required to implement the contract will not be used for marketing purposes.
4. Special data collection and use
The Company collects and uses personal data on the website on the following occasions:
Registration in the online shop: If you register for the online shop, the following data is collected: First name, last name, company, street, house number, post code, city, country, VAT ID number, email address, telephone number. The data is used to give you access to the online shop and, in the event of orders, to process the order. This data stored in the Company’s ERP system for this purpose.
Contact form: We collect the following data for the contact form: First name, last name, email address, telephone number and the information about whether you want to be included on the newsletter’s distribution list. This information is stored in our CRM system and used to be able to process your enquiry or your contact requests.
Newsletter: There is also an option for ordering the newsletter as part of the contact requests. The following data is collected here: First name, last name, email address, and the information whether you want to be included on the newsletter’s distribution list. This information is stored in our CRM system and used to send you our newsletter.
Application to a job advertisement or speculative application: The following data is collected when you apply for a position with the Company using the online application form: The position sought (job title), title, name, street, house number, post code, town, your email address, your telephone number, your date of birth, your CV and your school and work references, as well as personal skills to qualify for the position. This data is used to process your application and to contact you regarding this matter. Should this result in employment, the data will be taken into Company’s personnel records and subsequently used for personnel administration.
The Company also collects personal data using ‘cookies’ (see below). If personal data is entered during one of the aforementioned occasions across more than one webpage, it is cached by a session cookie, so it can be used again when you next visit the webpage.
5. Sharing / transmitting data
Data transmission is forwarding personal data to third parties, who in turn use this data for their own purposes or even use the data for another field of activity within the Company. Data sharing is forwarding personal data to third parties, who use this data on the Company’s behalf for the Company’s purposes.
All personal data is collected, processed and used in accordance with the respective requirements to protect personal data, first and foremost, for the purpose of the services commissioned by you and to process your enquiries.
The Company will never sell, lease or rent out personal data. Your personal data will only be provided to third parties, if and insofar as this is necessary to implement the contract and for information, marketing and newsletter services.
Your data will only be stored in a personalised form, insofar as is necessary for the purposes for which it is processed, and until the end of any guarantee, warranty, limitation and statutory retention periods unless otherwise stipulated in these data protection requirements.
As part of operating our website(s), we commission software service providers and agencies, which may have access to your personal data during the course of their activities. They have committed themselves towards us to adhere to the applicable data protection regulations. Generally, if we have appointed an external service provider to process the data, such service provider will also be obliged to adhere to data protection.
6. Cookies and analytical services
Cookies are tiny text files, which the website operator caches on a storage medium of the end device used by the website user (PC, notebook, tablet and smartphone etc.) using the browser. This information is accessed again during subsequent visits to the website and allows the website to recognise the end device. Both personal and non-personal data can be saved in cookies. User profiles can also be created by setting cookies.
Cookies are used by the Company to organise usage of the website in a more user friendly way, to continually improve performance of the website for you and to learn more about usage of the website. However, this website can also be viewed without cookies. It is possible for all Internet browsers to be set to determine if and what cookies are cached by your browser. The default setting for most browsers accepts all cookies. Adjust the browser settings accordingly should you not want this.
You can also delete already cached cookies through your browser’s cookie settings. To do this, access your browser’s help page and check your browser’s cookie settings. Our websites use functions of the Google Analytics web analytics service. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. For this purpose, cookies are also used that enable usage of the website by your users to be analysed. The resulting information that is generated is transferred to the provider’s server and stored there. Moreover, information we obtain through cookies are not shared with third parties.
7. Data protection measures
The Company has taken suitable technical and organisational precautions to guarantee that your personal data is protected. These prevent any unauthorised access, collection, usage, publication, duplication, modification or deletion of the personal data. This data is stored on protected servers within Austria for this purpose. Technical data protection measures employed include mandatory passwords, logging, access controls, firewall and anti-virus programs. The organisational data protection measures include the principle of dual control, the restriction of data access for selected employees, random checks, confidentiality agreements and contractual letters of commitment.
8. Rights of data subjects
The Company naturally grants you a right to access, a right to rectify or erase and a right to object to your personal data being used.
The data subject is entitled, at all times, to demand confirmation whether personal data relating to them is being processed, and if necessary, obtain corresponding information about this personal data from the data controller.
The data subject has the right to have personal data relating to them rectified (completed), deleted or to restrict processing, and to object to this. This also applies to the data subject’s automated data processing of personal data. The data subject also has the right to object to the direct marketing of their personal data. Consent to process your data as part of sending out the newsletter may be withdrawn at any time. The Company will not carry out profiling (evaluation).
The data subject is urged to communicate any changes to their personal data.
Any duty by the Company to provide information and duty of disclosure under data protection law is restricted, particularly, by a possible obligation to secrecy.
As far as possible and provided this does not entail disproportionate expense, the controller will inform any recipients of personal data that has been rectified, erased or whose processing has been restricted. They will be informed about these recipients if the data subject requires.
The data subject is entitled to receive personal data relating to them and provided to the controller in a structured, current and machine-readable format, and to transfer this data to another controller. When exercising the right to have their data transferred, the data subject may arrange for personal data to be transferred directly from one controller to another controller, provided this is technically feasible.
If the Company uses your data on the basis of your consent, you also have the right to withdraw this consent at all times. Following withdrawal of consent, the Company shall cease using the personal data relating to the data subject immediately, provided the data is being used solely on the basis of your consent. The Company may continue to use the personal data relating to the data subject if it is previously anonymised in such a way that it is impossible for it to be assigned to a specific individual.
In the event that the protection of personal data is breached (“data breach”), which is likely to entail a high risk to personal rights and freedoms of natural persons, the controller will send a notification to the data subjects and/or data protection authority.
All rights are to be claimed from the Company in writing (see below for contact details). To prevent misuse, the data subject must provide evidence of their identity in a suitable form. Each data subject often has the unrestricted right to information. The Company provides information once a year free of charge and any costs above and beyond this will be billed based on the information issued.
The data subject may obtain information at any time to exercise their rights with respect to processing at the controller.
There is generally an option to lodge a complaint with the supervisory authority.
9. Contact data
We will update these guidelines for the protection of your personal data from time to time. You should view these guidelines from time to time to remain up to date about how we protect your data and continuously improve the content of our website. Should we make any significant changes to how we collect, use and/or forward the personal data you provide to us, you will be made aware of this by means of a clear and visible reference on the website. By using the website, you are stating your agreement to the terms of these guidelines for protecting personal data.
You can contact us over the app by using the contact form. If you do so, the following personal data will be sent to us: IP, time, operating system, name, email, telephone number and other personal data which you may have given in free text form. This data is transmitted to us from the app via our mail server and permanently stored there for further conversation. When our service staff retrieve the emails, these contents will then also be retrieved to the employees’ PCs and permanently stored to be able to respond to your inquiry. The legal basis for this is:
Article 6 (1) (f) GDPR
B) Social media & external contents
Social media links
Links are integrated to the provider’s social media profile on Instagram, YouTube und Facebook. These links do not contain any explicitly user-specific data, only the provider’s respective profile links. By clicking on the link, you leave the app and will be redirected by your smartphone browser to the respective social media platform.
Contents from other third-party providers
Map data from Google Maps is embedded in the app via the Google Maps API for the presentation of maps under the menu heading “Workshop search”. After clicking “workshop search”, you can choose whether you want to enter a specific location or carry out an automated location determination based on your current location. In both options, your smartphone’s personal data, such as time, operating system and your current IP address, will be transmitted to Google, so that you can be shown a suitable map section.
For automated location determination, your current location will be sent to Google and automatically processed. The following data will be processed by Google to determine your location: your IP address, your GPS coordinates, your mobile phone network, your WLAN network.
The Google Firebase service and Google analytics for Firebase, are used to analyse app usage for push notifications. The information generated about the app’s usage is transmitted, with an anonymised IP address, to a Google server and stored there. The IP anonymisation function in Analytics sets the last octet of type IPv4 user IP addresses and the last 80 bits of IPv6 addresses in memory, to zero. Thus, the user’s exact IP address is not stored by Analytics. Google uses this information to evaluate your usage of the app in order to produce activity reports for the app operators. Google may also transmit this information to third parties. If the user installs the app and allows push notifications, they declare their agreement to the processing of the data collected about them by Google, by the ways and means described above, and for the aforementioned purpose. This usage data forms the basis for statistical, anonymous evaluations and dashboards by Google.
Since Google is a U.S. corporation, your personal data may therefore be transmitted to the USA. We have no influence on the routing of your personal data. Google LLC is certified within the framework of the Privacy Shield agreement between the EU and the USA (EU-US Privacy Shield): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI