The controller responsible for data processing is: Amann Girrbach AG Gewerbestraße 10 6841 Mäder Austria
You can reach us at: [email protected]
You can reach our company’s data protection officer at: [email protected]
We process your personal data exclusively within the framework of the provisions of the General Data Protection Regulation (GDPR) and the Data Protection Act (DSG). In this statement, you will receive all information about the type, scope, and purpose of data collection and use.
What is personal data?
The term “personal data” is defined in Article 4 No. 1 of the EU General Data Protection Regulation (GDPR) as “any information relating to an identified or identifiable natural person”. This includes personal information such as name or email address, as well as browsing and communication behavior.
Data processing when visiting our website
Informational use
For the purely informational use of the website, i.e., if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data that is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 Para. 1 S. 1 lit. f GDPR):
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request comes
- Browser
- Operating system and its interface
- Language and version of the browser software
This data is stored anonymously and is used exclusively for statistical purposes (such as how often individual pages of our offer are visited) or for technical network and system monitoring to identify disruptions in server operation (log files).
We delete or anonymize your personal data as soon as it is no longer necessary for the purposes for which we collected or used it according to the above purposes.
Regarding the storage of data in log files, deletion or anonymization occurs at the latest after 30 days.
Contact form
If you wish to contact a dealer via the contact form, your information from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the contact request and in case of follow-up communication. We do not share this data without your consent.
The processing of this data is based on Art. 6 Para. 1 lit. b GDPR, insofar as your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.
The data you enter in the contact form will remain with us until you request deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – especially retention periods – remain unaffected.
Cookies
We use cookies on our website. You can find further descriptions in our “Cookie Notices”. Here you can also revoke your given consent at any time for the future.
Consent with Cookiebot
Our website uses Cookiebot’s consent technology to obtain your consent to store certain cookies on your device or to use certain technologies and to document this in a data protection compliant manner. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).
When you enter our website, a connection to Cookiebot’s servers is established to obtain your consents and other declarations regarding cookie use. Subsequently, Cookiebot stores a cookie in your browser to be able to assign the given consents or their revocation to you. The data collected in this way is stored until you request us to delete it, delete the Cookiebot cookie yourself, or the purpose for data storage no longer applies. Mandatory statutory retention obligations remain unaffected.
Cookiebot is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 Para. 1 lit. c GDPR.
Data processing for plugins
Plugins are components embedded in the website that represent a reference to third-party content (so-called “plugin”). When incorporating plugins, we use the so-called two-click solution. This means that when you visit the website, no personal data is initially passed on to the third-party provider.
We have embedded YouTube videos on our website that are stored and viewable on the YouTube platform. YouTube is a platform of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube videos created by us and embedded in “enhanced privacy mode”. This means that your data mentioned below will only be transmitted when you actually play the video. Otherwise, no transmission takes place. YouTube videos from third parties embedded on our website cannot be used in “enhanced privacy mode”. Here, an automatic transmission of the data mentioned in paragraph 2 to YouTube occurs. The data transferability is not influenceable by us.
We have no influence on the collected data and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the collected data by Google.
Data types: By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the following data is transmitted to Google when used:
- Information about the browser type and version used
- The user’s operating system and its interface
- The user’s Internet service provider
- The user’s IP address
- Date and time of access
- Websites from which the user’s system accesses our website
- Websites accessed by the user’s system via our website
- Amount of data transferred
- Access status/HTTP status code
This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide appropriate advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the third-party provider to exercise this right.
Legal basis:
- The processing of personal data with regard to the collection and transmission of the user’s IP address and information about the browser type and version used to the third-party provider to make the third-party provider’s online offer available is carried out for reasons of user-friendliness and technical necessity. The IP address is necessary for the third-party provider to deliver the third-party content. Information about the browser type and version used is necessary to deliver the content in the correct format.
The legal basis for the collection and transmission of the IP address and information about the browser type is therefore Art. 6 Para. 1 S. 1 lit. f GDPR. The legitimate interest lies in the provision and improvement of an online offer as well as the user-friendliness of the offer.
The legal basis for the collection and transmission of cookies (see point 2.c.) and the information provided by you is your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR. You can revoke your consent at any time. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected.
Storage duration:
- We do not store any data that occurs in connection with the use of plugins. Regarding any storage by Google, please also refer to their respective privacy policy at https://policies.google.com/privacy.
Recipients:
- The collected data is transmitted to the respective third-party providers. The transmission of personal data is justified by the fact that we have a legitimate interest in passing on the data to provide and improve our online offer and for reasons of user-friendliness, and your rights and interests in the protection of your personal data within the meaning of Art. 6 Para. 1 S. 1 lit. f GDPR do not outweigh.
Data processing outside the European Union:
- For cases where personal data is transferred to the USA, we have concluded corresponding standard contractual clauses.
Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. Google Tag Manager itself does not create user profiles, does not store cookies, and does not carry out any independent analyses. It only serves to manage and play out the tools integrated via it. However, Google Tag Manager does collect your IP address, which may also be transmitted to Google’s parent company in the United States.
The use of Google Tag Manager is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in a quick and uncomplicated integration and management of various tools on its website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, dwell time, operating systems used, and origin of the user. This data is summarized in a User ID and assigned to the respective end device of the website visitor.
Furthermore, we can record your mouse and scroll movements and clicks, among other things, with Google Analytics. Google Analytics uses various modeling approaches to augment the collected data sets and employs machine learning technologies in the data analysis.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
The use of this service is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG. The consent can be revoked at any time.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
Browser Plugin
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information on how Google Analytics handles user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
Contract Processing
We have concluded a contract processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Facebook Connect
If a so-called “Facebook Connect Button” is placed on this website, you have the option to log in to our website with your Facebook usage data. In addition, information about your activities on our website can automatically flow into your Facebook profile via Facebook Connect. In this respect, when activating the button, you will be given both the opportunity to expressly consent to the access to your Facebook usage data and to consent to the publication of information and activities in your Facebook profile. The use of additional data (e.g., contact via your email address) only occurs with prior express consent. Please note that Facebook receives information about the application or website via Facebook Connect, including what actions you perform. To personalize the process of making connections, Facebook may receive a limited amount of information in some cases even before you authorize the application or website. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your related rights and setting options for protecting your privacy, can be found in Facebook’s privacy policy:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php; further information on data collection: https://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo.
Transfers to third countries are possible. So-called standard contractual clauses according to Art. 46 GDPR have been concluded as appropriate guarantees. Further information on this can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en.
Registration data in business transactions – B2B
In the course of business initiation and business processing (contract fulfillment and use of the services of Amann Girrbach AG by customers) with our customers, we store and process contact data, contract data, billing data, as well as correspondence.
Legal basis:
- For new and existing customers, the processing is necessary for the fulfillment of the contract and/or pre-contractual measures Art. 6 Para. 1 S. 1 lit. b GDPR.
- For potential customers, we rely on the legal basis of legitimate interest in business initiation Art. 6 Para. 1 S. 1 lit b and f GDPR.
- In the context of billing for deliveries or services, we are obliged to retain personal data for the purpose of tax calculation and tax correction, as well as our accounting obligations, due to the Federal Tax Code (BAO), the Company Code (UGB), the Value Added Tax Act (UStG). Without the provision of your data, we cannot comply with our obligations. Legal basis Art. 6 Para. 1 S.1 lit. c GDPR.
Deletion periods:
- We process the data of existing customers as long as the contractual relationship exists. After termination, we keep this data stored until the expiry of the statutory retention periods.
- All billing data, accounts, receipts, invoices, etc. are kept for 7 years in accordance with the legally prescribed retention periods and then deleted or anonymized.
- Personal data of the customer will be stored by Amann Girrbach AG for as long as it is necessary to fulfill the obligations incumbent on these companies, or as long as it is entitled to defend against any claims that may be asserted.
Recipients:
- Beyond our internal authorized employees, billing data may be passed on to our tax consultancy (and thus to third parties). The data provided by you will be shared within our group of companies for internal administrative purposes, including joint customer care, to the extent necessary. Any disclosure of personal data is justified by the fact that we have a legitimate interest in passing on the data for administrative purposes within our group of companies and your rights and interests in the protection of your personal data within the meaning of Art. 6 Para. 1 S. 1 lit. f GDPR do not outweigh.
Newsletter
With your consent, you can subscribe to our newsletter, with which we inform you about our current events and other news related to our company. The advertised services are named in the declaration of consent.
For registration to our newsletter, we use the so-called double opt-in procedure. This means that after you have registered, we will send you an email to the email address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 3 working days, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses used and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
The only mandatory information for sending the newsletter is your email address. The provision of further, separately marked data is voluntary and is used to be able to address you personally. The data may be marked as mandatory if we require it in a form for other purposes as mandatory information. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 Para. 1 S. 1 lit. a GDPR.
You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter email, by email to [email protected] or by sending a message to the contact details provided in the imprint.
We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files stored on our website. For the evaluations, we link the automatically collected data when visiting the website (see above) and the web beacons with your email address and an individual ID. The data is collected exclusively pseudonymized, meaning the IDs are not linked to your other personal data, and direct personal reference is excluded. The legal basis is your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR.
You can revoke your consent regarding the evaluation of your user behavior at any time by unsubscribing from the newsletter via the separate link provided in every email or by informing us through another contact method. The information is stored for as long as you have subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously.
For sending newsletters, we use the service provider HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA. The data you provided when registering for the newsletter will be passed on to HubSpot, Inc. for newsletter dispatch.
Applicants
Amann Girrbach AG is always looking for talented new employees who are motivated to engage with us for the company and its customers. Sometimes we receive personal data from candidates in application letters and CVs. Sometimes we also proactively approach potential employees who have been recommended to us or whose profile has caught our attention as promising, for example, on an online platform. In addition to the contact details, professional experiences, knowledge, interests, and leisure activities that we receive in the application letter and CV, we also record the status of the hiring phase and the first impressions we have gained from the first conversation that took place in our company.
Legal basis:
- The data you submit will be used to process the application, in particular to check the applicant’s suitability for open positions. The legal basis for this is generally § 26 BDSG Para. 1 S. 1 BDSG.
- Whenever we proactively approach potential employees, we act on the basis of our legitimate interest to expand our team with the best minds in the industry and to make an attractive offer to applicants.
- In the best case, an agreement is reached and we are pleased about the addition to our team. However, the profile doesn’t always fit exactly the currently available position, even if it is very interesting for us. In these cases, we ask the applicants for consent to keep the data on file.
Deletion periods:
- If an employment relationship does not materialize with potential employees, the data is kept for 6 months in order to be able to respond to legal claims if necessary. Only with the applicants’ consent to keep the data on file will the data be stored beyond this for a maximum period until the consent is revoked.
Recipients:
- Only those internally responsible for recruiting and the relevant managers have access to applicant data. Personal data of applicants is not passed on to third parties.
Your rights regarding your personal data
You generally have the rights to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) at any time regarding data processing.
Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims (Art. 21 GDPR). The revocation only takes effect in the future. Processing of personal data before the revocation is not affected.
Upon written request, we will be happy to inform you at any time about the personal data stored about you. Please address your request to [email protected].
Should the data we process about you not be correct, please inform us. We will correct it immediately and inform you about it.
If you no longer wish us to process your data, we kindly ask you to inform us informally at [email protected]. We will, of course, delete your data immediately and inform you about it. If compelling legal reasons prevent deletion, you will be promptly notified by us.
You also have the right to restrict processing and to data portability. If you believe that the processing of your data violates Austrian or European data protection law and we have thereby violated your rights, we ask you to contact us at [email protected] to clarify any questions.
You also have the right to complain to the data protection authority at [email protected] or to a European supervisory authority or to appeal to the courts.
If we process your data based on your consent, you can simply revoke it by email to us. The processing up to the revocation remains lawful. You can reach us for this purpose at [email protected].