DATA PROTECTION

1. Data protection at a glance

General Notes

The following notes provide a simple overview of what happens to your personal data when you visit our website or when you contact us by e-mail, telephone, fax, letter or in person. Personal data is all data which can be used to personally identify you as a person. Detailed information on data protection can be found in our privacy policy below this text.

Data collection on this website

Who is responsible for the data collection on this website? The data processing on this website is carried out by the website operator. Your contact details can be found in the imprint of this website.

How do we collect your data?

On the one hand, your data is collected by providing us with it. This can be, for example, data that you enter in a contact form or, for example, by e-mail, telephone, letter, etc. Other data is automatically collected by our IT systems when we visit the website. This is mainly technical data (e.g. Internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior. Data is also collected to process your request and in case of follow-up questions.

What rights do you have with respect to your data?

You have the right to receive information about the origin, recipient, and purpose of your stored personal data, free of charge at any time. You also have the right to request the rectification or deletion of this data. You can contact us at any time at the address given in the imprint for further questions on data protection. You shall also have the right to lodge a complaint with the competent supervisory authority. You also have the right to request, in certain circumstances, the restriction of the processing of your personal data. For details, see the Privacy Policy under “Right to Restrict Processing.”

Storage

The data provided by you such as name, address, telephone number, e-mail address as well as information on your request are necessary for answering your request, for carrying out non-binding or pre-contractual measures (e.g. preparation of quotations and transmission) and, if necessary, for later fulfilment of the contract. Without this information, we will not be able to provide you with the information you require or conclude the contract with you.

This data will not be passed on to third parties without your explicit consent, with the exception of the transmission to our trusted service providers for the performance of the contract of necessary information, such as:

to our tax advisor to meet our tax obligations
to contracted transport companies/shipping companies for delivery
to our IT service provider for e.g. necessary backup measures of our data (backups)
processors required for the performance of the contract, etc.

All service providers mentioned here are also subject to the GDPR.

If no contract is concluded, the data stored by us will be deleted after 6 months. In the event of a contract being concluded, all data from the contractual relationship will be stored until the expiry of the statutory retention periods (e.g. warranty, product liability, tax retention period, etc.).

Third-party analytics and tools

When you visit our website, your browsing behavior can be statistically evaluated. This is mainly done with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually done anonymously; the surf behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information about these tools and your options for objecting can be found in the following privacy policy.

2. Hosting

External hosting

Our website is hosted by an external service provider (hoster). Personal data collected on this website is stored on the hoster’s servers. These may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract to our potential and existing customers (Art. 6 sec. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 sec. 1 lit. f GDPR).

Our Hoster will only process your data to the extent necessary to fulfil its performance obligations and will follow our instructions with regard to this data.

Conclusion of a contract for order processing

In order to ensure data protection-compliant processing, we have concluded a contract for order processing with our hoster.

3. General notes and mandatory information

Privacy

The operators of these sites take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use our website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating via e-mail) may have security gaps. Complete protection of data against access by third parties is not possible.

Note on the responsible body

The data controller on this website is:

Steinbeis PolyVert GmbH
Werner-Heisenberg-Straße 5
9100 Völkermarkt

Telephone: +43 (0) 4232 / 51220 – 0
E-Mail: office@steinbeis-polyvert.com

The controller is the natural or legal person who decides alone or jointly with others on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Data protection coordinator:

Armin Nuart
Steinbeis PolyVert GmbH
Werner-Heisenberg-Straße 5
9100 Völkermarkt

Telephone: +43 (0) 4232 / 51220 – 0
E-Mail: datenschutz@steinbeis-polyvert.com

Revocation of your consent to data processing

Many data processing operations are only possible with your explicit consent. You can revoke your consent at any time. An informal message by e-mail to us is sufficient for this purpose. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to object to the collection of data in special cases as well as to direct marketing (Art. 21 GDPR)

If the data processing is based on Art. e or f GDPR, they have the right at any time to object to the processing of their personal data for reasons arising from their particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based is derived from this data protection declaration. If you object, we will no longer process your personal data concerned unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (opposition under Art. 21 sec. 1 GDPR). If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling in so far as it is related to such direct marketing. If you object, your personal data will no longer be used for the purpose of direct marketing (opposition under Art. 21 sec. 2 GDPR).

Right to complain to the competent supervisory authority

In the event of breaches of the GDPR, the persons concerned shall have the right to complain to a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement. The right to appeal is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically processed on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or requests you send to us as a site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by changing the address line of the browser from “http://” to “https://” and by the lock icon in your browser line. If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.

Information, deletion and rectification

Within the scope of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if necessary, a right to rectification or deletion of this data. You can contact us at any time at the address given in the imprint for further questions about personal data.

Right to restrict processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address given in the imprint. The right to restrict processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the examination, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data has been/happens unlawfully, you can request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
If you have filed an objection under Article 21(1) GDPR, a balance must be made between your interests and our interests. If it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may be processed, except for its storage, only with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

4. Data collection

Cookies

The websites sometimes use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser.

Most of the cookies we use are so-called “session cookies”. They will be deleted automatically after the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only on a case-by-case basis, exclude the acceptance of cookies for certain cases or in general, and enable the automatic deletion of cookies when the browser is closed. When disabling cookies, the functionality of this website may be limited.

Cookies, which are necessary for the electronic communication process or for the provision of certain functions that you wish to use (e.g. shopping cart function), are calculated based on Art. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. a GDPR; consent can be revoked at any time. Insofar as other cookies (e.g. cookies for the analysis of your browsing behavior) are stored, these are treated separately in this data protection declaration.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
operating system used
Referrer URL
Host name of the accessing machine
Time of server request
IP address

This data is not merged with other data sources.

The collection of this data is carried out based on Art. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.

Contact

If you send us enquiries via the contact form, your details from the request form, including the contact details you provide there, will be stored with us for the purpose of processing the request and in case of follow-up questions. We do not share this data without your consent.

The processing of this data is carried out based on Art. b GDPR, if your request is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 sec. 1 lit. f GDPR) or on your consent (Art. 6 sec. 1 lit. a GDPR) if this has been queried.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage is omitted (e.g. after your request has been processed). Mandatory statutory provisions, retention periods, remain unaffected.

Request by e-mail, telephone, fax, letter or in person

If you contact us by e-mail, telephone, fax, letter or in person, your request, including any personal data (name, enquiry) resulting from it, will be stored and processed by us for the purpose of processing your request. We do not share this data without your consent.

The processing of this data is carried out based on Art. b GDPR, if your request is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 sec. 1 lit. a GDPR) and/or on our legitimate interests (Art. 6 sec. 1 lit. f GDPR), as we have a legitimate interest in the effective processing of the requests addressed to us.

The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage is omitted (e.g. after your request has been processed). Mandatory statutory provisions, statutory retention periods, remain unaffected.

5. Analysis tools and advertising

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool are carried out based on Art. f GDPR. The website operator has a legitimate interest in the analysis of user behavior to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively based on Art. a GDPR; consent can be revoked at any time.

IP anonymization

We have activated the IP anonymization feature on this website. This will shorten your IP address from Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area before being transferred to the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compile reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google.

Browser Plugin

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to the full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Opposition to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent the collection of your data on future visits to this website:

Disable Google Analytics.

For more information on how google analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Processors

We have concluded a contract with Google for order processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Storage period

User-level and event-level data stored by Google that is linked to cookies, user IDs (e.g. user ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymised or deleted after 14 months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de

Using Script Libraries (Google Webfonts)

In order to display the contents of our website correctly and graphically, we use script and font libraries such as Google Webfonts (www.google.com/webfonts). These are transferred to your browser’s cache to avoid multiple loading. If the browser does not support the Google web fonts or prevent access, content will be displayed in a standard font. Calling script or font libraries automatically triggers a connection to the library operator. In theory, it is possible for operators of corresponding libraries to collect data. By certifying the EU-US Privacy Shield, Google guarantees compliance with European data protection requirements even when processing data in the USA. The google library operator’s privacy policy can be found at: www.google.de/intl/de/policies/privacy.

WordPress Stats

This website uses the WordPress tool Stats to statistically evaluate visitor access. The provider is Automatic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA.

WordPress Stats uses cookies that are stored on your computer and allow an analysis of the use of the website. The information generated by the cookies about the use of this website is stored on servers in the USA. Your IP address will be anonymized after processing and before storage.

“WordPress stats” cookies remain on your device until you delete them.

The storage of “WordPress Stats” cookies and the use of this analysis tool are carried out based on Art. f GDPR. The website operator has a legitimate interest in the anonymized analysis of user behavior to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively based on Art. a GDPR; consent can be revoked at any time.

You can object to the collection and use of your data for the future by clicking on this link by setting an opt-out cookie in your browser: https://www.quantcast.com/opt-out/.

If you delete the cookies on your computer, you will need to set the opt-out cookie again.

6. Plugins and tools

Google Maps

This page uses the map service Google Maps via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to and stored by a Google server in the USA.

The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and in an easy search of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Article 6 (1) lit. f GDPR.

For more information on how to handle user data, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=de.

7. Own services

Dealing with applicant data

We offer you the opportunity to apply to us (e.g. by e-mail or by post). In the following, we inform you about the scope, purpose and use of your personal data collected during the application process. We assure that the collection, processing and use of your data is carried out in accordance with applicable data protection law and all other legal provisions and that your data will be treated strictly confidentially.

Scope and purpose of data collection

When you send us an application, we process your personal data (e.g. contact and communication data, application documents, notes in the course of interviews, etc.) insofar as this is necessary for the decision on the establishment of an employment relationship.

In principle, the applicant’s personal data should not include the following information:

Health data (e.g. diseases, pregnancy, etc.)
Ethnic and/or racial origin
Political opinion
Religious and/or ideological beliefs
Trade union affiliation
Details about sex life or sexual orientation

Should you nevertheless voluntarily provide us with sensitive data, you expressly consent to the processing of this data for the purpose of our application and recruiting.

We and external service providers commissioned by us process your personal data in compliance with the provisions of the EU General Data Protection Regulation, national data protection laws and other relevant national laws. In particular, data processing is used to carry out the application management process in order to start an employment relationship. The primary legal basis for this is Article 6(1) lit. b GDPR (general initiation of contracts) and, if you have given your consent, Art. a GDPR. The consent can be revoked at any time. Your personal data will only be passed on within our company to persons involved in the processing of your application. If the application is successful, the data submitted by you will be stored in our data processing systems for the purpose of carrying out the employment relationship.

Retention period of the data

If we cannot offer you a job offer, reject a job offer or withdraw your application, we reserve the right to keep the data you provide on the basis of our legitimate interests (Art. 6 sec. 1 lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data is then deleted and the physical application documents are destroyed. The retention is used in particular for verification purposes in the event of a dispute. If it is apparent that the data will be necessary after the expiry of the 6-month period (e.g. due to an impending or pending litigation), deletion will only take place if the purpose for further storage is no longer necessary.

A longer retention can also take place if you have given appropriate consent (Art. 6 sec. 1 lit. a GDPR) or if legal retention obligations prevent deletion.

Admission to the applicant pool

If we do not offer you a job offer, you may be able to add you to our applicant pool. In case of admission, all documents and information from the application will be transferred to the applicant pool to contact you in case of suitable vacancies.

Admission to the applicant pool is based solely on your express consent (Art. 6 sec. 1 lit. a GDPR). The submission of consent is voluntary and is unrelated to the ongoing application process. The person concerned can withdraw his consent at any time. In this case, the data from the applicant pool will be permanently deleted, unless there are legal reasons for retention. The data from the applicant pool will be irrevocably deleted no later than two years after the consent has been given.

8. General

We reserve the right to change this privacy policy at any time with effect for the future, the current version is available on our website.

Status: Feb 2020

Should individually provisions of this declaration be ineffective or unenforceable or become ineffective or unenforceable after publication, the validity of the statement remains unaffected. The invalid or unenforceable provision shall be replaced by the effective and enforceable provision whose effects come closest to the economic objective pursued by the author with the invalid or unenforceable provision. The above provisions shall apply accordingly if the declaration proves to be incomplete.