+ AVI
LEGAL BASIS
The EU General Data Protection Regulation and the the Data Protection Act serve the right to protection of personal data. We process your data exclusively on the basis of the legal provisions (DSGVO, DSG, TKG).
GENERAL
The responsible party is AVI Alpenländische Veredelungs- Gesellschaft m.b.H. (in short: AVI), Gustinus- Ambrosi- Strasse 1-3, 8074 Raaba-Grambach; datenschutz@evg.com.
It is of particular concern to us to protect and securely store all personal data that you entrust to us. In this document you will learn more about how we use and process your personal data.
PURPOSE, LEGAL BASIS, STORAGE PERIOD AND DATA RECIPIENT
CUSTOMERS/SUPPLIERS:
We require the personal data collected for the purpose of submitting offers or fulfilling contracts, billing and asserting contractual claims. In addition, we use your data for customer service purposes and for advertising and marketing purposes such as obtaining feedback on the services provided, for the electronic as well as postal dispatch of information on our products and services and for sending invitations to information and/or promotional events of AVI.
The legal bases for the processing of your personal data are primarily contract performance and legal obligation. Regarding the use of data for advertising and marketing purposes, we refer to your and our existing legitimate interest in optimizing our services to you and for future services (Recital No. 47 to the DSGVO and Section 107 TKG). In addition, there is the possibility of your consent as a legal basis for data uses that go beyond the aforementioned applications. Failure to provide the data may have different consequences.
We process your personal data (title, first and last name, e-mail address, company, country, address, telephone number, bank details, VAT number, FB number) as far as necessary, for the duration of the entire business relationship (from the initiation, processing to the termination of a contract) as well as beyond that in accordance with the statutory storage and documentation obligations, which result, among others, from the Austrian Commercial Code (UGB), the Federal Fiscal Code (BAO) as well as until the end of any legal dispute, ongoing warranty and guarantee periods, product liability, or until the end of the contract. The data will be stored until the end of any legal dispute, ongoing warranty and guarantee periods, product liability, or until the end of your and our legitimate interests.
In the areas of human resources, legal administration and IT, we have commissioned EVG Entwicklungs- und Verwertungs-Gesellschaft m.b.H. Gustinus- Ambrosi- Strasse 1-3, 8074 Raaba-Grambach; datenschutz@evg.com as a processor, which may gain access to your personal data in the course of its activities, insofar as it requires the data to perform its respective service. EVG has undertaken to comply with the applicable data protection regulations vis-à-vis us. An order processing contract has been concluded in accordance with Art 28 DSGVO.
Your data will be passed on (only in case of need) to authorities, courts, insurance companies, lawyers, tax advisors, banks, administrative authorities, collection agencies, third-party financiers (e.g. leasing), cooperating contractual and business partners, providers.
We may also disclose your data to service providers (agents, affiliates, subcontractors), jurisdictions and/or administrative authorities outside of Austria for the purposes described herein. In order to protect the data, the data transfer is carried out in accordance with appropriate data transfer agreements and other safeguards.
APPLICATION PROCESS
We process your data (contact details, address, date of birth, data in documents submitted by you such as letters of motivation, CV, certificates) only as long as they are required. These data are needed during the application process. If your application is rejected, this data will be stored for 6 months from the date of rejection (§§ 15Abs. 1 and 29 Abs. 1 GlbG u. § 7k Abs.1 iVm Abs. 2 Z.1 BEinstG). After that, they will be deleted. Your contact data will be stored for three years (§ 1486 Z. 5 ABGB).
CONTACT FORM
Your information including personal data in our contact form on our website will be transmitted to us via our own mail server to process your request, processed and stored by us. Your entry in our contact form signifies your consent to the processing of this data, as you provide it voluntarily. Without these data we cannot process your requests. Your data transmitted to us in this way will only be used by us for advertising purposes (customer service and for advertising and marketing purposes such as obtaining feedback on the services provided, for sending information on our products and services both electronically and by post, and for sending invitations to AVI information and/or promotional events) if you have given your consent to this by clicking on the declaration of consent at the end of the input mask.
The data processing is based on the legal provisions of § 96 para 3 TKG and Art 6 para 1 lit. a (consent) DSGVO.
ANALYSIS TOOL MATOMO AND COOKIES
With your consent, we use the open source software Matomo to analyse and statistically evaluate the use of the website. Cookies are used for this purpose. The information obtained about website use is transmitted exclusively to our servers and summarised in pseudonymous user profiles. We use the data to analyse the use of the website. The data collected is not passed on to third parties.
The IP addresses are anonymised (IP masking) so that they cannot be assigned to individual users.
The data is processed on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR. In doing so, we are pursuing our legitimate interest in optimising our website for our public image.
You can revoke your consent at any time by deleting the cookies in your browser or changing your data protection settings.
NEWSLETTER AND ELECTRONIC NOTIFICATIONS
We send newsletters, e-mails and other electronic notifications (hereinafter “newsletter”) only with the consent of the recipients or a legal permission. Insofar as the contents of the newsletter are specifically described in the context of a registration, they are decisive for the consent of the users. Otherwise, our newsletters contain information about our services and us.
To subscribe to our newsletters, it is generally sufficient to provide your e-mail address. However, we may ask you to provide a name, for the purpose of personal address in the newsletter, or further information, if this is necessary for the purposes of the newsletter.
Double opt-in procedure: Registration for our newsletter is always carried out in a so-called double opt-in process. This means that after registration you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Likewise, changes to your data stored with the shipping service provider are logged.
Deletion and restriction of processing: We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them in order to be able to prove consent formerly given. The processing of this data will be limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time. In the event of obligations to permanently observe objections, we reserve the right to store the e-mail address in a block list (so-called “block list”) for this purpose alone.
The logging of the registration process takes place on the basis of our legitimate interests for the purpose of proving its proper course. If we commission a service provider to send e-mails, this is done on the basis of our legitimate interests in an efficient and secure sending system.
Notes on legal basis: The newsletter is sent on the basis of the recipients’ consent or, if consent is not required, on the basis of our legitimate interests in direct marketing, if and to the extent that this is permitted by law, e.g. in the case of existing customer advertising. Insofar as we commission a service provider to send e-mails, this is done on the basis of our legitimate interests. The registration process is recorded on the basis of our legitimate interests to prove that it was carried out in accordance with the law.
Content: Information about the company, our services, promotions and offers.
Analysis and performance measurement: The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a shipping service provider, from their server. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of the retrieval, are initially collected.
This information is used to technically improve our newsletter based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or access times. This analysis also includes determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can indeed be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the dispatch service provider to observe individual users. Rather, we use the analyses to identify the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
The evaluation of the newsletter and the measurement of its success are carried out, subject to the express consent of the users, on the basis of our legitimate interests for the purpose of using a user-friendly and secure newsletter system that serves our business interests and meets the expectations of the users.
A separate revocation of the performance measurement is unfortunately not possible, in this case the entire newsletter subscription must be cancelled, or it must be contradicted.
Types of data processed: inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), meta/communication data (e.g. device information, IP addresses), usage data (e.g. websites visited, interest in content, access times).
Affected persons: Communication partners.
Purposes of processing: Direct marketing (e.g. by e-mail or post).
Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a. DSGVO), Legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO).
Option to object (opt-out): You can cancel the receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can otherwise use one of the above contact options, preferably e-mail, for this purpose.
SERVICES USED AND SERVICE PROVIDERS:
CleverReach: email marketing platform;
Service provider: CleverReach GmbH & Co. KG, //CRASH Building, Schafjückenweg 2, 26180 Rastede, Germany.
Website: https://www.cleverreach.com/de;
Privacy policy: https://www.cleverreach.com/de/datenschutz/.
CONSENT AND RIGHT OF WITHDRAWAL
If your consent is required for the processing of your data, we will process it only after your express consent.
In principle, we do not process any data of minors and are not authorized to do so. By giving your consent, you confirm that you have reached the age of 14 or that you have the consent of your legal representative.
You can revoke your consent at any time at the following e-mail address: office@avi.at. In such a case, the data previously stored about you will be anonymized and subsequently used only for statistical purposes without personal reference. By means of the revocation of consent, the lawfulness of the processing carried out on the basis of the consent until the revocation is not affected.
DATA SECURITY
AVI uses technical and organizational security measures in order to protect the stored personal data against accidental or intentional manipulation, loss or destruction and against access by unauthorized persons. Our security measures are continuously improved in accordance with technical progress.
YOUR RIGHTS
You have the right to obtain information from the responsible AVI about the personal data concerned at any time, contact see point 2. Insofar as there is no legal obligation to retain the data, you have the right to have this data deleted and to object to the processing. Furthermore, you have the right to correct the data as well as to restrict the processing, to data portability as well as to lodge a complaint with the Austrian data protection authority (Wickenburggasse 8-10, 1080 Vienna, e-mail: dsb@dsb.gv.at).
Please contact us regarding your rights at datenschutz@evg.com or write to: AVI Alpenländische Veredelungs- Gesellschaft m.b.H. Gustinus- Ambrosi- Strasse 1-3 8074 Raaba-Grambach
