We process personal data (hereinafter generally referred to simply as ‘data’) only to the extent necessary and for the purpose of providing a fully functional and user-friendly website, including its content and the services offered thereon.
In accordance with Article 4(1) of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the ‘GDPR’), ‘processing’ means any operation or set of operations which is carried out on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
In the following privacy policy, we inform you in particular about the nature, scope, purpose, duration and legal basis of the processing of personal data, insofar as we determine the purposes and means of the processing either alone or jointly with others. In addition, we provide information below on the third-party components we use for optimisation purposes and to enhance the quality of the user experience, insofar as this involves third parties processing data under their own responsibility.
Our privacy policy is structured as follows:
I. Information about us as the data controller
II. Rights of users and data subjects
III. Information on data processing
I. Information about us as the data controller
The data controller for this website, for the purposes of data protection law, is:
Oswald Kienbacher GmbH
Mühlgruberstrasse 35
4540 Pfarrkirchen/Bad Hall
Telephone: +43-7258-29222
Fax: +43-7258-29222-15
Email: office(at)kienbacher.at
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right
- to obtain confirmation as to whether data concerning them is being processed, to be informed of the data being processed, to receive further information on the data processing, and to obtain copies of the data (see also Article 15 of the GDPR);
- to have inaccurate or incomplete data rectified or completed (see also Article 16 of the GDPR);
- to the immediate erasure of data relating to them (see also Article 17 of the GDPR), or, alternatively, where further processing is necessary in accordance with Article 17(3) of the GDPR, to the restriction of processing in accordance with Article 18 of the GDPR;
- to receive the data concerning them and provided by them, and to have this data transmitted to other providers/data controllers (see also Article 20 of the GDPR);
- to lodge a complaint with the supervisory authority if they consider that the data relating to them is being processed by the provider in breach of data protection provisions (see also Article 77 of the GDPR).
Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out pursuant to Articles 16, 17(1) and 18 of the GDPR. However, this obligation does not apply where such notification is impossible or would involve a disproportionate effort. Notwithstanding this, the user has the right to obtain information about these recipients.
Furthermore, pursuant to Article 21 of the GDPR, users and data subjects have the right to object to the future processing of data relating to them, provided that the data is processed by the provider in accordance with Article 6(1)(f) of the GDPR. In particular, an objection to data processing for the purposes of direct marketing is permissible.
III. Information on data processing
Your data processed when you use our website will be deleted or restricted as soon as the purpose for which it was stored no longer applies, provided that there are no statutory retention obligations preventing the deletion of the data and that no contrary information is provided below regarding individual processing procedures.
Cookies
a) Session cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your device by the web browser you are using. These cookies process certain information about you to a specific extent, such as your browser or location data, or your IP address.
This processing makes our website more user-friendly, effective and secure, as it enables, for example, the display of our website in different languages or the provision of a shopping basket function.
The legal basis for this processing is Article 6(1)(b) of the GDPR, insofar as these cookies process data for the purpose of entering into or performing a contract.
If the processing does not serve the purpose of entering into or fulfilling a contract, our legitimate interest lies in improving the functionality of our website. The legal basis in this case is Article 6(1)(f) of the GDPR.
These session cookies are deleted when you close your web browser.
b) Third-party cookies
Where applicable, our website may also use cookies from partner companies with whom we collaborate for the purposes of advertising, analysis or the functionality of our website.
Please refer to the information below for further details, in particular regarding the purposes and legal bases for the processing of such third-party cookies.
c) How to manage cookies
You can prevent or restrict the installation of cookies by adjusting the settings in your web browser. You can also delete cookies that have already been stored at any time. However, the steps and measures required to do so depend on the specific web browser you are using. If you have any questions, please use the help function or documentation for your web browser, or contact its manufacturer or support team. In the case of so-called Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash Player. The steps and measures required for this also depend on the specific Flash Player you are using. If you have any questions, please also use the help function or documentation for your Flash Player, or contact the manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website are fully accessible.
Enquiries / How to get in touch
If you contact us via the contact form or by email, the data you provide will be used to process your enquiry. Providing this data is necessary for us to process and respond to your enquiry – without it, we will be unable to respond to your enquiry, or will only be able to do so to a limited extent.
The legal basis for this processing is Article 6(1)(b) of the GDPR.
Your data will be deleted once your enquiry has been fully answered and provided that there are no statutory retention obligations preventing its deletion, such as in the case of any subsequent contract processing.
Online job applications / Publication of job advertisements
We offer you the opportunity to apply for a job with us via our website. In the case of these digital applications, we collect and process your applicant and application data electronically for the purpose of handling the application process.
The legal basis for this processing is Section 26(1), first sentence, of the German Federal Data Protection Act (BDSG) in conjunction with Article 88(1) of the General Data Protection Regulation (GDPR).
If an employment contract is concluded following the application process, we will store the data you provided during the application
Online job applications / Publication of job advertisements
Online job applications / Publication of job advertisements
We offer you the opportunity to apply for a job with us via our website. When you submit a digital application, we collect and process your applicant and application data electronically for the purposes of the recruitment process.
The legal basis for this processing is Section 26(1), first sentence, of the Federal Data Protection Act (BDSG) in conjunction with Article 88(1) of the General Data Protection Regulation (GDPR).
If an employment contract is concluded following the application process, we will store the data you provided during your application in your personnel file for the purposes of standard organisational and administrative processes – naturally, in compliance with any further legal obligations.
The legal basis for this processing is also Section 26(1), first sentence, of the German Federal Data Protection Act (BDSG) in conjunction with Article 88(1) of the General Data Protection Regulation (GDPR).
If an application is rejected, we automatically delete the data provided to us two months after notification of the rejection. However, the data will not be deleted if statutory provisions – for example, due to the duty to provide evidence under the AGG – require it to be stored for a longer period of up to four months or until the conclusion of legal proceedings.
The legal basis in this case is Article 6(1)(f) of the GDPR and Section 24(1)(2) of the BDSG. Our legitimate interest lies in the defence or enforcement of our legal rights.
If you expressly consent to your data being stored for a longer period, for example for inclusion in a database of job applicants or prospective candidates, the data will be further processed on the basis of your consent. The legal basis in this case is Article 6(1)(a) of the GDPR. However, you may, of course, withdraw your consent at any time in accordance with Article 7(3) of the GDPR by notifying us, with effect for the future.
Server data
For technical reasons, in particular to ensure a secure and stable website, data is transmitted by your web browser to us or to our web hosting provider. These so-called server log files record, amongst other things, the type and version of your web browser, the operating system, the website from which you accessed our website (referrer URL), the page(s) on our website that you visit, the date and time of each visit, and the IP address of the internet connection from which our website is accessed.
The data collected in this way is stored temporarily, but not in conjunction with any other data relating to you.
This storage is carried out on the legal basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving the stability, functionality and security of our website.
The data will be deleted after seven days at the latest, provided that no further retention is required for evidential purposes. Otherwise, the data is wholly or partially exempt from deletion until an incident has been fully resolved.
General links to profiles on third-party platforms
The provider includes links on the website to the social networks listed below.
The legal basis for this is Article 6(1)(f) of the GDPR. The provider’s legitimate interest lies in improving the user experience on the website.
The plugins are integrated via a linked image. Only when the user clicks on the relevant image are they redirected to the respective social network’s service.
Once the user has been redirected, the respective network collects information about the user. This initially includes data such as the IP address, date, time and the page visited. If the user is logged into their account on the relevant network at the time, the network operator may, where applicable, associate the information collected during the user’s specific visit with the user’s personal account. If the user interacts via a ‘Share’ button on the respective network, this information may be stored in the user’s personal account and, where applicable, published. If the user wishes to prevent the information collected from being directly linked to their user account, they must log out before clicking on the graphic. It is also possible to configure the relevant user account accordingly.
The following social networks are linked by the provider:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Privacy policy: https://help.instagram.com/519522125107875
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Matomo (formerly: PIWIK)
We use Matomo (formerly ‘PIWIK’) on our website. This is open-source software that enables us to analyse how our website is used. The data processed includes your IP address, the page(s) on our website that you visit, the website from which you accessed our website (referrer URL), the length of time you spend on our website, and the frequency with which you visit one of our web pages.
To collect this data, Matomo stores a cookie on your device via your web browser. This cookie remains valid for one week.
If you have given your consent to this processing, the legal basis is Article 6(1)(a) of the GDPR. The legal basis may also be Article 6(1)(f) of the GDPR. Our legitimate interest lies in the analysis and optimisation of our website.
However, we use Matomo with the anonymisation function ‘Automatically Anonymise Visitor IPs’. This anonymisation function truncates your IP address by two bytes, making it impossible to link it to you or to the internet connection you are using.
If you do not consent to this processing, you have the option of preventing the storage of the cookie by adjusting the settings in your web browser. Further information on this can be found above under ‘Cookies’.
In addition, you have the option to opt out of the analysis of your usage behaviour. By confirming the link below, a cookie will be stored on your device via your web browser, which prevents further analysis. Please note, however, that you will need to click the link above again if you delete the cookies stored on your device.
OpenStreetMap
We use OpenStreetMap, a service provided by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB 4 0 WS, United Kingdom, hereinafter referred to simply as “OpenStreetMap”, to provide directions.
When you visit one of our web pages on which the OpenStreetMap service is integrated, OpenStreetMap stores a cookie on your device via your web browser. This enables your user settings and user data to be processed for the purpose of displaying the page or ensuring the functionality of the OpenStreetMap service. This processing enables OpenStreetMap to identify the website from which your request was sent and the IP address to which the directions should be transmitted.
If you have given your consent to this processing, the legal basis is Article 6(1)(a) of the GDPR. The legal basis may also be Article 6(1)(f) of the GDPR. Our legitimate interest lies in optimising and running our website efficiently.
If you do not consent to this processing, you have the option of preventing the installation of cookies by adjusting the relevant settings in your web browser. Further details on this can be found above under the heading ‘Cookies’.
OpenStreetMap offers, at
https://wiki.osmfoundation.org/wiki/Privacy_Policy
provides further information on the collection and use of data, as well as on your rights and options for protecting your privacy.