Data protection

Privacy policy

Data protection declaration in accordance with Art. 13, 14 GDPR – fulfillment of information obligations

Thank you for visiting our website. In this Privacy Policy, we provide detailed information about how we process your data.

This Policy applies both to data processing within Saubermacher Outsourcing GmbH and to the use of our website. The legal bases for this data processing are the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

All personal designations always refer to all genders. The use of the masculine form serves solely to improve readability.

1 General Data Processing

1.1 Controller

The controller pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is

Saubermacher Outsourcing GmbH
Hans-Roth-Straße 1
8073 Feldkirchen bei Graz
Tel: +43 59800 7000
Email: outsourcing@saubermacher.at

The company has appointed a Data Protection Officer. Mag. Birgit von Maurnböck, VMCON OG, Opernring 2, 8010 Graz, can be contacted at: datenschutz@saubermacher.at

1.2 Data Processing pursuant to Art. 13 GDPR

We process the data that various persons provide to us themselves, for example in the context of an enquiry by email, for the initiation and conclusion of a contract or a business relationship.

1.3 Data Processing pursuant to Art. 14 GDPR

In addition, we process data of persons who may be part of a contractual relationship and which we have lawfully received as part of information provided by third parties (e.g. managing directors provide us with the data of their employees).

1.4 Data Subjects

We process the following data from prospective customers: company, name of the contact person, and professional contact and address data.

We process the following data from customers: company, titles and names of contact persons, professional address and contact data, bank details, and contract data.

We process the following data from suppliers and business partners: company, titles and names of contact persons, professional address and contact data, bank details, and contract data.

At the request of authors, we publish their names. As soon as use of the works is discontinued, the personal data are automatically deleted.

1.5 Legal Bases

The legal bases for data processing are:

Consent (e.g. when processing your email address for advertising purposes) pursuant to Art. 6 para. 1 lit. a GDPR
Contract initiation and performance pursuant to Art. 6 para. 1 lit. b GDPR
Legal obligations (e.g. statutory retention and documentation obligations, publication obligations under copyright law) pursuant to Art. 6 para. 1 lit. c GDPR
Legitimate interests of our company (e.g. use of software) pursuant to Art. 6 para. 1 lit. f GDPR

For each data processing activity described below, we will inform you separately about the legal basis and the purpose of processing.

1.6 Transmission of Data

Data are transmitted exclusively for the purpose of contract fulfilment pursuant to Art. 6 para. 1 lit. b GDPR in order to provide you with our services.

Transmission within the Group: The personal data collected are transmitted within the Group to parent companies and subsidiaries where necessary. This is required because various Group companies provide IT services, among other things. The transmission is carried out on the basis of internally concluded agreements.
Transmission to processors: We cooperate with processors to whom personal data are transmitted in order to provide services efficiently. These include companies that perform tasks such as contract fulfilment, payment processing, account management, newsletter distribution and IT services.
Other transmission: In certain cases, such as in connection with statutory obligations or legal disputes, personal data may be passed on to authorities or lawyers.

1.7 Retention/Deletion of Data

Contractual retention obligations: After termination of a contractual relationship or after the end of contractually agreed periods, personal data are deleted or anonymised as soon as no statutory retention obligations prevent this.
Withdrawal of consent: If consent to the processing of personal data is withdrawn, the data are deleted or anonymised unless there is another legal basis for the processing.
Statutory retention obligations: The controller is subject to various statutory retention obligations. After expiry of these statutory retention obligations, personal data are automatically deleted. It may occur that personal data must be retained for legal reasons despite the withdrawal of consent or the expiry of contractually agreed periods and are only deleted at a later point in time (after expiry of the respective statutory periods). The EU regulations and laws to be observed by the controller are listed below (without any claim to absolute completeness):

Federal Fiscal Code (Bundesabgabenordnung, BAO)
Austrian Commercial Code (Unternehmensgesetzbuch, UGB)
Trade Regulation Act (Gewerbeordnung, GewO)
Austrian General Civil Code (Allgemeines bürgerliches Gesetzbuch, ABGB)
Value Added Tax Act (Umsatzsteuergesetz, UStG)
Whistleblower Protection Act (HinweisgeberInnenschutzgesetz, HSchG)
Data Protection Act (Datenschutzgesetz, DSG)
General Data Protection Regulation (Datenschutz-Grundverordnung, DSGVO/GDPR)

2 Contact

3 Application Management

4 Postal Advertising Mailings

5 Video Surveillance

6 Social Media Presence

7 Whistleblower System – Whistleblowing Online Portal

8 Data Processing when Visiting our Website

8.1 Informational Use of the Website

During purely informational use of the website, we only collect the personal data that your browser transmits to our server (server log files). If you wish to view our website, we collect no more than the data that are technically necessary for us to display our website to you and to ensure stability and security:

IP address
Date and time of the request
Time zone difference to Coordinated Universal Time (UTC)
Content of the request (specific page)
Access status/HTTP status code
Website from which the request originates
Browser
Operating system and its interface
Language and version of the browser software.

This data is not combined with personal data sources. We reserve the right to examine this data retrospectively if we become aware of specific indications of unlawful use and, if a hacking attack has occurred, to pass the data on to law enforcement authorities. No further disclosure to third parties takes place.

Legal basis: Art. 6 para. 1 lit. f GDPR

8.2 Cookies

When you use our website, cookies are stored on your computer. Cookies are small text files that are assigned to the browser you use and stored on your hard drive. They enable us or third-party providers to collect certain information. Cookies cannot execute programs or transmit viruses to your computer.

The information contained in cookies is used, for example, to determine whether you are logged in, which data you have already entered, or to recognise you as a user when a connection is established between our web server and your browser.

We distinguish between technical cookies, which serve exclusively to ensure the operation of a website, and other cookies that are set by us or third-party providers for the purposes of statistical analysis, tracking or advertising/marketing.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest; for technical cookies), Art. 6 para. 1 lit. a GDPR (consent; for all other cookies)

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

8.3 Borlabs Cookie (Consent Management)

Our website uses the consent management tool “Borlabs Cookie” provided by Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany.

The service sets a technically necessary cookie (borlabs-cookie), which is used to store your cookie consent. The consent management tool records and stores the cookie choices of each user of our website. The explicit consent of the website visitor ensures that statistical and marketing cookies are only set after consent has been given.

By integrating Borlabs Cookie on our own server, we guarantee that no data are passed on to third parties.

Further information can be found in the Borlabs Privacy Policy at: https://de.borlabs.io/datenschutz/.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

9 Data Processing in connection with Google Services

We use services of Google Ireland Limited (“Google”) on our website, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland.

Further information is available in Google’s Privacy Policy at https://policies.google.com/privacy?hl=de.

9.1 Google Analytics

We use Google Analytics on our website, a tool that allows us to analyse how our website is used. With Google Analytics, we can see how many people visit our website and how long they stay.

This website uses the “activation of IP anonymisation” function (i.e. Google Analytics has been extended by the code “gat._anonymizeIp();” in order to ensure anonymised collection of IP addresses, known as IP masking). This means that your IP address is shortened by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area before transmission. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

Google uses the information collected to analyse your use of the website, to compile reports on website activity and to provide further services relating to website use.

Your IP address transmitted by your browser to Google Analytics is not combined with other data held by Google. However, Google may pass this information on to third parties if this is required by law or if third parties process these data on behalf of Google.

You can prevent cookies from being stored on your computer by selecting the appropriate settings in your browser. Please note, however, that in this case you may not be able to use all functions of our website in full.

More detailed information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html and at https://support.google.com/analytics/answer/6004245?hl=de.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

9.2 Google Tag Manager

We use Google Tag Manager on our website, which enables us to integrate and manage website tags such as tracking codes or conversion pixels. It collects data on the website and forwards them to connected analysis tools, which store and evaluate these data. Google Tag Manager does collect data (e.g. IP address), but it does not store them and has no access to them. It merely acts as an interface between the website and the analysis software.

More detailed information is available here: https://www.google.com/intl/de/tagmanager/faq.html.