Privacy – Center himberg

Privacy policy (for subsidiaries)

The operator of this website is Realbau GmbH, Brockenweg 2, 6060 Hall in Tirol, phone: +43 5223 90909, e-mail: info@realbau.at

You can not only rely on our Tyrolean roots and our expertise when it comes to letting, but also on our handshake quality in data protection with all legal requirements of the EU General Data Protection Regulation (GDPR), as well as all relevant Austrian laws.

We are the operators of this website and you will find full information about us and contact details in the legal notice above. If you have any questions, please feel free to contact us at any time.

We only use your personal data as described in the privacy policy. You will also find the legal basis here.

What are the rights of data subjects?

For questions and the assertion of data subject rights regarding data protection, you can use the options listed in the legal notice to contact us by telephone, in writing or in person.

You can assert the data subject rights listed below if the respective requirements are met. Please note that you may have to provide suitable proof of identity in advance.

Right to information: You can request confirmation – usually free of charge – as to whether your personal data is being processed and request information about this data and the information in accordance with Art. 15 GDPR.

Right to rectification if we process incorrect or incomplete data about you (Art. 16 GDPR)

Right to erasure of personal data concerning you if the requirements of Art. 17 GDPR are met.

Right to restrict the processing of your data in accordance with Art. 18 GDPR.

Right to data portability and to receive the personal data that you have provided by automated means in a structured, commonly used and machine-readable format (Art. 20 GDPR).

In the case of processing based on a (non-overriding) legitimate interest, you have the right to object at any time in accordance with Art. 21 GDPR. In the case of processing for the purpose of direct marketing and associated profiling, this right exists without restriction.

You can revoke your consent to the processing of personal data at any time; this does not affect the legality of the processing carried out up to the time of revocation.

You have the right to lodge a complaint with a competent supervisory authority (data protection authority), in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the General Data Protection Regulation or your rights as a data subject have been infringed. We would appreciate it if you could contact us beforehand and give us the opportunity to comment.

A list of the supervisory authorities can be found here: http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.

For what purposes do we process personal data?

Operation of the website and our IT systems (maintenance and security)
Processing in connection with the provision of goods and services
Processing for marketing (customer inquiries, customer support and advertising)
Public relations and company archive
Data processing for application procedures
Communication

Operation of the website and our IT systems (maintenance and security)

For the operation and maintenance of IT systems and company websites as well as to maintain data security and to prevent abusive or fraudulent behavior, we process personal data of our users only to the extent necessary to provide the services and our content and services.

We process your data for pre-contractual measures or contractual obligations (e.g. fulfillment of terms and conditions, terms of use, Art. 6 para. 1 lit. b GDPR), insofar as required by law (Art. 6 para. 1 lit. c GDPR, e.g. consent to cookie use, maintenance of appropriate data security) and on the basis of Art. 6 para. 1 lit. f GDPR for the following (overriding) legitimate interests:

Ensuring a functional and attractive website,
Maintaining data security,
Efficient internal administration within the Group / corporate group

However, data published by users of our services themselves (e.g. comments) are public and potentially accessible worldwide. If necessary, the data may be transmitted to law enforcement authorities, courts, etc. for the assertion of legal claims by the controller or third parties.

We transfer your data to third parties if we are legally obliged to do so. Furthermore, in individual cases we use processors to process your data as part of the contractual relationship or for analysis, information and optimization purposes. This includes, for example, service providers in the area of marketing and market research, transport and delivery companies, tax consultants or IT service providers. However, we only transfer your data to such processors on the basis of an agreement that complies with the legal framework and only for the purposes of order processing.

The controller is part of a group of companies. To ensure efficient internal administration, we therefore also make use of affiliated companies for processing activities. The group of companies has an overriding legitimate interest in this (Recital 48 of the GDPR)

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

Information about the browser type and version used
The user’s operating system
The user’s internet service provider
The IP address of the user, session ID of the browser
Date and time of access
Data on the end device (device ID, screen resolution, language and country settings …)
Websites from which the user’s system accesses our website
Websites that are accessed by the user’s system via our website.

Data that is necessary for the functionality of the website is only processed and stored for the duration of your visit to our website. In addition, log data and IP addresses are generally stored for 7 days to prevent attacks on our systems, to clarify data security incidents and to assert claims for damages in the event of an incident until the incident is finally resolved.

There is no legal or contractual obligation to provide the data, but this is necessary for the functionality of the website and our IT systems, which may otherwise be impaired.

Some of the data collected will be further processed for marketing purposes. We draw your attention to this and to your right to object at the time of collection. We ask you to note point 3 of the privacy policy in this regard.

The processing of the data is carried out under joint responsibility in accordance with Article 26 GDPR with Fröschl AG & Co KG, Brockenweg 1, 6060 Hall in Tirol, phone 05223-571560, office@froeschl.at.

Processing in connection with the provision of goods and services, in particular for the distribution of our products

We collect personal data for the delivery of our products and the provision of our services as well as for the use of third-party services in business relationships.

The legal basis for the processing of the data are pre-contractual measures or contractual obligations (Art. 6 para. 1 lit. b GDPR), legal and statutory obligations (Art. 6 para. 1 lit. c GDPR, in particular tax and duty law) and the following (overriding) legitimate interests (Art. 6 para. 1 lit. f GDPR):

Assertion or defense of own legal claims, in particular for reasons of warranty and product liability
Reduction of default risks (also for third parties)
Responding to customer inquiries about deliveries and services; there is a right to object at any time, provided there are no overriding interests (e.g. liability) to the contrary
Efficient internal administration within the Group / corporate group

If necessary, personal data is transferred to the following categories of recipients:

Banks (for the processing of payment transactions)
Legal representatives, courts in the event of a dispute
Public accountant (for auditing purposes)
Competent administrative authorities, esp. Tax authorities
Debt collection agencies for debt recovery (abroad only if the debt has to be collected abroad)
Third-party financiers such as leasing or factoring companies and assignees, if the delivery or service is financed by third parties in this way
Contractual or business partners who participate or are to participate in the delivery or service (e.g. delivery services)
Insurance on the occasion of the conclusion of an insurance contract for the delivery/service or the occurrence of an insured event
Authorities and institutions for the preparation of legally required (official) statistics
Customers (recipients of services)
Credit agencies

A transfer to third countries or international organizations only takes place in these cases if either an adequacy decision pursuant to Art. 45 GDPR exists or the requirements of Art. 49 para. 1 lit. b, c or e GDPR are met (necessity for the implementation of pre-contractual measures at the request of the data subject or in their interest, assertion, exercise or defense of legal claims) or consent pursuant to Art. 49 para. 1 lit. a GDPR exists.

We transfer your data to third parties if we are legally obliged to do so. Furthermore, in individual cases we use processors to process your data as part of the contractual relationship or for analysis, information and optimization purposes. This includes, for example, transport and delivery companies, tax consultants or IT service providers. However, we only transfer your data to such processors on the basis of an agreement that complies with the legal framework and only for the purposes of order processing.

If there is a legitimate interest (amount of the order), we will check the credit rating before accepting an order.

If you have activated the so-called Do-Not-Track function (“DNT”) in your browser, your visit to the website will automatically not be recorded by the web analysis tool. However, this does not work with every browser. To activate DNT in your browser, please refer to the help function of your browser if you do not know how to activate it.

Until the end of the business relationship or until the expiry of the guarantee, warranty, limitation and statutory retention periods applicable to the controller; in addition, until the end of any legal disputes in which the data is required as evidence. In particular, at least 10 years to prove the fulfillment of tax and duty obligations (BAO), at least 30 years for real estate transactions. In the case of services for which claims for damages can be asserted in accordance with the Austrian Civil Code (ABGB) or other titles (e.g. product liability), for the required duration.

The collection of the mandatory data required by us is necessary for the conclusion of a contract.

Processing for marketing (customer inquiries, customer support and advertising)

Customer service and marketing (direct advertising) for the purposes of the controller or joint controllers, including by means of corresponding newsletters and responding to customer inquiries, sending advertising by post, invitations to events, competitions.

Legitimate interests on the basis of Art. 6 para. 1 lit. f GDPR:

Advertising for goods and services of the Group
Customer acquisition and customer loyalty (bonus programs for regular customers)
Improving the attractiveness of the offers

You have an informal right to object to processing for these purposes at any time and may request the erasure or restriction of processing. We draw your attention to your rights in the case of direct data collection.

If necessary, personal data is transferred to the following categories of recipients: delivery services, printers, newsletter service providers, website service providers, IT service providers

The controller is part of a group of companies. We therefore also make use of affiliated companies for processing activities in order to ensure efficient internal administration. The group of companies has an overriding legitimate interest in this (Recital 48 of the GDPR). Processing for marketing and customer loyalty measures is carried out exclusively for the purposes of the controller with whom a business relationship exists; processing for such purposes of the group of companies requires the prior consent of the data subject.

We use cookies, web beacons and Google Analytics when you visit our websites. You can object to their use in each case by deactivating the function in your browser.

Postal addresses and e-mail addresses are stored for the duration of advertising measures or until an objection is made or until a newsletter is unsubscribed; beyond this, storage takes place if the restriction of processing is requested or processing for other purposes requires a longer storage period (in particular in accordance with point 2 of the data protection declaration).

There is no obligation to provide data.

In the case of customer inquiries, further processing may take place in connection with deliveries and services, depending on the type of inquiry and the implementation of the processing, see point 2 of the data protection declaration for more details.

Public relations and company archive

Provision of information in at least local or regional public interest about the tasks and achievements of the person responsible and safeguarding of essential information for the documentation of the history and development of the company and selected acting persons in management functions, insofar as there is a public or legitimate private interest in archiving.

You have an informal right to object to processing for these purposes at any time on grounds relating to your particular situation and may request the erasure or restriction of processing. We draw your attention to your rights in the case of direct data collection and in the context of invitations to events.

The legal basis for processing is the freedom of expression pursuant to Art. 13, 17, 17a of the Austrian Constitution and Art. 10 ECHR and, insofar as journalistic purposes are pursued, pursuant to Art. 85 GDPR in conjunction with Section 9 para. 2 DSG (for image data also § 12 para. 2 no. 4 DSG, insofar as there is an overriding interest in the public presentation of events of contemporary history); otherwise, the consent of the data subjects is obtained in each case, in particular for the publication of image data (Art. 6 para. 1 lit. a DSGVO / Art. 9 para. 2 lit. a DSGVO). Permanent archiving is carried out on the basis of a public or at least a corresponding private documentation interest (for image data § 12 para. 3 no. 3 DSG) and for further processing for (contemporary) historical and scientific purposes in accordance with Art. 89 DSGVO (§ 7 para. 1 no. 1 and 2 DSG, in individual cases consent of the data subjects in accordance with § 7 para. 2 no. 2 DSG), as far as significant persons and events in the company’s history are concerned. Insofar as persons are depicted by chance during the documentation of public events, no identifying processing takes place.

There are no intended recipients, but publication is intended for the general public and, if made on the Internet, is potentially visible to everyone worldwide.

Where necessary for the purposes described, data on individuals in public life is collected from publicly available sources (name, public function, presence with time, place and occasion of the documented event); in the case of private individuals, additional data may be collected from the personnel administration (name, age, years of service in the case of anniversaries).

The storage period is limited to the period for which the data is suitable and usable for journalistic purposes; if there is a corresponding interest in documentation, the data is archived permanently for later (re-)use for the purposes described in this processing activity.

There is no obligation to provide data.

It is only used for the intended purposes and, if applicable, in accordance with Art. 5 para. 1 lit. b GDPR for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes.

Data processing for application procedures

Temporary storage of personal data of applicants in unsolicited applications and in application procedures with job advertisements as well as use for the purpose of applicant selection and conclusion of an employment contract.

We process applicant data on the basis of Art. 6 para. 1 lit. b GDPR (pre-contractual measures) and Art. 6 para. 1 lit. f GDPR in order to be able to contact you for the intended storage period for applicant selection and, if necessary, to be able to check your details in individual cases if this is in our interest for a position due to particularly high demands on your trustworthiness or is necessary in the interest of third parties.

Your data will only be disclosed to our employees if necessary. If references are provided, contact may be made in individual cases. In justified cases, your data may also be checked with third parties if there is a corresponding overriding interest (e.g. qualifications and university degrees submitted). In these cases, data will only be transferred to third countries or international organizations if there is either an adequacy decision pursuant to Art. 45 GDPR or if the requirements of Art. 49 para. 1 lit. b GDPR (necessity for the implementation of pre-contractual measures at the request of the data subject) or consent pursuant to Art. 49 para. 1 lit. a GDPR exists.

When contacting references provided by you, data and information about your previous employment or activity as well as subjective assessments of your work performance may be collected by the relevant third parties. (Storage of this data and information is not intended).

If you have applied for an open position, we will store your personal data for a maximum of 3 years from the end of the application process and then delete it, whereby you can object informally at any time from eight months after the end of the process.

If you have submitted an unsolicited application, we will store your documents for a maximum of 3 years in order to be able to contact you in the event of suitable vacancies, whereby you can informally object to the processing at any time.

In order to carry out the application process, it is necessary for you to provide proof that you have the qualifications required for the position to be filled and to provide contact details. In individual cases, depending on the requirements for filling a position, it may also be necessary for us to request further data from you (e.g. an extract from the criminal record). If you do not provide the mandatory data, your application cannot be considered for the position in question.

If an employment relationship is established, your application documents will be used for personnel administration purposes, with the exception of particularly sensitive data (e.g. criminal record extract). All other information will be provided to you before the contract is concluded.

Communication

If you contact us using the form on the website, by e-mail or by telephone, the data technically necessary for communication (depending on the means of communication selected) will be collected and processed, such as telephone number, e-mail address, time (if applicable, duration) of the communication process, etc. Incoming e-mails are also processed by means of spam filters, firewalls, virus scanners, etc. for the purposes specified in point 1 of this declaration. Incoming emails are also processed by means of spam filters, firewalls, virus scanners, etc. for purposes in accordance with point 1 of this declaration.

The data you provide will be used for the purpose of processing the request on the basis of the corresponding legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. The other purposes of processing depend on the content of the communication and are specified in points 1-6 of this privacy policy.

In the case of processing for purposes pursuant to Art. 6 para. 1 lit. e and f GDPR in this privacy policy, you have the right to object to the processing for these purposes at any time without any formal requirements for reasons arising from your particular situation and may request the erasure or restriction of processing. We draw your attention to your rights when data is collected directly (e.g. in online forms). This right does not apply if we have to process your request or a communication process for other reasons (e.g. contractual obligations, legal obligations, product liability) and store it for the period specified in this privacy policy.

Depending on the purposes of a communication process, a corresponding transmission may be required in accordance with points 1 to 6 of this privacy policy.

Whenever contact is made, our systems automatically collect data and information from the means of communication or technical systems of the data subjects.

The following data is collected: Contact details of the data subject (e.g. telephone number, e-mail address, etc.), time of the communication process (date, time), consent to the recording, duration of the conversation if applicable, voice message if applicable (answering machine), communication content if applicable (text message).

The storage period depends on the time required to carry out the communication process until completion; in addition, depending on the purpose of the communication process, longer storage may be necessary, which is indicated in points 1-6 of this data protection declaration.

There is no obligation to provide the data.

Depending on the content of your request or the communication process, further processing will take place for all the purposes listed in the previous points of this privacy policy.

Cookies

In order to make visiting our website attractive, to enable the use of certain functions and to display suitable products, we use so-called cookies on the various pages in addition to the aforementioned data. This serves to safeguard our legitimate interests in an optimized presentation of our offer, which predominate in the context of a balancing of interests. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies). The duration of storage can be found in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. If you do not accept cookies, the functionality of our website may be restricted.

Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information collected by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. We would like to point out that on our websites Google Analytics has been extended by the code “gat._anonymizeIp();” in order to ensure anonymized collection of IP addresses. At our request, your IP address is therefore only recorded by Google in abbreviated form, which ensures anonymization and does not allow any conclusions to be drawn about your identity. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. A transfer of this data by Google to third parties only takes place on the basis of legal regulations or in the context of order data processing. Under no circumstances will Google combine your data with other data collected by Google.

You can find more information about Google Analytics and data protection at: https://support.google.com/analytics/answer/6004245?hl=de

Right to information

In accordance with the Data Protection Act, you have a right to free information about your stored personal data. If you have any questions about this privacy policy, please contact us at Realbau GmbH, Brockenweg 2, 6060 Hall in Tirol, phone: +43 5223 90909, email: info@realbau.at

Status of the privacy policy: 10.05.2024