Data Protection - Christof Industries

DATA PROTECTION INFORMATION
for data subjects as per Art. 13 and 14 of the General Data Protection Regulations, GDPR

Responsible processor as per Art. 24 GDPR:

Christof Industries Austria GmbH (CI Austria)
Plabutscherstrasse 115, A-8051 Graz
Tel. +43 502080 – 7000
Fax. +43 502080 8999
DataProtection@christof.com

Representative:

Mr. Bernd Gottinger
+43 502080 7000
office.austria@christof.com

Mr. Thoralf Kickuth
+43 502080 7000
office.austria@christof.com

Data Protection Officer as per Art. 37 GDPR:

CI Austria is a limited liability company based on the Limited Liability Company Act and therefore a private-sector company, not an agency or public authority in the meaning of Art. 37(1) lit. a GDPR. Comprehensive processing of special category or personal data regarding criminal convictions and offenses or broad, regular and systematic monitoring of data subjects as per Art. 37(1) lit. b and c GDPR is not part of our core business. For this reason we are not obligated to nominate a Data Protection Officer. However, we established a point of contact for questions regarding data protection regulations under DataProtection@christof.com.

GENERAL TERMS AND CONDITIONS REGARDING DATA PROTECTION

Personal data are data potentially being attributed to you personally. Examples are data such as your address, name, postal address, e-mail address or phone number. Information including number of users visiting a website is not considered personal data because it cannot be attributed to one person.

Below you will find detailed information regarding the scope and purpose of your processing activities and your rights as data subjects.

Handling of Personal Data:

Below you will find detailed information regarding the scope and purpose of your processing activities and your rights as data subjects.

In this context, personal data are data potentially being attributed to you personally. Examples are data such as your address, name, postal address, e-mail address or phone number. Information including number of users visiting a website is not considered personal data because it cannot be attributed to one person.

Our processing activities:

Please find detailed information about our responsible processors within Christof Industries Group and our processing activities here.

Rights of Data Subjects:

You have the following rights:

Under Art. 15 GDPR you can demand information about your personal data that we processed. This includes information about how these data are used, the category of personal data, the categories of recipients to whom your data were or are disclosed, the expected period of storage, existence of the right to correction, deletion, restriction of processing or objection, existence of the right to object, the origin of your data unless collected by us, as well as the existence of an automated decision-making process, including profiling, and to demand meaningful information as to their details;
Under Art. 16 GDPR you can demand immediate correction of incorrect or completion of your personal data in our system;
Under Art 17 GDPR you can demand deletion of your personal data stored in our systems unless processing these data is necessary for exercising the right to free speech and information, for compliance with legal obligations, for reasons of public interest or to assert, exercise or defend legal claims;
Under Art. 18 GDPR you can demand limitations to processing your personal data if you dispute the veracity of the data, the act of processing is unlawful but you reject deletion and we no longer need the data but you do for asserting, exercising or defending legal claims or you filed an objection to processing under Art. 21 GDPR;
Under Art. 20 GDPR you can demand to receive your personal data you provided in a structured, common and machine-readable format or their transmission to another responsible entity;
Under Art. 7(3) GDPR you can rescind the consent you gave us at any time. If you do we are no longer allowed to continue data processing based on this consent in the future.
If you believe we processed your data in contravention of the law, as per Art. 77 GDPR you have the right to lodge a complaint with a regulatory body. Usually you can do so by contacting the regulatory body your local residence or place of employment or our Headquarters.
If your personal data are processed based on our legitimate interest, under Art. 21 GDPR you have the right to file an objection against processing your personal data if there are grounds to do so which stem from your particular situation or the objection is directed at direct mail. In the latter case you have a general right to object which we will implement without you providing information regarding a particular situation.

Assertion of Rights:

The decision regarding use of your personal data is yours. As a result, if you wish to exercise one of your aforementioned rights against us, please fill out the form. Along with your request, please send us a copy of your official photo ID and support us in our effort to substantiate your concern. Finally, please indicate the relationship you had with us (employee, applicant, customer, supplier) and the period of that relationship. Doing so allows us to process your request in a timely manner.

Period of Retention:

According to applicable statutory data protection requirements, based on Art. 5(1) lit. e GDPR we are obligated to delete personal data promptly once the purpose of processing is accomplished. Within this context we wish to point out that statutory obligations and deadlines for retention constitute a legitimate purpose for processing personal data.

In any case, we store and protect personal data until the business relationship comes to an end or until valid guarantee, warranty or limitation periods are expired; beyond that until the conclusion of any legal disputes that require evidence in the form of data; alternatively until the end of the third year after the last contact with a business partner.

Disclosure of Data

We do not disclose your personal data to third parties for purposes other than those listed below.

We only disclose your personal data to third parties if:

You gave explicit consent to do so as per Art. 6(1) sent. 1 lit a GDPR;
Disclosure as per Art. 6(1) sent. 1 lit f GDPR is required in the interest of the company and to assert, exercise or defend legal claims and there is no reason to assume that you have an overwhelming interest in non-disclosure of your data that is worthy of protection;
If there is a legal obligation to disclose as per Art. 6(1) sent. 1 lit c GDPR, and
Doing so is lawful under Art. 6(1) sent. 1 lit b GDPR for the purpose of executing contractual relationships with you.

Use of our Website

The use of our website is usually possible without providing personal data

We do not collect personal data until you voluntarily enter it on our website. In this case the data will be used for the purposes indicated.

Cookies

Our website uses so-called cookies. These are small text files that are stored on your terminal device with the help of the browser. They do not cause any damage.

We use cookies in order to make our offer user-friendly. Some cookies continue to be stored on your terminal device until you delete them. They allow us to recognize your browser when you visit us again.

The data processed by cookies are required for the purpose mentioned in order to preserve our legitimate interests as well as those of third parties as per Art. 6(1) sent. 1 lit. f GDPR.

If you do not agree with this practice you can set-up your browser so that it informs you about cookies being set and you can allow it on a case-by-case basis only. When deactivating cookies, the function of our website may be limited.

Server Log Files

When you visit our website, the browser used on your terminal device automatically sends data to our website server. This information is temporarily stored in what is known as a log file. In this process, the following data are recorded without your assistance and stored until they are automatically deleted:

IP address of the requesting computer,
Data and time of access,
Name and URL of the file accessed,
Website from which the website is accessed (referrer URL),
Browser used and possibly your computer’s operating system and name of your access provider.

The legal basis for data processing is Art. 6(1) sent. 1 lit f GDPR. Our legitimate interest results from the above listed purposes for data collection. We never use data collected for the purpose of drawing conclusions about you as an individual.

Analyzing our Website Visits

For the purpose of a customized design and continuous optimization of our website we use the functions of the Google Analytics web analysis service. It is supplied by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and you can use them to analyze website use. The data generated about your use of this website are usually transmitted to a Google server in the US and stored there.

We utilize Google Analytics only with activated IP anonymisation. This means that Google abbreviates your IP address on this website in advance within the EU Member States or other countries that are party to the treaty on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google Server in the US and abbreviated there. Google uses this information on behalf of the website operator in order to analyze your use of the website for the purpose of compiling reports about website activities and provide additional services associated with the use of the website and Internet to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

You can prevent storing cookies by configuring the relevant settings in your browser software; however, we want to point out that in this case you may not be able to take full advantage of the functions of this website. Apart from that, you can prevent collection of the data created by the cookie and associated with your website use (incl. IP address) by Google as well as processing of these data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can find further information regarding data use for advertising purposes by Google, settings and options to object on the websites of Google: https://www.google.com/intl/de/policies/privacy/partners/, (“Data use by Google when you use websites or apps from our partners“), http://www.google.com/policies/technologies/ads (“Data use for advertisement purposes“), http://www.google.de/settings/ads (“Managing information used by Google in order to show you advertisements“) and http://www.google.com/ads/preferences/ (“Determine the kind of advertisements Google shows to you“).

Contents

Our website may contain links to third-party websites (“external links”). These links are subject to liability by their respective operators. We have no influence whatsoever on the current and future design and the contents of the linked web pages. The fact that external links are configured does not mean that their contents are our contents. Without concrete information regarding violations of the law, we are unable to check external links on an ongoing basis nor is it reasonable to expect us to do so. However, if we become aware of violations of the law, these external links are deleted without delay.

Email

If you send inquiries via email, your particulars, including the contact data you provided, are stored for the purpose of processing your inquiry and any subsequent inquiries. We point out that transmission of data via the Internet (e.g. when communicating via email) is subject to security gaps and cannot be protected seamlessly from access by third parties.

Commercial Advertisements

Use of our contact data on our website’s “Legal Notice” page for commercial advertisement is absolutely unwelcome unless with our written consent. All individuals named on this website hereby object to any commercial use and disclosure of these data.

Graz, 25.5.2018
Christof Industries Austria GmbH
DataProtection@christof.com