Privacy Policy
VACE Group Privacy Policy - hereinafter referred to as "VACE" for short.
1. Scope of application
This privacy policy applies to VACE and all is affiliates within the VACE Group:
VACE Beteiligungs GmbH
Lunzerstraße 78, BG33, PO Box36
4030 Linz
Austria
VACE Engineering GmbH
Lunzerstraße 78, BG33, PO Box36
4030 Linz
Austria
VACE Systemtechnik GmbH
Wahringerstraße 34, BG11
4030 Linz
Austria
2. Purpose of data processing
VACE processes the personal data of employees, partners, customers, suppliers and interested parties for the purpose of carrying out its business activities and for the fulfilment of related legal and contractual requirements.
2.1 Processing of customer, partner and supplier data
VACE stores and processes the personal data provided by interested parties, customers, partners and suppliers in order to prepare offers and inquiries and to process orders and to fulfil the associated contractual and legal obligations. In order to fulfil legal obligations, the data is also forwarded to authorities and public bodies.
2.2 Applicants
The contact data and application documents submitted in the course of an application are electronically processed by VACE for the purpose of selecting suitable candidates for an employment relationship. The data is forwarded to our customers for the purpose of hiring or personnel placement. In the event of a rejection, the application documents will only be kept on file if applicants give consent.
2.3 Newsletter
In order to keep our customers regularly informed with news about our company and current developments, we send a regular infoletter to existing customers.
If you do not wish to receive this service, you can object to it at any time. Simply send an informal e-mail to the sender.
2.4 Website & Cookies
2.4.1 IP-Address
When you visit our website, information is automatically stored on the web server. This includes the browser used, the operating system used, which page brought you to our website, the IP address, the time of access and other information. These data is pseudonymized from the point of view of VACE and cannot be assigned to any unique persons without further data sources.
VACE does not evaluate these data as long as there is no illegal use of the website.
2.4.2 Google Analytics
Our website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note if you do this you may not be able to use the full functionality of this website. By using our website, you agree to the processing of the data collected about you by Google in the manner and for the purpose described above.
2.4.3 Google Maps
This website has embedded Google Maps to provide a better visualization of our offices. Due to the integration of the Google Maps map, the visit of the category "Locations" will lead to a call of the Google servers due to technical necessity. For the associated use of data, we refer to the privacy policy of Google: policies.google.com/privacy
2.5 Social Media
For marketing purposes and as communication channels, VACE uses the social networks Facebook, LinkedIn and XING and operates profiles or a so-called fan page there.
On our website you will find corresponding links which will take you directly to the respective profiles of VACE. These links can be recognized by a LinkedIn, XING or Facebook logo and are only activated by clicking on the visitor of the website. The mere visit of the VACE website does not lead to the transfer of data to LinkedIn, XING or Facebook.
2.5.1 Xing
To the best of our knowledge, XING does not store any of the user's personal data when they access our website. According to its own statements, XING also does not store IP addresses. In addition, no evaluation of user behaviour regarding the use of cookies in connection with the "XING Button" is carried out.
Further information on this can be found in XING's privacy policy at: www.privacy.xing.com/en/data protection declaration
2.5.2 LinkedIn
To the best of our knowledge, LinkedIn does not store any of the user's personal data when they access our website. According to its own statements, LinkedIn also does not store IP addresses. In addition, no evaluation of user behavior regarding the use of cookies in connection with the "LinkedIn Button" is carried out. Further information on this can be found in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy
2.5.3 Facebook
By clicking on the link, you will be redirected to the profile page of VACE (fan page).
If the visitor is a Facebook member and does not want Facebook to collect data about him or her and link it to his or her membership data stored on Facebook, he or she must log out of Facebook before visiting the website. We would like to point out that even if the visitor is logged out, as well as non-members, data will still be stored by Facebook. According to Facebook, non-members will only have an anonymized IP address saved. Further information can be found in the Facebook privacy policy: de-en.facebook.com/privacy/explanation
Facebook Insights
Our profile page uses the "Facebook Insights" service. This service provides statistics and insights into the behavior of users of our profile page. We use this data to continuously evaluate and improve our service. From the point of view of VACE, the data provided by Facebook Insights is anonymized and cannot be assigned to any direct person. We would like to point out that the use of Facebook Insights constitutes a joint responsibility and that the following agreement concluded between VACE and
Facebook Ireland Limited applies in this respect: www.facebook.com/legal/terms/page_controller_addendum
You can find more information in the Facebook privacy policy:
de-en.facebook.com/privacy/explanation
3. Principles of processing personal data
The processing of personal data is based on strict principles which consider the protection and security of data and the rights of the persons concerned as the highest good.
Lawfulness & Transparency
Data processing is carried out in a lawful manner, in good faith. The person concerned is informed of the planned processing and handling of the data when the data is collected. Thus, data subjects are informed at least about the following points:
- Person responsible for data processing
- Purpose of data processing
- Legal basis of the processing
Purpose limitation
The data is collected and processed for specified, clear and legitimate purposes. The data will not be processed in a way incompatible with these purposes.
Data minimization
Only those data will be collected and processed that are absolutely necessary for the specified purposes. If it is possible to achieve the purpose and the effort is reasonable, only anonymized data will be processed.
Storage limitation and deletion
Personal data is deleted as soon as the purpose for which it was originally collected expires and legal retention periods do not prevent deletion.
If, in individual cases, there are interests in these data that are worthy of protection, they will continue to be stored until the interest worthy of protection has been legally clarified.
Data security
Data security applies to personal data. The data must be treated confidentially and is protected by appropriate organizational and technical measures against unauthorized access, unlawful manipulation or disclosure as well as against loss and destruction.
Factual correctness
Personal data must be kept correct, complete and up-to-date. Appropriate measures are taken to correct outdated, incorrect or incomplete data.
4. Obligation to maintain data secrecy
All VACE employees and the employees of the group companies are contractually bound to secrecy and are regularly informed and trained in the safe handling of personal and other critical data.
5. Data security
Protecting the confidentiality, availability and integrity of data is an essential task of the VACE Group. This applies equally to trade secrets, customer data, personal data and other critical information.
For this purpose, technical and organizational security measures are established and continuously improved according to the state of the art and internationally recognized best practices and security standards.
6. Data protection officer
VACE is not in the need to appoint a data protection officer, as Article 37, paragraph 1 of the EU DSGVO is not applicable. In accordance with the importance of data protection, VACE has decided to voluntarily appoint a data protection officer. This officer is available to the data subjects and the data protection authority as a contact point and is responsible for data protection issues within the group of companies.
The data protection officer for the VACE Group is:
Dr. Thomas Schweiger, LL.M. (Duke)
certified data protection officer
SMP Schweiger Mohr & Partner Attorneys at Law OG
Huemerstrasse 1 / Kaplanhofstrasse 2, 4020 Linz
e-mail: [email protected]
In addition, a data protection committee has been set up, consisting of employees from various departments, external consultants, legal supporters and the data protection officer. This body has the task of continuously reviewing and improving VACE's data protection measures.
The data protection officer and the committee can be reached via [email protected].
7. Rights of the data subjects
Information
Data subjects may at any time request information about which personal data concerning them is being processed and the purposes of such processing.
Correction
Data subjects have the right to demand the immediate correction of incorrect personal data concerning them.
Restriction
Data subjects shall have the right to have the processing limited if the accuracy of the data concerning them is disputed, if the processing is unlawful, if the data are no longer needed for the processing or if the data subjects have objected to the processing.
Revocation
Data subjects have the right to object at any time to the processing of personal data concerning them.
Transferability
Data subjects have the right to receive the personal data concerning them which they have provided to VACE in a structured, common and machine-readable format. They also have the right to request the transfer of these data to another person in charge, if technically feasible.
The transferability applies only to personal data processed using automated procedures.
Cancellation - Right to be forgotten
The data subject has the right to request the immediate deletion of personal data concerning him/her if the legal basis for processing the data is missing or ceases to exist, if the data processing is opposed, if the data processing is unlawful and if no legal retention periods make deletion impossible.
Data security also has a high priority in relation to the rights of data subjects, which is why the assertion of data subject rights is only possible after the data subject has been identified beyond doubt.
You also have the right to complain to the data protection authority at any time: Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, telephone: +43 1 52 152-0, e-mail: [email protected]
8. Data transmission
Personal data will only be transferred to recipients outside the Group and to recipients in EU third countries in accordance with applicable laws and on a lawful basis and in compliance with the highest level of confidentiality and data security. In the context of the group-wide processing of data, personal data is exchanged between companies in the VACE group. This exchange is regulated by contracts for joint processing and by contract processing agreements. VACE also uses different processors for processing. All processors are contractually bound by a processor agreement to comply with the legally applicable data protection provisions.
9. Continuous control and improvement
VACE attaches great importance to the continuous improvement of quality and processes. Compliance with data protection guidelines and applicable legislation and the effectiveness of data protection and data security measures are continuously measured and increased in order to ensure an optimal process of data protection measures.