1. Scope of application
VACE Beteiligungs GmbH
Lunzerstraße 78, BG33, PO Box36
VACE Engineering GmbH
Lunzerstraße 78, BG33, PO Box36
VACE Systemtechnik GmbH
Wahringerstraße 34, BG11
2. Purpose of data processing
VACE processes the personal data of employees, partners, customers, suppliers and interested parties for the purpose of carrying out its business activities and for the fulfilment of related legal and contractual requirements.
2.1 Processing of customer, partner and supplier data
VACE stores and processes the personal data provided by interested parties, customers, partners and suppliers in order to prepare offers and inquiries and to process orders and to fulfil the associated contractual and legal obligations. In order to fulfil legal obligations, the data is also forwarded to authorities and public bodies.
The contact data and application documents submitted in the course of an application are electronically processed by VACE for the purpose of selecting suitable candidates for an employment relationship. The data is forwarded to our customers for the purpose of hiring or personnel placement. In the event of a rejection, the application documents will only be kept on file if applicants give consent.
In order to keep our customers regularly informed with news about our company and current developments, we send a regular infoletter to existing customers.
If you do not wish to receive this service, you can object to it at any time. Simply send an informal e-mail to the sender.
2.4 Website & Cookies
When you visit our website, information is automatically stored on the web server. This includes the browser used, the operating system used, which page brought you to our website, the IP address, the time of access and other information. These data is pseudonymized from the point of view of VACE and cannot be assigned to any unique persons without further data sources.
VACE does not evaluate these data as long as there is no illegal use of the website.
2.4.2 Google Analytics
2.4.3 Google Maps
2.5 Social Media
For marketing purposes and as communication channels, VACE uses the social networks Facebook, LinkedIn and XING and operates profiles or a so-called fan page there.
On our website you will find corresponding links which will take you directly to the respective profiles of VACE. These links can be recognized by a LinkedIn, XING or Facebook logo and are only activated by clicking on the visitor of the website. The mere visit of the VACE website does not lead to the transfer of data to LinkedIn, XING or Facebook.
By clicking on the link, you will be redirected to the profile page of VACE (fan page).
Our profile page uses the "Facebook Insights" service. This service provides statistics and insights into the behavior of users of our profile page. We use this data to continuously evaluate and improve our service. From the point of view of VACE, the data provided by Facebook Insights is anonymized and cannot be assigned to any direct person. We would like to point out that the use of Facebook Insights constitutes a joint responsibility and that the following agreement concluded between VACE and
Facebook Ireland Limited applies in this respect: www.facebook.com/legal/terms/page_controller_addendum
3. Principles of processing personal data
The processing of personal data is based on strict principles which consider the protection and security of data and the rights of the persons concerned as the highest good.
Lawfulness & Transparency
Data processing is carried out in a lawful manner, in good faith. The person concerned is informed of the planned processing and handling of the data when the data is collected. Thus, data subjects are informed at least about the following points:
- Person responsible for data processing
- Purpose of data processing
- Legal basis of the processing
The data is collected and processed for specified, clear and legitimate purposes. The data will not be processed in a way incompatible with these purposes.
Only those data will be collected and processed that are absolutely necessary for the specified purposes. If it is possible to achieve the purpose and the effort is reasonable, only anonymized data will be processed.
Storage limitation and deletion
Personal data is deleted as soon as the purpose for which it was originally collected expires and legal retention periods do not prevent deletion.
If, in individual cases, there are interests in these data that are worthy of protection, they will continue to be stored until the interest worthy of protection has been legally clarified.
Data security applies to personal data. The data must be treated confidentially and is protected by appropriate organizational and technical measures against unauthorized access, unlawful manipulation or disclosure as well as against loss and destruction.
Personal data must be kept correct, complete and up-to-date. Appropriate measures are taken to correct outdated, incorrect or incomplete data.
4. Obligation to maintain data secrecy
All VACE employees and the employees of the group companies are contractually bound to secrecy and are regularly informed and trained in the safe handling of personal and other critical data.
5. Data security
Protecting the confidentiality, availability and integrity of data is an essential task of the VACE Group. This applies equally to trade secrets, customer data, personal data and other critical information.
For this purpose, technical and organizational security measures are established and continuously improved according to the state of the art and internationally recognized best practices and security standards.
6. Data protection officer
VACE is not in the need to appoint a data protection officer, as Article 37, paragraph 1 of the EU DSGVO is not applicable. In accordance with the importance of data protection, VACE has decided to voluntarily appoint a data protection officer. This officer is available to the data subjects and the data protection authority as a contact point and is responsible for data protection issues within the group of companies.
The data protection officer for the VACE Group is:
Dr. Thomas Schweiger, LL.M. (Duke)
certified data protection officer
SMP Schweiger Mohr & Partner Attorneys at Law OG
Huemerstrasse 1 / Kaplanhofstrasse 2, 4020 Linz
In addition, a data protection committee has been set up, consisting of employees from various departments, external consultants, legal supporters and the data protection officer. This body has the task of continuously reviewing and improving VACE's data protection measures.
The data protection officer and the committee can be reached via firstname.lastname@example.org.
7. Rights of the data subjects
Data subjects may at any time request information about which personal data concerning them is being processed and the purposes of such processing.
Data subjects have the right to demand the immediate correction of incorrect personal data concerning them.
Data subjects shall have the right to have the processing limited if the accuracy of the data concerning them is disputed, if the processing is unlawful, if the data are no longer needed for the processing or if the data subjects have objected to the processing.
Data subjects have the right to object at any time to the processing of personal data concerning them.
Data subjects have the right to receive the personal data concerning them which they have provided to VACE in a structured, common and machine-readable format. They also have the right to request the transfer of these data to another person in charge, if technically feasible.
The transferability applies only to personal data processed using automated procedures.
Cancellation - Right to be forgotten
The data subject has the right to request the immediate deletion of personal data concerning him/her if the legal basis for processing the data is missing or ceases to exist, if the data processing is opposed, if the data processing is unlawful and if no legal retention periods make deletion impossible.
Data security also has a high priority in relation to the rights of data subjects, which is why the assertion of data subject rights is only possible after the data subject has been identified beyond doubt.
You also have the right to complain to the data protection authority at any time: Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, telephone: +43 1 52 152-0, e-mail: email@example.com
8. Data transmission
Personal data will only be transferred to recipients outside the Group and to recipients in EU third countries in accordance with applicable laws and on a lawful basis and in compliance with the highest level of confidentiality and data security. In the context of the group-wide processing of data, personal data is exchanged between companies in the VACE group. This exchange is regulated by contracts for joint processing and by contract processing agreements. VACE also uses different processors for processing. All processors are contractually bound by a processor agreement to comply with the legally applicable data protection provisions.
9. Continuous control and improvement
VACE attaches great importance to the continuous improvement of quality and processes. Compliance with data protection guidelines and applicable legislation and the effectiveness of data protection and data security measures are continuously measured and increased in order to ensure an optimal process of data protection measures.