Welser Profile Austria GmbH (hereinafter also referred to as "Welser", "we" and "us") takes the protection of your personal data very seriously. We process your personal data according to the statutory provisions on data protection.
In this privacy policy, we inform you about the data processing within the scope of our website as well as about further data processing. This information is non-binding and has no contractual character, but is for your information only.
Unless further information is provided, the processing of your personal data is not required by law or contract. If you do not provide your data, however, this may mean that our website and the data processing described below cannot be used or can only be used to a limited extent.
Your personal data will not be used to carry out automated decision-making, including profiling.
Welser Profile Austria GmbH, Prochenberg 24a, 3341 Ybbsitz, Austria is the controller for the processing of your personal data in the context of the data processing described below. More details on Welser Profile Austria GmbH’s data can be found in the Imprint.
The contact partner for data protection matters is Markus Kepp: datenschutz@welser.com.
If another company is the controller for certain processing activities, we point this out separately.
2.1. Object and purpose of the data processing
When you visit our website, information and data are automatically collected by the computer system of the requesting computer. We necessarily process this information and these data so that the content of our website can be delivered to your computer. This is also done for the purpose of monitoring technical function and increasing the operational security of the server.
We store this information in so-called log files.
2.2. Categories of data subjects and personal data
For these purposes, we process the following personal data of website users:
2.3. Legal basis
The data processing takes place on the basis of our legitimate interest in accordance with Art. 6 (1) (f) GDPR in conjunction with Section 165 (3) of the 2021 Austrian Telecommunications Act (TKG 2021). Our legitimate interest is to ensure the functionality and operational safety of the website.
2.4. Storage period/deletion
This data are only saved temporarily - for a maximum of 24 hours - in a personalised form. Afterwards, the data are anonymized.
2.5. Recipients
We use service providers to make our website available. They process your personal data on our behalf. We use the following service providers:
3.1. Subject matter and purpose of the data processing
When you visit our website, cookies and similar technologies (for example, LocalStorage and SessionStorage, hereinafter jointly referred to as "cookies") are used. This makes our website more user-friendly and efficient, which allows us to provide you with an optimal website experience.
Cookies are small text files that are stored on your terminal device with the help of the browser. These data packets control the presentation and operation of the site, and are also used to obtain useful information about how the site is used. Some cookies are only stored temporarily and are deleted when the browser is closed. Other cookies (“persistent cookies”) are stored for a longer period or permanently and/or until an expiry date is reached, or until they are deleted manually from your browser cache.
Cookies are divided into the following categories, depending on their intended use and function:
You can find more information about cookies and their purposes in the cookie settings.
LocalStorage and SessionStorage store user data in your browser. These are stored either until the end of the session (SessionStorage) or without a defined end (LocalStorage).
3.2. Categories of data subjects and personal data
For these purposes, we process your personal data as a website user. You will find a list of categories of processed data in the cookie settings.
3.3. Legal basis
The processing of your personal data is based on
Without some cookies, functions that enable an optimal user experience, such as YouTube videos or Google Maps, are not available. You can revoke your consent at any time with effect for the future in the cookie settings without giving reasons by making the respective selection in the checkbox for the analysis and marketing cookies.
In addition, you can adjust your consent and cookie settings in the browser settings at any time and thus prevent the use of cookies. However, this may result in restrictions on use of the website without technical impediment.
Below are links to information on how to disable cookies in commonly used browsers:
3.4. Storage period/deletion
You will find information on the specific storage period of cookies and thus your personal data in the cookie settings.
3.5. Recipients
As part of the use of some cookies, data are transferred to the third-party providers of the cookies. If this data transfer is to a third country for which an adequacy decision has been adopted by the European Commission in accordance with Art. 45 GDPR (e.g. USA under the Data Privacy Framework, United Kingdom and Canada), we base the data transfer on this adequacy decision.
If third-party cookies are used that are established in a third country without an adequate level of data protection (e.g. companies in the USA that do not fall under the adequacy decision due to a lack of certification according to the Data Privacy Framework) for a transfer to these third-party providers, the transfer is based on the consent you have given in accordance with Art. 49 (1) (a) GDPR. This data transfer to the USA outside the Data Privacy Framework is associated with various risks. This means that, according to applicable US regulations, your data may potentially be subject to access by US authorities for control and monitoring purposes, against which only limited legal remedies are available. With your consent, you agree that we may transfer cookies and the personal data they contain to third parties in third countries (e.g. to companies in the USA that are not certified in accordance with the "Data Privacy Framework").
You can find information about all recipients in the cookie settings.
In addition, we will inform you in detail about recipients in connection with the use of cookies that are of particular importance to us:
Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") on the legal basis of your consent. We have concluded a processing contract with Google for this purpose; it is available online. Google Analytics uses cookies, which are stored on your computer and enable your use of our website to be analyzed. A connection to Google's servers is established via software and data is transmitted to Google's servers, some of which are located in the USA. Google LLC is a company certified according to the "Data Privacy Framework" and therefore the international data transfer is based on the adequacy decision of the European Commission in accordance with Art. 45 GDPR.
In this context, this website uses the "IP anonymization" function. This means that your IP address is shortened (and thus anonymised) by Google within the member states of the European Union or in other signatory states of the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address transferred to a Google server in the USA and shortened there. According to information provided by Google, Google will use the data it collects to evaluate use of the website, to compile reports on website traffic and to render other services relating to website use and the use of the internet. You can find more detailed information on how user data are handled at Google Analytics in the data protection notice of Google or that of Google Analytics as well as in the Terms of Use.
You can stop your user data from being recorded on our website generally by activating the “Do not track” setting in your web browser. Our website recognises the “Do not track” signal, which your web browser then sends to all websites.
You can prevent your user data from being recorded by Google Analytics generally on all websites by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en
You can only modify the collection of your user data by Google Analytics on this website in the cookie settings.
Hubspot
For the creation of our website, we use HubSpot, a software of HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA. Within the framework of using this software, so-called inbound marketing is carried out. The software helps us to optimize our marketing strategy by means of statistical analyses and evaluation of the logged user behavior, among other things. HubSpot uses cookies for this purpose. For more information on the types of data, the legal basis of the processing, the purposes and the storage period, please refer to the Cookie settings.
For further information on HubSpot, please refer to the Terms of Use and Privacy Policy of HubSpot Inc. at http://www.hubspot.com/terms-of-service and http://www.hubspot.com/privacy-policy.
When using HubSpot, your personal data is transferred to HubSpot, which is why a data transfer to the USA cannot be ruled out. HubSpot, Inc. is a company certified according to the "Data Privacy Framework”, and therefore the international data transfer is based on the adequacy decision of the European Commission in accordance with Art. 45 GDPR.
Lead Forensics
We use Lead Forensics, a web analytics service provided by Lead Forensics, 4 Old Park Lane, Mayfair, London W1K 1QW, United Kingdom, on our website. We utilize Lead Forensics for the purposes of marketing and optimizing our website by tracking the history of your visit to our website. Lead Forensics helps us to optimize our marketing strategy and find potential customers by means of statistical analyses and evaluation of logged user behavior. Lead Forensics uses cookies for this purpose. For more information on the types of data, the legal basis of the processing, the purposes and the storage period, please refer to the Cookie settings.
Further information on Lead Forensics can be found in the data protection information and the cookie information of Lead Forensics at https://www.leadforensics.com/privacy-policy/ and at https://www.leadforensics.com/cookie-policy/.
When using Lead Forensics, your personal data is transferred to Lead Forensics, which is why a data transfer to the USA cannot be ruled out. In order to ensure an adequate level of data protection, Lead Forensics has concluded the standard contractual clauses issued by the European Commission for the transfer of personal data to third countries. You can obtain a copy of these Standard Contractual Clauses at the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32021D0914.
4.1. Subject matter and purpose of the data processing
The contact form allows you to contact us on various topics. For example, you can arrange a consultation or ask questions about our products. For the purpose of fulfilling your request and contacting you in connection therewith, we need to process your personal data.
4.2. Categories of data subjects and personal data
For these purposes, we process the following personal data:
4.3. Legal basis
The data processing of personal data takes place on the basis of Welser's legitimate interests in communicating with website users in accordance with Art. 6 (1) (f) GDPR.
4.4. Storage period/deletion
We generally store your data until your request has been processed. After processing your request, your data will be deleted if there is no customer relationship.
4.5. Recipients
No data are transferred to third parties as part of the contact form.
5.1. Verantwortliche Welser-Gesellschaft
The controller for the data processing in the course of processing your application is the respective Welser company to which you have applied. This can be any of the following companies:
5.2. Subject matter and purpose of the data processing
You can apply online via our application portal on our website. For the purposes of registration on our application portal, processing your application and correspondence with you, we process your personal data.
We will also inform you about new job vacancies or career opportunities.
5.3. Categories of data subjects and personal data
For these purposes, we process the following personal data:
5.4. Legal basis
The data processing of personal data for processing the application is necessary in accordance with Art. 6 (1) (b) GDPR (pre-contractual relationship) or we base this on our legitimate interest in accordance with Art. 6 (1) (f) GDPR, which consists of filling vacancies with the best possible candidates.
In addition, data processing may take place on the basis of your consent in accordance with Art. 6 (1) (a) GDPR for the purposes stated in the respective consent, such as keeping evidence. You can revoke your consent at any time by sending a written notice to datenschutz@welser.com without stating reasons, without this affecting the legality of the consent until the processing has been revoked.
5.5. Storage period/deletion
We generally delete your application data seven months after completion of the application process.
If you have expressly consented to the storage of evidence, we will store your data until further notice. However, we will delete your profile together with your personal data at the latest if you do not log into the applicant portal for a period of two years.
In addition, you can delete your data in the applicant portal at any time using the "Delete profile" button, whereby any existing applications will also be deleted.
5.6. Recipients
In the course of the application process, we may transfer your data to the following bodies to process the application process:
Welser Profile Austria GmbH (Prochenberg 24a, 3341 Ybbsitz, Austria) acts as a processor due to the technical provision of the application portal.
We use the following service providers for administrative and technical processing:
5.7. Terms of use for the application portal
You can access the application portal by registering with your username (email address) and password.
The user name must have a length of at least 6 and a maximum of 20 characters.
The password must be at least 8 characters long, and no more than 20 characters.
If you have forgotten your password, you will receive a temporary password by email by clicking on "Forgot password?".
Data protection information on the Welser whistleblowing system
We take the protection of your personal data very seriously. This data privacy information informs you about data processing in connection with our whistleblowing system.
6.1. Controller - Welser-Gesellschaft
The Welser company that is affected by the respective report is responsible for the data processing in connection with the whistleblower system. These can be the Welser companies listed under the following Link: You will also find information on how to contact the respective Welser company.
6.2. Subject matter and purpose of the data processing
Our whistleblower system enables reporting of possible violations or malpractices in our company online, by telephone or in person. The processing of this data serves to fulfil the obligations under the whistleblower protection requirements and to receive incoming reports via the whistleblower system, to verify their validity and to be able to process them further and thereby, if necessary, to prevent, investigate and, if necessary, punish violations of the law, to ward off damage and to protect our companies, employees and business partners. Particularly important, among other things, are violations in the areas of corruption and conflicts of interest, competition and antitrust law, data protection and data security, occupational safety, discrimination, illegal practices in connection with public procurement, environmental protection, product safety and compliance as well as money laundering and financing of terrorism.
Please note that the whistleblower is neither legally nor contractually obliged to provide us with these data. However, the whistleblower system cannot be used without entering the data marked as mandatory in the reporting form. If the contact details are not provided, we cannot contact the whistleblower, for example to confirm receipt of the report, to ask questions or to exchange further information.
6.3. Categories of data subjects and personal data
For these purposes, we process the following personal data:
6.4. Legal basis
The processing of your personal data is based on the respective national regulations for the implementation of the "Whistleblower Directive" (EU) 2019/1937 in conjunction with Art. 6 (1) (c) and (e) GDPR (necessity for the performance of a task in the public interest) or in the processing of criminal law-related data in conjunction with Art. 10 GDPR. In the event of processing of special categories of personal data, the processing is based on the respective national regulations for the implementation of the Whistleblower Directive in conjunction with Art. 9 para. 2 (g) GDPR (necessity for reasons of significant public interest). Insofar as the processing is not covered by the material scope of the respective national implementing provision, the processing is based on our legitimate interests in accordance with Art. 6 (1) (f) or Art. 10 GDPR to be able to receive and process reports of possible maladministration, for the protection of our company.
6.5. Storage period/deletion
Personal data that are not necessary for the processing of the information and the pursuit of the above-mentioned purposes will not be collected or deleted immediately.
Apart from this, we are legally obliged to keep the personal data processed in the context of case processing for a period of five years from the last processing or transmission, and beyond as long as it is necessary to carry out administrative or judicial proceedings already initiated or an investigative procedure under the Code of Criminal Procedure. After the expiry of this retention obligation, the personal data will be deleted. Log data about processing operations carried out in the course of case processing shall be kept for a further three years from their last processing or transmission.
6.6. Recipients
The responsible Welser company will consult the following experts to process the report:
As part of the whistleblowing system, we use the following service providers for technical processing:
In addition, depending on the facts of the matter, your personal data may be transferred to the following recipients:
6.7. Legal restriction of the rights of data subject
We would like to point out that according to the Austrian Whistleblower Protection Act, the rights to information, access, rectification, erasure, restriction of processing, objection of the persons affected by a notification and notification of a breach of the protection of personal data do not apply as long as and insofar as this is necessary to protect the identity of the whistleblower and to achieve the purposes described above, in particular to thwart attempts to prevent, undermine or carry over information or follow-up measures on the basis of information.
6.8. Your rights
You have - insofar as this is permissible under whistleblower protection regulations - the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR).
To assert your rights of access, rectification, erasure, restriction of processing or objection, please contact us via e-mail at datenschutz@welser.com or write to Welser Profile Austria GmbH, Prochenberg 24a, 3341 Ybbsitz, Austria.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
7.1. Subject matter and purpose of the data processing
The Welser Profile Customer Portal enables users of the Portal to access orders, tickets and profiles in a single location. In addition, it is possible to get in touch with the responsible contact person at Welser via the ticket function in the customer portal. In addition, our customers or the contact persons at our customers’ companies can be notified of any changes by email.
For details of the contractual relationship between us and our customers regarding use of the Customer Portal, please see the Terms of Use:
A user account is created via Microsoft after Welser has created the account. The login is based on multifactor authentication using Microsoft Single Sign-On with a non-personal email address.
7.2. Categories of data subjects and personal data
Here, we process the following personal data of our customers' contacts in the course of registration and in the Customer Portal:
7.3. Legal basis
The processing of the personal data of our customers' contact persons is based on our legitimate interest pursuant to Art. 6(1) (f) GDPR.
The provision of personal data by our customers' contact persons is necessary for the establishment of our contractual relationship in accordance with the terms of use and thus for the use of the Customer Portal. If you do not provide us with this data or do not provide it to the extent required, we will not be able to carry out the necessary registration.
7.4. Storage/Deletion
We will delete or anonymize your user account as well as the associated tickets and orders in the customer portal if there is no login to the customer portal for a period of two years. In addition, you have the option of sending an email to datenschutz@welser.com to request the deletion of your user account. We will delete your user account and associated personal data within 14 days of receiving your email.
7.5. Recipients
No data is transferred to third parties within the framework of the Customer Portal.
8.1. Subject matter and purpose of the data processing
We operate social media appearances on the LinkedIn, Facebook, YouTube, Instagram and TikTok networks. We use our social media presence to communicate with our employees, customers, business partners, prospects and other users, to inform them about our company and range of services. In addition, through user interactions, such as comments, messages and reactions to our posts, we may receive further information that we observe for our social media presence.
In addition, when managing our social media sites, we use the associated analysis functions and thus receive statistical evaluations of our activities and users. For this purpose, the social media operators use cookies and other similar technologies to identify registered users with a user code. The information stored about the individual user codes is used by the operators of the social media networks in accordance with their terms of use and privacy policies, in particular to provide services to advertising companies and subsequently to offer advertising.
Joint controllership
As the operator of our social media sites, we are joint controllers within the meaning of Art. 4 (7) GDPR with the following operators of the social media platforms. Further information on data processing and the division of controllership can be found with the operators of the platforms:
It follows from the agreements on joint controllership with Facebook/Instagram and LinkedIn that they are the responsible for compliance with the obligations under Articles 12 to 21 GDPR and Articles 32 to 34 GDPR. Welser is obliged to forward inquiries about data subject rights to Facebook/Instagram or LinkedIn. With the information in this section, we comply with our obligation to provide our legitimate interests.
It follows from the agreement on joint controllership with TikTok that TikTok is also responsible for asserting the rights of data subjects in accordance with Art. 15 to 21 GDPR. Welser and TikTok are both obliged to comply with their information obligations as well as the obligations pursuant to Art. 32 to 34 GDPR in their own area of responsibility..
8.2. Categories of data subjects and personal data
With regard to the categories of data subjects and personal data, we refer to the above-mentioned information on the respective social media platforms.
8.3. Legal basis
The processing of your personal data in connection with the visit to our social media sites takes place on the basis of our legitimate interests in accordance with Art. 6 (1) (f) GDPR. Our legitimate interests are the improvement of our social media presence and an optimized and up-to-date product presentation and corporate image.
8.4. Storage/Deletion
We have access to the analysis functions of the individual social media platforms in accordance with the operators’ terms of use. Therefore, the storage period of your personal data arises from the terms of use and the privacy statements of the social media platform operators.
8.5. Recipients
In connection with our social media presence, your personal data will also be processed by the respective platform operators:
Based on the recipients’ data protection declarations, it can be assumed that your data will be transferred to companies in the USA. For the USA, there is an adequacy decision in accordance with Art. 45 GDPR of the European Commission, which is why the data transfer to companies certified according to the "Data Privacy Framework" (Meta Platforms, Inc. for Facebook and Instagram and Google LLC for YouTube) is based on the adequacy decision. The platform operators (for LinkedIn and TikTok) base your transmission on the Standard Contractual Clauses of the European Union. You can obtain a copy of these Standard Contractual Clauses at the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32021D0914.
Welser has no influence on these processing and transfers and does not pass on personal data that we have received through our social media sites to third parties.
9.1. Creation of a customer account
9.1.1. Subject matter and purpose of the data processing
Creating a customer account is required in order to place an order in the webshop. In the course of registration, personal data are processed. By creating a customer account, you can shop in the webshop and, among other things, track your order history and create wishlists.
9.1.2. Categories of data subjects and personal data
For these purposes, we process the following personal data:
9.1.3. Legal basis
Your data will be processed on the basis of your consent given in the course of registration (Art. 6 (1) (a) GDPR). You have the right to withdraw your consent at any time free of charge by deactivating your customer account (see below for information on legal remedies and contact details). After that, your data will be stored for one year on the basis of legitimate interest (documentation purposes) (Art. 6 (f) GDPR).
9.1.4. Storage period/deletion
Your data will generally be stored for documentation purposes until your customer account is deactivated and thereafter for a period of one year, insofar as statutory retention obligations do not prevent deletion and we do not need the data in individual cases to defend or enforce legal claims. In addition, the customer account will be deleted if there is no login to the webshop in two years.
9.1.5. Recipients
As part of the webshop, your personal data will be transferred to:
9.2. Orders in the webshop
9.2.1. Subject matter and purpose of the data processing
Welser collects and processes your data provided in the course of the product order in the webshop or, if applicable, the data of third parties provided by you (possibly with a different billing/delivery address) in order to enable the purchase of our products in the webshop.
9.2.2. Categories of data subjects and personal data
For these purposes, the types of data listed in point 9.1.2. are processed.
9.2.3. Legal basis
The processing of your data is necessary for the conclusion and fulfilment of online purchase contracts (Art. 6 (1) (b) GDPR) and for the fulfilment of statutory retention obligations (Art. 6 (1) (c) GDPR).
9.2.4. Storage period/deletion
The data relating to the individual orders and transactions will in any case be stored for a period of seven years in accordance with the statutory retention obligations.
9.2.5. Recipients
For the processing of orders in the online shop, we integrate a payment service from a third-party company. If you make a purchase from us, your payment data (for example, name, account details, card number, payment amount) will be processed by the payment service provider for the purpose of payment processing. We use the online payment service "Stripe" of Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.
9.3. Submission of reviews
9.3.1. Subject matter and purpose of the data processing
If you use the opportunity to review one of our products in the webshop, we process the personal data you provide for the purpose of collecting and publishing customer reviews.
9.3.2. Categories of data subjects and personal data
In the context of submitting a review, we process the following personal data:
9.3.3. Legal basis
The data processing takes place on the basis of your consent (Art. 6 (1) (f) GDPR). You have the right to revoke your consent at any time free of charge without giving reasons by sending an email to datenschutz@welser.com. This will delete the review you wrote.
9.3.4. Storage period/deletion
Welser deletes or anonymizes your personal data as soon as it is no longer needed to achieve the purposes for which it was collected and processed, and insofar as other legal obligations do not require further storage. Therefore, reviews are generally only deleted when the product is no longer offered in the webshop.
9.3.5. Recipients
In the context of submitting evaluations, no data is transmitted to third parties.
10.1. Subject matter and purpose of the data processing
The Welser Creator allows you to configure, save and export profiles for your project. In addition, you can send a request for quotation to Welser from the portal, whereupon we will contact you to submit a quotation. The purpose of processing your personal data is therefore to enable the use of the Creator. In addition, we may process your contact details in order to send you advertising by email in connection with the profiles created.
For details of the contractual relationship between us and you (as a user) regarding use of the Customer Portal, please see the Terms of Use.
10.2. Categories of data subjects and personal data
For these purposes, Welser processes the following personal data during your registration and in the Creator Tool and, if applicable, in the context of the following correspondence:
10.3. Legal basis
Data processing is carried out to fulfil our contractual obligations in accordance with the terms of use on the basis of Art. 6 (1) (b) GDPR.
Their provision of your personal data is necessary for the establishment of the contractual relationship with you in accordance with the terms of use and thus for the use of Creator. If you do not provide us with this data or do not provide it to the extent required, we will not be able to carry out the necessary registration.
The processing of the voluntarily provided personal data and the data processing for contact for advertising purposes are based on your voluntarily given consent in accordance with Art. 6 (1) (a) GDPR in conjunction with Section 174 TKG 2021. You have the right to revoke this consent at any time free of charge and without giving reasons with effect for the future (by email to creator@welser.com).
10.4. Storage period/deletion
Welser will delete or anonymize your user account and the associated profiles created and saved if you do not log in to the Welser Creator for a period of two years. In addition, you have the option of sending an email to creator@welser.com to request the deletion of your personal data. If your request for deletion includes the personal data necessary for the provision of Creator (email address, password, first name and last name) or if you request the deletion of the entire user account, this will lead to a ordinary termination in accordance with point 8.2. of the Terms of Use. We will delete or anonymize your user account and the associated personal data within 1 month of receiving your email.
10.5. Recipients
When using the Welser Creator, no data is transferred to third parties.
If you send us a request for quotation or we contact you by email in connection with the Creator, your personal data will be transferred to the following companies in the group:
11.1. Subject matter and purpose of the data processing
As part of our customer management, we process your personal data that we have received from you in the context of orders, at trade fairs and conferences or otherwise. We process this data for business initiation purposes, to offer our services and products, to fulfil legal and contractual obligations and to strengthen the customer relationship, which may also include carrying out analyses for marketing purposes or direct advertising.
11.2. Categories of data subjects and personal data
For these purposes, we process the following personal data:
11.3. Legal basis
We process your personal data in connection with customer management on the basis of our legitimate interest in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest is to provide effective and efficient customer service. In addition, we process your personal data for the processing of existing contracts or the initiation of contracts in accordance with Art. 6 (1) (b) GDPR. The processing for contact for advertising purposes is based on your voluntarily given consent in accordance with Art. 6 (1) (a) GDPR in conjunction with Section 174 TKG 2021. You have the right to revoke this consent at any time free of charge and without giving reasons with effect for the future (by sending an email to datenschutz@welser.com).
11.4. Storage period/deletion
Welser deletes or anonymizes your personal data as soon as it is no longer needed to achieve the purposes for which it was collected and processed, and unless other legal obligations require further storage or we do not need the data to defend or enforce legal claims. Therefore, your personal data related to customer management will be deleted thirty years after the last order. We keep the data on orders for seven years in accordance with the statutory retention periods.
11.5. Recipients
In the context of customer management, data is transferred to the following service providers:
When using Hubspot, Inc. services, your personal information may be transferred to the United States. HubSpot, Inc. is a company certified according to the "Data Privacy Framework" and therefore a possible international data transfer takes place based on the adequacy decision of the European Commission in accordance with Art. 45 GDPR.
12.1. Subject matter and purpose of the data processing
On our website you can request reports and white papers (e.g. sustainability report, white paper on life cycle assessment) to find out about our company in various areas. We provide you with our reports and white papers via a download link, which you will receive from us by email.
12.2. Categories of data subjects and personal data
For this purpose, we process the following personal data:
12.3. Legal basis
The data processing of your personal data for the transmission of reports and white papers takes place on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time by sending a written notice to datenschutz@welser.com without stating reasons, without affecting the legality of the processing up to the point that the content has been revoked.
However, if you do not provide your data, we will not be able to provide you with our reports and white papers. However, you are neither legally nor contractually obliged to provide your data.
12.4. Storage period/deletion
Welser deletes or anonymizes your personal data if you revoke your consent to the transmission of reports and white papers. In addition, your personal data will be deleted within one year if reports/white papers cannot be successfully delivered.
12.5. Recipients
As part of the transmission of our reports/white papers, data are transmitted to the following service providers:
When using Hubspot, Inc. services, your personal information may be transferred to the United States. HubSpot, Inc. is a company certified according to the "Data Privacy Framework" and therefore a possible international data transfer takes place based on the adequacy decision of the European Commission in accordance with Art. 45 GDPR.
13.1. YouTube
We use the video service YouTube on our website, a service of Google LLC, so that we can offer you an interactive user experience. By including YouTube videos, we can provide you with information and news about our company in a user-friendly way.
13.1.1. Subject matter and purpose of the data processing
We use the video service YouTube on our website, a service of Google LLC, so that we can offer you an interactive user experience. By including YouTube videos, we can provide you with information and news about our company in a user-friendly way.
13.1.2. Categories of data subjects and personal data
For this purpose, the following personal data will be processed:
13.1.3. Legal basis
The data processing of your personal data for the provision of YouTube videos takes place on the basis of your consent in accordance with Art. 6 (1) (a) You can revoke your consent at any time without giving reasons in the cookie settings, without affecting the legality of the consent until the revocation of the processing.
If you do not give your consent to the processing, the YouTube video on our website will not be loaded and no data will be processed.
13.1.4. Storage period/deletion
We do not store any personal data in connection with the provision of YouTube videos. With regard to the storage period of Google LLC, we refer you to the Google Privacy Policy.
13.1.5. Recipients
As part of the use of YouTube, data may be transmitted to the following recipients:
Google uses data centers located worldwide. Here you can find the locations of Google's data centers: https://www.google.com/about/datacenters/locations/?hl=en.
The use of YouTube may involve an international transfer of data. Further information on the processing of your personal data after transmission by Google as the controller can be found in the Google Privacy Policy as well as the Terms of Use.
Due to the transmission to Google, a transfer of data to the USA cannot be ruled out. Google LLC is a company certified according to the "Data Privacy Framework" and therefore the international data transfer is based on the adequacy decision of the European Commission in accordance with Art. 45 GDPR.
13.2. Google Maps
13.2.1. Subject matter and purpose of the data processing
On our website, we use the services of Google Maps, a service of Google LLC, so that you can view the branches of the Welser Group on a map. By using Google Maps, we offer you an interactive user experience and can better adapt the presentation of the branches to your needs of an interactive solution.
13.2.2. Categories of data subjects and personal data
For this purpose, the following personal data will be processed:
13.2.3. Legal basis
The data processing of your personal data for the use of Google Maps takes place on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time without giving reasons in the cookie settings, without affecting the legality of the consent until the revocation of the processing.
If you do not give your consent to the processing, the Google Maps content on our website will not be loaded and no data will be processed.
13.2.4. Storage period/deletion
We do not store any personal data in connection with the use of Google Maps. With regard to the storage period of Google, we refer you to the Google Privacy Policy.
13.2.5. Recipients
A data transfer takes place as part of the use of Google Maps:
Google uses data centers located worldwide. Here you can find the locations of Google's data centers: https://www.google.com/about/datacenters/locations/?hl=en.
Therefore, there is an international transfer of data in connection with the use of Google Maps. Further information on the processing of your personal data after transmission by Google as the controller can be found in the Google Privacy Policy as well as the Terms of Use.
Due to the transmission to Google, a transfer of data to the USA cannot be ruled out. Google LLC is a company certified according to the "Data Privacy Framework" and therefore the international data transfer is based on the adequacy decision of the European Commission in accordance with Art. 45 GDPR.
13.3. Google reCAPTCHA
13.3.1. Subject matter and purpose of the data processing
On our website, we use the Google reCAPTCHA service a service of Google LLC. By using Google reCAPTCHA, we aim to make our website as secure as possible, to prevent attacks by bots or malware and to ensure that only human users visit our website.
13.3.2. Categories of data subjects and personal data
For this purpose, the following personal data will be processed:
13.3.3. Legal basis
The data processing of your personal data for the use of Google reCAPTCHA takes place on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time without giving reasons in the cookie settings, without affecting the legality of the consent until the revocation of the processing.
If you do not consent to the processing by Google reCAPTCHA, selected functionalities of our website will not be available to you.
13.3.4. Storage period/deletion
We do not store any personal data in connection with the use of Google reCAPTCHA. With regard to the storage period of Google, we refer you to the Google Privacy Policy.
13.3.5. Recipients
A data transfer takes place as part of the use of Google Maps:
Google uses data centers located worldwide. Here you can find the locations of Google's data centers: https://www.google.com/about/datacenters/locations/?hl=en.
Therefore, there is an international transfer of data in connection with the use of Google reCAPTCHA. Further information on the processing of your personal data after transmission by Google as the controller can be found in the Google Privacy Policy as well as the Terms of Use.
Due to the transmission to Google, a transfer of data to the USA cannot be ruled out. Google LLC is a company certified according to the "Data Privacy Framework" and therefore the international data transfer is based on the adequacy decision of the European Commission in accordance with Art. 45 GDPR.
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR).
You have the right to revoke consent you have given previously to the processing of your data. Such a revocation does not affect the lawfulness of the processing of personal data done before the revocation.
To assert your rights of access, rectification, erasure, restriction of processing, objection or revocation, please write to Welser Profile Austria GmbH, Prochenberg 24a, 3341 Ybbsitz, Österreich or send an email to datenschutz@welser.com.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
