Privacy Note

OVERVIEW

Thank you for your interest in ALTEN. We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used.

This privacy policy applies to the website of ALTEN Austria GmbH, which can be accessed under the domain ALTEN Austria – Development Service Provider & IT Services Partner as well as the various subdomains (“our website”).

For further information on the processing of your data by ALTEN Austria GmbH, please refer to the information flyers for applicants, employees, customers and suppliers linked at the end of this privacy policy.

1. WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

responsible for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR):

ALTEN Austria GmbH (hereinafter ALTEN)

Liebenauer Hauptstraße 246,

8041 Graz

E-mail: datenschutz@alten.at

COMPETENT SUPERVISORY AUTHORITY

Austrian Data Protection Authority

Barichgasse 40-42,

1030 Vienna

2. PERSONAL DATA

Personal data is information that can be attributed to an identified or directly or indirectly identifiable natural person.

Personal data includes, but is not limited to, general personal master data (e.g. name, address, date of birth, telephone number, email address, etc.), CVs, bank data (account number, etc.), and data issued by public authorities (e.g. driving licence number, ID card number, passport number), value judgements (e.g. school and work certificates, etc.), online data (IP address, date, time and duration of use, location data, etc.), customer data and supplier data, etc.

The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further storage of the data. Irrespective of this, we store your personal data in individual cases for the assertion, exercise or defence of legal claims and if there are statutory retention obligations.

2.1 COLLECTION, PROCESSING AND USE OF YOUR PERSONAL DATA

Data protection is very important to us. Therefore, when processing your personal data, we strictly adhere to the legal provisions of the European Data Protection Regulation, (DSGVO), the Data Protection Act (DSG), the Telecommunications Act (TKG) and – where applicable – the other data protection laws in the European Economic Area (EEA) and Switzerland.

2.2 DESCRIPTION OF THE GROUPS OF PEOPLE CONCERNED

As a matter of principle, only the data necessary to fulfil the purpose of the company and the contractual agreements are collected. Essentially, personal data is collected, processed and used for the following groups of persons:

* Customer data: Personal identification and communication data is processed for the purpose of communicating with customers and conducting our respective business with the customer and thus fulfilling the business purpose. Furthermore, for the initiation of business contacts and the information of customers.

* Supplier data: The processing of personal identification data, communication and performance data, economic and financial information, payment and bank details, performance data, if applicable, is carried out for the purpose of communicating with the supplier and carrying out our respective business and thus for the fulfilment of the business purpose.

* Employee data: The processing of personal identification and performance data (certificates, etc.), contract master data, insurance data, downtime, payment and bank details, tax and social security data, log-in data, communication data, travel booking data and vehicle booking data is carried out for the implementation and processing of the respective employment relationship, fulfilment of legal obligations and in our legitimate corporate interest of the management, organisation and implementation of our business activities.

* Applicant data: The processing of personal identification data, performance data (certificates etc.), payment and bank details as well as travel booking data (when booked by ALTEN) is carried out for the initiation of employment relationships, fulfilment of legal obligations, in our legitimate corporate interest of management, the organisation and implementation of our business activities, as well as for the further development of our internal systems.

* Interested parties: The processing of personal identification data, communication data and, where applicable, economic and financial information of interested parties to ALTEN, is carried out for the fulfilment of the business purpose.

*Competition participants: The processing of personal identification data, communication data and, if applicable, qualification data of participants in competitions (e.g. at trade fairs) is based on the consent of the data subject in accordance with Art. 6 para. 1 lit. a, 7 DSGVO. When participating in the competition, the personal data is processed for the purpose of carrying out and processing the competition. In addition, ALTEN reserves the right to use this data for direct advertising purposes. The data will not be transmitted to third parties. The participant may object to the processing of his/her data at any time.

* Other personal data: The processing of personal data of other business partners (e.g. system partners, chambers, associations, banks and authorities) is carried out within the framework of the respective cooperation and in order to fulfil our business purpose.

Further information about the processing of the data of the above-mentioned groups of persons by ALTEN can be found in the information flyers for applicants, employees, customers and suppliers linked at the end of this data protection declaration. The following explanations refer to the processing of your data on our website.

3. PROCESSING OF DATA WHEN VISITING OUR WEBSITE

If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO if special categories of data are processed according to Art. 9 para. 1 DSGVO. In the event of a transfer of personal data to third countries, the data processing is also carried out on the basis of Art. 49 para. 1 lit. a DSGVO. If you have consented to the storage of cookies or to the access to information in your terminal device (e.g. via device fingerprinting), the data processing is additionally carried out on the basis of § 96 para. 3 TKG. This consent can be revoked at any time. If your data is required to fulfil a contract or to carry out pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b DSGVO. Furthermore, if your data is required for the fulfilment of a legal obligation, we process it on the basis of Art. 6 para. 1 lit. c DSGVO. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6 para. 1 lit. f DSGVO. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this data protection declaration.

3.1 RECIPIENTS OR CATEGORIES OF RECIPIENTS OF DATA

The ALTEN Group is an engineering service provider operating throughout Germany. As a consultant, innovation driver and supporter, we are a competent development partner for national and international companies. We accompany the entire process from idea generation to series production readiness. Data processing by ALTEN is carried out for the fulfilment of consulting and development activities at or for ALTEN’s customers and their affiliated companies as well as all related ancillary business.

This personal data will only be used for advertising/market research purposes and for the design of our services if you have given us your express consent to do so.

As a matter of principle, only the data necessary for the fulfilment of the purpose of the company and the contractual agreements will be passed on. These are essentially the following recipients:

* Service providers that are used for proper business processing (e.g. service providers for the provision of the website and marketing, suppliers to support the administrative processes, including travel service providers to carry out business trips for employees, landlords for employee flats, VBG and company doctor for occupational health and safety, insurance companies for damages within the scope of the employment relationship). The legal basis for this is either Art. 28 DSGVO in the case of commissioned processing or, if applicable, § 11 DSG (in conjunction with Art. 88 DSGVO) for the processing of personal data in the employment context with you.

* external bodies for the fulfilment of the purposes mentioned under 2 (e.g. customers or affiliated companies of ALTEN within the meaning of §§ 15 ff. AktG (German Stock Corporation Act), such as the parent company ALTEN SA, 40 Avenue André Morizet, 92100 Boulogne Billancourt, France, where the employee is employed or the employee or applicant is to be employed within the scope of the employment relationship, customers and suppliers for the handling of projects, credit institutions for salary payments, tax consultants and auditors). The legal basis is regularly Section 11 DSG (in conjunction with Art. 88 DSGVO) for the processing of personal data in the employment context or Art. 6 (1) lit. f DSGVO with regard to general operational obligations such as tax returns, audits, etc.

* Public authorities in the case of overriding legal provisions (e.g. social insurance institutions, financial authorities). The legal basis for this is Art. 6 (1) lit. c DSGVO in conjunction with the respective legal requirements, in particular labour and social law.

Furthermore, this personal data is processed for the purpose of compliance with statutory provisions and regulations, such as labour law, tax and social law, money laundering law and international sanctions regulations (e.g. EU Anti-Terrorism Directive). The legal basis for this is Art. 6 para. 1 lit. c DSGVO in conjunction with the respective provision of national law.

3.2 YOUR RIGHTS

Under the conditions of the legal provisions of the GDPR, you have the following rights as a data subject:

* Information according to Art. 15 DSGVO about the data stored about you in the form of meaningful information about the details of the processing as well as a copy of your data;

* Correction according to Art. 16 DSGVO of incorrect or incomplete data stored by us;

*Deletion pursuant to Art. 17 DSGVO of the data stored by us, insofar as the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;

*Restriction of processing pursuant to Art. 18 DSGVO, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you object to their deletion because you need them for the assertion, exercise or defence of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO.

*Data portability pursuant to Art. 20 DSGVO, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1) a DSGVO or on the basis of a contract pursuant to Art. 6 (1) b DSGVO and these have been processed by us with the aid of automated procedures. You will receive your data in a structured, common and machine-readable format or we will transfer the data directly to another responsible party, insofar as this is technically feasible.

*Object to the processing of your personal data in accordance with Art. 21 of the German Data Protection Act (DSGVO), insofar as this is carried out on the basis of Art. 6 Para. 1 lit. e, f DSGVO and there are reasons for this which arise from your particular situation or the objection is directed against direct advertising. The right to object does not exist if overriding compelling legitimate grounds for the processing can be demonstrated or the processing is carried out for the assertion, exercise or defence of legal claims. Where the right to object does not exist for individual processing operations, this is indicated there.

*Revocation according to Art. 7 para. 3 DSGVO of your given consent with effect for the future.

*Complain to a supervisory authority pursuant to Article 77 of the GDPR if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

Please contact us at datenschutz@alten.at if you wish to exercise these rights.  If you wish to request detailed information about all personal data that ALTEN holds about you, you must provide us with proof of identity with a photograph.

3.3 COOKIES

Cookies are small text files that are sent by us to the browser of your end device when you visit our website and are stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, however, enable us to carry out various analyses, so that we are able, for example, to recognise the browser you are using when you visit our website again and to transmit various information to us (non-essential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information on the cookies used can be found in the cookie settings or in the Consent Manager of this website.

3.4 DATA PROCESSING FOR THE PROVISION OF THE WEBSITE

In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

3.4.1 NATURE AND EXTENT OF PROCESSING

When you call up and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which the access is made (referrer URL)
  • Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.
3.4.2 PURPOSE AND LEGAL BASIS

The processing is carried out to protect our overriding legitimate interest in displaying our website and guaranteeing security and stability on the basis of Art. 6 para. lit. f DSGVO. The collection of data and storage in log files is absolutely necessary for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 (1) DSGVO. Insofar as the further storage of log files is required by law, the processing is carried out on the basis of Art. 6 para. 1 lit. c DSGVO. There is no legal or contractual obligation to provide the data, however, calling up our website is not technically possible without providing the data.

3.4.3 STORAGE PERIOD

The aforementioned data is stored for the duration of the website display and for technical reasons for a maximum of 7 days.

3.5 DATA PROCESSING WITHIN THE FRAMEWORK OF THE CONTACT FORM

On our website, we offer you the opportunity to contact us via a form provided. The information collected via mandatory fields is required in order to process the request. Furthermore, you can voluntarily provide additional information that you consider necessary for processing the contact request.

3.5.1 PURPOSE AND LEGAL BASIS

The processing of your data through the use of our contact form is carried out for the purpose of communication and processing your enquiry on the basis of your consent pursuant to Art. 6 (1) lit. a DSGVO. Insofar as your enquiry relates to an existing contractual relationship with us, the processing is carried out for the purpose of fulfilling the contract on the basis of Art. 6 para. 1 lit. b DSGVO. There is no legal or contractual obligation to provide your data, but the processing of your request is not possible without the provision of the information of the mandatory fields. Insofar as you do not wish to provide this data, please contact us by other means.

3.5.2 STORAGE PERIOD

Insofar as you use the contact form on the basis of your consent, we store the data collected for each enquiry for a period of three years, starting with the completion of your enquiry or until you revoke your consent.

3.6 DATA PROCESSING IN THE CONTEXT OF THE CONTACT FORM FOR APPLICANTS

On our website, we offer you the opportunity to submit an application to us via a form provided. The information collected via mandatory fields is required in order to process the request. Furthermore, you can voluntarily provide additional information that you consider necessary for processing the contact request.

ALTEN collects and stores the data itself. Your data will neither be sold nor made available to other unauthorised third parties. ALTEN ensures that the data is only forwarded within the ALTEN Group and to customers, in each case limited to the extent necessary to achieve the purpose.

Your personal data will be transferred to customers or companies of the ALTEN Group that are affiliated with us within the meaning of §§ 15 ff. AktG (German Stock Corporation Act), insofar as this is necessary in particular within the framework of the hiring out of employees for the acquisition of activities. Applications in the areas of back office and business management are not affected by this.

Insofar as it is necessary for the purpose of implementing your employment relationship with ALTEN, your personal data will be transferred to the third parties necessarily involved in the implementation of the contract (customers, suppliers, companies of the ALTEN Group that are affiliated with us within the meaning of §§ 15 ff. AktG are affiliated with us).

For the processing of personal data of applicants in the context of the application process as well as of employees in the context of the implementation of the employment relationship, we partly use the services of companies based within or outside the EU (commissioned processing according to Art. 28 DSGVO) for the provision of services, outsourcing of the processing of the data, etc. The transfer takes place on the basis of appropriate safeguards by way of the standard contractual clauses approved by the EU Commission (in accordance with Art. 46(2)(c) DSGVO). However, the data will also be processed in accordance with our high data protection standards in this case.

3.6.1 PURPOSE AND LEGAL BASIS

The processing of your data based on the use of the application form is carried out for the purpose of processing your application and deciding on the establishment of an employment relationship on the basis of § 11 DSG. There is no legal or contractual obligation to provide your data, but it is not possible to process your application without providing the information in the mandatory fields. If you do not wish to provide this data, please use other ways of applying to us.

3.6.2 STORAGE PERIOD

We store the data collected for the duration of the application process and, in the event of non-employment, for six months from the date of rejection.

If you give us your consent to include your data in our pool of applicants (so-called “pool candidates”) in order to offer you a position suitable to your profile at a later date, we store this data for up to 24 months.

3.7 DATA PROCESSING WITHIN THE FRAMEWORK OF OF GOOGLE CDN

We use Google CDN to properly deliver the content of our website. Google CDN is a service of Google Ireland Limited, which acts as a content delivery network (CDN) on our website.

A CDN helps to provide content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google CDN.

3.7.1 PURPOSE AND LEGAL BASIS

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimisation of our online offer pursuant to Art. 6 para. 1 lit. f. DSGVO.

3.7.2 STORAGE PERIOD

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google CDN: https://policies.google.com/privacy.

3.8 DATA PROCESSING WITHIN THE FRAMEWORK OF GOOGLE ANALYTICS

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of times our online offer is called up, sub-pages visited and the length of time visitors spend on the site.

Google Analytics uses cookies and other browser technologies to evaluate user behaviour and recognise users.

This information is used, among other things, to compile reports on website activity.

3.8.1 PURPOSE AND LEGAL BASIS

The use of Google Analytics is based on your consent in accordance with Art. 6 Para. 1 lit. a. DSGVO and § 96 TKG.

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g. in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. DSGVO. These are – unless otherwise stated – standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.

In addition, before such a third country transfer, we obtain your consent in accordance with Art. 49 Para. 1 Sentence 1 lit. a. DSGVO, which you give via the consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third country transfers, there may be unknown risks in detail (e.g. data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence and of which you may not become aware).

3.8.2 STORAGE PERIOD

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

3.9 DATA PROCESSING IN THE CONTEXT OF GOOGLE DOUBLR CLICK

We have integrated components of DoubleClick by Google on our website. DoubleClick is a brand of Google, under which mainly special online marketing solutions are marketed to advertising agencies and publishers. DoubleClick by Google transfers data to the DoubleClick server with each impression as well as with clicks or other activities.

Each of these data transfers triggers a cookie request to the browser of the data subject. If the browser accepts this request, DoubleClick sets a cookie in your browser.

DoubleClick uses a cookie ID, which is required to process the technical procedure. The cookie ID is required, for example, to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplicate placements. Furthermore, the cookie ID enables DoubleClick to record conversions. Conversions are recorded, for example, if a DoubleClick advertisement has previously been displayed to a user and the user subsequently makes a purchase on the advertiser’s website using the same internet browser.

A DoubleClick cookie does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier serves to identify the campaigns with which you have already been in contact on other websites. As part of this service, Google obtains knowledge of data that Google also uses to generate commission statements. Among other things, Google can track that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and the applicable data protection provisions of DoubleClick by Google can be found at https://policies.google.com/privacy.

3.9.1 PURPOSE AND LEGAL BASIS

We process your data with the help of the Double-Click cookie for the purpose of optimising and displaying advertising on the basis of your consent pursuant to Art. 6 para. 1 lit. a DSGVO and § 96 TKG. You give your consent by setting the use of cookies (cookie banner / Consent Manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 para. 3 DSGVO. The cookie is used, among other things, to place and display user-relevant advertising and to create reports on advertising campaigns or to improve them. Furthermore, the cookie is used to avoid multiple displays of the same advertisement. Each time you call up one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and the settlement of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, it will be possible to visit our website without restriction, but not all functions may be fully available.

3.9.2 STORAGE PERIOD

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google DoubleClick: https://policies.google.com/privacy.

3.10 DATA PROCESSING WITHIN THE FRAMEWORK OF GOOGLE FONTS

We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offer. To obtain these fonts, you establish a connection to servers of Google Ireland Limited, whereby your IP address is transmitted.

3.10.1 PURPOSE AND LEGAL BASIS

The use of Google Fonts is based on your consent in accordance with Art. 6 para. 1 lit. a. DSGVO and § 96 TKG.

3.10.2 STORAGE PERIOD

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.

3.11 DATA PROCESSING WITHIN THE FRAMEWORK OF GOOGLE MAPS

We use the map service Google Maps to create directions. Google Maps is a service of Google Ireland Limited, which displays a map on our website.

When you access this content on our website, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google Maps.

3.11.1 PURPOSE AND LEGAL BASIS

The use of Google Maps is based on your consent in accordance with Art. 6 Para. 1 lit. a. DSGVO and § 96 TKG.

3.11.2 STORAGE PERIOD

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Maps: https://policies.google.com/privacy.

3.12 DATA PROCESSING IN THE FRAMEWORK OF GOOGLE reCAPTCHA

We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service of Google Ireland Limited and enables us to distinguish whether a contact request originates from a natural person or is automated by means of a program. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the user’s browsing time and mouse movements in order to distinguish automated requests from human ones. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google reCAPTCHA.

3.12.1 PURPOSE AND LEGAL BASIS

The use of Google reCAPTCHA is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 96 TKG.

3.12.2 STORAGE PERIOD

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.

3.13 DATA PROCESSING WITHIN THE FRAMEWORK OF YOUTUBE VIDEO

We have integrated YouTube Video on our website. YouTube Video is a component of the video platform of YouTube, LLC, on which users can upload content, share it over the internet and receive detailed statistics.

YouTube Video allows us to integrate content from the platform into our website.

YouTube Video uses cookies and other browser technologies to analyse user behaviour, recognise users and create user profiles. This information is used, among other things, to analyse the activity of the content listened to and to create reports. If a user is registered with YouTube, LLC, YouTube Video can associate the videos played with the profile.

When you access this content, you connect to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, where your IP address and, if applicable, browser data such as your user agent are transmitted.

3.13.1 PURPOSE AND LEGAL BASIS

The use of the service is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO.

3.13.2 STORAGE PERIOD

The concrete storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video: https://policies.google.com/privacy.

3.14 DATA PROCESSING WITHIN jQuery CDN

We use jQuery CDN to properly deliver the content on our website. jQuery CDN is a service provided by jQuery, which acts as a content delivery network (CDN) on our website.

A CDN helps to provide content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to servers of jQuery, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of jQuery CDN.

3.14.1 PURPOSE AND LEGAL BASIS

The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision and optimisation of our online offer pursuant to Art. 6 para. 1 lit. f. DSGVO.

3.14.2 STORAGE PERIOD

The concrete storage period of the processed data cannot be influenced by us, but is determined by jQuery. Further information can be found in the privacy policy for jQuery CDN: https://www.stackpath.com/legal/privacy-statement/.

3.15 Consent Management

In order to comply with data protection requirements, we use a consent management tool on our website. With this tool, we obtain the necessary consents for the setting of cookies or the use of external services. The consents are stored.

The processing is necessary for the fulfilment of a legal obligation to which the controller (website operator) is subject. Art. 6 (1) lit. c DSGVO is therefore used as the legal basis for the processing.

3.16 Tarte Au Citron

We use the Tarte Au Citron service on our website. The provider of the service is Tarte Au Citron, SIREN 520 271 669, 4 RUE LEO VALENTIN – 34500 Béziers, France.

3.17 WPML

We use the WPML service on our website. The provider of the service is OnTheGoSystems Ltd, 22/F 3 Lockhart Road, Wanchai, Hong Kong, China.

As this service is hosted locally on the web server, there is no data transmission to third parties. We base this processing on a legitimate interest (Art. 6 para. 1 lit. f DSGVO).

This application is needed to ensure the full functionality of the website. This is a language tool which is considered essential.

3.18 Amazon Web Services

We use the Amazon Web Services service on our website. The provider of the service is Amazon Web Services EMEA S.à r.l., 38 Avenue John F. Kennedy L-1855, Luxembourg.

As this service is hosted locally on the web server, there is no data transmission to third parties.

3.19 Google Tag Manager

We use the Google Tag Manager service on our website. The provider of the service is Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland.

The use of the service may result in data transfer to a third country (USA).

Further information can be found in the provider’s data protection information at the following URL: https://policies.google.com/privacy.

3.20 Web security

On our website we use tools that protect against unauthorised access, spam or other attacks. This increases the security of our website.

We base this processing on a legitimate interest (Art. 6 para. 1 lit. f DSGVO).

Our legitimate interest is to be able to guarantee the security of our website and to protect ourselves against unauthorised access, spam and other attacks.

4. USE OF SOCIAL PLUGINS

On our website, we use “social media plugins” of the social networks Facebook, Xing, LinkedIn and kununu. The social media plugins are recognisable by the logo of the respective social network.

Facebook Inc. (1601 S. California Ave – Palo Alto – CA 94304 – USA)

XING AG (Gänsemarkt 43 – 20354 Hamburg – Germany)

LinkedIn Corp. (2029 Stierlin Court – Mountain View – CA 94043 – USA)

Kununu GmbH (Neutorgasse 4-8, Top 3.02 – 1010 Vienna – Austria)

The social media plugins on our website are deactivated by default. To use the social media plugins, you must activate them by clicking on the corresponding button. As long as the social media plugin is not activated, no data is transmitted to the social network. After activation, the social media plugin establishes a connection with the servers to the social network and remains active until you deactivate it again or delete your corresponding cookies. Activation establishes a direct connection with the server of the respective social network. The content of the social media plugin is transmitted by the social network directly to your browser, which embeds it in the visited website. Therefore, we have no influence on the scope of the data collected by the social media plugin.

For further information on the purpose and scope of data collection and the further processing and use of data by the respective social networks, your rights in this regard and setting options for protecting your privacy, please refer to the notes on data protection of the social networks.

Facebook: https://www.facebook.com/policy.php

Xing: https://www.xing.com/privacy

LinkedIn: http://de.linkedin.com/legal/privacy-policy

Kununu: https://www.kununu.com/de/info/datenschutz

5. HOW DO WE PROTECT YOUR PERSONAL DATA?

We implement physical, technical and administrative security measures to adequately protect your personal data from loss, misuse, unauthorised access, disclosure and alteration.  These security measures include firewalls, data encryption, physical access restrictions for our data centres and permission controls for accessing data.

6. CHANGES TO OUR DATA PROTECTION PROVISIONS

We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection statement will then apply to your next visit.

on any adjustments to our services, e.g. the introduction of new services. The new Data Protection Declaration will then apply when you next visit our website.

Contact Data Privacy

On request, we will always provide you with information about the type and scope of your data saved by us: datenschutz@alten.at

Flyer right to information:

Event reporting:

For ALTEN Engineering Factory Poland

Have a look at Data protection information for Poland.