MENÜ MENÜ

Privacy statement

Responsibility for this website lies with:

EWP Recycling Pfand Österreich gGmbH
Managing Directors: Monika Fiala and Simon Parth
Schönbrunner Schloßstraße 2/601
1120 Vienna
Austria

T +43 1 358 12 12

Email: office@ewp-oe.at

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, DSG (Austrian Data Protection Act), TKG (Austrian Telecommunications Act) 2021). In this data protection information, we inform you about the most important aspects of data processing within the framework of our website.

  1. Data processing in connection with our website
  2. a) The data we process

In the course of your visit to this website, the following information will be processed: The date and time you accessed a page on our website, your IP address, the name and version of your web browser, the website (URL) you visited before accessing this website, certain cookies (see below) and the information you provide yourself by filling out the contact form or another form.

There is no obligation to actually provide the information we ask you to provide on our website. However, if you do not do so, you may not be able to use all the features of the website.

  1. b) Purposes of the data processing

We will process your personal data for the following purposes:

  • to provide you with this website and to further improve and develop this website;
  • to be able to create usage statistics;
  • to detect, prevent and investigate attacks on our website;
  • to respond to your enquiries;
  • to receive your application documents;
  • to enable you to subscribe to our newsletter.
  1. c) Legal basis of the processing

The legal bases for the processing of your personal data are:

  • Overriding legitimate interest (pursuant to Art. 6(1)(f) GDPR), which consists of achieving the purposes mentioned above.
  • Overriding legitimate interest in connection with the assertion, exercise or defence of legal claims (e. g. claims under the Equality Act) (applications)

If a purpose so necessitates, your explicit consent will be obtained.

We process applicants’ data on the basis of (pre-)contractual obligations (Art. 6(1)(b) GDPR) and our legitimate interests (Art. 6(1)(f) GDPR). If we are to keep your data on record, we will obtain your consent for this (Art. 6(1)(a) GDPR). If we process your data on the basis of your consent, you have the right to withdraw this consent at any time. This does not affect the lawfulness of the data processing carried out up to this point in time (Art. 7(3) GDPR).

  1. d) Making contact

If you contact us by email or contact form, the data you provide will be purposefully stored with us for the purpose of processing your enquiry and in case of follow-up questions. We will not pass on these data without your consent. 

  1. e) Cookies

Our website uses cookies. These are small text files that are stored on your device with the help of the browser. Session cookies do not contain any personal data (e.g. IP addresses) and are automatically deleted after your visit to the website. Other cookies may contain personal data and remain saved on your device to ensure the user-friendliness of our offering. If you do not want this, you can set up your browser so that it informs you about cookies being set and you allow this only in individual cases. If cookies are deactivated, the functionality of our website may be restricted.

You can change your cookie settings here.

  1. f) Hosting and log files

In order to operate this website, we need hosting services such as infrastructure and platform services, processing capacity, storage, database services, security and maintenance services. We or our hosting service provider process the data of our website visitors such as contact details, content data, usage data, meta and communication data on the basis of our legitimate interest in providing a satisfying and secure website offering. For the same reason, we or our hosting service provider process so-called server log files (incl. accessed website, file, access time, data volume, browser and operating system information, referrer website, IP address, user provider). Log files are retained for a maximum of 3 months for security reasons (clarification of misuse or fraud). If necessary for evidence purposes following an incident, data can also be stored for longer. We have entered into a contract with our hosting provider on the subject of order data processing. Specifically, we use the hosting provider ALL-INKL.COM - Neue Medien Münnich, based in 02742 Friedersdorf (Germany).

  1. g) Newsletter

You can subscribe to our newsletter on our website. For this, we need your email address as well as your consent. Once you have registered for the newsletter, you will receive a confirmation email with a link to confirm your registration. This procedure is called “double opt-in” and is state of the art. Applications are logged in order to comply with the requirement to provide evidence. This also includes the data categories of login and confirmation time as well as IP address. Changes to your data stored with the mailing service provider may also be logged.

The newsletters contain a small file that is retrieved from the server of the mailing service provider when the newsletters are opened. This collects technical information, access time and the user's IP address. This information serves to improve the service and to analyse target group behaviour. You can cancel the newsletter subscription at any time by clicking on the unsubscribe link contained in each newsletter email. Failing that, please send your cancellation request to the email address office@ewp-oe.at. We will then immediately delete your data in connection with sending out the newsletter.

The data may be stored in a deletion log for the statutory period of limitation as evidence that we are permitted to send the newsletter, in the event of a complaint being raised. The newsletter is sent via the service provider “Brevo” of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. The data is processed exclusively within the EU. We have entered into a corresponding contract with the provider for order data processing.

Brevo uses the service "ReCaptcha" of Google, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland in the course of subscribing to the newsletter. This service serves to identify the difference between an application made by a person and an application made by a machine ("bot") (spam protection). ReCaptcha uses cookies for this that cannot be deselected. Otherwise, you cannot subscribe to the newsletter. The data processed by Google in the USA can include IP addresses, information on operating systems, devices or browsers, language settings, location data, mouse and keyboard inputs, time spent on websites, previously visited websites, cookies and interactions with ReCaptcha. The data processing takes place on the basis of our legitimate interest to protect our newsletter subscription against misuse and automated spam. Google LLC is certified under the EU-US Data Privacy Framework to ensure an adequate level of data protection for the recipient: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active.

Privacy statement: https://policies.google.com/privacy

  1. h) Integration of third-party services and/or content

The websites of EWP may contain links to external third-party websites whose content is not under the control of EWP. The respective provider or operator of the websites is always responsible for the content of any linked pages. The linked pages were checked at the time of linking for possible legal violations. No illegal content was detectable at the time of making such links. Should we become aware of legal violations, we will remove the corresponding links to the external websites concerned without delay.

Services of third-party providers are used, e.g. to integrate videos. For this purpose, these third-party providers need IP addresses of the website users, otherwise they will not be able to send the integrated content to the users' devices. These data may be sent to servers in the USA.

Google LLC is certified under the EU-US Data Privacy Framework to ensure an adequate level of data protection for the recipient.

In addition, the third-party provider can place cookies on the devices of end users which, for example, record which video was watched and for how long, in order to be able to continue watching from that point. Furthermore, the cookies may contain technical information about the user's browser and operating system as well as information on website links, visit time, etc.

We incorporate the following third-party services:
Videos of YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy policy: https://www.google.com/policies/privacy/. 
Google is certified under the EU-US Data Privacy Framework: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
Opt-out: https://adssettings.google.com/authenticated

  1. Data processing in connection with our social media accounts
  2. a) The data we process

The following personal data may be processed when you visit our account:

  • Your Facebook user name / Instagram user name
  • Messages that you send to us via the chat function
  • Comments that you leave under our posts
  • Information that you share in your public profile (e.g. photos)
  1. b) Purposes and legal basis of data processing

We use our social media accounts to provide information about current developments at our company. Our social media accounts are also used to communicate with interested parties. This communication is based on the legal basis of your consent (pursuant to Art. 6(1)(a) GDPR) or our legitimate interest (pursuant to Art. 6(1)(f) GDPR), whereby the specific legitimate interest is corporate communication and the provision of information.

  1. c) Data processing by Meta Platforms, Inc

When using our Facebook page/Instagram page, Meta Platforms, Inc processes personal data. As the (mere) operator of our social media accounts, we do not have full access to the data that Meta Platforms, Inc collects.

Please note that Meta Platforms, Inc, the operator of the platforms “Facebook” and “Instagram”, is based in the USA. We would like to point out that the level of data protection in the USA is lower than that in the EU. Meta Platforms, Inc is independently listed under the EU-US Data Privacy Framework. Please note, however, that this only applies to “non-HR data”. The use of our social media accounts is therefore not suitable for business purposes.

  1. d) Joint responsibility for data processing

In a decision by the European Court of Justice in 2018 (C-210/16), the ECJ ruled that “Facebook” is a joint controller (within the meaning of the General Data Protection Regulation) together with the respective operator of the fan page. Please note that we can only decide on the means and purposes of data processing in relation to our social media accounts. All information on the processing of personal data at Meta Platforms, Inc can be found in the privacy statement of

  1. Data processing in connection with our customer service
  2. a) The data we process

When processing enquiries, the following personal data may be processed:

  • Your first and last names, email address and, if applicable, information about your role and the company you work for
  • Content of the messages that you send to us via our customer service.

Telephone calls between you and our customer service are not recorded.

  1. b) Purposes of the data processing

We use our customer service to discuss and clarify all kinds of questions about the Austrian deposit system for single-use drinks containers.

  1. c) Legal basis of the processing

This communication is based on our legitimate interest (pursuant to Art. 6(1)(f) GDPR). The specific legitimate interest is education about the deposit system. The legal basis is also the public interest in accordance with Art. 6(1)(e) GDPR, as there is a need for information in the public interest regarding the deposit system for single-use drinks containers.

For our customer service, we partly use Benefit Büroservice GmbH, Europaplatz 5, 3100 St. Pölten (legal basis for the transfer: the concluded agreement pursuant to Art. 28 GDPR) and for our ticketing system Atlassian Inc. (Legal basis for the transfer: the agreement concluded in accordance with Art 28 GDPR and the standard data protection clauses concluded; an adequate level of data protection at the recipient is ensured by the fact that Atlassian Inc. is certified under the EU-US Data Privacy Framework: https://www.dataprivacyframework.gov/).

  1. Retention period
  • Server logs: We store your data for a period of three months. A longer retention period will apply only if this required to investigate identified attacks against our website.
  • Making contact: Your data can be stored for up to two years. In addition, statutory retention periods are complied with.
  • Applications: Your data will be deleted seven months after the end of the application process (§ 29 GlBG (Austrian Equality Act).
  • Social media: Your data will be published on social media channels until you revoke their publication.
  • Customer service: Your data will be stored in the course of customer service for a maximum period of 10 years.
  1. Automated decision-making or profiling (Art. 13(2)(f) GDPR)

No automated decision-making or profiling takes place in or by our company in connection with the operation of the website or in connection with our social media accounts.

  1. Your rights

We would like to inform you that, provided the legal requirements are met, you have:

  • the right to request information about which of your data are processed by us (see Art. 15 GDPR for details).
  • the right to request the rectification or completion of inaccurate or incomplete data concerning you (see Art 16 GDPR for details).
  • the right to erasure of your data (see Art. 17 GDPR for details).
  • The right to object to the processing of your data that is necessary to protect our legitimate interests or those of a third party (see Art. 21 GDPR for details). This applies in particular to the processing of your data for advertising purposes.
  • The right to receive the data you have provided in a structured, commonly used and machine-readable format.
  • If we process your data on the basis of your consent, you have the right to withdraw this consent at any time. This will not affect the lawfulness of the data processing carried out up to this point (Art. 7(3) GDPR).
  • If, contrary to expectations, your right to lawful processing of your data is violated, please contact us by post or email. We will endeavour to process your request immediately. You also have the right to lodge a complaint with the supervisory authority responsible for data protection matters. The address of the Austrian Data Protection Authority is: Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna.

 

©2023 EWP Recycling Pfand Österreich gGmbH. Austria. All Rights Reserved.