Data Protection Statement

This website is operated by agru Oberflächentechnik Gesellschaft m.b.H. (FN 121999y), hereinafter “we”, “us” and “AGRU”, headquartered in Steyrerstrasse 31, 4595 Waldneukirchen, Austria. In this Data Protection Statement, we, as the controller pursuant to Art. 4 (7) EU GDPR, describe which data we collect when you visit our website and for what purpose we process it (Part A). We also tell you how we generally process the data of our customers, suppliers and interested parties for marketing purposes (Part B) and generally explain what rights we uphold and what protections we offer in the course of data processing (Part C). All pertinent contact details can be found in section C.4. of this Data Protection Statement.

As the protection of your personal data is of particular concern to us, we strictly adhere to the legal requirements of the Data Protection Act (DSG) and the EU GDPR when collecting and processing your personal data.

In the following section, we set out in detail the scope and purpose of our data processing and your rights as a data subject. For this reason, please read our Data Protection Statement carefully before you continue to use our website and, if applicable, give your consent to data processing.

A. Processing of personal data on our homepage

1. Personal data

The use of our website is generally possible without providing personal data. However, the use of individual services may be subject to different regulations, which we will inform you of separately.

Apart from the cookies described in detail below, we therefore only collect and store the data that you yourself provide to us by entering it in our input masks or actively interacting with our website in another way.

Personal data means information relating to an identified or identifiable natural person. This includes, for example, your name, your address, your telephone number or your date of birth, but also your IP address or geolocation data, which can be used to identify you.

2. Use of cookies

a. If you are only using our website for information purposes, i.e., if you do not register for a service or otherwise provide us with information – for example, via a contact form – we only collect the personal data that your browser transmits to our server. If you wish to visit our website, we collect the data listed below, which is technically necessary for us to display the website to you and to ensure its stability and security in accordance with Art. 6 para. 1 sentence 1 lit. f EU GDPR:

  • IP address
  • Date and time of the request
  • Time zone offset to Greenwich Mean Time (GMT)
  • Content of the request
  • Access status / http status code
  • Volume of data transferred in each case
  • Website from which the request originates
  • Browser used
  • Operating system and its user interface
  • Language and version of the browser software

b. In addition to the aforementioned data, first- and third-party cookies are stored on your computer when you use our website; these are small text files that are stored on your hard drive for the browser you are using. The organisation which sets a cookie (this is done by us and the third parties listed below here) receives certain information as a result. We need these cookies to recognise you as a user of the website and to be able to track the use of our services. Finally, we use cookies for marketing purposes in order to analyse your usage behaviour and to send you targeted advertising if necessary. 

A basic distinction can be made between first-party cookies, third-party cookies and third-party requests.

  • First-party Cookies

First-party cookies are stored in your browser by us or our website itself in order to offer you the best possible user experience. These are functional cookies in particular, such as shopping basket cookies.

  • Third-party Cookies

Third-party cookies are stored in your browser by a third-party provider. These are usually tracking or marketing tools which evaluate your user behaviour on the one hand and, on the other, offer the third-party provider the opportunity to recognise you on other websites you visit. Retarget marketing, for example, is fundamentally based on the function of such cookies.

  • Third-party Requests

hird party requests are all requests that you as a site user make to third parties via our site – for example, if you interact with social network plugins or use the services of a payment provider. In this case, no cookies are stored in your browser, but it cannot be ruled out that personal data will be sent to this third-party provider through the interaction. For this reason, we also inform you in detail in our Data Protection Statement about the tools and applications we use.

c. Our website(s) use the following types of cookies, the scope and function of which are explained below:

  • Transiente Cookies

Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies, which store what is known as a session ID with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to our website. These session cookies are deleted when you log out or close the browser.

  • Persistente Cookies

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. However, you can delete the cookies yourself at any time in your browser settings.

d. It is possible for you to change your browser settings so that, for example, you refuse to accept third-party cookies or all cookies. In this case, however, please note that you may no longer be able to use all the functions of our website.

e. We also use cookies to identify you for subsequent visits if you have an account with us - otherwise you will need to log in each time you visit.

3. Use of Google tools

We use various web analysis and marketing tools by Google on our website, in the course of which cookies are stored.

You can prevent the installation of cookies from Google in various ways, in particular by rejecting the service when visiting our website or by changing the settings of your browser software accordingly. Details on individual rejection can be found in the description of the respective tool. Please note that in this case you may not be able to use all the functions of our website to their full extent.

Due to the web analysis and marketing tools described below and used by us, your browser automatically opens a direct connection to the Google server. We have no influence on the scope of the information transmitted in this context and the further use of the data by Google. The scope and purposes of the processing known to us are described below for the respective tools. If you are registered with a Google service, Google can assign the visit to your account - but even if you are not registered with Google or have not logged in, there is a possibility that the provider will discover and store your IP address.

Further information on the purpose and scope of data collection and its processing by Google as well as further information on your rights and setting options in this regard can be obtained from Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA; Google has agreed to the use of the Privacy Shield. Details can be found on:

http://www.google.com/intl/de/policies/privacy

https://services.google.com/sitestats/de.html

http://www.networkadvertising.org

https://www.privacyshield.gov/EU-US-Framework

a. We use the web analysis and marketing tool Google Analytics on our website. Google Analytics is a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The cookies used for this purpose generate information about your use of this website and are usually transmitted to a Google server and stored there.

Google uses this information on our behalf to analyse your use of our website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. If you would like further information on the type, scope and purpose of the data collected by Google, we recommend that you read the Google Data Protection Policy.

5. Links to other websites

We also provide links to other websites on our website; this is for information purposes only. These websites are not under our control and are therefore not covered by the provisions of this Data Protection Statement. However, if you follow a link, it is possible that the operator of this website will collect data about you and process it in accordance with its Data Protection Statement, which may differ from ours. Please always gather information yourself about the data protection regulations in effect on the websites we link to.

6. Collection and processing of personal data

ersonal data that goes beyond the information stored by cookies is only processed by us if you provide it to us voluntarily, for example when you register with us, enter into a contractual relationship with us or otherwise contact us. This exclusively means contact details and information about the matters with which you approach us.

We use the personal data provided by you only to the extent necessary to fulfil the respective purpose of processing (e.g., registration, sending the newsletter, processing an order, sending information and advertising material, processing a competition, answering a question, providing access to certain information) and to the extent permitted by law (in particular in accordance with Art. 6 EU GDPR) (e.g., sending advertising and information material to existing customers).

The purpose for processing your data is operating our website and providing company-specific information in a targeted way, including presenting our range of goods and services (marketing). Any further use of your data will only take place if you have given your express prior consent. You can revoke your consent at any time for the future, as explained in detail below.

7. Storage duration

Data that you have made available to us exclusively for customer service or for marketing and information purposes will be stored for a period of three years after our last contact. However, if you so wish, we will also delete your data before this period expires, provided there is no legal obstacle to this.

In the event that a contract is initiated or concluded, we process your personal data after the contract has been fully processed until the expiry of the guarantee, warranty, limitation, and statutory retention periods applicable to us, and beyond that until the end of any legal disputes in which the data is required as evidence.

8. Newsletter

You have the option of subscribing to our free newsletter. With this newsletter you will receive all the latest news and information about our company as well as customised advertising at regular intervals. To receive our newsletter, you need a valid email address.

We check the email address you have entered in our registration form to see whether you actually wish to receive newsletters. We do this by sending an email message to the email address you provided; you can confirm receipt of this by clicking on a link provided. After confirming the email you will be registered for our newsletter. (Double opt-in)

We store your IP address and the date and time of your registration when you first register for the newsletter. This is done for security reasons in case a third party misuses your email address and subscribes to our newsletter without your knowledge. We do not collect and process any other data for the newsletter subscription; the data is used exclusively for the subscription to the newsletter.

Unless you object, we will transfer your data within our Group for the purpose of analysing and transmitting information for advertising purposes. Within the group of companies, the data that you have provided to us to receive the newsletter will be compared with data that we may collect elsewhere (e.g., if you purchase a product or book a service).

Your newsletter registration data will not be passed on to third parties who do not belong to the group of companies. You can unsubscribe from our newsletter at any time; you will find the details on how to unsubscribe in the confirmation email and in each individual newsletter.

B. Processing of the data of our customers, suppliers and interested parties for marketing purposes

We use the personal data of our customers and suppliers, e.g., contact persons, their contact details and marketing-relevant information, not only for the purpose of contract processing and within the scope of statutory retention obligations (e.g., accounting), but also beyond this for marketing and customer care purposes.

We also collect personal data from interested parties (e.g., contact persons, their contact details and marketing-relevant information) in the course of our acquisition and sales activities. We are always on the lookout for potential contractual partners on the internet, at trade fairs and other events and maintain a marketing database for this purpose in order to enable targeted advertising for our products and services. We carry out all of the measures listed here in the legitimate interest for marketing purposes in accordance with Art. 6 para. 1 sentence 1 lit. f EU GDPR in conjunction with recital 47 for a period of three years from the end of a contractual relationship (customers & suppliers) or our first (unsuccessful) contact (interested parties), unless the data subject has given their express consent beyond this.

Where we do not collect personal data for marketing purposes from the data subject themselves, we will inform the data subject of where we have collected their data when they first contact us. Due to tax and administrative considerations, we have founded various companies in Austria and abroad with which we process personal data in the context of customer service and marketing (as well as for other purposes), partly jointly and partly within the framework of order processing relationships. Together with these companies, each of which is also a controller within the meaning of the EU GDPR, we maintain a joint marketing database.

A complete list of our affiliated companies can be found on https://www.agru.at/de/ at the bottom of the homepage below “AGRU locations”. If we are to provide products and services offered by other companies affiliated with us as part of an ongoing business relationship, or as a result of an explicit enquiry from an interested party, we pass on the interested party's personal data to the companies affiliated with us that offer the products and services of interest to the specific data subject for marketing purposes on the basis of a legitimate interest.

We and each of our affiliated companies store data for marketing purposes and customer support for the period described in A.4.

C. General information on data protection

1. Data transmission

Your data will not be transferred to third parties unless we are legally obliged to do so, the transfer of data is necessary for the fulfilment of a contractual relationship concluded between us or you have previously expressly consented to the transfer of your data. External processors or other cooperation partners will only receive your data if this is necessary for contract processing or if we have a legitimate interest in this, which we will always disclose separately in the event of an incident. If one of our processors comes into contact with your personal data, we ensure that they comply with the provisions of the data protection laws in the same way as we do.

We will not sell or otherwise market your personal data to third parties outside the Group. If our contractual partners or processors are based in a third country, i.e., a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

2. Security

We use numerous technical and organisational security measures to protect your data against manipulation, loss, destruction and access by third parties. Our security measures are constantly being improved in line with technological developments on the internet. If you would like more information on the type and scope of the technical and organisational measures we have taken, please do not hesitate to contact us in writing at any time.

3. Your rights

In accordance with the General Data Protection Regulation and the Data Protection Act, you are entitled to the following rights and legal remedies as a data subject of our data processing:

  • Right to information (Art. 15 EU GDPR)

As the data subject of the data processing described above and other data processing, you have the right to request information about whether and, if so, which personal data about you is being processed. For your own protection - so that no unauthorised person receives information about your data - we will check your identity in a suitable form before providing information.

  • Right to rectification (Art. 16) and erasure (Art. 17 EU GDPR)

You have the right to demand the immediate rectification of incorrect personal data concerning you or – taking into account the purposes of the data processing – the completion of incomplete personal data and the erasure of your data, provided that the criteria of Art. 17 EU GDPR are met.

  • Right to restriction of processing (Art. 18 EU GDPR)

Under the legal requirements, you have the right to restrict the processing of all personal data collected. This data will only be processed with your individual consent or for the assertion and enforcement of legal claims after the request for restriction.

  • Right to data portability (Art. 20 EU GDPR)

You may request the unhindered and unrestricted transfer of personal data that you have provided to us to you or a third party.

  • Right to object (Art. 21 EU GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is necessary for the purposes of our legitimate interests or those of a third party. Your data will no longer be processed following an objection unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims. You can object to data processing for the purpose of direct advertising at any time with effect for the future.

  • Revocation of consent

If you have separately given your consent to the processing of your data, you can revoke this at any time. Such a cancellation affects the permissibility of the processing of your personal data after you have expressed it to us.

If you take a measure to enforce your above-mentioned rights under the GDPR, AGRU must respond to the requested measure or comply with the request without delay, but at the latest within one month of receipt of your request.

We will respond to all reasonable requests within the legal framework free of charge and as promptly as possible.

The data protection authority is responsible for applications concerning violations of the right to information, violations of the rights to confidentiality, rectification or erasure. Its contact details are as follows:

Österreichische Datenschutzbehörde
Wickenburggasse 8
1080 Vienna

4. Contact information/contact person

a. Contact information of the person responsible

agru Oberflächentechnik Gesellschaft m.b.H.
Steyrerstrasse 31
A-4595 Waldneukirchen
Österreich/Austria

Phone: +43 / 7257 / 7696-0
Fax: +43 / 7257 / 7696-9841
Email:
Website: www.agru.net  

Company register number: FN 121999y
Commercial register court: Landesgericht Steyr
VAT number: ATU 24115909

b. Contact information of the contact person for data protection matters

You can send questions on the subject of data protection or updating, correction and deletion of personal data as well as requests for information to the following email address: .

 

Stand: Mai 2018