Privacy and data protection

KF - HOLZ Kaltenegger GmbH

Version: 01.10.2022

The protection of your personal data is very important to us. Therefore, we process your data solely on the basis of statutory regulations (GDPR, Austrian Telecommunications Act (TKG) 2003). In this privacy statement, we provide you with information about the most important aspects of data processing within our website.

1. Contacting us

If you contact us via the form on the website or by e-mail, your data will be stored for six months to process the request and in case of any follow-up questions. We will not share this information without your consent.

2. Cookies

2.1 Technical and functional cookies

We only use the following technical or functional cookies to ensure basic functions and the proper functioning of the website. These cookies are automatically deleted when the website is closed and are not stored on the computer!

We use the following cookies for this purpose:

_GoogleAnalytics
Stores your connection to Google Analytics for the entire homepage.
Cookie duration: Session

_GoogleMaps
Stores your connection to Google Maps for the entire homepage.
Cookie duration: Session

_YouTube
Stores your connection to YouTube for the entire homepage.
Cookie duration: Session

modalShown
Stores your selection in the CookieBar for the entire homepage.
Cookie duration: Session

In addition, we use technologies for the fulfillment of legal obligations to which we are subject (e.g., to be able to prove consent to the processing of your personal data) as well as for web analytics and online marketing. For more information on this, including the respective legal basis for data processing, please see the following sections of this Privacy Policy.

Insofar as you have consented to the use of the technologies pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO, you may revoke your consent at any time by sending a message to the contact option described in the Privacy Policy.

2.2 Use of cookies and other technologies for web analysis and advertising purposes

Soweit Sie hierzu Ihre Einwilligung nach Art. 6 Abs. 1 S. 1 lit. a DSGVO erteilt haben, verwenden wir auf unserer Webseite die nachfolgenden Cookies und andere Technologien von Drittanbietern. Nach Zweckfortfall und Ende des Einsatzes der jeweiligen Technologie durch uns werden die in diesem Zusammenhang erhobenen Daten gelöscht. Sie können Ihre Einwilligung jederzeit mit Wirkung für die Zukunft widerrufen. Weitere Informationen zu Ihren Widerrufsmöglichkeiten finden Sie in dem Abschnitt "Cookies und weitere Technologien". Weitere Informationen einschließlich der Grundlage unserer Zusammenarbeit mit den einzelnen Anbietern finden Sie bei den einzelnen Technologien. Bei Fragen zu den Anbietern und der Grundlage unserer Zusammenarbeit mit ihnen wenden Sie sich bitte an die in dieser Datenschutzerklärung beschriebenen Kontaktmöglichkeit.

Use of Google services

We use the technologies of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), as described below. The information automatically collected by Google technologies about your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. For the USA, there is no adequacy decision of the European Commission. Our cooperation is based on standard data protection clauses of the European Commission. If your IP address is collected via Google technologies, it will be shortened before being stored on Google's servers by activating IP anonymization. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there. Unless otherwise specified for the individual technologies, the data processing is based on an agreement concluded for the respective technology between jointly responsible parties in accordance with Art. 26 DSGVO. Further information about data processing by Google can be found in Google's privacy policy.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. As a matter of principle, your IP address will not be merged with other data from Google. Data processing is carried out on the basis of an order processing agreement by Google.

Note on data transfers to the USA

Through the services from Facebook and Google your data will (at least in some cases) also be transferred to the third country USA. Authorities or intelligence services in the USA can access your data without you having any legal options against this. The EU Court of Justice has therefore determined that there is no sufficient level of data protection within the meaning of Art. 44ff DSGVO for data transfers from the EU to the USA. For this reason, the legal basis for the use of this service is your express consent pursuant to Art. 49 (1) lit. a DSGVO.

Changing the cookie settings in your web browser

How the web browser you use handles cookies, i.e. which cookies are allowed or rejected, can be defined by you in the settings of your web browser. You can also delete cookies already stored on your computer/end device yourself at any time. Where exactly these settings are located depends on the respective web browser. Detailed information on this can be accessed via the help function of the respective web browser.

In addition, it is possible to generally object to cookies and similar tracking technologies via the services mentioned below by setting your individual preferences - which technologies for usage- and interest-based advertising you want to allow:

3. Hosting

We use an external web hosting service to operate our website.

Hosting provider
With the support of the following processors, we process personal connection data for the purpose of data and system stability for a maximum duration of seven days.

The statutory basis for processing is our legitimate interest pursuant to Article 6, para. 1, lit. f GDPR (technical security measures).

Service: Web- u. Mail Hosting
Operator: WDW WerbeDesign Wanger e.U.
Data privacy statement: https://www.wdw.at/datenschutz/

Access data
In the context of hosting, for the purpose of monitoring technical function and to increase the web host’s operating security, we process the following personal user data in a server log file for a maximum duration of seven days, on the statutory basis of legitimate interest pursuant to Article 6, para. 1, lit. f GDPR (technical security measures):• Website visited

  • Time and date of access
  • Amount of transmitted data in bytes
  • Source/link from which you reached the page
  • Browser used
  • Operating system used
  • IP address used

The collected data is used simply for statistical analyses and to improve the website. However, the website operator reserves the right to retroactively review the server log files if specific indications suggest unlawful use.

4. Map service

On this website, we offer map providers in the form of iFrame nesting. This allows us to display interactive maps directly on the website and to enable convenient use of map functions.

Google Maps
As a joint controller alongside Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, we process connection data and browser data for the purpose of displaying an interactive map for the duration that the map is shown. In doing so, we allow Google Maps to place cookies on the user’s computer and to create a user ID to identify the unique user as part of the advertising network that Google operates.

The statutory basis for the processing is consent given by you, pursuant to Article 96, para. 3 TKG, in conjunction with Article 6, para. 1, lit. a GDPR.

If continuing independent processing of the data, particularly as part of Google’s advertising network, is carried out by Google Maps, Google Maps is the sole controller of this. Further details can be found in the Google Maps privacy policy.

5. Audio and video services

On this website, we offer video and audio services in the form of iFrame nesting. By doing this, we are able to show you multimedia content directly on the website.

YouTube
For integrating videos, our website uses the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Normally, when calling up a page with embedded videos, your IP address has already been sent to YouTube and cookies have been installed on your computer. However, we have integrated our YouTube videos with an advanced data protection mode (in this case, YouTube continues to make contact with Google’s DoubleClick service, but personal data is not analysed, in accordance with Google’s data privacy policy). Therefore, YouTube no longer stores information about users, unless they view the video. If you click on the video, your IP address is sent to YouTube and YouTube learns that you have watched the video. If you are logged into YouTube, this information shall also be attached to your user account (this can be prevented by logging out of YouTube before calling up videos).

From this point, we have no knowledge of potential collection and use of your data by YouTube and have no influence on this.

The statutory basis for the processing is consent given by you, pursuant to Article 96, para. 3 TKG, in conjunction with Article 6, para. 1, lit. a GDPR.

If continuing independent processing of the data, particularly as part of YouTube/Google’s advertising network, is carried out by YouTube/Google, YouTube/Google is the sole controller of this.

More information can be found in YouTube’s privacy policy.

6. Facebook page

If you visit our Facebook page, personal data (documentation of usage behaviour) will be processed by Facebook through the use of cookies. Anonymised, statistical data about website activity will be created from this information and provided to us automatically (Insights). In accordance with Article 26 of the European General Data Protection Regulation, we are jointly responsible for this data processing alongside Facebook. We base this on our legitimate interest. Without processing this data, it would not be possible for us to provide and optimise our presence on Facebook. More information can be found on the Facebook information page.

We are not provided with any personal data. At the same time, the data is also stored and processed by Facebook itself, so that Facebook is able to make a connection to the respective Facebook profile. Facebook can use this data for its own advertising purposes, in accordance with the Facebook data policy. The consent for this is the responsibility of Facebook and cannot be influenced by us. More information about the collection and use of data by Facebook and your rights and options to protect your privacy in this regard can be found in the Facebook data policy.

7. Newsletter

You have the option to subscribe to our newsletter via our website. For this we need your e-mail address and confirmation of your consent to receive the newsletter.

Once you have subscribed to the newsletter, we will send you a confirmation e-mail with a link to confirm the registration.

You can cancel the subscription to the newsletter at any time. Please send your cancellation to the following e-mail address: office@hms-strasser.com or cancel the subscription using the next newsletter by clicking on the corresponding link in the footer area of the newsletter. We will then delete your data related to the mailing list immediately. 

This cancellation shall not affect the legality of processing carried out between consent and cancellation.

8. Processing of personal data for the opening of a customer account and order processing

As required by Art. 6 para. 1B GDPR, personal data will be collected and processed if you provide it to us for the purposes of fulfilling a contract or in order to open a customer account. The type of data that will be collected and processed can be seen on the data input form. You can delete your customer account at any time, by sending notification to the DPO, indicated below. We will store and use the data you provide in order to process the order. After fulfilment of the order or after deletion of your customer account, your data will be stored for the legal conservation period required for tax and commercial administration purposes. It will then be deleted, unless you have expressly consented to any further use of your data, or unless you receive notification that the continued use of your data is permitted by law, of which we will inform you accordingly.

9. Processing of data for fulfilment of orders

9.1 Passing on of personal data

In order to process your order, we will work with the service providers indicated below, who may assist us with the fulfilment of all or part of the contract. These providers will be supplied with certain personal data, in accordance with the following information.

In the context of processing your order, the personal data we receive will be supplied to the transport firm responsible for delivering the goods, where necessary. Your payment details will be supplied to credit institutions, where necessary in order to process the payment. Please see below, for information about the use of payment services providers. The legal basis for the provision of personal data is Article 6 paragraph 1b GDPR.

9.2 Use of payment services providers

For the use of online payment we use the payment gateway of Nets.

In principle, there is no direct contractual relationship between Nets Branch Sweden (hereinafter referred to as "Nets") and you as a cardholder or user of payment services.

Nets therefore recommend that you contact your direct contractual partner, i.e. the merchant with whom you have made a payment transaction, the card institution from which your payment card originated (usually your bank) or the company that issued the invoice, with any requests regarding the processing of your personal data as a cardholder or user of payment services.

However, Nets reserves the right to process your personal data in accordance with contracts with the merchant in the form of transaction data. In this regard, the legal basis of the processing of personal data by us is that it is necessary for compliance with various legal obligations and requirements to which we are subject by law or contract. In addition, the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, which do not override the interests or fundamental rights and freedoms of the data subject. Our legitimate interests include, but are not limited to, our contractual obligation to process your payment transactions, to handle complaints, feedback and questions, to investigate, detect and prevent unlawful activities, and to ensure network and data security.

In a departure from the general rule, a direct contractual relationship exists between Nets and you as a Cardholder or Payment Services User when you use the service operated by Nets under the name "Save my Details".

https://cdn.dibspayment.com/terms/easy/Nutzungsbedingungen_Cookie-Hinweis.pdf

10. Newsletter

You have the possibility to subscribe to our newsletter via our website. For this we need your e-mail address and your declaration that you agree to receive the newsletter.

Once you have subscribed to the newsletter, we will send you a confirmation e-mail with a link to confirm your subscription.

You can cancel your subscription to the newsletter at any time. Please send your cancellation to the following e-mail address: office@kf-holz.com or cancel the subscription at the next newsletter by clicking on the appropriate link in the footer area of the newsletter. We will then immediately delete your data in connection with the newsletter dispatch.

This cancellation does not affect the lawfulness of the processing carried out on the basis of the consent until the cancellation.

11. Your rights

You are entitled to the following rights regarding your personal data stored by us:

  • Information
  • Correction
  • Deletion
  • Restriction
  • Portability
  • Withdrawal and objection

To contact us regarding the above, please get in touch at (office@hms-strasser.com).

If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated, you can complain to a supervisory authority. In Austria, this is the Data Protection Authority (dsb@dsb.gv.at).

12. you can reach us at the following contact details:

KF-Holz Kaltenegger GmbH | Gewerbepark Süd 2 | 5141 Moosdorf / Austria
T.: +43 676 5018610 | E.: office@kf-holz.com