Data protection statement
Protecting your personal data is a top priority for us!
Our website can be used without providing personal data.
We process the personal data of specific groups of data subjects exclusively in accordance with the provisions of the Austrian Protection Amendment Act and the General Data Protection Regulation. Data is deemed personal if it can be unambiguously assigned to a specific natural person. The general regulations on the website as well as regulations regarding various groups of data subjects provide you with information on the type, scope and purpose of the collection, use and processing of personal data by
FACC AG
Fischerstraße 9
4910 Ried im Innkreis
Since the company does not process data of authorities or public bodies, and its core activity does not consist in carrying out processing operations which require regular and systematic monitoring of data subjects, nor in the extensive processing of special categories of data pursuant to articles 9 and 10 of the General Data Protection Regulation, no data protection officer has been appointed. The data protection coordinator of FACC AG is happy to answer any inquiries regarding data protection at dataprivacy@facc.com.
In this data protection statement, we wish to inform you of the most important aspects of personal data processing within the framework of our website and of other processing activities in connection with external persons.
Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics also uses cookies. The information generated by Google cookies about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for us and providing other services relating to the use of the website and the internet. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Under no circumstances will Google associate your IP address with other Google data. By using this website, you consent to the processing of data collected about you by Google in the manner and for the purposes described above.
Please note that our website uses Google Analytics with the extension "_anonymizeIp()" to improve data protection. In this case, Google will first shorten your IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA before being shortened there. This therefore precludes personal identification when analyzing the use of our website. You can refuse the use of Google Analytics cookies by extending your browser, which allows you to exercise your right to object to the proactive collection, processing and use of data by Google Analytics. To do this, you can install the Google Analytics opt-out browser add-on. This prevents Google Analytics from storing information about websites you have visited. For more information and instructions for downloading and installing this opt-out browser add-on, click here.
Facebook Pixel
This website uses the Facebook pixel of the social networking site Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA or, if you are a resident of the European Union, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as "Facebook"). Facebook is certified under the Privacy Shield agreement and thus guarantees compliance with European data protection law.
When visiting our website, software establishes a connection and transmits data to Facebook servers, some of which are located in the USA. The Facebook pixel also uses cookies to store information about website users and to analyze visitors’ use of the website.
All personal data collected by FACC AG is anonymous and therefore does not allow FACC AG to infer the identity of the user. However, as this data is stored and processed by Facebook, a link to the respective Facebook user profile may be established. Facebook may also transfer this information to third parties if this is required by law or in the case that third parties process this data on Facebook's behalf.
Facebook processes data in accordance with Facebook's data usage guidelines. For more information on how the remarketing pixel works and how Facebook ads are displayed in general, please refer to Facebook's Data Use Policy.
FACC AG uses the Facebook pixel on its website for the purposes of pursuing its legitimate interests in analyzing, optimizing and efficiently managing its online content. The legal basis for the processing of personal data using the Facebook pixel is Article 6 para. 1 lit. f of the EU General Data Protection Regulation (GDPR).
The Facebook pixel allows Facebook to select visitors of the FACC AG website as target groups for the display of Facebook ads. FACC AG therefore uses the Facebook pixel accordingly so that the posted Facebook ads are only displayed to Facebook users who have shown an interest in the online content of FACC AG or who exhibit certain characteristics (e.g. an interest in certain topics or products determined on the basis of the websites visited) which FACC AG transmits to Facebook ("custom audiences"). By using the Facebook pixel, FACC AG also wishes to ensure that the Facebook ads match the potential interests of the users and are not perceived as a nuisance. In addition, the Facebook pixel allows FACC AG to track the effectiveness of Facebook ads for statistical and market research purposes by recording whether users were referred to the FACC AG website after clicking on a Facebook ad ("conversion"). For detailed information on how Facebook processes user data, please refer to Facebook's privacy policy.
Disabling the Facebook pixel
You can disable the collection of your user data on our website by activating the option "do not track" in your web browser. Our website recognizes the "do not track" signal that your web browser then transmits to all websites.
Alternatively, if you wish to disable the use of the Facebook pixel only, please click on the following link - an opt-out cookie will be set to prevent the collection of your data when visiting this website in the future: See below.
LinkedIn Insight Tag
This website uses the LinkedIn Insight Tag, a web analysis service of LinkedIn Ireland Unlimited Company (hereinafter referred to as "LinkedIn"), Wilton Place, Dublin 2, Ireland, on the legal basis of pursuing our overriding legitimate interests (website usage analysis) pursuant to Article 6 para. 1 lit. f of the EU General Data Protection Regulation (GDPR).
When visiting our website, software establishes a connection and transmits data to LinkedIn servers, some of which are located in the USA. The LinkedIn Insight Tag also uses cookies to store information about website users and to analyze visitors' use of the website.
According to LinkedIn, the data collected will be used by LinkedIn to evaluate the use of the website, to compile reports on website activity and to provide other services relating to the use of the website and the internet. Furthermore, this information allows us to display relevant offers and recommendations tailored to your interests after you have consulted our website.
LinkedIn may also transfer this information to third parties to the extent that this is required by law or in the case that third parties process this data on behalf of LinkedIn.
Please refer to LinkedIn's privacy policy for further information on the collection and use of data and on your options and rights with respect to the protection of your privacy. Once you have logged in to LinkedIn, you can disable the collection of data at any time. LinkedIn is certified under the Privacy Shield agreement and thus guarantees compliance with European data protection law.
Disabling the LinkedIn Insight Tag
You can disable the collection of your user data on our website by activating the option "do not track" in your web browser. Our website recognizes the "do not track" signal that your web browser then transmits to all websites.
Alternatively, if you wish to disable the use of the LinkedIn Insight Tag only, please click on the following link - an opt-out cookie will be set to prevent the collection of your data when visiting this website in the future: See below.
Twitter Tag
This website uses the Twitter Tag, a web analysis service of Twitter Inc. (hereinafter referred to as “Twitter“) on the legal basis of pursuing our overriding legitimate interests (website usage analysis) pursuant to Article 6 para. 1 lit. f of the EU General Data Protection Regulation (GDPR). Data is transferred to the USA on the basis of the Privacy Shields agreement.
When visiting our website, software establishes a connection and transmits data to Twitter servers, some of which are located in the USA. The Twitter Tag also uses cookies to store information about website users and to analyze visitors' use of the website.
According to Twitter, the data collected will be used by Twitter to evaluate the use of the website, to compile reports on website activity and to provide other services relating to the use of the website and the internet. Furthermore, this information allows us to display relevant offers and recommendations tailored to your interests after you have consulted our website.
Twitter may also transfer this information to third parties to the extent that this is required by law or in the case that third parties process this data on behalf of Twitter.
Please refer to Twitter’s privacy policy for detailed information on the processing of user data.
Disabling the Twitter Tag
You can disable the collection of your user data on our website by activating the option "do not track" in your web browser. Our website recognizes the "do not track" signal that your web browser then transmits to all websites.
Alternatively, if you wish to disable the use of the Twitter Tag only, please click on the following link - an opt-out cookie will be set to prevent the collection of your data when visiting this website in the future: See below.
Cookies policy
These cookies collect information on the browsing behavior of users of our website to ensure that only targeted advertising material which may be of interest to you is displayed. Targeting and advertising cookies may also be used to identify a repeat visit to our website or a visit to a website that is part of the network of our company's advertising partner. IP addresses are exclusively stored in an anonymous and encrypted form. The information to be displayed can be selected based on the interests of the user or on which advertisements he or she has previously viewed. These cookies also ensure that advertisements are displayed correctly and prevent the same advertisement from being shown too often. They are also used to measure the efficiency of advertising campaigns. The storage period of these cookies is three months. To view or delete the anonymized data stored by you (opt-out), please go to the following link.
Types of cookies used:
Strictly necessary | Cookie acceptance cookie Is used to record that a user has consented to the use of cookies |
Strictly necessary | Google Tag Manager Allows Google to recognize a user |
Web analysis | Google Analytics Used by Google to store anonymous user data for Google Analytics |
Advertising | Adform Used for managing advertising in the AdForm advertising network |
Advertising | Facebook Cookie Used to store information about the website user and to analyze the use of the website by the visitor |
Advertising | Twitter Cookie Used to store information about the website user and to analyze the use of the website by the visitor |
Advertising | LinkedIn Cookie Used to store information about the website user and to analyze the use of the website by the visitor |
Competitions
After submitting the competition entry form, the data you have entered will be processed by the person responsible for data protection for the purpose of conducting the competition on the basis of the competition agreement thus concluded until the competition has been concluded. There is no legal or contractual obligation to provide personal data. However, you must provide this information in order to take part in the competition. Failure to do so will merely result in you not being able to enter the competition. Further processing of the data, which is compatible with the original processing purpose, shall be performed, until revocation, on the same legal basis for the purpose of direct marketing in forms not requiring consent, such as the postal dispatch of advertising material addressed to you. In this case, the data will be forwarded to the shipping provider.
FACC-DEX (SWAN) registration
We offer you the possibility of contacting us on our website by using a contact form to request access to our data exchange solution "FACC-DEX (SWAN)". The data you enter there will be used by our company to check and validate your request with respect to applicable law, in particular U.S. and EU export laws. In this case, the information provided by the user for the above-mentioned purposes will be forwarded to the responsible office at FACC. Your data will not be stored on the web server on which this homepage is operated. Your data will not be transferred to third parties and will be deleted upon completion of the check. For more detailed information regarding the procedure, please contact the office indicated on the registration form.
Protection of personal data
We take a number of security measures to ensure the protection and security of your personal data. We take appropriate data collection, storage and processing methods and measures to protect against unauthorized access, modification, disclosure or destruction of personal data processed by FACC. We also take reasonable steps to ensure that personal information is handled securely by our contractors and service providers and in accordance with our privacy policy. The information is protected in a secure environment by a combination of physical and technical measures. There is no public access to this information. All information provided can only be accessed by special persons with access rights to our systems, who are obliged to keep the information strictly confidential. In addition, national legislation could force us to store information for a certain period of time. Encryption technology is used as required.
Rights
Pursuant to the General Data Protection Regulation, you can contact us free of charge if you have any questions regarding the collection, processing or use of your personal data, or if you wish to rectify, block, delete or object to this data or revoke your consent (the contact details are provided above). Please note that you have the right to have inaccurate data rectified, personal data deleted or data processing restricted if this is not in conflict with statutory storage obligations. You also have the right to appeal to the Austrian Data Protection Authority.
Categories of data subjects
Interested parties
Interested parties are all persons who are interested in our product and our other services and would like to be kept up-to-date on our latest developments on a regular basis.
The personal data of interested parties is processed within the scope of the following processing activities for the following purposes:
Marketing for interested parties | Providing information about products and services |
Event management | Planning and organizing events to promote the company and/or its products and services |
The legal grounds for processing the personal data of interested parties are based on the following legal basis or legitimate interests:
Processing activity | Legal basis/ legitimate interests |
Marketing | Consent |
Event management | Consent |
The following categories of personal data are processed in the processing activities listed below:
Marketing | Marketing data | Data includes names, telephone numbers, email addresses, addresses, functions within the company and additional notes (what the interested party is interested in - a product, service or event, for example). |
Event management | Contact details for events | Data includes names, telephone numbers, email addresses and addresses. |
We do not transfer personal data of the groups of data subjects concerned to recipients or categories of recipients within the scope of our processing activities.
We store your personal data for as long as is required by law and is necessary for the purposes for which it was collected or as is required for use in accordance with the legitimate interests of the company. After this storage period, the time limit for deletion as listed below applies.
Marketing data | 3 years after the last contact. | Processing is limited immediately after expiration of the storage period, erase cycle of the data backup within one year. |
Contact details for events | 3 years after the last contact. | Processing is limited immediately after expiration of the storage period, erase cycle of the data backup within one year. |
Article 14 of the General Data Protection Regulation also requires information on the origin of the data that we process for the groups of data subjects of concern to you to be disclosed:
Marketing data | The person concerned |
Contact details for events | The person concerned |
Automated decision making, including profiling, is not performed in any of the above processing activities.
Customers
Customers are all persons who request and purchase products and services from us.
The personal data of customers is processed within the scope of the following processing activities for the following purposes:
Order processing | Transmission of orders and invoicing for services |
Marketing for customers | Providing information about products and services |
Event management | Planning and organizing events to promote the company and/or its products and services |
The legal grounds for processing the personal data of customers are based on the following legal basis or legitimate interests:
Processing activity | Legal basis / legitimate interests |
Order processing | Respective customer contract |
Marketing | Consent or legitimate interest (direct advertising between customers and the company) |
Event management | Consent or legitimate interest (direct advertising between customers and the company) |
The following categories of personal data are processed in the processing activities listed below:
Order processing, marketing | Customer master data | Data includes names, addresses, company registration numbers, VAT identification numbers, email addresses and telephone numbers. |
Event management | Contact details for events | Data includes names, telephone numbers, email addresses and addresses. |
We do not transfer personal data of the groups of data subjects concerned to recipients or categories of recipients within the scope of our processing activities.
We store your personal data for as long as is required by law and is necessary for the purposes for which it was collected or as is required for use in accordance with the legitimate interests of the company. After this storage period, the time limit for deletion as listed below applies.
Customer master data | For the duration of the business relationship and until all claims have been settled. Thereafter, processing is limited and the data is stored for 7 years (according to the Austrian Federal Fiscal Code). | Processing is limited immediately after expiration of the storage period, erase cycle of the data backup within one year. |
Contact details for events | 3 years after the last contact | Processing is limited immediately after expiration of the storage period, erase cycle of the data backup within one year. |
Article 14 of the General Data Protection Regulation also requires information on the origin of the data that we process for the groups of data subjects of concern to you to be disclosed:
Customer master data | Directly from the customer or other publicly available sources |
Contact details for events | The person concerned |
Automated decision making, including profiling, is not performed in any of the above processing activities.
Applicants
Applicants are all persons who apply for a vacant position in the company or by means of an unsolicited application.
The personal data of applicants is processed within the scope of the following processing activities for the following purposes:
Applicant management | Application procedure |
The legal grounds for processing the personal data of applicants are based on the following legal basis or legitimate interests:
Processing activity | Legal basis / legitimate interests |
Applicant management | The applicant has given explicit consent to the processing of the application within the framework of applicant management in accordance with article 6 paragraph 1 lit a or article 9 paragraph 2 lit a of the General Data Protection Regulation. |
The following categories of personal data are processed in the processing activities listed below:
Applicant management | Applicant details | Name, address, telephone number, date of birth, country of birth, nationality, email address Professional qualifications, application photos, certificates and letters of application are treated as personal data and contents of the applicant which he/she voluntarily discloses and may contain data pursuant to article 9 (health data, religious affiliation) or article 10 (criminal convictions) of the General Data Protection Regulation. |
We do not transfer personal data of the groups of data subjects concerned to recipients or categories of recipients within the scope of our processing activities.
Please note that the provision of personal data is required for a possible contract conclusion.
We store your personal data for as long as is required by law and is necessary for the purposes for which it was collected or as is required for use in accordance with the legitimate interests of the company. After this storage period, the time limit for deletion as listed below applies.
Applicant details | Application details: In accordance with legal requirements, but no longer than 6 months after completion of the application procedure Limited data will be stored for 3 years for the purpose of examining claims for payment within the meaning of section 1486 of the Austrian Civil Code (ABGB). | Processing is limited immediately after expiration of the storage period, erase cycle of the data backup of one year. |
Article 14 of the General Data Protection Regulation also requires information on the origin of the data that we process for the groups of data subjects of concern to you to be disclosed:
Applicant details | Directly from the applicant |
Automated decision making, including profiling, is not performed in any of the above processing activities.
External service providers
External service providers are all persons who provide services to the company and invoice them accordingly.
The personal data of external service providers is processed within the scope of the following processing activities for the following purposes:
Service provision | Verification of the service fulfillment of the external service provider |
Invoicing of services provided | Invoicing of services provided by external service providers |
Access Management | Management of access to the premises |
Access Management for computer systems | Management of usernames, passwords and access-protocols |
Export Control | Processing of Checks due to US/EU export control law |
The legal grounds for processing the personal data of external service providers are based on the following legal basis or legitimate interests:
Processing activity | Legal basis / legitimate interests |
Service provision | Respective contract with the external service provider |
Invoicing of services provided | Respective contract with the external service provider |
Access Management | Protection of business secrets |
Access Management for computer systems | Management of usernames, passwords and access-protocols to ensure information system integrity |
Export Control | Compliance with legal requirements |
The following categories of personal data are processed in the listed processing activities:
Service provision, invoicing of services provided, access management, access management for computer systems, export control | Data of external service providers | Data includes names, addresses, copy of ID card, telephone numbers, bank details, services and fees. |
We transfer personal data of the groups of data subjects concerned to the following recipients or categories of recipients within the scope of our processing activities:
Type of data | Recipient | Non-EU country [Yes/No] | Purpose of transfer |
Bank details, name, fee | Bank | No | Payment of fee |
We store your personal data for as long as is required by law and is necessary for the purposes for which it was collected or as is required for use in accordance with the legitimate interests of the company. After this storage period, the time limit for deletion as listed below applies.
Data of external service providers | For the duration of the business relationship or until all claims have been settled. Thereafter, processing is limited and the data is stored according to legal requirements. | Processing is limited immediately after expiration of the storage period, erase cycle of the data backup of one year. |
Article 14 of the General Data Protection Regulation also requires information on the origin of the data that we process for the groups of data subjects of concern to you to be disclosed:
Data of external service providers | Directly from the external service provider or from publicly available sources |
Automated decision making, including profiling, is not performed in any of the above processing activities.
Visitors
Visitors are all persons from outside the company who are on the company premises under supervision and without a relevant employment contract.
The personal data of visitors is processed within the scope of the following processing activities for the following purposes:
Visitor pass | Identification on the company premises |
Video surveillance | Maintaining operational safety |
Event management | Administration and documentation of corporate events |
The legal grounds for processing the personal data of visitors are based on the following legal basis or legitimate interests:
Processing activity | Legal basis / legitimate interests |
Visitor pass | Protection of intellectual property, safeguarding trade and business secrets, fire safety |
Video surveillance | Protection of company property |
Event management | Documentation of company history for marketing purposes |
The following categories of personal data are processed in the listed processing activities:
Visitor pass, video surveillance | Visitor data | Data includes names, companies, copies of photo IDs and photos of the person concerned. |
Event management | Image data of event visitors | Image of the data subject |
We do not transfer personal data of the groups of data subjects of concern to you to recipients or categories of recipients within the scope of our processing activities:
We store your personal data for as long as is required by law and is necessary for the purposes for which it was collected or as is required for use in accordance with the legitimate interests of the company. After this storage period, the time limit for deletion as listed below applies.
Visitor data | Video surveillance: Up to 72 hours, excluding the investigation of criminal offences Visitor passes: Up to 24 months after the last visit | Immediately after expiration of the storage period. |
Image data of event visitors | Max. 20 years | Processing is limited immediately after expiration of the storage period, erase cycle of the data backup of one year. |
Article 14 of the General Data Protection Regulation also requires information on the origin of the data that we process for the groups of data subjects of concern to you to be disclosed:
Visitor data | Directly from the visitor or the video surveillance system. |
Image data of event visitors | Directly from the visitor or the hired event photographer |
Automated decision making, including profiling, is not performed in any of the above processing activities.
This statement has last been revised February 2019