INFORMATION PROVIDED ACCORDING TO ARTICLE 13 AND 14 REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (GDPR).
The Hödlmayr Group declares its commitment to the principles of data protection in the European Union and thus maintains compliance with the relevant regulatory provisions of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (GDPR).
Personal data will therefore only be collected, processed and transmitted if there is an appropriate legal basis (Article 6 GDPR). In doing so, attention is paid to compliance with the data processing principles (Article 5 GDPR).
The following information forms the basis for the effective exercise of the rights granted by GDPR.
2. IDENTITY OF THE CONTROLLER
Purpose and means of data processing are at the sole discretion of companies of the Hödlmayr Group. As a controller by the terms of the GDPR, the subsidiaries are available here (https://www.hoedlmayr.com/en/data-protection/how-to-contact-us).
Information on the locations of the Hödlmayr Group members as controller by the terms of the GDPR can be accessed here (https://www.hoedlmayr.com/en/company/locations).
3. PURPOSES OF PROCESSING AND LEGAL BASIS
The companies of the Hödlmayr Group processes personal data for the purpose of executing orders and performing contracts as well as in the exercise of legal retention requirements. In addition, processing steps are carried out in order to enable registration and authentication procedures.
Personal data are obtained, processed and, if necessary, transmitted by the companies of the Hödlmayr Group on the basis of the consent of the data subject. The primary purpose of the contract performance constitutes a supplementary legal basis. Hence there is a legitimate interest for data transmission within the Hödlmayr Group.
4. CATEGORIES OF PERSONAL DATA CONCERNED (only Art. 14 GDPR)
The personal data obtained and processed concern
- name data
- address data
- contact details
5. RECIPIENTS WITHIN THE EUROPEAN UNION
As far as required by the purposes of processing, personal data are transferred to the companies and representations of the Hödlmayr Group and contract processors within the European Union.
6. TRANSFER TO THIRD COUNTRIES
Any transfer of personal data to countries outside the European Union (third countries) is limited to the purpose of contract performance and order execution and only addresses the companies of the Hödlmayr Group.
Data transfer to companies and representation of the Hödlmayr Group outside the European Union are either subject to an adequacy decision of the European Commission or to appropriate data protection safeguards according to Article 46 GDPR.
7. STORAGE PERIOD
In accordance with the principle of storage limitation, the companies of the Hödlmayr Group store personal data for the duration of statutory retention and storage periods. Due to the relevant provisions in principle a storage period of seven up to 22 years running from the respective contract performance or rather the end of the business relationship applies.
Beyond the statutory retention periods, personal data will not be stored for longer than is necessary for the fulfilment of the respective processing purpose or – in particular pursuant to Article 17 GDPR – for asserting, exercising or defending legal claims.
8. DATA SUBJECT RIGHTS
In order to protect their interests, data subjects are entitled to
- the right of access
- the right to rectification
- the right to erasure (“right to be forgotten”)
- the right to restriction of processing
- the right to object to processing
- the right to data portability
- the right to be informed of the correction/deletion if possible, and
- the right of individual review of fully automated decisions
9. RIGHT TO WITHDRAW CONSENT
Data subjects have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
10. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If a data subject considers the processing of personal data relating to him or her as infringement of the provisions of the GDRP, he or she the right to lodge a complaint with the Austrian Data Protection Authority, and any other national supervisory authority of a Member State of the European Union.
11. SOURCE OF PROCESSED DATA (only Art. 14 GDPR)
Unless the personal data has been provided by the data subject, the processed personal data originate from publicly available sources, such as public registers, the companies of the Hödlmayr Group obtain data exclusively from those legal entities for which the data subjects function as representatives.
12. NECESSITY OF DATA PROVISION (only Art. 13 GDPR)
The provision of personal data by the persons concerned is required for the conclusion of contracts with companies of the Hödlmayr Group and the corresponding order execution. Furthermore, the provision of personal data is a prerequisite for the enabling of registration and authentication procedures.
Failure to provide personal information may result in the impossibility of entering into a contract, the impracticability of the application or the cancellation of registration and legitimization procedures.