PREFA Data Protection Regulations

• Our strategy to protect your data
• What are cookies and how are they used by PREFA?
• Which tracking technologies does PREFA use?
• What does PREFA use my data for?
  • Business partners
  • Customers
  • Newsletter
  • Making contact
  • Brochures/architecture books
  • Obtaining quotes
  • Photo service
  • Guarantee certificate
  • PREFA Academy
  • Application
  • Online store
  • Prefarenzen
• Is my personal information secure on PREFA websites?
• How can I check or update my personal information? What rights do I have?
• Will I receive advertising from PREFA?
• Who can I contact?

We, PREFA Aluminiumprodukte GmbH (hereinafter referred to as “PREFA”), with registered offices in Austria, take the protection of your personal data very seriously and therefore strictly respect data protection regulations.

The following overview explains how we ensure this protection and what kind of data we acquire for what purposes.

However, we would like to point out that our websites may contain links to websites of our contractual partners and other providers, and that we can assume no liability for the content of such websites.
 

We use “cookies” on certain parts of our websites. Cookies are small text files which are filed on your computer and stored by your browser. These files are not linked to you as an individual in any way but are merely analysed for statistical purposes so that we can optimize our web services. They help us make our services more user-friendly, effective and secure. Our cookies do not contain your personal details or any security-relevant data in any form whatsoever. Cookies do not harm your computer, cannot be used for spying data on your device or for sending emails without you noticing, and do not contain viruses.

Adapt your cookie settings 

Some of our contractual partners use cookies to analyse user behaviour and subsequently to increase their online visibility (social targeting).

An individual “session” is stored for a short period of time on our server. The server creates log files which are also stored. These log files automatically contain records of all or specific processes and actions on a computer system.

When you close your browser, the session cookies are deleted immediately. After 24 months, the remaining cookies are also wiped. The cookies of our partners (e.g .Google, Facebook, etc.) expire within max. 24 months.

If you do not wish cookies to be used, you can disable them or restrict their use in your browser at any time. However, please be aware that if you do so, parts of our websites may not be displayed at an optimal level or may not function perfectly.

The following section “Which tracking technologies are used on our websites?” explains which software is used to set cookies on our websites and how to disable cookies.

Together with our web hosting or webspace service provider “Maxcluster GmbH” which has its server based in Austria, we collect data each time our websites are accessed. This access data includes the name of the accessed website, the date and time of access, the volume of data transferred, notifications of successful access, browser type and version, operating system, the referrer-URL and the requested provider. All of this data is only used for statistical analysis for the purposes of security, operation and optimization of websites. We reserve the right to review the logged data at any point if there is evidence-based, justified suspicion of unlawful use.

The operator of this website uses the Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). A tag is a JavaScript snippet that is used to send information to third parties, such as Google. The Google Tag Manager is a tool that enables website operators to manage marketing tags via the Google Tag Manager interface. The Google Tag Manager manages Google tags (e.g. the Google Analytics tag), but also supports tags from third-party providers. The software solution Google Tag Manager itself, which implements the tags, is a cookie-free domain. The Google Tag Manager ensures that other tags are triggered, which may collect data in turn. The Google Tag Manager does not access this data but passes it on via the tag to the respective provider of the tag used (Google, LinkedIn, Pinterest, Facebook, YouTube, sgalinski, PHP).

For information on how to object to the processing of your personal data by the respective tags, please refer to the section of the respective tag listed in this Privacy Policy.
 

Web analytics with Google Universal Analytics and Google Analytics 4

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited; Gordon House, Barrow Street, Dublin 4, Ireland, (“Google”), provided that you have given your consent to this in accordance with Art. 6 para. 1 (a) GDPR. Google Analytics uses “cookies”, which are text files placed on your computer to assist the website in analysing how you use the site. The information generated by the cookies about your use of this website (including your abbreviated IP address) shall be transferred to a Google server in the USA and stored there for 2 years. Google shall use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services related to website activity and internet usage. In addition, Google may transfer this information to third parties, e.g. U.S. authorities, if this is required by law, or if third parties process this data on behalf of Google. If you have consented to the use of analysis and tracking cookies and you would like to object to this at a later date, you can do so at any time in the cookie banner or cookie settings via our website. Alternatively, you can install an add-on in your browser. To do so, you can use the following link to access the Google page: tools.google.com/dlpage/gaoptout.

Conversion tracking with Google Ads

If you consent to the use of tracking cookies, this website shall use Google Ads from Google Ireland Limited; Gordon House, Barrow Street, Dublin 4, Ireland, on the basis of your consent in accordance with Art. 6 para. 1 (a) GDPR. We use Google Ads Conversion to draw attention to our attractive offers by means of advertising material (Google Ads) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In doing so, we are pursuing the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs. This advertising material is delivered by Google via “ad servers”. For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, a cookie shall be stored on your device by Google Ads. These cookies usually expire after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and information about any withdrawal of consent (marking that the user no longer wants to be contacted) are usually stored as analysis values.

These cookies enable Google to recognise your Internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can see that the user clicked on the ad and was redirected to this page (visitor behaviour analysis). Each Ads customer is assigned a different cookie. Cookies thus cannot be tracked via the websites of Ads customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material and, in particular, we cannot identify users on the basis of this information. By integrating Ads Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our an ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, the provider may find out your IP address and store it.

Google may transfer this information to third parties, e.g. U.S. authorities, if this is required by law, or if third parties process this data on behalf of Google. Further information on the handling of user data can be found in Google's Privacy Policy at: policies.google.com/privacy [external site]. If you decide to withdraw your consent at a later date after having given it, you can disable personalised advertising from Google in the settings of the cookie banner or in your browser settings for advertising. These settings are stored in your Google Account (if you are registered) or browser (if you are not registered). In addition, we allow you to change your “cookie settings” in the first section of this Cookie Policy. You can “withdraw your consent” here. Alternatively, you can install a browser plug-in to disable personalised advertising. You will find it here: support.google.com/My-Ad-Center-Help/answer/12155656.

This website uses the Facebook marketing pixel of Meta Platforms Ireland Ltd. (4 Grand Canal Square, Dublin 2, Ireland), provided that you have given consent to the associated processing of your personal data in accordance with Art. 6 para. 1 (a) GDPR. The Facebook pixel is a JavaScript code snippet that enables us to analyse the activities of visitors to our website. The analysis tool works by loading a small collection of functions that are triggered as soon as a website visitor executes an action (an event). Such actions would include, for example, adding an item to the shopping cart or completing a purchase. We use the Facebook pixel to measure the effectiveness of our ads, define custom audiences for targeting ads, run dynamic, targeted ad campaigns, and analyse the effectiveness of conversions. This means that we can use the Facebook pixel to display advertising (“Facebook ads”) that is of interest to you, as a user of our website, when you visit the social network Facebook or other websites that also use the tool.

We use the Facebook pixel to process information about the activities of website visitors outside of Facebook. This includes, among other things, information about the website visitor’s device, the websites visited, purchases made, ads that the website user sees, and information about how the visitor uses our website. This occurs regardless of whether our website visitor has a Facebook account or is logged in to Facebook. Facebook may transfer the processed information to third parties, e.g. US authorities, if this is required by law, or if third parties process this data on behalf of Facebook.

If you have consented to the processing of your personal data by using the Facebook marketing pixel and you wish to withdraw your consent at a later date, you can do so by changing the settings of the cookie banner or your browser settings.

Alternatively, you can disable the Facebook marketing function as a logged-in Facebook user at www.facebook.com/settings/ [external link]. For information on how to generally disable interest-based online advertising from Facebook and other companies participating in the European Interactive Digital Advertising Alliance, e.g. if you do not have a Facebook account, please visit: www.youronlinechoices.eu [external link].

You will find more information about data processing by Facebook at www.facebook.com/about/privacy [external link].

Our website uses the Google Maps service on individual pages via an API. It is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

In order to use Google Maps’ functions, your IP address shall be transferred to a Google server and stored there. This server may also be located outside the European Union. PREFA has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online services and to make it easy to find places specified by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR.

For more information on how Google handles user data, please refer to Google’s Privacy Policy: policies.google.com/privacy.

If, when visiting our website, you give us your consent in accordance with Art. 6 (1) (a) GDPR, this website shall process your personal data as a visitor to our website using the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company, Wilton Place, Grand Canal Dock, Dublin 2, Ireland (referred to as “LinkedIn” for short). The LinkedIn Insight Tag is a compact JavaScript code that supports the features of LinkedIn Marketing Solutions, namely conversion tracking, retargeting of website visitors, and web analytics for LinkedIn advertising campaigns. This means that the LinkedIn Insight Tag can be used to collect data about your use of this website, including URL, referrer URL, IP address, device and browser properties, timestamps and page views. The information generated by the tag about your use of this website may be transferred to and stored on LinkedIn servers outside the EU. LinkedIn may transfer the processed information to third parties, e.g. U.S. authorities, if this is required by law, or if third parties process this data on behalf of LinkedIn.

The data shall be encrypted, anonymised within seven days and erased within 90 days. LinkedIn does not disclose the personal data to us, the operator of this website. LinkedIn only provides aggregated reports on website target audience and ad performance. LinkedIn also provides retargeting for website visitors so that you can see advertisements from us on the websites you visit.

If you have consented to the processing of your personal data through the use of the LinkedIn Insight Tag and you wish to withdraw your consent at a later date, you can do so by changing the settings of the cookie banner or your browser settings.

Alternatively, LinkedIn members can also control the use of their personal data for advertising purposes via their account settings. To do so, use the following link to access the LinkedIn page: www.linkedin.com/start/join [external link].

We operate a profile on the provider's Pinterest (in Europe: Pinterest Europe Ltd., Palmerston House, 2nd Floor Fenian Street, Dublin, Ireland). This profile is used to present photos of our own products in order to draw the attention of Pinterest users to our products. Alternatively, you can find out more on our homepage.

When you visit our Pinterest page, your data shall also be processed by Pinterest. You can find out more about the scope of data processing by Pinterest at policy.pinterest.com/en/privacy-policy. If you are logged into your Pinterest account, you also enable Pinterest to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your account. Pinterest may transfer the processed information to third parties, e.g. U.S. authorities, if this is required by law, or if third parties process this data on behalf of Pinterest. Pinterest also receives data from us when you communicate with us via our channel.

We process the data that you provide to us via your profile when you contact us via our Pinterest page or when you use Pinterest’s interactive functions (e.g. Save, Share, etc.). The data you share depends on your profile settings. If you voluntarily share data with us or transfer it to us via the channel, we shall process your data on the basis of your consent. If your data is processed by us, it shall be erased as soon as you withdraw your consent, the respective purpose for the data processing no longer exists, or there are no statutory retention periods. This does not apply to data stored by Pinterest on the system, which must be erased by Pinterest because we have no influence on it.

We and Pinterest share a joint responsibility with regard to the provision of the evaluation of user behaviour for the transfer of data to Pinterest. Pinterest currently does not provide an agreement in accordance with Art. 26 GDPR, which clearly identifies the responsibilities. You can assert your rights as a data subject vis-à-vis any data controller. You can contact Pinterest's data protection officer via the following link: help.pinterest.com/en/data-protection-officer-contact-form

We have integrated YouTube videos on our website, which are stored on YouTube (www.youtube.com). The operator is Google Ireland Limited; Gordon House, Barrow Street, Dublin 4, Ireland, (“Google”). These videos can be played directly on our website. The relevant videos are integrated via the “advanced data protection mode” on the website. This means that data shall only be transferred to YouTube when you play a video. When you visit our website with its integrated videos, a connection to YouTube's servers shall be established. The YouTube server shall then be informed of the IP address of visitors to our website and which of our pages you have visited, provided that you have given us your consent to the collection and disclosure of your personal data in accordance with Art. 6 para. 1 (a) GDPR. This occurs regardless of whether or not you have a YouTube user account. If you are logged into your YouTube account, you also enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. YouTube may transfer the processed information to third parties, e.g. U.S. authorities, if this is required by law, or if third parties process this data on behalf of YouTube. Further information on the handling of user data can be found in YouTube's Privacy Policy at: policies.google.com/privacy [external site].

All personal data shall be collected, processed and used in accordance with the applicable regulations for the protection of personal data, primarily for the purpose of the services you have commissioned and to process your enquiries.

As a contractual partner of your company, we process your personal data out of our legitimate interest in preparing quotes and fulfilling contracts on the basis of Art. 6 para. 1 (f) GDPR. Processing for the purpose of bookkeeping and cost accounting as well as for the fulfilment of legal obligations (e.g. commercial and tax law) is based on Art. 6 para. 1 sentence 1 (c) GDPR. The business relationship is between us and your company. If you act as a natural person (e.g. as a sole trader or self-employed person), your data shall be used for the implementation of pre-contractual measures and fulfilment of contracts on the legal basis of Art. 6 para. 1 (b) GDPR.

In the course of external requirements (e.g. in the context of customs/tax law), your personal data may be compared with lists published by authorities.

Furthermore, data may also be processed for legitimate purposes in accordance with Art. 6 para. 1 sentence 1 (f) GDPR, such as marketing, internal market research and marketing purposes, and internal statistics. The legitimate interests lie in particular in the optimisation of processes and cost-effective allocation; your interests, fundamental rights and freedoms shall be duly taken into account in the process.

Only if you have given us your consent to do so or if the legal requirements are met shall we use your data to send you information about products, services, events and other interesting facts about our company. You can object to these mailings at any time with future effect.

The data you provide is required to implement the contractual relationship. Without this data, we shall not be able to fulfill the contract concluded with your company.

Disclosure

Some of your personal data shall be disclosed to external service providers (e.g. tax consultants, legal advisers). In some cases, an external IT service provider (Fried v. Neuman GmbH as part of order processing in accordance with Art. 28 GDPR) may access your data. The service providers shall act in accordance with instructions, which has been ensured by appropriate contracts.

Retention and Erasure of Data

Your data shall be retained for as long as is necessary for the respective aforementioned purposes. The data shall be erased no later than after the end of the contractual relationship and after expiry of the statutory retention periods under civil, commercial and tax law.

Your Rights

See below

We process your personal data in connection with the establishment, implementation and processing of the concluded contract and its initiation on the basis of Art. 6 para. 1 sentence 1 (b) GDPR and to fulfil legal obligations (e.g. commercial and tax law) on the basis of Art. 6 para. 1 sentence 1 (c) GDPR.

Furthermore, data is also processed for legitimate purposes in accordance with Art. 6 para. 1 sentence 1 (f) GDPR, such as marketing, internal market research and marketing purposes, internal statistics, and optimisation of quotes. The legitimate interests lie in particular in the optimisation of processes and cost-effective allocation; your interests, fundamental rights and freedoms shall be duly taken into account in the process.

The data you provide is required to implement the contractual relationship. Without this data, we shall be unable to fulfill the concluded contract.

If you have given us your consent, we shall use your data to send you information about products, services, events and other interesting facts about our company. You can withdraw your consent at any time with future effect. If the legal requirements are met, you can also be contacted by us without your consent. You can send us an objection at any time so that you shall no longer be contacted in future.

Disclosure / Service Providers

Some of your personal data shall be disclosed to external service providers (e.g. tax consultants, legal advisers). In some cases, an external IT service provider (Fried v. Neuman GmbH as part of order processing in accordance with Art. 28 GDPR) may access your data. The service providers shall act in accordance with instructions, which has been ensured by appropriate contracts.

Retention and Erasure of Data

Your data shall be retained for as long as is necessary for the respective aforementioned purposes. The data shall be erased no later than after the end of the contractual relationship and after expiry of the statutory retention periods under civil, commercial and tax law.

Your Rights

See below

You have the option of subscribing to a newsletter by a variety of means. We process your personal data solely in connection with ordering and subscribing to our newsletter in order to send you information about products, services, events and other interesting facts about our company. You can object to these mailings at any time with future effect.

For statistical purposes, tracking is performed to determine the links within the newsletter that were clicked on and led to actions on our website (“conversion”). However, this data shall not be assigned to you but shall remain anonymous. Please note this fact when registering for the newsletter. If you do not want this, you can request information about our products from other sources.

The data you provide is required to send the newsletter. Without this data, we cannot consider your registration for the newsletter.

External Service Providers

In the course of sending the newsletter, we use a service provider (Sendinblue GmbH; Berlin) who accesses your data as part of order processing in accordance with Art. 28 GDPR. The service provider shall act in accordance with instructions, which has been ensured by appropriate contracts.

Disclosure

Your data shall not be disclosed to third parties in the course of the processing involved in sending the newsletter.

Retention and Erasure

The data shall be retained until you withdraw your consent to the sending of the newsletter. Each of our newsletters contains a link to unsubscribe from receiving e-mails. The withdrawal of your consent can also be made by means of a brief notification to the contact option below.

Your Rights

See below

You have the option of getting in contact with us by a variety of means. You have these options in the course of general contact with us by phone, e-mail or post as well as via the contact forms provided, which you can use to direct your request to us. We process your personal data solely in connection with the processing of your request and to send you information about products, services, events and other interesting facts about our company if you have requested such information. You are free to contact us in this way, and this is done on a voluntary basis. We process your data on the basis of Art. 6 para. 1 (a) GDPR (consent). You can withdraw your consent at any time with future effect.

The data you provide is required to process your request. Sometimes, we cannot process your request without this information.

External Service Providers

We process the data that we collect when you contact us. We do not use any service providers for this purpose.

Disclosure

Only if you have consented to this or if it is absolutely necessary to disclose it to process your request (e.g. in the case of the necessary clarification with a commissioned craftsman or in the case of an enquiry being assigned to another company in the PREFA Group) shall your data be disclosed. Otherwise, your data shall not be disclosed.

Retention and Erasure

Your data shall be stored by us while your request is being processed. Erasure shall take place no later than 60 days after completion of processing. If you withdraw your consent to data processing, we shall erase your data immediately.

Your Rights

See below

We offer our customers the opportunity to order brochures for end customers and architecture books for architects. For this purpose, we collect your data in order to be able to send them to you on the basis of your voluntary disclosure of your data and the voluntary requirements of the respective product on the basis of Art. 6 para. 1 (a) GDPR (consent).

Your data shall be used for the purpose of sending you the requested materials.

We only use your data for marketing and advertising purposes and, if necessary, to contact you and to send you further information about our products and other campaigns if you have given your consent. You can withdraw your consent to this at any time with future effect. If the legal requirements are met, you can also be contacted by us without your consent. You can send us an objection at any time so that you shall no longer be contacted in future.

External Service Providers

We process the data that we collect when brochures or architecture books are requested from us. We do not use any service providers for this purpose.

Disclosure

Your data shall not be disclosed.

Retention and Erasure

Your data shall be retained for as long as is necessary for the respective aforementioned purposes. If you object to the processing by withdrawing your consent, we shall erase your data.

Your Rights

See below

On our homepage, we offer you the opportunity to obtain quotes for your construction project. In this case, certain data is necessary to enable a quote to be prepared by a qualified craftsman. The use of this service is voluntary, and we process your data on the basis of Art. 6 para. 1 (a) GDPR (consent).

If you provide us with the necessary data via the online form, we can contact you initially in order to obtain further necessary information from you if required. If you are interested in the quote, we shall first provide anonymised data with essential project data for the preparation of a quote for qualified partner craftsmen. You shall be informed of the selected partner craftsmen to whom the anonymous data shall be transferred for the purpose of providing a quote.

Only after the acceptance of the provision of a quote by a partner craftsman shall the data necessary for the transfer of the quote be made available to them. To enable the provision of this quote, we shall then process your data on the basis of Art. 6 para. 1 (b) GDPR, as this data processing shall be necessary for the initiation of the contract. You may be contacted by the partner craftsman if information is still required for the preparation of a quote.

You shall be contacted by us by e-mail at the end of the quote process to ensure that the service has been provided properly and to your satisfaction.

External Service Providers

We shall process the data that we collect when obtaining a quote. We do not use any service providers for this purpose.

Disclosure

Your data shall only be disclosed to these partners if you have consented to this or if this is necessary in the course of the quote preparation process by partner tradesmen. Otherwise, your data shall not be disclosed.

Retention and Erasure

Your data shall be retained for as long as is necessary for the respective aforementioned purposes. The data shall be deleted no later than after the end of the contractual relationship or the initiation of a contract and after expiry of the statutory retention periods under civil, commercial and tax law.

Your Rights

See below

With the photo service, we offer you the opportunity to have a photo montage of your project created so that you can get an impression of your project. For this purpose, we process your data on the basis of the free contract for the production of the photo montage (Art. 6 para. 1 (b) DSGVO; contract) so that we can provide you with this service and create appropriate photo montages for you. Your data shall also be used to send you the photo montage.

We only use your data for marketing and advertising purposes and, if necessary, to contact you and to send you further information about our products and other campaigns if you have given your consent. You can withdraw your consent to this at any time with future effect. If the legal requirements are met, you can also be contacted by us without your consent. You can send us an objection at any time so that you shall no longer be contacted in future.

External Service Providers

We shall process the data that we collect when obtaining a quote. We do not use any service providers for this purpose.

Other service providers are only commissioned to create photo montages in exceptional cases. The service providers shall act in accordance with instructions, which has been ensured by appropriate contracts.

Disclosure

With respect to photo montages, we are supported by our sister company (PREFA Hungary) which creates the photo montages. For this purpose, we transfer the necessary data to this company on the basis of our legitimate interest (Art. 6 para. 1 (f) GDPR) in being able to perform this process efficiently and provide you with this service.

Retention and Erasure

Your data shall be retained for as long as is necessary for the respective aforementioned purposes. If you withdraw your consent, we shall erase your data prematurely, provided there are no statutory retention periods to the contrary.

Your Rights

See below

When you apply for the guarantee certificate, we shall process your data to check your information and to issue the guarantee certificate on the basis of Art. 6 para. 1 (b) GDPR (contract). We shall also use your data to send the guarantee certificate to you by post.

External Service Providers

We shall process the data that we collect when obtaining a quote. We do not use any service providers for this purpose.

Disclosure

Your data shall not be disclosed. The data shall be processed solely by us.

Retention and Erasure

Your data shall be retained for as long as your guarantee certificate is valid. This depends on the guarantee period granted and is necessary for ensuring the guarantee if the occasion arises. If, upon expiry of the guarantee period, further statutory retention periods arise under tax and commercial law, retention shall take place for the duration of the statutory period.

Your Rights

See below

When you register for PREFA Academy courses, we shall process your data for the purpose of organising and conducting the course for which you have registered. We shall process your data on the basis of the contract for conducting the course on the basis of Art. 6 para. 1 (b) GDPR.

If the data you provide is incomplete, you shall be contacted by phone or e-mail in order to complete your registration.

In the event that additional services are used (e.g. hotel booking service in the case of overnight stays), the required data for a booking shall be disclosed to the relevant provider in order to be able to offer you this service.

Your data shall also be used on the basis of the contract to provide you with advance information about the courses you have booked and to send you a course confirmation by e-mail.

External Service Providers

We shall process the data that we collect when obtaining a quote. We do not use any service providers for this purpose.

Disclosure

Your data shall generally not be disclosed. In the event of the use of additional services, such as the hotel booking service in particular, your data shall be disclosed to appropriate providers for the fulfilment of the service.

Retention and Erasure

Your data shall be retained for as long as is necessary for the respective aforementioned purposes. The data shall be deleted no later than after the end of the contractual relationship or the initiation of a contract and after expiry of the statutory retention periods under civil, commercial and tax law.

Your Rights

See below

We shall process your personal data in the context of implementing your application process and checking your potential work-related employability. In doing so, we shall process the information provided by you for the purpose of a well-founded personnel decision on the basis of Art. 6 para. 1 sentence 1 I (b) GDPR. In addition, evaluations shall be stored on the basis of objective, non-discriminatory criteria.

The data provided by you is required to implement the application process. Without this data, we shall be unable to consider your application.

Within the protected area on our website, you can log in using your personal ID. When you do so, the logging indicated under “Privacy Policy of the Website” shall occur for the specified purposes.

We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use. The data shall be deleted immediately when it is no longer required to achieve the purpose, but after seven months at the latest. If you have given your consent to store your application for further job offers, your application shall be stored at most until your withdrawal or for up to two years and shall then be deleted.

Service Providers

Your personal data shall be disclosed to a company of our group of companies as an external service provider (processor). In some cases, external IT service providers may access your data. In all cases, the service providers shall act in accordance with instructions, which has been ensured by appropriate contracts.

Disclosure

As part of your application process, your data shall be disclosed to companies affiliated with us in order for them to assist us in making the selection decision within the personnel selection process. Data shall be disclosed on the basis of our legitimate interest (Art. 6 para. 1 (f) GDPR) in order to make the application processes and internal administrative processes efficient.

Retention and Erasure of Data

Your data shall be retained for as long as is necessary for the aforementioned purposes of the personnel selection process. If you object to data processing during the personnel selection process, the data shall be erased, unless otherwise required by law. We would like to draw your attention to the fact that we will no longer be able to consider your application in the event of an erasure request on your part.

The data shall then be erased after the end of the application process and upon expiry of any legal action periods, unless you have given your consent to store your application for further job offers. Unsolicited applications shall be stored at most until your withdrawal or for up to two years and shall then be deleted.

Your Rights

See below

In order to grant access to our online store and to process your orders, we shall process your data as described below.

As a contractual partner of your company, we shall process your personal data out of our legitimate interest in implementing your orders on the basis of Art. 6 para. 1 (f) GDPR. Processing for the purpose of bookkeeping and cost accounting as well as for the fulfilment of legal obligations (e.g. commercial and tax law) is based on Art. 6 para. 1 sentence 1 (c) GDPR. The business relationship is between us and your company. If you act as a natural person (e.g. as a sole trader or self-employed person), your data shall be used for the implementation of contractual measures and fulfilment of contracts on the legal basis of Art. 6 para. 1 (b) GDPR.

The data you provide is required to implement the contractual relationship. Without this data, we shall be unable to fulfill the contract concluded with your company.

You can log in using your personal ID within the online store. In this case, the logging indicated under the general “Privacy Policy” shall occur for the specified purposes.

No tracking occurs in the online store area. Only technically necessary cookies are set there.

Disclosure

Some of your personal data shall be disclosed to external service providers (e.g. tax consultants, legal advisers). In some cases, external IT service providers (as part of order processing in accordance with Art. 28 GDPR) may access your data in the course of hosting and store maintenance. The service providers shall act in accordance with instructions, which has been ensured by appropriate contracts.

Retention and Erasure of Data

Your data shall be retained for as long as is necessary for the respective aforementioned purposes. The data shall be erased no later than after the end of the contractual relationship and after expiry of the statutory retention periods under civil, commercial and tax law.

Your Rights

See below

We offer you the opportunity to have your project included in PREFARENZEN and thus published. We shall process the data that you provide for the purpose of participating in the selection process on the basis of your voluntarily given consent (Art. 6 para. 1 (a) GDPR). Once you have given your consent, you can withdraw it at any time with future effect. We would like to draw your attention to the fact that a withdrawal is not feasible for printed publications if the printed work is already in circulation. If you do not provide the required data for the selection process, we shall not be able to consider your application as PREFARENZ. We shall also have to exclude you from the selection process if you withdraw your consent prematurely.

If your project is selected, we shall inform you by e-mail about the selection and shall provide you with further information on the progress of the PREFARENZEN project.

We shall only use your data for marketing and advertising purposes and, if necessary, to contact you and to send you further information about our products and other campaigns if you have given your consent. You can withdraw your consent to this at any time with future effect. If the legal requirements are met, you can also be contacted by us without your consent. You can send us an objection at any time so that you shall no longer be contacted in future.

External Service Providers

We shall process the data that we collect when obtaining a quote. We do not use any service providers for this purpose.

Disclosure

For decision-making, shortlisted PREFARENZEN projects shall also be discussed and evaluated with external experts in order to make the best possible selection. However, personal data shall be shared to the least extent possible. This usually only involves the submitted photos. We conduct this processing on the basis of our legitimate interest (Art. 6 para. 1 (f) GDPR) to select the best possible projects for the best possible PREFARENZ.

Retention and Erasure

Your data shall be retained for as long as is necessary for the respective aforementioned purposes. If you withdraw your consent, we shall erase your data prematurely, provided there are no statutory retention periods to the contrary.

Your Rights

See below

We take all the latest technical and organizational security measures to protect your personal data against loss, access by unauthorized persons and improper use.

You have the right to access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability and the right to object. If you have reason to believe that the processing of your data violates data protection laws or that your data protection rights have been violated in any way, you can lodge a complaint with a supervisory authority. In Austria, this is the Data Protection Authority.

You only receive ads from us if you have provided us with your consent to use, process and transfer your personal data for advertising purposes. In this case, you will then receive, for example, an electronic newsletter. You may withdraw this consent at any time.
 

Should you have any questions, please contact us at:

PREFA Aluminiumprodukte GmbH
Werkstraße 1
A-3182 Marktl/Lilienfeld
Tel: +43 2762 502 0
Fax: +43 2762 502 874
E-Mail: datenschutz@prefa.com