Responsible for data processing:
Schindler IT-Solutions GmbH
Hauptstraße 49
2100 Stetten, Austria
Telephone: +432262672040
E-Mail: gdpr@schindler-it.com
Personal data is only processed on the website and at Schindler IT-Solutions GmbH if it is necessary for the Internet presence, the performance of our services or to fulfill legal obligations.
Users and affected persons have the following rights:
- Right to information (Art. 15 GDPR): You have the right to know which data is processed for what purpose and for how long. You will find this information in this document. You also have the right to get a copy of your data.
- Right to rectification (Art. 16 GDPR): You have the right to have incorrect personal data corrected.
- Right to erasure (Art. 17 GDPR): Data, that is no longer needed for the purpose for which it was collected, must be deleted. However, statutory retention requirements must be taken into account. In the event of a dispute or if the data is only kept for law enforcement, you have the right to restrict its use. (Art. 18 GDPR).
- Right to complain (Art. 77 GDPR): You have the right to complain to the data protection authority if your rights have been violated.
The following data are processed:
server logs
Access to the web server is logged in order to enable safe operation of the website. Your current IP address, type and version of your web browser as well as the website from which you reached our site (referrer url) and the time of the page visit are also collected.
This data is temporarily stored in order to prevent misuse (e.g. attempts to hack the website). The data is also evaluated in order to identify from which other websites our visitors come to us and what our visitors are interested in. However, no link is made to a specific person.
The legal basis for this processing is Art. 6 Abs. 1 lit. f) GDPR. Our legitimate interest is protecting our website and in improving the stability and functionality of our website.
The data will be deleted after 30 days at the latest, as long as no further storage is required for evidence purposes. Otherwise, all or part of the data will be excluded from deletion until an incident has been finally clarified.
Cookies
We use cookies to personalize content and ads, to be able to offer functions for social media and to analyze access to our website. We also share information about your use of our website with our social media-, advertising- and analytics partners. Our partners may combine this information with other data that you have provided to them or that you have collected as part of your use of the services.
Some cookies is necessary for the operation of the website (registration, language selection, cookie consent).
When you first visit the page, you will be informed in detail about the cookies and can decide whether the optional cookies may be set.
The legal basis for the cookie necessary to operate the site is Art. 6 Abs. 1 lit b GDPR, if these cookie data are processed for the initiation or execution of the contract.
The legal basis for the optional cookies is our legitimate interest in improving the functionality of our website or the consent you gave us (Art. 6 Abs. 1 lit. f GDPR).
When you close your internet browser, session cookies are deleted.
Our website also has a cookie management system. When you visit our website for the first time, you can choose which cookies you want to save and which you don’t. For each individual file you will receive a explanation of the purpose of this cookie.
If you prevent or restrict the installation of cookies, this can lead to the fact that not all functions of our website can be used.
You can find detailed information on the cookies used here.
contract management
The data transmitted by you to use our range of goods and / or services will be processed by us for the purpose of contract execution and is therefore required. Conclusion of contract and contract execution are not possible without providing your data.
The legal basis for processing is Art. 6 Abs. 1 lit. b GDPR.
We delete the data with complete contract processing, but must observe the tax and commercial retention periods.
As part of the contract processing, we transfer your data to the transport company which is responsible with the delivery of goods or to the financial service provider.
The legal basis for the transfer of the data is then Art. 6 Abs. 1 lit. b GDPR.
Customer account / registration function / easyGDPR online portal / training
If you create a customer account for our website, we will only use the data you entered during registration (e.g. your name, address or email address) for pre-contractual services, for the fulfillment of the contract or for customer care (e.g. to provide you an overview of your previous orders from). At the same time, we then save the IP address and the date of your registration together with the time. Of course, this data will not be passed on to third parties.
As part of the further registration process, your consent to this processing is obtained and reference is made to this data protection declaration. The data we collect is used exclusively to make the customer account available.
If you consent to this processing, Art. 6 Abs. 1 lit. a GDPR is the legal basis for processing.
If the opening of the customer account also serves pre-contractual measures or the fulfillment of the contract, the legal basis for this processing is also Art. 6 Abs. 1 lit. b GDPR.
You can revoke your consent to the opening and maintenance of the customer account at any time in accordance with Art. 7 (3) GDPR. All you have to do, is notify us of your revocation.
Our easyGDPR portal stores the data you have entered as long as you have an active license. If you use the trial version of easyGDPR or your license has expired, we will keep your data for a maximum of 12 months, after which it will be deleted. We will notify you of the upcoming deletion by email. Inactive accounts are also deleted after one year and after email information. The recorded data is stored on a server at our house in Stetten, Austria or on our server at Hetzner.de.
If you take part in courses / trainings / workshops / lectures, we save your name, telephone number and email address as well as the address and the events you have attended. This data is kept as long as there are statutory retention periods. Since some events are a prerequisite for further training, this data is kept as long as we offer events of this kind. You have the right to delete / restrict the use of this data. The consequence for you is that you lose your qualification for advanced courses. If you request deletion, the data for which a retention period applies will still be kept and deleted once a year after the retention period has expired. However, access to this data is restricted and the data is only used, for example, for tax audits or as documentation in liability cases.
Course participation data will only be used, if you have given your consent to the delivery of information about courses, to send information about advanced courses only to authorized persons.
The data collected will be deleted as soon as processing is no longer necessary. However, we must observe tax and commercial retention periods.
Newsletter
If you register for our free newsletter, the requested data, i.e. your email address and – optionally – your name and address, will be sent to us. At the same time, we save the IP address of the internet connection from which you access our website and the date and time of your registration. As part of the further registration process, we will obtain your consent to the sending of the newsletter, describe the content specifically and refer to this data protection declaration. We use the data collected in this way exclusively for sending newsletters – in particular, they are not passed on to third parties.
The legal basis for this is Art. 6 (1) lit. a GDPR.
You can revoke your consent to the newsletter being sent at any time in accordance with Art. 7 Para. 3 GDPR. To do this, you only have to inform us of your revocation or click the unsubscribe link contained in each newsletter.
Inquiry / contact possibilities
If you contact us using the contact form or email, the data you provide will be used to process your request. The specification of the data is necessary for processing and answering your request – without providing it, we cannot answer your request.
The legal basis for this processing is Art. 6 (1) lit. b GDPR.
If your query has been answered in the end and the deletion does not conflict with any statutory retention requirements, such as in the event of subsequent contract processing, the data relating to your query will be deleted once a year.
Our websites uses several Google services (described below).
Google is a company located in the USA, which has contractually agreed to ensure a data protection level equivalent to that within the EU, even if the data processing is done in the USA. This agreement is covered by GDPR Article 46 3a
Google Analytics
Google Analytics enables us to understand the interests of our visitors. It is evaluated which pages are visited in which order. This data is evaluated statistically. There is no evaluation for each visitor (via IP address).
The legal basis is Art. 6 Abs. 1 lit. f GDPR. Our legitimate interestis continuously making our website more interesting for our visitors.
Google reCAPTCHA
We use Google reCAPTCHA to protect our forms from bot abuse. Your IP address will be transferred to Google.
The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest is the security of our website and in the defense against unwanted, automated access in the form of spam or similar.
Google Fonts
The website uses Google Fonts to display external fonts.
In order to enable the display of certain fonts on our website, a connection to the Google server in the USA is established when you visit our website. Therefore, Google sees your IP address.
The legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest is optimizing the presentation of our website.
In our website we link to Facebook. We find out whether you come to our site through our advertising on Facebook.
Facebook is facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU, Facebook is represented by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. In the following, both are only called “Facebook”.
Facebook uses EU-certified standard contract clauses, which ensure a data protection level equivalent to that within the EU, even if the data processing is done in the USA.
The legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate interest is improving the quality of our website.
If the plug-in is stored on one of the pages of our website that you visit, your internet browser will download a representation of the plug-in from the Facebook servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. In addition, the date and time of your visit to our website are also recorded.
If you are logged in to Facebook while visiting one of our websites with the plug-in, the information collected by the plug-in will be sent to Facebook. Facebook may assign the information collected in this way to your personal user account there. If you use the Facebook “Like” button, for example, this information is stored in your Facebook user account and, if necessary, published on the Facebook platform. If you want to prevent this, you must either log out of Facebook before visiting our website or prevent the Facebook plug-in from being loaded by using an add-on for your Internet browser.
YouTube
On our website we link to YouTube videos from YouTube LLC., 901 Cherry Ave., 94066 San Bruno, CA, USA, referred to as “YouTube”.
YouTube is a subsidiary of Google.
We use YouTube in connection with the “Extended data protection mode” function to be able to show you videos. The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest is improving the quality of our website. According to YouTube, the “Extended data protection mode” function means that the data specified below will only be transmitted to the YouTube server if you actually start a video.
Without this “extended data protection”, a connection to the YouTube server in the USA will be established as soon as you call up one of our Internet pages on which a YouTube video is embedded.
This connection is necessary in order to be able to display the respective video on our website via your internet browser. In the course of this, YouTube will at least collect and process your IP address, the date and time as well as the website you visited. In addition, a connection to the “DoubleClick” advertising network from Google is established.
If you are logged in to YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
For the purpose of functionality and analysis of usage behavior, YouTube permanently stores cookies on your device via your internet browser. If you do not consent to this processing, you have the option of preventing cookies from being saved by making a setting in your Internet browser. You can find more information on this under “Cookies” above.
Google holds further information on the collection and use of data as well as your rights and protection options in this regard under
https://policies.google.com/privacy
MailChimp – Newsletter
We send our newsletter with Mailchimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as “Mailchimp”. Mailchimp uses the EU-certified standard contract clauses, to ensure a data protection level equivalent to that within the EU, even if the data processing is done in the USA. Mailchimp’s privacy policy can be found here.
All data that you provide when registering for the newsletter will be processed by Mailchimp. As soon as you display the pictures in a received newsletter or follow a link, this will be registered.
The legal basis for sending the newsletter and the analysis is Art. 6 (1) lit. a GDPR.
ou can withdraw your consent to the newsletter being sent at any time in accordance with Art. 7 (3) GDPR. The revocation applies to all future mailings. Every newsletter also contains link with which you can unsubscribe with one click.
Google AdWords with Conversion-Tracking
We advertise on Google. If you reach our website from a Google advertisement, we can link your visit to the corresponding advertisement.
The legal basis is Art. 6 Abs. 1 lit. f DSGVO. Our legitimate is optimizing our advertising.
More information about Google AdWords:
https://services.google.com/sitestats/de.html
http://www.google.com/policies/technologies/ads
http://www.google.de/policies/privacy
Online job applications / publication of job advertisements
We offer you the opportunity to apply to us via our website. With these digital applications, we will collect and process your application and application data electronically to process the application process.
The legal basis for this processing is Art. 88 (1) GDPR.
If an employment contract is concluded after the application process, we will save the data you submitted during the application in your personnel file for the purpose of the usual organizational and administrative process – of course, taking into account further legal obligations.
The legal basis for this processing is also Art. 88 (1) GDPR.
Rejected applications are deleted once a year. However, the deletion does not take place if the data requires due to legal provisions, e.g. due to the obligation to provide evidence according to the AGG or until the completion of a judicial procedure.
The legal basis in this case is Art. 6 (1) lit. f GDPR. Our legitimate interest is our legal defense.
If you expressly consent to your data being stored for a longer period of time, e.g. for inclusion in an applicant or prospect database, the data will be processed based on your consent. The legal basis is then Art. 6 (1) lit. a GDPR. You can of course withdraw your consent at any time in accordance with Art. 7 (3) GDPR by declaring to us.
GotoWebinar / GotoMeeting
We also offer online training / webinars / meetings and for which some software from LogMeIn (LogMeIn Inc., 333 Summer Street, 02210, Boston, Massachusetts, USA, hereinafter referred to as “GoToMeeting”) is used. The company guarantees to ensure a data protection level equivalent to that within the EU, even if the data processing is done in the USA.
When participating in a meeting / webinar, the data you provide (usually name, email address and IP address) will be processed by GoToMeeting.
The legal basis for processing is our legitimate interest in accordance with Art. 6 (1) lit. f GDPR bzw. or an agreement according to Art. 6 Para. 1 lit. a GDPR. The legitimate interest is to process the data in order to hold the meeting / webinar for which the affected person has voluntarily registered.
We may contact you after a webinar to send you documents from the webinar or to ask if there are still questions about the topic of the webinar. This is done in order to offer you presentations and courses in the best possible quality.
Data from GoToMeeting meetings are not kept. If necessary, data about participation in a webinar will be stored in accordance with the corporate law retention requirements. Data that is no longer required is deleted once a year.