Privacy statement and information according to ART 13 and 14 GDPR
Responsible entity for data protection:
AFC Aluminium Fassaden Consulting Gesellschaft m.b.H.
Tel: +43 1 7138362
Fax: +43 1 7138362-65
Purposes of data processing:
If you use the contact form on the website or contact us by E-mail, your data will be stored by us for six months for the purpose of processing the inquiry and in case of follow-up questions. We do not share such data without your consent. If you fill out the contact form, HEROLD Business Data GmbH will process the data as an order processor on the basis of the General Terms and Conditions (in particular the regulations on order data processing contained therein). HEROLD Business Data GmbH hereby uses a sub-processor (SurveyMonkey Europe UC, 2 Shelbourne Buildings, 2nd Floore, Shelbourne Road, Ballsbridge, Dublin 4, Ireland), which receives access to the collected data in the contact form and stores data in the USA. The European Commission bases any provision of data to the sub-processor on an adequacy decision (Privacy Shield self-certification).
In addition, data is collected and used for analysis purposes. This data processing is not personal (see information on cookies below).
When visiting this website, we also store log files containing the IP address and other data regarding access to the website (e.g. date, time, user agent, referrer). Data processing is for a limited period of time (maximum 30 days). It is done to provide protection against DDOS attacks or other interventions in the functionality of the website and any underlying database systems.
Information about cookies
On our website, we use so-called session cookies. They are created when entering the website and when you close your browser, these session cookies are deleted automatically. This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages.
We use Google Analytics on our website. This is a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google). Through certification according to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
When using Google Analytics, the relationship with the web analytics provider is based on commissioned data processing. Data transfer to the processor is based on an adequacy decision of the European Commission (Privacy Shield self-certification). The data is deleted regularly (currently every 26 months).
Use of Google Adwords Conversion Tracking
This website uses the online advertising tool “Google AdWords” and, as part of Google AdWords, conversion tracking. Google Conversion Tracking is a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 (hereinafter: Google). When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies are only valid for a maximum of 90 days. If you visit certain web pages on our website and the cookie has not yet expired, Google and the website operator can recognise that you have clicked on the ad and were redirected to this page. We use the information collected by the conversion cookie to create conversion statistics. Thereby, the website operator obtains the total number of users who clicked on an ad and were redirected to a page marked with a conversion tracking tag and/or performed various actions on the page. However, the website operator does not receive any information that identifies users personally. If you choose not to be tracked, you may object to this use by preventing the installation of cookies through a corresponding setting in your browser software (deactivation option). In this case, you will not be included in the conversion tracking statistics. Further information and the Google privacy statement can be found at: http://www.google.com/policies/technologies/ads/, http://www.google.de/policies/privacy/
When using Google Adwords Conversion Tracking, the relationship with the web analytics provider is based on commissioned data processing. Data transfer to the processor is based on an adequacy decision of the European Commission (Privacy Shield self-certification). Moreover, Google is obliged to regularly delete all the data (currently every 39 months).
In case of using Facebook social plugins on this website, these are operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The plugins can be identified by the Facebook logo or the terms “Like”, “I like”, “Share” in Facebook’s corporate colours (blue and white). Information on all Facebook plugins can be found in the following link: https://developers.facebook.com/docs/plugins/
The plugins are only activated when you click on the corresponding buttons. If they are greyed out, the plugins are inactive. You have the option to activate the plugins each time you visit the website.
The plugins establish a direct connection between your browser and the Facebook servers. This only occurs after activation of the plugin. However, the website operator does not have any influence on the nature and scope of the data that the plugin transmits to the servers of Facebook Inc. You can find further information here: https://www.facebook.com/help/186325668085084
The plugin informs Facebook Inc. that you as a user have visited this website. In this context, it is possible that your IP address will be stored. If you are logged into your Facebook account when visiting this website, the aforementioned information will be linked to it.
Legal basis for data processing:
On the website, data are solely processed based on legal regulations (DGPR, Telecommunication Law 2003). The legal basis for data processing (webshop, product evaluations, booking tool and user account) is based on Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.
In the case of using analytical tools for data processing, our legitimate interest lies in improving the functionality of our website and measuring the success of online advertising. The legal basis for this is Art. 6 Para. 1 lit. f) GDPR.
The use of IT data security measures is also based on Art. 6 Para. 1 lit. f) GDPR (legitimate interest). The legitimate interest in data processing in this case is the protection of our own IT systems.
The use of social media plugins is subject to your permission. The legal basis for this is Art. 6 Para. 1 lit. a) GDPR. Permission has to be given every time you consult the website.
Your data protection rights
Every user is entitled to the rights to access, rectification, erasure, restrict processing, data portability, objection to processing and withdrawal. If you believe that processing your data violates the data protection law, or your data protection rights are violated in any other way, you are entitled to complain to a supervisory authority, in Austria, where our company is based, this is the Authority for Data Protection.