We are committed to protecting the privacy of users of our website. This Privacy Policy therefore sets out in detail what personal data are processed when you use our website and how we (= the Controller) protect that data. Data is processed on the basis of the applicable statutory provisions.

Controller for this website:
Zellstoff Pöls AG, Dr. Luigi-Angeli-Straße 9, 8761 Pöls
Representative of the Controller: Hans-Georg Pranckh, datenschutz@zellstoff-poels.at, +43 3579 8181-0

1.
When you visit our website or web shop, we temporarily save and process the following (log) data:

• IP address of the accessing computer
• Date and time of access
• Name and URL of the file accessed
• Volume of data transferred
• Notification of whether access was successful (HTTP status code)
• Identifiers of the browser and operating system used

 
The data recorded are stored for three days. The legal basis for the storage of these data is our legitimate interest, as they serve in particular to ensure the smooth operation of the server and system security (Art. 6 (1)(f) GDPR). IP addresses are only evaluated in the event of attacks on our network infrastructure.
 
2.
We process personal data that we receive from you in the context of initiating a business transaction via a form or an e-mail. This is the case, for example, if you order samples on our website or if you want to download data sheets or certificates. This personal data includes: name, company, e-mail address, telephone number, company affiliation. Which (further) data is collected in detail can be seen from the respective input forms on our website.
 
If a contractual relationship results from the business initiation, the legal basis for the storage of this data is the fulfillment of the contract with you (Art. 6 para. 1 lit. b GDPR). In this case, your relevant data will generally be stored for the duration of the contractual relationship (unless some of it can be deleted earlier because it is no longer required). The storage period of the collected data is generally 3 years after termination of the contractual relationship (general limitation period of the purchase price claim) or 7 years if the data is subject to the tax retention obligation of the BAO or the UGB.
 
If no contractual relationship results from the business initiation, the legal basis for the storage of this data is our legitimate interest, as this data processing is necessary for communication with you (Art. 6 para. 1 lit. f GDPR). In this case, the data will be stored by us until you request deletion.

We shall not disclose data that are saved following access to our website to third parties without your consent unless we are required to do so by law or by a court order, or disclosure is necessary for the purposes of investigation or criminal prosecution in the event of attacks on our Internet infrastructure. Data shall not be disclosed for any other non-commercial purposes or for commercial ends.
 
1. Processor
We do not carry out all processing of the log files and cookies saved ourselves; we also use the services of reliable, carefully selected partners (= Processors), namely Outline Pictures e.U. Our partners also ensure the security of your data with suitable technical and organisational measures that correspond to the state of the art. Our partners are not authorised to use the personal data provided to them for anything but the specified purposes.
 
2. Consent to the use of cookies and the transfer of your data to the USA
Our website uses cookies that are required for the basic functions of the website and that cannot be deactivated (technically necessary cookies). These cookies are used exclusively by us ("first party cookies"). Technically necessary cookies store, for example, the cookie selection you have made in the cookie banner. The legal basis for the processing of this data is our legitimate interest, as it serves in particular the proper operation of the website and system security (Art. 6 para. 1 lit. f GDPR). The storage period of the collected data is 1 year.
 
All cookies that are not absolutely necessary for the operation of this website are only set after your explicit consent. Some of these cookies ("functional cookies", "statistics cookies" or "marketing cookies"), for which your consent is required, are operated by companies that process data in the USA (see below), such as Google. The legal basis for this processing of your data is your consent, which you can revoke at any time (Art. 6 para. 1 lit. b GDPR). The storage period of the data varies depending on the provider and is described in more detail in our cookie policy.
 
By agreeing to the use of these cookies, you also expressly consent to the transmission of your data to the USA (Article 49 (1) (a) GDPR).
 
There is no adequacy decision by the EU Commission for the USA and despite extensive measures, we cannot guarantee the high level of EU data protection in the USA. Your transmitted data may not be deleted or further processed for any purpose. US authorities may have disproportionate access to your data and you may not be able to effectively enforce your rights in the US. You can revoke your consent at any time with effect for the future. You can read more about the cookies used on this website in our cookie policy.
 
3. Google
In order to display YouTube videos, Google Charts and Google Maps, personal data is transmitted to Google Inc., located in the USA:

• if you agree to functional cookies

 
For the statistical, anonymous evaluation of user behavior on our website, personal data is transmitted to Google Inc., located in the USA:

• if you agree to statistical cookies

 
In order to be able to show you personalized advertising tailored to you, personal data is transmitted to Google Inc., located in the USA:

• if you agree to marketing cookies

 
The legal basis for this processing of your data is your consent, which you can revoke at any time (Art. 6 para. 1 lit. b GDPR), taking into account the transfer of data to an unsafe third country. The storage period of the data collected varies depending on the Google service and cookie. You can find a detailed list in our cookie policy. Further information about data processing by Google can be found in Google's Privacy Policy & Terms of Use.

The personal data will be stored for as long as

• until they are no longer necessary for the purposes for which they were collected or otherwise processed;
• in the case of processing based on a declaration of consent, until the data subject revokes their consent and there is no other legal basis for further processing (Article 17 (1) (b) GDPR); in the event of withdrawal of consent, the lawfulness of the processing of your personal data up to the time of withdrawal will not be affected by the withdrawal;
• but in any case as long as the storage is necessary to fulfill a legal obligation (e.g. statutory storage obligations) or to assert, exercise or defend legal claims of the company.

 
No automated individual decisions and no profiling take place.

If the provision of your data is based on the legal basis of your consent, this is neither legally nor contractually required and is also not necessary for the conclusion of a contract. There is therefore no obligation to provide this data.
 
We would also like to draw your attention to the following rights to which you are entitled as a data subject under the GDPR with regard to your personal data:

• The right to information from the Controller on the personal data held concerning you pursuant to Art 15 GDPR
• The right to rectification pursuant to Art 16 GDPR
• The right to erasure pursuant to Art 17 GDPR
• The right to restriction of processing pursuant to Art 18 GDPR
• The right to data portability pursuant to Art 20 GDPR
• The right to object to processing pursuant to Art 21 GDPR

Furthermore, you also have the right to lodge a complaint with the data protection authority (Art 77 GDPR, Section 24 Data Protection Act). Please also see the website of the data protection authority, which can be accessed here: https://www.dsb.gv.at/

Unsere Webseiten können Links zu anderen Anbietern und Links zu unseren Social Media-Angeboten enthalten. Diese Datenschutzinformation gilt für Webseiten und Dienste, die uns gehören und von uns betrieben werden. Wir haben keinen Einfluss auf externe Links, die von unseren Diensten ausgehen. Wir tragen keine Verantwortung dafür, ob diese Anbieter oder die Betreiber der Social Media Plattformen die gesetzlichen Datenschutzbestimmungen einhalten.

We employ technical and organisational measures to safeguard the personal data concerning you that are processed by us from accidental and deliberate manipulation, loss, destruction and access by unauthorised persons. We are continuously improving our security measures in accordance with technological developments.

This Privacy Policy applies with immediate effect and supersedes all previous privacy policies. We reserve the right to amend this Privacy Policy if reasonable or necessary.