Privacy policy
I. Name and address of the controller
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is
STRABAG SE
Group Data Protection
Donau-City-Str. 9
1220 Vienna
Vienna, Austria
Phone +43 1 22422-1012
E-Mail: data-protection-group@strabag.com
Website: www.strabag.com
If you have any questions about the processing of personal data or about data protection in general, you can contact Group Data Protection at data-protection-group@strabag.com.
II General information on data processing
1 Scope of the processing of personal data
We only process the personal data of our users insofar as this is necessary to provide a functional website and our content and services. The processing of personal data of our users only takes place regularly with the consent of the user. An exception applies in cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by law.
This privacy policy only covers the data processing operations described below. In addition, further processing of users' personal data may take place, in particular by group companies of the STRABAG Group as the sole controller under data protection law. In this respect, the special data protection declarations provided by STRABAG SE or group companies for the respective data processing apply.
2 Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 sentence 1 a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data that is necessary for the fulfilment of a contract to which the data subject is a party, Art. 6 para. 1 sentence 1 b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 d) GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 sentence 1 f) GDPR serves as the legal basis for the processing.
3 Data erasure and storage duration
The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by European or national legislation in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
III Provision of the website and creation of log files
1. description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected in the process:
(1) Information about the browser type and version used
(2) The user's operating system
(3) The user's internet service provider
(4) The user's IP address
(5) The date and time of access
(6) Websites from which the user's system accesses our website
(7) Websites accessed by the user's system via our website
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
2 Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 sentence 1 f) GDPR.
3 Purpose of the data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
Data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.
These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 sentence 1 f) GDPR.
4 Duration of storage
The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after 180 days at the latest.
5 Possibility of objection and removal
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.
IV. Use of cookies
1. description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.
The following data is stored and transmitted in the cookies:
(1) Search behaviour
We also use cookies on our website that enable an analysis of the user's surfing behaviour.
The following data can be transmitted in this way
(1) Search terms entered
(2) Frequency of page views
(3) Utilisation of website functions
The user data collected in this way is pseudonymised by technical precautions. It is therefore no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the user.
When accessing our website, users are informed about the use of cookies for analysis purposes by an information banner and referred to the privacy policy. In this context, there is also a note on how the storage of cookies can be prevented in the browser settings.
When accessing our website, the user is informed about the use of cookies for analysis purposes and consent to the processing of the personal data used in this context is obtained. In this context, reference is also made to the privacy policy.
2 Legal basis for data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 sentence 1 f) GDPR.
The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 sentence 1 a) GDPR if the user has given his or her consent to this.
3. purpose of the data processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.
We require cookies for the following applications:
- Remembering search terms
The user data collected by technically necessary cookies is not used to create user profiles.
Analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and can thus constantly optimise our offer.
These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 sentence 1 f) GDPR.
4 Duration of storage, objection and removal options
Cookies are stored on the user's computer and transmitted from there to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
The transmission of Flash cookies cannot be prevented via the browser settings, but by changing the Flash Player settings.
Cookie list
A cookie is a small data package (text file) that your browser stores on your device at the instruction of a website you visit in order to "remember" information about you, such as your language settings or login information. These cookies are set by us and are known as first-party cookies. We also use third-party cookies, which come from a different domain to the website you are visiting. We use these cookies to support our advertising and marketing activities. In particular, we use cookies and other tracking technologies for the following purposes
Strictly necessary cookies
These cookies are necessary for the website to function and cannot be deactivated in your systems. Generally, these cookies are only set in response to actions you take that fulfil a service request, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block these cookies or to notify you about these cookies. However, some areas of the website will then not work. These cookies do not store any personal data.
| Cookie subgroup | cookies | Cookies used | Period of validity |
|---|---|---|---|
| machine.strabag.com | OptanonAlertBoxClosed , OptanonConsent | Initial provider | 90 days, 90 days |
Eye-Able®
Eye-Able® is a software developed by Web Inclusion GmbH to ensure barrier-reduced access to information on the Internet for all people. The necessary files such as JavaScript, stylesheets and images are loaded from an external server. When functions are activated, Eye-Able® uses the browser's local storage to save the settings. All settings are only saved locally and are not transmitted further. Eye-Able® uses the Content Delivery Network (CDN) of BunnyWay d.o.o. (Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia) to ward off attacks and provide our service in near real time. This is used for the purpose of fulfilling the contract with our customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). All transmitted data and servers remain in the EU at all times in order to enable data protection-compliant processing in accordance with the GDPR. Web Inclusion GmbH does not record or analyse personal user behaviour or other personal data at any time. In order to ensure data protection-compliant processing, Web Inclusion GmbH has concluded order processing contracts with our host BunnyWay. Further information can be found in the privacy policy:
https://eye-able.com/de/datenschutz-eye-able/
https://bunny.net/privacy/
V. Contact form and e-mail contact
1. description and scope of data processing
There is a contact form on our website that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask will be transmitted to us and stored.
The following data is stored when the message is sent:
(1) The IP address of the user
(2) The date and time of registration
Your consent is obtained for the processing of the data as part of the sending process and reference is made to the privacy policy.
Alternatively, you can contact us via the email address provided. In this case, the user's personal data transmitted with the e-mail will be stored.
The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.
2 Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 a) GDPR if the user has given his or her consent.
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 (1) sentence 1 f) GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 sentence 1 b) GDPR.
3 Purpose of the data processing
The processing of the personal data from the input mask serves us solely to process the contact. If you contact us by email, this constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
4 Duration of storage
The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. cancellation and removal option
The user has the option of withdrawing consent to the processing of personal data at any time. If the user contacts us by e-mail, he or she can object to the storage of personal data at any time. In such a case, the conversation cannot be continued.
If you wish to exercise your right of cancellation, simply send an email to data-protection-group@strabag.com.
All personal data stored in the course of contacting us will be deleted in this case.
VI Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller or joint controllers:
1. right of access
2. Right to rectification
3. Right to restriction of processing
4. Right to erasure
5. Right to information
6. Right to data portability
7. Right to object
8. Right to withdraw the declaration of consent under data protection law
9. Automated individual decision-making, including profiling
10. Right to lodge a complaint with a supervisory authority
You can object to the processing of personal data for advertising purposes, including the analysis of user data or the transfer to third parties for advertising purposes, at any time without giving reasons.
In addition, every data subject has a general right to object (see Art. 21 (1) GDPR). In this case, the objection to data processing must be justified.
If the data processing is based on consent, your consent can be withdrawn at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
To exercise the rights to which you are entitled and if you wish to lodge a complaint in connection with the processing of personal data, you are welcome to contact our Group Data Protection Department at data-protection-group@strabag.com.
VII Status / update
We adapt the data protection declaration to changed functionalities or changed legal situations. We therefore recommend that you consult the privacy policy at regular intervals. If your consent is required, changes will only be made with your consent.