This website is operated by Volturo GmbH (FN347754 d, UID ATU65787829), hereinafter referred to as “we”, “us”, and “VOLTURO”, with its registered office at Klosterstraße 2, 4451 Garsten. In this Privacy Policy, we, as the controller as defined in Art. 4 para. 7 of the EU GDPR, describe what data we collect when you visit our website and for what purpose we process it (Part A). We also inform you about how we generally process data of our customers, suppliers, and interested parties for marketing purposes (Part B) and generally explain what rights and safeguards we offer in the course of data processing (Part C). Please refer to section C.4. of this Privacy Policy for all relevant contact details.
Since the protection of your personal data is of particular concern to us, we strictly adhere to the legal requirements of the DSG and the EU GDPR when collecting and processing your personal data.
In the following, we will inform you in detail about the scope and purpose of our data processing and your rights as a data subject. Therefore, please read our Privacy Policy carefully before continuing to use our website and, if applicable, giving your consent to data processing.
A. Processing of Personal Data on Our Homepage
1. Personal Data
The use of our website is generally possible without providing personal data. However, for the use of individual services, different regulations may apply, which we will inform you about separately.
Therefore, apart from the cookies described in detail below, we generally only collect and store data that you voluntarily provide to us by entering it into our input forms or by actively interacting with our website in any other way.
Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, address, telephone number, or date of birth, but also your IP address or geolocation data that allows conclusions to be drawn about you.
2. Use of Cookies
a. If you only use our website for informational purposes, i.e., if you do not register for a service or otherwise transmit information to us – for example, via a contact form – we only collect the personal data that your browser transmits to our server. If you wish to visit our website, we collect the data listed below, which are technically necessary for us to display the website to you and to ensure its stability and security in accordance with Art. 6 para. 1 sentence 1 lit. f EU GDPR:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request
- Access status / HTTP status code
- Amount of data transferred in each case
- Website from which the request originates
- Browser used
- Operating system and its interface
- Language and version of the browser software
b. In addition to the aforementioned data, first-party and third-party cookies are stored on your computer when you use our website; these are small text files that are stored on your hard drive, assigned to the browser you are using. The entity that sets a cookie (in this case, we and the third parties listed below) thereby receives certain information. We need these cookies, on the one hand, to recognize you as a user of the website and, on the other hand, to make the use of our services traceable. Finally, we use cookies for marketing purposes to analyze your usage behavior and to send you targeted advertising when appropriate.
In principle, a distinction can be made between first-party cookies, third-party cookies, and third-party requests.
First-Party Cookies
First-party cookies are stored by us or our website itself in your browser to offer you the best possible user experience. These are primarily functional cookies, such as shopping cart cookies.
Third-Party Cookies
Third-party cookies are stored by a third-party provider in your browser. These are mostly tracking or marketing tools that, on the one hand, evaluate your user behavior and, on the other hand, offer the third-party provider the possibility to recognize you on other websites you visit. For example, retargeting marketing is fundamentally based on the function of such cookies.
Third-Party Requests
Third-party requests are all requests that you, as a page user, make to third parties via our site – for example, when you interact with social network plugins or use the services of a payment provider. In this case, no cookies are stored in your browser, but it cannot be ruled out that personal data may be sent to this third-party provider through the interaction. For this reason, we also inform you in detail in our Privacy Policy about the tools & applications we use.
3. Collection and Processing of Personal Data
Personal data beyond the information stored by cookies will only be processed by us if you voluntarily provide it to us, for example, when you register with us, enter into a contractual relationship with us, or otherwise contact us. This exclusively concerns contact data and information about the concerns you bring to us.
We use the personal data you provide exclusively to the extent necessary for the fulfillment of the respective processing purpose (e.g., registration, newsletter dispatch, order processing, sending of information material and advertising, processing of a competition, answering a question, enabling access to certain information) and to the extent legally permissible (in particular, according to Art. 6 EU GDPR) (e.g., sending advertising and information material to existing customers).
The purpose of processing your data is to operate our website and to provide targeted company-specific information, including the presentation of our goods and services (marketing). Any further use of your data will only take place if you have given your express consent beforehand. You can revoke your consent – as explained in detail below – at any time for the future.
4. Storage Duration
Data that you have provided to us exclusively for customer service or for marketing and information purposes will generally be stored by us until three years after our last contact. However, if you wish, we will delete your data even before this period expires, provided there is no legal impediment.
In the event of contract initiation or conclusion, we process your personal data after complete contract fulfillment until the expiry of the warranty, guarantee, limitation, and statutory retention periods applicable to us, and furthermore until the termination of any legal disputes in which the data is required as evidence.
5. Newsletter
We send a newsletter to existing customers and interested parties in accordance with the provisions of §174 TKG. With this newsletter, you will regularly receive all current news and information about our company as well as tailored advertising. To receive our newsletter, you need a valid email address.
Already with the first registration for the newsletter, we store your IP address, the date, and the time of your registration. This is done for security reasons in case a third party misuses your email address and subscribes to our newsletter without your knowledge. No further data is collected and processed by us for the newsletter subscription; the data is used exclusively for receiving the newsletter.
Your data for newsletter registration will not be passed on to third parties. You can stop receiving our newsletter at any time; details on how to unsubscribe can be found in the confirmation email and in every newsletter.
6. Tools and Applications Used
a. On our website, we also include links to other websites; this is for informational purposes only. These websites are not under our control and therefore are not covered by the provisions of this Privacy Policy. However, if you activate a link, it is possible that the operator of this website collects data about you and processes it according to their privacy policy, which may differ from ours. Please always inform yourself about the current data protection regulations on the websites we link to.
b. On our website, it is also possible to interact with various social networks via plugins. These are:
- Facebook and Instagram, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
- LinkedIn, operated by LinkedIn Inc., 2029 Stierlin Court, Mountain View, CA 94043, USA
- YouTube, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
If you click on a plugin of one of these social networks, it will be activated and a connection to the respective server of that network will be established as described above. This may also involve networks operated by companies based in the USA, if explicitly stated.
If you activate these plugins, you consent to the use of cookies by these providers also in the USA (Art 49(1)(a) GDPR).
This is relevant insofar as, according to recent official decisions and the case law of the ECJ, the USA is not certified as having an adequate level of data protection (C-311/18, Schrems II). A critical point here is that access by US authorities (FISA 702) is not comprehensively restricted by law, does not require authorization by an independent body, and no relevant legal remedies are available in the event of such interventions.
We have no influence on the scope and content of the data transmitted by clicking on the plugin to the respective operator of this social network or which may subsequently be subject to access by US authorities.
If you wish to inform yourself about the type, scope, and purpose of the data collected by the operators of these social networks, we recommend that you read the privacy policies of the respective social network.
Cloudflare
- Provider: Cloudflare Inc., 101 Townsend Street, San Francisco, California 94107, USA
- Purpose: Content Delivery Network
- Category: Technically Necessary
- Recipient: USA
- Processed data: IP address, website visit details
- Data subjects: Users
- Technology: JavaScript call, cookies
- Legal basis: Legitimate interest, Data Privacy Framework, Participant entry
- Website: https://www.cloudflare.com/
- Further information: Privacy Policy – Application Privacy Policy
On our website, the Cloudflare service is used as a Content Delivery Network (CDN) and as a security service.
A CDN is a service that helps deliver content from our website, especially large media files like images, faster using regional and internet-connected servers. Providing content via servers close to you reduces the average loading times of a website.
Cloudflare offers both web optimization and security services. Cloudflare blocks threats and limits abusive use of server resources and bandwidth. Our website becomes significantly more powerful and less vulnerable to spam or other attacks through Cloudflare.
Cloudflare uses cookies and processes data of our website users.
When a user accesses our website, requests are routed through Cloudflare’s server. Statistical access data about the visit to our website is collected in this process.
Access data includes:
- IP address,
- the accessed internet page(s) of our website,
- type and version of the internet browser used,
- the operating system used,
- the internet page from which a user switched to our website (referrer URL),
- the duration of stay on our website, and
- the frequency of accessing our internet pages.
This data helps Cloudflare in particular to detect new threats and to ensure a high security standard for the operation of our website.
Data processing is carried out to maintain the security and functionality of the CDN and to optimize our loading times. The use of cookies by Cloudflare is for security reasons, to ensure the trustworthiness of an end device, and is absolutely necessary for the security function.
Cloudflare retains data logs only as long as necessary, and this data is deleted in most cases within 24 hours. However, there is information that Cloudflare stores indefinitely as part of its permanent logs to improve Cloudflare’s overall performance. However, this data is not personal and is anonymized by Cloudflare.
Cookies and Local Storage
On our website, we use cookies to make our website more user-friendly and functional. Some cookies remain stored on your device.
Cookies are small data packets that are exchanged between your browser and our web server when you visit our website. These cause no harm and serve only to recognize website visitors. Cookies can only store information provided by your browser, i.e., information you have entered into the browser yourself or that is present on the website. Cookies cannot execute code and cannot be used to access your device.
When you next visit our website with the same device, the information stored in cookies can subsequently be sent back either to us (“first-party cookie”) or to a third-party web application to which the cookie belongs (“third-party cookie”). Through the stored and returned information, the respective web application recognizes that you have already accessed and visited the website with your device’s browser.
Cookies contain the following information:
- Cookie name
- Name of the server from which the cookie originally came
- Cookie ID number
- A date on which the cookie is automatically deleted
Depending on their purpose and function, we categorize cookies as follows:
- Technically necessary cookies, to ensure the technical operation and basic functions of our website. This type of cookie is used, for example, to retain your settings while you navigate the website; or they can ensure that important information is retained throughout the session (e.g., login, shopping cart).
- Statistics cookies, to understand how visitors interact with our website by collecting and analyzing information anonymously. This provides us with valuable insights to optimize both the website and our products and services.
- Marketing cookies, to implement targeted advertising activities for users on our website.
- Unclassified cookies are cookies that we are currently trying to classify together with providers of individual cookies.
Depending on the storage duration, we also divide cookies into session and persistent cookies. Session cookies store information that is used during your current browser session. These cookies are automatically deleted when the browser is closed. No information remains on your device. Persistent cookies store information between two visits to the website. Based on this information, you are recognized as a returning visitor on your next visit, and the website reacts accordingly. The lifespan of a persistent cookie is determined by the cookie provider.
The legal basis for the use of technically necessary cookies is our legitimate interest in the technically flawless operation and smooth functionality of our website. Our website cannot function properly without these cookies. The use of statistics and marketing cookies requires your consent. You can revoke your consent to the use of cookies at any time for the future. Consent is voluntary. If it is not given, there are no disadvantages. Further information about the cookies we actually use (in particular about their purpose and storage duration) can be found in this Privacy Policy and in the information about the cookies we use in our cookie banner.
You can also set your internet browser to generally prevent the storage of cookies on your device or to ask you each time if you agree to the setting of cookies. Once set, cookies can be deleted at any time. You can find out how all this works in detail in your browser’s help function.
Please note that a general deactivation of cookies may lead to functional restrictions on our website.
On our website, we also use so-called local storage functions (also called “local storage”). Data is stored locally in your browser’s cache, which remains and can be read even after the browser is closed – unless you clear the cache or it is session storage.
Third parties cannot access the data stored in local storage. If special plugins or tools use local storage functions, this is described in the respective plugin or tool.
If you do not want plugins or tools to use local storage functions, you can control this in the settings of your respective browser. We point out that this may lead to functional restrictions.
Google Analytics
- Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC (USA)
- Purpose: Web analysis, success measurement, conversion tracking, collection of statistical data
- Category: Statistics
- Recipient: EU, USA
- Processed data: IP address, website visit details, user data
- Data subjects: Users
- Technology: JavaScript call, cookies
- Legal basis: Consent, Data Privacy Framework, Participant entry
- Website: https://www.google.com
- Further information: policies.google.com/privacy – safety.google – Ads Data Processing Terms
- You can find out where Google data centers are located here: google.com/about/datacenters/locations
On our website, we use the functions of the web analysis service Google Analytics to analyze user behavior and to optimize our website. The reports provided by Google serve to analyze the performance of our website and to measure the success of possible campaigns via our website.
Google Analytics uses cookies that enable an analysis of the use of our website. Information about the use of the website such as browser type/version, operating system used, the previously visited page, hostname of the accessing computer (IP address), time of the server request are usually transmitted to a Google server and stored there. We have concluded a contract with Google for this purpose.
On our behalf, Google will use this information to evaluate the use of our website, to compile reports on activities within our website, and to provide us with other services related to the use of our website and internet usage. According to Google, the IP address transmitted by your browser will not be merged with other Google data.
We only use Google Analytics with IP anonymization activated by default. This means that Google truncates the IP address of a user within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by a user’s browser as part of Google Analytics will not be linked to other Google data.
During the website visit, user behavior is recorded in the form of so-called events. These can represent the following:
- Page views, a user’s click path
- First visit to our website
- Visited websites
- Start of a session
- Interaction with our website
- User behavior (e.g., clicks, scrolls, dwell time, bounce rates)
- File downloads
- Viewed / clicked ads
- Interaction with videos
- Internal search queries
Furthermore, the following is recorded:
- Approximate location (region)
- Date and time of visit
- IP address (in truncated form)
- Internet provider
- Referrer URL (via which website/advertising material a user came to our website)
The processing of this data is essentially carried out by Google for its own purposes, such as profiling (without our influence).
The data about the use of our website will be deleted immediately after the end of the retention period we have set. Google Analytics provides us with a default retention period of 2 months for user and event data, with a maximum retention period of 14 months. This retention period also applies to conversion data. For all other event data, the following options are available: 2 months, 14 months, 26 months (Google Analytics 360 only), 38 months (Google Analytics 360 only), 50 months (Google Analytics 360 only). We choose the shortest storage period that corresponds to our purpose of use. You can inquire about the retention period currently set by us at any time.
Data whose retention period has been reached is automatically deleted once a month.
Google Marketing Platform / Google Ad Manager
- Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC (USA)
- Purpose: Personalized advertising, conversion tracking, remarketing, campaign success measurement
- Category: Marketing
- Recipient: EU, USA
- Processed data: IP address, website visit details, user data
- Data subjects: Users
- Technology: JavaScript call, cookies
- Legal basis: Consent, Data Privacy Framework, Participant entry
- Website: https://www.google.com
- Further information: policies.google.com/privacy – safety.google – Ads Data Processing Terms – Privacy
- You can find out where Google data centers are located here: google.com/about/datacenters/inside/locations
On this website, the Google Ads service is used for the purpose of promoting our products and services. Google Ads is Google’s in-house online advertising system.
It is important for us to know whether an interested visitor ultimately becomes our customer. To measure this, there is so-called conversion tracking. Furthermore, we want to be able to re-engage and target visitors to our website. We achieve this through so-called remarketing (retargeting).
Google Ads serves both conversion tracking and remarketing, meaning we can recognize what happened after you clicked on one of our ads. For this service to work, cookies are used, and visitors are sometimes added to remarketing lists to be targeted only with specific advertising campaigns.
This is done using a pseudonymous identification number (pID), which the browser of a user receives and is assigned to them. Through this pID, the service can recognize which ads have already been displayed to a user and which have been called up. The data is used for cross-website placement of advertisements by enabling Google to identify the visited pages.
Our goal is that the offer of our website, through the use of Google Ads, reaches those visitors who are genuinely interested in our offer. Through the data from conversion tracking, we can measure the benefit of individual advertising measures and optimize our web presence for our visitors.
The generated information is transmitted by Google to a server in the USA and stored there for evaluation. Data will only be transferred by Google to third parties due to legal regulations or within the framework of order data processing. Under no circumstances will Google link a user’s data with other data collected by Google.
Google Tag Manager
- Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC (USA)
- Purpose: Management of tools and plugins
- Category: Technically Necessary
- Recipient: EU, USA
- Processed data: IP address
- Data subjects: Users
- Technology: JavaScript call
- Legal basis: Legitimate interest, Data Privacy Framework, Participant entry
- Website: https://www.google.com
- Further information: policies.google.com/privacy – safety.google – Ads Data Processing Terms
- You can find out where Google data centers are located here: google.com/about/datacenters/locations
The Google Tag Manager service is used on our website.
The Tag Manager is a service that allows us to manage website tags via an interface. This enables us to embed code snippets such as tracking codes or conversion pixels on websites without interfering with the source code. The data is only forwarded by the Tag Manager, but neither collected nor stored. The Tag Manager itself is a cookie-less domain and does not process personal data, as it serves purely to manage other services in our online offering.
When Google Tag Manager starts, the browser establishes a connection to Google’s servers. These are mainly located in the USA. This informs Google that our website has been accessed via a user’s IP address.
The Tag Manager ensures the resolution of other tags, which may in turn collect data. However, the Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, this remains valid for all tracking tags implemented with the Tag Manager.
Hosting
As part of the hosting of our website, all data to be processed in connection with the operation of our website is stored. This is necessary to enable the operation of the website. We therefore process the data accordingly on the basis of our legitimate interest in optimizing our website offering. To provide our online presence, we use the services of web hosting providers, to whom we make the aforementioned data available within the framework of order processing.
HubSpot
- Provider: HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin, Ireland, Parent company: HubSpot, Inc. (USA)
- Purpose: Web analysis, tracking, lead generation, customer service
- Category: Marketing
- Recipient: USA
- Processed data: IP address, website visit details, user data
- Data subjects: Users
- Technology: JavaScript call, cookies
- Legal basis: Consent, Data Privacy Framework, Participant entry
- Website: https://www.hubspot.com/
- Further information: Privacy Policy – Cookie Policy
On our website, we use the HubSpot service to carry out marketing activities. We use HubSpot for our own marketing, lead generation, and customer service purposes.
This includes, among other things, email marketing, which regulates the sending of newsletters and automated mailings, social media publishing and reporting, contact management such as user segmentation and CRM, landing pages, and contact forms. HubSpot uses cookies to enable an analysis of the use of our website. The processed information (e.g., IP address, geographical location, browser type, duration of visit, and pages visited) is evaluated by HubSpot on our behalf so that we can generate reports on visits and visited pages. Information collected via HubSpot and the content of our website are stored on the servers of HubSpot’s service providers.
Contacting Us
When you contact us, your information will be used to process the contact request and its handling within the scope of fulfilling pre-contractual rights and obligations. The processing of your data is necessary to process and respond to your request; otherwise, we may not be able to answer your request or only to a limited extent. The information can be stored in a customer and prospect database based on our legitimate interest in direct marketing.
We delete your request and your contact data once your request has been conclusively answered and no legal retention periods prevent deletion, e.g., in the context of subsequent contract processing. This is usually the case if there has been no contact with you for three consecutive years.
LinkedIn Insight Tag
- Provider: LinkedIn Ireland Unlimited Company, Ireland, Parent: LinkedIn Corporation (USA)
- Purpose: Conversion tracking, web analysis
- Category: Marketing
- Recipient: EU, USA
- Processed data: IP address, website visit details, online-related data
- Data subjects: Website visitors, LinkedIn users
- Technology: JavaScript call, cookies
- Legal basis: Consent, Data Privacy Framework, Participant entry
- Website: https://www.linkedin.com/
- Further information: Privacy Policy – Insight Tag Info – LinkedIn Marketing Solutions & GDPR
Our website uses LinkedIn Insight Tag, a web analysis service. This service records and analyzes LinkedIn users on our website. This gives us insights into our target groups. Furthermore, we can use it to measure the attractiveness of our offers and services as well as the success of LinkedIn campaigns.
LinkedIn members also have the option to opt out of LinkedIn conversion tracking and to block and delete cookies or deactivate demographic features at linkedin.com/psettings/advertising. In LinkedIn’s settings, there is no separate opt-out option for third-party impressions or click tracking for campaigns running on LinkedIn, as all underlying campaigns respect LinkedIn members’ settings.
The information collected by the LinkedIn Insight Tag about the use of our website is encrypted. LinkedIn anonymizes the data within 7 days. The data is deleted again within 90 days. As website operators, we do not receive any personal data, only reports on demographic information, information about the respective jobs for our target groups, and the success of LinkedIn campaigns.
Meta Pixel
- Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, Parent company: Meta Platforms, Inc. (USA)
- Purpose: Web analysis, tracking (conversion)
- Category: Marketing
- Recipients: EU, USA
- Processed data: IP address, user data, website visit details
- Data subjects: Users
- Technology: JavaScript call, cookies
- Legal basis: Consent, Data Privacy Framework, participant entry
- Website: www.facebook.com
- Further information: Data Policy – Business Help
On our website, the Meta Pixel service from the social network Facebook is used for analysis, optimization, and the economic operation of our online offering.
With the help of Meta Pixel, Meta can, on the one hand, identify visitors to our website as a target group for the display of personalized advertisements. Accordingly, we use Meta Pixel to show advertisements placed by us only to those users who have shown an interest in our online offering or who exhibit certain characteristics (e.g., interests in specific topics or products, determined by the websites visited) that we transmit to Meta (so-called “Custom Audiences”). With the help of Meta Pixel, we also want to ensure that our Meta Ads correspond to the potential interests of users and do not appear intrusive. On the other hand, Meta Pixel allows us to track the effectiveness of Meta advertisements for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Meta advertisement (so-called “Conversion”).
Your actions are stored in one or more cookies. These cookies enable Meta to match your user data (such as IP address, user ID) with the data from your Facebook account. The collected data is anonymous and not visible to us and can only be used for advertising purposes. You can prevent the linking with your Facebook account by logging out before taking any action.
To adjust which types of advertisements are shown to you within Facebook, you can visit the page set up by Meta and follow the instructions for settings regarding usage-based advertising: facebook.com/settings?tab=ads
The settings are platform-independent, meaning they apply to all devices, such as desktop computers or mobile devices.
Server Log Files
For technical reasons, particularly to ensure a functional and secure internet presence, we process technically necessary data about access to our website in so-called server log files, which your browser automatically transmits to us.
The access data we process includes:
- Name of the accessed website
- Browser type and version used
- Operating system of the visitors used
- The previously visited page of the visitors (Referrer URL)
- Time of the server request
- Amount of data transferred
- Hostname of the accessing computer (IP address used)
This data is not assigned to natural persons and is used solely for statistical evaluations, as well as for the operation and improvement of our website, and for the security and optimization of our online offering. This data is only transmitted to our website hoster. There is no connection or merging of this data with other data sources. If there is suspicion of unlawful use of our website, we reserve the right to review this data retrospectively. The data processing is based on our legitimate interest in the technically flawless presentation and optimization of our website.
The access data is deleted shortly after the purpose has been fulfilled, usually after 90 days at the latest, unless further retention is required for evidentiary purposes. Otherwise, the data will be stored until a final clarification of an incident.
SSL Encryption
For your visit to our website, we use the widespread SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser. You can recognize whether an individual page of our website is transmitted encrypted by the closed display of the key or lock symbol in your browser’s status bar. The use of this procedure is based on our legitimate interest in using suitable encryption technologies.
Furthermore, we employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments and kept up to date.
YouTube
- Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC (USA)
- Purpose: Integration of video content, collection of statistical data
- Category: Statistics
- Recipients: EU, USA
- Processed data: IP address, website visit details, user data
- Data subjects: Users
- Technology: JavaScript call, cookies, device fingerprinting, local storage
- Legal basis: Consent, Data Privacy Framework, participant entry
- Website: https://www.youtube.com
- Further information: How YouTube Works – policies.google.com/privacy – safety.google – Enhanced Privacy Mode
On our website, we use the YouTube service to embed external videos.
We have activated YouTube’s enhanced privacy mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch a video. However, the enhanced privacy mode does not exclude the transfer of data to YouTube partners.
As soon as a YouTube video is started on our website, a connection to YouTube’s servers is established. This informs YouTube which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to directly associate your surfing behavior with your personal profile. This can be prevented by logging out of your account.
Furthermore, after starting a video, YouTube may store various cookies on your device or use comparable technologies (e.g., device fingerprinting). YouTube also uses local storage on your device. In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness, and prevent fraud attempts.
B. Processing of data of our customers, suppliers, and prospective clients for marketing purposes
We use personal data of our customers and suppliers, e.g., contact persons, their contact details, and marketing-relevant information, not only for the purpose of contract execution and within the scope of legal retention obligations (e.g., accounting), but also beyond that for marketing and customer care purposes. In addition, we collect personal data of prospective clients (e.g., contact persons, their contact details, and marketing-relevant information) in the course of our acquisition and sales activities. We are constantly searching for potential contractual partners on the internet, at trade fairs, and other events, and for this purpose, we maintain a marketing database to enable targeted advertising for our products and services. All measures listed here are carried out in our legitimate interest for marketing purposes in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR in conjunction with Recital 47 for a period of three years from the end of a contractual relationship (customers & suppliers) or our initial (unsuccessful) contact (prospective clients), unless there is an explicit consent from the data subject for a longer period.
If we do not collect personal data for marketing purposes directly from the data subject, we will inform the data subject upon first contact where we obtained their data.
We store data for marketing and customer care purposes analogously to the duration described in A.4.
C. General Information on Data Protection
1. Data Transfer
As a matter of principle, your data will not be transferred to third parties, unless we are legally obliged to do so, the data transfer is necessary for the execution of a contractual relationship concluded between us, or you have explicitly consented to the transfer of your data beforehand. External processors or other cooperation partners will only receive your data to the extent necessary for contract processing or if we have a legitimate interest, which we will always announce separately on a case-by-case basis. Insofar as one of our processors comes into contact with your personal data, we ensure that they comply with the provisions of data protection laws in the same way as we do.
Your personal data will not be sold or otherwise marketed by us to third parties. If our contractual partners or processors are located in a third country, i.e., a state outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offer.
2. Security
We implement numerous technical and organizational security measures to protect your data against manipulation, loss, destruction, and against access by third parties. Our security measures are continuously improved in line with technological developments on the internet. Should you require further information on the type and scope of the technical and organizational measures we have taken, we will be happy to provide it at any time upon written request.
3. Your Rights
According to the General Data Protection Regulation and the Data Protection Act, you, as the data subject of our data processing, have the following rights and remedies:
Right of Access (Art. 15 GDPR)
As a data subject of the data processing described above and other data processing, you have the right to request information as to whether, and if so, which personal data about you is being processed. For your own protection – so that no unauthorized person receives information about your data – we will verify your identity in an appropriate form before providing information.
Right to Rectification (Art. 16) and Erasure (Art. 17 GDPR)
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you or – taking into account the purposes of the processing – the completion of incomplete personal data, as well as the erasure of your data, provided that the criteria of Art. 17 GDPR are met.
Right to Restriction of Processing (Art. 18 GDPR)
Under the legal conditions, you have the right to obtain restriction of the processing of all collected personal data. From the time of the restriction request, this data will only be processed with your individual consent or for the establishment and enforcement of legal claims.
Right to Data Portability (Art. 20 GDPR)
You can request the unhindered and unrestricted transmission of personal data that you have provided to us, to yourself or to a third party.
Right to Object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is necessary for the purposes of the legitimate interests pursued by us or by a third party. Your data will no longer be processed after objection, unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims. You can object to data processing for direct marketing purposes at any time with effect for the future.
Withdrawal of Consent
If you have separately given consent to the processing of your data, you can withdraw this at any time. Such a withdrawal affects the permissibility of processing your personal data after you have expressed it to us.
If you take action to enforce your rights under the GDPR listed above, Volturo GmbH must respond to the requested measure or comply with the request without undue delay, but at the latest within one month of receipt of your application.
We will respond to all reasonable requests within the legal framework free of charge and as promptly as possible.
The data protection authority is responsible for applications concerning violations of the right to information, violation of the rights to confidentiality, rectification, or erasure. Their contact details are:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
dsb@dsb.gv.at
4. Contact Information / Contact Person
a. Contact Information of the Controller
Volturo GmbH
Klosterstraße 2
4451 Garsten
T +43 50 264-0
E office@volturo.at
Company Register No: FN 347754 d
VAT ID: ATU65787829
Jurisdiction: District Court Steyr