Data protection information in accordance with Art. 13 GDPR

The protection of your personal data is important to us and a particular concern. We therefore want to provide you with all the relevant information in this data protection notice so that you feel secure when visiting our website www.weidenthalermetall.at. We strictly observe the statutory provisions when processing your personal data and would like to inform you here about the most important aspects of data processing within the scope of our website. This data protection notice only applies to www.weidenthalermetall.at and the associated subpages, but not to websites that are controlled and operated by third parties. The privacy policy explains which of your data is collected on our website and which of this data we process and use and how, and who you can contact with your concerns.

Name and address of the person responsible

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

Weidenthaler GmbH

Rudolf-Hausner-Gasse 8
A- 1220 Vienna
E-mail: buero@weidenthaler.com
Tel: +43 (1) 734 5434

General information on data processing

Legal basis for the processing of personal data

In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. If the legal basis is not specified in the data protection notice, the following applies:

The legal basis for obtaining consent is Art. 6 para. 1 lit. a in conjunction with. Art. 7 GDPR. The legal basis for the processing for the fulfillment of our services and implementation of contractual measures, as well as answering inquiries is Art. 6 para. 1 lit. b GDPR. The legal basis for processing to fulfill our legal obligations is Art. 6 para. 1 lit. c GDPR. If the processing of your data is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR as the legal basis for processing. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as the legal basis.

Data erasure and storage duration

We adhere to the principles of data minimization in accordance with. Art. 5 para. 1 lit. c GDPR and storage limitation acc. Art. 5 para. 1 lit. e GDPR. We only store your personal data for as long as is necessary to achieve the purposes stated here or for as long as is required by the retention periods stipulated by law. After the respective purpose has ceased to apply or after these retention periods have expired, the corresponding data will be deleted as quickly as possible.

Note on data transfer to third countries

Tools from companies based in third countries (including the USA) are also integrated on our website. If these tools are active, your personal data may be transmitted to the servers of the respective companies. The level of data protection in third countries generally does not comply with EU data protection law. There is therefore a risk that your data will be passed on to authorities in these countries. We have no influence on these processing activities.

External links

This website may contain links to third-party websites or to other websites under our responsibility. If you follow a link to one of the websites outside our responsibility, please note that these websites have their own data protection information. We assume no responsibility or liability for these external websites and their data protection notices. Therefore, before using these websites, please check whether you agree with their data protection declarations.

Your cursor shows you external links when you move it over such a link. Only when you click on an external link will your personal data be transferred to the destination of the link. In particular, the operator of the other website receives your IP address, the time at which you clicked on the link, the page on which you clicked on the link and other information that you can find in the data protection information of the respective provider.

Please also note that individual links may lead to data transfer outside the European Economic Area. This could give foreign authorities access to your data. You may not be entitled to any legal remedies against this data access. If you do not want your personal data to be transferred to the link destination or even exposed to unwanted access by foreign authorities, please do not click on any links.

Rights of the data subject

As a data subject within the meaning of the GDPR, you have the opportunity to assert various rights. The rights of data subjects arising from the GDPR are the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority and the right to data portability (Article 20).

Right of revocation:
Some data processing can only take place with your express consent. You have the option to withdraw your consent at any time. However, this does not affect the lawfulness of the data processing until the revocation.

Right to object:
If the processing is based on Art. 6 para. 1 lit. e or f GDPR, you as the data subject can object to the processing of your personal data at any time for reasons arising from your particular situation. You also have this right in the case of profiling based on these provisions within the meaning of Art. 4 (4) GDPR. If we cannot prove a legitimate interest for the processing, which outweighs your interests, rights and freedoms or the processing serves the assertion, exercise or defense of legal claims, we will refrain from processing your data after the objection has been made.

If the processing of personal data serves the purpose of direct advertising, you also have the right to object to this at any time. The same applies to profiling in connection with direct advertising. Here too, we will no longer process personal data as soon as you object.

Right to lodge a complaint with a supervisory authority:
If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

Right to data portability:
If your data is processed automatically on the basis of consent or fulfillment of a contract, you have the right to receive this data in a structured, commonly used and machine-readable format.

You also have the right to request the transfer and provision of the data to another controller, insofar as this is technically feasible.

Right of access, rectification and erasure:
You have the right to obtain information about your processed personal data with regard to the purpose of the data processing, the categories, the recipients and the duration of storage. If you have any questions on this topic or other topics relating to personal data, you can of course contact us using the contact details provided in the legal notice.

Right to restriction of processing:
You can request the restriction of the processing of your personal data at any time.

To do so, you must fulfill one of the following requirements:

  • You dispute the accuracy of the personal data. You have the right to demand a restriction of processing for the duration of the verification of accuracy.
  • If the processing is unlawful, you can request the restriction of the use of the data as an alternative to erasure.
  • If we no longer need your personal data for the purposes of processing, but you need the data for the assertion, exercise or defense of legal claims, you can request the restriction of processing as an alternative to erasure.
  • You object to the processing pursuant to Art. 21 para. 1 GDPR, a balance will be struck between your interests and ours. Until this consideration has been made, you have the right to request the restriction of processing.

Restriction of processing means that, with the exception of storage, personal data may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

Provision of the website (itweb GmbH)

When you visit our website, we automatically collect and store information in so-called server log files. Your browser automatically transmits this information to our server or to the server of our hosting company.

These are:

  • IP address of the website visitor’s end device
  • Device used
  • Host name of the accessing computer
  • Operating system of the visitor
  • Browser type and version
  • Name of the retrieved file
  • Time of the server request
  • Amount of data
  • Information on whether the data retrieval was successful

Instead of operating this website on our own server, we have it operated on the server of our external service provider.

The legal basis for the processing of this data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the technically error-free presentation and optimization of this website.

In addition to the data mentioned above, this may include, for example, contact requests, contact data, names, website access data, meta and communication data, contract data and other data generated via a website.

The purpose of pre-contractual or contractual performance vis-à-vis the data subject is cited as a further legal basis. (Art. 6 para. 1 lit. b GDPR).

We operate our website at itweb GmbH, Obachgasse 10, 1220 Vienna. An order processing contract has been concluded.

Use of cookies

Our website uses “cookies”. Cookies are information that a web server (server that provides web content) stores on your end device in order to be able to identify this end device. They are either stored temporarily for the duration of a session (session cookies) and deleted at the end of your visit to a website or permanently (permanent cookies) on your end device until you delete them yourself or they are automatically deleted by your web browser.

Cookies may also be stored on your device by third-party companies when you visit our website (third-party requests). This enables us, as the operator, and you, as a visitor to this website, to make use of certain third-party services installed on this website. Examples of this are cookies for processing payment services or cookies for displaying videos.

Cookies have a wide range of uses. They can improve the functionality of a website, control shopping cart functions, increase the security and convenience of website use and carry out analyses of visitor flows and behavior. Depending on the individual functions, cookies must be classified in accordance with data protection law. They are necessary for the operation of the website and intended to provide certain functions (shopping cart function) or serve to optimize the website (e.g. cookies to measure visitor behavior), then their use is based on Art. 6 para. 1 lit. f GDPR. As a website operator, we have a legitimate interest in the storage of cookies for the technically error-free and optimized provision of our services. In all other cases, cookies will only be stored with your express consent (Art. 6 para. 1 lit. a GDPR).

If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately in this data protection notice. Your required consent will be requested and can be revoked at any time.

Your browser can be set so that cookies are only created with your consent or are generally rejected. However, we would like to point out that the functionality of our website may be restricted if cookies are deactivated.

You have the option of controlling and, if necessary, preventing the use of “cookies” by configuring your browser as follows:

For common third-party providers such as Google, Facebook and many more. the “Digital Advertising Alliance EU (EDAA)” offers the possibility to collectively opt-out all DAA companies.

You can find more information about online advertising and opt-out in connection with interest-based advertising via the respective links for the following organizations.

Use of external services

External services are used on our website. External services are services from third-party providers that are used on our website. This can be done for various reasons, for example for embedding videos or for the security of the website. When using these services, personal data is also passed on to the respective providers of these external services. If we do not have a legitimate interest in using these services, we will obtain your consent as a visitor to our website, which can be revoked at any time, before using them (Art. 6 para. 1 lit. a GDPR).

Consent Management

To comply with data protection requirements, we use a consent management tool on our website. We use this tool to obtain the necessary consent for the setting of cookies or the use of external services. The consents are stored.

The processing is necessary for compliance with a legal obligation to which the controller (website operator) is subject. The legal basis for processing is therefore Art. 6 para. 1 lit. c GDPR is used.

itweb Consent Tool

We use the itweb Consent Manager on our website. The provider of the service is itweb GmbH, Obachgasse 10, 1220 Vienna, Austria.

service is hosted locally on the web server, there is no data transfer to third parties.

The service stores the following data in the browser’s local or session storage:

Name

Storage duration

Type

Purpose

ccm_consent

Permanent

1st-Party Local Storage

Saves the consent status of the visitor.

Content Management System

A content management system enables the creation, editing, organization and presentation of digital content. We use a content management system to create content for our website. This enables us to design a more appealing website.

We base this processing on a legitimate interest (Art. 6 para. 1 lit. f GDPR).

Our legitimate interest lies in the technically error-free presentation and optimization of the website.

Elementor

We use the Elementor service on our website. The provider of the service is Elementor Ltd, Tuval st. 40, Ramat Gan, 5126112, Israel.

As this service is hosted locally on the web server, no data is transferred to third parties.

The service stores the following data in the browser’s local or session storage:

Name

Storage duration

Type

Purpose

elementor

Permanent

1st-Party Local Storage

Is used to save actions performed on the website.

WordPress

We use the WordPress service on our website. The provider of the service is Automattic Inc, 60 29th Street #343, 94110 San Francisco (CA), USA.

As this service is hosted locally on the web server, no data is transferred to third parties.

The service stores the following data in the browser’s local or session storage:

Name

Storage duration

Type

Purpose

wpEmojiSettingsSupports

Session

1st-Party Local Storage

Is stored by WordPress on the local end device

Display optimization

We use tools that serve to optimize the presentation of our website. These tools help, among other things, to display the website in other languages or to make it more accessible.

Processing will only take place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 para. 1 lit. a GDPR). Data will not be processed in the manner described above without your consent. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will terminate this data processing. This does not affect the lawfulness of the processing carried out prior to the revocation.

WPML

We use the WPML service on our website. The provider of the service is OnTheGoSystems Ltd, 22/F 3 Lockhart Road, Wanchai, Hong Kong, China.

As this service is hosted locally on the web server, no data is transferred to third parties.

We base this processing on a legitimate interest (Art. 6 para. 1 lit. f GDPR).

This application is required to ensure the unrestricted functionality of the website. This is a language tool that is considered essential.

Name

Storage duration

Type

Purpose

wpwpml_current_language

Session

1st-party cookie

This cookie is used to track the user’s language preference.

Interface software

This means that business processes are cheaper, faster and more error-free if they are automated with the help of software via interfaces. This allows them to be efficiently integrated into company processes via the company’s own website or social networks. We use interface software on our website to link different applications with each other and to transfer personal data securely from one application to another.

Processing will only take place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 para. 1 lit. a GDPR). Data will not be processed in the manner described above without your consent. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will terminate this data processing. This does not affect the lawfulness of the processing carried out prior to the revocation.

Google APIs

We use the Google APIs service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

By using the service, data may be transferred to a third country (USA). The provider is certified in accordance with the EU-U.S. Data Privacy Framework and therefore offers an appropriate level of data protection.

Further information can be found in the provider’s data protection information at the following URL: https://policies.google.com/privacy.

Map service

We use a map service on this website. In order for the map to be used and displayed on the website, the map must be loaded from the provider’s server. Your IP address will be transmitted to the provider’s server. Depending on the provider, cookies and other technologies, including fonts, are loaded. You can find more information on this in the provider’s privacy policy.

Processing will only take place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 para. 1 lit. a GDPR). Data will not be processed in the manner described above without your consent. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will terminate this data processing. This does not affect the lawfulness of the processing carried out prior to the revocation.

Google Maps

We use the Google Maps service on our website. The provider of this service is Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland.

By using the service, data may be transferred to a third country (USA). The provider is certified in accordance with the EU-U.S. Data Privacy Framework and therefore offers an appropriate level of data protection.

Further information can be found in the provider’s data protection information at the following URL: https://policies.google.com/privacy

Web fonts

This site uses so-called web fonts for the uniform display of fonts, which are provided by an external provider and are loaded by the browser when the website is accessed. The provider of the web font becomes aware that our website has been accessed from your IP address, as your browser establishes a direct connection to the provider of the web font. Processing will only take place if you consent to this data processing (via our consent banner on the website). The legal basis for this processing is consent (Art. 6 para. 1 lit. a GDPR). Data will not be processed in the manner described above without your consent. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will terminate this data processing. This does not affect the lawfulness of the processing carried out prior to the revocation.

Google Fonts

We use the Google Fonts service on our website. The provider of the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

By using the service, data may be transferred to a third country (USA). The provider is certified in accordance with the EU-U.S. Data Privacy Framework and therefore offers an appropriate level of data protection.

Further information can be found in the provider’s data protection information at the following URL: https://policies.google.com/privacy

Contact form

You have the option of contacting us via a contact form on our website. In particular, your contact details are required to contact you via this form.

The legal basis for this is the processing for the purpose of contract fulfillment or pre-contractual measures in accordance with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 lit. b GDPR is referred to. We may also have a legitimate interest in maintaining business relationships or responding to your request for other reasons.

The legal basis for the processing of your data in this case would be Art. 6 para. 1 lit. f GDPR.

The data will be deleted when we have finally answered your request and there are no other retention obligations to the contrary.

On our website we use tools (Google Recaptcha) which protect against unauthorized access, spam or other attacks. This increases the security of our website. We base this processing on a legitimate interest (Art. 6 para. 1 lit. f GDPR).

Our legitimate interest is to ensure the security of our website.

Websecurity

We use tools on our website that protect against unauthorized access, spam or other attacks. This increases the security of our website.

We base this processing on a legitimate interest (Art. 6 para. 1 lit. f GDPR).

Our legitimate interest is to ensure the security of our website and to protect us from unauthorized access, spam and other attacks.

Google Recaptcha

We use the Google Recaptcha service on our website. The provider of the service is Google Ireland Ltd, Gordon House, Barrow Street Dublin 4, Ireland.

By using the service, data may be transferred to a third country (USA).

Further information can be found in the provider’s data protection information at the following URL: https://policies.google.com/privacy.

The service stores the following data in the browser’s local or session storage:

Name

Storage duration

Type

Purpose

rc::a

Permanent

3rd-Party Local Storage

Used to read and filter requests from bots.

rc::c

Session

3rd-Party Session Storage

Used to read and filter requests from bots.

Contact by telephone or e-mail

In accordance with legal requirements, we have provided a telephone number and e-mail address on our website. The data transmitted via these channels is automatically stored by us in order to process corresponding inquiries or to be able to contact the person making the inquiry. We will not pass this data on to third parties without your consent.

If contact is made by telephone or via our e-mail address for pre-contractual or contractual purposes, the processing of personal data is based on the legal basis of Art. 6 para. 1 lit. b GDPR. For all other contacts on your part, the processing of personal data by us is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 lit. f GDPR.