It is important for VERBUND AG to protect your personal data. We therefore comply with the applicable legal regulations for the protection, lawful handling and secrecy of personal data as well as data security, in particular the Data Protection Act as amended ("DSG"), the Telecommunications Act ("TKG") and the General Data Protection Regulation ("GDPR"). The following information describes which cookies and other data collection tools we use when you visit our VERBUND websites ("website").
1. Name and address of the Data Controller
The Data Controller responsible for the processing of your personal data in accordance with the data protection regulations is:
Am Hof 6a
The contact details of the data protection officer are as follows:
2. What are cookies?
There are cookies that require your consent before they can be used on your device and cookies that can be used without your consent because they are technically required for us to render our services ("essential cookies"). In the case of essential cookies, the data processing is required for the purpose of data security measures, to prevent abuse and to optimise the website and is therefore based on our legitimate interests pursuant to Art. 6(1) (f) GDPR in conjunction with Art. 96(3) TKG. We use all other cookies on our website via the cookie banner, solely on the basis of your prior express consent pursuant to Art. 6(1) (a) GDPR.
3. Which cookies are used?
On the website, VERBUND uses necessary cookies, cookies for statistical purposes or cookies to show you information tailored to your requirements. The categories of cookies used in conjunction with the website are described below:
4. Deactivating cookiesYou can revoke your consent granted to us at any time with effect for the future by deleting the corresponding cookies and preventing the saving of cookies as described here. You can also decide at your discretion which categories of cookies you would like to allow and can also change your cookie settings via the link in point 3.
In addition, you can also make general changes to all cookie settings at any time via your browser. Most browsers accept cookies automatically. The use of certain cookies may also be required to open a website or to save the objection to the use of other cookies. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed or to require your explicit consent before saving a cookie. You can also separately activate "Block third-party cookies". As a rule, the Help function in the menu bar of your web browser shows you how to reject new cookies and how to deactivate cookies that have already been received. Learn how by visiting, for example: http://www.aboutcookies.org/.
In the following you will additionally find a summary of links that provide detailed information on the deactivation of cookies in commonly used browsers.
- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
- Safari: https://support.apple.com/kb/PH17191?locale=de_AT&viewlocale=de_DE
However, please note that if you deactivate cookies, you may not be able to use all functions of this website to the fullest extent possible. In this case, you may have to manually make a number of settings each time you visit the website and accept that several functions may be impaired.
On the basis of the consent, you voluntarily granted (Art. 6(1) (a) GDPR), VERBUND uses different tools via the cookie banner.
5.1 Google Analytics
You can prevent the installation of cookies by making the relevant settings in your browser software (so-called "browser add-on"); however, please note that in this case you may not be able to use all functions of this website to the fullest extent possible.
Furthermore, you can prevent the data generated by the cookie and referring to your use of the website (incl. your previously anonymised IP address) being sent to Google as well as the processing of these data by Google by downloading and installing the browser plugin available via the link provide below. The current link is: http://tools.google.com/dlpage/gaoptout?hl=de.
5.2 Visual Website Optimizer (VWO)
In order to be able to offer ideal presentations and functions, the development of our website is based on A/B tests and multivariant analyses. In order to perform these tests and analyses, we use Visual Website Optimizer, analytical software from Wingify (http://wingify.com/). VWO makes it possible to anonymously measure and analyse the usage behaviour of the page visitors (clicks, mouse movements, scroll heights, etc.) on our website. The collection of information on the use of our website and the corresponding analyses of website activities are carried out in accordance with the provisions of the Data Protection Act and, in particular, do not involve the use of any personal data. We have absolutely no means by which to allocate the anonymous measured values to your person, such as via the allocation of your IP address or some other way. In order to receive meaningful test results, cookies are also used, i.e. the program uses the function provided by your browser to temporarily store information and access it at a later time. If the cookies do not expire at the end of the session, they will be available for a maximum of 100 days (you can find further details here: https://vwo.com/knowledge/cookies-used-by-vwo/), with the exception of those cookies which contain the information that the user rejects the processing/storage of his data, which is available for a maximum of 10 years. You can delete the cookies in your browser at any time. You also have the option to generally object to the participation in the tests via this link: https://vwo.com/opt-out/.
5.3 Google Optimize
In order to be able to offer ideal presentations and functions at https://www.verbund.com/, the development of our website is based on A/B tests and multivariant analyses. In order to perform these tests and analyses, we use Google Optimize, a tool integrated into Google Analytics. Google Optimize can display different versions of our website and analyse the behaviour of website visitors as a basis on which to improve its user-friendliness. The collection of information on the use of our website and the corresponding analyses of website activities are carried out in accordance with the provisions of the Data Protection Act and, in particular, do not involve the use of any personal data. Visitors can deactivate cookies for Google services by setting their browser to block cookies from the domain „www.googleadservices.com“.
5.4 Google Adwords Conversion Tracking
This website uses the service Google Conversion Tracking of Google Ireland Limited. (Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland). Google Adwords places a cookie on the visitor's computer if the visitor has reached our website via a Google ad. These cookies expire after 30 days and cannot be used to identify the user. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can see that the user clicked on the ad and was forwarded to this page. Each Adwords customer receives a different cookie. Cookies can therefore not be traced via the websites of Adwords customers. The information collected with the aid of the conversion cookie serves to create conversion statistics for Adwords customers who have opted for conversion tracking. The Adwords customers learn about the total number of users who clicked on their ad and were forwarded to a page provided with a conversion tracking tag. However, they do not receive any information that could allow them to identify users in person. If visitors would prefer not to participate in the tracking method, they can also reject the placing of a cookie required for this – such as through a browser setting that generally deactivates the automatic placing of cookies. Visitors can also deactivate cookies for conversion tracking by setting their browser to block cookies from the domain „www.googleadservices.com“.
You can find more information on how Google uses data at https://www.google.com/intl/de/policies/privacy.
On the basis of the marketing tools used, your browser automatically establishes a direct link with the Google server. We have no influence over the scope and further use of the data that are collected through the use of this tool by Google and therefore inform you in accordance with the information currently available to us: By including DoubleClick, Google receives the information that you have visited corresponding parts of our website or have clicked on one of our ads. If you are registered with a service of Google, Google can associate the visit with your account. Even if are not registered with Google or have not logged in, it is possible that the provider will discover and store your IP address.
If visitors would prefer not to participate in the tracking method, they can also reject the placing of a cookie required for this – such as through a browser setting that generally deactivates the automatic placing of cookies. Visitors can also deactivate cookies for conversion tracking by setting their browser to block cookies from the domain "www.googleadservices.com". You can find more information on DoubleClick by Google at https://www.google.de/doubleclick.
5.6 Google Tag Manager
This website uses Google Tag Manager of Google Ireland Limited (Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland). Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The 'Tag Manager' tool itself, which implements the tags, is a cookie-less domain and does not collect any personal data. The tool provides for the triggering of other tags which in turn may collect data. Google Tag Manager does not access these data. If a deactivation has been performed at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
5.7 Google Signals
VERBUND has activated Google Signals, an additional service of Google Ireland Limited (Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland). This feature sends aggregated (non-personal) data, such as interests or demographics of Google users who have activated personalised advertisements, to Google Analytics. The data are used by VERBUND for remarketing purposes. Cross-device user behaviour can also be measured. You can find more information about Google Signals at https://support.google.com/analytics/answer/7532985?hl=de.
This website uses technology from Outbrain (Outbrain UK Limited
5th Floor, The Place 175 High Holborn, London United Kingdom). Outbrain is a provider of native ads and works with publishers worldwide.
The Outbrain pixel will not be displayed and the user's data will not be shared if no marketing consent has been given. Such data may consist of: which publisher/placement the click came from, from which device, browser, operating system, ad, time, country, region, interest categorised by the article, the ad that was clicked on. Everything anonymised on an anonymous user ID.
The purpose of the Pixel is to facilitate retargeting in the Outbrain network and thereby display relevant ads to users.
Our website uses social media plugins or widgets from Walls.io. When these plugins are invoked, the IP address and cookie information are transmitted to our order processor Walls.io to allow us to present the content in a structured and clear manner. Walls.io is operated by "Walls.io GmbH in Vienna, Austria.
6. PluginsWe use social media and other 3rd-party plugins on our website. To ensure optimal protection of your data, we use the service of Shariff for social media plugins. This program prevents the social media services from tracking your visit on our website, as long as you do not actively interact with the social media plugins. Therefore, no direct contact is established between you as a user of our website and the social media service. Only when you actively click the button or otherwise interact with the plugins is the respective social media service able to process your data. In detail:
6.1 Social media plugins used
Facebook: Facebook Inc. (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland); more detailed information: http://www.facebook.com/policy.php.
Twitter: Twitter Inc. (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland); more detailed information: http://twitter.com/privacy
LinkedIn: LinkedIn Inc (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland); more detailed information: https://www.linkedin.com/legal/privacy-policy.
WhatsApp: WhatsApp Inc (WhatsApp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland); more detailed information: https://www.whatsapp.com/privacy
6.2 Google Maps
On this website, map information is provided via the function "Google Maps" of Google Ireland Limited. (Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland). In the course of using this function, Google also processes data on how this function is used by visitors to our website. You can find more information on how Google uses data at https://www.google.com/intl/de/policies/privacy.
7. Storage durationWith regard to the storage duration, a distinction must be made between "session cookies" and "persistent cookies".
Session cookies are automatically deleted when you leave our website. Persistent cookies, on the other hand, remain on your terminal device either until the cookies reach an expiry date set by us or you manually delete them from your browser. We use such persistent cookies to recognise you on your next visit to our website. You can find the precise storage duration under point 3.
8. Data recipientsIn order to operate and administer the website, we regularly use IT service providers which, in accordance with our order and instructions, may under certain circumstances also have access to personal data in order to be able to render the commissioned IT services.
We will also transfer your personal data to the following recipients:
- to external third parties to the extent required by our legitimate interest (e.g. auditors, insurance companies in the event of an insured event, legal representatives as the occasion requires, etc.);
- to authorities and other public bodies to the extent required by law (e.g. financial authorities, courts, etc.).
Your data will not be passed to any other third parties for their own purposes without your consent.
9. Rights of the data subject
9.1 Right to information
You have the right to obtain information from us on all your data processed by VERBUND. You have the right to obtain information as to whether your personal data will be transferred to a third state or to an international organisation. In this regard, you may request information on whether we have provided appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer of your data.
9.2 Right to rectification and right to restriction of processing
You have the right to obtain the rectification of inaccurate data and the right to have incomplete data completed. Under certain circumstances, for example if the accuracy of data is contested, you have the right to obtain the restriction of processing; in this event, data may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest.
9.3 Right to data portability
You have the right to request that VERBUND transmit to you or to a third party nominated by you, where technically feasible, a copy of your data in a structured, commonly used and machine readable format. Moreover, you have the right to transmit this data to another data controller without any obstruction from the data controller to whom the personal data has been given, if
- the processing is based on consent pursuant to Art. 6(1) (a) GDPR or Art. 9(2) (a) GDPR or on a contract pursuant to Art. 6(1) (b) GDPR,
- the processing is carried out by automated means.
In exercising this right to data portability, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This right shall not adversely affect the rights and freedoms of others.
9.4 Right to erasure
You have the right to obtain erasure of data under certain circumstances, such as if the data have been unlawfully processed.
The so-called "right to be forgotten" does not apply because VERUND will never disclose your personal data.
If you have exercised the right to rectification, erasure or restriction of processing vis-à-vis VERBUND, we are obliged to communicate any rectification or erasure of data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
9.5 Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is based on point (e) or (f) of Art. 6(1) GDPR.
In this case, VERBUND will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
9.6 Right to withdraw consent
You have the right to withdraw at any time your declaration of consent under data protection law. Even if you withdraw your consent, the lawfulness of processing operations carried out until you have withdrawn your consent shall not be affected.
9.7 Supervisory authority
Notwithstanding any other remedies, if you feel that your personal data were unlawfully processed, you may lodge a complaint with the national supervisory authority in your place of residence. In Austria, this supervisory authority is the Data Protection Authority.
Version: May 2022