1. Name and address of the controller
The controller for the processing of your personal data according to the data protection laws is:
Am Hof 6a
The contact details of the Data Protection Officer are as follows:
2. Processing in the context of the "website"
2.1. What kind of personal data will we process?
We automatically collect the following personal data when you visit our website:
- date and time when you visit a page on our website
- data of your terminal device (device-ID)
- IP address
- name and version of your browser
- session ID.
2.2 What is our legal basis for the processing of personal data?
We process data when you visit our website based on our legitimate interest according to Art. 6 (1) (f) GDPR, which consists of making our website user friendly and protecting it against attacks.
2.3. Purposes for which we process data
We process your data when you visit our website for the following purposes:
- to make our website and its functionality available to you and to further improve and develop this website;
- to create usage statistics;
- to detect, prevent and investigate attacks on our website;
- to display personalised products and pages.
2.4. Retention periods
We will basically retain your data we have collected when you visit the website for a period of three months. We store data longer only if this is necessary to investigate detected attacks on our website and, furthermore, until the expiry of relevant limitation periods, legal retention periods, or until disputes, if any, have been resolved.
2.5. Data recipients
We regularly use IT service providers to operate and manage the website. These providers may also have access to personal data on our behalf and on our instruction in order to provide the commissioned IT services.
Your data will not be transferred to third parties for their own purposes without your consent.
3. Cookies policy
Our website has a cookie banner which automatically appears the first time you visit our website and enables you to accept the use of all cookies or only certain categories of cookie. The first time you visit our website, only essential cookies will be stored on your device without your consent. There follows below a description of the types of cookies we use.
3.1. Which cookies do we use?
The VERBUND website uses essential cookies, cookies for statistical purposes, or cookies that enable us to show you personalised information. The categories of cookies used in connection with the website are described below:
The categories of cookies described below are first-party cookies which will be sent and read exclusively by the VERBUND domain:
Error: The domain CMS-VERBUND-COM is not authorized to show the cookie declaration. Please add it in the cookie manager to authorize the domain.
3.6. Web analytics cookies
The full IP address is therefore not transmitted to a Google server in the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of VERBUND, Google will use this information for the purpose of evaluating your use of our website, for compiling synthesis reports on website activity for website operators, and for the purpose of providing other services relating to website activity and internet usage.
You can adjust the settings of your browser to prevent the installation of cookies ("browser add-on"); please note, however, that if you do this, you might not be able to benefit from the full functionality of this website.
Furthermore, you may download and install the browser plugin provided below to prevent the collection of data relating to your use of this website generated by the cookie (including your anonymised IP address) by Google and the processing of such data by Google. The current link is available at https://tools.google.com/dlpage/gaoptout?hl=en.
Visual Website Optimizer (VWO)
We want to offer you optimised experience and functions. The development of our website is therefore based on A/B testing and multivariate analysis. We use Visual Website Optimizer, an analysis software provided by Wingify (http://wingify.com/) to run these tests and analyses. VWO allows us to measure and analyse anonymously how a visitor uses the pages of our website (clicks, mouse movement, scroll height). The information collected on the use of our website and the corresponding analyses on website activity are carried out according to data protection laws and do not use any personal data. We cannot identify you based on these anonymously measured parameters, for example based on your IP address or otherwise. Cookies are also used to produce meaningful test results. The program uses the relevant function on your browser to cache information temporarily in order to retrieve it later on. Unless cookies already expire at the end of a session, they are available for a maximum of 100 days (if you want to learn more about this, please go to https://vwo.com/knowledge/cookies-used-by-vwo/), except for the cookie which contains the information that the user wants to block the processing/storage of his or her data; this cookie will be available for a maximum of 10 years. You can delete the cookies on your browser at any time. You can also object to take part in these tests at all. If you want to exercise your right to object, please use the following link: https://vwo.com/opt-out/.
We want to offer you optimised experience and functions on www.verbund.com. The development of our website is therefore based on A/B testing and multivariate analysis. We use Google Optimize, a tool integrated into Google Analytics, to perform these tests and analyses. Google Optimize can display different variants of our website and analyse the behaviour of visitors as a means to improving its user-friendliness. The collection of information about the use of our website and the corresponding analyses of the website activities will be carried out in accordance with the provisions of data protection law and does not involve the use of any personal data. The user can deactivate cookies for Google services by setting his or her browser to block cookies of the domain “www.googleadservices.com”.
Google Adwords Conversion Tracking
DoubleClick by Google
Due to the marketing tools used, your browser automatically and directly connects to the Google server. We have no influence over the scope and further use of data that Google collects using that tool. Based on the level of knowledge we have, we can provide the following information: By integrating DoubleClick, Google is informed that you have visited a certain part of our website or have clicked one of our adverts. Google is able to match that visit with your account if you have registered for a Google service. Even if you have not signed up for a Google service or are not logged in, the provider might find out and store your IP address.
A user who does not want to take part in the tracking procedure can adjust the settings on his or her browser to generally disable the automatic placing of cookies. A user may also adjust the settings on his or her browser to disable cookies for conversion tracking to block cookies of the domain "www.googleadservices.com". If you want to learn more about DoubleClick by Google, please go to https://www.doubleclickbygoogle.com/.
Google Tag Manager
This website uses Google Tag Manager, a feature that allows marketers to manage website tags on a surface. The tag manager tool as such (which implements the tags) is a domain that does not involve cookies and does not collect personal data. The tool insures that other tags are set which may, under certain circumstances, collect data. Google Tag Manager does not access such data. Any deactivation on domain or cookie level is effective for all tracking tags implemented via Google Tag Manager.
VERBUND has activated Google Signals, a supplemental service of Google Analytics. This feature sends aggregated (non-personal) data, such as interests or demographics of Google users who have activated personalised advertisements, to Google Analytics. The data will be used by VERBUND for remarketing purposes. Cross-device user behaviour can also be measured. You can find more information about Google Signals at https://support.google.com/analytics/answer/7532985?hl=en.
3.7. Deactivation of cookies
You are free to decide which categories of cookies you would like to allow and can change your cookie settings in this regard under point 3.1.
You can also adjust the settings on your browser to generally block all cookies. If you want to learn more on how to control cookies please go to http://www.aboutcookies.org/.
Please use the following links if you want to learn more on how to block cookies in all common browsers:
- Mozilla Firefox: https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored
- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=en
- Safari: https://support.apple.com/kb/PH17191?locale=de_AT&viewlocale=en_US
You can delete all cookies stored on your computer and adjust the settings of most browsers to block cookies. However, please note that if you do this, you may not be able to use the full functionality of this website. In this case, you might have to adjust some settings manually whenever you visit this website and accept that some functions might not work properly.
4. 3rd Party Social Plugins
If you do not want Facebook to match your visit of our website with your Facebook account, you should log out of your Facebook account.
Our pages embed functions of Twitter, a service provided by Twitter Inc., of 795 Folsom St., Suite 600, San Francisco, CA 94107, USA ("Twitter") that offers plugins for website operators which VERBUND uses on the pages of its website. You can recognise the plugins by the Twitter "Tweet" or "Follow" buttons. Pages featuring these plugins establish a direct connection to Twitter and transfer different data, depending on your Twitter login status. This might enable Twitter to extract information on your internet use on the VERBUND websites, which Twitter might use for its own purposes. Content of the plugins is kept on Twitter servers and is only displayed on the VERBUND website. VERBUND has no influence over the purposes for which Twitter collects data, which data are collected and how Twitter processes data, nor is VERBUND able to access such data.
If you want to know more about the purposes for which Twitter collects data, which data are collected by Twitter and how they are used, which rights you have and how you can adjust your settings to protect your privacy, please go to http://twitter.com/privacy. You can adjust the settings of your account to change your Twitter privacy settings at http://twitter.com/account/settings.
5. Rights of the data subject
5.1. Right to information
You have the right to obtain information from us on all your data processed by VERBUND. You have the right to obtain information as to whether your personal data will be transferred to a third state or to an international organisation. You may demand information in this context on whether we have provided appropriate safeguards according to Art. 46 GDPR in connection with the transfer of your data.
5.2. Right to rectification and right to restriction of processing
You have the right to obtain the rectification of inaccurate data and the right to have incomplete data completed. Under certain circumstances, for example if the accuracy of data is contested, you have the right to obtain the restriction of processing; in this event, data may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest.
5.3. Right to data portability
You have the right to request that VERBUND transmit to you or to a third party nominated by you, where technically feasible, a copy of your data in a structured, commonly used and machine readable format. Furthermore, you have the right to transmit such data to another controller without hindrance from the controller to which the data have been provided, whereby
(1) the processing is based on consent pursuant to Art. 6(1) (a) or Art. 9(2) (a) or on a contract pursuant to Art. 6(1) (b) GDPR and
(2) the processing is carried out by automated means.
In exercising this right to data portability, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible. This right shall not adversely affect the rights and freedoms of others.
5.4. Right to erasure
You have the right to obtain erasure of data under certain circumstances, if the data have been unlawfully processed.
The so-called "right to be forgotten" is not applicable, because VERBUND will not publish your personal data under any circumstances.
If you have exercised the right to rectification, erasure or restriction of processing vis-à-vis VERBUND, we are obliged to communicate any rectification or erasure of data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
5.5. Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is based on Art. 6(1) (e) or (f) GDPR.
In this case, VERBUND will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
5.6. Right to withdraw consent
You have the right to withdraw your data privacy consent at any time. Even if you withdraw your consent, the lawfulness of processing operations carried out until you have withdrawn your consent shall not be affected.
5.7. Supervisory authority
Notwithstanding any other remedies, if you feel that your personal data were unlawfully processed, you may lodge a complaint with the national supervisory authority in your place of residence. In Austria, this supervisory authority is the Data Protection Authority.
As at: 07/04/2020