We take the protection of personal data seriously and observe data protection regulations, in particular the EU General Data Protection Regulation (“GDPR”) and the Data Protection Act (“DSG”).
Who is responsible for data processing?
The entity responsible for processing personal data is
Weitenegg 5 | 3652 Leiben | Austria
Telefon: +43 (0) 2752 71472
Which data do we process?
Users can visit our website (www.habich.com) without registration. When you visit our website and every time you open a file, the browser used on your device automatically sends information to the server of our website and temporarily stores it in so-called log files. This is beyond our control. The following information is also recorded without your intervention and stored:
- IP address
- time stamp of the retrieval
- requested resource
- data volume transferred
- duration of the data transfer
- origin of your page view
- name and version of the browser software
We use the resulting information for internal analysis to improve the quality of our website and to better tailor it to the interests of our visitors. Furthermore, these data can also be used to ensure network and data security.
Some of these data may be collected using cookies or similar technologies.
The legal basis for data processing is Art. 6(1)(f) of the General Data Protection Regulation ("GDPR"), which allows the processing of data in order to safeguard legitimate interests of the controller, provided that this does not conflict with the overriding interests, fundamental rights and fundamental freedoms of the user.
Legal Basis and Purpose
Processing takes place to carry out the contracts existing with our contractual partner or to carry out precontractual measures on the basis of Article 6 para. 1 (b) GDPR. Regardless of the legal form of our contractual partner, we process the data relating to one or more contact persons in order to safeguard our legitimate interest in carrying out the business relationship on the basis of Article 6 para. 1 (f) GDPR.
We may also process data to fulfil legal obligations to which we are subject; this is done on the basis of Article 6 para. 1 (c) GDPR. These legal obligations include, in particular, the notifications required of us by (tax) authorities.
As far as necessary, we also process data beyond the execution of the concluded contracts and the fulfilment of legal obligations for the protection of our legitimate interests or the interests of third parties; this is done on the basis of Article 6 para. 1 (f) GDPR. Our justified interests include
- the identification of economic risks – such as payment / delivery shortfalls – in connection with our business relationships;
- the assertion of legal claims and defence in the event of legal disputes;
- the prevention and investigation of criminal offences as well as
- the management and development of our business activities including risk management.
Is there an obligation to provide personal information?
The provision of the above data is required for the establishment and implementation of the business relationship with our contractual partners, unless expressly stated otherwise by us when collecting this data.Without the provision of this data, we cannot establish and conduct a business relationship.
If we collect any additional personal information, we will state whether the provision of said information is required by law or contract or is required to enter into a contract.
Recipient of the data
Personal data is generally processed within our company.
Depending on the type of personal data, only certain departments/persons have access to personal data. In addition to the technically responsible employees, this also includes to a certain extent IT employees for data processed via the IT infrastructure.
A role and authorisation concept limits access within our organisation to those functions and to the extent required for the particular purpose of the processing.
We may also transfer personal information to third parties outside our company to the extent permitted by law. In particular, these external recipients may include
- the service providers engaged by us that provide services to us on a separate contractual basis, which may include the processing of personal data, as well as the subcontractors of our serviceproviders (such as parcel services) engaged with our consent, as well as
- non-public and public entities, to the extent that we are required by law to transmit your personal information.
Automated decision making
In principle, or in the course of the business relationship, we generally do not use automated decisionmaking (including profiling) within the meaning of Article 22 GDPR. If we use such procedures in individual cases, we will inform affected persons about this to the extent required by law.
International data transmission
Your personal data may be transferred to and processed in other countries outside the EU / EEA for which an adequate level of data protection has not (yet) been established by the EU Commission and which may not provide the same level of protection. Due to local laws and regulations, personal information is subject to local regulatory access.
In principle, we store personal data as long as we have a legitimate interest in this storage and do not outweigh the interests of the person concerned in not continuing storage.
Even without a legitimate interest, we can continue to store the data if we are legally obliged to do so (for example, to fulfil retention obligations). We delete personal data even without the intervention of the data subject as soon as their knowledge is no longer necessary to fulfil the purpose of the processing or storage is otherwise legally inadmissible.
As a rule, the data is stored at least until the end of the business relationship. Data is deleted at the latest at the time of its purpose being achieved. This may also occur after termination of the business relationship. The personal data that we need to store in order to fulfil our retention obligations will be stored until the end of the respective retention obligation. Insofar as we store personal data solely for the purpose of fulfilling retention requirements, these are generally blocked so that they can only be accessed if this is necessary in view of the purpose of the retention obligation.
What rights does an affected person have?
An affected person has the right
- to information on the personal data stored about them, Article 15 GDPR;
- to correction of incorrect or incomplete data, Article 16 GDPR;
- to deletion of personal data, Article 17 GDPR;
- to limit processing, Article 18 GDPR;
- to data transferability, Article 20 GDPR, and
- to object to the processing of your personal data, Article 21 GDPR.
In order to exercise these rights, an affected person may contact us at any time (habich[at]habich.com).
An affected person is also entitled to file a complaint with a competent supervisory authority for data protection, Article 77 GDPR (Austrian Data Protection Authority).
Analysis tools and third-party tools
When visiting our website, your surfing behavior can be statistically evaluated. This happens above all with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior can not be traced back to you. You can object to this analysis or prevent it by not using certain tools.
Links, banners and content from other providers
Insofar as content from other providers is linked via our website, your IP address will be transmitted to the relevant provider when you call up these offers.
In this case, you leave the Habich website and access external pages. It may be that addressees of the clicked landing page set cookies. Habich is not legally responsible for these cookies.
By using cookies, Habich GmbH can provide users of this website with more user-friendly services that would not be possible without the cookie setting.
The data subject can prevent the setting of cookies through our website at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Furthermore, already set cookies can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored in order to process the request and in case of follow-up questions. We will not share this information without your consent. The processing of the data entered into the contact form takes place exclusively on the basis of your consent (Art. 6 (1) lit. DSGVO). You can revoke this consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. The information you provide in the contact form will remain with us until you ask us to delete it, revoke your consent to storage, or delete the purpose for data storage (for example, after your request has been processed). Mandatory statutory provisions - especially retention periods - remain unaffected.
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to a Google server in the United States