VORAN MASCHINEN GMBH / INN 7 / A-4632 PICHL BEI WELS / +43 (0) 7249/444-0 / office@voran.at
|SEARCH
VoranVoran

Information Obligations under the General Data Protection Regulation (GDPR)

 

The protection of your privacy and data is very important to us and is always taken into account in all business transactions.

In general, you can use our website without providing personal data. However, different regulations may apply for individual services, which we will inform you about separately below.

 

General Information

The purpose of processing your personal data (hereinafter referred to as "data") is to provide information about our four business areas, namely: Machinery for fruit processing and juice production, as well as agricultural grain processing, Manufacture of individual parts and components, Complete solutions for slaughter and conveyor systems, as well as facades and facade elements, Offering products and services related to these topics. In this privacy policy, we inform you, among other things, about:

  • the name and contact details of the responsible party 
  • all purposes for which your data is processed 
  • the legal basis on which the processing activities are based, including our legitimate interest, if applicable 
  • all recipients of your data 
  • any possible transfer of your data to a third country and the legal basis for this 
  • the storage period of your data or the criteria for determining the duration 
  • the categories of your data that are processed 
  • the origin of your data 
  • the rights of the data subjects

 

Responsible for Data Protection

voran Maschinen GmbH, A-4632 Pichl bei Wels, Tel: 0043-7249-444-0, Email: office@voran.at.

A data protection officer has not been appointed as it is not legally required.

 

Your Rights

You have the following rights regarding your personal data:

  • Right to access 
  • Right to rectification or erasure 
  • Right to restriction of processing 
  • Right to object to processing 
  • Right to data portability 
  • Right to withdraw your consent

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

For this purpose and for any further questions on the subject of personal data, you can contact us at any time.

Right to Access

You have the right to obtain from us, at any time and free of charge, information about the personal data stored concerning you and to receive a copy of this information. This includes details about:

  • the purposes of processing 
  • the categories of personal data being processed 
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly in the case of recipients in third countries or international organizations 
  • if possible, the planned duration for which the personal data will be stored, or if this is not possible, the criteria used to determine this duration 
  • the existence of a right to rectification or erasure of personal data or to restriction of processing by us or the right to object to such processing 
  • the existence of a right to lodge a complaint with a supervisory authority 
  • if the personal data is not collected from the data subject, any available information about the source of the data 
  • the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.

Furthermore, you have the right to be informed about whether personal data is transferred to a third country or to an international organization. If this is the case, you also have the right to be informed about the appropriate safeguards related to the transfer.

Right to Rectification

You have the right to request the immediate rectification of inaccurate personal data concerning you.

Furthermore, considering the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

Right to Erasure

You have the right to request that we delete your personal data without undue delay, provided one of the following reasons applies and the processing is not necessary:

    • The personal data is no longer necessary for the purposes for which it was collected or otherwise processed. 
    • You withdraw your consent on which the processing is based according to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal basis for the processing. 
    • You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR. 
    • The personal data has been unlawfully processed. 
    • The deletion of the personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject. 
    • The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Right to Be Forgotten

If we have made the personal data public and our company as the controller is obliged to delete the personal data pursuant to Article 17(1) GDPR, we will take reasonable measures, including technical measures, taking into account available technology and the cost of implementation, to inform other controllers processing the published personal data that you have requested the deletion by such controllers of any links to, or copies or replications of, this personal data, to the extent that processing is not required.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data if one of the following conditions is met:

  • You contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data. 
  • The processing is unlawful, and you oppose the deletion of the personal data and request the restriction of their use instead. 
  • We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims. 
  • You have objected to processing pursuant to Article 21(1) GDPR, pending the verification whether our legitimate grounds override yours.

Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format.

You also have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, in exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible and provided that the rights and freedoms of others are not adversely affected.

Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions.

We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to the processing for direct marketing purposes, we will no longer process your personal data for such purposes.

Additionally, you have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

Automated Individual Decision-Making, Including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, provided the decision (1) is not necessary for entering into, or performance of, a contract between you and us, or (2) is authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or (3) is based on your explicit consent.

Right to Withdraw Consent

You have the right to withdraw your consent to the processing of personal data at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

 

Minors

Our website and our services are not intended for use by minors, and we do not intend to collect data from minors. If a parent or guardian believes that their child may have provided us with personal data, they should contact us using the contact information provided below, and we will delete such personal data, subject to applicable law and this policy.

 

Data Security

We employ appropriate technical and organizational measures and safeguards (TOMs) designed to prevent unauthorized access, unlawful processing, and unauthorized or accidental loss of your data.

This includes, for example, encrypting your communication with us via this website using the Secure Socket Layer (SSL) encryption protocol.

You can check the quality of our encryption here: SSL Labs

It is important to note that data transmission over the Internet may have security vulnerabilities, as complete protection against access by unauthorized third parties is not possible.

 

Web Host

The servers hosting this website are located in Germany and are operated by Mittwald CM Service GmbH & Co KG, with whom a (sub-)data processing agreement has been concluded.

For more details, please refer to Mittwald's Privacy Policy.

 

Server Log Files

Each time you access our website, an automated system collects a series of general data and information.

These general data and information are stored in the log files of our server by Mittwald CM Service GmbH & Co KG in Germany.

The data collected may include:

  • the types and versions of browsers used 
  • the operating system used by the accessing system 
  • the website from which an accessing system arrives at our website (so-called referrers) 
  • the sub-websites that are accessed via an accessing system on our website 
  • the date and time of access to the website 
  • an Internet Protocol (IP) address 
  • the Internet service provider of the accessing system 
  • any other similar data and information that may be used in the event of attacks on our information technology systems.

When using these general data and information, we do not draw any conclusions about you.

These information are needed to:

  • correctly deliver the content of our website 
  • optimize the content of our website as well as its advertising 
  • ensure the long-term functionality of our information technology systems and website technology 
  • provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyberattack.

We statistically evaluate these anonymously collected data and information with the aim of increasing data protection and data security in our company, ultimately ensuring an optimal level of protection for you. We are permitted to process these data based on our legitimate interest according to Article 6(1)(f) GDPR.

The logs are stored separately from all personal data provided by you and are also deleted after a maximum of 90 days.

Cookies

How Do We Collect Your Data?

At present, you can contact us by email, fax, telephone, post, or in person. Please note that unencrypted emails sent over the Internet are not sufficiently protected against unauthorized access by third parties.

Website Contact Form

If you wish to send us a message, it is necessary to provide your personal data listed below, which we need to process your request. To prevent unauthorized access by third parties to your personal data, the process is encrypted using SSL technology.

Newsletter

With your consent, you can subscribe to our newsletter, through which we inform you about our current interesting offers. This means that we will personally contact you via email and inform you when, based on the data you have provided, we believe that information about our products, services, and events, as well as those of our partner companies, is specifically relevant and interesting to you.

You can receive our company's newsletter only if (1) you have a valid email address and (2) you have registered to receive the newsletter.

A confirmation email will be sent to the email address you initially registered for the newsletter using the double opt-in procedure, in which we ask you to confirm that you wish to receive the newsletter.

This confirmation email serves to verify whether you, as the owner of the email address, have authorized the receipt of the newsletter.

The purpose of this procedure is to be able to provide proof of your registration and, if necessary, to clarify any possible misuse of your personal data.

Application Form on Website

When we receive an application from you, our data processor, Mittwald CM Service GmbH & Co KG, logs and stores the date and time of the registration as well as the IP address from which the registration was made. This is solely for evidence purposes in case an email address is used by an unauthorized person.

 

Why Do We Process Your Data?

If you contact us to obtain information, we process your data for this purpose. If you contact us to enter into a contract, we process your data for this purpose.

Processing Your Order, Including Customer Support

When you provide your order data via contact form, email, telephone, fax, post, or in person, the data you provide, including your personal data, will be processed by us and the recipients listed below within the scope of our business relationship with you for (pre-)contractual processing, to process and manage your order, and to provide customer support.

Website Contact Form

We process the data you provide to answer your inquiry as best and as personally as possible and to determine from which country/location the inquiry originates.

Newsletter

We regularly inform our customers about company offers via a newsletter.

The data collected during your registration for the newsletter is used exclusively for sending our newsletter.

Newsletter subscribers may also be informed by email if necessary for the operation of the newsletter service or registration, such as in the case of changes to the newsletter offer or technical conditions.

a. Processing Your Application

When you provide your application data on our website or via email, the data you provide, including your personal data, will be processed by us and the recipients listed below for the purposes of recruitment and selection, based on your consent or, depending on the individual case, for (pre-)contractual processing, to process and manage your application.

b. After Completion of the Application Process

After the application process is completed, we and the recipients listed below will only process the necessary data for the purpose of contacting you, as a point of contact for hiring other candidates, or as an information source for potential candidates.

We are not obligated to consider your data in the search and selection process, and you have no legal right to the use of your data by us.

Marketing (General)

We process data to initiate business and enhance relationships with existing and potential customers.

 

Why Are We Allowed to Process Your Data?

If you contact us to obtain information, we are allowed to process your data based on your consent according to Article 6(1)(a) GDPR or Article 6(1)(f) GDPR. If you contact us to enter into a contract, we are allowed to process your data based on Article 6(1)(b) GDPR and possibly store it according to Article 6(1)(c) GDPR.

Order

The processing of your data, including the personal data you provide, is carried out by us and the recipients listed below on the legal basis of Article 6(1)(b) GDPR, in order to identify you as a customer, properly process the contract of work or purchase in question, and correspond with you. The data processing is carried out at your request and is necessary for the appropriate handling of your order for the purposes mentioned.

Website Contact Form

When we receive a message from you, the legal basis, depending on the content of the message, is Article 6(1)(a), Article 6(1)(b), or Article 6(1)(f) GDPR.

Newsletter

The legal basis is your consent according to Article 6(1)(a) GDPR. You have the right to withdraw your consent at any time. More details on this can be found in the "Your Rights" section above.

a. Processing Your Application

The processing of your data, including the personal data you provide as well as any unsolicited and voluntarily provided special categories of personal data, is carried out by us and the recipients listed below based on Article 6(1)(b) and Article 9(2)(a) GDPR, in order to identify you as an applicant, properly consider you in the application process, and correspond with you. The data processing is carried out at your request and is necessary for the proper handling of your application for the purposes mentioned.

b. After Completion of the Application Process

Additionally, you may consent to the above-mentioned data being retained and processed by us beyond the legal period in order to inform you when a position that may interest you becomes available. However, these personal data will be stored and processed for a maximum of 3 years.

You consent to us including your personal data and application documents that you have provided in an applicant database and processing them, so we can locate and contact you for future job openings if you are considered a potential candidate based on the data you have provided.

Marketing (General)

The legal basis is our legitimate interest according to Article 6(1)(f) GDPR. The legitimate interest is our interest in initiating and intensifying the business relationship with existing and potential customers.

 

What Data Do We Process?

In general, we expressly ask you not to disclose any data that is likely to have little or no relevance to the purpose you intend; this particularly applies to special categories of personal ("sensitive") data. Providing information is purely voluntary on your part.

Information

If you contact us to obtain information, we process the data you provide.

General Orders

The mandatory information necessary for processing contracts is specifically marked on the order form, while additional information is voluntary.

Website Contact Form

When we receive a message from you, our web host logs and stores the date/time of the registration and the IP address from which the registration was made. This is solely for evidence purposes in case an email address is used by an unauthorized person. Additionally, you must provide your name and a valid email address. Providing further information is optional.

Newsletter

We process the mandatory data required for sending the newsletter. Additional information is optional.

When registering for the newsletter, we also store the IP address assigned by the Internet Service Provider (ISP), the computer system used at the time of registration, and the date and time of registration.

The collection of this data is necessary to understand any (potential) misuse of your email address at a later date and therefore serves as legal protection for us.

a. Application Process

Depending on what you voluntarily provide to us, the data we process may include the following:

  • Your contact details (name, address, phone number, email address, etc.)
  • Your biographical data
  • Information about your professional training
  • Your educational certificates, professional degrees, and certifications
  • Your professional career and information about your compensation
  • Special categories of personal data that you have provided to us unsolicited and voluntarily

Providing applicant information is entirely voluntary on your part. The more information you share with us, the better we can assess your potential suitability for a vacant position.

Nevertheless, we expressly ask you not to disclose any data that is likely to have little or no relevance within the usual hiring processes or that would not even be considered from a legal perspective. This particularly applies to special categories of personal (“sensitive”) data.

We will never ask you for these "sensitive" data (such as data about racial and ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health or sexual life, including, for example, denomination, marital status).

Marketing (General)

 

Depending on what you have voluntarily provided to us, the data we process may include:

  • Your contact details (name, address, phone number, email address, etc.) 
  • Content of previous orders

 

Who will your data be shared with?

Your Data May Be Shared, In Whole or In Part, But Only to the Extent Necessary, With the Following Controllers:

  • Subcontractors/Professionals (Austria)
  • Customers/Project owners, Business partners, Contractual parties, Project participants (Austria)
  • Suppliers (Austria)
  • Service providers (Austria)
  • ISHAP (Austria)
  • Legal interest groups, Trade unions (Austria)
  • Banks (Payment transactions – Austria)
  • Tax advisors (Accounting – Austria)
  • Collection agencies (Debt collection – Austria)
  • Legal representatives (Legal enforcement – Austria)
  • Courts (Legal enforcement – Austria)
  • Administrative authorities (Austria)
  • Local authorities (Austria)
  • Social security carriers (Austria)
  • Labor inspectorate, Police, other authorities (Austria)
  • Mobile network operators (Austria)
  • Statistik Austria (Austria)
  • Public Employment Service (Austria)
  • BUAK (Austria)

Additionally, Your Data May Be Shared With the Following Recipients as (Sub-)Processors; Contracts Have Been Concluded With All of Them, and the Appropriate Technical and Organizational Measures (TOMs) Have Been Verified:

  • Innpuls Werbeagentur GmbH (marketing agency, Austria) 
  • Mittwald CM Service GmbH & Co KG (web hosting, webmail, Germany) 
  • eworx Network & Internet GmbH (newsletter delivery, Austria)

 

How Long Do We Process Your Data?

Your data will be stored in a manner that allows your identification only as long as it is necessary for the purpose for which they are processed.

Information

By providing your data via contact form or email, or by contacting us by phone or in person, you expressly consent that your data, including any personal data you provide as well as any unsolicited and voluntarily provided special categories of personal data, will be processed by us and the recipients listed above for the duration of processing the information request.

If you contact us solely to obtain information, your data will be deleted either immediately or after an appropriate period corresponding to the content of the communication.

Upon withdrawal of your consent, we will delete all your data from all databases.

Order

We are required by corporate and tax law to store your address, payment, and order data for a period of 7 years. If you contact us to enter into a contract, the data will be deleted at the end of the 7th year after the last record has been posted (§ 132 BAO). In the event of a contract conclusion, all data from the contractual relationship will be stored until the end of this period.

Legal/contractual retention obligations or obligations towards customers regarding warranties or compensation, or towards contractual partners, are another basis for continuing to store your data (Article 6(1)(c) GDPR; Article 17(3)(e) GDPR).

The data categories name, address, purchased goods, and purchase date are additionally stored until the expiration of product liability (10 years).

Newsletter

The data you provide for the newsletter will be stored by us only as long as you wish to receive the newsletter and beyond that only as long as we need the data to enforce or defend legal claims.

You can withdraw your consent to the newsletter at any time with effect for the future by clicking on the link provided in each newsletter email, or in writing by email or letter to our contact address. The withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal. After the withdrawal of consent, the collected and stored personal data of the subscriber will be promptly deleted.

a. Application

By providing your data through this website or via email, you expressly consent to your data, including the personal data you provide as well as any unsolicited and voluntarily provided special categories of personal data, being processed by us and the recipients listed above for the duration of processing your application.

b. Rejection of the Application

The retention period is 6 months after the conclusion of the application process due to anti-discrimination laws in applications (§§ 15 Abs 1 and 29 GlBG).

Your data will be deleted after this period unless you have given consent for longer processing of your data; in that case, the specified period in the consent applies.

Please also note that the processing of this data may be permissible beyond this period if other legal regulations allow or require this data processing.

c. Applicant Receives Position

If you, as an applicant, receive a position, all your data will be deleted after the specified retention period, unless another legal basis (see below) justifies a longer retention period.

If you have consented to your data being included in the applicant database of our data processor Mittwald CM Service GmbH & Co KG and processed by them, us, and the other recipients mentioned above, for the purpose of informing you when a position that might interest you becomes available, or to locate and contact you for job openings if you are considered a potential candidate based on the data you have provided, your data may be retained beyond the statutory period and processed by us until you withdraw your consent. In this case, your data will be stored and processed for a maximum of 3 years.

Please note that there are retention obligations for certain data related to filled positions (e.g., under the UGB and tax law).

Legal/contractual retention obligations or obligations towards customers regarding warranties or compensation, or towards contractual partners, are another basis for continuing to store your data.

Generally, your data will be deleted at the end of the 7th year after the last record related to the completed contract has been posted (retention period; § 132 BAO).

In these cases, the data will be blocked instead of deleted.

Your data will be stored in a form that allows your identification only as long as it is necessary for the purpose for which they are processed.

Marketing (General)

Marketing data will be retained for up to 3 years after the last contact.

 

YouTube Videos

We have embedded YouTube videos into our online offering, which are stored on www.YouTube.com and can be played directly from our website.

The legal basis for the use of YouTube is our legitimate interest according to Article 6(1)(f) GDPR in optimizing and expanding the online offer for the economic operation of our website and creating an attractive offer for users by embedding our content and service offers. In this regard, you have the right to object at any time. Alphabet Inc., the provider of YouTube, also processes your personal data in the USA and has committed to the EU-U.S. Data Privacy Framework, www.dataprivacyframework.gov/s/.

Furthermore, our YouTube videos on this website are embedded in "extended data protection mode," meaning no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will data be transferred. We have no influence on this data transmission.

For more information on the purpose and scope of data collection and processing by YouTube, please refer to their privacy policy. There, you will also find further information about your rights and settings options to protect your privacy: www.google.de/intl/de/policies/privacy.

 

VIMEO Videos

On our website, plugins of the video portal Vimeo, operated by Vimeo, Inc., 330 West 34th Street, New York, New York 10001, USA, are embedded.

The legal basis for the use of Vimeo is our legitimate interest according to Article 6(1)(f) GDPR in optimizing and expanding the online offering of our website and creating an attractive offer for users by embedding our content and service offers. In this regard, you have the right to object at any time. Vimeo Inc. processes your personal data in the USA and has committed to the EU-U.S. Data Privacy Framework, www.dataprivacyframework.gov/s/.

For the purpose and scope of data collection and further processing and use of data by Vimeo, as well as your rights and settings options to protect your privacy, please refer to Vimeo's privacy policy: vimeo.com/privacy

 

Instagram Page

We use an Instagram page at

www.instagram.com/voran.machinery=

The corresponding provisions that supplement this privacy policy can be found here:

help.instagram.com/519522125107875
help.instagram.com/1896641480634370

 

Facebook Page

We use a Facebook page at

www.facebook.com/voran.maschinen

The corresponding provisions that supplement this privacy policy can be found here:

www.facebook.com/policy.php
www.facebook.com/policies/cookies
www.facebook.com/business/news/updates-for-page-admins-in-the-eu-and-the-eea
www.facebook.com/legal/terms/page_controller_addendum

 

LinkedIn Profile

We use a LinkedIn profile at

at.linkedin.com/company/voran-maschinen

The corresponding provisions that supplement this privacy policy can be found here:

www.linkedin.com/legal/privacy-policy

 

YouTube Channel

We operate a YouTube channel at

www.youtube.com/watch

The corresponding provisions that supplement this privacy policy can be found here:

policies.google.com/privacy