Declaration of the obligation to inform
(Data protection declaration)
The protection of your personal information is of the greatest importance to us. Therefore, we exclusively process your data based on legal provisions (DSGVO, TKG 2003). This data protection declaration introduces you to the most important aspects of our website’s data processing. Additionally, we hereby also gather your compliance with certain forms of data usage.
In order to process a contact request (via our contact form, e-mail, phone or social networks) the user’s data will be processed in accordance with Article 6 Section 1 lit. b) DSGVO upon contacting us. The user’s data may be stored in a Customer-Relationship-Management System (“CRM System”) or in a comparable inquiry processing system. Unless they are necessary for further use, the inquiries are deleted. We evaluate the necessity of said inquiries every two years, furthermore the legal requirements of compulsory archiving apply.
Deletion of data
According to the stipulation of Article 17 and 18 of the DSGVO the data we process is either deleted or restricted in its processing. Unless this data protection declaration does not explicitly state otherwise and as long as the deletion is not in violation of any legal archiving obligations, the data we record is deleted, when it is no longer necessary for its intended purpose. Provided that the data is not deleted, due to their necessity for purposes permitted by law, its processing is restricted. Viz. the data in question is placed under restriction and will not be processed for other purposes. This, for instance, applies to data that has to be stored for commercial and tax law purposes.
According to the legal requirements in Germany, the storage of data takes place for ten years in accordance with §§ 147 Section 1 AO, 257 Section 1 Nb. 1 and 4, Section 4 HGN (books, recordings, status reports, vouchers, trading books, for the taxation of relevant documents, etc.) and for six years in accordance with § 257 Section 1 Nb. 2 and 3, Section 4 HGB (commercial letters).
According to the legal requirements in Austria, the storage of data takes place for seven years in accordance with § 132 Section 1 BAO (accounting records, bills and receipts, accounts, vouchers, business papers, statements of revenue and expenditure, etc.), for 22 years regarding properties and for ten years concerning documents dealing with electronically supplied services, telecommunications services and radio and television broadcasting services that are rendered to non-entrepreneurs of EU countries and for those who make use of the Mini-One-Stop-Shop (MOSS).
Additionally, we process
- Contract data (e.g. contractual object, duration, client category).
- Payment details (e.g. bank details, payment history)
of our clients, interested parties and business partners regarding the provision of contractual services, customer services and customer care, marketing, advertisement and market research.
The hosting services we use allow us to offer you the following services: infrastructure and platform services, computing capacity, storage space and database services, security services as well as technical maintenance services, all of which we use for the purpose of the operation of our online services.
Here we or rather our hosting provider process inventory data, contact data, content data, contract data, usage data, meta- and communications data of clients, interested parties and users of the online services on the basis of our legitimate interests for an efficient and secure provision of our online services according to Article 6 Section 1 lit. f DSGVO in conjunction with Article 28 DSGVO (conclusion order management contract).
Please note that www.eisenkraft.com does not operate a web shop and only sends out offers that are requested and created by interested parties. In order to create an offer, you permit us to use explicitly personalized data such as name, address, e-mail address and phone number, which are transmitted to us through the contact form or the quotation/order form. This website does not deal with any kind of data used for transactions of customer payments in the form of forwarded bank data or credit card information. We delete inquiries, once they are no longer needed. We review said necessity every two years; however, we do record customer inquiries permanently and refer to the item “Your rights” for the deletion of such inquiries. In regard to the legal archiving obligations, the deletion takes place after its expiration (end of the retention requirement under commercial law (six years); tax law (ten years)).
Our website uses so-called cookies. These are small text files that the browser deposits on your terminal device. They are not harmful.
Facebook-Pixel, Custom Audiences and Facebook-Conversion
Due to our legitimate interest in analysis, optimization and economic operation of our online offers we employ the so-called Facebook Pixel, curtesy of the social network Facebook, which is operated by Facebook Inc. (“Facebook“) 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook is certified under the Privacy-Shield-Agreement and thereby guarantees to abide by the European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
Facebook Pixel allows Facebook to determine the viewers of our online offers as a target audience for advertisements (“Facebook-Ads”). Accordingly, we implement Facebook-Pixel to only show our Facebook-Ads to those Facebook users who have shown an interest in our online offers or to those who exhibit certain characteristics (such as an interest in certain topics or products, which are determined by the websites these individuals visit). We then transmit this information (so-called “Custom Audiences”) to Facebook. With the help of Facebook-Pixel we would also like to ensure that our Facebook-Ads match the user’s potential interests and do not have an obtrusive effect. Facebook-Pixel further assists us in evaluating the effectiveness of our Facebook-Ads for statistical as well as a market research purposes by allowing us to see whether users were redirected to our website by clicking on a Facebook-Ad (so-called “Conversion”).
We also make use of a Facebook Inc. process called “Custom Audience from File”. In this case the e-mail addresses of the newsletter recipients are uploaded to Facebook. The upload process is encrypted and serves the sole purpose of determining the recipients of our Facebook-Ads. By doing so, we want to ensure that our ads are only shown to users who exhibit an interest in our details and services.
Facebook’s data processing takes place within the scope of Facebook’s data usage directive. Therefore, you may find general information on the presentation of Facebook-Ads in Facebook’s data usage directive: https://www.facebook.com/policy.php. Specific information and details regarding Facebook-Pixel and its operating mode may be obtained within Facebook’s Help Center: https://www.facebook.com/business/help/651294705016616. You may also object to data collection via Facebook-Pixel and the usage of your data for the presentation of Facebook-Ads. To determine which commercial ads you would like to see on Facebook, we may refer you to the relevant Facebook page and suggest that you follow the guidelines on managing the settings of usage-based ads: https://www.facebook.com/settings?tab=ads. These settings are platform-independent and thus apply to all devices, such as desktop computers or mobile devices.
European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
Online presences on social media
We sustain online presences on social networks and platforms in order to communicate with and inform clients, interested parties and users about our services. Upon calling up the websites of particular networks and platforms the terms and conditions as well as the data processing guidelines of the particular operator apply. Unless nothing else is stipulated within our data protection declaration, we process the data of our users provided they communicate with us via social networks and platforms, for example in the form of commenting within our social media presences or sending us messages.
Integration of services and content provided by third parties
Due to out legitimate interest, we also apply content and service offers of third parties in order to include their content and services, as for example videos and fonts (subsequently uniformly referred to as “content”), within our online offers.
This assumes that the third parties offering content, recognize the user’s IP address, otherwise the content cannot be transmitted to the users’ browsers. Thus, the IP address is necessary for the presentation of content. We try to only use the content of operators, who exclusively use IP addresses for the transmission of content. Third parties may further use so-called Pixel-Tags (transparent graphic image, also known as “Web Beacons”) for statistical as well as marketing purposes. “Pixel-Tags” helps to process information such as visitor traffic on web pages. Pseudonymous information may further be saved in cookies on the user’s device. They may also contain technical information regarding the browser and the operating system, referring websites, visiting time and details about the usage of our online offers. These pieces of information may furthermore be connected to information from other sources.
We may integrate videos by the platform “Vimeo” provided by Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Data protection declaration: https://vimeo.com/privacy. We would like to point out that Vimeo may use Google Analytics and therefore refer to their data protection declaration (https://www.google.com/policies/privacy) as well as opting-out possibilities regarding Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=de) or the Google settings regarding data usage for marketing purposes (https://adssettings.google.com/.).
We integrate videos provided by the platform “YouTube” provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data protection declaration: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
We integrate the fonts (“Google Fonts”) offered by the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data protection declaration: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Features and content of the social network Instagram (provided by the Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) may be included within our online offers. This may include, for instance, contents such as images, videos or texts and buttons, with which the users may express their likes regarding the content, the author of the content or subscribe to our contributions. In the case of users with an Instagram account, Instagram will be able to match the summoning of aforementioned content and features with the user’s profile provided by Instagram. For Instagram’s data protection declaration please visit: http://instagram.com/about/legal/privacy/
Maps provided by Google Maps are integrated and linked on our website. Google is able to match your surfing habits to your account, especially when you are logged into your Google account. Google is operated by Google LLC (“Google”), Amphitheatre Parkway, Mountain View, CA 94043, USA. For more information regarding Google kindly refer to: https://policies.google.com/terms
We have reached a corresponding agreement for contract data processing with the provider.
Your IP-address is recorded, but simultaneously pseudonymized (for instance by deleting the last eight bit). This then only permits a rough localization.
The data processing takes place on the basis of the legal regulations of § 96 Section 3 TGK as well as Article 6 Section 1 lit a (approval) and/or f (legitimate interest) of the DSGVO. Should you not wish Google to gather and use your IP-address via Google Analytics, you may object at any time with effect for the future. For more information kindly refer to http://tools.google.com/dlpage/gaoptout?hl=de.
You are generally entitled to the rights of disclosure, correction, deletion, restriction, data transmission, revocation and objection. We will provide you with the gathered information regarding your person upon receiving your written inquiry. Should you feel that the data processing is in violation with the data privacy laws or that your claims regarding data privacy laws have been violated in any way, you may launch a complaint at the regulating authority, which in Austria is the data protection authority.
Should you have questions about how we gather, process or use your personal data or want to request a clarification, suspension or deletion of data or a revocation of issued compliances feel free to contact our office in Graz.
Josef Krenn GmbH
8020 Graz – Österreich
Tel:+43 316 584195
Fax:+43 316 584195 15