Privacy Policy

Preamble

Data protection is a top priority for AMR. We take great care in handling your personal information. Therefore, your data will be treated confidentially by us in strict compliance with the applicable data protection regulations. Below, we explain which data we use at what time and for what purpose. Our aim is to help you understand how our website works and how we ensure the important protection of your personal data. We only use your personal data if we have your consent or a legal permission. We do not use any plugins on our website.

You can contact us through the email address provided on our website, the contact form, or for application purposes. In this context, personal data may also be processed.

Table of Contents

I. Name and Address of the Responsible Party

II. Contact Details of the Data Protection Officer

III. Provision of the Website and Creation of Log Files

IV. Use of Cookies

V. Email Contact

VI. Contact Form

VII. Application via Email and Application Form

VIII. Use of Corporate Profiles in Professional Networks

IX. Hosting

X. Plugins Used

XI. Rights of the Data Subject

I. Name and Address of the Responsible Party

The responsible party in terms of the General Data Protection Regulation (GDPR) and other data protection laws is:


AMR Mannesmann GmbH
Concorde Business Park 2/F/11
2320 Schwechat
Austria
Tel: +43 (1) 803 33 44
office@amr.at
https://www.amr-mannesmann.at

II. Contact Details of the Data Protection Officer

We do not have a designated Data Protection Officer. Please direct any data protection inquiries to the management of AMR Mannesmann GmbH.

Mr. Dipl. Ing. Laaber Thomas, thomas.laaber@amr.at

Mr. Ing. Elsholz Alexander, alexander.elsholz@amr.at

a. Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer. The following data is collected:

* Information about the browser type and the version used
* The user's operating system
* The user's internet service provider
* The user's IP address
* Date and time of access
* Websites from which the user's system reaches our website

This data is stored in the log files of our system. These data are not stored together with other personal data of the user.

b. Purpose of Data Processing

The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session.

The storage in log files is carried out to ensure the functionality of the website. Additionally, the data help us optimize the website and ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Article 6 (1) sentence 1 lit. f GDPR.

c. Legal Basis for Data Processing

The legal basis for the temporary storage of data and log files is Article 6 (1) sentence 1 lit. f of the GDPR.

d. Duration of Storage

The data will be deleted as soon as they are no longer needed for the purpose of their collection. In the case of data collected to provide the website, this is the case when the respective session is ended.

In the case of storing the data in log files, this is done after a maximum of seven days. Storage beyond this period is possible. In such cases, the IP addresses of the users are deleted or anonymized, so that an assignment of the calling client is no longer possible.

e. Possibility of Objection and Removal

The collection of data for the provision of the website and the storage of data in log files are necessary for the operation of the website. Consequently, there is no possibility for users to object to this.

IV. Use of Cookies

a. Description and Scope of Data Processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie may be saved on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is revisited.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. Language settings are stored and transmitted in the cookies. Additionally, our website uses cookies that enable an analysis of users' browsing behavior. This way, the frequency of page visits can be transmitted. The user data collected in this way is pseudonymized by technical precautions. Thus, the data can no longer be assigned to the calling user. The data is not stored together with other personal data of the users.

b. Purpose of Data Processing

Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already stored cookies can be deleted at any time, which can also be done automatically. If cookies are disabled for our website, it may not be possible to fully utilize all functions of the website.

If you use a Safari browser version 12.1 or later, cookies are automatically deleted after seven days. This also applies to opt-out cookies, which are set to prevent tracking measures.

V. E-Mail-Contact

a. Description and Scope of Data Processing

Our website provides the possibility for users to contact us via the provided email address. In this case, the personal data transmitted with the email will be stored. These data are used exclusively for processing the conversation.

b. Purpose of Data Processing

In the case of contact via email, the necessary legitimate interest in processing the data also lies in responding to and managing the communication initiated by the user. This allows us to address inquiries, provide requested information, and maintain communication with users, which is essential for our services and support.

c. Legal Basis for Data Processing

The legal basis for processing data when there is user consent is Article 6 (1) (a) of the GDPR.

The legal basis for processing data transmitted in the course of sending an email is Article 6 (1) (f) of the GDPR. If the email contact aims at concluding a contract, then Article 6 (1) (b) of the GDPR serves as an additional legal basis for processing.

d. Duration of storage

The data will be deleted as soon as they are no longer necessary for achieving the purpose for which they were collected. For personal data sent via email, this is the case when the respective conversation with the user has ended. The conversation is considered to have ended when it can be inferred from the circumstances that the relevant issue has been conclusively resolved.

Personal data collected during the sending process will be deleted after a maximum period of seven days.

e. Possibility of objection and elimination

The user has the right at any time to withdraw their consent to the processing of personal data. If the user contacts us via email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.


If the individual wishes to exercise their right to withdraw consent or to object to the storage of data, they can do so at any time by sending an email to office@amr.at to make this request.

All personal data stored during contact will be deleted in this case.

Contact form

Our website features a contact form that can be used for electronic communication. When a user avails themselves of this opportunity, the data entered into the input mask are transmitted to us and stored.

At the time the message is sent, the following data are stored:

* Name

* Email address

* Message

 

During the sending process, your consent to the processing of data is obtained and reference is made to this privacy policy. Alternatively, contact can be made via the provided email address. In this case, the personal data transmitted with the email are stored. The data are used exclusively for processing the conversation.

Contact form

a. Description and scope of data processing

The processing of personal data from the input mask is solely for the purpose of handling the contact request. If contact is made via email, there is also a necessary legitimate interest in processing the data. The other personal data processed during the sending process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.

b. Purpose of data processing

The processing of personal data from the input mask is solely for the purpose of handling the contact request. This serves the necessary legitimate interest in processing the data when contact is made via email. The additional personal data processed during the sending process are intended to prevent misuse of the contact form and ensure the security of our information technology systems.

c. Legal Basis for data processing

The legal basis for processing the data when there is user consent is Article 6(1)(a) of the GDPR.

The legal basis for processing data transmitted in the course of sending an email is Article 6(1)(f) of the GDPR. If the email contact aims at concluding a contract, then Article 6(1)(b) of the GDPR serves as an additional legal basis for processing.

d. Duration of storage

The data are deleted as soon as they are no longer needed for the purpose for which they were collected. For the personal data from the input mask of the contact form and those transmitted via email, this is the case when the respective conversation with the user has ended. The conversation is considered to have ended when it can be inferred from the circumstances that the relevant issue has been conclusively resolved.

Personal data collected during the sending process will be deleted after a maximum period of seven days.

e. Possibility of objection and elimination

The user has the right at any time to withdraw their consent to the processing of personal data. If the user contacts us via email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

If the individual wishes to exercise their right to withdraw consent or to object to the storage of data, they can do so at any time by sending an email to office@amr.at to make this request.

All personal data stored during contact will be deleted in this case.

VII. Application via Email and Application Form

Our website features an application form that can be used for electronic applications. When an applicant uses this option, the data entered into the input mask are transmitted to us and stored. These data include:


* Name
* Email address
* Resume to upload
* Message

During the sending process, your consent to process your data is obtained, and reference is made to this privacy policy.

Alternatively, you can also send us your application via email. In that case, we collect your email address and any data you provide in the email.

After you send your application, you will receive an email confirmation of the receipt of your application documents from us.

Your data will not be shared with third parties. The data are used exclusively for processing your application.

b. Purpose of data processing

The processing of personal data from the application form is solely for the purpose of handling your application. In the case of contact via email, there is also a necessary legitimate interest in processing the data.

The additional personal data processed during the sending process are intended to prevent misuse of the application form and ensure the security of our information technology systems.

c. Legal basis for data processing

The legal basis for processing your data is the initiation of a contract upon the request of the data subject, Art. 6 Para. 1 Sentence 1 lit. b Alt. 1 GDPR and § 26 Para. 1 Sentence 1 BDSG."

d. Duration of storage

After the application process is completed, the data will be stored for up to six months. Your data will be deleted no later than after the expiration of the six months. In the event of a legal obligation, the data will be stored in accordance with applicable regulations.

The personal data collected during the submission process will be deleted no later than seven days after collection.

e. Possibility of Objection and Elimination

The applicant has the option to object to the processing of personal data at any time. If the applicant contacts us by e-mail, they can object to the storage of their personal data at any time. In such a case, the application can no longer be considered.

If the applicant wishes to change or delete their data later, they can do this themselves in the application portal.

All personal data stored during electronic applications will be deleted in this case.

VIII. Utilization of company presences in professional networks

a. Scope of data processing

We use the option of company presences on professional networks. We maintain a company presence on the following professional networks:

LinkedIn:

LinkedIn, Unlimited Company Wilton Place, Dublin 2, Irland

XING:

XING SE, Dammtorstraße 30, 20354 Hamburg, Deutschland

We provide information on our site and offer users the opportunity to interact.

The company website is used for job applications, information/PR, and active sourcing.

We do not have information regarding the processing of your personal data by companies jointly responsible for the corporate presence. Further information can be found in the privacy policies of:

LinkedIn:

https://www.linkedin.com/legal/

XING:

https://privacy.xing.com/de

If you engage in an activity on our corporate presence (e.g., comments, posts, likes, etc.), you may be making personal data (e.g. your real name or profile photo) public.

b. Legal basis for data processing

The legal basis for processing your data in connection with the use of our corporate presence is Art. 6 Para. 1 Sentence 1 lit. f GDPR.

c. Purpose of data processing

Our corporate presence serves to inform users about our services. Each user is free to publish personal data through activities.

d. Duration of storage

We store your activities and personal data published via our corporate presence until the revocation of consent. In addition, we comply with the legal retention periods.

e. Options for objection and removal

You can object to the processing of your personal data, which we collect during your use of our corporate presence, at any time and assert your rights as a data subject mentioned under section IV. of this privacy policy. To do this, send us an informal email to the email address specified in this privacy policy.

Further information on your options for objection and removal can be found here:

LinkedIn:

https://www.linkedin.com/legal

XING:

https://xing.com

To ensure suitable guarantees for the protection of the transmission and processing of personal data outside the EU, the data transfer to and data processing by LinkedIn is based on suitable guarantees according to Art. 46 ff GDPR, particularly by the conclusion of so-called standard contractual clauses according to Art. 46 (2) c) GDPR.

Further information on your options for objection and removal can be found here

IX. Hosting

Web hosting is provided by the company VERCEL. The data protection provisions of https://vercel.com apply; these can be found at https://vercel.com/legal/privacy-policy.

X. Plugins used

No plugins or cookies are used on our website.

XI. Rights of the data subject

In accordance with the applicable data protection law, you are entitled to the following rights in particular in accordance with the legal requirements:

a. Right to information, rectification, erasure and restriction

You have the right to request information about your personal data stored by us at any time.

When we process or use your personal data, we endeavour to take reasonable steps to ensure that your personal data is accurate and up to date for the purposes for which it was collected.

If your personal data is incorrect or incomplete, you may request that this data be corrected.

You may also have the right to request the erasure or restriction of the processing of your personal data if, for example, there is no longer a legitimate business purpose for such processing in accordance with this Privacy Policy or applicable law and statutory retention obligations do not require further storage.

b. Right to data portability

You may have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to transmit those data to another controller.

c. Right to revoke the consent you have given

If you have consented to the collection, processing and use of your personal data, you can withdraw your consent at any time with effect for the future, but without affecting the lawfulness of processing based on consent before its withdrawal.

d. Right to object

You have the right to object at any time, for reasons arising from your particular situation to the processing of your personal data which is based on Art. 6 Para. 1 lit. e) or f) GDPR. We will not process your personal data after an objection unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims (see Art. 21 Para. 1 GDPR, known as "limited right to object"). In this case, you must provide reasons for the objection that arise from your particular situation.

Furthermore, you have the right at any time to object to the processing of your personal data for direct marketing purposes, without providing reasons.

e. Enforcement

To enforce your data protection rights, you can contact us at any time using the contact details provided above. In this case, please specify the name of the relevant website and include appropriate identification of yourself.

f. Right to lodge a complaint

You also have the right to lodge a complaint with the competent supervisory authority if you believe that your personal data is being processed unlawfully.