Privacy Policy DSGVO

Information obligation DSGVO

1. Responsible / jointly responsible for the processing

Name: Foodsped GmbH

Contact details:

Doktor-Carl-Pfeiffenberger-Strasse 14

6460 Imst

Austria

Tel .: +43 5412 215 10

Fax: +43 5412 215 10-99

Email: info@food-sped.at

Website: www.food-sped.at

Representative: Ulf Schmid

Unless another person responsible is named for the respective processing activity.

2. Purpose and legal basis of data processing

In order to minimize data, only the data necessary for the fulfillment of the purpose are collected. The collection, processing and storage takes place for the following purposes:

2.1 Pre-contractual measures, contract fulfillment and accounting

For the purpose of carrying out pre-contractual measures and / or to fulfill the concluded contract or the mutual obligations arising therefrom. Furthermore, for the purpose of bookkeeping and accounting or for planning and controlling our company.

The provision of your personal data is necessary for this. If this is not provided, no contract can be concluded with you.

If you are not the potential contractual partner, but only have a contractual, personal or economic relationship with them, e.g. as a representative of a legal person, authorized representative, contact person, etc., there is no contractual obligation for you to provide us with your personal data. Failure to provide it can, however, mean that no contract is concluded with the potential contractual partner or that it is considerably more difficult to fulfill the contract with them.

Legal basis

Art 6 para. 1 lit. a DSGVO (if consent is available): Processing is based on the consent given by the data subjects.

Art 6 para. 1 lit.b DSGVO: The processing is necessary for the fulfillment of the contract and / or for the implementation of pre-contractual measures.

Art 6 para. 1 lit.f DSGVO:  There is a legitimate interest in the processing of personal data of data subjects who are in a contractual, personal or economic relationship with the potential contractual partner, e.g. representative of a legal person, authorized representative, contact person, etc., in order to meet the contractual obligations towards the contractual partner or to have a contact person.

Furthermore, we have a legitimate interest in processing the data for planning and controlling our company.

2.2. Human resource management

For applications / job postings for the purpose of personnel administration / planning. The processing of your personal data is necessary for this. If this is not provided, no contract can be concluded with you or they will not be taken into account when selecting potential applicants.

Legal basis

Art 6 para. 1 lit. a DSGVO (if consent is available): Processing is based on the consent given by the data subjects.

Art 6 para. 1 lit.b DSGVO: The processing is necessary for pre-contractual measures (e.g. job interviews) or the conclusion of a contract.

Art 6 para. 1 lit.f DSGVO: There is a legitimate interest in the processing of personal data for planning and controlling the company.

2.3. Business partner database

For the purpose of creating a database of potential business partners / business partners and those affected who have a contractual, personal or economic relationship with them (e.g. representative of a legal person, authorized representative, contact person, etc.).

Legal basis:

Art 6 para. 1 lit.f DSGVO: We have a legitimate interest in the processing of personal data in order to create a business partner database that enables us to process resale rights transactions with the respective business partner quickly and cost-effectively. The database is also used to keep potential business partners and business partners on record in order to make them follow-up offers or offers or to commission them with work.

Art 6 para. 1 lit. a DSGVO (if consent is available): The processing is based on the consent you have given.
 

2.4. Marketing, information and advertising

For the purpose of information / advertising, especially direct advertising, for our company and our services (e.g. web / social media presence). Furthermore, the effect of our marketing measures / our external appearance is controlled during this data processing (e.g. using cookies, page insights). For security reasons, log files are also collected. There is joint responsibility for the personal data processed in connection with Facebook / Instagram (see 11. Social Media / Art 26 - Agreement).

Legal basis:

Art 6 para. 1 lit. a DSGVO (if consent is available): The processing is based on the consent you have given.

Art 6 para. 1 lit.f DSGVO: We have a legitimate interest in processing the data in order to offer and advertise our company and our services for the purpose of sales / sales promotion, image maintenance or customer loyalty / support. Furthermore, to control the effect of the marketing measures / our external appearance (e.g. using cookies, page insights) and to collect log files to protect our website and us.

2.5. Prosecution or legal defense

For the purpose of legal prosecution or legal defense.

Legal basis:

Art 6 para. 1 lit.f DSGVO There is a legitimate interest in the processing of the personal data of data subjects in order to pursue our legal claims or to defend against claims against us.
 

3. Categories of recipients

Your data will or can be passed on by us to the following categories of recipients: Our employees, cooperating contractual and business partners / subcontractors / processors, tax consultants, accountants and auditing companies, payroll administrators, banks, insurance companies, lawyers and notaries, debt collection companies, courts and authorities incl . Tax offices, external financiers (e.g. leasing or security assignment), IT service providers and IT support (hardware and software)

4. Storage duration / criteria for determining the duration

Your personal data will only be stored by us for as long as necessary. If the contract has not yet been fulfilled or the business has not been terminated, your personal data will be saved. In connection with a contract / business, we are currently obliged by law to store your personal data for 7 years. Put simply, the period begins for the books and records at the end of the calendar year for which the entries in the books or records were made, and for receipts, business papers and other documents from the end of the calendar year to which they refer; in the case of a business year deviating from the calendar year, the deadlines run from the end of the calendar year in which the business year ends.

If customs regulations are relevant for the business, personal data must be kept for 5 years.

Application documents / data from applicants are stored by us during their evaluation or the application process. Application documents / data from applicants who are hired are part of the personnel documents and are stored as such until the employment relationship is terminated. Application documents / data from applicants whose application has been rejected will be kept for seven months after the application has been rejected. With the applicant's consent, they can be kept for a longer period of time (records) for possible later employment.

The personal data that is collected and processed on the basis of a corresponding consent or a legitimate interest will be stored until the consent is revoked or an objection is raised. If the data are required to assert legal claims or for legal defense or for evidence purposes, they will be stored until the legal dispute has been concluded or the limitation period has expired. For cookies / log files / social media platforms see below.

5. Rights of data subjects

You have the following rights in connection with your personal data: right to information about your personal data, right to correction, right to deletion, right to restriction of processing and right to data portability. Insofar as we process data on the legal basis of a legitimate interest (Art 6 (1) (f) GDPR), you also have the right to object. Consents can be revoked at any time with future effect.

6. Right of appeal to the supervisory authority

If you are of the opinion that the processing of your data violates data protection law, your data subject rights are not being respected or other data protection claims have been violated by us, you have the right to lodge a complaint with a supervisory authority. In Austria this is the data protection authority.

7. Further processing for another purpose

If further processing of the personal data takes place for a purpose other than the one listed above, you will be informed accordingly beforehand.

8. Transmission to third countries or international organizations

We intend to be active on social media platforms (Facebook and Instagram). Google Maps is embedded on our website and is Google Analytics (analysis of website usage behavior), Google Tag Manager (tag management system with which tracking codes and associated code fragments ("tags") are managed) and a font family (font ) of Monotype Imaging Holdings Inc. in use. In addition, our employees use Microsoft core products.

Facebook / Instagram

If you are logged in with your Facebook / Instagram account and visit our social media presence on these platforms or press “Like” / “Subscribe”, your Facebook account will be linked to our fan page. In this context, data may be transmitted to Facebook.

In the course of marketing measures, we may upload images (e.g. photos, videos, including sound) to Facebook / Instagram for advertising purposes.

We will use a fan page for our Facebook and Instagram presence. Facebook charges in this regard. Data for statistical purposes (page insights) (see below).

Google

If you click on the Google Maps map or calculate a route using Google Maps, you may be redirected to Google Maps. The connection to the Google server can result in data transmission.

Google Analytics is used anonymously using an additional module made available by Google. Google shortens the IP address of the user, which means that we can no longer identify them. Even if Google Analytics is used with the additional anonymization module, it cannot be ruled out that data will be transmitted to Google in a non-anonymized form.

Microsoft

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, offers a large number of products, with core products (e.g. Outlook, Word, etc.) being used in our company. When using online services (e.g. Outlook Exchange), Microsoft reserves the right to transfer personal data to third countries outside the European Union, in particular to the USA, and to save and process it there. A data transfer to locations in third countries cannot therefore be ruled out. Microsoft Corporation has announced Microsoft Ireland Operations, Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, as its data protection representative for the European Economic Area and Switzerland.

Monotype Imaging Holdings Inc.

Monotype Imaging Holdings Inc., headquartered at 600 Unicorn Park Drive, Woburn, Massachusetts 01801, USA, and its subsidiaries and affiliated companies offer services and products worldwide, including fonts. The company reserves the right to process and transfer personal data outside of the EEA, in particular the USA. The third parties commissioned by Monotype Imaging Holdings Inc. to process personal data outside the EEA are contractually obliged to comply with standards that guarantee a data protection standard that corresponds to the standard applicable in the European Union.

European users of Facebook or Instagram (both are part of the Facebook group of companies) have a user agreement with Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. In this context, we therefore do not transmit any personal data to a processor / controller who is based in a third country outside the EU.

European users of Google (part of the Alphabet Inc. group of companies) have a user agreement with Google Ireland Limited, which is why no data should be transmitted to a third country in this context. However, it cannot be ruled out that Google Ireland Limited will forward data to Google LLC in the USA or the Alphabet Inc. group of companies.

The Facebook group of companies, Alphabet Inc. - group of companies, Monotype Imaging Holdings Inc. and Microsoft Corporation use standard contractual clauses as the basis for data transfer to third countries that have been approved by the European Commission or for certain third countries (e.g. Switzerland) that a data transfer may take place, an adequacy decision by the European Commission. The data transfer by Facebook Inc. is also justified by the fact that it is necessary to provide the service within the meaning of Art 49 GDPR.

This includes appropriate guarantees that ensure that the level of protection guaranteed by the GDPR is not undermined.

For more information on Facebook's data policy, please visit  

www.facebook.com/policy.php

You can find more information about Instagram's data policy at

help.instagram.com/519522125107875

You can find more information on Google's data policy at policies.google.com/privacy

For more information on Google's data policy, see

www.monotype.com/de/rechtshinweise/datenschutzpolitik

You can find more information on data protection at Microsoft Corporation at

www.microsoft.com/de-de/TrustCenter/Privacy/gdpr/default.aspx

https://www.microsoft.com/de-de/TrustCenter/Privacy/gdpr/FAQ

9. Additional information in the event of data collection that does not take place from the data subject:

9.1. Categories of personal data collected

Not all of these data categories are collected / processed / stored for every person concerned. Data categories:

Name, company, other business name, contact details, in particular address, email address, telephone number, etc., bank and transfer data, UID number, public register data, e.g. FB, ZVR, data on creditworthiness (e.g. solvency, dunning and lawsuit data, opening of insolvency, etc.), contract texts and business correspondence, performance records and file notes, billing, payment and booking data, function / activity (e.g. managing director, contact person, clerk, etc.), customs documents, processed facts, social security number, date of birth, pictures (e.g. photos, videos), application documents, scope of power of representation, business dealt with by the employee, if necessary. Log files when visiting the website (in particular IP address, date, time, user agent, referrer), page insights, cookies (website), insurance data, in particular insurance, policy and claims number, decisions by courts, authorities, arbitration tribunals, etc., settlements, other judicial or extrajudicial dispute resolution.

9.2. Source of personal data

Publicly accessible registers (e.g. commercial register, ZVR, etc.) and information (e.g. Internet, telephone directory, etc.), transmission by credit protection associations, business partners, clients, regional authorities or disclosure by companies in which we are involved.

10. Cookies / log files / social media platforms

10.1. Cookies

As with most websites, so-called cookies are also used on ours. These are small text files that are stored on your device by our website or by third-party providers or are transmitted to your browser. Cookies are used, for example, to make a website more secure or to analyze the usage behavior of a website. They can be classified according to storage duration (session or persistent), purpose and origin (own or third-party cookies). Session means that the cookie is only used until the end of the browser session and is deleted as soon as you close the browser. Persistent cookies are stored for a certain period of time beyond the individual browser session. The following cookies are used by us on the website (our own cookies)

As stated above, we embed a Google Maps map on our website and use Google Analytics and the Google Tag Manager. The data for the Google Analytics evaluation are anonymized. We also use a product from Cybot A / S (Cookiebot) for the cookie notice. For these functions / tools, we enable third-party providers (Google, Cybot A / S) to set cookies on our website (third-party cookies). The type of cookies and storage duration varies and is specified by the respective third party provider. We have no control over these cookies. You will be informed about the third-party cookies via our cookie notice. The following third-party cookies are currently set:

More information about the Google The cookies that have been set can be found here:

policies.google.com/technologies/partner-sites

Most browsers offer the option to control the setting of cookies, to prevent them (e.g. with third-party providers) or to limit the storage period. You can find more detailed information on this in the help menu of your respective browser or on this page de.wikihow.com/Cookies-deaktivieren.

You also have the option of installing a browser add-on for Google Analytics that prevents activity data from being shared with Google Analytics (https://tools.google.com/dlpage/gaoptout?hl=de).

10.2. Log files

For security reasons, so-called log files are also processed / stored when you visit our website. These are log files that contain, for example, your IP address, the date and time of your visit, your UserAgent (e.g. name and version of your browser) and referrer (website from which you came to our website). The processing takes place in particular to protect our website. Log files are stored for a maximum of 3 months

11. Social Media / Art 26 - Agreement

For our Facebook / Instagram presence, we will use a fan page on which Facebook Ireland Limited (Facebook Ireland for short) collects data from visitors to the page for statistical purposes (page insights). We cannot deactivate this function at the moment. The data collected is made available to us anonymously by Facebook Ireland. We cannot therefore say with certainty which of the transmitted data relates to you. We have therefore concluded an agreement with Facebook Ireland in accordance with Art 26 GDPR, which regulates the rights and obligations of both controllers based on the shared responsibility for this processing. Facebook Ireland has assumed primary responsibility in connection with the page insights and fulfills all obligations in this regard within the meaning of the GDPR. The information obligation is also fulfilled by Facebook Ireland in this context. Facebook Ireland provides you with more information on this on our fan page.

For more information on Art 26 agreement with Facebook Ireland see:

www.facebook.com/legal/terms/page_controller_addendum

For information on Facebook Ireland's Page Insights data, see:

www.facebook.com/legal/terms/information_about_page_insights_data