Privacy Policy 

in accordance with Art. 13, 14 GDPR - Fulfilment of information obligations

Thank you for visiting our website! The protection of your data is a priority for us. In this privacy policy, we inform you in detail about how we process your data.

This privacy policy applies both to data processing within ENERTEC Naftz & Partner GmbH & Co KG and to the use of our website. The legal basis for this data processing is the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

1 General data processing

1.1 Controller

Responsible according to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is

ENERTEC Naftz & Partner GmbH & Co KG
Asperngasse 2-4
8020 Graz
Phone: +43 316 426435-0
Fax: +43 316 426435-99
Mail: office@enertec.at

1.2  Data processing in accordance with Art. 13 GDPR

We process the data provided to us by various persons through their own information, for example in the context of an enquiry by email, in job applications and for the initiation and conclusion of a contract or a business relationship.

1.3 Data processing in accordance with Art. 14 GDPR

In addition, we process personal data that is not provided by the data subject themselves. This is the case, for example, when managers provide us with the names and contact details of their employees in the course of collaboration on projects or business relationships.

1.4 Data subjects

We process the following data from interested parties: Company, name of contact person and professional contact and address data.

We process the following customer data: Company, title and names of contact persons, professional address data and contact details, bank details, contract data.

We process the following data from suppliers and business partners: Company, title and names of contact persons, professional address data and contact details, bank details, contract data.

We process and publish the names of originators on request. As soon as the use of the published works is discontinued, the personal data is automatically deleted.

1.5 Legal basis

The legal basis for data processing is:

  • consent (e.g. when processing your e-mail address for advertising purposes or when processing image data) pursuant to Art. 6 para. 1 lit. a GDPR
  • the initiation and fulfilment of a contract pursuant to Art. 6 para. 1 lit. b GDPR
  • legal obligations (e.g. statutory retention and documentation obligations, publication obligations under copyright law) pursuant to Art. 6 para. 1 lit. c GDPR,
  • legitimate interests of our company (e.g. use of software) pursuant to Art. 6 para. 1 lit. f GDPR

We will inform you separately about the legal basis and the purpose of the processing for each data processing operation described below.

1.6  Transfer of data

Data is transmitted exclusively for the purpose of contract fulfilment in accordance with Art. 6 para. 1 lit. b GDPR in order to provide you with our services.

  • Transfer to processors: We work with processors to whom personal data is transferred in order to provide services efficiently. These include companies that perform tasks such as contract fulfilment, payment processing, account management and IT services.
  • Other disclosure: In certain cases, such as legal obligations or in the context of a legal dispute, personal data may be disclosed to authorities or lawyers.

1.7 Retention/deletion/anonymisation of data

  • Contractual retention obligations: After termination of a contractual relationship or after the end of contractually agreed periods, your data will be deleted or anonymised, provided that there are no statutory retention obligations to the contrary.
  • Withdrawal of consent: If consent to the processing of personal data is withdrawn, the data will be deleted or anonymised unless there is another legal basis for the processing.
  • Statutory retention obligations: In order to comply with statutory retention obligations, personal data must be retained for a legally prescribed period even after the end of the contract or withdrawal of consent. After these periods have expired, the data will be deleted or anonymised.

1.8 Your rights

You have the following rights vis-à-vis us with regard to your personal data:

  • Right to information, rectification and erasure
  • Right to restriction of processing
  • Right to object to the processing
  • Right to data portability
  • Right to lodge a complaint with the Austrian data protection authority Barichgasse 40 - 42, 1030 Vienna, Telephone: +43 1 52 152-0 E-mail: dsb@dsb.gv.at

If you are of the opinion that we have violated Austrian or European data protection law when processing your data and thereby infringed your rights, please contact us so that we can clarify any questions you may have.

Please send your enquiries and requests by e-mail to office@enertec.at or contact us using the contact details provided.

2  Contact us

If you contact us by email or phone, we will store the data you provide in order to respond to your enquiry. If you have asked us to contact you via our web form or if you have sent us a message, we will store the data required to contact you. This is your name and your email address. Optionally, you can leave us your telephone number and company name.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

3 Application management

General: If you send us your application documents, we will process your personal data contained therein for the purpose of personnel selection and recruitment.

Legal basis: Art. 6 para. 1 lit. b GDPR (contract initiation and fulfilment)

Deletion: In the event of rejection, we will delete your documents 7 months after sending the rejection to you.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

Keeping records: If we wish to keep you on record for the purpose of contacting you at a later date, we will approach you with a separate request for your consent. If you explicitly give us this consent, we will store your application documents. If there is no further opportunity to fill a position with us within one year of receiving your consent, we will delete all of your application documents.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

Application platforms: We use various online application platforms to recruit employees for our company. People who are interested in working for our company have the opportunity to apply directly via a form provided by the operator of the application platform. Applicants decide for themselves which data they make available when using such an online portal. Personal data entered and documents uploaded are forwarded to us by the operator of the application platform. Both the application platform and we process this data as the controller within the meaning of the GDPR. Please note the data protection declarations of the respective operators of the application platforms.

Legal basis: Art. 6 para. 1 lit. b (contract initiation and fulfilment)

4 Social media

We operate social media pages on LinkedIn and Xing. When you visit our social media presence, personal data, including the IP address , is processed by the respective provider and cookies are used for data collection. You can find out exactly what information is transmitted in the privacy policy of the respective provider. There you will also find information about contact options and ways to restrict the processing of this data.

We would also like to point out that you use the respective services and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. sharing, commenting or rating).

The providers of the social media services have provided us with corresponding agreements - in most cases these are agreements on joint responsibility for data processing. The use of social media platforms is based on our legitimate business interests.

Insofar as we are obliged to fulfil data subject rights (see 1.8), you can contact us as well as the provider of the respective social media platform.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

5 Data processing when using our website

5.1 Informational use of the website

When using the website for information purposes only, we only collect the personal data that your browser transmits to our server (server log files). If you wish to view our website, we collect at most the data that is technically necessary for us to display our website to you and to ensure stability and security:

  • IP address
  • Date and time of the enquiry
  • Time zone difference to Coordinated Universal Time (UTC)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software

 This data is not merged with personal data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use and - if there has been a hacking attack - to pass the data on to the law enforcement authorities. The data will not be passed on to third parties beyond this.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

5.2 Cookies

Cookies are stored on your device when you visit our website. Cookies are small text files that are assigned to the browser you are using and stored on your hard drive. They enable us or third-party providers to collect certain information. Cookies cannot execute programmes or transfer viruses to your computer.

The information contained in the cookies is used, for example, to determine whether you are logged in or what data you have already entered, or to recognise you as a user when a connection is established between our web server and your browser.

We distinguish between technical cookies, which are used exclusively to ensure the operation of a website, and cookies requiring consent, which are set by us or third-party providers for the purpose of statistical analyses, tracking or advertising/marketing.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest; for technical cookies), Art. 6 para. 1 lit. a GDPR (consent; for all other cookies)

6 CMS Neos

Our website uses the consent management tool “CMS Neos Version 8 LTS” provided by Neos Foundation e.V., Tatzberg 47, 01307, Dresden, Germany.

The consent management tool records and stores each user’s selection of cookies and consent-required services on our website. With the explicit consent of the website visitor, it ensures that statistical and marketing cookies, as well as consent-required services, are only activated after consent.

The tool records, logs, and stores the visitor’s preferences. To uniquely associate the chosen settings with each website visitor, the consent tool collects, transmits, and stores certain user information (including the IP address).

For more information, please refer to the privacy policy of Neos Foundation e.V. at https://www.neos.io/footer-content/privacy-statement.html.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

7 Data processing when using Google services

We use the services of Google Ireland Limited ("Google"), a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, on our website.

Further information can be found in Google's privacy policy at https://policies.google.com/privacy?hl=de.

7.1 Google Analytics

We use Google Analytics on our website, a tool that allows us to analyse how our website is used. Google Analytics allows us to see how many people visit our website and how long they stay.

This website uses the function "Activation of IP anonymisation" (i.e. Google Analytics has been extended by the code "gat._anonymizeIp();" to ensure anonymised collection of IP addresses (so-called IP masking)). As a result, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Google uses the information collected to analyse your use of the website, to compile reports on website activity and to offer other services relating to website use.

Your IP address, which is transmitted from your browser to Google Analytics, is not merged with other Google data. However, Google may pass this information on to third parties if this is required by law or if third parties process this data on behalf of Google.

You can prevent cookies from being stored on your computer by making the appropriate settings in your browser. Please note, however, that in this case you may not be able to use all the functions of our website to their full extent.

Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or at https://support.google.com/analytics/answer/6004245?hl=de.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

7.2 Google Tag Manager

We use Google Tag Manager on our website, which enables us to integrate and manage website tags such as tracking codes or conversion pixels. This collects data on the website and forwards it to associated analysis tools, which store and analyse this data. Although the Google Tag Manager collects data (e.g. IP address), it does not store it and has no access to it. It merely acts as an interface between the website and the analytics software.

You can find more detailed information here: https://www.google.com/intl/de/tagmanager/faq.html.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

8 Changes to this privacy policy

We reserve the right to make changes to our privacy policy from time to time. We will publish all changes to the privacy policy on this page. Please refer to the latest version of our privacy policy in this regard.