Privacy Policy 

in accordance with Art. 13, 14 GDPR - Fulfilment of information obligations

All personal designations are always intended to be gender-neutral and are used solely for simplified readability.


Responsible according to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is

ENERTEC Naftz & Partner GmbH & Co KG
Asperngasse 2-4
8020 Graz
Phone: +43 316 426435-0
Fax: +43 316 426435-99

2 The company’s data processing

2.1 Data processing according to Art 13 GDPR

We process the data that data subjects provide to us through their own statements, for example in the context of an enquiry by e-mail, for the purpose of initiating and concluding a contract or a business relationship.

2.2 Data processing according to Art 14 GDPR

In addition, we process data of persons that may be part of a contractual relationship, which we have permissibly received in the context of information from third parties (e.g., managing directors/employees provide us with the data of their employees/colleagues).


We process the following data from interested parties: Company, name of contact person and professional contact and address data.

We process the following data from customers: Company, title and names of contact persons, professional address data and contact data, bank details, contract data.

We process the following data from suppliers and business partners: Company, title and names of contact persons, professional address data and contact data, bank details, contract data.

We process the following data from event participants: Company, title and name of the registered person, professional contact data and address data.

We process the following data from training participants: Company, title and name of the respective participant, professional address data and contact data, training data (completed courses as well as certificates).

2.4 PAssing on DATA

Personal data will only be passed on to third parties by us if this is necessary for the purpose of contract processing and contract fulfilment or due to legal regulations.

2.5 Data retention

The data will be deleted by us as soon as storage is no longer necessary or legal retention periods have expired. If the basis of the processing is consent, we restrict the processing or delete the data upon revocation of the consent - unless there are legal provisions to the contrary.

2.6 Contact by E-Mail

When you contact us by e-mail, the data you provide will be stored by us on the basis of your consent in order to answer your questions. We delete the data accruing in this context after the processing is no longer necessary or restrict the processing if there are legal retention periods.


The below points are the legal basis of data processing:

  • Initiation and fulfilment of the contract in accordance with Art. 6 para. 1 lit. b GDPR.
  • Legal obligations in accordance with Art. 6 para. 1 lit. c GDPR, (for example, legally prescribed storage and documentation obligations).
  • Legitimate interests of our company within the meaning of Art. 6 para. 1 lit. f GDPR (e.g., statistical evaluations)
  • Art 6 para. 1 lit. a GDPR when obtaining consent (for example when processing image data or for advertising purposes).

3 Data processing via our website


If you have asked us to contact you via our web form or if you have sent us a message, then we store the data from you that is necessary to contact you. These are your name, and your Mail address. We process other data if you provide it to us voluntarily. The data will be deleted by us as soon as storage is no longer necessary, or you object to the processing.

Legal basis: Art. 6 para. 1 lit. a GDPR


If you send us your application documents, we will process your personal data contained therein as well as your CV and references for the purpose of personnel selection and filling the position. In the event of a rejection, we will delete your documents after the legal retention periods have expired.

Legal basis: Art. 6 para. 1 lit. b GDPR

Should you consent to be kept on record with us for contact at a later date, we will approach you with a separate request to provide consent. If you explicitly give us this consent, we will store your consent. If there is no further opportunity to fill a position with us within one year, we will delete all of your applicant data one year after you have sent us your consent.

Legal basis: Art 6 para 1 lit a GDPR

4 Data processing when visiting our website

4.1 Informational use of the website

When you use our website for information purposes only, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect at most the data that is technically necessary for us to display our website to you and to ensure its stability and security:

  • IP address
  • Date and time of the request
  • Time zone difference from Coordinated Universal Time (UTC)
  • Content of the request (concrete page)
  • Access Status/HTTP Status Code
  • Website from which the request comes
  • Browser
  • Operating System and its interface
  • Language and version of the browser software.

Legal basis: Art. 6 para. 1 lit. f GDPR

4.2 Cookies

In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in relation to the browser you are using, and which provide the party setting the cookie (in this case, us) with certain information. Cookies cannot execute programs or transmit viruses to your computer.

The cookie allows you to be recognized when you visit the website without having to re-enter data that you have already entered previously.

The information contained in the cookies is used, for example, to determine whether you are logged in or which data you have already entered, or to recognize you as a user when a connection is established between our web server and your browser. With most web browsers, cookies are automatically accepted.

By using our websites, you agree to the use of these cookies, as far as cookies are accepted according to your browser settings.

4.2.1 Transient Cookies

Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

4.2.2 Persistent Cookies

Persistent cookies are automatically deleted after a predefined period of time, which may differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

4.2.3 THIRD-PArtY Cookies

These originate from providers other than the website operator. They can be used, for example, to collect information for advertising, custom content, and web statistics.

4.2.4 Browser

Most browsers are set by default to accept all cookies. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of our website may be limited.

You can remove cookies stored on your PC yourself at any time by deleting the temporary internet files.

Legal basis: Art. 6 para. 1 lit. f GDPR (in the case of technical cookies), Art. 6 para. 1 lit. a GDPR (for all other cookies)

4.3 Data processing in the USA

It cannot be ruled out that personal data will be transmitted to the USA when visiting our website. If this is the case, we will point this out separately in this privacy policy.

The GDPR requires so-called appropriate safeguards according to Art. 46 GDPR for a data transfer to a third country or to an international organization. Such guarantees do not exist for the USA.

Possible risks that cannot currently be ruled out for you as a data subject in connection with the aforementioned information are in particular:

  • Your personal data may be shared with other third parties (e.g.: US authorities) by the respective service provider beyond the actual purpose of fulfilling the order.
  • You may not be able to sustainably assert or enforce your rights of access against the respective service provider.
  • There may be a higher probability that incorrect data processing may occur because the technical organizational measures for the protection of personal data do not fully comply with the requirements of the GDPR in terms of quantity and quality.

With your consent to the processing of (advertising and marketing) cookies, you explicitly agree to the transfer of data to the USA. You can remove cookies stored on your PC yourself at any time by deleting the temporary internet files.

Legal basis: Art. 6 para. 1 lit. a GDPR

5 Data processing for services provided by Google

We have signed a contract with Google Ireland Limited ("Google"), a company incorporated and operated under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. Nevertheless, it is possible that data may be transferred from Europe to the USA, although we as a company have no influence over this.

Through the use of this service, a transfer of personal data to the USA takes place or cannot be ruled out! - For more details, see 4.3 of this declaration.

Legal basis: Art 6 para 1 lit a GDPR

5.1 Google Analytics

This website uses the function "Activation of IP anonymization" (i.e., Google Analytics has been extended by the code "gat._anonymizeIp();" to ensure anonymized collection of IP addresses (so-called IP masking)). This means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

According to Google, Google will use the information obtained for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google. However, Google may transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. You can prevent the storage of cookies by selecting the appropriate settings on your browser software. However, we would like to point out that in this case you may not be able to use all functions of the websites to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the websites (including your anonymized IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available under the following link (

For more information on terms of use and data privacy, please visit

5.2 Google Fonts

We use Google Fonts. To ensure a consistent and appealing display of fonts and icons, your browser loads the required fonts into your browser cache. For this purpose, it is necessary for the browser you are using to contact the Google Fonts servers, which results in Google Fonts becoming aware that our website has been accessed via your IP address.

You can find out what data is collected by Google and what this data is used for at

5.3 Google Gstatic

Gstatic is a domain used by Google to load static content into another domain name to reduce bandwidth usage and increase network performance for the end user.

5.4 Google Maps

On this website we use the offer of Google Maps. This allows us to show you interactive maps directly on the website and enables you to comfortably use the map function. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data already mentioned under the point "Informational use of the website" are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is conducted in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information about your rights in this regard and setting options for protecting your privacy:

5.5 Google reCaptcha

We use the Google service reCaptcha to determine whether a human or a computer is making a certain entry in our contact or newsletter form. Google uses the following data to check whether you are a human or a computer: IP address of the terminal device used, the website that you visit with us and on which the captcha is embedded, the date and duration of the visit, the recognition data of the browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks that require you to identify images.

5.6 Google Tag Manager

To recognize your user behavior, we use so-called Google Tag Manager. The Google Tag Manager is a solution that marketers can use to manage website tags via an interface. The tool itself processes the following personal data: IP address of the user. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. Google Tag Manager can set cookies, at least in the administrator's preview and debug mode, but also outside of it. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

More detailed information is available here:

6 your rights

You have the following rights in relation to personal data relating to you:

  • Right of access, right to rectification and erasure
  • Right to restriction of processing
  • Right to object to processing
  • Right to data portability

Please direct your enquiries and requests by email to  or contact us using the contact details provided.

If you believe that we have violated Austrian or European data protection law in the processing of your data and that your rights have been infringed as a result, please contact us so that we can clarify any issues you may have.

You also have the right to complain to the supervisory authority, which is the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Wien
Phone: +43 1 52 152-0

7 Changes to this privacy policy

We reserve the right to modify this privacy policy at any time. Changes to this privacy policy will be published by us on this page. Please refer to the current version of our privacy policy in this regard.