Privacy policy

Privacy Policy in accordance with Art. 13 GDPR - Fulfilment of information obligations

1. Controller

Responsible according to Art. 4 para. 7 EU Data Protection Basic Regulation (GDPR) is

VENTREX Automotive GmbH
Johann-Sebastian-Bach-Gasse 1-5
8010 Graz
Phone: +43 316 46 76-0
E-mail: dsgvo@ventrex.com

2. Overview of personal data processing

 

2.1 Data processing in accordance with Art. 13 GDPR

We process the data that data subjects provide to us through their own statements, for example in the context of an enquiry by e-mail, for the purpose of initiating and concluding a contract or a business relationship.

 

2.2 Data processing in accordance with Art. 14 GDPR

In addition, we process data of persons who may be part of a contractual relationship, which we have permissibly received in the context of information provided by third parties (e.g., managing directors provide us with the data of their employees or colleagues).

 

2.3 Data subjects

We process the following data from interested parties: Company, name of contact person and professional contact and address data.
We process the following data from customers: Company, title and names of contact persons, professional address data and contact data, bank details, contract data.
We process the following data from suppliers and business partners: Company, title and names of contact persons, professional address data and contact data, bank details, contract data.

 

2.4 Recipients of personal data

Recipients of personal data will only be third parties if it is necessary for the fulfilling of a contract or if it is required by law.

 

2.5 Data retention

The data will be deleted by us as soon as storage is no longer necessary or legal retention periods have expired. If the basis of the processing is consent, we restrict the processing or delete the data upon revocation of the consent – unless there are legal provisions to the contrary.

 

2.6 Contact by e-mail

When you contact us by e-mail, the data you provide will be stored by us on the basis of your consent in order to answer your questions. We delete the data accruing in this context after the processing is no longer necessary or restrict the processing if there are legal retention periods.

 

2.7 Legal basis

The below points are the legal basis of data processing:

  • Art 6 para. 1 lit. a GDPR when obtaining consent (for example when processing image data or for advertising purposes).
  • Initiation and fulfilment of the contract in accordance with Art. 6 para. 1 lit. b GDPR.
  • Legal obligations in accordance with Art. 6 para. 1 lit. c GDPR, (for example, legally prescribed storage and documentation obligations).
  • Legitimate interests of our company within the meaning of Art. 6 para. 1 lit. f GDPR (e.g. statistical evaluations).

3. Data processing upon contacting us through our website

If you have asked us to contact you via our web form or if you have sent us a message, then we store the data from you that is necessary to contact you. These are your name, and your Mail address. We process other data if you provide it to us voluntarily. The data will be deleted by us as soon as storage is no longer necessary or you object to the processing.
Legal basis: Art. 6 para. 1 lit. a GDPR

4. Data processing in the context of job applications

If you send us your application documents, we process your personal data contained therein as well as your CV and references for the purpose of personnel selection and filling the position. In the event of a rejection, we delete your documents 7 months after sending the rejection to you.

Legal basis: Art. 6 para. 1 lit. b GDPR

If you consent to be kept on file with us for the purpose of contacting you later, we will approach you with a separate request for the transmission of a consent. If you explicitly give us this consent, we will store your consent. If there is no further opportunity to fill a vacancy with us within one year, we will delete all your applicant data one year after you have sent us your consent.

Legal basis: Art. 6 para. 1 lit. a GDPR

5. Social media presence

We operate the social media sites: LinkedIn, Xing, YouTube, Facebook and Instagram. When visiting our social media pages, personal data, including the IP address, is processed by the respective provider and cookies are used for data collection. For detailed information on the specific data transmitted, please refer to the privacy policy of each service. There, you will also find contact information and various privacy settings.
We prioritize comprehensive customer satisfaction and primarily use these services to engage and communicate with you.
In services with a US connection, the data collected is usually transmitted to a server in the USA and stored there. We have no control or ability to supervise the nature or extent of the data processed by these services, the way it is processed and used or the disclosure of this data to third parties. To limit the processing of this data within the settings of these services, please refer to the detailed descriptions provided in the privacy policies of the respective providers.
Furthermore, we point out that you use the respective services and their features at your own responsibility. This applies particularly to the use of interactive functions such as sharing, commenting, or rating.
The providers of the social media services have provided us with corresponding agreements – in most cases these are agreements on joint responsibility for data processing. The use of social media is based on our legitimate, operational interest.
Legal basis: Art. 6 para. 1 lit. f GDPR

6. Data processing when visiting our website

6.1 Informational use of the website

When you use our website for information purposes only, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect at most the data that is technically necessary for us to display our website to you and to ensure its stability and security:

  • IP address
  • Date and time of the request
  • Time zone difference from Coordinated Universal Time (UTC)
  • Content of the request (concrete page)
  • Access Status/HTTP Status Code
  • Website from which the request comes
  • Browser
  • Operating System and its interface
  • Language and version of the browser software.

Legal basis: Art. 6 para. 1 lit. f GDPR

 

6.2 Cookies

Cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in relation to the browser you are using and which provide the party setting the cookie (in this case us) with certain information. Cookies cannot execute programs or transmit viruses to your computer.
The cookie enables you to be recognised when you visit the website without having to re-enter data that you have already entered previously.
The information contained in the cookies is used, for example, to determine whether you are logged in or which data you have already entered, or to recognise you as a user when a connection is established between our web server and your browser.
We distinguish between technical cookies, which are used exclusively to ensure the operation of a website, and other cookies, which are set for the purpose of statistical analysis, tracking or advertising/marketing by us or third-party providers.
Legal basis: Art. 6 para. 1 lit. f GDPR (in the case of technical cookies), Art. 6 para. 1 lit. a GDPR (for all other cookies)

 

6.3 Data processing in the USA

It cannot be ruled out that personal data will be transmitted to the USA when visiting our website. If this is the case, we will point this out separately in this privacy policy.
The GDPR requires so-called appropriate safeguards according to Art. 46 GDPR for a data transfer to a third country or to an international organization. Such guarantees do not exist for the USA.
Possible risks that cannot currently be ruled out for you as a data subject in connection with the aforementioned information are in particular:

  • Your personal data may be shared with other third parties (e.g.: US authorities) by the respective service provider beyond the actual purpose of fulfilling the order.
  • You may not be able to sustainably assert or enforce your rights of access against the respective service provider.
  • There may be a higher probability that incorrect data processing may occur because the technical organizational measures for the protection of personal data do not fully comply with the requirements of the GDPR in terms of quantity and quality.

With your consent to the processing of (advertising and marketing) cookies, you explicitly agree to the transfer of data to the USA. You can remove cookies stored on your PC yourself at any time by deleting the temporary internet files.
Legal basis: Art. 6 para. 1 lit. a GDPR

7. Data processing for services provided by CookieFirst

Our website utilizes the Cookie Consent Management Tool “CookieFirst” provided by Digital Data Solutions B.V., located at Plantage Middenlaan 42a 1018DH, Amsterdam, the Netherlands.

The service uses technically necessary cookies to store your cookie consent. The collected information is retained in our possession until you request its deletion, independently remove the CookieFirst cookie, or the purpose of data storage is no longer applicable. It is important to emphasize that mandatory legal requirements for data retention remain unaffected.

For more information, please refer to CookieFirst’s privacy policy.

Legal basis: Art. 6 para. 1 lit. f GDPR

8. Data processing for services provided by Google

We have signed a contract with Google Ireland Limited (“Google”), a company incorporated and operated under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. Nevertheless, it is possible that data may be transferred from Europe to the USA, although we as a company have no influence over this.

By using this service, the transfer of personal data to the United States occurs or cannot be ruled out. Google LLC has certified itself under the EU-U.S. Data Privacy Framework for the transfer of personal data from the EU to the United States. The European Commission has determined that there is an adequate level of protection for personal data transferred from the EU to a company in the United States certified under the EU-U.S. Data Privacy Framework. Consequently, the data transfer is permissible in accordance with Article 45 of the GDPR. For more details, please refer to section 6.3 of this statement.

Legal basis: Art 6 para. 1 lit. a GDPR

 

8.1 Google Analytics

We have integrated Google Analytics on our website, a web analysis service from Google, which enables us to analyse visitor flows and the length of stay on our website.

According to Google, Google will use the information obtained to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website and internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Google may, however, transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. You can prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of the website to their full extent. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the websites (including your anonymized IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link.

For more information on the terms of use and data protection, please visit link or link.

Legal basis: Art 6 para. 1 lit. a GDPR

 

8.2 Google Doubleclick

The website uses the online marketing tool DoubleClick. To help AdWords customers and publishers serve and manage ads on the web, the Google advertising network and certain Google services may be used. DoubleClick uses cookies to serve ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are shown in which browser and can thus prevent them from being shown more than once. In addition, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later calls up the advertiser’s website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain any personal information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google using this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.

Legal basis: Art 6 para. 1 lit. a GDPR

 

8.3 Google Gstatic

Gstatic is a domain used by Google to load static content into another domain name to reduce bandwidth usage and increase network performance for the end user.

Legal basis: Art 6 para. 1 lit. a GDPR

 

8.4 Google Photos

For a user-friendly experience, we use the cloud-based storage service Google Photos. When you access images on our website, your browser connects to Google’s servers. For this purpose, your IP address is transmitted to Google. In order to display the images correctly, the required pages are loaded into your browser cache.

You can find more detailed information here.

The privacy policy and terms of use can be found here.

Legal basis: Art 6 para. 1 lit. a GDPR

 

8.5 Google Tag Manager

We use Google Tag Manager to recognise your user behaviour. The Google Tag Manager is a solution with which marketers can manage website tags via an interface. The tool itself processes the following personal data: IP address of the user. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data.  The Google Tag Manager can set cookies, at least in the preview and debug mode of the administrator, but also outside of it. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

More detailed information is available here.

Legal basis: Art 6 para. 1 lit. a GDPR

 

8.6 Google Video

For a user-friendly experience, we also use the cloud-based storage service Google Photos for videos. This is the domain originally known as Google Video. Since 2021, Google videos has been operated as a video search engine.

The privacy policy can be found here.

9. jQuery

To optimize the loading speed, usability, and indexing of our website, we utilize JavaScript technologies, corresponding program libraries, and Content Delivery Networks (CDNs) provided by external vendors. Specifically, we use the jQuery JavaScript library from the jQuery Foundation, which is distributed through the CDN of StackPath, LLC, located at 1950 North Stemmons Freeway, Suite 1001, Dallas, TX 75207, USA.

By using this service, the transfer of personal data to the United States occurs or cannot be ruled out. Stackpath, LLC has certified itself under the EU-U.S. Data Privacy Framework for the transfer of personal data from the EU to the United States. The European Commission has determined that there is an adequate level of protection for personal data transferred from the EU to a company in the United States certified under the EU-U.S. Data Privacy Framework. Consequently, the data transfer is permissible in accordance with Article 45 of the GDPR. For more details, please refer to section 6.3 of this statement.

When you visit our website, these external providers may receive personal information (such as your IP address) regarding your visit. The processing of this data outside the EU is possible. You can prevent this by installing a JavaScript blocker or disabling JavaScript in your browser. However, disabling or blocking JavaScript may result in limited functionality on websites that use JavaScript technologies.

For more information about data processing by Google, please consult Google’s privacy policy, currently available at the following link. For information regarding jQuery, please refer to: https://openjsf.org/. To learn about StackPath’s privacy practices, please visit here.

10. Data processing for services provided by Facebook

Our website uses Facebook pixel (“pixel”) of the social network Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland) for the analysis, optimization and economic operation of our online offer.

Facebook can use the pixels to determine website visitors as a target group for the display of ads (so-called “Facebook Ads”). Accordingly, we use them to display the Facebook ads placed by us only to those Facebook users who have also shown interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “Custom Audiences”). The aim is to ensure that our Facebook ads correspond to user interest and do not have a harassing effect. On the other hand, we can use pixels to track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).

Your actions are stored in one or more cookies in the process. These cookies allow Facebook to match your user data (such as IP address, user ID) with your Facebook account data. The data that is collected is anonymous and not visible to us and can only be used in the context of advertisements. If you would like to prevent the linking with your Facebook account, you have the option to log out before taking any action.

We have entered into a contract with Facebook Ireland, nevertheless it may happen that Facebook Ireland transfers personal data to Facebook USA.

By using this service, the transfer of personal data to the United States occurs or cannot be ruled out. Meta Platforms, Inc. has certified itself under the EU-U.S. Data Privacy Framework for the transfer of personal data from the EU to the United States. The European Commission has determined that there is an adequate level of protection for personal data transferred from the EU to a company in the United States certified under the EU-U.S. Data Privacy Framework. Consequently, the data transfer is permissible in accordance with Article 45 of the GDPR. For more details, please refer to section 6.3 of this statement.

For more information, please refer to Facebook’s data policy.

For specific information on Facebook Pixels, please refer to link.

Legal basis: Art. 6 para. 1 lit. a GDPR

11. Data processing for services provided by YouTube

We operate a YouTube channel and have embedded YouTube videos on our website, which are hosted on http://www.YouTube.com. The operator of YouTube is YouTube, LLC, located at 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, located at Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube videos in the extended privacy mode. With this setting, YouTube does not store cookies when you access our website. A connection to YouTube servers is only established when you start playback of the embedded videos. YouTube uses cookies for data collection and statistical analysis. YouTube is informed about the pages you visit. If you are logged into YouTube, your data is directly associated with your account. YouTube uses your data for advertising and market research purposes.

By using this service, the transfer of personal data to the United States occurs or cannot be ruled out. Google LLC has certified itself under the EU-U.S. Data Privacy Framework for the transfer of personal data from the EU to the United States. The European Commission has determined that there is an adequate level of protection for personal data transferred from the EU to a company in the United States certified under the EU-U.S. Data Privacy Framework. Consequently, the data transfer is permissible in accordance with Article 45 of the GDPR. For more details, please refer to section 6.3 of this statement.

By consenting to the data processing by YouTube, you agree that YouTube may load additional cookies and services, particularly from Google.

For more information about the privacy practices of “YouTube,” please refer to the provider’s privacy policy.

Legal basis: Art 6 para. 1 lit. a GDPR

12. Your rights

You have the following rights in relation to the personal data concerning you:

  • Right to of access, right to rectification and erasure,
  • Right to restriction of processing
  • Right to object to processing
  • Right to data portability
  • Right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40 – 42, 1030 Vienna, telephone: +43 1 52 152-0, e-mail: dsb@dsb.gv.at

If you are of the opinion that we have violated Austrian or European data protection law when processing your data and thereby infringe your rights, we request that you contact us to clarify any questions you may have.
For this purpose, please direct your enquiries and concerns by e-mail to dsgvo@ventrex.com or contact us using the contact details provided.

13. Changes to this privacy policy

We reserve the right to make changes to our privacy policy from time to time. We will post any changes to the Privacy Policy on this page. Please always refer to the current version of our privacy policy.