Privacy policy

We are committed to protecting the privacy of users of our website. This Privacy Policy therefore sets out in detail what personal data are processed when you use our website and how we (= the Controller) protect that data. Data is processed on the basis of the applicable statutory provisions.

Controller for this website:
Zellstoff Pöls AG, Dr. Luigi-Angeli-Straße 9, 8761 Pöls
Representative of the Controller: Hans-Georg Pranckh, datenschutz@zellstoff-poels.at, +43 3579 8181-0

1.
When you visit our website or web shop, we temporarily save and process the following (log) data:

• IP address of the accessing computer
• Date and time of access
• Name and URL of the file accessed
• Volume of data transferred
• Notification of whether access was successful (HTTP status code)
• Identifiers of the browser and operating system used

 
The data recorded are stored for three days. The legal basis for the storage of these data is our legitimate interest, as they serve in particular to ensure the smooth operation of the server and system security (Art. 6 (1)(f) GDPR). IP addresses are only evaluated in the event of attacks on our network infrastructure.
 
2.
We process personal data that we receive from you in the context of initiating a business transaction via a form or an e-mail. This is the case, for example, if you order samples on our website or if you want to download data sheets or certificates. This personal data includes: name, company, e-mail address, telephone number, company affiliation. Which (further) data is collected in detail can be seen from the respective input forms on our website.
 
If a contractual relationship results from the business initiation, the legal basis for the storage of this data is the fulfillment of the contract with you (Art. 6 para. 1 lit. b GDPR). In this case, your relevant data will generally be stored for the duration of the contractual relationship (unless some of it can be deleted earlier because it is no longer required). The storage period of the collected data is generally 3 years after termination of the contractual relationship (general limitation period of the purchase price claim) or 7 years if the data is subject to the tax retention obligation of the BAO or the UGB.
 
If no contractual relationship results from the business initiation, the legal basis for the storage of this data is our legitimate interest, as this data processing is necessary for communication with you (Art. 6 para. 1 lit. f GDPR). In this case, the data will be stored by us until you request deletion.
 
3.
If you create a supplier profile on our website, you are asked to enter personal data in an online form. We require both the information or data you enter and the data subsequently provided as part of management of the supplier relationship, including but not limited to your name, e-mail address, telephone number and bank details, for the purposes of handling the contract with you (Art 6 para 1 lit b GDPR). In this case, your relevant data will generally be stored for the duration of the contractual relationship (unless some of it is deleted earlier because it is no longer required). The storage period of the collected data is generally 3 years after termination of the contractual relationship (general limitation period of the purchase price claim) or 7 years if the data is subject to the tax retention obligation of the BAO or the UGB.

1. Your personal data are not associated or compared with other data; they are used only for the purposes of managing the supplier relationship. We shall not use your data for marketing or market or opinion research purposes without your explicit consent.
2. Use of the supplier portal is not possible without provision of the data. Suppliers who do not provide said data cannot take part in Zellstoff Pöls AG tendering processes.

We shall not disclose data that are saved following access to our website to third parties without your consent unless we are required to do so by law or by a court order, or disclosure is necessary for the purposes of investigation or criminal prosecution in the event of attacks on our Internet infrastructure. Data shall not be disclosed for any other non-commercial purposes or for commercial ends.
 
1. Processor
We do not carry out all processing of the log files and cookies saved ourselves; we also use the services of reliable, carefully selected partners (= Processors), namely Outline Pictures e.U. Our partners also ensure the security of your data with suitable technical and organisational measures that correspond to the state of the art. Our partners are not authorised to use the personal data provided to them for anything but the specified purposes.
 
2. Consent to the use of cookies and the transfer of your data to the USA
Our website uses cookies that are required for the basic functions of the website and that cannot be deactivated (technically necessary cookies). These cookies are used exclusively by us ("first party cookies"). Technically necessary cookies store, for example, the cookie selection you have made in the cookie banner. The legal basis for the processing of this data is our legitimate interest, as it serves in particular the proper operation of the website and system security (Art. 6 para. 1 lit. f GDPR). The storage period of the collected data is 1 year.
 
All cookies that are not absolutely necessary for the operation of this website are only set after your explicit consent. Some of these cookies ("functional cookies", "statistics cookies" or "marketing cookies"), for which your consent is required, are operated by companies that process data in the USA (see below), such as Google. The legal basis for this processing of your data is your consent, which you can revoke at any time (Art. 6 para. 1 lit. b GDPR). The storage period of the data varies depending on the provider and is described in more detail in our cookie policy.
 
By agreeing to the use of these cookies, you also expressly consent to the transmission of your data to the USA (Article 49 (1) (a) GDPR).
 
There is no adequacy decision by the EU Commission for the USA and despite extensive measures, we cannot guarantee the high level of EU data protection in the USA. Your transmitted data may not be deleted or further processed for any purpose. US authorities may have disproportionate access to your data and you may not be able to effectively enforce your rights in the US. You can revoke your consent at any time with effect for the future. You can read more about the cookies used on this website in our cookie policy.
 
3. Google
In order to display YouTube videos, Google Charts, Google ReCAPTCHA and Google Maps, personal data is transmitted to Google Inc., located in the USA:

• if you agree to functional cookies

 
For the statistical, anonymous evaluation of user behavior on our website, personal data is transmitted to Google Inc., located in the USA:

• if you agree to statistical cookies

 
In order to be able to show you personalized advertising tailored to you, personal data is transmitted to Google Inc., located in the USA:

• if you agree to marketing cookies

 
The legal basis for this processing of your data is your consent, which you can revoke at any time (Art. 6 para. 1 lit. b GDPR), taking into account the transfer of data to an unsafe third country. The storage period of the data collected varies depending on the Google service and cookie. You can find a detailed list in our cookie policy. Further information about data processing by Google can be found in Google's Privacy Policy & Terms of Use.
 
4. Wufoo
To order paper samples, certificates or data sheets via a form on our website, data is transmitted to Wufoo, a brand of Momentive Inc. in the USA

• if you agree to functional cookies

 
The legal basis for this processing of your data is your consent, which you can revoke at any time (Art. 6 para. 1 lit. b GDPR), taking into account the transfer of data to an unsafe third country. The storage period of the collected data is 1 year. Further information about data processing by Wufoo can be found in Wufoo's Privacy Basics or in the Cookie Notice.
 
5. Newsletter
If you give your explicit consent to receiving newsletters, we can send you an electronic newsletter with commercial content for marketing purposes. The data provided when a user registers for the newsletter are only used for the purpose of newsletter distribution. The data collected from you for this purpose are only saved by us and our partners for the period for which you receive a newsletter and provided you have not notified us of the withdrawal of your consent to the receipt of newsletters.
 
In some cases, our newsletter is sent out not by us but by our partner (= Processor), Outline Pictures e.U. Our partner also ensures the security of your data with suitable technical and organisational measures that correspond to the state of the art. Our partner is not authorised to use the personal data provided to it for anything but the specified purposes.
 
For the distribution of our newsletter, we or our Processor Outline Pictures e.U use(s) the provider MailChimp (hereinafter: "MailChimp"), a brand of The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. If you have registered for the newsletter, we use it to keep you up to date with our business, our products and the latest offers. The data saved during registration, i.e. first name, surname, company, e-mail address and in some cases your IP address, and the date of newsletter registration are sent to MailChimp and saved by MailChimp. Following registration, MailChimp sends you an e-mail to confirm registration. You can find more information on data protection at MailChimp here: http://mailchimp.com/legal/privacy/. You can unsubscribe from the newsletter at any time by clicking on the unsubscribe link at the end of each newsletter or by e-mailing the competent Controller named at the start of this Privacy Policy.
 
The legal basis for this processing of your data is your consent, which you can revoke at any time (Art. 6 para. 1 lit. b GDPR). Your data will be stored permanently on Mailchimp's servers and will only be deleted if you request this.
 
MailChimp is certified under the EU-U.S. Data Privacy Framework and therefore undertakes to comply with EU data protection regulations. Furthermore, a "Data Processing Agreement" has been concluded with MailChimp. If you would like to receive a copy of the guarantees contained therein, you are welcome to contact us or our representative at any time.
 
Providing data for receipt of the newsletter is neither a statutory nor a contractual requirement and is not necessary for the conclusion of a contract. You therefore have no obligation to provide said data or to agree to receive a newsletter. The sole legal basis for receipt of a newsletter is explicit consent (Art 6 (1)(a) GDPR). No newsletter shall be sent if consent is not given.
 
6. LinkedIn
We use the conversion tracking tool LinkedIn Insight Tag on our website. The service provider is the American company LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. LinkedIn Ireland Unlimited (Wilton Place, Dublin 2, Ireland) is responsible for data protection aspects in the European Economic Area (EEA), the EU and Switzerland.
 
By embedding the tracking tool, data can be sent to LinkedIn, stored and processed there. If you click on one of our LinkedIn ads, a cookie may be stored on your computer (usually in the browser) or mobile device. In principle, LinkedIn processes data using a combination of cookies and server-side functions. As soon as you complete an action on the website, LinkedIn recognizes the cookie and saves your action as a so-called conversion. As long as you are browsing our website, we and LinkedIn recognize that you have found us via our LinkedIn ad. The cookie is read and sent back to LinkedIn with the conversion data. It is also possible that other cookies are used to measure conversions.
 
In addition to your IP address, the URL, referrer URL, device and browser properties and the timestamp are also stored. The IP address is considered personal data and is shortened or hashed by LinkedIn.
 
The legal basis for this processing of your data is your consent, which you can revoke at any time (Art. 6 para. 1 lit. b GDPR). Your data will be stored permanently on LinkedIn's servers and will only be deleted if you request this.

The personal data will be stored for as long as

• until they are no longer necessary for the purposes for which they were collected or otherwise processed;
• in the case of processing based on a declaration of consent, until the data subject revokes their consent and there is no other legal basis for further processing (Article 17 (1) (b) GDPR); in the event of withdrawal of consent, the lawfulness of the processing of your personal data up to the time of withdrawal will not be affected by the withdrawal;
• but in any case as long as the storage is necessary to fulfill a legal obligation (e.g. statutory storage obligations) or to assert, exercise or defend legal claims of the company.

 
No automated individual decisions and no profiling take place.

If the provision of your data is based on the legal basis of your consent, this is neither legally nor contractually required and is also not necessary for the conclusion of a contract. There is therefore no obligation to provide this data.
 
We would also like to draw your attention to the following rights to which you are entitled as a data subject under the GDPR with regard to your personal data:

• The right to information from the Controller on the personal data held concerning you pursuant to Art 15 GDPR
• The right to rectification pursuant to Art 16 GDPR
• The right to erasure pursuant to Art 17 GDPR
• The right to restriction of processing pursuant to Art 18 GDPR
• The right to data portability pursuant to Art 20 GDPR
• The right to object to processing pursuant to Art 21 GDPR

Furthermore, you also have the right to lodge a complaint with the data protection authority (Art 77 GDPR, Section 24 Data Protection Act). Please also see the website of the data protection authority, which can be accessed here: https://www.dsb.gv.at/

Our website may contain links to other providers and links to our social media pages. This Privacy Policy applies to websites and services that belong to us and are operated by us. We have no control over external pages or content to which our services provide links. We are not responsible for ensuring that such providers or the operators of the social media platforms comply with statutory data protection provisions.

We employ technical and organisational measures to safeguard the personal data concerning you that are processed by us from accidental and deliberate manipulation, loss, destruction and access by unauthorised persons. We are continuously improving our security measures in accordance with technological developments.

This Privacy Policy applies with immediate effect and supersedes all previous privacy policies. We reserve the right to amend this Privacy Policy if reasonable or necessary.