Jerich

Privacy
statement

Privacy Statement

Name and address of controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws as well as other statutory data protection provisions is:

 

Jerich Austria GmbH

Feldbacher Straße 19

8200 Gleisdorf

Tel.: +43 3112 4000

E-mail: office@jerich.com

Website: www.jerich.com

 

Contact details of data protection officer

The contact details of the controller's data protection officer are as follows:

 

Tel.: +43 3112 4000

E-mail: privacy@jerich.com

 

General information on data processing

Scope of processing of personal data

We collect and use personal data for our users only to the extent that this is necessary in order to provide a functional website as well as our content and services. As a rule, the collection and use of our users’ personal data only takes place upon the prior consent of the user. An exception applies in cases where it is not possible to obtain consent in advance for practical reasons, and where the processing of the data is permitted by statutory provisions.

 

Legal basis for processing personal data

If and to the extent that we obtain consent from the data subjects to process their personal data, Art. 6 para.1(a) EU General Data Protection Regulation (GDPR) serves as the legal basis for processing personal data.

When the processing of personal data is necessary to fulfil a contract to which the data subject is a party, Art. 6 para.1(b) GDPR serves as the legal basis. This also applies to processing steps that are necessary in order to implement pre-contractual measures.

If and to the extent that personal data must be processed in order to meet a legal obligation of our company, Art. 6 para.1(c) GDPR serves as the legal basis

In the event that vital interests of the data subject or of another natural person necessitate the processing of personal data, Art. 6 para.1(d) GDPR serves as the legal basis.

If data processing is necessary in order to protect a justified interest of our company or of a third party, and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para.1(f) GDPR serves as the legal basis for such processing.

 

Erasure of data and duration of storage

Personal data of the data subjects will be erased or blocked as soon as the reason for storing them no longer applies. Longer storage periods may apply as required by European or national legislation in Union regulations, laws, or other provisions which the controller is subject to. The data will also be erased or blocked once a storage period established by the above-mentioned laws expires, unless the data must continue to be stored for the purpose of concluding or executing a contract.

 

Availability of website and creation of log files

Description and scope of data processing

Each time someone visits our website, our system automatically records data and information from the visitor’s computer system.

The following data is collected:

 

Information about the browser type and version used

The user’s operating system

The user’s Internet service provider

Date and time of access

Websites from which the user’s system accesses our website

Websites accessed by the user’s system via our website

 

Legal basis for data processing

The legal basis for temporary storage of the data is Art. 6 para.1(f) GDPR.

 

Purpose of data processing

We use the data to optimize the website and to ensure the security of our information technology systems. This also constitutes our justified interest in data processing as per Art. 6 para.1(f) GDPR.

 

 

Duration of storage

The data will be deleted when they are no longer necessary for the purposes for which they were collected. In the event that data are collected in order to make the website available, this applies each time the respective session has ended.

 

Objection and removal option

It is absolutely necessary to collect the data and to store these data in log files in order to make the website available. Therefore, the user does not have a right to object to this.

 

Use of Cookies

Description and scope of data processing

Our website uses cookies. Cookies are text files that are saved in the user’s Internet browser and/or by the Internet browser on the user’s computer system. When a user visits a website, a cookie can be stored in the user’s operating system. This cookie contains a unique string of characters that allow the browser to be clearly identified the next time it opens the website. Cookies that are already on the computer can be deleted at any time. You can find instructions for this in your browser settings (under “Help” in the browser menu).

 

We use cookies to make our website more user-friendly. Some elements on our website also require the visiting browser to be identified after changing to another page.

 

The cookies save and transfer the following data:

_ga (Google Analytics)

_gid (Google Analytics)

_gat (Google Analytics)

Spamshield (necessary for the anti-spam measure in contact forms)

 

In addition, our website uses cookies that allow us to analyse the user’s surfing behaviour.

This allows the following data to be transmitted:

 

Source

Language

Operating system

Device (PC, tablet PC, or smartphone)

Browser

The computer's resolution

Search terms entered

Frequency of visits

Use of website features

Duration of visit

 

 

User data that are collected in this way is rendered pseudonymous by technical means. Therefore, it is no longer possible to assign the data to the visiting user. This data are not saved together with any other personal data of the users.

When users visit our website, an info banner informs them about the use of cookies for analytical purposes and refers them to this Privacy Statement. In this context, we also provide also information about how to prevent cookies from being stored by adjusting the browser settings.

 

Legal basis for data processing

The legal basis for processing personal data using cookies is Art. 6 para.1(f) GDPR.

 

Purpose of data processing

The purpose of implementing technically necessary cookies is to make it easier for users to use the websites. Some of the features on our website cannot be offered without the use of cookies. These require that the browser can be recognised after the user goes to a new page on the site.

We use cookies for the following applications:

Adoption of language settings

Remembering search terms

User data collected via technically necessary cookies will not be used to create user profiles.

 

Analysis cookies are used to improve the quality of our website and its content. The analysis cookies tell us how the website is being used, thus allowing us to continuously improve our services. We use analysis cookies for the following purposes:

 

Adoption of language settings

Remembering search terms

 

These purposes also constitute our justified interest in processing personal data as per Art. 6
para.1(f) GDPR.

 

Duration of storage, objection and removal option

Cookies are saved on the user’s computer and transmitted by the computer to our site. Therefore, you as a user also have complete control over the use of cookies. You can adjust your web browser’s settings to disable or limit the transfer of cookies. Previously saved cookies can be deleted any time. This can also be done automatically. If cookies are disabled for our website, you may not be able to use all of the website’s features to their fullest extent.

 

 

Use of Google Analytics and Google AdWords

Description and scope of data processing

In order to improve the efficiency of our website, we use the services of Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called cookies, i.e. text files that are stored on your computer, allowing for the analysis of your use of the website. The information generated by the cookie on your use of this website (including your IP address) is transferred to and stored on a server of Google in the United States. In order to safeguard the users’ interests in protecting their personal data, this is done through anonymisation of the data.

You can prevent the installation of the cookies by adjusting the settings of your browser accordingly; we do point out, however, that you may not be able to make full use of all functions of this website as a result. In addition, you can also prevent the collection of the data created by the cookie and by your use of the website (including your IP address) and the processing of these data by Google by downloading and installing the browser plug-in available via the following link:  tools.google.com/dlpage/gaoptout

This website also uses cookies to contact visitors with online advertisements at a later time via remarketing campaigns in the Google advertising network. In order to place remarketing ads, third-party providers like Google use cookies based on your visit to our website. As the user, you have the option to disable the use of cookies by Google by visiting www.google.com/ads/preferences.

The following data are collected during the registration process:

 

The encrypted ID of the user

Date and time of access

Frequency of visits

Use of website features

The user’s operating system

The user’s Internet service provider

Date and time of access

Websites from which the user’s system accesses our website

Websites accessed by the user’s system via our website

Operating systems used by end devices

Age, gender, languages, interests, country of origin

Legal basis for data processing

The legal basis for processing data is our justified interest in improving efficiency and in financing the website within the meaning of Art. 6 para.1(f) GDPR.

 

Purpose of data processing

Transmitting the anonymised IP address to Google helps us improve the efficiency of our website, create corresponding anonymised analyses of user behaviour, and finance this website.

Duration of storage

The data are deleted as soon as it is no longer needed to achieve the stated purpose.

 

 

 

Rights of the data subject

If personal data relating to you are processed, you are a data subject, and you have the following rights with regard to the controller:

Right of access

You can request confirmation from the controller about whether personal data relating to you are being processed by us.

If such processing is taking place, you can request the following information from the controller:

(1) the purposes for which the personal data are processed;

(2) the categories of personal data which are processed;

(3) the recipients and/or categories of recipients to whom personal data relating to you has been or will be disclosed;

(4) the planned storage period for personal data relating to you or, if no concrete information can be provided in this regard, criteria for determining the storage period;

(5) the existence of the right to request from the controller the rectification or erasure of personal data relating to you, the right to restrict the processing of personal data by the controller, or to object to such processing;

(6) the right to lodge a complaint with a supervisory authority;

(7) all available information regarding the source of the data if the personal data are not obtained from the data subject;

(8) the existence of automated decision-making, including profiling according to Article 22 para. 1 and 4 GDPR and - at least in those cases - meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information about whether personal data relating to you are transmitted to a third country or an international organization. In this context, you can ask to be informed about the appropriate safeguards as per Art. 46 GDPR in connection with this transfer.

 

Right to rectification

You have a right to ask the controller to rectify and/or complete personal data relating to you if your processed data are incorrect or incomplete. The controller must perform such rectifications without delay.

Right to restriction of processing

Under the following conditions, you can request that the processing of personal data relating to you is restricted if:

(1) you contest the accuracy of personal data relating to you for a period of time enabling the controller to verify the accuracy of the personal data;

(2) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

(3) the controller no longer needs the personal data for the purposes of the processing, but you require these for the establishment, exercise or defence of legal claims, or

(4) you have objected to processing pursuant to Article 21 para.1 GDPR pending the verification whether the legitimate grounds of the controller override yours.

Where processing of personal data relating to you has been restricted, such personal data shall - with the exception of storage - only be processed with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

If processing has been restricted according to the above-mentioned requirements, you will be informed by the controller before the restriction is lifted.

Right to erasure

Erasure obligation

You can ask the controller to erase personal data relating to you immediately, and the controller is obliged to erase these data immediately if one of the following reasons applies:

(1) Your personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

(2) You withdraw the consent on which the processing is based according to Art. 6 para.1(a) or Art. 9 para.2(a) GDPR, and where there is no other legal ground for the processing;

(3) You object to the processing pursuant to Article 21 para.1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21 para.2 GDPR.

(4) Your personal data have been unlawfully processed.

(5) Your personal data have to be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject;

(6) Your personal data have been collected in relation to information society services offered in accordance with Article 8 para. 1 GDPR.

Information of third parties

If the controller has published personal data relating to you and is obliged to erase it acc. to Art. 17 para.1 GDPR, the controller will take appropriate (technical) measures – under consideration of the available technology and the implementation costs – to inform the parties responsible for processing personal data relating to you that you, as data subject, have asked them to erase all links to these personal data and any copies or replications of these personal data.

 

Derogations

The right to erasure shall not apply to the extent that processing is necessary

(1) for exercising the right of freedom of expression and information;

(2) for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 (h) and (i), and Art. 9 para.3 GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89 para.1 GDPR, in so far as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

(5) for the establishment, exercise or defence of legal claims.

Right to information

If you have asserted your right to have the data rectified or erased or its processing restricted by the controller, the latter must inform all recipients to whom personal data relating to you was disclosed about this rectification or erasure of data or restriction of its processing, unless this is impossible or would involve an unreasonable effort or cost.

You have the right to be informed about these recipients by the controller.

Right to data portability

You have the right to obtain personal data relating to you that you provided to the controller in a structured, commonly used, and machine-readable format wherever technically possible. In addition, you have the right to provide these data to another controller without hindrance from the controller that was originally provided with the personal data, as long as

(1) the processing is based on a declaration of consent acc. to Art. 6 para.1 (a) GDPR or Art. 9 para. 2 (a) GDPR or on a contract acc. to Art. 6 para. 1 (b) GDPR and

(2) the processing is carried out by automated means.

In exercising this right, you are also entitled to have the relevant personal data transmitted directly from one controller to another controller wherever technically possible Other people’s freedoms and rights may not be compromised as a result.

The right to data portability does not apply to the processing of personal data that is necessary in order to perform a task that is in the public interest or was assigned to the controller in the exercise of public authority.

 

Right to object

For reasons relating to your particular situation, you have the right to object at any time to the processing of personal data relating to you that takes place on the basis of Art. 6 para. 1(e) or (f) GDPR.

The controller shall no longer process personal data relating to you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data relating to you are processed for direct marketing purposes, you shall have the right to object any time to the processing of personal data relating to you for such marketing; this also applies to profiling where it is related to such direct marketing.

Where you object to processing for direct marketing purposes, personal data relating to you shall no longer be processed for these purposes.

In the context of the use of information society services - notwithstanding Directive 2002/58/EC - you may exercise your right to object by automated means using technical specifications.

Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law any time. The withdrawal of consent shall not affect the lawfulness of processing that took place on the basis of that consent before its withdrawal.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of the personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.

 

Jerich International | Feldbacherstrasse 19, A-8200 Gleisdorf | Tel: 0043 3112 4000-0 | office@jerich.com