Privacy policy

The controller responsible for data processing within the meaning of the GDPR is:

DAS Kraftwerk GmbH Ferdinand Graf von Zeppelin Str. 18 A-2700 Wiener Neustadt, Austria Tel: +43 2622 35035 Mail: office@daskraftwerk.biz

2.1 Legal Bases for Processing

We process your personal data on the basis of the following legal bases:

• Consent (Art. 6(1)(a) GDPR): Where you have given us your consent for a specific processing purpose.
• Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR): Where processing is necessary for the performance of a contract with you or for the implementation of measures taken at your request.
• Legal obligation (Art. 6(1)(c) GDPR): Where we are subject to processing for compliance with a legal obligation (e.g. retention obligations under tax law).
• Legitimate interest (Art. 6(1)(f) GDPR): Where processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, and your interests, fundamental rights and fundamental freedoms do not override those interests.

2.2 Storage Period

Your personal data will be stored by us until the purpose for the data processing ceases to apply. If you assert a legitimate request for erasure or withdraw your consent, your data will be erased unless we have other legally permissible grounds for storing it (e.g. statutory retention periods). In the latter case, erasure takes place once those grounds cease to exist.

2.3 Data Disclosure and Transfers to Third Countries

Among other things, we use tools from companies based in the USA or in other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred to and processed in these third countries. We point out that no level of data protection comparable to that in the EU can be guaranteed in these countries. For example, US authorities (e.g. intelligence services) may access your data without effective legal remedies being available to you against such access. We base any such data transfer primarily on your express consent (Art. 49(1)(a) GDPR) or on standard contractual clauses of the EU Commission, which are intended to ensure an adequate level of data protection.

You have the following rights with regard to your data processed by us:

• Right of access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us.
• Right to rectification (Art. 16 GDPR): You may request the rectification of inaccurate data or the completion of incomplete data.
• Right to erasure (“right to be forgotten”, Art. 17 GDPR): You may, under certain circumstances, request the erasure of your data.
• Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing.
• Right to data portability (Art. 20 GDPR): You may request to receive your data in a structured, commonly used and machine-readable format and to have it transmitted to another controller.
• Right to object (Art. 21 GDPR): Where processing is based on our legitimate interest (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation. You may object to direct marketing at any time without stating reasons.
• Withdrawal of consent (Art. 7(3) GDPR): You may withdraw any consent you have given at any time with effect for the future. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.
• Right to lodge a complaint (Art. 77 GDPR): If you are of the opinion that the processing of your data violates data protection law, you have the right to lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.

To exercise your rights, please use the contact details stated under Section 1.

4.1 Visiting the Website (Server Log Files)

When you visit our website, the provider automatically collects and stores information in server log files that your browser transmits. This information comprises: browser type/version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. This processing is carried out on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in the technically error-free presentation, security and optimisation of our website. This data is not merged with other data sources.

4.2 Cookies and Similar Technologies

Our website uses cookies. These are small data packets that are stored on your device.

• Technically necessary cookies: These are required for the operation of the website and the provision of basic functions. They are stored on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in a functioning website.
• Analytics, marketing and other cookies: All other cookies (e.g. for analytics, advertising, personalisation) and access to information on your device (e.g. via device fingerprinting) take place exclusively on the basis of your express consent (Art. 6(1)(a) GDPR in conjunction with § 165 (3) TKG 2021 (Austrian Telecommunications Act)). You may withdraw this consent at any time.

4.3 Contacting Us (Contact Form, E-Mail, Telephone)

If you contact us, your enquiry and the personal data resulting from it (name, contact details, request) will be stored by us for the purpose of processing your request. Processing is carried out for the performance of a contract or for the implementation of pre-contractual measures (Art. 6(1)(b) GDPR), insofar as your enquiry relates to this. In all other cases, we base the processing on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), where this has been requested.

4.4 Registration on the Website

If you register on our website, we process the data you enter for the purpose of implementing the user relationship and, where applicable, for initiating further contracts (Art. 6(1)(b) GDPR).

4.5 Analytics Tools and Advertising (e.g. Google Analytics, Hotjar, Google Ads, Meta Pixel)

We use various tools to analyse user behaviour and to serve advertising. These services process data such as your IP address, usage data (page views, clicks), location data and other information. The use of these services and the associated data collection take place exclusively on the basis of your consent (Art. 6(1)(a) GDPR in conjunction with § 165 (3) TKG 2021 (Austrian Telecommunications Act)). For certain services (e.g. Meta Pixel, Facebook Conversion API), we are jointly responsible with the provider (Meta Platforms Ireland Limited) for the collection and transmission of the data (Art. 26 GDPR). The subsequent processing by the provider lies outside our responsibility. You may exercise your data subject rights directly with the provider or with us; we will forward your request where applicable.

4.6 Social Media (Facebook, Instagram, Twitter etc.)

We embed elements of social networks on our website.

• Safe-sharing tools / links: Where we use privacy-compliant buttons or plain links, a connection to the respective network is only established when you actively click on it.
• Active plugins: With active plugins, a connection to the network's server is established as soon as the page loads and data (e.g. your IP address) is transmitted. The use of such plugins takes place exclusively on the basis of your consent (Art. 6(1)(a) GDPR in conjunction with § 165 (3) TKG 2021 (Austrian Telecommunications Act)). The embedding serves our legitimate interest in comprehensive visibility on social media (Art. 6(1)(f) GDPR).

4.7 Audio and Video Conferences (e.g. Zoom, Microsoft Teams)

We use conferencing tools for communication with customers and partners. In doing so, metadata (participants, duration etc.) as well as content data (chat, shared files) are processed. Processing is carried out for the performance of a contract (Art. 6(1)(b) GDPR) or on the basis of our legitimate interest in efficient communication (Art. 6(1)(f) GDPR).

4.8 Job Applications

If you apply to us, we process the data you submit (contact details, CV, references etc.) for the purpose of deciding on the establishment of an employment relationship. The legal basis for this is the initiation of a contractual relationship (Art. 6(1)(b) GDPR). If we are unable to make you an offer, we retain your documents on the basis of our legitimate interest (Art. 6(1)(f) GDPR) for up to seven months after conclusion of the application procedure for evidentiary purposes and delete them thereafter. Longer retention (e.g. keeping your application on file) takes place only with your express consent (Art. 6(1)(a) GDPR).

We take appropriate technical and organisational security measures to protect your data against unauthorised access and misuse. For example, our website uses SSL/TLS encryption for the secure transmission of data.

The further development of our website or changes in legal requirements may make it necessary to amend this Privacy Policy. The current version can be accessed and printed out on our website at any time.