Data protection declaration in accordance with Art. 13, 14 GDPR – fulfillment of information obligations

All personal designations are always meant to be gender-neutral and serve exclusively to simplify readability.

1 Person responsible for data processing

The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is
Thermo Team Alternativbrennstoffverwertungs GmbH
Hans-Roth-Straße 1
A-8073 Feldkirchen bei Graz
Tel: +43 (0)59800 – 5201
E-Mail: office@thermoteam.at

2 Data processing of persons in the business environment

2.1 Data processing in accordance with Art. 13 GDPR

We process the data that various people provide to us through their own information, for example in the context of an inquiry by e-mail, for the initiation and conclusion of a contract or a business relationship.

2.2 Data processing in accordance with Art. 14 GDPR

In addition, we process data of persons who may be part of a contractual relationship, which we have legitimately received in the context of information from third parties (e.g. managing directors provide us with the data of their employees).

2.3 Persons concerned

We process the following data from interested parties and customers: Company, title, name of contact person and professional contact and address data, contract data.

2.4 Forwarding of data

We only pass on personal data to third parties if this is necessary for the purpose of contract processing and fulfillment or due to legal regulations.

2.5 Storage/deletion of data

The data will be deleted by us as soon as storage is no longer required/permitted or statutory retention obligations, e.g. under VAT law, have expired. If the basis for processing is consent, we will restrict the processing or delete the data if consent is withdrawn – unless there are legal provisions to the contrary.

2.6 Contact by e-mail

When you contact us by e-mail, the data you provide will be stored by us on the basis of your consent in order to answer your questions. We delete the data arising in this context after processing is no longer necessary, or restrict processing if there are statutory retention obligations.

2.7 Publication of the names of authors

We are legally obliged to disclose the names of the authors of image data (photos or videos) each time image data is published. We automatically delete this personal data as soon as we stop using the image data.

2.8 Legal bases

The legal basis for data processing is

• the initiation and fulfillment of the contract pursuant to Art. 6 para. 1 lit. b GDPR.
• legal obligations pursuant to Art. 6 para. 1 lit. c GDPR, (e.g. statutory retention and documentation obligations, publication obligations under copyright law).
• legitimate interests of our company within the meaning of Art. 6 para. 1 lit. f GDPR (e.g. use of software)
• Art. 6 para. 1 lit. a GDPR when obtaining consent (e.g. when processing image data or for advertising purposes).

3 Data processing when contacting us via our website and for applications

3.1 Making contact

If you have asked us to contact you via our web form or if you have sent us a message, we will store the data required to contact you. This is your name, your telephone number and your e-mail address. The data will be deleted by us as soon as storage is no longer necessary or you object to the processing.
Legal basis: Art. 6 para. 1 lit. a GDPR

3.2 Applicants

3.2.1 General

If you send us your application documents, we will process your personal data contained therein as well as your CV and references for the purpose of personnel selection and filling vacancies. In the event of a rejection, we will delete your documents 7 months after sending the rejection to you.
Legal basis: Art. 6 para. 1 lit. b GDPR If you consent to being kept on record by us for the purpose of contacting you at a later date, we will approach you with a separate request for consent. If you explicitly give us this consent, we will store your consent. If there is no further opportunity to fill a position with us within one year, we will delete all your applicant data one year after you have given us your consent.
Legal basis: Art. 6 para.

1 lit. a GDPR

3.2.2 Application platforms

We use online application platforms to recruit employees for our company. People who are interested in working for our company have the opportunity to apply directly on these applicant portals using a form provided by the operator of the applicant platform. Applicants decide for themselves which data they make available in the course of using such an online portal. They also have the option of uploading application documents. Personal data entered and documents uploaded are forwarded to us by the operator of the applicant portal. Both the application platform and we process this data as the controller within the meaning of the GDPR. Please note the data protection declarations of the respective portal operators. Point 3.2.1 applies to us in this context.
Legal basis: Art. 6 para. 1 lit. a GDPR

4 Data processing when visiting our website

4.1 Informational use of the website

When using the website for information purposes only, we only collect the personal data that your browser transmits to our server (server log files). If you wish to view our website, we collect at most the data that is technically necessary for us to display our website to you and to ensure stability and security: – IP address – date and time of the request – time zone difference to Coordinated Universal Time (UTC) – content of the request (specific page) – access status/HTTP status code – website from which the request comes – browser – operating system and its interface – language and version of the browser software. This data is not merged with personal data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use and – if there has been a hacking attack – to pass the data on to the law enforcement authorities. The data will not be passed on to third parties beyond this.
Legal basis: Art. 6 para. 1 lit. f GDPR

4.2 Cookies

Cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk assigned to the browser you are using and through which certain information flows to the place that sets the cookie (in this case by us or third-party providers). Cookies cannot execute programs or transmit viruses to your computer.
We only use technical cookies that serve to ensure the operation of the website.
Legal basis: Art. 6 para. 1 lit. f GDPR

4.3 Data processing in the USA

It cannot be ruled out that personal data will be transferred to the USA when you visit our website. If this is the case, we will point this out separately in this privacy policy.
The GDPR requires so-called suitable guarantees in accordance with Art. 46 GDPR for a data transfer to a third country or to an international organization. Such guarantees do not exist for the USA.
Possible risks that cannot currently be ruled out for you as the data subject in connection with the aforementioned information are in particular

• Your personal data could possibly be passed on to other third parties (e.g. US authorities) by the respective service provider beyond the actual purpose of order fulfillment.
• You may not be able to assert or enforce your rights to information against the respective service provider in the long term.
• There may be a higher probability that incorrect data processing may occur because the technical organizational measures for the protection of personal data do not fully meet the requirements of the GDPR in terms of quantity and quality.

With your consent to the processing of (advertising and marketing) cookies, you explicitly consent to the transfer of data to the USA. You can remove cookies stored on your PC yourself at any time by deleting the temporary internet files.
Legal basis: Art. 6 para. 1 lit. a GDPR

5 Data processing when using pair networks (hosting of the website)

Our website is hosted by Pair Networks, an external service provider whose address is Pair Networks, Inc., 2403 Sidney Street, Suite 210, Pittsburgh, Pennsylvania 15203 in the USA.
By using this service, a transfer of personal data to the USA takes place or cannot be ruled out! – For more details, see 4.3 of this declaration.
The personal data collected on this website is stored on the hoster’s servers. These are mainly IP addresses, meta and communication data, website accesses and other data generated via a website.
Our hoster will only process your data to the extent necessary to fulfill its service obligations and follow our instructions with regard to this data.
Information on Pair Networks’ privacy policy can be found at the following link: https://www.pair.com/data-privacy-transparency-statement/
Legal basis: Art. 6 para. 1 lit. a GDPR. 1 lit. a GDPR

6 Your rights

You have the following rights vis-à-vis us with regard to your personal data:

• Right to information, correction and deletion
• Right to restriction of processing
• Right to object to the processing
• Right to data portability
• Right to lodge a complaint with the Austrian Data Protection Authority Barichgasse 40 – 42, 1030 Vienna, phone: +43 1 52 152-0 e-mail: dsb@dsb.gv.at

If you are of the opinion that we have violated Austrian or European data protection law in the processing of your data and thereby infringed your rights, please contact us in order to clarify any questions you may have.
Please send your inquiries and concerns by e-mail to datenschutz@thermoteam.at or contact us using the contact details provided.

7 Changes to this privacy policy

We reserve the right to make changes to our privacy policy from time to time. We will publish any changes to the privacy policy on this page. Please note the current version of our privacy policy in this regard.