The protection of your personal data is very important to voestalpine HR Services GmbH, Stahlstraße 30, 4031 Linz (hereinafter "we", "us"). We comply with the applicable legal provisions for the protection, lawful handling, and confidentiality of personal data as well as data security, in particular the European General Data Protection Regulation ("GDPR") and the applicable national data protection regulations.
This privacy policy informs you about the type, scope, and purposes of the collection and use of your personal data by us in connection with your visit and use of our website www.voestalpine.com/hr-services.
In addition, you will find separate privacy policies for individual topics.
- General Privacy Policy for Business Partners
- General Privacy Policy for Capital Market Communication
- General Privacy Policy for Participants of Events
- General Privacy Policy for Participants of the Annual General Meeting of voestalpine AG
- General Privacy Policy for Social Media Appearances of voestalpine AG on Facebook and Instagram
1. Who is responsible for data processing and whom can you contact?
Responsible:
voestalpine HR Services GmbH
Stahlstraße 30
4031 Linz, Österreich
Email address: hr-services@voestalpine.com
Email address of the data protection officer / data protection manager: hr-services-DataProtection@voestalpine.com
Website: www.voestalpine.com/hr-services
Link to impressum: https://www.voestalpine.com/hr-services/de/impressum/
2. What are personal data?
Personal data ("data") are information relating to an identified or identifiable natural person ("data subject"). This includes, for example, the name, email address, or IP address.
3. Processing of data in connection with the use of our website
Your data will be processed for the following purposes:
3.1 Provision and protection of the website
Purpose: You can visit our website without providing any personal information. When you use our website, your device sends data to our web servers. This data is processed by our web servers and automatically stored in so-called "log files". The processing of your data is necessary to provide you with our website. Storage in log files is necessary to ensure the security and functionality of our website.
The temporary (automated) storage of the data is necessary for the course of a website visit in order to enable the delivery of the website. The storage and processing of the personal data also takes place to maintain the compatibility of our website for as many visitors as possible and to prevent misuse and eliminate disruptions. For this purpose, it is necessary to log the technical data of the requesting computer in order to be able to react as early as possible to display errors, attacks on our IT systems, and/or functional faults of our website. In addition, the data helps us optimize the website and generally ensure the security of our information technology systems.
Data categories: IT protocol and identification data (IP address, HTTP header fields, browser type, previously visited website (referrer), date and time of access, other traffic data, such as device information, amount of data sent, etc.)
Legal basis: The provision of a secure, functional, and user-friendly website is our legitimate business interest. Therefore, the processing is carried out in accordance with Article 6(1)(f) GDPR.
Storage duration: The aforementioned data will be stored for 8 months and deleted after this period unless this data is still needed to investigate a security incident (e.g., hacking attack) on our website.
Recipient categories: Processors (IT service providers); in the event of a security incident, possibly also: law enforcement authorities, legal representatives, courts, and administrative authorities.
3.2 Use of cookies and Google Analytics
Please refer to the Cookie Banner for the privacy policy on the use of cookies and Google Analytics. There we inform you, among other things, about the type, scope, purposes, data categories, legal bases, storage duration, and recipient categories of the cookies used.
4. Contact
Purpose:
You can contact us by email or telephone if you have inquiries about our company, products, or services. In this case, we process your data for the purpose of handling your request.
Categories of data:
Basic personal data (e.g., salutation, title, first and last name); contact details (e.g., address, telephone number, email address); correspondence data (e.g., content of the inquiry); IT log and identification data (e.g., date and time of the request), as well as any data you provide to us by uploading or attaching documents.
Legal basis:
The processing of inquiries is carried out either for the performance of (pre-)contractual measures (Art. 6(1)(b) GDPR) or based on our legitimate business interest (Art. 6(1)(f) GDPR), namely in maintaining communication with our customers and website users.
Storage period:
We store your data for as long as is necessary to process your inquiry. Once your request has been fully completed, your data will be deleted in compliance with statutory retention periods, unless further storage is required for the potential establishment, exercise, defense, or enforcement of legal claims in administrative or judicial proceedings.
Categories of recipients:
Processors (IT service providers). In order to achieve the intended purposes, it may also be necessary in some cases to forward your data to certain affiliated group companies (www.voestalpine.com/locations) to ensure the prompt handling of your inquiry.
5. Data subject rights and complaint options
According to Article 15 GDPR, you have the right to request confirmation as to whether data is being processed by the controller and the right to access this data.
According to Article 16 GDPR, you have the right to request the rectification of inaccurate data concerning you and/or the completion of incomplete data without delay.
According to Article 17 GDPR, you have the right to request the deletion of your data.
According to Article 18 GDPR, you have the right to request the restriction of processing.
According to Article 20 GDPR, you have the right to data portability.
According to Article 21 GDPR, you have the right to object to data processing.
Finally, you have the option to lodge a complaint with the supervisory authority responsible for you.
If the processing of your data is based on your consent, you have the right to revoke your consent at any time without affecting the lawfulness of the processing carried out based on the consent until the revocation.
6. Contact details
For questions about data protection and to exercise your aforementioned rights, you can reach our data protection organization at hr-services-DataProtection@voestalpine.com or by mail at the voestalpine HR Services GmbH, Stahlstraße 30, Postfach 3, 4031 Linz, Austria.
This privacy policy is updated from time to time.