Skip to main content
Search
Toggle Navigation
voestalpine Railway Systems

Suggested questions

    i Answers are AI-generated from voestalpine Railway Systems own content.

    Answers are AI-generated from voestalpine Railway Systems own content.

    Data Privacy / Data Protection

    The protection of your personal data is very important to voestalpine Railway Systems GmbH, Kerpelystraße 199, 8700 Leoben, Austria (hereinafter referred to as "we", "us"). We observe the applicable legal regulations regarding the protection, lawful handling and confidentiality of personal data as well as data security, in particular the European General Data Protection Regulation ("GDPR") and the applicable national data protection provisions.

    This Privacy Notice informs you about the nature, scope and purposes of the collection and use of your personal data by us in connection with the visit and use of our website.

    Furthermore, separate privacy notices are available for individual subject areas:

    Who is responsible for data processing?

    The controller responsible for the operation of this website is:

    voestalpine Railway Systems GmbH

    Kerpelystraße 199, 

    8700 Leoben, Austria 

    E-mail address: dataprotection.vae@voestalpine.com

     

    What is personal data?

    Personal data ("data") means information relating to an identified or identifiable natural person ("data subject"). This includes, for example, a name, email address, date of birth, contact details or IP address.

    Processing of Data in Connection with the Use of Our Website

    • Purpose: You can visit our website without actively providing information about yourself. However, if you visit our website, your end device transmits data to our web servers. These data are processed by our web servers and automatically stored in so-called "log files". The processing of your data is necessary in order to make our website available to you. The storage in log files is necessary in order to ensure the security and functionality of our website.

      Categories of Data: IT log and identification data (IP address, HTTP header fields, browser, operating system, website from which you were redirected to our website (referrer), date and time of access, URL accessed)

      Legal Basis:

      • Art. 6 (1) (f) GDPR – Legitimate interests: Provision of a secure, functional and user-friendly website

      Retention Period: The data listed above are stored for 90 days and deleted after the expiry of this period, unless such data continue to be required in order to subsequently investigate a security incident (e.g. a hacking attack) on our website, as well as for evidentiary purposes.

      Categories of Recipients: Processors (IT service providers); in the event of a security incident, your data will also be transmitted, where required in the individual case, to the police, legal representatives, courts and administrative authorities.

    • Please refer to the Cookie Banner for the data protection-related information on the deployment and use of cookies and other services. You can access the Cookie Banner at any time via "My Privacy Settings" in the footer of this website. Therein, we inform you, among other things, about the nature, scope, purposes, categories of processed data and recipients, legal bases, and retention periods of the cookies used as well as of the other services.

    • Purpose: You may contact us regarding enquiries about our company, our products and services via the contact form on this website, as well as by e-mail, telephone or fax. In these cases, we process your data for the purpose of handling your enquiry.

      Categories of Data: Personal master data (e.g. salutation, title, first name and surname); contact data (e.g. address, telephone number, e-mail address); correspondence data (e.g. free text field on the website, e-mail correspondence); documentation of appointments and agreements (e.g. in the course of a telephone enquiry) and, where applicable, those data which you provide to us by uploading or attaching documents.

      Legal Basis:

      • Art. 6 (1) (f) GDPR – Legitimate interests: Contact with customers and interested parties for the purpose of handling their enquiries.

      Retention Period: We store your data until the purpose has been fulfilled. After fulfilment of the purpose, your data will only continue to be stored if there is a statutory retention obligation or if another substantial reason for further retention can be stated. This may be the case, for example, if we require your data for the establishment, exercise, defence, but also the rejection of legal claims. The specific retention periods are determined in particular by the applicable statutory retention periods under commercial and tax law.

      Categories of Recipients: Processors (IT service providers). In order to achieve the intended purposes, it may also be necessary in individual cases for us to forward your data to other voestalpine Group companies (www.voestalpine.com/locations) in order to ensure the prompt handling of your enquiry.

    • Purpose: Information about our products and events for our business partners and interested parties.

      Categories of Data: Contact data (e-mail address)

      Legal Basis:

      Art. 6 (1) (a) GDPR – Consent: You are neither contractually nor legally obliged to provide us with your data required for the subscription to a newsletter. However, if you do not do so, we will not be able to send you a newsletter. You may withdraw your consent at any time (e.g. by e-mail to the e-mail address of the Data Protection Organization stated at the end of this Privacy Notice or by clicking the unsubscribe link directly in the footer of the newsletter sent to you).

      Retention Period: We store your data for the purpose of sending newsletters for as long as you do not withdraw your consent to receive the newsletter.

      Categories of Recipients: Processors (IT service providers).

    Transfers of Data to Third Countries
     
    Due to the complexity of modern data processing operations, we engage processors for the processing of your data. Wherever possible, we only use processors that are established within the European Union or within the European Economic Area and are therefore subject to the GDPR.
     
    However, in exceptional cases, it may occur that we transfer data to third countries (i.e. outside the European Union or the European Economic Area) and have them processed there. If we transfer data to third countries, such transfer shall take place exclusively in compliance with the legally regulated admissibility requirements (in particular the existence of an adequacy decision of the European Commission, the conclusion of Standard Contractual Clauses including, where required, the additional agreement of further technical and organizational as well as contractual measures). If your data are transferred to a third country, you have the possibility to request a copy of the suitable or appropriate safeguards from our Data Protection Organization.
    Rights of Data Subjects and Right to Lodge a Complaint
    • Pursuant to Art. 15 GDPR, you have the right to request confirmation as to whether personal data are being processed by the controller and the right of access to such data.
    • Pursuant to Art. 16 GDPR, you have the right to request without undue delay the rectification of inaccurate data concerning you and/or the completion of incomplete personal data.
    • Pursuant to Art. 17 GDPR, you have the right to the erasure of your personal data.
    • Pursuant to Art. 18 GDPR, you have the right to restriction of processing.
    • Pursuant to Art. 20 GDPR, you have the right to data portability.
    • Pursuant to Art. 21 GDPR, you have the right to object to the processing of your data.
    • If the processing of your data is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of the consent before its withdrawal.
    • Ultimately, you have the possibility to lodge a complaint with the supervisory authority responsible for you.
    Contact Details
    For questions regarding data protection as well as for the exercise of your aforementioned rights, you can contact our Data Protection Organization by e-mail at dataprotection.vae@voestalpine.com or by post at voestalpine Railway Systems GmbH, Kerpelystraße 199, 8700 Leoben, Austria, stating the subject "Data Protection".
     
    Parts of this Privacy Notice may be amended or updated by us for technical or legal reasons without prior notification to you. Please review the current Privacy Notice in each case in order to stay up to date regarding any changes or updates.