Protecting the security and privacy of your personal data is very important to voestalpine Railway Systems GmbH, Kerpelystraße 199, 8700 Leoben, Austria (hereinafter “we” and “us”) and its subsidiaries. We observe the applicable legal regulations for the protection, proper handling, and confidentiality of personal data, especially the Austrian Data Protection Act (DSG), the EU General Data Protection Regulation (GDPR) and the Austrian Telecommunications Act (TKG).
This data protection policy explains the nature, scope, and purpose of us collecting and using your personal data when you visit and use our website www.voestalpine.com/railway-systems ("website").
There is also a separate for business partners of voestalpine Railway Systems GmbH.
Who is responsible for data processing and whom can you contact?
The controller (within the meaning of the General Data Protection Regulation) for the processing of your personal data in connection with the use of this Internet website is voestalpine Railway Systems GmbH.
You can reach us as follows:
voestalpine Railway Systems GmbH
Kerpelystraße 199, 8700 Leoben, Austria
Personal data is any information relating to the data subject (natural person), who can be identified, directly or indirectly (e.g. name, email address, or IP address).
You can visit our website without providing personal information. When you visit and use our website, we may process the following data:
- Usage data (e.g. web pages visited, interest in the content, access times, geotags);
- Meta/communications data (e.g. equipment information, IP addresses (anonymized));
- An anonymous cookie ID that does not make it possible to infer your IP address.
When you contact us by email, phone, or fax, we will process the personal data you submit (email, name, phone number, fax number, your inquiry as well as all associated documents) for the purpose of handling your inquiry.
When visiting our website for the first time, visitors can decide whether to accept all cookies or to assign individual settings for each cookie. You can also alter these settings at a later date here.
In addition, you can switch web-tracking on and off at http://www.youronlinechoices.eu for the providers listed there.
Google Analytics (with the anonymization function)
This website uses Google Analytics (with the anonymization function), a web analysis service of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4.
Google Analytics is a web analysis service. Web analysis is the acquisition, collection, and evaluation of data regarding the behavior of visitors to Internet websites. For example, a web analysis service collects data on the website from which a data subject came to another website (the so-called referrer), which subpages of the website were accessed or how often and for what length of time a subpage was viewed. Web analysis is primarily used to optimize a website and for a cost/benefit analysis of Internet advertising.
We use the suffix “_gat._anonymizeIp” for web analysis by Google Analytics. The IP address of the data subject’s Internet connection is truncated and anonymized by Google using this suffix when our Internet websites are accessed from a Member State of the European Union or some other signatory state of the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyze visitor streams to our Internet site. Google uses the data and information obtained, among other things, to evaluate the use of our Internet site in order to compile online reports for us, showing the activity on our Internet sites, and to provide additional services in connection with the use of our Internet sites.
Google Analytics places a cookie in the data subject’s information technology system. Cookies have already been explained above. Placing the cookie enables Google to analyze the use of our Internet site. When one of the pages of this Internet site – which is operated by us and into which a Google Analytics component has been integrated – is accessed, the respective Google Analytics component automatically causes the Internet browser in the data subject’s information technology system to send data to Google for the purpose of online analysis.
As described above, the data subject can prevent the placement of cookies by our Internet site at any time by making the appropriate setting on the Internet browser being used and thereby permanently objecting to the placement of cookies. Making such a setting on the Internet browser being used also prevents Google from placing a cookie in the data subject’s information technology system. Moreover, a cookie already placed by Google Analytics can be deleted at any time using the Internet browser or other software programs.
In addition, we use Google Maps on our corporate website. Google Maps is also a service of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4.
In addition, we use Youtube to embed videos in our website. This is a service of Youtube LLC, a subsidiary of Google Irland Limited.
We use solutions from AccessiWay GmbH, located in Vienna, Austria, to produce a highly accessible website. To make our website technically accessible, purely technical data is transmitted to the AccessiBe Ltd, Israel (GDPR compliant by adequacy decision) server located in the USA (GDPR compliant by adequacy decision for the EU-U.S. Data Privacy Framework). This data is SSL3 encrypted and deleted immediately after the accessible, technical information has been retrieved. No data is stored. Only the IP address and user agent (web browser) are transmitted. See website. No cookies are set or stored; the data transfer is purely technical in nature and is used to produce an accessible website.
Legal basis, storage periods
Data is processed on the basis of Article 6(1) (f) (legitimate interest) and/or (1) (a) GDPR.
The processed personal data is used for statistical analysis and for the purpose of operating, safeguarding, and optimizing the website and to make our articles and activities more attractive to the user (legitimate interest). Any other use of your personal data (e.g. sending of newsletters) only takes place with your consent.
Unless explicitly indicated otherwise at the time of the collection of your personal data (e.g. in a declaration of consent), your personal data will be erased (or anonymized) if the retention of the personal data is no longer necessary to fulfill the purposes for which they were collected and if no statutory retention obligations (such as tax or commercial law) require us to further retain the data.
Transfer and disclosure of personal data
Without your consent, we will not transfer your personal data collected based on your website use to third parties unless it is required to perform our duties or required by law/authorities.
We engage processors (service providers) to process personal data (e.g. within the scope of an IT support contract). These processors are contractually bound to comply with the applicable data protection regulations.
Your rights, contact details
Generally, you have the right of access, the right to rectification, erasure, restriction of processing, data portability, and the right to object. If processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Finally, you are entitled to file a complaint with a supervisory authority.
For any questions related to data privacy and asserting the rights listed above, please contact the data protection organization of voestalpine Railway Systems GmbH at firstname.lastname@example.org.
This data protection policy will be revised from time to time.