General privacy policy statement for visitors

In the event that you visit voestalpine Stahlwelt (voestalpine Stahlwelt GmbH, voestalpine-Straße 4, A-4020 Linz (hereinafter “voestalpine,” or “we”) or receive the newsletter of voestalpine Stahlwelt GmbH, it is imperative that we collect your personal data. Personal data include any information that directly or indirectly pertains to natural persons, i.e. names and email addresses. Please read the accompanying details about how personal data is processed at voestalpine:

1.Data categories, processing purposes and statutory source

Visiting voestalpine Stahlwelt

When you visit voestalpine Stahlwelt, the following personal data are collected by voestalpine to document visitors and required training as well as to ensure safety and security:

Name
Form of address
Address
Telephone number
Email address
Name of visitor’s organization
Organizational data of tour (type of tour, date, time (beginning, end, duration), group size, group type, bus etc.)
Data of consent to store personal data
Date of birth
Identity card number
Other personal data that you provide or is collected during your visit, including electronically created or archived text documents, e.g. correspondence

Newsletter of voestalpine Stahlwelt GmbH

If you have registered to receive the voestalpine Stahlwelt newsletter, voestalpine will process the following data:

Name
Form of address/sex
Email address
IP address
Reference number
Data on newsletter reading behavior

The legal basis for the afore mentioned data processing is Section 6, Paragraph 1, Letter a (your consent) of the EU General Data Protection Regulation (GDPR): Personal data must be processed in order to achieve the afore mentioned objectives. Should personal data not be provided to the required extent or voestalpine is not in a position to access the required data, it will not be possible for you to visit voestalpine Stahlwelt or receive the voestalpine Stahlwelt newsletter.

2. Transmission and disclosure of personal data

Without your consent, we will not share your personal data with any third party unless we have a legal or other obligation to do so. voestalpine commissions service providers to process personal data. These service providers are obligated to comply with all applicable data privacy regulations. The recipients described in Section 2 may be located in countries outside the European Union (third-party countries) where applicable law does not guarantee the same level of data security and privacy as in your home country. In such a case, data transmission depends on compliance with the legal stipulations with respect to an adequacy decision made by the European Commission for the third-party country and appropriate guarantees have been agreed upon with the recipient, e.g. standard EU provisions. The recipient is also required to implement an approved certification system, e.g. EU-US Data Privacy Framework. Compliance with internal data protection guidelines pursuant to Section 47 of the Data Protection Regulation is mandatory or an exception pursuant to Section 49 of the Data Protection Regulation has been approved (because you expressly consented to the proposed data transfer after you were sufficiently informed of the existing risks of such data transfers without the existence of an adequacy decision and without proper guarantees). Please contact the address under Section 5 for more detailed information and a list of implemented measures.

3. Time limits on data storage

Unless an explicit storage period is indicated, your personal data will be deleted or anonymized as soon as you inform us that you do not desire to receive any further newsletters, or the purpose of data storage has already been fulfilled and there is no legal obligation, e.g. of a commercial or tax-related nature, to store the data any longer, and if no obligation exists to enforce a legal claim.

4. Right to information, correction, deletion and limitation of your personal data; right to object, right of data transfer and revocation of consent

Pursuant to Section 15 of the EU General Data Protection Regulation, you have the right to request a confirmation of whether personal data may be processed and to receive information on such data.
Pursuant to Section 16 of the EU General Data Protection Regulation, you have the right to request that any incorrect personal data be corrected and/or made complete.
Pursuant to Section 17 of the EU General Data Protection Regulation, you have the right to deletion of your data.
Pursuant to Section 18 of DSGVO, you have the right to limited processing of your personal data.
Pursuant to Section 20 of the EU General Data Protection Regulation, you have the right to transmission of your data.
Pursuant to Section 21 of the EU General Data Protection Regulation, you have the right to object to the processing of your data.
You have the right to lodge a complaint with the data protection panel.

In order to ensure efficient processing of such inquiries, we ask that you contact us using the email address below and that you provide us with proof of your identity by transmitting electronic documentation. If your data are processed under your permission, you have the right to revoke this permission at any time without affecting the legality of any processing carried out pursuant to your consent up until the time of your revocation.

5. Contact partners

If you have any questions regarding data privacy or the protection of your rights, please contact us at anmeldung.stahlwelt@voestalpine.com. This Data Privacy Statement of voestalpine Stahlwelt GmbH will be amended from time to time. You will find the calendar day of the most recent update in the footer.