Data protection and privacy
Protecting the security and privacy of your personal data is very important to voestalpine AG, voestalpine-Straße 1, A-4020 Linz (hereinafter “we” and “us”) and its subsidiaries. We observe the applicable legal regulations for the protection, proper handling, and confidentiality of personal data, especially the Austrian Data Protection Act (DSG), the EU General Data Protection Regulation (GDPR) and the Austrian Telecommunications Act (TKG).
This data protection policy explains the nature, scope, and purpose of our collection and use of your personal data when you visit and use our website brandportal.voestalpine.com (“Corporate Brand Portal”).
Who is responsible for data processing and whom can you contact?
The controller (within the meaning of the General Data Protection Regulation) for the processing of your personal data in connection with the use of this website is voestalpine AG.
You can reach us as follows:
voestalpine AG
voestalpine-Straße 1
A-4020 Linz
Email: group-dataprotection@voestalpine.com
Personal data
Personal data is any information relating to the data subject (natural person), who can be identified, directly or indirectly (e.g. name, email address, or IP address).
Data categories, purpose of processing and legal basis
Registration for the Corporate Brand Portal
You need a personal user account in order to use the Corporate Brand Portal. Within the framework of registration and for the purposes of administering the Corporate Brand Portal, voestalpine processes the following categories of personal data of users of the Corporate Brand Portal in particular:
User name, salutation, academic title, first name, last name, email address, telephone number, reason for registration, consent to receive the newsletter, region, country, time zone, language, password and address.
The following data is collected and stored during use: IP address, date of registration, date of last login, date of last logout, date of last change of the user profile and date of last password change.
In the case of users not employed directly by voestalpine, the data for the contact person at voestalpine including their first name, last name and the name of the voestalpine company will also be saved and processed.
If the personal data mentioned is not made available or not made available to the required extent or if voestalpine cannot collect it, registration with the Corporate Brand Portal is not possible.
Contact
When you contact us by email, phone, or fax, we will process the personal data you submit (email, name, phone number, fax number, your inquiry as well as all associated documents) for the purpose of handling your inquiry.
Cookies
The Corporate Brand Portal uses so-called “cookies," which allow the portal to recognize your browser on future visits. Cookies are small text files that the browser stores on your device. This allows the website to be optimally adapted to your interests.
Use of Matomo
On the Corporate Brand Portal, data is collected and stored using the open source web analysis service software Matomo (www.matomo.org) ("Matomo") on the basis of our legitimate interest in statistical analysis of user behavior for optimization and marketing purposes. This data can be used to create and evaluate anonymous user profiles for the same purpose. Cookies can be used for this purpose. The data collected using Matomo technology (including your anonymous IP address) is processed on our servers. The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym.
The data of this website and Matomo are hosted in Germany. The data never leave the EU.
Legal basis, storage periods
The legal basis for data processing in connection with registration and administration of the Corporate Brand Portal, in connection with the sending of newsletters, and in connection with cookies is Article 6 (1) (a) GDPR (your consent).
The legal basis for further data processing described above, e.g. processing of inquiries, is Article 6 (1) (f) GDPR, namely the legitimate interest of the data controller in achieving the above-mentioned purposes.
If no explicit storage period is specified at the time of collection (e.g. as part of a declaration of consent), your personal data will be deleted (or anonymized) insofar as it is no longer necessary to fulfill the purpose of storage and there are no legal storage obligations (e.g. commercial and tax storage obligations).
Transmission and transfer of personal data
We will not pass on any personal data collected on the basis of your use of the Corporate Brand Portal to third parties without your consent, unless it is necessary to fulfill our obligations or is legally obligatory.
We commission contract processors (service providers) to process personal data (e.g. as part of an IT support contract). These contract processors are bound by contract to comply with data protection regulations.
Your rights, contact details
You are entitled to the rights to information, rectification, erasure, restriction, data transferability and objection. If your data is processed on the basis of your consent, you have the right to revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent up to revocation. Please note that further use of the Corporate Brand Portal is no longer possible if your consent is revoked. Finally, you have the opportunity to lodge a complaint with the supervisory authority.
If you have any questions regarding data protection or the assertion of your aforementioned rights, please contact us at brandportal@voestalpine.com or voestalpine AG, Department GK, voestalpine-Straße 1, A-4020 Linz.
This data protection policy will be updated from time to time.