Skip navigation

DATA PRIVACY STATEMENT

  1. Name and Address of the Controller

    The entity responsible for data protection in the sense of the General Data Protection Regulation and other national laws for data protection as well as regulations for data protection is the following:
    STRABAG Real Estate GmbH
    Donau-City-Straße 1
    1220 Vienna
    Austria
    Phone. +43 1 22 422 7 100
    real-estate.atstrabagcom


  2. Name and Address of the Data Protection Officer

    The data protection officer in charge is:
    Sonja Müllner
    CML Construction Services GmbH
    Donau-City-Straße 9
    1220 Vienna
    Austria
    Phone: +43 1 22422 - 1083
    sonja.muellner@bauholding.com

  3. General Information on Data Processing
    1. Scope of Processing Personal Data

      In principle, we restrict processing of personal data of our users to the extent as necessary for proper functioning of our website and for the supply of content and services. Processing of personal data of our users is subject to the explicit consent of the users. An exception is made in cases when it is impossible to obtain consent either for factual reasons or when the processing of data is permitted by law.

    2. Legal Basis for the Processing of Personal Data

      To the extent we gather consent from data subjects for processing of personal data, this is carried out on the legal basis of Article 6, par. 1 lit. a of the EU General Data Protection Regulation (GDPR).

      The processing of personal data required for the fulfillment of the provisions of a contract of which the person affected is a party to the contract, is based on Article 6, par. 1 lit. b of the GDPR. This shall also apply to processing operations necessary to carry out pre-contractual measures.

      As far as the processing of personal data is necessary for compliance with a legal obligation of our company, the legal basis is Article 6, par. 1 lit. c of the GDPR.

      In cases where the vital interest of the data subject or any other natural person requires processing of data, the legal basis is Article 6, par. 1 lit. d of the GDPR.

      If processing is necessary for the preservation of the vital interest of a company or a third party and the interests, basic rights and the fundamental freedom of the person affected is not predominant, the legal basis for processing is Article 6, par. 1 lit. f of the GDPR.

    3. Deletion of Data and Storage Period

      As soon as the purpose of data storage forfeits, personal data of data subjects are deleted or blocked. However, such data may be stored if this is necessary for the controller to comply with European or national legislation within the relevant EU regulations, legislation or other provisions. Blocking or deletion of the data will also take place if the required storage period expires due to the legal provisions as described above, unless storage of the data is required for signing a contract or for contract fulfillment.

  4. Provision of the Website and Creation of Log Files
    1. Description and Scope of Data Processing

      Every time you visit our web page, our system collects data and information from the contacting computer system.

      We collect the following data: Information on
      (1)    the type of browser and the version in use
      (2)    the operating system of the user
      (3)    the internet service provider of the user
      (4)    the IP address of the user
      (5)    access date and time
      (6)    the websites from where the system of the user has gained access to our internet site
      (7)    websites which are accessed by the user system from our website

      These data will be collected in the log files of our systems, too. However, these data will not be stored together with the personal data of the user.

    2. Legal Basis for the Processing of Data

      The legal basis for the storage of the data and log files is Article 6, Par. 1 lit. f of the GDPR.

    3. Purpose of Data Processing

      The temporary storage of the IP address by the system is necessary to provide access for the computer of the user to the website. For this purpose, the IP address of the user must be stored for the duration of the session.

      Storage of the log file has to be realized to ensure proper functioning of the website. Moreover, the data collected serve to optimize our website and to ensure safety of our information technology systems. An analysis of the data for marketing purposes will not take place.

      Due to these purposes we have a legitimate interest in data processing according to Art. 6, par. 1 lit. f of the GDPR.

    4. Storage Period

      Data and information will be deleted as soon as the reason to collect them is obsolete. As far as the collection of data for website access is concerned, this is the case when the session has ended.

      If data are stored in log files, deletion will take place after 180 days at the latest.

    5. Right to Object and Erasure

      Data collection for the provision of the website and data storage in log files is mandatory for operating our website. As a consequence the user has no right to object to data collection.

  5. Use of Cookies
    1. Description and Scope of Data Processing

      Our website uses cookies. Cookies are text files which are stored in your internet browser or by your internet browser in the computer system of the user. If a user accesses a website, a cookie can be stored in the operating system of the user. This cookie contains a peculiar sequence of characters to facilitate a clear identification of the browser when re-visiting the website.

      We use cookies to make our website more user-friendly. A few components of our internet site require that the accessing browser can be identified even after a change of sites.
      Therefore, we store the following data in cookies:
      (1)    Search behavior
      Moreover, we use cookies for our website to facilitate an analysis of the users’ surfing habits.
      These enable the transfer of the following data:
      (1)    Search keywords entered
      (2)    Amount of site clicks
      (3)    Use of web site functions

      The data collected with these cookies are anonymized by means of technology. Hence, an association of the data with the corresponding user is not any longer possible. These data will not be stored together with the personal data of the respective user.

      When visiting our website, users are informed about the usage of cookies for analytical purposes and there is also a reference to our data privacy statement. In this context we also point out how the storage of cookies may be inhibited by using their browser settings.

      When accessing our website, users are notified about the use of cookies for analytical purposes and we ask for their consent to use personal data collected in this context. In addition, we also reference to our data privacy statement.

    2. Legal Basis for Data Processing

      The legal basis for the processing of personal data by means of cookies, which are necessary from the technological point of view, is Article 6, Par. 1 lit. f of the GDPR.

      The legal basis for the processing of personal data by means of cookies for analytical reasons whenever consent of the respective user is available is Article 6, Par. 1 lit. a of the GDPR.

    3. Purpose of Data Processing

      The purpose for the use of cookies, which are required from the technical point of view, is to simplify the use of the website for our users. A few functions of our website cannot be provided without cookies. Hence, it is necessary that your browser be recognized after a switch of sites.

      We need cookies for the following applications:
      (1)    To remember search words

      The user data collected by means of cookies for technical purposes will not be used to create user profiles.

      The use of cookies for analytical reasons is for the mere purpose to improve the quality of our website. By means of these cookies we learn how our website is used which enables us to constantly optimize our offer.

      Due to these purposes we have a legitimate interest in the processing of personal data according to Art. 6, par. 1 lit f of the GDPR.

    4. Storage Period, Right to Object and Right to Erasure

      Cookies are stored on the computer of the respective user to be transmitted from there to our site. Hence, you as a user have the right to fully control the use of cookies. You may change the settings of your internet browser to deactivate or restrict the transmission of cookies. Cookies stored beforehand may be deleted at any time. This step may also be carried out in an automated way. If the cookies for our website are deactivated you might not be able to use all functions of the website.

      The transmission of flash cookies may only be suppressed by changing the settings of your flash player, but not by modifying the settings of your browser.

  6. Contact Form and Contact by E-mail
    1. Description and Scope of Data Processing

      When sending the message, the following additional data will be stored:
      (1)    The IP address of the user
      (2)    Date and time of the registration
      During the transfer procedure we ask for your consent for further processing of the data and we refer to the present data privacy statement.

      As an alternative you may get in touch with us via the e-mail provided by us. In this case we will store personal data of the user which have been sent via e-mail.

      These data will not be transferred to any third parties. The data will exclusively be used for communication with you.

    2. Legal Basis for Data Processing

      The legal basis for the processing of personal data, whenever consent of the respective user is available, is Article 6, Par. 1 lit. a of the GDPR.

      The legal basis for the processing of the data sent during an e-mail communication is Article 6, Par. 1 lit. f of the GDPR. If the mail conversation aims at concluding a contract, the additional legal basis for processing shall be Article 6, Par. 1 lit. b of the GDPR.

    3. Purpose of Data Processing

      The processing of personal data obtained from the input form is exclusively used for further communication. If the contact is established via e-mail, there is a legitimate interest in data processing.

      All other personal data processed during the transfer are deemed to avoid improper use of the contact form and to ensure safety of our information technology systems.

    4. Storage Period

      Data and information will be deleted as soon as the reason to collect them is obsolete. For personal data collected from the input fields of the contact form and those collected during an e-mail conversation this is the case when the respective electronic conversation with the user has ended. The end of this conversation is deemed to be reached if we can derive that the issues concerned could be sorted out.

      Personal data additionally collected during transmission will be deleted after a period of seven days at the latest.

    5. Right to Object and Erasure

      Users have the option to withdraw consent for processing of personal data at any time. If users contact us by e-mail they can object to the storage of personal data at any given time. If this is the case, however, the electronic conversation cannot be continued.

      If you want to make use of our right to object, please, simply notify us by sending an e-mail to real-estate.at@bauholding.com

      In this case, all personal data collected during direct communication will be deleted.

  7. Web Analytics with Google Analytics

    Data Privacy Statement for the use of Google Analytics

    This website uses Google Analytics, a web analytics service from Google Inc. („Google“). Google Analytics uses so-called „Cookies“, text files that are stored at your computer to analyze how you use our website. Generally, information about the use of our website created by the cookie will be sent to a Google server in the USA to be stored there. Due to the anonymization of the IP address activated on this website, before storage Google will truncate your IP address as a result of the agreement in force with member states of the European Union or other parties to the Agreement on the European Economic Area. It will be the exception of the rule that the full IP address is sent to a Google server in the USA to be truncated there. Google will use this information on behalf of the operator of the website to analyze the use of the website, to create reports about activities on the website and to provide other services to the operator related to the use of the website and the internet. Your IP address, which is transferred by your browser using Google Analytics will not be unified with other data collected from Google. You can inhibit the storage of cookies by means of your browser settings, however, we want to point out that in this case it might be possible that you cannot use all functionalities of the website. Moreover, you can inhibit collection of data created by the cookie which are related to the use of the website (including your IP address) and processing of such data by Google by downloading and installing the browser plug-in available at the following link. Link to Google Optout.

    In addition, you can inhibit data collection by Google Analytics by using the following link. This creates an opt-out-cookie which inhibits collection of your data in future whenever you visit this website: Deactivate Google Analytics

    Find further information about the terms of use and data privacy at www.google.de/analytics/terms/de.html or at www.google.de/intl/de/policies/, respectively. Furthermore, we want to point out that we extended Google Analytics at this website by „anonymizeIp“ to ensure that IP addresses are anonymized while being collected.

  8. Forwarding of Data to Service Providers

    We only forward personal data to third parties if they are acting as our service providers for data management. For this purpose the legal basis is Article 6, par. 1 lit. f of the GDPR. We have concluded agreements for data processing with our service providers to ensure that your personal data are protected.

  9. Rights of Data Subjects

    If your personal data are processed, you are a data subject according to the GDPR, hence, you have the following rights against the data controller:
    (1)     Right of access
    (2)     Right to rectification
    (3)     Right to restriction of processing
    (4)     Right to erasure
    (5)     Right to notification
    (6)     Right to data portability
    (7)     Right to object
    (8)     Right to revoke consent for data processing
    (9)     Automated decision making on a case-by-case basis including profiling
    (10)   Right to lodge a complaint with a supervisory authority