Privacy policy

Privacy Policy in accordance with Art. 13 GDPR - Fulfilment of information obligations

1. Controller

Responsible according to Art. 4 para. 7 EU Data Protection Basic Regulation (GDPR) is

VENTREX Automotive GmbH
Johann-Sebastian-Bach-Gasse 1-5
8010 Graz
Phone: +43 316 46 76-0
E-mail: ventrex@ventrex.com

2. Overview of personal data processing

 

2.1 Data processing in accordance with Art. 13 GDPR

We process the data that data subjects provide to us through their own statements, for example in the context of an enquiry by e-mail, for the purpose of initiating and concluding a contract or a business relationship.

 

2.2 Data processing in accordance with Art. 14 GDPR

In addition, we process data of persons who may be part of a contractual relationship, which we have permissibly received in the context of information provided by third parties (e.g., managing directors provide us with the data of their employees or colleagues).

 

2.3 Data subjects

We process the following data from interested parties: Company, name of contact person and professional contact and address data.
We process the following data from customers: Company, title and names of contact persons, professional address data and contact data, bank details, contract data.
We process the following data from suppliers and business partners: Company, title and names of contact persons, professional address data and contact data, bank details, contract data.

 

2.4 Recipients of personal data

Recipients of personal data will only be third parties if it is necessary for the fulfilling of a contract or if it is required by law.

 

2.5 Data retention

The data will be deleted by us as soon as storage is no longer necessary or legal retention periods have expired. If the basis of the processing is consent, we restrict the processing or delete the data upon revocation of the consent – unless there are legal provisions to the contrary.

 

2.6 Contact by e-mail

When you contact us by e-mail, the data you provide will be stored by us on the basis of your consent in order to answer your questions. We delete the data accruing in this context after the processing is no longer necessary or restrict the processing if there are legal retention periods.

 

2.7 Legal basis

The below points are the legal basis of data processing:

  • Art 6 para. 1 lit. a GDPR when obtaining consent (for example when processing image data or for advertising purposes).
  • Initiation and fulfilment of the contract in accordance with Art. 6 para. 1 lit. b GDPR.
  • Legal obligations in accordance with Art. 6 para. 1 lit. c GDPR, (for example, legally prescribed storage and documentation obligations).
  • Legitimate interests of our company within the meaning of Art. 6 para. 1 lit. f GDPR (e.g. statistical evaluations).

3. Data processing upon contacting us through our website

3.1 Contact

If you have asked us to contact you via our web form or if you have sent us a message, then we store the data from you that is necessary to contact you. These are your name, and your Mail address. We process other data if you provide it to us voluntarily. The data will be deleted by us as soon as storage is no longer necessary or you object to the processing.
Legal basis: Art. 6 para. 1 lit. a GDPR

4. Data processing when subscribing to our newsletter

You have the possibility to subscribe to our newsletter. For this we need at least your first and last name and your email address. You are welcome to provide us with further data voluntarily, such as gender, title, company, industry, department, number of employees, address, telephone number. You can cancel your subscription to the newsletter at any time. Once you have unsubscribed, we will no longer use your data for sending the newsletter. If we do not have any business relationship with you and are not subject to any legal retention obligations, your data will be deleted after you have unsubscribed from the newsletter.
Legal basis: Art. 6 para. 1 lit. a GDPR

5. Data processing in the context of job applications

 

5.1 Applicants

If you send us your application documents, we will process your personal data contained therein as well as your CV and references for the purpose of personnel selection and filling the position. In the event of a rejection, we will delete your documents after the legal retention periods have expired.
Legal basis: Art. 6 para. 1 lit. b GDPR
If we wish to retain your contact information for future reference, we will approach you separately to request your explicit consent. With your explicit consent, we will store your application documents. If there is no further opportunity for employment with us within one year, we will delete all your applicant data one year after receiving your consent.
Legal basis: Art 6 para 1 lit a GDPR

 

5.2 Application form

For persons who are interested in working for our company, there is the possibility to apply directly on our website via a form provided there. For this purpose, please create your own user account with your email address and password. Furthermore, we need your title, your first and last name, your e-mail address, your date of birth and your place of residence; voluntarily, you can also provide us with your telephone number. In the further application process, you have the possibility to upload your application documents (e.g., CV). In the event of a rejection, we will delete your documents no later than 7 months after sending the rejection to you.
Legal basis: Art. 6 para. 1 lit. b GDPR
If we wish to retain your contact information for future reference, we will approach you separately to request your explicit consent. With your explicit consent, we will store your application documents. If there is no further opportunity for employment with us within one year, we will delete all your applicant data one year after receiving your consent.
Legal basis: Art 6 para 1 lit a GDPR

6. Social media presence

We operate the social media sites: LinkedIn, Xing, YouTube, Facebook and Instagram. When visiting our social media pages, personal data, including the IP address, is processed by the respective provider and cookies are used for data collection. For detailed information on the specific data transmitted, please refer to the privacy policy of each service. There, you will also find contact information and various privacy settings.
We prioritize comprehensive customer satisfaction and primarily use these services to engage and communicate with you.
In services with a US connection, the data collected is usually transmitted to a server in the USA and stored there. We have no control or ability to supervise the nature or extent of the data processed by these services, the way it is processed and used or the disclosure of this data to third parties. To limit the processing of this data within the settings of these services, please refer to the detailed descriptions provided in the privacy policies of the respective providers.
Furthermore, we point out that you use the respective services and their features at your own responsibility. This applies particularly to the use of interactive functions such as sharing, commenting, or rating.
The providers of the social media services have provided us with corresponding agreements – in most cases these are agreements on joint responsibility for data processing. The use of social media is based on our legitimate, operational interest.
Legal basis: Art. 6 para. 1 lit. f GDPR

7. Data processing when visiting our website

7.1 Informational use of the website

When you use our website for information purposes only, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect at most the data that is technically necessary for us to display our website to you and to ensure its stability and security:

  • IP address
  • Date and time of the request
  • Time zone difference from Coordinated Universal Time (UTC)
  • Content of the request (concrete page)
  • Access Status/HTTP Status Code
  • Website from which the request comes
  • Browser
  • Operating System and its interface
  • Language and version of the browser software.

Legal basis: Art. 6 para. 1 lit. f GDPR

 

7.2 Cookies

Cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in relation to the browser you are using and which provide the party setting the cookie (in this case us) with certain information. Cookies cannot execute programs or transmit viruses to your computer.
The cookie enables you to be recognised when you visit the website without having to re-enter data that you have already entered previously.
The information contained in the cookies is used, for example, to determine whether you are logged in or which data you have already entered, or to recognise you as a user when a connection is established between our web server and your browser.
We distinguish between technical cookies, which are used exclusively to ensure the operation of a website, and other cookies, which are set for the purpose of statistical analysis, tracking or advertising/marketing by us or third-party providers.
Legal basis: Art. 6 para. 1 lit. f GDPR (in the case of technical cookies), Art. 6 para. 1 lit. a GDPR (for all other cookies)

 

7.3 Data processing in the USA

It cannot be ruled out that personal data will be transmitted to the USA when visiting our website. If this is the case, we will point this out separately in this privacy policy.
The GDPR requires so-called appropriate safeguards according to Art. 46 GDPR for a data transfer to a third country or to an international organization. Such guarantees do not exist for the USA.
Possible risks that cannot currently be ruled out for you as a data subject in connection with the aforementioned information are in particular:

  • Your personal data may be shared with other third parties (e.g.: US authorities) by the respective service provider beyond the actual purpose of fulfilling the order.
  • You may not be able to sustainably assert or enforce your rights of access against the respective service provider.
  • There may be a higher probability that incorrect data processing may occur because the technical organizational measures for the protection of personal data do not fully comply with the requirements of the GDPR in terms of quantity and quality.

With your consent to the processing of (advertising and marketing) cookies, you explicitly agree to the transfer of data to the USA. You can remove cookies stored on your PC yourself at any time by deleting the temporary internet files.
Legal basis: Art. 6 para. 1 lit. a GDPR

8. Data processing for services provided by Google

We have signed a contract with Google Ireland Limited (“Google”), a company incorporated and operated under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. Nevertheless, it is possible that data may be transferred from Europe to the USA, although we as a company have no influence over this.
Please note that the use of this service involves the transfer of personal data to the USA, and such transfer cannot be excluded! For more details, please refer to section 6.3 of this statement.
Legal basis: Art 6 para. 1 lit. a GDPR

 

8.1 Google Analytics

We have integrated Google Analytics on our website, a web analysis service from Google, which enables us to analyse visitor flows and the length of stay on our website.
This website uses the function “Activation of IP anonymization” (i.e. Google Analytics has been extended by the code “gat._anonymize Ip();” to ensure anonymized collection of IP addresses (so-called IP masking)). This means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
According to Google, Google will use the information obtained to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website and internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Google may, however, transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. You can prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of the website to their full extent. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the websites (including your anonymized IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link (here).

For more information on the terms of use and data protection, please visit here or here
Legal basis: Art 6 para. 1 lit. a GDPR

 

8.2 Google Tag Manager

To recognize your user behavior, we use so-called Google Tag Manager. The Google Tag Manager is a solution that marketers can use to manage website tags via an interface. The tool itself processes the following personal data: IP address of the user. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. Google Tag Manager can set cookies, at least in the administrator’s preview and debug mode, but also outside of it. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.
More detailed information is available here: here
Legal basis: Art 6 para. 1 lit. a GDPR

9. hCaptcha

On our website, we use the anti-spam tool hCaptcha provided by Intuition Machines Inc., located at 350 Alabama St, San Francisco, CA 94110, USA.

 
Please note that the use of this service involves the transfer of personal data to the USA, and such transfer cannot be excluded! For more details, please refer to section 6.3 of this statement.
 

hCaptcha protects our website against spam and bots by setting cookies in the browser of website visitors. These cookies store user data to determine whether the visitor is a human or a bot. The data collected includes analysis data such as IP addresses, browser type, device type, date and time of access. It also includes human identifiers such as mouse movements and keystroke events, which are used to identify a visitor as a human or potential threat.
hCaptcha deletes personal data of website visitors when its storage is no longer necessary. For more information, please review hCaptcha’s privacy policy: this link.
Legal basis: Art 6 para. 1 lit. a GDPR

10. jQuery

To optimize the loading speed, usability, and indexing of our website, we utilize JavaScript technologies, corresponding program libraries, and Content Delivery Networks (CDNs) provided by external vendors. Specifically, we use the jQuery JavaScript library from the jQuery Foundation, which is distributed through the CDN of StackPath, LLC, located at 1950 North Stemmons Freeway, Suite 1001, Dallas, TX 75207, USA.
 
Please note that the use of this service involves the transfer of personal data to the USA, and such transfer cannot be excluded! For more details, please refer to section 6.3 of this statement.
 
When you visit our website, these external providers may receive personal information (such as your IP address) regarding your visit. The processing of this data outside the EU is possible. You can prevent this by installing a JavaScript blocker or disabling JavaScript in your browser. However, disabling or blocking JavaScript may result in limited functionality on websites that use JavaScript technologies.
For more information about data processing by Google, please consult Google’s privacy policy, currently available at: this link.. For information regarding jQuery, please refer to: this link.. To learn about StackPath’s privacy practices, please visit this link.
Legal basis: Art. 6 para. 1 lit. a GDPR

11. Data processing for services provided by Facebook

11.1 Facebook Plugins

 We operate a Facebook page and have social plugins (“Plugins”) of Meta Platforms Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland on our website for this purpose. The Plugins are recognizable by one of the Facebook logos (dark gray or black “f” on light gray circle or white “f” on blue tile, or the terms “Like”, “Like” or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of Facebook social plugins can be viewed here.
 
We have entered into a contract with Facebook Ireland, nevertheless it may happen that Facebook Ireland transfers personal data to Facebook USA.

  
Please note that the use of this service involves the transfer of personal data to the USA, and such transfer cannot be excluded! For more details, please refer to section 6.3 of this statement.

 
When a user calls up a website of this offer that contains such a plugin, his browser establishes a direct connection with the servers of Facebook. Facebook transmits the content of the plugin directly to your browser and integrated by it into the website. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore informs users according to its level of knowledge:
 
The data collected in this way is anonymous for us, which means that we do not see the personal data of individual users. However, this data is stored and processed by Facebook, about which we inform you according to our level of knowledge. Facebook may associate this data with your Facebook account and also use it for its own advertising purposes, according to Facebook’s Data Use Policy this link. You may allow Facebook and its partners to serve ads on and off Facebook. Furthermore, a cookie may be stored on your computer for these purposes.
 
Legal basis: Art. 6 para. 1 lit. a GDPR

  

11.2 Facebook Pixel

Our website uses Facebook pixel (“pixel”) of the social network Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland) for the analysis, optimization and economic operation of our online offer.

   
Facebook can use the pixels to determine website visitors as a target group for the display of ads (so-called “Facebook Ads”). Accordingly, we use them to display the Facebook ads placed by us only to those Facebook users who have also shown interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “Custom Audiences”). The aim is to ensure that our Facebook ads correspond to user interest and do not have a harassing effect. On the other hand, we can use pixels to track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).
 
  
Your actions are stored in one or more cookies in the process. These cookies allow Facebook to match your user data (such as IP address, user ID) with your Facebook account data. The data that is collected is anonymous and not visible to us and can only be used in the context of advertisements. If you would like to prevent the linking with your Facebook account, you have the option to log out before taking any action.
 
We have entered into a contract with Facebook Ireland, nevertheless it may happen that Facebook Ireland transfers personal data to Facebook USA.

  
Please note that the use of this service involves the transfer of personal data to the USA, and such transfer cannot be excluded! For more details, please refer to section 6.3 of this statement.

  
For more information, please refer to Facebook’s data policy at www.facebook.com/policy.

For specific information on Facebook Pixels, please refer to www.facebook.com/business/help.
 
Legal basis: Art. 6 para. 1 lit. a GDPR

12. Data processing for services provided by YouTube

We operate a YouTube channel and have embedded YouTube videos on our website, which are hosted on http://www.YouTube.com. The operator of YouTube is YouTube, LLC, located at 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, located at Gordon House, Barrow Street, Dublin 4, Ireland.
 
We use YouTube videos in the extended privacy mode. With this setting, YouTube does not store cookies when you access our website. A connection to YouTube servers is only established when you start playback of the embedded videos. YouTube uses cookies for data collection and statistical analysis. YouTube is informed about the pages you visit. If you are logged into YouTube, your data is directly associated with your account. YouTube uses your data for advertising and market research purposes.
 
 
Please note that the use of this service involves the transfer of personal data to the USA, and such transfer cannot be excluded! For more details, please refer to section 6.3 of this statement.
 
 
By consenting to the data processing by YouTube, you agree that YouTube may load additional cookies and services, particularly from Google.
 
For more information about the privacy practices of “YouTube,” please refer to the provider’s privacy policy at this link.
 
Legal basis: Art 6 para. 1 lit. a GDPR

13. Your rights

You have the following rights in relation to the personal data concerning you:

  • Right to of access, right to rectification and erasure,
  • Right to restriction of processing
  • Right to object to processing
  • Right to data portability
  • Right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40 – 42, 1030 Vienna, telephone: +43 1 52 152-0, e-mail: dsb@dsb.gv.at

If you are of the opinion that we have violated Austrian or European data protection law when processing your data and thereby infringe your rights, we request that you contact us to clarify any questions you may have.
For this purpose, please direct your enquiries and concerns by e-mail to ventrex@ventrex.com or contact us using the contact details provided.

14. Changes to this privacy policy

We reserve the right to make changes to our privacy policy from time to time. We will post any changes to the Privacy Policy on this page. Please always refer to the current version of our privacy policy.