Data protection
by H + S. Haas + Sohn Ofentechnik GmbH, Urstein Nord 67, 5412 Puch bei Hallein, Austria, processes personal data of the client or their relevant employees (hereinafter "Client") for the purpose of performing the contract according to Art. 6 (1) (b) GDPR (performance of the contract, taking of steps prior to entering into the contract, e.g. submission of offer), Art. 6 (1) (c) (compliance with a legal obligation, e.g. accounting) and according to Art. 6 (1) (f) (legitimate interest of H + S, e.g. documentation of business relationship). The processing of special categories of personal data (such as health data, biometric data) in the course of is carried out exclusively for purposes specifically defined in advance and only based on the consent of the data subject according to Art. 9 (2) (a) GDPR.
Further processing.
The Client’s contact data are further processed for a purpose which is compatible with the process of performing the contract according to Article 6 (4) GDPR for direct marketing in forms for which no consent is necessary, such as addressed dispatch by post
Electronic direct mail.
Personal data are processed for the purpose of direct mail in forms for which a consent is necessary, such as sending advertisements by email or placing personal ads, only on the basis of the Client’s additional voluntary consent according to Art. 6 (1) (a) GDPR.
Mandatory provision of data / consequences of non-provision
The Client has no legal or contractual obligation to provide personal data. Should the Client fail to provide H + S with the personal data necessary for the performance of the contract prior to the conclusion of the contract, H + S will not be able to submit an offer to the Client, and no contract will be concluded between H + S and the Client.
Furthermore, the Client has no legal or contractual obligation to consent to the processing of his personal data. Failure to consent will either result in no contract being concluded between H + S and the Client or the Client not receiving direct mail for which consent is necessary.
Transfer.
All data are subject to the agreed or legal obligation of confidentiality and the protection of personal data. The Client’s personal data are transferred only to the recipients or categories of recipients referred to below:
- banks and payment services providers (payment processing)
- shipping providers (shipping of goods and invoices)
- tax advisors (accounting according to Commercial Code/Federal Tax Code, preparation of financial statements)
- collection agencies (debt collection)
- attorneys (in case of assertion of contractual or legal claims)
- Communication service providers (for the implementation of the contract)
- subcontractors during project realization (for the performance of the contract)
Data are transferred to recipients other than those listed above only in reliance on a legal basis or in agreement with the Client.
Worldwide processing.
If possible, H + S will process the Client’s personal data only in the European Union.
The Client’s personal data are processed in or transferred to third states only
- if this is necessary for the performance of a contract between H + S and the Client (Art. 49 (1) (b) GDPR), or
- if this is necessary for the implementation of pre-contractual measures taken at the request of the Client (Art. 49 (1) (b) GDPR), or
- after having been informed of the possible risks of such transfers by H + S in those third states in which the processing operations are planned and with the Client’s express consent according to Article 49 (1) (a) GDPR.
Retention period.
The Client’s personal data are kept for the purpose of fulfilling legal obligations according to Section 132 (1) Federal Tax Code for at least seven years. Furthermore, the Client’s personal data are stored for a maximum period of 10 years after completion of the orders for the purpose of documentation and to meet legal obligations.
If no contract was concluded between H + S and the Client, the latter’s personal data are kept only to record the business relationship for a likely period of twelve months.
Right of withdrawal.
The Client may withdraw his consent at any time. If consent was given in writing, the right of withdrawal must also be exercised in writing; a consent to receipt of advertising by email may be withdrawn also by clicking the unsubscribe link. In this case, we will cease all processing operations, unless there is any other legal basis. The exercise of the right of withdrawal does not affect the lawfulness of data processed until that right was exercised.
Right to object.
The Client may object to the processing of his personal data for the purpose of direct mail. In this case, we will no longer process your personal data for the purpose of direct mail.
Rights of data subjects. The Client has the right to information, to rectification and erasure of his personal data, the right to restrict processing, the right to data portability and the right to file a complaint with the data protection authority. The data protection authority in Austria is the Österreichische Datenschutzbehörde, of Barichgasse 40- 42, 1030 Vienna, Phone: +43 1 531 152 - 0, E-Mail: dsb@dsb.gv.at.
Find here our Data protection in English (PDF download) »
September 2022
