Privacy Policy of Interzero Circular Solutions Europe GmbH and Interzero Circular Consulting Austria GmbH

As at 2 May 2024

The protection and security of your data is a priority for us, Interzero Circular Solutions Europe GmbH (hereinafter „Interzero“), an important consideration that we take into account in all our business processes. In this privacy policy, we would like to provide you with an overview of the data protection-related aspects of our online services. Below, we explain:

  1. What personal data we collect when you use Interzero’s online services.
  2. The purposes for which this data is processed by Interzero and any third-party organisations.
  3. What rights you have regarding the processing of your data.
  4. How to contact us regarding data protection.

What is personal data?

Personal data (or, for simplicity’s sake, hereinafter referred to as „Data“) means any information relating to an identified or identifiable natural person. This includes, on the one hand, data such as names, dates of birth or addresses, but IP addresses also constitute data within the meaning of this definition.

When does this privacy policy apply?

This privacy policy applies to the online services provided by Interzero and Interzero Circular Consulting Austria GmbH, a subsidiary of Interzero (hereinafter „ICCA“), under the domains wastemanagementplatform.interzero.at, including the following online shops:

  • Licensing.interzero.at
  • document-destruction.interzero.at
  • light-packaging.interzero.at
  • light-and-metal-packaging.interzero.at
  • machines.interzero.at

as well as the social media accounts of Interzero and the ICCA on Facebook, LinkedIn and YouTube (hereinafter referred to collectively or individually as „Social media presence“).

Legal basis

We process and protect your data in accordance with the EU General Data Protection Regulation (hereinafter „GDPR“). This requires a legal basis for the processing of personal data. Our legal basis depends on the specific purpose of the data processing. We rely on:

  1. Performance of a contract, where we have entered into a contract with you or where pre-contractual measures are necessary in response to your enquiry. This includes the processing of your personal data for the purpose of accepting and fulfilling contracts and, where applicable, for payment processing (Article 6(1)(b) of the GDPR).
  2. Protection of legitimate interests, where processing is necessary to safeguard our legitimate interests or those of third parties (such as our customers) (Article 6(1)(f) of the GDPR).
  3. Your consent, where we obtain your consent to the processing of your personal data for specific purposes. You may withdraw your consent at any time, in which case we will no longer process your data for the specific purpose in question (Article 6(1)(a) of the GDPR).
  4. Legal obligations, where we process your personal data in order to comply with a legal obligation to which we are subject (Article 6(1)(c) of the GDPR).

We have entered into appropriate data processing agreements with third parties who process personal data on our behalf. In cases of joint controllership, we have entered into joint processing agreements.

1. Responsibility and contact details

The data controller within the meaning of the GDPR for data processing at Interzero is

Interzero Circular Solutions Europe GmbH
206c Vorgartenstraße
1020 Vienna,
Austria

and, on behalf of the ICCA, the

Interzero Circular Consulting Austria GmbH
206c Vorgartenstraße
1020 Vienna,
Austria

You can contact Interzero and ICCA regarding data protection matters at office@interzero.at or by post to the QM department at the Interzero address given above, marked „For the attention of: Data Protection Coordinator“.

2. Data processing when visiting our websites

2.1. Automatically collected access data

You can visit our websites and online shops without providing any personal details. In that case, the only information collected is Access data, which are automatically transmitted to us by your browser. This includes, for example, your online identifiers (e.g. IP address, session IDs, device IDs); details of the web browser and operating system used; where applicable, the website from which you accessed our websites and online shops (i.e. if you accessed one of our websites via a link); the names of the files requested (i.e. which texts, videos, images, etc. you have viewed on our websites); your browser’s language settings, any error reports, and the times of each visit.

The processing of this access data is necessary to enable you to visit and use our websites and online shops conveniently, and to ensure their continued functionality and security.

Access data is also stored temporarily in internal log files in order to compile statistical information on the use of our websites and online shops. This enables us to continuously optimise and further develop our websites in line with our users’ usage habits and technical capabilities, as well as to eliminate malfunctions and security risks. The information stored in the log files does not allow any direct identification of you – in particular, we store IP addresses only in a truncated, anonymised form. The log files are stored for a maximum of 30 days and then archived after being anonymised.

The legal basis for this data processing is Article 6(1)(f) of the GDPR.

2.2. Your messages and notifications

We collect all the information and data that you provide to us via our website. For example, at various points on our website, you have the option to provide us with information via features such as a „Contact form“To send you news and, in some cases, files (e.g. PDF documents). Any mandatory information required to use these functions is clearly marked as such. This includes, amongst other things, your name, email address and a telephone number on which we can contact you.”.

We will use your details solely for the purpose of dealing with your enquiry. We will delete the data collected in this process once it is no longer necessary to retain it, or restrict its processing where statutory retention obligations apply.

We use our internal Microsoft Outlook system to process incoming messages; your messages will be forwarded to office@interzero.at or sent to the email addresses provided and used to process your enquiry.

On machines.interzero.at We also use the chat service provided by Tidio Sp. z o.o., al. Wojska Polskiego 81, 70-481 Szczecin, Poland (hereinafter „tidio“). To this end, incoming messages are forwarded via a ticketing system and stored. The messages are forwarded via the tidio system to our internal email address shop.austria@interzero.at, where it is processed by us. Further information on data processing by tidio, in particular regarding which data is processed by tidio, can be found in tidio’s privacy policy at https://www.tidio.com/privacy-policy/

Your message will only be passed on to another company within the Interzero Group or, where applicable, to external third parties acting on our behalf, to the extent that this is necessary to deal with your enquiry (for example, we will forward your message to another company within the Interzero Group if that company is responsible for your enquiry). If you do not wish your message to be passed on to another company within the Interzero Group or to external third parties, you can inform us of this – as a precaution, of course – directly in your message. We will then not forward your message.

The legal basis for this data processing is Article 6(1)(b) of the GDPR.

2.3. Newsletter

If you subscribe to our newsletter via our website, we process personal data such as your name, your email address, the time of subscription and your IP address. In addition, we store details of which newsletters we have sent you, the time at which you opened, blocked or marked them as spam, and whether the newsletters were successfully delivered. We also process information on whether you subscribe to or unsubscribe from the newsletter and which links you click on within the newsletters.

The processing of this data is covered by the consent given when subscribing to our newsletter.

The legal basis for this data processing is Article 6(1)(a) of the GDPR.

2.4. Cookies

To improve the presentation and content of our websites, we use First-party cookies and third-party cookies. A cookie is a standardised text file that is stored by your browser for a specified period. Cookies enable the local storage of information such as language settings and temporary identifiers, which can be retrieved by the server that set the cookie when you visit the website again. Cookies also enable us to collect and analyse statistics on general usage patterns when you visit our websites. In addition, we use services provided by external service providers which process the access data generated when you use our website in order to facilitate the display of interest-based advertising, for example in connection with search queries.

Technical cookies are necessary for the performance of our website and are therefore „essential“. We use cookies to provide our services, for example, to:

  1. to recognise you when you sign in to use our services;
  2. To offer features, products and services that may be of interest to you, in particular adverts for our services, provided these are offered within the Interzero Group;
  3. to prevent fraudulent activities;
  4. to improve safety;
  5. Take your preferences into account, e.g. regarding currency and language.

We also use cookies to understand how you use our services so that we can make improvements. For example, we use cookies to carry out research and diagnostics, to improve the content of our website, and to measure and analyse the performance of our services.

Marketing cookies: We also use cookies to display certain types of adverts, and to show you adverts that are relevant to you based on your interests.

Optional cookies and similar technologies for marketing and analytics purposes We will only use these if you have given your consent to the processing of your data in accordance with Article 6(1)(a) of the GDPR and to the transfer of data to third countries in accordance with Article 49(1)(a) of the GDPR via our cookie banner. In section 3.4, we explain the risks associated with the transfer of data to third countries.

For the Web analytics and advertising purposes We use third-party cookies. You can find further information on this later in this privacy policy.

You can cancel your Withdraw your consent at any time or adjust your cookie settings, by selecting the link to the Cookie Policy in the cookie banner and giving your consent there by ticking the relevant boxes. The storage period for each cookie is also clearly displayed here.

If you clear your cookies, we will ask for your consent again the next time you visit the site.

We will delete the processed data once it is no longer necessary to store it, or restrict its processing should there be any statutory retention obligations.

Also authorised third-party providers may set cookies when you interact with us. These third-party providers include search engines, providers of measurement and analytics services, social media networks and advertising companies. Third-party providers use cookies when delivering advertising content – in particular, adverts that are relevant to you based on your interests – to measure the effectiveness of their adverts and to provide services to you.

To see which authorised third-party cookies we use and to adjust your cookie settings, please click on the link to the Cookie Policy in the cookie banner in the bottom left-hand corner.

Further information on cookies:

Technical cookies remain in your browser for 13 months after your last visit to our site. This does not apply to cookies that store your personal settings (such as advertising preferences), which may remain in your browser for up to 5 years. Other cookies remain in your browser for 13 months after you have given us your consent to use these cookies.

We will apply the cookie settings you have selected, as well as any other browser you are logged into. If you are not logged in, we may need to ask you to confirm your preferences again.

Alternatively, you can check your browser’s settings to find out how to prevent your browser from accepting new cookies, how to set your browser to notify you when you receive a new cookie, how to disable and delete cookies, and when cookies expire.

Thanks to operational cookies, you can use some of our key features. If you block or otherwise refuse technical cookies via your browser settings, some features and services may no longer work.

The legal basis for data processing relating to technically necessary cookies is Article 6(1)(f) of the GDPR. In addition, the legal basis for data processing is your consent under Article 6(1)(a) of the GDPR.

2.5 Uses of tag managers, cookies and plug-ins

2.5.1. Google Tag Manager

Our website uses Google Tag Manager, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter „Google“). The Tag Manager is used to manage so-called website tags more efficiently. A website tag is a placeholder embedded in the source code of our website to track, for example, the integration of frequently used website elements (e.g. code for the web analytics service). Google Tag Manager does not require the use of cookies. In some cases, data is processed on a Google server in the USA. In section 3.4, we explain the risks associated with the transfer of data to third countries.

In section 3.4, we explain the risks associated with the transfer of data to third countries.

The legal basis is Article 6(1)(a) of the GDPR. Further information can also be found in the Information from Google about Tag Manager.

You can cancel your You can amend your consent at any time by, by enabling the marketing cookies in the cookie banner by ticking the box, or by disabling them by unticking the box.

2.5.2. Google Analytics

Our websites use the web analytics service Google Analytics, which is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter „Google“) is available.

In the cookie banner, you can consent to the sharing of data with and processing by Google Analytics, or you can refuse such sharing and processing.

Provided you have consented to the processing and sharing of data via the cookie banner, the data will be transferred to Google. You can withdraw this consent by deactivating the necessary marketing cookies by unticking the relevant box. If you have not consented to the processing, no data will be transferred to Google. This may mean that not all services on our website are available to you.

Google Analytics uses cookies to collect your usage data when you visit our website. Google compiles this usage data on our behalf into pseudonymous user profiles and transmits it to a Google server in the USA. Your IP address is anonymised beforehand. We are therefore unable to determine which usage profiles belong to a specific user. Consequently, based on the data collected by Google, we cannot identify you or determine how you use our website. By clicking „I accept“ in the cookie banner, you are also consenting, in accordance with Article 49(1)(a) of the GDPR, to your data being processed in the USA. The European Court of Justice considers the USA to be a country with a level of data protection that is insufficient by EU standards. In particular, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes, possibly without any means of legal redress. If you click on „Accept essential cookies only“, the transfer described above will not take place.

Google will use the information collected via cookies on our behalf to analyse the use of our website, compile reports on website activity and provide us with other services relating to website and internet usage. Further information on this can also be found in the Google Analytics Privacy Policy.

You may object at any time to Google’s creation and analysis of pseudonymous usage profiles as described above. There are several ways to do this:

(1) You can configure your browser to block cookies from Google Analytics.

(2) You can Google Ad Settings on Google adjust.

(3) You can use the Google https://tools.google.com/dlpage/gaoptout?hl=de Install the deactivation plug-in provided in your Firefox, Edge or Chrome browsers (this option does not work on mobile devices).

In the event that personal data is transferred to the USA, we must enter into the EU Standard Contractual Clauses with the relevant service providers and review a statement from the service provider as to whether these clauses – and, where applicable, any additional measures taken by the service provider – comply with the EU’s data protection standards.

In section 3.4, we explain the risks associated with the transfer of data to third countries.

The legal basis for this data processing is Article 6(1)(a) of the GDPR.

2.5.3 Embedding YouTube videos

We have embedded YouTube videos in sections of our website. YouTube is a video platform operated by the Google subsidiary YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter „YouTube“) is operated.

The embedded YouTube videos can be played directly on our website. They are embedded in „enhanced privacy mode“, which means that no data about you as a user is transmitted to YouTube unless you play the videos. Data is only sent to YouTube once you play the videos. We have no control over this data transfer. The decision is yours. Please consider carefully whether or not you wish to have your data transferred to the USA.

When you play a video, YouTube and Google receive the relevant access data, as well as information that you have visited the corresponding page on our website. This happens regardless of whether you are logged in to YouTube or Google.

If you are signed in to Google, your data will be linked directly to your Google account as soon as the video starts playing. If you do not wish for this data to be linked to your YouTube profile, you must sign out before playing a video.

YouTube and Google may use your access data to create user profiles for the purposes of advertising, market research and tailoring their own website to your needs. You have the right to object to the creation of these user profiles; any such objection must be addressed directly to YouTube or Google. Further information can also be found in the privacy policy applicable to YouTube Google’s Privacy Policy.

In section 3.4, we explain the risks associated with the transfer of data to third countries.

The legal basis for the data processing described above, insofar as we are responsible for it, is Article 6(1)(a) of the GDPR.

2.5.4. Google Maps

Our website uses the Google Maps mapping service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter „Google“). In order for the Google Maps data we use to be integrated and displayed in your web browser, your web browser must establish a connection to a Google server – which may be located in the USA – when you access the contact page.

In section 3.4, we explain the risks associated with the transfer of data to third countries.

If you access the Google Maps service on our website whilst logged into your Google account, Google may also link this activity to your Google account. If you do not wish this information to be linked to your Google account, you must Log out of Google before visiting our Contact page. Google stores your data and uses it for advertising, market research and to personalise the display of Google Maps. You can object to this data collection by Google.

Further information on this can be found in Google’s privacy policy at policies.google.com/privacy and the additional terms of use for Google Maps at www.google.com/intl/de_US/help/terms_maps.html.

You can opt out of the service by going to Opt-out: adssettings.google.com/authenticated be carried out.

The legal basis for this data processing is Article 6(1)(a) of the GDPR.

2.5.5. Google reCAPTCHA

To protect our website from automated, computer-generated submissions, we use the „reCAPTCHA“ service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter „reCAPTCHA“) is used. This service makes it possible to distinguish whether the relevant input is of human origin or has been generated abusively through automated machine processing.

To the best of our knowledge, the referrer URL, the IP address, the behaviour of website visitors, information about the operating system, browser and session duration, cookies, display instructions and scripts, the user’s input behaviour, and mouse movements within the „reCAPTCHA“ checkbox area are transmitted to „Google“.

The IP address transmitted as part of „reCAPTCHA“ is not combined with any other data held by Google, unless you are logged into your Google account at the time of using the „reCAPTCHA“ plug-in. If you wish to prevent „Google“ from transmitting and storing data about you and your behaviour on our website, you must Sign out of „Google“ namely before you visit our website or use the reCAPTCHA plug-in.

The use of the „reCAPTCHA“ service and the information obtained through it is governed by Google’s Terms of Service: https://www.google.com/intl/de/policies/privacy/.

If you do not wish your data to be transferred to the USA, you can contact us at any time at https://adssettings.google.com/authenticated log out.

In section 3.4, we explain the risks associated with the transfer of data to third countries.

The legal basis for the data processing described is Article 6(1)(a) of the GDPR.

2.5.6. Facebook

Some of our websites incorporate features from the social network Facebook (known as plug-ins). These plug-ins are provided by Meta Platforms, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter „Facebook“) is operated. Facebook and we are joint controllers within the meaning of the GDPR.

When you visit a website that contains a plug-in you have enabled, your browser establishes a direct connection to Facebook’s servers, whereby the content of the plug-in (e.g. the „Like“ or ‘Share’ button) is transmitted to your browser and integrated into our websites by it. This means that information indicating that you have visited our websites is forwarded to Facebook. If you are logged into your personal Facebook account whilst visiting our websites, Facebook may associate your visit with that account.

When you interact with plug-ins – for example, by clicking the „Like“ button or leaving a comment – the relevant information is collected directly by Facebook and stored there. If you wish to prevent this, you must Log out of your Facebook account before activating plug-ins.

For information on the purpose and scope of data collection by Facebook, as well as the further processing and use of your data by Facebook, and your rights in this regard and the settings available to protect your privacy, please refer to Facebook’s privacy policy (http://de-de.facebook.com/privacy/explanation.php).

In section 3.4, we explain the risks associated with the transfer of data to third countries.

The legal basis for the data processing described above, insofar as we are responsible for it, is Article 6(1)(a) of the GDPR.

2.5.6. Leadinfo

We use the lead generation service provided by Leadinfo B.V., Rotterdam, the Netherlands. This service identifies visits to our website by businesses via their IP addresses and displays publicly available information to us, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to analyse user behaviour on our website and processes domains from form submissions (e.g. „leadinfo.com“) in order to correlate IP addresses with companies and improve its services. Further information can be found at www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out You have the option to opt out. If you opt out, Leadinfo will no longer collect your data.

2.5.7. Hotjar

„We use Hotjar to better understand our users“ needs and to optimise this service and their experience. Hotjar is a technology service that helps us to better understand user behaviour (e.g. how much time they spend on which pages, which links they click, what users like and dislike, etc.) and thus enables us to develop and maintain our service based on user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device’s IP address (processed during your session and stored in a de-identified form), the device’s screen size, the device type (unique device identifiers), browser information, geographical locations (country only), and the preferred language used to display our website. Hotjar stores this information in a pseudonymised user profile on our behalf. Hotjar is contractually obliged not to sell any of the data collected on our behalf.”
For further details, see the „About Hotjar“ section on the Hotjar support page.“

2.6. Data processing in relation to social media presence

2.6.1. Facebook fan page

We run a Facebook fan page (hereinafter „Fan page“) on the social network operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (hereinafter „Facebook“) in joint responsibility with Facebook, in order, amongst other things, to communicate with users and followers (such as our customers and prospective customers) on that platform and to provide information about our products and services.

In this context, we receive statistics from Facebook regarding the use of our fan page by Facebook/fan page users, such as details on interactions, likes, comments or summarised information and statistics (e.g. on the age or origin of users and our followers), which help us to gain an understanding of interactions with our page. Further details on the nature and scope of these statistics can be found in the Facebook Page Insights guidelines. Further information on the respective responsibilities can be found in the Facebook Page Insights supplement.(https://www.facebook.com/legal/terms/page_controller_addendum

We have no control over data processed by Facebook in this context under its own responsibility in accordance with Facebook’s Terms of Service. However, we would like to point out that when you visit the fan page, data relating to your usage behaviour on Facebook and the fan page is transmitted to Facebook. Facebook itself processes the aforementioned information to compile more detailed statistics and to use it for its own market research and advertising purposes, over which we have no control. Further information on this can be found in Facebook’s Privacy Policy.

Insofar as we receive your personal data in the course of operating the fan page, you are entitled to the rights set out in section 7 of this privacy policy. If you wish to exercise your rights vis-à-vis Facebook beyond this, the simplest way to do so is to contact Facebook directly. Facebook is familiar with both the technical details of the platform’s operation and the associated data processing, as well as the specific purposes of the data processing, and can, upon request, take appropriate action if you exercise your rights. We are happy to assist you in exercising your rights, as far as we are able, and will forward your enquiries to Facebook.

You can find Facebook’s privacy policy on Page Insights data here. https://de-de.facebook.com/legal/terms/information_about_page_insights_data

We receive the following categories of data, in particular, from Facebook in anonymised form:

Information about people:

  • People who „like“ our fan page: gender, age, place of residence and language,
  • People reached: People to whom our advert has been shown in the last 28 days,
  • Engaging users: People who have „liked“, commented on or shared our posts, or otherwise interacted with our page, in the last 28 days.

Information about „Likes“:

  • Total number of „Likes“ for the fan page,
  • Number of new „Likes“,
  • Breakdown of „Likes“ by origin (country, city, town), gender, age and language.

Range:

  • Post reach: the number of people to whom our post was shown, broken down into paid and organic reach,
  • Positive interactions: „Likes“, comments, shared content and recommendations,
  • Negative interactions: Hidden posts, reported as spam, „Unfollow“,
  • Number of fan page followers,
  • Total reach: the number of people who were shown an action from our site.

Information about visits:

  • Page and tab views: Information on how often each tab and each button (e.g. website, telephone number, „Plan route“ button) on our fan page was displayed or clicked,
  • Visitor behaviour: Information on whether the visitor hovers the mouse over the name or profile picture of the fan page to view a preview of the page content, as well as information on whether the fan page visitor is logged in on a computer or a mobile device,
  • External links: Information on how often people accessed our fan page via a link from a website outside Facebook.

Information about contributions:

  • Online behaviour of our „fans“: information on when the people who „like“ our page are on Facebook,
  • Post types: Information on the performance of individual post types based on average reach and engagement,
  • Most popular posts from pages we’re following: View interactions on posts from pages we’re following.

Information about videos:

  • Video views: Information on how often the videos on our fan page were viewed for more than three seconds,
  • 30-second views: Information on how often the videos on our fan page have been watched for more than 30 seconds. If our video is shorter than 30 seconds, the number of people who have watched the video up to 95% is counted,
  • Top videos: Information about the videos on our fan page that have been viewed for at least three seconds.

In section 3.4, we explain the risks associated with the transfer of data to third countries.

The legal basis for this data processing is Article 6(1)(a) of the GDPR.

2.6.2. Other social media channels

Interzero has its own social media accounts on the following social networks, where you can get in touch with us:

  1. Facebook: https://www.facebook.com/ressourcenoptimierer
  2. LinkedIn: https://www.linkedin.com/company/interzero-austria
  3. YouTube: https://www.youtube.com/@interzero-austria

We also have a fan page on the social media platform LinkedIn (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA; hereinafter „LinkedIn“). We use these platforms to keep you informed about Interzero’s latest news and activities, and we are keen to make use of the opportunities offered by social media to communicate directly with their members. The data processed includes, in particular, data on user behaviour, information about the device used and IP addresses.

Please note, however, that we have no control over how social media platforms process data. You should therefore carefully consider what personal information and messages you share with us via social media and, if in doubt, use the other contact options we provide. We cannot therefore accept any liability for the conduct of the operators of social media platforms and their other members. Please note that when you click on a social media plug-in, data may also be collected by the operator of the social media platform, even if you are not logged in to that platform. LinkedIn’s privacy policy can be found here: https://de.linkedin.com/legal/privacy-policy

When you communicate with us via our social media channels, we process the information made available to us by the relevant social network (e.g. your name, your profile page and the content of your messages to us) in accordance with the purpose of your message (e.g. service enquiries, suggestions and feedback).

We delete the data collected in this process once it is no longer necessary to store it, or restrict its processing where statutory retention obligations apply. In the case of public posts on our social media channels, we decide on a case-by-case basis, taking into account both your interests and ours, whether and, if so, when we will delete them from there.

You can find out more about these providers’ data protection policies on their respective websites. To make your future visits easier, we store your consent in our cookie records. You can withdraw this consent at office@interzero.at revoked at any time.

In section 3.4, we explain the risks associated with the transfer of data to third countries.

The legal basis for the data processing described above depends on the purpose of your communication. Where the purpose is to use our customer service or to request services from Interzero, the legal basis is Article 6(1)(b) of the GDPR. In all other cases, the legal basis is Article 6(1)(f) of the GDPR. Where you have consented to the processing of the data mentioned above, the legal basis is Article 6(1)(a) of the GDPR.

3. Disclosure of data

3.1. Principle

As a general rule, we will only pass on your data if:

  1. you have given your explicit consent to this in accordance with Article 6(1)(a) of the GDPR, or
  2. the disclosure is necessary under Article 6(1)(f) of the GDPR for the establishment, exercise or defence of legal claims by an Interzero company, and there is no reason to believe that you have an overriding legitimate interest in preventing the disclosure of your data, or
  3. we are legally obliged to disclose the data pursuant to Article 6(1)(c) of the GDPR, or
  4. the disclosure is permitted by law and is necessary, in accordance with Article 6(1)(b) of the GDPR, for the performance of contractual obligations with you or for the implementation of pre-contractual measures taken in response to your enquiry.

3.2. Data sharing within the Interzero Group

Your message will only be passed on to another company within the Interzero Group in so far as this is necessary to deal with your enquiry (for example, we will forward your message to another company within the Interzero Group if that company is responsible for your enquiry).

If you do not wish your message to be passed on to another company within the Interzero Group, you can let us know – as a precaution, of course – directly in your message. We will then not forward your message.

The legal basis for this data processing is Article 6(1)(b) of the GDPR, where a contractual relationship exists; where there is a legitimate interest, the legal basis is Article 6(1)(f) of the GDPR.

3.3.    Disclosure to external service providers of Interzero (data processors)

Some of the data processing described in this privacy policy may be carried out on our behalf by external service providers. In addition to the service providers mentioned in this privacy policy, these may include, in particular, data centres that host our website and databases, IT service providers that maintain our systems, and consultancy firms (such as tax advisers).

Where we pass data on to our service providers, they may use the data solely for the purpose of carrying out their tasks. We have carefully selected and appointed these service providers. They are contractually bound to follow our instructions, have appropriate technical and organisational measures in place to protect the rights of data subjects, and are regularly monitored by us.

Should we disclose your data to a service provider based in a country outside the European Economic Area (EEA) beyond the scope of this privacy policy, we will, where applicable, inform you separately of this fact and of the specific safeguards on which the data transfer is based. If you would like to receive copies of the safeguards demonstrating an adequate level of data protection, please contact our data protection officer (see section 1 above).

3.4 Transfer of data to third countries

As explained in this privacy policy, we use various services, some of whose providers are based in so-called „non-adequate“ third countries (such as the USA), i.e. countries whose level of data protection, in the view of the European Commission, does not meet that of the European Union. Where this is the case and the European Commission has not adopted an adequacy decision (Article 45 of the GDPR) for these countries, we have taken measures to ensure an adequate level of data protection for any data transfers. These include, amongst other things, the use of the European Union’s standard contractual clauses or binding internal data protection policies.

Where this is not possible, we base the transfer of data on the exceptions set out in Article 49 of the GDPR, in particular your explicit consent or the necessity of the transfer for the performance of a contract.

Where a transfer to a third country is envisaged and there is no adequacy decision or suitable safeguards in place, it is possible – and there is a risk – that authorities in the relevant third country (e.g. intelligence services) may gain access to the transferred data in order to collect and analyse it. Furthermore, it may not be possible to guarantee that your rights as a data subject can be enforced.

When your consent is sought via the cookie banner, you may also be informed of this via the privacy policy.

4. Data processing when using our careers portal

You can contact us via our Careers portal apply for vacancies. The purpose of collecting this data is to select candidates with a view to potentially entering into an employment relationship. We work with the service provider TalentLyft, Stubička ul. 50B, 10000, Zagreb, Croatia (hereinafter „Talentlyft“), whereby we have entered into a contract with TalentLyft for the processing of applications, in which it has been agreed that TalentLyft may only process the data in accordance with our instructions, that it must be stored securely and separately from other customer data, and that the data protection standards of the GDPR must be complied with.

Further information on data processing by TalentLyft can be found in the privacy policy athttps://help.talentlyft.com/en/articles/21992-privacy-policyvacys Policy | TalentLyf Help Centre (talentlyft.com). To apply directly to karriere@interzero.at In particular, we require and process the following data: first name and surname, email address, telephone number, postal address, application documents (e.g. certificates, CV), earliest possible start date and salary expectations.

The legal basis for the processing of your application documents is Article 6(1)(b) of the GDPR.

5. Retention period

Unless otherwise stated in this privacy policy, we will only store and use your data for as long as is necessary to fulfil our contractual or legal obligations or for the purposes for which the data was collected.

We will then delete the data without delay, unless we still require the data until the expiry of the statutory limitation period for the purposes of providing evidence in civil law claims or due to statutory retention obligations; this may be for up to 30 years.

For tax reasons, we retain documents and personal data relating to contractual relationships for a period of 10 years.

Data relating to applicants who are not recruited will be deleted seven months after the recruitment process has been completed, unless consent has been given for the data to be retained on file. Our internal data protection policy for employees applies to staff, and details of this policy may be requested during the recruitment process.

The legal basis for this data processing, carried out for the purposes of complying with statutory documentation and retention obligations, is Article 6(1)(c) of the GDPR.

6. Your rights

To exercise your statutory rights as a data subject, as described below, you may contact our data protection officer at any time (see section 1):

  1. You have the Right to confidentiality the personal data relating to you, provided there is a legitimate interest in doing so.
  2. You have the right at any time to, Information on data processing to request that we provide you with your personal data. When providing this information, we will explain how your data is processed and provide you with an overview of the personal data processed about you.
  3. If any data we hold is incorrect or out of date, you have the right to have that data correct or complete to let.
  4. You can also use the Deletion (at most one Restriction of processing) of your data, in particular where the data is no longer necessary, where consent has been withdrawn and there is no other legal basis for processing, where the processing has been unlawful, or where erasure is necessary to comply with a legal obligation. Under the GDPR, the right to erasure is restricted where the data is required to defend legal claims or where processing is necessary to comply with a legal obligation.
  5. You may also object to the processing of your data restrict ; this serves to restrict the use of data without deleting it.
  6. You are entitled to the Right to data portability that is to say, we will provide you with a digital copy of the personal data you have supplied, upon request. This refers to the right to receive data in a structured, commonly used and machine-readable format, and to transmit this data to another data controller for processing. This right applies only where the processing is based on consent or a contract and is carried out by automated means.
  7. Where we process your data on the basis of legitimate interests in accordance with Article 6(1)(f) of the GDPR, you have the right, under Article 21 of the GDPR, to, Objection to object to the processing of your data, provided there are grounds for doing so arising from your particular circumstances. In the case of direct marketing, you have a general right to object, which we will honour even without you giving any reasons.

You also have the right to lodge a complaint with a data protection supervisory authority. The data protection authority responsible for Austria is the

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna

7. Withdrawal of consent

If you wish to exercise your right of withdrawal, simply send an informal notification to the contact details set out in point 1 above.

In accordance with Article 7(2) of the GDPR, you have the right to withdraw your consent at any time. As a result, we will no longer continue to process your data on the basis of that consent in future. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of that consent up until the time of withdrawal.

8. Data security

We maintain appropriate technical and organisational measures for our online services to ensure data security, in particular to protect your data from risks associated with data transmission and from unauthorised access by third parties. These measures are regularly updated in line with the current state of the art. To secure the personal data you provide on our website, we use Transport Layer Security (TLS), which encrypts the information you enter.

9. Changes to this privacy policy

We occasionally update this privacy policy, for example when we make changes to our website or when there are changes to legal or regulatory requirements. We publish the latest version at [https://wastemanagementplattform.interzero.at/datenschutzerklaerung/]