Information about the collection and use of personal data
We are informing you in the following about how TÜV AUSTRIA Academy collects and uses personal data. Specifically:
A) Data processing for the purposes of transacting business,
B) Data processing when our website (https://www.tuv-akademie.at) and the services offered through our website are used,
C) Your rights.
Personal data is all data which may be used to identify you personally, e.g. name, address, email addresses, user behavior.
The entity responsible in accordance with Article 4 (7) EU General Data Protection Regulation (EU-GDPR) is TÜV AUSTRIA AKADEMIE GMBH, TÜV AUSTRIA-Platz 1, 2345 Brunn am Gebirge.
Data-protection inquiries may be sent to us by post addressed to TÜV AUSTRIA AKADEMIE GMBH, TÜV AUSTRIA-Platz 1, 2345 Brunn am Gebirge, or by email addressed to akademie(at)tuv(dot)at.
A) Data processing for the purposes of transacting business
TÜV AUSTRIA AKADEMIE GMBH uses your data to process booked services/purchased products. It may be necessary to this end to transfer your personal data to partners we might be cooperating with. Data processing is (unless explicitly stated otherwise) essential to the conclusion of contracts (Article 6 (1) (b) GDPR). It may be necessary, depending on the type of course booked, to forward the data that is required to prepare course-completion documents (e.g. attestation of competence, certificate, etc.) to external bodies (e.g. certification bodies). Once the service has been provided, we will verify whether we still need your data and whether legal retention obligations (e.g. Article 212 Unternehmensgesetzbuch (UGB – Austrian Corporation Code) or Articles 207f Bundesabgabenordnung (BAO – Federal Fiscal Code) in the current version) prevent us from deleting it.
Data processing for direct-marketing purposes
Your name, address and email address will further be used for direct-marketing purposes (mailings by post or email) that are based on a legitimate interest (Article 6 (1) (f) GDPR) and consequently provided to printers and dispatch-handling companies to enable deliveries by post to be made. Your data will be processed on the basis of a legitimate interest (Article 6 (1) (f) GDPR) for the purposes of customer surveys and invitations to events and forwarded to TÜV Österreich, TÜV AUSTRIA-Platz 1, 2345 Brunn am Gebirge, which carries out the data processing on behalf of TÜV AUSTRIA Academy. The provision of your data for the purposes of direct marketing, customer surveys and invitations to events is neither required by law or contracts nor necessary for the conclusion of any future contracts.
Please notify us by post addressed to TÜV AUSTRIA AKADEMIE GMBH, TÜV AUSTRIA-Platz 1, 2345 Brunn am Gebirge, or by email addressed to akademie(at)tuv(dot)at if you wish to object to the use of your personal data for the purposes of direct marketing, customer surveys and/or invitations to events.
Photos are taken at our events, some of which are subsequently published on our website as well as on Facebook, LinkedIn, Xing and Twitter. This is done for the purposes of public relations and of presenting our activities with the aim of raising our profile.
This data is used on the basis of a legitimate interest (Article 6 (1) (f) GDPR and Articles 12, 13 Datenschutzgesetz (DSG – Data Protection Act). The production and use of the photos does not excessively interfere with the rights and freedoms of the participants at the event as they will be entering public spaces and will be made aware of the production and use of the photos in the run-up to and during the event. Care is also taken both in the production and publication of the photos that no legitimate interests of persons depicted are violated. In particular, only those photos that generally depict the events or scenery of an event will be published, without highlighting concrete persons or showing individual persons or small groups. We will refrain from further processing by means of suitable measures if the rights and freedoms of a person depicted should be infringed for reasons that are deemed particularly worthy of consideration.
Photos of individuals or small groups will only be used for the purposes of public relations and the presentation of our activities if the persons depicted have provided their consent to this end. This consent may be revoked at any time at akademie(at)tuv(dot)at.
Photos of the respective event will no longer be used for public-relations purposes or to present our activities after a period of two years. They will continue to be kept at TÜV AUSTRIA AKADEMIE GMBH’s archive for documentation purposes after these two years and will be deleted after a period of ten years.
If you wish to object to the production and publication of photos for the purposes of public relations and the presentation of our activities, please notify us by post addressed to TÜV AUSTRIA AKADEMIE GMBH, TÜV AUSTRIA-Platz 1, 2345 Brunn am Gebirge, or by email addressed to akademie(at)tuv(dot)at.
B) Data processing when our website and the services offered through our website are used
Collection of personal data when our website is visited
Our website will automatically collect a range of general data and information and transfer it to our server and store it in log files every time you view it. We will collect the following data when you wish to view our website:
(1) Information about the browser type and version used,
(2) The operating system used by the system accessing the website,
(3) The Internet page from which the system that is accessing the website came (so-called referrer),
(4) The subpages that a system accessing the website visits,
(5) The date and time of access to the website,
(6) An Internet protocol address (IP address),
(7) The Internet service provider of the accessing system and
(8) Other similar data and information used to avert dangers in the event of attacks on our information technology systems.
TÜV AUSTRIA Academy does not draw any conclusions about your identity when using this general data and information. Rather, this information is required in order to
(1) deliver the contents of our website correctly,
(2) ensure the long-term functionality of our information technology systems and the technology of our website.
This data and information that is collected anonymously is therefore analyzed both statistically and with the aim of increasing data protection and data security in order to ultimately ensure an optimum level of protection for the personal data that we process. The anonymous data from the server log files is stored separately from all the personal data provided by the person concerned.
It is possible to subscribe to a free newsletter through our website. The data that is entered into the form when users register for the newsletter is transferred to us. This data includes:
— Mandatory fields: salutation, first name, last name, email address, interest
— Optional: title, post-nominal title, company, department, function within the company, street, zip code, city, country
Your consent for sending you information about services, products, news and events by TÜV AUSTRIA AKADEMIE GMBH and companies within the TÜV AUSTRIA Group will be obtained within the framework of the registration process to allow data to be processed.
The so-called double opt-in method is used to process newsletter subscriptions. This means that an email will be sent to the email address you provided during registration that will request you to confirm that you wish to receive the newsletter. The information you provided will be automatically deleted if you do not confirm your registration. Your IP addresses and times of registration and confirmation will also be stored. This method is intended to verify your registration and, if necessary, to clear up any possible misuse of your personal data.
No data will be forwarded to third parties outside TÜV AUSTRIA Academy in connection with data processed for newsletter subscriptions. The data will be used exclusively for sending out newsletters and direct mailings. It is possible to revoke consent at any time by contacting TÜV AUSTRIA AKADEMIE GMBH at this email address: akademie(at)tuv(dot)at.
The data will be deleted as soon as it is no longer required for the purpose it was collected for. Your email address will accordingly be stored for as long as the subscription to the newsletter is active. The newsletter subscription may be canceled at any time by the respective user. A corresponding link is provided to this end in every newsletter.
A contact form, which may be used to contact us by electronic means, may also be found on our website. The data you enter into the form when this option is utilized will be transferred to us and stored. This data includes:
• Company/private inquiry
• First name
• Last name
• Email address
• Telephone number
• Inquiry text
We will store the data you provide when you use the contact form to contact us for the purposes of responding to your inquiries. We delete the data generated in this way when retention is no longer necessary or restrict the processing of such data if we are subject to legal retention requirements.
Cookies will also be stored on your computer in addition to the data already set out above when you use the website. Cookies are small text files that are assigned to the browser you are using and stored on your hard drive through which certain information is directed to the location that has set the cookie (here specifically TÜV AUSTRIA AKADEMIE GMBH). Cookies are unable to execute programs or transfer viruses to your computer. They are used to make the Internet presentation more user-friendly and effective overall.
a. This website uses the following types of cookie, the scope and functionality of which are explained below:
a. Transient cookies (see b)
b. Transient cookies are automatically deleted when you exit your browser. These particularly include session cookies. These save a so-called session ID to your computer that may be used to assign various requests from your browser to the shared session. They make it possible to recognize your computer when you return to our website. Session cookies are deleted when you log out or close your browser.
c. You may configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. We would, however, like to draw your attention to the fact that you may not be able to use all the functions of our website if you do so.
Using our webshop
(1) When orders are placed through our webshop, it is necessary for contracts to be concluded that you provide your personal data which we need to process your order. Mandatory information required for the execution of contracts is identified separately, additional details are voluntary. We process the data that you provide for the purposes of executing your order. We may forward your payment details to our principal bank to this end. The legal basis for this is Article 6 (1) (1) (b) GDPR.
(2) You may create a customer account on a voluntary basis to enable us to retain your data for future purchases. The data you provide when you create an account will be stored in revocable fashion. You may delete all other data, including your user account, in the customer section at any time.
(3) Corporate and tax laws oblige us to retain your address, payment and order data for the duration set out in the statutory retention requirements.
(4) Order processes are encrypted using TLS technology to prevent unauthorized access to your personal data, in particular financial data, by third parties.
Use of Google Analytics
(1) This website uses Google Analytics, a web analysis service provided by Google Inc. (‘Google’). Google Analytics uses so-called ‘cookies’, which are text files that are placed on your computer to help the website analyze how you use the site. The information generated by the cookie about your use of this website will generally be transferred to and stored by Google on servers in the United States. By enabling IP anonymization on this website, however, Google will truncate your IP address within member states of the European Union or other states party to the Agreement on the European Economic Area before transferring it. The full IP address will only be transferred to a Google server in the USA and truncated there in exceptional cases. The IP address that your browser transfers within the scope of Google Analytics will not be combined with other data held by Google.
(2) You may refuse to allow cookies to be placed on your computer by selecting the appropriate settings in your browser; we would, however, like to draw your attention to the fact that you may not be able to use the full functionality of this website if you do so. It is also possible to prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in that is available from the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
(3) This website uses Google Analytics with the ‘_anonymizeIp()’ extension. This means that only truncated IP addresses are processed further thus ruling out the possibility of users being identified. If the data collected about you makes reference to you as an individual, it is excluded immediately and the personal data is therefore deleted directly.
(4) This website uses Google Analytics for the purposes of analyzing and regularly improving the use of the website. The statistics obtained may be used to improve the presentation and make it more interesting to you as a user. For those exceptions where personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Article 6 (1) (1) (f) GDPR.
Use of Google Remarketing
(1) TÜV AUSTRIA uses the Google Remarketing Technology, a service provided by Google Inc. (‘Google’). This is a procedure that we use to get in touch with you again. The application enables us to present our advertisements to you when you continue using the Internet after you have left our website. This is achieved with the help of cookies that are stored in your browser and that are used by Google to record and analyze your usage patterns when you visit other websites. It allows Google to establish when you previously visited our website. Google says that it does not combine the data collected during the course of remarketing with any of your personal data that it may have already stored. In particular, Google says that it employs pseudonymization for remarketing.
Users may opt out of the remarketing functionality by changing the display preferences for Google Remarketing Tags or disabling remarketing. It is also alternatively possible for users to disable the use of third-party cookies by using the Disable Page provided by the Network Advertising Initiative.
Use of social media plug-ins
(1) We currently use the following social media plug-ins: Facebook, Twitter, Xing and LinkedIn. We use the so-called two-click solution to this end. This means that no personal data will initially be forwarded to the plug-in providers when you visit our site. You will be able to recognize the plug-in provider by the mark on the box above its initial letter or the logo. We provide you with the option to communicate directly with the plug-in provider by using the button. The plug-in provider will only receive the information that you have viewed the corresponding website of our online presentation when you click the marked field and thereby activate it. The data mentioned under § 3 will also be transferred. Activating the plug-in will therefore further result in the transfer of your personal data to the respective plug-in provider where it will also be stored (in the case of US providers in the USA).
(2) The plug-ins allow you to interact with social networks and other users. We are not able to influence the collected data and data-processing operations nor do we possess any knowledge of the full scope of what data is collected, what it is processed for or for how long it is retained. We also possess no information about the deletion of the collected data by the plug-in provider.
(3) The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there. The data we collect about you will be directly assigned to your account existing with the plug-in provider when you are logged in with the plug-in provider. If you press the activated button and, for instance, link the page in your user account, the plug-in provider will also store the information and will communicate it publicly to your contacts. We recommend that you regularly log out after using social networks, especially before activating the button, as logging out will enable you prevent this information from being assigned to your profile with the plug-in provider.
(4) More information about the purpose and scope of the data collected and processed by the plug-in provider is set out in the following data privacy statements by these providers. That is where you will also find more information about your rights concerning these plug-ins and setting options to protect your privacy.
(5) Addresses for the respective plug-in providers and URL with their data protection information:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information about data collection: http://www.facebook.com/help/186325668085084 , http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
b) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
c) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
d) Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.
Incorporation of YouTube videos
(1) We have incorporated YouTube videos into our online presentation; these are stored at http://www.YouTube.com and can be played directly from our website. These are all incorporated within the ‘extended data protection mode’, i.e. no data about you as a user will be transferred to YouTube if you do not play the videos. The data specified in Section 2 will only be transferred when you play videos. We are not able to influence this transfer of data.
(2) When you visit the website, YouTube will be provided with the information that you have accessed the corresponding subpage on our website. The data mentioned under § 3 will also be transferred. The data will be transferred regardless of whether YouTube provides a user account that you have logged into or whether no user account exists. The data will be directly associated with your account should you have logged into Google. You must log out before activating the button if you do not want this information to be associated with your YouTube profile.
(3) More information about the purpose and scope of the data collected and its processing by YouTube is set out in the data privacy statement. That is where you will also find more information about your rights and setting options to protect your privacy: https://policies.google.com/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Incorporation of Google Maps
(1) We use Google Maps services on this website. The service enables us to display interactive maps directly on the website and makes it possible for you to conveniently use the map function.
(2) Google will be provided with the information that you have accessed the corresponding subpage on our website when you visit the website. The data mentioned under ‘Collection of personal data when our website is visited’ will also be transferred. The data will be transferred regardless of whether Google provides a user account that you have logged into or whether no user account exists. The data will be directly associated with your account should you have logged into Google. You must log out before activating the button if you do not want this information to be associated with your Google profile. Google stores your data as user profiles and utilizes it for the purposes of advertising, market research and/or the demand-oriented design of its website. Such analyses are carried out in particular (even when users have not logged in) in order to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You are entitled to object to the creation of these user profiles and you must contact Google to assert this right.
(3) More information about the purpose and scope of the data collected and processed by the plug-in provider is contained in the provider’s data privacy statements. That is where you will also find more information about your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Use of Google Ads Conversion
(1) We use Google Ads services to draw attention to our attractive offers with the help of advertising tools (so-called Google Ads) on external websites. We will be able to determine how successful the individual advertising measures have been using the data gained from the advertising campaigns. By doing so, we are pursuing the interest of presenting advertising to you that is of interest to you, of making our website more interesting to you and of achieving a fair calculation of advertising costs.
(2) These advertising tools are delivered by Google through so-called ‘Ad Servers’. We use Ad Server Cookies to this end that may be used to measure certain parameters to determine success, e.g. the display of advertisements or clicks by users. Google Ads will store a cookie on your PC when you access our website through a Google advertisement. These cookies will usually expire after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values with this cookie.
(3) These cookies enable Google to recognize your Internet browser. If users visit certain pages of an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer may recognize that the user clicked on the ad and was directed to that page. Each Ads customer is assigned a different cookie. Cookies cannot therefore be traced via the websites of Ads customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. These analyses enable us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools. In particular, we cannot identify the users on the basis of the information provided.
(4) The marketing tools used cause your browser to automatically establish a direct connection to the Google server. We are not able to influence the scope and further use of the data collected by Google through the use of this tool and therefore are providing the following information to the best of our knowledge: The incorporation of Ads Conversion means that Google receives the information that you have viewed the relevant part of our website or clicked on one of our advertisements. Google will be able to assign the visit to your account if you have registered with a Google service. Even if you are not registered with Google or have not logged in, it is possible that the provider may determine and store your IP address.
(5) You may prevent participation in this tracking process in a number of ways: a) by setting your browser software accordingly, in particular by suppressing third-party cookies so that you will not receive any third-party advertisements; b) by disabling conversion-tracking cookies by setting your browser to block cookies from the ‘www.googleadservices.com’ domain, https://www.google.de/settings/ads, although this setting will be deleted when you delete your cookies; c) by disabling the interest-based advertisements by the providers that are part of the ‘About Ads’ self-regulatory campaign via the link http://www.aboutads.info/choices, although this setting will be deleted when you delete your cookies; d) by permanently disabling it in your Firefox, Internet Explorer or Google Chrome browsers using the link http://www.google.com/settings/ads/plugin. We would, however, like to draw your attention to the fact that you may not be able to use all the functions of our website if you do so.
(6) The legal basis for the processing of your data is Article 6 (1) (1) (f) GDPR. More information about data protection at Google is available at: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
C) Your rights
(1) You may assert the following rights regarding your personal data against us:
• Right to information,
• Right to rectification or deletion,
• Right to restriction of processing,
• Right to object to processing,
• Right to data transferability.
If you have any questions regarding the collection, processing or use of your personal data and in the event that you require information about or the correction, blocking or deletion of data or wish to revoke any consent provided or make an objection to a specific use of data, please contact akademie(at)tuv(dot)at.
(2) You are also entitled to make a complaint about how we process your personal data to a data protection supervisory authority.