Privacy Policy in accordance with Art. 13 GDPR
All personal designations are always gender-neutral and serve solely for easier readability.
1 Data Controller
Controller according to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is
Maschinenfabrik Liezen und Gießerei Ges.m.b.H.
Werkstraße 5
8940 Liezen, Austria
office@mfl.at
Phone: +43 3612/270-0
To keep potential security gaps as minimal as possible, the website uses SSL or TLS encryption. However, we point out that internet-based data transmission has security gaps and complete protection against access by third parties is therefore impossible.
The use of our site is possible without providing personal data. Different regulations may apply for the use of individual services on our site, which will be explained separately in this case below. The following regulations inform you about the type, scope and purpose of the collection, use and processing of personal data by the controller.
2 Data Processing of Persons in a Business Environment
We process data that various persons provide to us through their own information, for example as part of an inquiry by email, for the initiation and conclusion of a contract or a business relationship. Furthermore, we process data of persons who participate in events or attend training courses.
2.1 Affected Persons
From prospective customers we process the following data: Company, name of contact person and professional contact and address data.
From customers we process the following data: Company, title and names of contact persons, professional address data and contact data, bank details, contract data including creditworthiness data.
From suppliers and business partners we process the following data: Company, title and names of contact persons, professional address data and contact data, bank details, contract data.
2.2 Data Transfer
Personal data is only passed on to third parties by us if this is necessary for the purpose of contract processing and fulfillment or is required by legal regulations.
2.3 Data Retention/Deletion
We delete data as soon as storage is no longer required, or statutory retention periods, such as those under tax law, have expired. If the basis for processing is consent, we restrict processing or delete the data upon withdrawal of consent – unless legal regulations oppose this.
2.4 Contact by Email
When you contact us by email, the data you provide is stored by us on the basis of your consent in order to answer your questions. We delete the data arising in this context after the processing is no longer necessary, or restrict processing if statutory retention obligations exist.
2.5 Legal Bases
The legal basis for data processing is
- contract initiation and performance according to Art. 6 para. 1 lit. b GDPR.
- legal obligations according to Art. 6 para. 1 lit. c GDPR (e.g., legally required retention and documentation obligations).
- legitimate interests of our company within the meaning of Art. 6 para. 1 lit. f GDPR (e.g., statistical evaluations).
- Art. 6 para. 1 lit. a GDPR when obtaining consent (e.g., for processing image data or for advertising purposes).
3 Data Processing when Contacting us via our Website
3.1 Contact
If you have asked us to contact you via our web form or have sent us a message, we store from you the data required for contact. This includes your first and last name, your email address, your phone number and the data you provide to us in the contact form. We delete the data as soon as storage is no longer necessary or you object to the processing.
Legal basis: Art. 6 para. 1 lit. a GDPR
3.2 Newsletter
You have the option to subscribe to our newsletter. For this we need your email address. You can cancel the receipt of the newsletter at any time. After unsubscribing, we will no longer use your data for newsletter distribution. If we are not in any business relationship with you and are not subject to any statutory retention obligations, your data will be deleted after unsubscribing from the newsletter.
Legal basis: Art. 6 para. 1 lit. a GDPR
3.3 Applicants
If you submit your application documents to us, we process the personal data contained therein as well as your CV and certificates for the purpose of personnel selection and filling positions. In case of rejection, we delete your documents 7 months after transmitting the rejection to you.
Legal basis: Art. 6 para. 1 lit. b GDPR
If you consent to being kept on file for contact at a later date, we will contact you with a separate request to submit a consent. If you explicitly grant us this consent, we store your consent. If no further opportunity for filling a position arises within one year, we delete all your applicant data one year after transmission of the consent to us.
Legal basis: Art. 6 para. 1 lit. a GDPR
4 Data Processing when Visiting our Website
4.1 Informational Use of the Website
When using the website for informational purposes only, we only collect the personal data that your browser transmits to our server. When you view our website, we collect at most the data that is technically necessary for us to display our website to you and to ensure stability and security:
- IP address
- Date and time of the request
- Time zone difference to Coordinated Universal Time (UTC)
- Content of the request (specific page)
- Access status/HTTP status code
- Website from which the request comes
- Browser
- Operating system and its interface
- Language and version of the browser software.
Legal basis: Art. 6 para. 1 lit. f GDPR
4.2 Cookies
In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the entity that sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your computer.
Through the cookie, you can be recognized when visiting the website without having to re-enter data that you have already entered before.
The information contained in the cookies is used, for example, to determine whether you are logged in, or which data you have already entered, or to recognize you as a user when a connection is established between our web server and your browser. Most web browsers automatically accept cookies.
By using our websites, you agree to the use of these cookies, provided cookies are accepted according to your browser settings.
4.2.1 Transient Cookies
Transient cookies are automatically deleted when you close the browser. These include in particular session cookies. These store a so-called session ID, which can be used to assign various requests from your browser to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
4.2.2 Persistent Cookies
Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
4.2.3 Third-Party Cookies
These come from providers other than the operator of the website. They can be used, for example, to collect information for advertising, customized content and web statistics.
4.2.4 Browser
Most browsers are set by default to accept all cookies. You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. When disabling cookies, the functionality of our website may be limited.
You can delete cookies stored on your PC at any time by deleting the temporary internet files.
Legal basis: Art. 6 para. 1 lit. f GDPR (for technical cookies), Art. 6 para. 1 lit. a GDPR (for all other cookies)
4.3 Data Processing in the USA
It cannot be ruled out that personal data may be transferred to the USA when visiting our website. If this is the case, we point this out at a separate point in this privacy policy.
The GDPR requires for a data transfer to a third country or an international organization so-called appropriate safeguards according to Art. 46 GDPR. Such safeguards do not exist for the USA.
Possible risks that currently cannot be excluded for you as a data subject in connection with the aforementioned information are in particular:
- Your personal data could possibly be passed on by the respective service provider to other third parties (e.g., US authorities) beyond the actual purpose of order fulfillment.
- You may not be able to sustainably assert or enforce your right to information against the respective service provider.
- There may be a higher probability that incorrect data processing may occur, as the technical organizational measures to protect personal data do not fully meet the requirements of the GDPR in terms of quantity and quality.
By consenting to the processing of (advertising and marketing) cookies, you explicitly consent to the data transfer to the USA. You can delete cookies stored on your PC at any time by deleting the temporary internet files.
Legal basis: Art. 6 para. 1 lit. a GDPR
5 Data Processing when using Facebook-Connect
To log in to the website, the Facebook profile can also be used via Facebook Connect of the social network Facebook (Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland).
By clicking on the designated button, a pop-up opens in the design of the Facebook login mask. Here you enter your Facebook login data, agree to the data transfer and are thus logged in on our website. If you are already logged in to Facebook, you do not need to log in on our website. The connection between Facebook and our website takes place automatically. The consent to access certain data on Facebook must still be set.
We have concluded a contract with Facebook Ireland, nevertheless it may happen that Facebook Ireland transfers personal data to Facebook USA.
By using this service, a transfer of personal data to the USA takes place or such cannot be excluded! – For more details see section 4.3 of this declaration.
Further information can be found in Facebook’s data policy at https://de-de.facebook.com/policy.php.
Specific information about Facebook Pixels can be found at https://de-de.facebook.com/business/help/651294705016616.
Legal basis: Art. 6 para. 1 lit. a GDPR
6 Data Processing when using Google Services
We have concluded a contract with Google Ireland Limited („Google“), a company registered and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. Nevertheless, it may happen that data from Europe is transferred to the USA, over which we as a company have no influence.
By using this service, a transfer of personal data to the USA takes place or such cannot be excluded! – For more details see section 4.3 of this declaration.
Legal basis: Art. 6 para. 1 lit. a GDPR
6.1 Google Analytics
This website uses the function „Activation of IP anonymization“ (i.e., Google Analytics has been extended by the code „gat._anonymizeIp();“ to ensure anonymous collection of IP addresses (so-called IP masking)). This means that your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.
According to Google, Google will use the information collected to evaluate your use of the website, to compile reports on website activity and to provide other services related to website use and internet use to us. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. However, Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. You can prevent the storage of cookies by setting your browser software accordingly. However, we point out that in this case you may not be able to use all functions of the websites to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your anonymized IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link (https://tools.google.com/dlpage/gaoptout?hl=de).
Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or at https://support.google.com/analytics/answer/6004245?hl=de.
6.2 Google Analytics Conversion Tracking (Google Ads)
This website also uses Google Conversion Tracking. Google Ads sets a cookie on your computer if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Ads client’s website and the cookie has not yet expired, Google and the client can recognize that the user clicked on the ad and was redirected to this page. Each Ads client receives a different cookie. Cookies can therefore not be tracked across Ads clients‘ websites. The information collected using the conversion cookie is used to create conversion statistics for Ads clients who have opted for conversion tracking. The Ads clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in the tracking procedure, you can also reject the setting of a cookie required for this – for example, via a browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain „www.googleadservices.com“. Google’s privacy policy can be found here.
If you use the SSL search, Google’s encrypted search function, the search terms are mostly not sent as part of the URL in the referrer URL. There are some exceptions, for example if you use certain, less common browsers. Further information on SSL search can be found here. Search queries or information in the referrer URL may also be viewed via Google Analytics or an Application Programming Interface (API). Advertisers may also receive information about the exact search terms that triggered a click on an ad. https://policies.google.com/faq?hl=de
6.3 Google Fonts
We use Google Fonts. The use of Google Fonts takes place without authentication and no cookies are sent to the Google Fonts API. If you have an account with Google, none of your Google account data will be transmitted to Google while using Google Fonts. Google only records the use of CSS and the fonts used and stores this data securely. More on these and other questions can be found at https://developers.google.com/fonts/faq.
Which data Google collects and for what purpose this data is used can be read at https://www.google.com/intl/de/policies/privacy/.
6.4 Google APIS /AJAX and JQUERY
To optimize loading speed, usability and indexing of our website, we use JavaScript technologies as well as corresponding program libraries and CDNs (Content Delivery Networks) from external providers, in particular the JavaScript library jQuery from the jQuery Foundation, the Google APIs programming interface and the Google AJAX Search API from Google. By calling our website, these external providers may receive personal information about your visit to our website, in particular through the transmission of your IP address. Processing of this data outside the EU is possible. You can prevent this by installing a JavaScript blocker or deactivating Java-Script in your browser. Deactivating or blocking JavaScript may result in functional restrictions on websites with Java-Script technologies. Further information on data processing by Google can be found in Google’s privacy notices, currently available at: https://www.google.de/intl/de/policies/privacy/ and in the case of jQuery on the pages of the JS Foundation at: js.foundation/about/governance/privacy-policy.
6.5 Google+ Button
We have integrated the +1 button from Google Plus on our website. When you visit our website, your browser establishes a connection with Google’s server. If you do not click on the button, then according to Google no personal data is processed. Only if you are logged into your Google Plus account will personal data be processed. If you want to prevent data processing by Google Plus, you can log out of Google Plus before visiting our website.
6.6 Google Gstatic
Gstatic is a domain used by Google to load static content into a different domain name to reduce bandwidth usage and increase network performance for the end user.
6.7 Google Maps
On this website we use the offer of Google Maps. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the data already mentioned under the point „Informational use of the website“ is transmitted. This takes place regardless of whether Google provides a user account that you are logged in with or whether there is no user account. If you are logged in to Google, your data will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy.
6.8 Google Remarketing
We use the Google Remarketing service on our website. With Google Remarketing, ads can be placed for users who have already visited our website in the past. Within the Google advertising network, ads tailored to their interests can thus be displayed on our page. Google Remarketing uses cookies for this evaluation.
6.9 Google Tag Manager
To detect your user behavior, we use so-called Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
More precise information can be found here: https://www.google.com/intl/de/tagmanager/faq.html.
Legal basis: Art. 6 para. 1 lit. a GDPR
7 Data Processing when using Hotjar
We use Hotjar, an analysis software from Hotjar Ltd. („Hotjar“) (http://www.hotjar.com, Malta, Europe), to better understand the needs of our users and to optimize the offer on this website. Using Hotjar’s technology, we gain a better understanding of our users‘ experiences (e.g., how much time users spend on which pages, which links they click, what they like and don’t like, etc.) and this helps us to align our offer with user feedback. Hotjar works with cookies and other technologies to collect information about the behavior of our users and their devices (in particular IP address of the device (only collected and stored in anonymized form), screen size, device type (Unique Device Identifiers), information about the browser used, location (only country), preferred language for displaying our website). Hotjar stores this information in a pseudonymized user profile. The information is not used by Hotjar or by us to identify individual users or merged with other data about individual users. Further information can be found in Hotjar’s privacy policy here. You can prevent the collection of data by Hotjar by clicking on the following link and following the instructions there: https://www.hotjar.com/opt-out.
https://www.hotjar.com/legal/policies/privacy (the link to the privacy policy mentioned earlier in the text)
Legal basis: Art. 6 para. 1 lit. a GDPR
8 Data Processing when using Instagram
On our website we use functions of the social media network Instagram of the company Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA.
By using this service, a transfer of personal data to the USA takes place or such cannot be excluded! – For more details see section 4.3 of this declaration.
With the functions for embedding Instagram content (Embed function) we can display images and videos. By calling pages that use such functions, data (IP address, browser data, date, time, cookies) is transmitted to Instagram, stored and evaluated. If you are logged into your Instagram account while surfing on our website, this data will be assigned to your personal account. The privacy policies, what information Instagram collects and how they use it can be found at https://help.instagram.com/519522125107875.
Legal basis: Art. 6 para. 1 lit. a GDPR
9 Data Processing when using MyFonts
We use MyFonts Counter on our website, a web analysis service from MyFonts Inc., 500 Unicorn Park Drive, Woburn, MA 01801, USA.
By using this service, a transfer of personal data to the USA takes place or such cannot be excluded! – For more details see section 4.3 of this declaration.
Tracking of the number of visits to the website is carried out and transmitted to MyFonts. This serves statistical purposes. Only anonymized data is collected. The data is passed on by activating Java-Script code in your browser. If you want to prevent this, you can install a Java-Script blocker.
Further information can be found in MyFonts‘ privacy policy at https://www.myfonts.com/legal/website-use-privacy-policy.
Legal basis: Art. 6 para. 1 lit. a GDPR
10 Data Processing when using Pinterest
On our page we use social plugins of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA („Pinterest“). In the European area, this is Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
By using this service, a transfer of personal data to the USA takes place or such cannot be excluded! – For more details see section 4.3 of this declaration.
When you call up a page that contains such a plugin, your browser establishes a direct connection to Pinterest’s servers. The plugin transmits log data to Pinterest’s server. This log data may include your IP address, the address of the websites visited that also contain Pinterest functions, the type and settings of the browser, the date and time of the request, your use of Pinterest and cookies.
Further information on the purpose, scope and further processing and use of the data by Pinterest as well as your rights and options for protecting your privacy can be found in Pinterest’s privacy notices: https://about.pinterest.com/de/privacy-policy
Legal basis: Art. 6 para. 1 lit. a GDPR
11 Data Processing when using Server Logfiles
To optimize this website in terms of system performance, user-friendliness and providing useful information about our services, the website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes the Internet Protocol address (IP address) of the requesting computer (including mobile devices), browser and language setting, operating system, referrer URL, your Internet service provider and date/time.
A combination of this data with personal data sources does not take place. We reserve the right to check this data retrospectively if we become aware of concrete indications of unlawful use, and to pass the data on to law enforcement authorities in the event of a hacking attack. There is no further transfer to third parties.
Legal basis: Art. 6 para. 1 lit. f GDPR
12 Data Processing when using YouTube
When you watch one of our YouTube videos, a connection to YouTube’s servers is established. YouTube is informed which pages you visit. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
By using this service, a transfer of personal data to the USA takes place or such cannot be excluded! – For more details see section 4.3 of this declaration.
Further information on data protection at „YouTube“ can be found in the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/
Legal basis: Art. 6 para. 1 lit. a GDPR
13 Data Processing when using hCaptcha
We use hCaptcha from the company Intuition Machines, Inc. based in the USA on our website. This service allows to distinguish whether a contact request comes from a natural person or is automated by means of a program.
By using this service, a transfer of personal data to the USA takes place or such cannot be excluded! – The GDPR requires for a data transfer to a third country or an international organization so-called appropriate safeguards according to Art. 46 GDPR. Such safeguards do not currently exist for the USA, as US intelligence services in particular can access your data without informing you in advance. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in case C-311/18. For more details see section 4.3 of this declaration.
Further information can be found in hCaptcha’s privacy policy: https://www.hcaptcha.com/privacy.
Legal basis for data processing: Consent according to Art. 49 para. 1 lit. a in conjunction with Art. 6 para. 1 lit. a GDPR
14 Data Processing when using Leadinfo
We use the lead generation service from Leadinfo B.V., Rotterdam, Netherlands, which recognizes visits from companies to our website based on IP addresses and displays associated publicly accessible information such as company names or addresses. In addition, Leadinfo places two first-party cookies to create transparency about how our visitors use our website, and the tool processes domains from the provided form inputs (e.g., „leadinfo.com„) to correlate IP addresses with companies and improve its services. Further information can be found at www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. In case of an opt-out, your data will no longer be used by Leadinfo.
15 Your Rights
You have the following rights with regard to your personal data:
- Right to information, correction and deletion
- Right to restriction of processing
- Right to object to processing
- Right to data portability
Please send your requests and concerns by email to office@mfl.at or contact us using the contact details provided.
If you believe that we have violated Austrian or European data protection law in the processing of your data and thereby infringed your rights, we ask you to contact us in order to clarify any questions.
You also have the right to complain to the supervisory authority, which is the Austrian Data Protection Authority:
Austrian Data Protection Authority, Barichgasse 40 – 42, 1030 Vienna, Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
16 Changes to this Privacy Policy
We reserve the right to make adjustments to our privacy policy from time to time. All changes to the privacy policy will be published by us on this page. Please observe the respective current version of our privacy policy.