Privacy Policy
Status: 03/2023
Privacy Policy
The protection of your privacy when processing personal data is important to us. Therefore, we process your data in strict compliance with applicable national and European data protection laws. In the following we provide information about how we process personal data.
1. Controller
Flowtec Industrietechnik GmbH
Stattegger Strasse 179, 8046 Graz
Telephone: +43 316 697069-0
Fax: +43 316 697069-9
E-Mail: info@flowtec.at
2. General information about our privacy policy
We store and process personal data to manage our business processes.
2.1 Storage and processing of personal data
Processing of data of our customers, suppliers and other contractual parties
We process personal data of our customers, suppliers and other contractual partners for the purposes of order fulfilment, accounting, complaint processing, and customer service. Processed data include company data as well as data of contact persons (e.g. company name, address, telephone number, fax, e-mail address, VAT number, banking accounts, inquiries, order data, as well as name, position, e-mail address, and telephone number of contact persons). In addition, generated text documents such as correspondence, order confirmations etc. are stored to provide better customer service and for traceability reasons.
Processing of data in case of inquiries
If you contact us or one of our employees (via e-mail, telephone or in person) for a purchase request or any other inquiry, we may collect your personal data, such as name, address, telephone number, e-mail address, and position. We process these data to provide best possible customer service by our employees. To provide an optimal handling of future inquiries, your data and inquiries will be stored for a limited amount of time, also if no contract is concluded. You have the right to obtain the erasure of your personal data at any time (see also section 4.3 „Right to erasure”).
Processing of data for marketing purposes
Your data will only be stored and processed for marketing purposes after your prior consent or if a legal permission exists (e.g. sending e-mails to customers for purposes of direct marketing according to the TKG).
Processing of data in application processes
When you apply to an open job advertisement, we will collect personal data, such as name, address, telephone number or other data that you have provided voluntarily. These data will be used exclusively for processing your application, and are only accessible to a limited group of persons at Flowtec. In some cases, we work together with external personnel services; however, in these cases you will be informed. If the application leads to an employment, these data may be used for pre-contractual measures (preparation of the employment contract) and stored in your personnel file for our standard organisational and administrative processes, in compliance with the relevant legal regulations.
2.2 Period of storage and erasure of data
We store data as long as legally necessary, as required to provide the service requested by you (incl. the handling of thereof resulting spare parts inquiries or claims), or as specified in the declaration of consent.
2.3 Disclosure of data to processors and third parties
If we disclose, transfer or provide access to any personal data to other persons and companies (processors or third parties), we will only do this based on a legal permission (when a data transfer is necessary, e.g. transferring data to payment service providers for the fulfilment of a contract), if you have given your consent, in case of a legal obligation, or on basis on our legitimate interests (e.g. if we work with other authorized persons, web hoster etc.). If we engage any third parties to process data on the basis of a data processing contract, we do this based on the DSGVO.
2.4 Security measures
We have implemented suitable technical and organizational security measures to protect your data from loss, destruction, manipulation, or access by unauthorized parties. Our security measures are subject to a continuous improvement process and our privacy policies are constantly revised. In the event of a protection violation of your personal data, we will inform you without delay and if possible within 72 hours, if the violation is likely to result in a high risk to your rights and freedoms.
3. Flowtec Website and Newsletter
By using this website, you consent to the storage and usage of data as described in this privacy policy.
3.1 Links to other Websites
Our website also contains links to other third-party websites. Flowtec is not responsible for the data protection measures or content of other websites.
3.2 Newsletter
We send out newsletters on a regular basis, to inform interested persons about product news, partner companies and events. You can subscribe to our newsletter free of charge. We send these newsletters only after your prior consent or in case of a legal permission (e.g. sending e-mails to customers for purposes of direct marketing according to the TKG). The data that are transmitted for the newsletter subscription (title, name, e-mail address) are only used for sending our newsletter. These data are stored as long as the newsletter is sent out and no revocation takes place. You can unsubscribe from the newsletter via unsubscribe link in every newsletter or via e-mail to info@flowtec.at at any time.
The newsletter is sent via the e-mail marketing service provider “MailChimp”, a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA (hereinafter referred to as “MailChimp”). MailChimp may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletters or for statistical purposes. However, MailChimp does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties. For the use of our newsletters, statistical data (information about the browser and your system, your IP address, time of retrieval) is collected for reasons of optimizing these services. This information is used for the technical improvement of the services. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. The evaluations are used to identify the reading habits of our users and to adapt our content to them.
MailChimp has expressly acknowledged and committed to continue to fully comply with the GDPR following the European court of Justice decision of 16/07/2020 invalidating the EU-US Privacy Shield. Mailchimp has taken a number of measures to ensure that EU data remains protected when transferred outside of Europe. In addition to the inclusion of Standard Contractual Clauses (SCCs), MailChimp has drafted a Data Processing Addendum, which in particular contains MailChimp’s obligations and measures regarding security, confidentiality of processing, restrictions on international transfers of personal data, cooperation regarding data subjects’ rights, notifications of security incidents. MailChimp has also committed in particular to protect the transmission and processing of data by their users on the MailChimp platform. MailChimp has also specifically committed not to sell, rent, or trade any user data. In addition, MailChimp has committed to continue to closely monitor the development of international data transfer mechanisms under the GDPR and emerging guidance to determine whether MailChimp needs to make additional changes to its practices, including implementing additional measures as a data importer.
Further information from MailChimp on the handling and processing of personal data and the protective measures taken in this regard can be found here:
https://mailchimp.com/de/help/mailchimp-european-data-transfers/
Mailchimp Data Processing Addendum | Mailchimp
You can view the current privacy policy of MailChimp here: https://mailchimp.com/legal/privacy/
4.Google Analytics privacy policy
We use on our website the analysis tracking tool Google Analytics (GA) of the American company Google Inc. For the European area the company Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services. Google Analytics collects data about your actions on our website. For example, when you click on a link, this action is stored in a cookie and sent to Google Analytics. Using the reports we receive from Google Analytics, we can better tailor our website and service to your preferences. In the following, we will go into more detail about the tracking tool and, in particular, inform you about what data is stored and how you can prevent this.
4.1 What is Google Analytics?
Google Analytics is a tracking tool used to analyse traffic to our website. In order for Google Analytics to work, a tracking code is built into the code of our website. When you visit our website, this code records various actions you take on our website. Once you leave our website, this data is sent to Google Analytics servers and stored there.
Google processes the data and we receive reports about your user behaviour. These reports may include, but are not limited to, the following:
– Audience reports: through audience reports, we get to know our users better and know more precisely who is interested in our service.
– Ad reports: Ad reports help us analyse and improve our online advertising.
– Acquisition reports: Acquisition reports give us helpful information on how to attract more people to our service.
– Behaviour reports: This is where we learn how you interact with our website. We can track the path you take on our site and which links you click.
– Conversion reports: Conversion is when you take a desired action based on a marketing message. For example, you go from being a mere website visitor to a buyer or newsletter subscriber. These reports help us learn more about how our marketing efforts are working for you. This is how we aim to increase our conversion rate.
– Real-time reports: Here we always know immediately what is happening on our website. For example, we can see how many users are reading this text.
4.2 Why do we use Google Analytics on our website?
We want to offer you the best possible service with our website. The statistics and data from Google Analytics help us to achieve this goal.
The statistically evaluated data shows us a clear picture of the strengths and weaknesses of our website. On the one hand, we can optimize our site so that it can be found more easily by interested people on Google. On the other hand, the data helps us to better understand you as a visitor. Thus, we know very well what we need to improve on our website in order to provide you with the best possible service. The data also helps us to carry out our advertising and marketing measures in a more individual and cost-effective way. After all, it only makes sense to show our products and services to people who are interested in them.
4.3 What data is stored by Google Analytics?
Google Analytics uses a tracking code to create a random, unique ID that is linked to your browser cookie. This is how Google Analytics recognizes you as a new user. The next time you visit our site, you will be recognized as a “returning” user. All collected data is stored together with this user ID. This makes it possible to evaluate pseudonymous user profiles in the first place.
Through identifiers such as cookies and app instance IDs, your interactions on our website are measured. Interactions are all types of actions that you perform on our website. If you also use other Google systems (such as a Google account), data generated through Google Analytics may be linked to third-party cookies. Google does not share Google Analytics data unless we, as the website operator, authorize it. Exceptions may occur if required by law.
The following cookies are used by Google Analytics
Google Analytics reports on demographic characteristics and interests.
We have enabled promotional reporting features in Google Analytics. The reports on demographic characteristics and interests contain information on age, gender and interests. This allows us – without being able to assign this data to individual persons – to get a better picture of our users. You can learn more about advertising features at
https://support.google.com/analytics/answer/3450482?hl=de_AT&utm_id=ad.
You can stop the use of the activities and information of your Google account under “Settings for advertising” on https://adssettings.google.com/authenticated via checkbox
5. Cookies
This website uses “cookies” to make our services more user-friendly and effective. A “cookie” is a small text file that our web server stores on your computer’s hard drive via the browser you are using. This enables our website to recognize you as a user when a connection is established between our web server and your browser. Cookies help us to determine the frequency of use and the number of users of our web pages.
The content of the cookies we use is limited to an identification number that does not allow for the personalization of a user. The main purpose of a cookie is to recognize the visitors of a website.
5.1 Types of cookies
Two types of cookies are used on our website (ATTENTION: to be verified by Flowtec):
– Session cookies: these are temporary cookies that remain on the user’s computer until the browser is closed and are then deleted automatically.
– Persistent cookies: For a better user experience, cookies remain stored on your end stored on your terminal device and allow us to recognize your browser the next time you next visit.
You can set your browser so that you are informed when cookies are set and so that cookies are cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of the cookies when closing the browser. With the deactivation of cookies the functionality of our website may be limited.
The legal basis for the aforementioned processing of personal data is, pursuant to Art 6 para 1 lit a DSGVO, your consent, which you give us by agreeing to the cookie banner on our website. You can revoke this consent at any time with immediate effect.
6. LinkedIn Insight Tag
We use LinkedIn’s Insight tag on our website. This tool allows us to analyse the use of our website with the aim of continuously improving our offers for you.
6.1 Service provider, location of data processing
The provider of the LinkedIn Insight service is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for data protection matters outside the USA.
Data processing also takes place in the USA. In this regard, we would like to point out that when using the LinkedIn Insight service, it cannot be ruled out that US authorities (in particular intelligence services) may be able to access personal data based on the current legal situation in the USA (in particular based on the so-called Cloud Act, see https://de.wikipedia.org/wiki/CLOUD_Act).
6.2 Data processing through LinkedIn Insight Tag
If you are registered as a user on LinkedIn, we can analyse your professional data, such as in particular job title, industry, data on your company, through LinkedIn Insight Tags. With the LinkedIn Insight Tag, we can also measure which action you take as a visitor to our website (so-called conversion measurement). In addition, we use the retargeting function of LinkedIn Insight Tag, with which we can send you targeted advertising after you have visited our website. LinkedIn itself also collects so-called log files (these include in particular the IP address, the date of access, the browser type and the name of the requested file). The IP addresses are shortened or (if they are used to reach members across devices) hashed/pseudonymised. Members’ direct identifiers are removed within seven days to pseudonymise the data. This remaining pseudonymised data is then deleted within 180 days. For more details, see LinkedIn’s privacy policy at.
https://www.linkedin.com/legal/privacy-policy#choices-oblig.
6.3 Legal basis
The use of LinkedIn Insight is based on Art. 6 (1) lit. f DSGVO. As a website operator, we have a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (for example, consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; you can revoke your consent at any time. LinkedIn uses so-called standard contractual clauses of the European Commission for the processing/transfer of your data. With the help of the standard contractual clauses, data processing in a country outside the European Economic Area is to be secured and raised to a level of protection that is equivalent in substance to the level of protection guaranteed in the EU.
6.4 Objection to the use of LinkedIn Insight Tag
You have the option to object to the retargeting function by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Furthermore, LinkedIn members can manage the use of their personal data in the account settings in the account settings. More information at the following link: https://www.linkedin.com/help/linkedin/answer/a1338610/widerspruch-gegen-die-datenverarbeitung-einschrankung-der-datenverarbeitung?lang=de
7. Lead generation, marketing tunnel
We process personal data for lead generation purposes by means of the so-called marketing tunnel (for the definition of the term, see for example https://de.wikipedia.org/wiki/Leadgenerierung; https://de.wikipedia.org/wiki/Sales-Funnel). In this privacy policy, we describe on the one hand the type of services/tools (hereinafter referred to as “services”) we use in the context of this lead generation and on the other hand how and why we use them and how your personal data is processed in the process.
7.1 How does our Funnel work?
When you click on the link of an advertisement from us in connection with the funnel or on a link to the funnel stored on the website, you thereby open the first page of the funnel – also called landing page. On the landing page, the cookie consent is displayed. There, as a landing page visitor, you can select which cookies will be active during your stay in the funnel. The funnel contains questions to determine your professional needs with regard to our offer, which is presented in the funnel. You answer the questions by interacting with the answers or buttons provided. A fully completed funnel results in the display of a thank you page within the funnel, which communicates to you that the survey has been completed and that a contact person from us will get in touch with you by telephone and/or e-mail within a specified period of time under the specified data on the offered topic.
7.2 What personal data do we collect from you?
We only collect personal contact data from you, such as first name, surname, email address and telephone number, which can be of a professional or private nature depending on the person.
7.3 What services/tools do we use?
Perspective Software
For our landing page (website), we use the service Mobile Funnel (hereinafter: Funnel), operated by Perspective Software GmbH Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg (hereinafter: Perspective), which offers software for the creation and operation of Mobile Funnel (https://perspective.co/impressum). The data entered in the context of the use of Mobile Funnel is transmitted via SSL encryption and stored in a database. As the operator of this website, we alone are responsible for this data within the meaning of Art. 24 DS-GVO. Perspective is only the operator of the software and in this context is a processor according to Art. 28 DS-GVO. The basis for processing by Perspective is a contract for commissioned processing between us as the controller and Perspective (as the processor). This order processing contract guarantees that appropriate technical and organisational measures are implemented in such a way that the storage and processing of personal data is carried out in accordance with the requirements of the Regulation DSGVO and GDPR (Europe-wide) and the protection of the rights of the data subject is guaranteed.
Perspective itself stores your data exclusively on European servers. However, there is a possibility that the data may be accessible to entities in the United States of America, as Perspective uses sub-processors located in the US. As the European Union Commission has determined that the data protection laws of the United States do not ensure an adequate level of protection for personal data collected from data subjects in the European Union, Perspective provides additional measures and safeguards for data transfers to the United States in accordance with the requirements of the GDPR to ensure an adequate level of protection. For example, by concluding standard contractual clauses between Perspective and the sub-processors.
In addition, Perspective Software GmbH processes further data for the provision of its services, in particular for the operation of the Mobile Funnel, some of which may also be personal data. This will be discussed in more detail below.
Access logs (“server logs”)
With each access to the Funnel, general log data, so-called server logs, are automatically collected. These data are usually pseudonyms and therefore do not allow any conclusions to be drawn about a natural person. Without this data, it would not be technically possible in part to deliver and display the contents of the software. In addition, the processing of this data is absolutely necessary for security reasons, in particular for access, input, transfer and storage control. Furthermore, the anonymous information can be used for statistical purposes and for optimising the offer and the technology. In addition, the log files can be subsequently checked and evaluated if there is suspicion of illegal use of the software. The legal basis for this is found in Art. 6 (1) f DSGVO. Data such as the domain name of the website, the web browser and web browser version, the operating system and the timestamp of access to the software are generally collected. The IP address of the user is not stored. However, the user is assigned a so-called session ID. The scope of this logging does not exceed the usual scope of any other website on the Internet. The storage period of these access logs is up to 7 days. There is no right of objection.
Collection of user behaviour data
We collect general data such as the domain name of the website, the web browser and web browser version, the operating system, the user’s session ID and the timestamp of access to the software. All data entered by the user when using the Funnel (e.g. answering form fields; using interactive components) are assigned to the user by means of a session ID and made available to us as the operator of this website. We are responsible for deleting, storing and further processing this personal data in accordance with current legislation.
Use of cookies
So-called cookies are used in the funnels. These are small text files that are stored on the device with which you access these funnels. The cookies used serve to ensure security when visiting a website (“absolutely necessary”), to implement certain functionalities such as standard language settings (“functional”) and to improve the user experience or performance on the website (“performance”). Within the funnels, strictly necessary, functional and performance cookies are used, in particular to implement certain default settings such as the language, to store answers given even in the event of a poor internet connection or to analyse the performance of a funnel and the channel used by a user to access this funnel. The use of cookies is mandatory for the provision of our services and thus for the fulfilment of the contract (Art. 6 (1) b) DS-GVO). Storage period: Up to 1 month or until the end of the browser session. Right to object: You can determine yourself via your browser settings whether you want to allow cookies or object to the use of cookies. Please note that deactivating cookies may result in limited or completely disabled functionality of the Funnel.
Google Tag Manager
We use the Google Tag Manager for our Funnel. The Google Tag Manager records which pages have been visited. Google Tag Manager is used to analyse and optimise Google campaigns).
Data collected with Google Tag Manager: In order for Google to monitor the stability, performance and installation quality of the system and to obtain data for diagnosis, Google Tag Manager collects certain aggregate data for tag triggering. This data does not include IP addresses or measurement IDs linked to a specific individual. Unlike data in standard HTTP request logs, which are all deleted within 14 days of receipt, and the diagnostic data described above, Google Tag Manager does not collect, store or share information about visitors to our clients’ properties. This also applies to the URLs of visited pages. Further information on the use of Google Tag Manager data can be found in Google’s Terms of Use for Google Tag Manager (https://support.google.com/tagmanager/answer/7157428). In addition, further information can be found in Google’s privacy policy (https://policies.google.com/privacy?hl=de). We would also like to point out that when using this Google service, it cannot be ruled out that US authorities (especially intelligence services) may be able to access personal data based on the current legal situation in the USA (especially based on the Cloud Act, see https://de.wikipedia.org/wiki/CLOUD_Act).
8. Rights of data subjects
You have following rights regarding the processing of personal data:
8.1 Right of access
You have the right to obtain confirmation as to whether and to what extent we process personal data related to you.
8.2 Right to rectification
If we process incomplete or inaccurate personal data of yourself, you have the right to obtain rectification or to have the data completed.
8.3 Right to erasure
You have the right to obtain the erasure of your personal data, if the purpose for which the data have been collected is no longer applicable, the data have been unlawfully processed, the processing disproportionately intervenes in your justified interests, or if the data processing was based on your consent and you withdrew this consent. It should be noted that we cannot erase your personal data, if processing is necessary, e.g. legal retention obligations, pending proceedings, establishment, exercise or defence of legal claims, etc.
8.4 Right to restriction of processing
You have the right to obtain restriction of processing, if
a) you contest the accuracy of your data, for a period that enables us to verify the accuracy of the data
b) the processing of your data is unlawful, but you oppose the erasure of your data and request the restriction of their use instead
c) we no longer need the personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of legal claims, or
d) if you have objected the processing of your data.
8.5 Right to data portability
You have the right to receive your personal data in a structured, commonly used and machine-readable format, if we have stored your data after your prior consent or for fulfilment of a contract, and the processing is carried out with the assistance of automated processes.
8.6 Right to object
If your personal data are processed for the performance of tasks carried out in the public interest or in the exercise of official authority, or for the purposes of the legitimate interests pursued by us, you have the right to object to process your personal data, if there is an overriding protection interest to your data. You have the right to object to processing for direct marketing purposes at any time, without stating reasons.
8.7 Right to complain
If you believe that we have violated Austrian or European data privacy laws when processing your data, you have the right to complain at the Austrian or any European data protection authority. These rights can be directly asserted at Flowtec Industrietechnik GmbH by sending an e-mail to info@flowtec.at.
Status: 03/2023