Privacy

Privacy policy

Privacy policy

I. Name and Address of the Data Controller

The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States, as well as other data protection regulations, is:

STRABAG Real Estate GmbH Donau-City-Straße 1 1220 Vienna Austria Tel. +43 1 22422-7100 real-estate.at@strabag.com

II. Name and address of the Data Protection Coordinator

The data controller, within the meaning of the EU GDPR and other national data protection laws of the member states as well as other data protection regulations, is: Sonja Müllner CML Construction Services GmbH Donau-City-Straße 9 1220 Wien Österreich Tel. +43 1 22422-1083 sonja.muellner@bauholding.com

III. General information on data processing

1. Scope of the processing of the personal data

In principle, we process the personal data of our users only insofar as this is necessary for the maintenance of a functional website and the provision of our content and services. The processing of our users’ personal data generally occurs only following receipt of the user’s consent. An exception is made in cases where it is not possible to obtain consent in advance for practical reasons and where the processing of the data is permitted by statutory regulations. This privacy policy only covers the data processing operations described below. In addition, further processing of the personal data of the users can take place, especially by group companies of the STRABAG Group as the sole data protection officer. In this respect, the special data protection declarations made available for the respective data processing by STRABAG SE or Group companies apply.

2. Legal basis for the processing of personal data

Insofar as we obtain consent from the data subject for the processing of personal data, Art. 6 (1) a of the EU’s General Data Protection Regulation (GDPR) shall serve as the legal basis. Where the processing of personal data is required for the fulfilment of a contract to which the data subject is party, Art. 6 (1) b of the GDPR shall serve as the legal basis. This shall also apply to all processing operations required for the performance of pre-contractual measures. Insofar as the processing of personal data is required for the fulfilment of a legal obligation (statutory conditions) to which our company is bound, Art. 6 (1) c of the GDPR shall serve as the legal basis. If processing is necessary in order to protect the vital interests of the data subject or of another natural person, Art. 6 (1) d of the GDPR shall serve as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or of a third party, and the interests, basic rights and fundamental freedoms of the data subject do not outweigh the aforementioned legitimate interest, Art. 6 (1) f of the GDPR shall serve as the legal basis for processing.

3. Deletion of data and storage duration

The personal data of the data subject are deleted or blocked as soon as the purpose for their storage no longer applies. Storage beyond this point may take place if this is provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject. Data will also be blocked or deleted once the storage period prescribed by the aforementioned standards expires unless further storage of the data is necessary for the conclusion or fulfilment of a contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Each time this website is accessed, our system records data and information from the computer system of the calling computer by means of an automated system. The following data are collected as part of this process:

  1. Information about the browser type and version used

  2. The user’s operating system

  3. The user’s Internet service provider

  4. The user’s IP address

  5. Date and time of access

  6. Websites from which the user’s system has come to our website

  7. Websites accessed by the user’s system via our website

These data are also stored in our system’s log files. These data are not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 (1) f of the GDPR.

3. Purpose of data processing

The system temporarily stores the user’s IP address in order to make the website available on the user’s computer. To do this, the user’s IP address must be stored for the duration of the session.

The storage in log files is carried out to ensure the functional capability of the website. The data also help us to optimise the website and ensure the security of our IT systems. No data are evaluated for marketing purposes in this context.

This is also the reasoning behind our legitimate interest in data processing under Art. 6 (1) f of the GDPR.

4. Storage duration

The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. When data are collected in order to make the website available, this is the case when the respective session ends. When data are stored in log files, this is the case after 180 days at the latest.

5. Possibility of objection and elimination

The collection of data for the provision of the website and the storage of data in log files is necessary for operating the website. Therefore, there is no possibility for the user to object.

V. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the user’s web browser or on the user’s computer system by the web browser. When a user visits a website, a cookie is stored on the user’s operating system. This cookie contains a characteristic string, enabling the unique identification of the browser when a user revisits the website.

We use cookies to make our websites more user-friendly. Some elements of our website require the calling browser to be able to be identified even after a page change.

The cookies store and transfer the following information:

Search behaviour

We also use cookies on our website that allow for the analysis of user browsing habits. The following information can be stored in this way:

  1. Search terms entered

  2. Frequency of page views

  3. Use of website functions

Technical measures are employed to pseudonymise user data which are collected in this manner. As a result, it is not possible to assign data to an inquirer. The data will not be stored together with other personal data of the user. When visiting our website, a banner appears informing the user about the use of cookies for analysis purposes and the user is referred to this data protection statement. The user is also informed in this context of how to prevent the collection of cookies in the browser settings. When visiting our website, the user is informed about the use of cookies for the purposes of analysis. The user’s consent to the processing of personal data is also obtained in this context. The user is also referred to the data protection statement at this point.

2. Legal basis for data processing

The legal basis for the processing of personal data using cookies that are technically necessary is Art. 6 (1) f of the GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes, with relevant user consent, is Art. 6 (1) an of the GDPR.

3. Purpose of data processing

Cookies that are technically necessary are used to simplify website use for users. Some of our website’s functions cannot be offered without the use of cookies. These services require the browser to be recognised again following a page change.

We require cookies for the following applications:

Remembering search terms

The user data collected by technically necessary cookies will not be used to create user profiles.

Analysis cookies are used to improve the quality of our website and its content. Such cookies enable us to learn how the website is used so that we can continually improve our offer.

This is also the reasoning behind our legitimate interest in data processing under Art. 6 (1) f of the GDPR.

4. Storage duration, the possibility of objection and elimination

Cookies are stored on the user’s computer, which will transmit them to our website. This will grant you as the user complete control over the usage of cookies. You can deactivate or restrict the transmission of cookies by changing your web browser’s settings. Previously stored cookies can be deleted at any time. Cookies can also be deleted automatically. In the event that cookies are deactivated for our website, certain features of our website may no longer be available.

VI. Newsletter

1. Description and Scope of Data Processing

Our website offers the option to subscribe to a free newsletter. When registering for the newsletter, the data entered in the input form is transmitted to us.

In addition, the following data is collected upon registration:

  1. IP address of the computer accessing the website

  2. Date and time of registration

During the registration process, your consent to the processing of your data is obtained and reference is made to this Privacy Policy.

In connection with the processing of data for the purpose of sending newsletters, the data is not disclosed to third parties. The data is used exclusively for sending the newsletter.

2. Legal Basis for Data Processing

The legal basis for the processing of data following registration for the newsletter by the user is, where the user has given consent, Art. 6(1)(a) GDPR.

3. Purpose of Data Processing

The collection of the user's email address serves the purpose of delivering the newsletter.

The collection of other personal data as part of the registration process serves to prevent misuse of the services or of the email address used.

4. Duration of Storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user's email address will be stored for as long as the newsletter subscription remains active.

The other personal data collected during the registration process will generally be deleted after a period of seven days.

5. Right of Withdrawal and Cancellation

The newsletter subscription may be cancelled by the user concerned at any time. For this purpose, each newsletter contains a corresponding link.

This also enables the user to withdraw their consent to the storage of personal data collected during the registration process.

VII. Contact Form and Email Contact

1. Description and Scope of Data Processing

At the time the message is sent, the following additional data is also stored:

  1. The user's IP address

  2. Date and time of registration

During the submission process, your consent to the processing of your data is obtained and reference is made to this Privacy Policy.

Alternatively, it is possible to contact us using the email address provided. In this case, the user's personal data transmitted with the email will be stored.

In this context, the data is not disclosed to third parties. The data is used exclusively for processing the conversation.

2. Legal Basis for Data Processing

The legal basis for the processing of data is, where the user has given consent, Art. 6(1)(a) GDPR.

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6(1)(f) GDPR. If the purpose of the email contact is to conclude a contract, an additional legal basis for the processing is Art. 6(1)(b) GDPR.

3. Purpose of Data Processing

The processing of personal data from the input form serves solely to process the contact request. In the case of contact by email, this constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of Storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for personal data from the contact form input fields and for data transmitted by email when the respective conversation with the user has ended. The conversation is considered to have ended when the circumstances indicate that the matter in question has been conclusively clarified.

The additional personal data collected during the submission process will be deleted no later than seven days after collection.

5. Right to Object and Cancellation

The user has the right to withdraw their consent to the processing of personal data at any time. If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

If you wish to exercise your right to object, please simply send us an email to real-estate.at@bauholding.com.

In this case, all personal data stored in the course of the contact request will be deleted.

VIII. Disclosure to Service Providers

We only disclose your personal data to third parties where service providers act on our behalf to manage our data. The legal basis for this is Art. 6(1)(f) GDPR. We have concluded data processing agreements with our service providers in order to ensure the protection of your personal data in this context as well.

IX. Rights of the Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis the controller:

  1. Right of access

  2. Right to rectification

  3. Right to restriction of processing

  4. Right to erasure

  5. Right to notification

  6. Right to data portability

  7. Right to object

  8. Right to withdraw consent under data protection law

  9. Right not to be subject to a decision based solely on automated processing, including profiling

  10. Right to lodge a complaint with a supervisory authority

Matomo Analytics

We use the web analysis software Matomo (www.matomo.org) for the purpose of access statistics, to analyse the general usage behaviour of our website and to optimise our website. The legal basis for this processing is Art. 6 (1) f) GDPR. We configured Matomo in such a way that:

  1. no cookies are placed on your end-device;

  2. the IP address is shortened by the last two bytes and is thus anonymised;

  3. in addition to the pages opened, only the data transmitted by your browser when you access the website is recorded / this data recording is limited to the respective duration of the sessions;

  4. on opening the website, your data transmitted by the browser and the anonymized IP address are irrevocably replaced by a pseudonym ID on a session basis, so that no identifiability and thus no personal reference can be established, whereby this pseudonym ID is also deleted after a maximum of 24 hours.

We use our own Matomo instance on our company’s servers within the European Economic Area, so that no data is transmitted to Matomo or other third parties. In addition, you have the option of activating the “Do Not Track” option in your browser. In this case, Matomo does not store or process any data from your website visit. If you have not activated the “Do Not Track” option and do not agree with the collection and analysis of the aforementioned data, you can object to this processing on our website at any time. For this purpose, we provide you below with a special inline frame that is linked to our Matomo system. By deactivating the checkbox (opt-out), a cookie is stored on your end device that prevents the collection and processing of any session data on our website by Matomo. Please note that deleting your cookies will also delete this cookie and you may need to reactivate it.

Eye-Able®

Eye-Able® is a software developed by Web Inclusion GmbH to ensure barrier-reduced access to information on the Internet for all people. The necessary files such as JavaScript, stylesheets and images are loaded from an external server. When functions are activated, Eye-Able® uses the browser's local storage to save the settings. All settings are only saved locally and are not transmitted further. Eye-Able® uses the Content Delivery Network (CDN) of BunnyWay d.o.o. (Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia) to ward off attacks and provide our service in near real time. This is used for the purpose of fulfilling the contract with our customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR). All transmitted data and servers remain in the EU at all times in order to enable data protection-compliant processing in accordance with the GDPR. Web Inclusion GmbH does not record or analyse personal user behaviour or other personal data at any time. In order to ensure data protection-compliant processing, Web Inclusion GmbH has concluded order processing contracts with our host BunnyWay.

Further information can be found in the privacy policy: https://eye-able.com/de/datenschutz-eye-able/ https://bunny.net/privacy/

Data protection regulations: Form - Inquiry project and/or apartment

If you would like to receive information about the property, one or more specifically selected properties in the project in question:

By providing my above-mentioned personal data, I expressly agree that STRABAG Real Estate GmbH (FN 226332t; 1220 Vienna, Donau-City-Straße 1; "SRE") may process this data as well as the additional personal data collected during the sending process (IP address and date and time of registration/enquiry) in accordance with the General Data Protection Regulation.

On the basis of this consent, SRE may contact me by e-mail and/or telephone (and/or if necessary by letter) in order to inform me about the requested property. Furthermore, SRE may ask me about my satisfaction with services that SRE and/or its group companies have provided to me in this context. The purpose of providing my postal code is to evaluate the places of residence of potential SRE customers so that SRE can target its advertising measures more effectively.

My personal data will be processed exclusively for the stated purposes and will not be passed on to other third parties.

My consent is voluntary and I can revoke it at any time without giving reasons (e.g. by email to vertrieb@strabag-real-estate.com). My revocation does not affect the lawfulness of the processing carried out on the basis of this consent until revocation.

My data will be stored until the sale of the requested property, but in any case only until I withdraw my consent. I have a right of disclosure by SRE of the personal data concerning me, of rectification or erasure, of restriction of processing, of objection to processing, and of data portability (i.e. the right to receive the personal data concerning me, which I have provided to SRE, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from SRE). I have the right to file a complaint with the data protection authority.

Data protection regulations: Form - Further property offers and events

If you would like to receive information about real estate offers and services from STRABAG Real Estate as well as related events:

By providing my above-mentioned personal data, I expressly agree that STRABAG Real Estate GmbH (FN 226332t; 1220 Vienna, Donau-City-Straße 1; "SRE") may process this data as well as the additional personal data collected during the sending process (IP address and date and time of registration/enquiry) in accordance with the General Data Protection Regulation.

On the basis of this consent, SRE may contact me by email to inform me about real estate offers and services from the real estate sector, from SRE and/or its other group companies, as well as about related events. Furthermore, SRE may ask me about my satisfaction with services that SRE and/or its other group companies have provided to me.

My personal data will be processed exclusively for the stated purposes and will not be passed on to other third parties.

My consent is voluntary and I can revoke it at any time without giving reasons (e.g. by email to vertrieb@strabag-real-estate.com). My revocation does not affect the lawfulness of the processing carried out on the basis of this consent until revocation.

My data will be stored for the duration of SRE's activities in the real estate sector, but in any case only until I withdraw my consent. I have a right of disclosure to SRE about the personal data concerning me, a right to rectification or erasure, a right to restriction of processing, a right to object to processing and a right to data portability (i.e. the right to receive the personal data concerning me that I have provided to SRE in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from SRE).

I have the right to file a complaint with the data protection authority. I can therefore assert my rights against each of the two controllers with effect for both controllers. The responsible party against whom I assert one or more rights will ensure that the other responsible party is also informed immediately.

Those responsible will work together to ensure that my requests are fulfilled on time, completely and correctly. When processing the data, SRE will use a database that you can fill, edit and delete in equal measure.

The cooperation between SRE as joint controllers in this regard is governed by a separate agreement (within the meaning of Article 26 of the General Data Protection Regulation).

Data protection regulations: Form - Contact

By providing my above-mentioned personal data, I expressly agree that STRABAG Real Estate GmbH (FN 226332t; 1220 Vienna, Donau-City-Straße 1; "SRE") may process this data as well as the additional personal data collected during the sending process (IP address and date and time of registration/enquiry) in accordance with the General Data Protection Regulation.

On the basis of this consent, SRE may contact me by email (and/or telephone if necessary) to respond to my request. My personal data will be processed exclusively for the stated purposes and will not be passed on to other third parties.

My consent is voluntary and I can revoke it at any time without giving reasons (e.g. by email to vertrieb@strabag-real-estate.com). My revocation does not affect the lawfulness of the processing carried out on the basis of this consent until revocation.

My data will be stored until my request has been answered, but in any case only until I withdraw my consent. I have a right of disclosure by SRE of the personal data concerning me, of rectification or erasure, of restriction of processing, of objection to processing, and of data portability (i.e. the right to receive the personal data concerning me, which I have provided to SRE, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from SRE). I have the right to file a complaint with the data protection authority.