Privacy policy
As per 10/2021
Since we take the protection of personal data seriously, we expressly declare to act in accordance with the legal provisions of the General Data Protection Regulation (GDPR) in conjunction with national legislation as amended. We treat your data as confidential, and data will only be stored and processed with your consent or order for the purposes agreed with you or if there is another legal basis in accordance with the GDPR.
GDPR Controller:
Mayr-Melnhof Holz Holding AG
Turmgasse 67
8700 Leoben
Austria
T +43 3842 300
F +43 3842 300-24891
holding@mm-holz.com
www.mm-holz.com
We process personal data that we receive from you directly or from commercial agents, transport companies or other contractual partners in the course of contacting you (by telephone, in writing or by e-mail) or establishing a contractual relationship or in the course of pre-contractual measures or that you provide via the contact form on the website. This data will not be forwarded.
You have voluntarily provided us with data about yourself and we process this data on the basis of your consent. If necessary and permitted by law, we process your data to fulfil legal obligations and to protect the legitimate interests of us or third parties, as well as to defend and assert legal claims.
You have the right to revoke this consent at any time. A revocation means that we no longer process your data for the above-mentioned purposes from this point on. To revoke your consent, please contact:
datenschutz@mm-holz.com; Fax: +43 3842 300-24891.
We process and store your data for the duration of the business relationship or for the duration of our legitimate interest and, in addition, for the duration of general limitation periods, which may be up to 30 years.
Server-Log-Files
In order to optimise this website in terms of system performance, user-friendliness and provision of useful information about our services, the provider of the website (EDIS GmbH, Hauptplatz 3, 8010 Graz) automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes the website visited, the amount of data sent in bytes, your Internet protocol address (IP address), browser and language setting, operating system, referrer URL, your Internet service provider and date/time.
This data is not merged with personal data sources. The data collected is only used for statistical evaluations and to improve the website. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use.
Cookies
Our website may use cookies. These are small text files that are stored on your end device with the help of the browser, they do not cause any harm.
We use cookies to make our offer user-friendly. Some cookies remain stored on your end device until you delete them. They enable us to recognize your browser on your next visit.
If you do not wish this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. Deactivating cookies may limit the functionality of our website.
In the case of cookies that are not functionally necessary, we request your consent in the cookie window (Art 6 para 1 lit a GDPR). Only if this is actively given, your personal data will be processed for the purpose of making the website more user-friendly. In the case of cookies that are marked as functionally required in the cookie window, we base our legal basis on our legitimate interest (Art 6 para 1 lit f GDPR) in making the website user-friendly.
Google Analytics
We use Google Analytics on our website. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
The Google Analytics service is used to analyse usage behaviour on our website. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymisation function. This function enables Google to truncate the IP address within the EU or EEA.
The data collected in this way is in turn used by Google to provide us with an evaluation of traffic on our website and the usage activities there. This data may also be used to provide other services related to the use of our website and the use of the Internet.
Google states that it will not associate your IP address with any other data. Google provides further information on data privacy law at https://www.google.com/intl/de/policies/privacy/partners, including information on how to prevent data use.
Google also offers a so-called deactivation add-on together with further information on this. This add-on can be installed with standard Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on tells Google Analytics’ JavaScript (ga.js) that information about the visit to our website is not to be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services.
Furthermore, you can use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link takes you to the respective plugin: https://tools.google.com/dlpage/gaoptout?hl=de
Alternatively, you can click on https://tools.google.com/dlpage/gaoptout?hl=de,%20d to prevent Google Analytics from collecting your data on this website. Clicking on the above link will download an "opt-out cookie". Your browser must therefore generally allow the storage of cookies for this purpose. If you delete your cookies regularly, you will need to click on the link again each time you visit this website.
You can find more information about data usage by Google Inc. here:
https://support.google.com/analytics/answer/6004245?hl=de.
Google-Maps
On our website, we use Google Maps to display our location and to create directions. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when you open our website.
If you open the Google Maps component integrated into our website, Google stores a cookie on your device via your Internet browser. In order to display our location and provide directions, your user settings and data are processed. Here, we cannot rule out that Google uses servers in the USA.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in optimising the functionality of our website.
Through the connection to Google established in this way, Google can determine from which website your request was sent and to which IP address the directions are to be transmitted.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your Internet browser.
Additionally, the use of Google Maps and the information gathered using Google Maps is governed by the Google Terms of Service https://policies.google.com/terms?gl=DE&hl=de and the Google Maps Terms and Conditions: https://www.google.com/intl/de_de/help/terms_maps.html.
Additionally, Google offers further information at https://adssettings.google.com/authenticated and https://policies.google.com/privacy.
YouTube
On our website, we use YouTube to present our company and our services and to communicate with customers/interested parties. This is a video portal provided by YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA, hereinafter referred to as "YouTube".
YouTube is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
In this respect, we would like to point out that it is possible that user data is processed outside the European Union, in particular in the USA. This may result in increased risks for users in that, for example, it may be more difficult to access the user data at a later date.
We also do not have access to this user data. The access option lies exclusively with YouTube.
Use YouTube in connection with the "Advanced Data Protection Control" function to be able to show you videos. The legal basis is Art. 6 para. 1 lit. f) GDRP. According to YouTube, the "Advanced Data Protection Control" function ensures that the data described in more detail below is only transmitted to the YouTube server when you actually start a video.
Without this "Advanced Data Protection Control", a connection to the YouTube server in the USA is established as soon as you call up one of our Internet pages on which a YouTube video is embedded.
This connection is necessary in order to be able to display the respective video on our website via your Internet browser. In the context, YouTube will at least record and process your IP address, the date and time, as well as the website you visited. In addition, a connection to Google's advertising network called "DoubleClick" is established.
If you are logged in to YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
For the purposes of functionality and analysis of user behaviour, YouTube permanently stores cookies on your device via your Internet browser. If you do not agree with this processing, you have the option to prevent the storage of cookies by a setting in your Internet browser. You can find more information on this under "Cookies".
Google provides further information on the collection and use of data as well as your rights and protection options in this regard in its Privacy Information available at https://policies.google.com/privacy.
We maintain an online presence on LinkedIn to present our company and our services and to communicate with customers/interested parties. LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 9 98585, USA.
In this respect, we would like to point out that it is possible that user data is processed outside the European Union, in particular in the USA. This can lead to increased risks for users in that, for example, later access to user data can be made more difficult. We also do not have access to this user data. The access option lies exclusively with LinkedIn.
You can find LinkedIn's Privacy Policy here https://www.linkedin.com/legal/privacy-policy
To advertise our products and services and to communicate with interested parties or customers, we operate a company presence on the Facebook platform.
On this social media platform, we are jointly responsible with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
Facebook’s data protection officer can be reached via an online form: https://www.facebook.com/help/contact/540977946302970.
We have regulated the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, is available under the following link:https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the processing of personal data that takes place as a result and is reproduced below is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, communication, sale and promotion of our products and services.
The legal basis may also be the user's consent to the platform operator pursuant to Art. 6 para. 1 lit. a) GDPR. The user can revoke this consent for the future at any time by notifying the platform operator in accordance with Art. 7 para. 3 GDPR.
When our online presence is called up on the Facebook platform, the user's data (e.g. personal information, IP address, etc.) is processed by Facebook Ireland Ltd. as operator of the platform in the EU.
This user data is used for statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create profiles of users. On the basis of these profiles, Facebook Ireland Ltd. is able, for example, to advertise on the basis of the user's interests within and outside of Facebook. If the user is logged into his or her account on Facebook at the time of the call, Facebook Ireland Ltd. can also link the data to the respective user account.
If the user contacts us via Facebook, the personal data entered by the user on this occasion will be used to process the request. The user's data will be deleted by us if the user's enquiry has been conclusively answered and there are no statutory retention obligations, such as in the case of subsequent contract processing, to the contrary.
Facebook Ireland Ltd. may also install cookies to process the data.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by adjusting their browser’s settings accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the settings of the browser, but in the corresponding settings of the Flash player. If the user prevents or restricts the installation of cookies, this may mean that not all functions of Facebook can be fully used.
More details about the processing activities, their prevention and the deletion of data processed by Facebook can be found in Facebook's Privacy Policy: https://www.facebook.com/privacy/explanation.
We cannot rule out that processing by Facebook Ireland Ltd. also takes place via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
To advertise our products and services and to communicate with interested parties or customers, we operate a company presence on the Instagram platform.
On this social media platform, we are jointly responsible with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
Instagram's data protection officer can be reached via a contact form: https://www.facebook.com/help/contact/540977946302970.
We have regulated the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, is available under the following link: https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the processing of personal data that takes place as a result and is reproduced below is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, communication, sale and promotion of our products and services.
The legal basis may also be the user's consent to the platform operator pursuant to Art. 6 para. 1 lit. a) GDPR. The user can revoke this consent for the future at any time by notifying the platform operator in accordance with Art. 7 para. 3 GDPR.
When calling up our online presence on the Instagram platform, the user's data (e.g. personal information, IP address, etc.) is processed by Facebook Ireland Ltd. as the operator of the platform in the EU.
This user data is used for statistical information about the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create profiles of users. On the basis of these profiles, it is possible for Facebook Ireland Ltd., for example, to advertise on the basis of the user's interests within and outside of Instagram. If the user is logged into their Instagram account at the time of the call, Facebook Ireland Ltd. can also link the data to the respective user account.
If the user contacts the company via Instagram, the personal data entered by the user on this occasion will be used to process the request. The user's data will be deleted by us if the user's enquiry has been conclusively answered and there are no legal retention obligations, e.g. in the case of subsequent contract processing, to the contrary.
Facebook Ireland Ltd. may also install cookies to process the data.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by adjusting their browser’s settings accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the settings of the browser, but in the corresponding settings of the Flash player. If the user prevents or restricts the installation of cookies, this may mean that not all functions of Facebook can be fully used.
For more details on processing activities, how to stop them, and how to erase the data processed by Instagram, please refer to Instagram's Privacy Policy: https://help.instagram.com/519522125107875.
We cannot rule out that processing by Facebook Ireland Ltd. also takes place via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
To advertise our products and services and to communicate with interested parties or customers, we operate a company presence on the Twitter platform.
Twitter is a service of Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland, a subsidiary of Twitter Inc., 795 Folsom Street, Suite 600, San Francisco, CA 94107, USA.
In this respect, we would like to point out that it is possible that user data is processed outside the European Union, in particular in the USA. This can lead to increased risks for users in that, for example, later access to user data can be made more difficult. We also do not have access to this user data. The access option lies exclusively with Twitter.
If you use Twitter and in particular the "Re-Tweet" function, Twitter links your Twitter account to the websites you frequent. This is made known to other users on Twitter, in particular your followers. In this way, a data transmission to Twitter also takes place. We, as the provider of our website, are not informed by Twitter about the content of the transmitted data or data usage.
You can find Twitter’s Privacy Policy here: https://twitter.com/de/privacy
Social Media links via graphics and text links
We also use our website to advertise presences on the social networks listed below. The integration takes place via a linked graphic of the respective network. The use of this linked graphic prevents a connection to the respective server of the social network from being automatically established when a website with a social media application is called up in order to display a graphic of the respective network itself. Only when the user clicks on the corresponding graphic will they be forwarded to the service of the respective social network.
After the user has been forwarded, information about the user is collected by the respective network. It cannot be ruled out that the data collected in this way will be processed in the USA.
Initially this involves data such as IP address, date, time and page visited. If the user is logged into their user account of the respective network during this time, the network operator may be able to assign the collected information of the specific visit of the user to the personal account of the user. If the user interacts via a "Share" button of the respective network, this information can be stored in the user's personal user account and may be published. If the user wants to prevent the collected information from being directly assigned to his/her user account, he/she must log out before clicking on the graphic. In addition, it is possible to configure the respective user account accordingly.
The following social networks are integrated into our site by means of links:
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, ein Tochterunternehmen der Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy policy: https://www.facebook.com/policy.php
Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.
Privacy policy: https://policy.pinterest.com/de/privacy-policy
YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, ein Tochterunternehmen der Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
Privacy policy: https://policies.google.com/privacy
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland, ein Tochterunternehmen der LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA.
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, ein Tochterunternehmen der Facebook nc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy policy: https://help.instagram.com/519522125107875
Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland bzw Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A.
Privacy policy: https://twitter.com/de/privacy
Information about your rights
Every data subject has the right to information, the right to rectification, the right to erasure, the right to restriction of processing, the right to notification and the right to data portability. In addition, you have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that the processing of your personal data is not lawful.
The right of appeal is without prejudice to any other administrative or judicial remedy; in Austria, the competent authority is the data protection authority (www.dsb.gv.at). For Germany your contact is DataCo GmbH (datenschutz@dataguard.de).
Mayr-Melnhof Holz Holding AG
Turmgasse 67
8700 Leoben
Austria
datenschutz@mm-holz.com
Data privacy policy for business partners
As per 10/2021
Data protection information
in accordance with Art 13 of the General Data Protection Regulation (GDPR)
In accordance with the requirements of Art 13 of the General Data Protection Regulation (GDPR), we hereby inform you about the use of your personal data and your rights in this regard.
Responsible body in accordance with the GDPR:
Mayr-Melnhof Holz Holding AG
Turmgasse 67
8700 Leoben
Austria
T +43 3842 300
F +43 3842 300 24891
holding@mm-holz.com
www.mm-holz.com
We make use of your data only insofar as it relates to the preparation or establishment of contracts or use data only as you have provided to us in the context of our business relationship. Only data that is specifically required for our business relationship is recorded or stored.
In particular we process of the following data:
- Name/Company
- Profession/job title
- Date of birth
- Company registration number
- Contact person/employee data
- Business address and other addresses of the customer
- Contact details (telephone number, fax number, e-mail address, etc.)
- Bank details, credit card details
- Order data, offer data
- UID number
- GPS data
- Vehicle registration number
- Property owner and property data
- Certifications
We process personal data that we receive from you directly, or via the contact form on the website, or from commercial agents, transport companies, or other contractual partners in the context of contacting you or preparing or establishing a contractual relationship.
We process your personal data in accordance with the provisions of the GDPR and the Austrian Data Protection Act (BDSG), insofar as this is necessary for the establishment, implementation and fulfilment of a contract as well as for the implementation of pre-contractual measures. Without this data, we cannot maintain a business relationship or conclude a contract with you.
You have voluntarily provided us with data about yourself and we process this data based on your consent for the purpose of supporting our business partners and handling our business relationship. If necessary and legally permissible, we process your data to fulfil legal obligations and to protect our or third parties’ legitimate interests, as well as to defend and assert legal claims.
You have the right to revoke this consent at any time. A revocation has the consequence that we no longer process your data for the above-mentioned purposes from that point on. For a revocation, please contact: datenschutz@mm-holz.com; Fax: +43 3842 300-24891.
We process and store your data for the duration of our business relationship, or for the duration of our legitimate interests, or for the duration of general limitation periods, which can be up to 30 years. Data relevant under tax law is stored for the duration of the statutory retention periods.
For this data processing, we use personnel who are expressly obliged to comply with data protection regulations.
We only pass on your personal data to those areas and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interests. We pass on your data to the following recipients or categories of recipients:
- Recipients within the Mayr-Melnhof Holz Group
- Business partners who support us in the fulfilment of the contractual relationship with you and who are obliged to comply with the data protection regulations.
- Auditors, tax consultants
- IT or other technical specialists
- Public authorities and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office) in the case of a legal or official obligation
- Courts
- Insurance companies
- Arbitration boards and authorities
- Banks and payment service providers
- Collection agencies and lawyers
- Cloud services and EU-based IT companies
Your data if necessary will also be partially processed outside the EU or the EEA, but only in the case that our company location in Russia is involved within the scope of our regular business operations or our business relationship. In this case data protection measures comply with the ruling of the European Commission according to Art. 45 of the GDPR.
We inform our business partners at regular intervals about our company and our products by means of a newsletter. After collecting your e-mail address and consent to receive a newsletter, we send a confirmation e-mail to ensure that you, as the owner of the e-mail address, actually authorise the receipt of the newsletter.
By subscribing to a newsletter, your e-mail address, IP address, date and time of subscription will be stored. This data is not passed on to third parties, unless there is a legal obligation to pass it on or if it is used for law enforcement purposes. You can of course unsubscribe from our newsletter at any time. You will find the necessary information at the end of each newsletter.
Information on your rights
You have the right to demand access to your personal data we store, the right to rectification of said data, the right to erasure, the right to restriction of processing, the right to objection, and the right to data portability. Furthermore, you have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that we are not processing your personal data lawfully. The right of appeal is without prejudice to any other administrative or judicial remedy; in Austria, the competent authority is the data protection authority (www.dsb.gv.at). For Germany, DataCo GmbH (datenschutz@dataguard.de) is your contact.
Mayr-Melnhof Holz Holding AG
Turmgasse 67
8700 Leoben
Austria
holding@mm-holz.com