Privacy Policy

Last update: 04/2023

1. RESPONSIBLE PERSON, GENERAL INFORMATION

1.1 In this website privacy policy (“Privacy Policy”), we, IWG Ing. W. Garhöfer Ges.m.b.H, (“IWG” or “we”), as the controller within the meaning of the EU General Data Protection Regulation (“GDPR”), inform users of our website “www.iwgplating.com” (“Website”) about the processing of their personal data. Our contact details: Sonnenblumenweg 1, 2282 Markgrafneusiedl, Austria, +43 2287 71073, datenschutz@iwgplating.com.

1.2 This privacy policy is aimed at every visitor to our website aged 16 or over (“user”, “data subject” or “you”).

1.3 Unless otherwise defined in this privacy policy, the terms used here have the same meaning as in the GDPR.

1.4 The Website contains links to third party websites. We have no control over the content or privacy practices of these websites. Therefore, please read the respective data protection information of linked websites.

DATA COLLECTION, ORIGIN AND PROCESSING PURPOSES

We process personal data (hereinafter also referred to as “data”) that you voluntarily and actively transmit to us (e.g. via our contact form). In addition, data is forwarded from your browser to our website server (server log files) and collected by us through the use of cookies and similar technologies (e.g. beacons, tags and scripts) (hereinafter collectively referred to as “cookies”).

2.1 Provision and security of the website – Hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hoster(s). This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

Legal basis: Article 6 (1) (f) GDPR – legitimate interest in the secure, fast and efficient provision and security of our website.
Our host(s) will only process your data to the extent necessary to fulfil its performance obligations and follow our instructions with regard to this data.

Our web hosting is operated by:
netcup GmbH
Daimlerstraße 25
D-76185 Karlsruhe

2.2 Cookies

Our website uses so-called “cookies”. Cookies are small text files that can be stored on the user’s device during the website visit and store certain information about the user. Cookies cannot access other data stored on the user’s device and do not cause any damage to this device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies).
Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.
Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies to analyse your surfing behaviour.
We use essential and optional cookies as described below.

2.2.1 Essential Cookies

These ensure the proper functionality of our website. Without essential cookies, this would not be guaranteed or only to a limited extent.

The use of essential cookies does not require consent. However, these can be deactivated at any time via the browser settings.

Legal basis: Section 165 (3) Telecommunications Act 2021 (“TKG”), Art 6 (1) (f) GDPR – legitimate interest in providing a functioning website and website services.

Essential Cookies that are used

Cookie nameDescription and purposeStorage time
borlabs-cookieSaves the settings of visitors selected in the Borlabs Cookie Box. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany. Further details on data processing by Borlabs can be found at: https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/1 year
_ga, _gat, _gidGoogle Tag Manager – Consent cookie to control advanced script and event handling.2 years
pll_languageSaves the language settings made by visitors when they visit the website.1 year
ln_orIs set by LinkedIn to determine whether oribi analyses can be carried out for certain domains.1 day
_hssrcIs set by Hubspot to store a unique session ID.End of the session
_hstcIs set by Hubspot to save the time of the visit.6 months
_cf_bmIs set by Cloud Flare to read and filter requests from bots.30 minutes
hubspotapi-csrfIs set by Hubspot and is used to protect third-party websites from accessing your data.1 year
__hs_cookie_cat_prefIs set by Hubspot to save the cookie settings.6 months
hubspotapi-prefsThis HubSpot cookie is used together with the hubspotapi cookie to remember whether the user has ticked the “Remember me” box (controls the authentication process of the main cookie).1 year
_hsscIs set by Hubspot to store anonymised statistics.30 minutes
hubspotutkIs set by Hubspot to store anonymised statistics.6 months
wishlistIs set by WordPress as soon as items are added to the shopping basket.End of the session

2.2.2 Optional Cookies

These are used to improve our website, optimise the user experience, analyse user behaviour or personalise marketing activities. These cookies include statistics cookies and marketing cookies.
They may also be set by external advertising companies (“third-party cookies”).
Optional cookies are only set in accordance with the user’s consent given via the website cookie banner. Consent can be revoked at any time (for all or individual cookies) with effect for the future. To do this, you can call up the cookie banner again at any time via the floating icon at the bottom left of the website and change the cookie settings. In addition, cookies can be rejected, authorised and deleted via the browser settings. The rejection or deletion of cookies that can be consented to can lead to functional restrictions on the website.

Legal basis: Art 6 para 1 lit a GDPR – consent.Cookie Präferenzen anpassen

Optional cookies that are used

Cookie nameDescription and purposeStorage time
_ga
_ga_0V7JNYGWCC,
_ga_4BXXKZJZTZ,
_ga_58GG1QVC8C,
_ga_B8SKQ9HHPZ,
_ga_BDJCJ7JL22,
_ga_CMVQJLTS69,
_ga_GJH9RGDDP5,
_ga_RQXSGJFQ59,
_ga_X6LMX9VR0Y,
_ga_LXTM6CQ0XK,
_ga_TSV1TG0PFC
Is used by GA4 to identify a unique user.2 months
_gat_UA-233105469-1Used to throttle the request rate and expires after one minute Set by Google Analytics to read and filter requests from bots.1 minute
_gcl_auIs set by Google Adsense to save and track conversions1 year
_gidIs set by Google Analytics to count and store page views24 hours
test_cookie doubleclick.netIs set by Google Ads as a test to check whether the browser allows cookies to be set. Contains no identification features15 minutes
IDE doubleclick.netIs set by Google Ads. It contains a randomly generated user ID. Google can use this ID to recognise the user across different websites and display personalised advertising.1 year
NIDIs used to display the Google Map and YouTube and to provide advertising or retargeting and to save user preferences.6 months
SRCHD, SRCHHPGUSR, SRCHUID und SRCHUSRAre set by Bing Advertising. These are cookies from the analytics service that links data from the Bing advertising network with the actions performed on the website.2 years
SUIDTo save a unique session ID.20 minutes
MUIDUsed as a unique user identifier. It can be set by embedded Microsoft scripts and is used to enable the tracking of users across different Microsoft domains.13 months
OID, OIDI und OIDRAre used for advertising tracking purposes, to track the targeting and performance of advertising campaigns in the Bing advertising network. OIDR is used as an identifier for an object in the identity system of.OIDI 14 days
OID and OIDR 3 months
_HPVNIs a first-party cookie from Microsoft MSN that ensures that the website functions properly.1 year
BFBHelps to target and track the performance of advertising campaigns in the Bing advertising network.1 year
_RwBfIs set for Bing advertising tracking purposes1 year
_SSIs used for tracking with Microsoft BingOnly for the session
ACLPlaces an icon in the Chrome toolbar that indicates whether cookies are allowed/allowed/denied for the current page/session.Only for the session
USRLOCUsed by Bing to understand user interaction with the website.Only for the session
_uetvid und _uetsidThis cookie is used by Microsoft Bing Ads and is a tracking cookie. It enables us to contact a user who has previously visited our website.1 day
_clckIs set by Microsoft Clarity to store a unique user ID.1 year
_clskIs set by Microsoft Clarity to store a user’s page views and summarise them in a single session record.1 day
_uetmsclkidIs set by Microsoft to save actions performed on the website.Session
bcookieIs set by LinkedIn and is used to uniquely identify devices used to access the LinkedIn platform in order to prevent unauthorised access.1 year
lidcIs set by LinkedIn and is used by LinkedIn to select the data centre.24 hours
AMCVS_14215E3D5995C57C0A495C55%40AdobeOrg; AMCV_14215E3D5995C57C0A495C55%40AdobeOrgLinkedIn Analytic cookie indicates for the Adobe Experience Cloud when a session has started.2 years
AnalyticsSyncHistoryIs set by LinkedIn to store and track visits to various websites.30 days
UserMatchHistoryIs set by LinkedIn to enable ad placement or retargeting.30 days
gpv_pnIs used to store and retrieve the previously visited page in Adobe Analytics.6 months
aam_uuidIs set by LinkedIn to be able to set the ID synchronisation for Adobe Audience Manager.6 months
langLinkedIn cookie to store a user’s language preference so that LinkedIn.com displays the language the user has selected in their settings.Session
li_gcIs set by LinkedIn and is used to store the guest’s consent to the use of cookies for non-essential purposes.6 months
li_mcSet by LinkedIn and used as a temporary cache to avoid database queries for a member’s consent to use non-essential cookies, and is used to have consent information on the client side to enforce consent on the client side.6 months
li_sugrIs set by LinkedIn and is used to make a probable comparison of the identity of a user outside the designated countries.90 days
liapIs set by LinkedIn and is used by non-WWW domains to identify the login status of a member.1 year
lms_adsIs set by LinkedIn and is used to identify LinkedIn members outside of LinkedIn for advertising purposes.30 days
lms_analyticsUsed to identify LinkedIn members outside of LinkedIn for analyses.30 days
s_ccIs set by LinkedIn and is used to determine whether cookies are activated for Adobe Analytics.Session
s_ipsIs set by LinkedIn and tracks the percentage of pages viewed.Session
s_plt, s_pltpIs set by LinkedIn and provides the value of the URL for use by Adobe Analytics.Session
s_ppvSet by LinkedIn and used by Adobe Analytics to store and retrieve what percentage of a page has been viewed.Session
s_sqIs set by LinkedIn and used to store information about the previous link that the user clicked on in Adobe Analytics.Session
s_tpIs set by LinkedIn and tracks the percentage of the page viewed.Session
s_tslvIs set by LinkedIn and used to store and retrieve the time since the last visit in Adobe Analytics.6 months
_hjIncludedInPageviewSampleSet by Hotjar to determine whether a website visitor is included in the data sample defined by the website’s page view limit.2 minutes
_hjAbsoluteSessionInProgressIs set by Hotjar to recognise the first page view of a website visitor.30 minutes
_hjFirstSeenIs set by Hotjar to identify the first session of a new website visitor and new user sessions.30 minutes
_hjIncludedInSessionSample_{site-id}Set to determine whether a user is included in the data sample defined by your website’s daily session limit.2 minutes
_hjSession_{site-id}Is set by Hotjar to ensure that subsequent requests in the same session window can be assigned to the same session.30 minutes
_hjTLDTestSet by Hotjar to determine the most common cookie path to use instead of the hostname on the website to share cookies across subdomains.Session
_hjSessionUser_3034179Hotjar cookie that is set when a user accesses a page for the first time.1 year
_lfaThis cookie is set by the provider Leadfeeder. This cookie is used to identify the IP address of devices that visit the website. The cookie collects information such as IP addresses, time spent on the website and page views for the visits. This collected information is used for retargeting multiple users who are redirected from the same IP address.2 years
_wpfuuidIs set by WordPress and activates the form functionality on our website.11 years
__hs_opt_outIs set by HubSpot to save cookie settings.6 months
__hs_do_not_trackIs set by HubSpot to store “Do not track” signals.6 months
hs_ab_testIs set by HubSpot to save the IDs of experiments and sessions for A/B tests.Session
hs-messages-is-openIs set by HubSpot to save whether a message has been displayed.30 minutes
hs-messages-hide-welcome-messageIs set by HubSpot to save whether a message has been displayed.1 day
messagesUtkIs set by HubSpot to save browser details, save actions performed on the website.13 months
_fbpThis cookie is set by Facebook to display adverts when you are on Facebook or a digital platform supported by Facebook advertising after visiting this website.2 months
_conv_vConvert Cookie is a string of parts separated by an asterisk (*): Number of sessions, number of sessions for this visitor, timestamp for the start of the current session, timestamp for the start of the first session, number of page views for this visitor in all sessions and timestamp for the start of the previous session.Max. 6 months
_conv_rThis cookie stores the domain name of the referrer, the referral medium and the search terms of the referrer that were automatically selected by the search engines or manually entered via the corresponding UTM variable.This is overwritten each time a visitor comes from a new referrer.

2.2.3 How you can control and manage the use of cookies

By clicking the “Accept all” button in our cookie banner, you consent to the use of the optional cookies listed above on our website. Your consent can be revoked at any time (for all or individual cookies) with effect for the future.

You can also prevent the use of cookies by selecting the appropriate settings in your browser or by deleting cookies from your device or browser. Most browsers accept cookies automatically. However, you can change your browser settings to delete cookies or to prevent their automatic use if you prefer. In general, you have the option of seeing which cookies have been set and deleting them individually, blocking third-party cookies or cookies from certain websites, accepting all cookies, being notified when a cookie is used or rejecting all cookies. Select “Options” or “Settings” in your browser to change your preferences and use the following links for more browser-specific information:

Cookie settings in Microsoft Edge 

Cookie settings in Firefox

Cookie settings in Chrome

Cookie settings in Safari

If you delete all cookies, any preferences will be lost and websites may not function properly or some functions may be lost. You should be aware that if you delete all cookies, any preferences will be lost and many websites may not work properly or some functions may be lost. For these reasons, we recommend that you do not disable cookies when you use our website.

2.3 How you can control and manage the use of cookies

2.3.1 Google Tag Manager

With your consent, we use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that enables us to integrate tracking or statistical tools and other technologies on our website.

The Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It is only used to manage and display the tools integrated via it. However, Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company in the United States.
can be transmitted. Your data (including IP address) may also be transmitted to a Google server in the USA. The USA is considered an unsafe third country (see point 3.2 below).

Legal basis: Art. 6 para. 1 lit a GDPR – consent.

2.3.2 Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.
These are

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server enquiry
  • IP address
    This data is not merged with other data sources. The processing of these log files is necessary for us to ensure the functionality, stability and security of our website. We may also process them as part of forensic investigations in the event of a security incident or to compile user statistics. For statistical purposes, your IP address is only used in anonymised form.

Legal basis: Article 6(1)(f) GDPR – legitimate interest in maintaining the functionality, stability and security of our website.

2.3.3 Google Analytics

With your consent, this website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors.
The website operator receives various usage data, such as page views, length of visit, operating systems used and origin of the user. This data is summarised in a user ID and assigned to the respective end device of the website visitor. We can also use Google Analytics to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modelling approaches to supplement the data records collected and uses machine learning technologies for data analysis. Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting).

Your data (including IP address) may also be transmitted to a Google server in the USA. The USA is considered an unsafe third country (see point 3.2 below). The data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here:
https://privacy.google.com/businesses/controllerterms/mccs/.

Legal basis: Art. 6 para. 1 lit a GDPR – consent.

Demographic characteristics in Google Analytics

If you have consented to the use of Google Analytics, this website uses the “demographic characteristics” function of Google Analytics in order to be able to display suitable adverts to website visitors within the Google advertising network. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the “Objection to data collection” section of the Google policy.

Google Analytics e-commerce measurement

If you have consented to the use of Google Analytics, this website uses the “e-commerce measurement” function of Google Analytics. With the help of e-commerce measurement, the website operator can analyse the purchasing behaviour of website visitors to improve its online marketing campaigns. Information such as orders placed, average order values, shipping costs and the time from viewing to purchasing a product is recorded. This data can be summarised by Google under a transaction ID that is assigned to the respective user or their device.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de.

You can find more information on how Google Analytics handles user data in Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de

Order processing

We have concluded an order processing contract with Google.

2.3.4 Hotjar

This website uses Hotjar. The provider is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).

Hotjar is a tool for analysing your user behaviour on this website. Hotjar allows us to record your mouse and scroll movements and clicks, among other things. Hotjar can also determine how long you remain with the mouse pointer in a certain place. Hotjar uses this information to create so-called heat maps, which can be used to determine which website areas are favoured by website visitors.

Furthermore, we can determine how long you stayed on a page and when you left it. We can also determine at which point you cancelled your entries in a contact form (so-called conversion funnels).

Hotjar can also be used to obtain direct feedback from website visitors. This function serves to improve the website operator’s web offerings.

Hotjar uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or the use of device fingerprinting).

Legal basis: Art. 6 para. 1 lit a GDPR – consent.

Deactivating Hotjar

If you wish to deactivate data collection by Hotjar, click on the following link and follow the instructions there:
https://www.hotjar.com/policies/do-not-track/

Please note that Hotjar must be deactivated separately for each browser or end device.

For more information about Hotjar and the data collected, please refer to Hotjar’s privacy policy at the following link:
https://www.hotjar.com/privacy

Contract processing

We have concluded an order processing contract with Google.

2.3.5 Leadfeeder

Our website uses the Leadfeeder analytics service from Liidio Oy, Mikonkatu 17, 0100 Helsinki, Finland. Leadfeeder collects user behaviour data (pages viewed, visitor source, time spent on the website) and records the user’s IP address in order to determine their company and geographical location. All visit data is aggregated at company level, i.e. Leadfeeder automatically sorts out all users with private IP addresses. Leadfeeder also enriches this company data with contact data from publicly available data sources.

Further details on Leadfeeder can be found in the privacy policy at https://www.leadfeeder.com/privacy/.

2.4 External media

2.4.1 Google Maps

With your consent, this site uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps is deactivated on our website by default and is only activated with your consent – by clicking on Google Maps. Your data (including IP address) may also be transmitted to a Google server in the USA. The USA is considered an unsafe third country (see point 3.2 below). We have no influence on further data processing by Google.
If Google Maps is activated, Google may use Google Fonts for the purpose of standardising the display of fonts. When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

Legal basis: Art 6 para 1 lit a GDPR – consent.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. See points 3.2, 3.3.

Details can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/ and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
You can find more information on the handling of user data in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

2.4.2 YouTube with extended data protection

This website embeds videos from the YouTube website with your consent. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. YouTube is a Google video service designed to offer users a multi-media experience. The YouTube plugin on our website is deactivated by default and is only activated with your consent – by clicking on a YouTube video or the YouTube plugin icon. This establishes a connection to the Google server and allows your data (in particular your IP address, the current website, existing Google cookies and your device and browser settings) to be transmitted to Google. Your data (including IP address) may also be transmitted to a Google server in the USA. The USA is considered an unsafe third country (see point below). We have no influence on further data processing by Google.

We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.
As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
Furthermore, YouTube can store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent attempts at fraud. If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no influence.

Legal basis: Art. 6 para. 1 lit a GDPR – consent.

Further information about data protection at YouTube can be found in their privacy policy at
https://policies.google.com/privacy?hl=de.

2.5 Marketing

2.5.1 Google Ads

With your consent, this website uses Google Ads. Google Ads is an online advertising programme of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display adverts in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted adverts can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analysing, for example, which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.

Your data (including IP address) may also be transmitted to a Google server in the USA. The USA is considered an unsafe third country (see point 3.2 below). We have no influence on further data processing by Google.

Legal basis: Art. 6 para. 1 lit a GDPR – consent.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. See point 3.2
Details can be found here:
https://policies.google.com/privacy/frameworks and
https://privacy.google.com/businesses/controllerterms/mccs/.

2.5.2 Google Ads Remarketing

With your consent, this website uses the functions of Google Ads Remarketing. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With Google Ads Remarketing, we can assign people who interact with our online offering to specific target groups in order to subsequently show them interest-based advertising in the Google advertising network (remarketing or retargeting).
Furthermore, the advertising target groups created with Google Ads Remarketing can be linked to Google’s cross-device functions. In this way, interest-based, personalised advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one end device (e.g. mobile phone) can also be displayed on another of your end devices (e.g. tablet or PC). Your data (including IP address) may also be transmitted to a Google server in the USA. The USA is considered an unsafe third country (see point 3.2 below). We have no influence on further data processing by Google.

If you have a Google account, you can object to personalised advertising by clicking on the following link:
https://www.google.com/settings/ads/onweb/.

Legal basis: Art. 6 para. 1 lit a GDPR – consent.

Further information and the data protection provisions can be found in Google’s privacy policy at
https://policies.google.com/technologies/ads?hl=de.

2.5.3 Google Conversion-Tracking

With your consent, this website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google conversion tracking, Google and we can recognise whether the user has carried out certain actions. For example, we can analyse which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We find out the total number of users who have clicked on our adverts and what actions they have taken. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification purposes.

Your data (including IP address) may also be transmitted to a Google server in the USA. The USA is considered an unsafe third country (see point 3.2 below). We have no influence on further data processing by Google.

Legal basis: Art. 6 para. 1 lit a GDPR – consent.

You can find more information about Google Conversion Tracking in Google’s privacy policy:
https://policies.google.com/privacy?hl=de.

2.5.4 Google DoubleClick

With your consent, this website uses functions of Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter “DoubleClick”).

DoubleClick is used to show you interest-based adverts throughout the Google advertising network. The adverts can be targeted to the interests of the respective viewer with the help of DoubleClick. For example, our adverts can be displayed in Google search results or in advertising banners linked to DoubleClick.

In order to be able to display interest-based advertising to users, DoubleClick must be able to recognise the respective viewer and assign the websites visited, clicks and other information on user behaviour to them. For this purpose, DoubleClick uses cookies or comparable recognition technologies (e.g. device fingerprinting). The information collected is summarised in a pseudonymous user profile in order to display interest-based advertising to the user concerned. Your data (including IP address) may also be transmitted to a Google server in the USA. The USA is considered an unsafe third country (see point 3.2 below). We have no influence on further data processing by Google.

Legal basis: Art. 6 para. 1 lit a GDPR – consent.

Further information on how to object to the adverts displayed by Google can be found in the following links:
https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated.

2.5.5 Hubspot

With your consent, we use the provider HubSpot Inc, 25 First Street, 2nd Floor, Cambridge, MA 02141, USA on our website. HubSpot is a user database management service provided by HubSpot, Inc. We use HubSpot on this website for our online marketing activities.

Click here for the privacy policy: https://legal.hubspot.com/privacy-policy

2.5.6 LinkedIn Insights

With your consent, this website uses the Insight tag from LinkedIn. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

LinkedIn Insight Tag is deactivated on our website by default and is only activated with your consent – by clicking on the LinkedIn plugin symbol. With your consent, LinkedIn Insight Tag creates a “browser cookie”, which collects the following data IP address, timestamp, page activity and LinkedIn demographic data if the user is an active LinkedIn member. If you are logged in to LinkedIn while visiting our website, a connection to the LinkedIn server is established using the LinkedIn Insight tag. With the help of the LinkedIn Insight tag, we receive information about visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyse the key professional data (e.g. career level, company size, country, location, industry and job title) of our website visitors and thus better tailor our site to the respective target groups. We can also use LinkedIn Insight Tags to measure whether visitors to our websites make a purchase or take another action (conversion measurement). Conversion measurement can also be carried out across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting function that we can use to display targeted advertising to visitors to our website outside the website, whereby, according to LinkedIn, no identification of the advertising addressee takes place.

LinkedIn itself also collects log files (URL, referrer URL, IP address, device and browser properties and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymised).
However, we cannot rule out the transmission of the data collected by LinkedIn to a LinkedIn server in the USA. The USA is considered an unsafe third country (see point 3.2 below).

The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the personal data collected from website visitors on its servers in the USA and use it for its own advertising purposes.

Details can be found in LinkedIn’s privacy policy at
https://www.linkedin.com/legal/privacy-policy#choices-oblig.

Legal basis: Art. 6 para. 1 lit a GDPR – consent.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. See point 3.2 below.

Details finden Sie hier:
https://www.linkedin.com/legal/l/dpa und
https://www.linkedin.com/legal/l/eu-sccs.

Widerspruch gegen die Verwendung von LinkedIn Insight Tag
Der Analyse des Nutzungsverhaltens sowie zielgerichtete Werbung durch LinkedIn unter folgendem Link widersprechen:

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Furthermore, members of LinkedIn can control the use of their personal data for advertising purposes in the account settings. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

2.6 Contact forms set up on our website

2.6.1 Sample order form

To process your sample orders, we process the following data using HubSpot: Title, first name, surname, company, email address, telephone number, country, city, address and postcode as well as the content of your order-related messages to us. We cannot process your order without this information. Further details are optional. The data collected as part of these services is stored on HubSpot servers.

The data is stored for 12 months after the enquiry has been completed.

Legal basis: Art 6 para 1 lit b GDPR – fulfilment of (pre-)contractual obligations.

2.6.2 General contact form

We process the personal data provided via the contact form (title, first name, surname, company and email address, telephone number, subject and content of the contact message) using HubSpot. The data collected as part of these services is stored on HubSpot servers. It can be used by us to contact you and process your enquiries.
The data will be stored for 12 months after the enquiry has been dealt with.

Legal basis: Art 6 para 1 lit b GDPR – fulfilment of (pre-)contractual obligations.

2.6.3 Newsletter form

If you subscribe to our newsletter via our website, the personal data you provide (title, first name, surname, email address) will be processed by HubSpot in order to send you the requested newsletter with customised information about our products, services and news. The information collected as part of these services is stored on HubSpot servers. It can be used by us to contact you and identify services that may be of interest to you. However, we cannot rule out the possibility of the data collected being transferred to HubSpot servers in the USA. The USA is considered an unsafe third country (see point 3.2 below).
Newsletter usage is also analysed. The information collected in the analysis is used exclusively to optimise our own marketing measures and is not shared with third parties.
More information on HubSpot’s privacy policy. More information from HubSpot regarding EU data protection regulations.
This data is stored for 24 months.

Legal basis: Art 6 para. 1 lit a GDPR – consent.

Consent can be revoked at any time with effect for the future. To do so, click on the corresponding link in the newsletter or inform us of your cancellation using our contact details (see 1.1 above).

2.6.4 Job application form

We offer you the opportunity to apply to us (e.g. by e-mail, post or online application form). Below we inform you about the scope, purpose and use of your personal data collected as part of the application process.

Scope and purpose of data collection
If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship.

Legal basis: Art. 6 para. 1 lit. b GDPR (general contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR.

Your personal data will only be passed on within our company to persons who are involved in processing your application. If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of Art. 6 para. 1 lit. b GDPR for the purpose of implementing the employment relationship.

Inclusion in the applicant pool
If we do not make you a job offer, you may have the opportunity to join our applicant pool. If you are accepted, all documents and details from your application will be transferred to the applicant pool in order to contact you in the event of suitable vacancies.
Inclusion in the applicant pool takes place exclusively on the basis of your express consent (Art. 6 para. 1 lit. a GDPR). Giving your consent is voluntary and is not related to the current application process. The data subject can withdraw their consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, provided there are no legal grounds for retention.

Retention period of the data
We process the data for the duration of the application process and beyond, insofar as legal claims can be made against us (therefore at least for 7 months after a rejection due to possible claims under the GlBG). The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 7-month period has expired (e.g. due to an impending or pending legal dispute), it will only be deleted when the purpose for further storage no longer applies.
In addition, your data may be stored if you give your consent for further retention in our applicant pool. The data from the applicant pool will be irrevocably deleted no later than two years after consent has been granted. Once the retention periods have expired, the data will be deleted and the physical application documents destroyed.

2.7 Customer-Relationship-Management – Hubspot CRM

With your consent, we use Hubspot CRM on this website. The provider is HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, Germany (hereinafter Hubspot CRM).

Among other things, Hubspot CRM enables us to manage existing and potential customers and customer contacts. With the help of Hubspot CRM, we are able to record, sort and analyse customer interactions via email, social media or telephone across various channels. The personal data collected in this way can be analysed and used for communication with potential customers or for marketing measures (e.g. newsletter mailings). With Hubspot CRM, we are also able to record and analyse the user behaviour of our contacts on our website. We use all information collected exclusively to optimise our own marketing measures and do not share this information with third parties.
However, we cannot rule out the transmission of the collected data to a HubSpot server in the USA. The USA is considered an unsafe third country (see point 3.2 below).

Legal basis: Art. 6 para. 1 lit a GDPR – consent.

Details can be found in Hubspot’s privacy policy:
https://legal.hubspot.com/de/privacy-policy.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. See point 3.2.

Details can be found here:
https://www.hubspot.de/data-privacy/privacy-shield.

2.8 Enquiry by e-mail, telephone or fax

If you contact us by email, telephone or fax, we will store and process your enquiry, including all resulting personal data (name, contact details, enquiry) for the purpose of processing your request. This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested. The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory retention periods remain unaffected.

3. DATA RECIPIENT

3.1 We may disclose personal data to the following recipients for the above-mentioned purposes:

  • IT service providers who provide hosting, maintenance and security services for our website:

Our web hosting is provided by netcup GmbH, based in Germany
Our customer relationship management is provided by HubSpot Germany GmbH, based in Germany

  • Advertising and web analytics partners (e.g. Google, Bing, Hotjar, Leadfeeder) that provide the services mentioned in points 2.3 and 2.5;
  • If a data transfer is required by law or is necessary for the exercise or defence of legal claims, we may disclose your data to competent authorities and courts as well as to other third parties who advise us in this context (e.g. lawyers, auditors, forensic experts).

3.2 Some recipients may be located in a country outside the EEA that has not (yet) been certified as having an adequate level of data protection (comparable to the EU) (“third country”). This applies, for example, to the USA, where some providers of web tools are located or may process data there (see points 2.3 – 2.5 above). In particular, there is a risk that local authorities or courts may gain access to your data and that you will not have adequate legal protection options in this regard.

3.3 In accordance with Chapter V. of the GDPR, we implement appropriate security safeguards when transferring personal data to such third countries. This includes the conclusion of the standard contractual clauses published by the EU Commission for the transfer of personal data (Art 46 para 2 lit c GDPR) and, if necessary, obtaining your express consent (Art 49 para 1 lit a GDPR). Further details on the security guarantees used and copies of the respective agreements are available on request at datenschutz@iwgplating.com.

3.4 With your consent, this website uses tools offered by companies based in the USA (such as Google, HubSpot and LinkedIn). The information generated by cookies about your use of our website (including your IP address and the URLs of the web pages accessed) may be transferred to servers of these companies in the USA and stored there. See above for details.

4. STORAGE PERIOD

4.1 Personal data is stored for as long as it is required for the fulfilment of the corresponding processing purpose. In any case, we therefore process your data for the duration of the contractual or service relationship (see point 3 above). In addition, we may store data until the expiry of applicable statutory retention periods (see the 7-year retention obligation under tax and company law provisions of the Austrian Commercial Code (UGB) and Federal Fiscal Code (BAO)) or as long as other legitimate interests in storage exist (e.g. necessity of the data as evidence for the assertion, exercise or defence of claims in pending or imminent legal disputes).

4.2 For the storage period of server log data see point 2.3.2 above and for cookies see point 2.2 above.

5. AFFECTED RIGHTS

5.1 In accordance with the statutory provisions (Art. 7, 15 – 21 GDPR), you have the right to information, rectification, erasure, restriction and data portability as well as the right to object to processing.

5.2 If we process your personal data on the basis of your consent, you have the right to revoke this consent at any time with effect for the future. A revocation does not affect the legality of the processing until the revocation.

5.3 We do not process your personal data for the purpose of making decisions based solely on automated processing (e.g. profiling) (Art. 22 GDPR).

5.4 Our contact details mentioned above can be used to exercise the rights of data subjects. You also have the right to lodge a complaint with a competent supervisory authority (for Austria: Austrian Data Protection Authority, Barichgasse 40-42, A-1030 Vienna, “www.dsb.gv.at“).

If you have any questions about this privacy policy, you can contact us as follows:

By e-mailoffice@iwgplating.com or datenschutz@iwgplating.com