The protection of your personal data is of great importance to us. We thus process your data according to the legal provision (GDPR, Austrian Law on Telecommunications of 2003). In no case shall we sell your data or transmit it to third parties outside of the SAATBAU group unless you explicitly agree. Below, we willingly inform you about the way we treat your data at Saatbau Linz eGen. Should you have any comment or questions regarding data protection, please contact us anytime by phone +43 732 389 00-0 or e-mail at datenschutz@saatbau.com. We shall be happy to assist you.

Overview

The following privacy statement shall inform you about the way and extent of processing of so-called personal data by SAATBAU. Personal data is any piece of information that is or can be directly or indirectly related to your person.
Essentially, data processing by SAATBAU can be attributed to three categories:

• When you access the Website auf SAATBAU, information is exchanged between your device and our server. Some of this data may be personal. The information collected thereby is used i.a. to optimise our website.
• In the course of processing an order, all data required is processed. Your data is transmitted only within the SAATBAU group and only to an extent necessary for processing your order.
• We only use your data for advertising purposes if you have explicitly agreed to this or if we are authorised to do so by law and you have not objected to data processing for advertising purposes.

In accordance with the legal procisions you have a number of rights which you can exercise in relation with us. These rights are detailed in the present data privacy statement

This data privacy statement is applicable to data processing by Saatbau Linz eGen, particularly on our website www.saatbau.com. The Controller in the sense of the privacy law is Saatbau Linz eGen, Schirmerstraße 19, 4060 Leonding (hereinafter “SAATBAU”). The data protection officer of SAATBAU can be contacted at the above-mentioned address, department Datenschutz or by e-mail at datenschutz@saatbau.com or by phone at +43 732 389 00-0.

Purpose of data processing and legal basis

1. Accessing our website

When you access our website, the browser used on your device will automatically send information to the server of website and this imformation will by temporarily stored in a so-called Log-File. We have no control over this process. Without you having any influence on this, the following information will be collected and stored until it is automatically deleted:

• the IP address of the accessing web-enabled device
• the date and time of access
• the name and URL of the accessed file
• the website/application from where access was established (referrer-URL)
• the browser you use and, if appliccable, the operating system of your web-enabled device as well as the name of your access provider.

In cases the GDPR is appliccable, the processing of the IP address is governed by Article 6, paragraph 1, letter f of the GDPR. Our legitimate interest stems form the following list of purposes of data processing. We should like to point out, that the data collected does not enable us to draw direct conclusions on your identity and that such conclusions are not drawn.

The IP address of your device and any other of the information listed above are used by us for the following purposes:

• to ensure a smooth establishment of the connection,
• to ensure a comfortable use of the website/application,
• to evaluate system safety and stability.

The data shall be stored for a period of 14 months and then deleted/erased automatically. Furthermore, we use so-called Cookies and tracking methods on our website. The present privacy statement explicates the nature of these processes and the data used therefore in detail.

2. Data processing in the order process

2.1. General information

When you place an order with us, we process the data necessary for the performance of the contract. In addition to the goods ordered by you, this data comprises your title, first and last name, your address and – if available – your phone number and e-mail address as well as the date of delivery. In the course of executing your order, we process your address and/or phone or mobile phone number and/or e-mail address in order to inform you per phone call, SMS or e-mail about the exact date of delivery of your order to ensure a smooth delivery process. The order data is collected either via our website, a SAATBAU-employee working for the SAATBAU location which is regionally competent for you or via sales representatives acting on behalf of SAATBAU or so-called independent commercial agents. Telephone orders are always registered by SAATBAU or sales representatives acting for SAATBAU. No matter how you order, your data wull be transmitted to the regionally competent SAATBAU location or the regionally competent sales representatives. In case of guarantee issues, we transfer only the necessary and relevant data to the corresponding guarantor, named in the corresponding guarantee conditions, for further processing on his own responsibility. The legal basis herefore is Article 6, paragraph 1 letter b) of the GDPR, i.e. you provide the data on the basis of the contractual relationship between you and us. Any further processing of your contact data is subject to your explicit consent.

Upon contract conclusion, you are attributed a customer number. In case your data corresponds to an existing customer account, we shall link your order to this account. This linking is based on Article 6 paragraph 1 letter f) of the GDPR and the legitimate interest of ensuring optimum communication between you and us. In case you are unavailable at the address data indicated, we shall process the required data for the purpose of address verification and in order to avoid wrong deliveries. For this purpose, we work with a specialised service provider on the basis of a processer contract. This processing is based on Article 6 paragraph 1 letter f) GDPR. It is a legitimate interest and beyond this a legal requirement of the GDPR to process only correct data.

In case of a delay in payment and subject to the other legal requirements to be met, we will transmit the necessary data to a company commissioned to enforce the claim. The legal bases for this are both Article 6 Paragraph 1 Letter b) and Article 6 Paragraph 1 Letter f) GDPR. The enforcement of a contractual claim is to be regarded a legitimate interest within the meaning of the second passage of the regulation cited above.

Unless we use your contact data for advertising purposes (see 3. below), we shall save the data collected for the performance of the contract until the expiry of the statutory or any potential contractual warranty and guarantee rights. Once these periods have expired, we shall store the information relating to the contractual relationship required by commercial and tax law according to the statutory periods on the basis of Articel 6 Paragraph 1 Letter c) GDPR in a format unavailable for direct access. During this time period (generally six or ten years after the end of the year the contract was concluded) the data shall only be processed again in case of an audit by the financial authorities.

2.2. Orders via our webshop

We save the following data for the purpose of executing the contract: Your title, your first name, your last name, your address and – if available – your telephone number and e-mail address and, if applicable, your delivery date. The data you provide is required to execute the contract or to take steps prior to entering into the contract. Without these data, we cannot conclude the contract with you. We shall not transmit data to third parties, with the exception of credit card data which are transferred to the processing bank / payment service provider for the purpose of debiting the purchase price, to the transport company / shipping company commissioned by us to deliver the goods and to our tax advisor to fulfill obligations according to tax law. The legal basis for this is Article 6 Paragraph 1 Letter b) GDPR, i.e. you provide us with the data on the basis of the contractual relationship between you and us.

If you abandon the order process, the data saved by us are deleted.

Unless we use your contact data for advertising purposes (see 3. below), we shall save the data collected for the performance of the contract until the expiry of the statutory or any potential contractual warranty and guarantee rights. Once these periods have expired, we shall store the information relating to the contractual relationship required by commercial and tax law according to the statutory periods on the basis of Articel 6 Paragraph 1 Letter c) GDPR in a format unavailable for direct access. During this time period (generally six or ten years after the end of the year the contract was concluded) the data shall only be processed again in case of an audit by the financial authorities.

3. Data processing for advertising purposes

3.1. General information

Whether or not you order, if you are interested in SAATBAU products, you can provide your contact details to our employees or to sales representatives acting on behalf of SAATBAU or so-called independent commercial agents by filling in a questionnaire. If you give your consent by telephone, we will save your telephone number for verification purposes on the basis of Article 6 Paragraph 1 Letter f) GDPR. Unless you revoke your consent or object to our data saving, the data storage period for advertising purposes does not follow any rigid principles and is based on the question of its necessity for advertising.

3.2. Our magazine Inform

The online form shows you the data we need to be able to deliver our magazine to you (mandatory fields are marked with *). The legal basis for this is your content in accordance with Article 6 Paragraph 1 Letter a) GDPR. For the purpose of sending the magazine, your data will be stored until you revoke your consent.

3.3. Use of address data

We process your address data for sending magazines, invitations and the like as well as surveys by post. We process your address on the basis of Article 6 Paragraph 1 Letter a) and f) GDPR, in which context advertising is also to be considered a legitimate interest.

3.4. Use of e-mail address and phone number

We only process your telephone or mobile phone number and/or your e-mail address for our own advertising purposes and only if you have explicitly consented to this within the meaning of Article 6 Paragraph 1 Letter a) GDPR.

In connection with telephone calls, SAATBAU cooperates with carefully selected service providers upon conclusion of processor agreements. Where necessary, so-called standard contractual clauses of the EU were adopted, which we will be happy to provide upon request.

If you provide us with your email address, we will first send you a confirmation e-mail. Please click on the “Confirm” button in this email in order to be included in the newsletter mailing list. In connection with this so-called double opt-in procedure, we save the IP address used for registration on our website and confirmation, as well as the time of these operations. The legal basis for this storage is Article 6 Paragraph 1 Letter f) GDPR. The ability to provide evidence in case of doubt about your consent to receiving our Newsletter is to be considered a legitimate interest. After thorough examination it appeared that the legitimate interest was not outweighed by website visitors’ interests.

When ordering our newsletter, you can also indicate the crops and farming type of interest to you. If you specify the crops and farming type of interest to you, we may use this information to provide you with specific information. You can withdraw your consent to our using your farming type or the crops of interest to you either individually or together with a revocation of your consent to receiving the Newsletter. You can revoke your consent at any time free of charge and separately for each channel. It is enough to make a short phonecall or to send a message to the contact addresses indicated under 2. Additionally, you can terminate your e-mail Newsletter subscription by clicking on ‘Unsubscribe’ at the end of each e-mail.

3.5 Registration and User account

If you want to use our web shop, you can create a user account. During the registration process we will let you know which information is required (mandatory fields and optional information). We use the data you enter during registration for you to be able to access our offer. The legal basis is your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR. We will inform you by e-mail about any changes regarding the information available upon registration, such as changes in the scope of the offer or technical updates.

In the event that you terminate your user account, your data will be deleted from this account; data that has to be stored for commercial or tax law reasons in accordance with Art. 6 Paragraph 1 Letter c) GDPR is exempt from this deletion. It is your responsibility to back up your data if you terminate your account before the end of the contract period. We are entitled to irretrievably delete all data stored about you during the term of the contract.

We shall save the IP address and the time of each of your actions when you use our registration and log in function in connection with aour user account. We do so on the basis of our legitimate interests and on the basis of your user interests to protect your data against misuse and other unauthorised use. After 7 days at the latest, the IP addresses are anonymised or deleted.

As a principle, we do not pass on your data to third parties; The only exceptions are situations in which we have to pursue our claims or in which we have to comply with legal obligations according to Article 6 Paragraph 1 Letter c) GDPR.

3.6. Contact

If you contact us outside of an order, we will process the information you provide for the sole purpose of processing your request. The legal basis for this is your consent. If you contact us in connection with a contractual relationship between you and us, Article 6 Paragraph 1 Letter b) GDPR , i.e. this contractual relationship, shall also be legal basis for data processing. You can revoke your consent to the processing explained above at any time and free of charge with future effect by sending a short message to the contact details as indicated under 2. Your request will be deleted provided there are no statutory retention periods and no legitimate interest in further storage (e.g. legal defense) on the part of SAATBAU.

3.7. Competitions

If you participate in competitions, we shall use your data exclusively for the purpose of drawing a winner and notifying you if you won. To organise the competition, we may pass on your data to a cooperation partner handling this competition. If this is the case, we shall indicate this fact in the advertisement of the competition. In order to send you the prize, we will pass on your personal data (last name, first name, e-mail, postal code, city) to the deliverer. Your data will be stored at SAATBAU for as long as it is necessary to process the competition, unless we are legally obliged to store it longer and if you would like us to send you the prize. You can revoke your participation in the competition at any time with future effect by sending a corresponding notification.

Cookies

We use so-called cookies on our website. Cookies are small text files that your browser stores on your end device. They do not cause any damage. We use cookies to make our offer more user-friendly. Some cookies are stored on your end device until you delete them. They enable us to recognise your browser the next time you visit. If you do not want this, you can change the settings of your browser in such a way that it informs you whenever cookies are to be set to allow you to decide on a case-by-case basis.

If these cookies are personal data and are used for the technical implementation of our website, they are used on the basis of Article 6 Paragraph 1 Letter f) GDPR. In the sense of the aforementioned regulation, it is our legitimate interest to make our website available.

If you deactivate cookies, the functionality of our website may be restricted.

Google Maps

We use maps of the service „Google Maps” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Data privacy statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google Fonts

We use fonts („Google Fonts“) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Data privacy statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google ReCaptcha

We use the function ‘ReCaptcha’ in order to prevent bots from e.g. filling in online forms. This function is made available by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Data privacy statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Web-Analysis

Our objective within the meaning of the GDPR (legitimate interest) is to improve our offer and our website. The privacy of our users is important to us, therefore the user data are pseudonymised.

Your IP address is registered, but instantly pseudonymized (e.g. by deleting the last 8 bits). This allows only an approximative localisation.

Data processing takes place on the basis of the legal provisions of Section 96 Paragraph 3 of the Austrian Telecommunications Act (TKG) as well as Article 6 Paragraph 1 Letter a) (consent) and/or f) (legitimate interest) GDPR.

In addition, Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

User data is stored for a period of 14 months.

Detailed information on data usage by Google, your options for settings and objection can be found on the following Google websites: https://www.google.com/intl/en/policies/privacy/partners (How Google uses information from sites or apps that use our services), http://www.google.com/policies/technologies/ads (Use of data for advertising purposes), http://www.google.de/settings/ads (Manage information Google uses to show you advertisements).

Mouse Tracking

Our objective within the meaning of the GDPR (legitimate interest) is to improve our offer and our website. Therefore, we use Hotjar, in order to better understand the needs of our users and to optimise the offer on this website. With the help of Hotjar’s technology, we get a better understanding of the experiences of our users (e.g. how much time users spend on which pages, which links they click, what they like and don’t like, etc.) and this helps us tailor our offer according to the feedback from our users. Hotjar works with cookies (see above ) and other technologies to collect information about the behavior and the end devices of our users (in particular the IP address of the device (IP addresses are recorded and stored in an anonymised form), screen size, device type (Unique Device Identifiers), information about the browser used, location (country information only), preferred language for displaying our website). Hotjar stores these data in a pseudonimised user profile. Neither Hotjar nor we use the data to identify individual users, nor do we combine them with other data about individual users. Further information can be found in Hotjar’s data privacy statement: https://www.hotjar.com/legal/policies/privacy.

You can object to the storage of a user profile and information about your visit to our website by Hotjar as well as to Hotjar setting tracking cookies on other websites by clicking on this opt-out link.

Google-Re/Marketing-Services

Our objective within the meaning of the GDPR (legitimate interest) is to improve our offer and our website. We therefore use the marketing and remarketing services (‘Google Marketing Services’) of Google LLC, 1600 Amphitheater Parkway, Mountain View , CA 94043, USA, (“Google”).

Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

With the help of Google Marketing Services, we can display targeted advertisements for and on our website, presenting our users only advertisements that potentially reflect their interests. To do so, Google executes a code and uses so-called (re-)marketing tags, storing an individual cookie in the browser of the user. For the use of cookies see above.

Google may combine the information collected with similar information from other sources. If the user subsequently visits other websites, he will be shown advertisements tailored to his interests.

In addition, Google Analytics records the IP address of the user, but instantly pseudonymizes it (e.g. by deleting the last 8 bits). This means that only an approximate localisation is possible, the ads are not managed and displayed for a specific person, but for the cookie holder, regardless of who this cookie holder is. Of course, this does not apply if a user expressly allows Google to process the data without pseudonymisation. The information Google Marketing Services collects about the users is transmitted to Google and stored on Google’s servers in the USA. The user’s IP address is notcombined with other user data within other Google offers.

Among other things, we use cookies of the Google marketing service ‘Google AdWords’; We may display third-party advertisements on the basis of the Google marketing service ‘AdSense’ and its cookies. For more information on Google’s use of data for marketing purposes please refer to https://policies.google.com/technologies/ads . Google’s privacy statement is available at https://www.google.com/policies/privacy.

We also use ‘Google Tag Manager’ to integrate Google’s analysis and marketing services into our website and to manage them centrally.

Online presence in social media

We have an online presence in social networks and on platforms in order to be able to communicate with users, interested parties and customers active there. When using these networks and platforms, the terms and conditions and data processing guidelines of the respective operator apply.

Unless otherwise stated in our data privacy statement, we process user data when they communicate with us via social networks and platforms.

Soweit nicht anders im Rahmen unserer Datenschutzerklärung angegeben, verarbeiten wir die Daten der Nutzer, wenn diese mit uns in sozialen Netzwerken und auf Plattformen kommunizieren.

Use of Facebook social plugins

Our objective within the meaning of the GDPR (legitimate interest) is to improve our offer as well as the analysis, optimisation and efficient operation of our website. We therefore use social plugins (‘plugins’) of the social network facebook.com, which are operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (‘Facebook’). These plugins allow displaying content such as graphics, text, videos or interactive elements on the website. You can recognize them by one of the Facebook logos (‘f’ on the corresponding background, the ‘thumbs up’ symbol or the term ‘like’) or the additional label ‘Facebook Social Plugin’. You can see the list and images of the Facebook social plugins here: https://developers.facebook.com/docs/plugins/.

Facebook is certified under the Privacy Shield Agreement and offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

For more information on data collection by Facebook, further processing and use of the data, as well as user rights and setting options to protect privacy, please refer to the Facebook data privacy statement: https://www.facebook.com/about/privacy/.

Twitter

Content and functions of the Twitter service may be embedded in our online offer. They are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA and may include content such as images, videos or texts and buttons users can click to react to the content. If users have a Twitter account, Twitter can link access to content and functions to the respective user profile. Twitter’s privacy statement: https://twitter.com/de/privacy.

Twitter is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active).

Instagram

Content and functions of the Instagram service may be embedded in our online offer. They are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA and may include content such as images, videos or texts and buttons users can click to react to the content. If users have an Instagram account, Instagram can link access to content and functions to the respective user profile. Instagram’s privacy statement: http://instagram.com/about/legal/privacy/.

Pinterest

Content and functions of the Pinterest service may be embedded in our online offer. They are offered by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA and may include content such as images, videos or texts and buttons users can click to react to content. If users have a Pinterest account, Pinterest can link access to content and functions to the respective user profile. Pinterest’s privacy statement: https://about.pinterest.com/de/privacy-policy.

Xing

Content and functions of the XING service may be embedded in our online offer. They are offered by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany and may include content such as images, videos or texts and buttons users can click to react to content. If users have a XING account, XING can link access to content and functions to the respective user profile. XING’s privacy statement: https://www.xing.com/app/share?op=data_protection.

LinkedIn

Content and functions of the LinkedIn service may be embedded in our online offer. They are offered byLinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland and may include content such as images, videos or texts and buttons users can click to react to content. If users have a LinkedIn account, LinkedIn can link access to content and functions to the respective user profile. LinkedIn’s privacy statement: https://www.xing.com/app/share?op=data_protection.

LinkedIn is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law.
https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

Vimeo

Videos of the platform ‘Vimeo’ may also be embedded in our website. They are offered by Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Vimeo’s privacy statement: https://vimeo.com/privacy.

Youtube

Videos of the platform “YouTube” may also be embedded in our website. They are offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA angeboten.
Google’s privacy statement: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.Out: https://adssettings.google.com/authenticated.

Your rights

In addition to the right to revoke your consent, you have the following additional rights if the respective legal requirements are met:

• Right of access to your personal data stored by us in accordance with Article 15 GDPR; In particular, you can obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged period for which the data will be stored, the origin of your data, unless they were directly collected from you;
• Right to rectification of incorrect data or to have incomplete data completed in accordance with Article 16 GDPR;
• Right to deletion of your data stored by us in accordance with Article 17 GDPR where no statutory or contractual retention periods or other statutory obligations or rights to further storage apply,
• Right to restriction of processing of your data in accordance with Article 18 GDPR, if the accuracy of the data is contested by you, if the processing is unlawful and you refuse deletion; if the controller no longer needs the data, but you need them for the establishment, exercise or defence of legal claims; or if you have objected to processing pursuant to Article 21 GDPR;
• Right to data portability in accordance with Article 20 GDPR, i.e. the right to receive data provided by you in a commonly-used, machine-readable format, or to request transmissuin to another controller;
• Right to file a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or our company headquarters. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde).

In addition, under the conditions of Art. 21 Para. 1 GDPR, data processing can be objected to on grounds relating to the particular situation of the data subject.

The above general right to objection applies to all processing purposes described in this privacy statement, which are processed on the basis of Article 6 Paragraph 1 Letter f) GDPR.

Data security

All the data personally transmitted by you is transmitted using the generally used and safe standard SSL (Secure Socket Layer). SSL is a secure and proven standard that is also used, for online banking. One way to recognize a secure SSL connection is the s attached to the http (i.e. https: //…) in the address bar of your browser or the padlock symbol in your browser.

Do you have any questions? Let us know! We are happy to help with advice and assistance!

Version/Last Update: 12/2020