Skip navigation

Privacy statement

  1. Name and address of the data controllers

    The controllers within the meaning of the General Data Protection Regulation, other national data protection laws of the member states and further legal provisions governing data protection are:

    STRABAG Real Estate GmbH
    Donau-City-Strasse 1
    1220 Vienna
    Austria
    Tel. +43 1 22 422 7 100
    real-estate.atstrabagcom


  2. Name and address of the data protection officer

    The data protection officer of the controllers is:
    Sonja Müllner
    CML Construction Services GmbH
    Donau-City-Strasse 9
    1220 Vienna
    Austria
    Tel. +43 1 22422 - 1083
    sonja.muellnerbauholdingcom


  3. General information on data processing
    1. Extent of the processing of personal data

      We fundamentally only process personal data belonging to our users where this is necessary for the provision of a functional website and of our content and services. The processing of personal data of our users takes place regularly only once consent has been given by the user. An exception may occur in cases where it is not possible to obtain prior consent for practical reasons and where processing of the data is permitted under the statutory provisions.

    2. Legal basis for the processing of personal data

      Where we obtain consent from the data subject for processing operations involving personal data, Art. 6 para. 1 point a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

      As regards the processing of personal data necessary for the performance of a contract whose contracting party is the data subject, Art. 6 para. 1 point b GDPR serves as the legal basis. This also applies to processing operations which are necessary for the performance of precontractual measures.

      Where the processing of personal data is necessary for the fulfilment of a statutory obligation incumbent on our company, Art. 6 para. 1 point c GDPR serves as the legal basis.

      In the event that vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6 para. 1 point d GDPR serves as the legal basis.

      If processing is necessary to safeguard a legitimate interest of our company or of a third party, and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 point f GDPR serves as the legal basis for processing.

    3. Erasure of data and storage period

      The personal data of the data subject will be erased or made unavailable (blocked) as soon as the purpose of storage no longer applies. Storage may furthermore take place where provided for under European or national legislation in regulations of Union legislation, laws or other provisions to which the controller is subject. Blocking or erasure of the data is also performed where a storage period specified by the above standards expires, unless there is a need for further storage of the data for the conclusion or the performance of a contract.

  4. Provision of the website and creation of log files
    1. Description and extent of data processing

      Whenever our website is accessed, our system automatically captures data and information from the computer system of the computer from which access was made.

      The following data is collected here:
      (1)    information about the type of browser and the version used
      (2)    the operating system of the user
      (3)    the Internet service provider of the user
      (4)    the IP address of the user
      (5)    the date and time of access
      (6)    websites from which the user's system accessed our website
      (7)    websites accessed by the user's system via our website

      The data is likewise saved in the log files of our systems. Storage of this data together with other personal data of the user does not take place.

    2. Legal basis for data processing

      Art. 6 para. 1 point f GDPR provides the legal basis for temporary storage of the data and log files.

    3. Purpose of data processing

      Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. The IP address of the user must be saved for the duration of the session for this purpose.

      Storage in log files takes place to ensure the functionality of the website. We also use the data to optimise the website and ensure the security of our information technology systems. Evaluation of the data for marketing purposes does not take place in this context.

      These purposes also constitute our legitimate interest in data processing according to Art. 6 para. 1 point f GDPR.

    4. Duration of storage

      The data will be erased as soon as it is no longer needed to attain the purpose for which it was collected. Where the data is captured for provision of the website, this will be the case when the current session is terminated.

      Where the data is stored in log files, this will be the case at the latest after 180 days.

    5. Option of objection and removal

      The capture of data for provision of the website and the storage of data in log files is essential for operation of the website. For this reason there is no option for users to make objection here.

  5. Use of Cookies
    1. Description and extent of data processing

      Our website uses cookies. Cookies are text files which are stored in or by the Internet browser on the user's computer system. If a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that permits unique identification of the browser if the website is accessed again.

      We use cookies to make our website more user-friendly. Some elements of our website require the browser making access to also be identifiable after the user moves between pages.
      The following data is stored in the cookies and transmitted during this process:
      (1)    Search behaviour

      We additionally use cookies on our website to enable the surfing behaviour of the user to be analysed.
      The following data may be transmitted in this manner:
      (1)    Search terms entered
      (2)    Frequency of pages accessed
      (3)    Usage of website functions

      The user data collected in this manner is anonymised by technical means. It is thus no longer possible to identify data relating to the user accessing the site. The data is not saved together with other personal data belonging to the user.

      On accessing our website, users are informed about the usage of cookies for analysis by an info banner and are referred to this privacy statement. In this conjunction they are also informed how to prevent the storage of cookies using their browser settings.

      On accessing our website, users are informed about the usage of cookies for analysis and their consent obtained for the processing of personal data utilised in this context. Reference is also made here to the present privacy statement.

    2. Legal basis for data processing

      Art. 6 para. 1 point f GDPR provides the legal basis for the processing of personal data with the use of cookies required for technical purposes.

      Art. 6 para. 1 point a GDPR provides the legal basis for the processing of personal data with the use of cookies for analysis subject to the user's consent in this regard.

    3. Purpose of data processing

      The object of the use of cookies required for technical purposes is to simplify the usage of websites for users. It is not possible to offer certain functions of our website without the use of cookies. It is necessary here for the browser to also be recognised when a user moves between pages.

      We require cookies for the following applications:
      (1)    Bookmarking of search terms

      The user data collected by cookies required for technical purposes is not used to create user profiles.

      We use analysis cookies to enhance the quality of our website and its content. Analysis cookies show us how the website is used, so enabling us to continuously optimise our offering.

      These purposes also constitute our legitimate interest in the processing of personal data according to Art. 6 para. 1 point f GDPR.

    4. Duration of storage, option of objection and removal

      Cookies are stored on the user's computer and transmitted from there to ourselves. This means that you, as the user, have full control over the use of cookies. You can disable or restrict the transfer of cookies by changing the settings in your Internet browser. Stored cookies can be deleted at any time. This can also take place automatically. If cookies are disabled for our website, it is possible that not all functions of the site can then be used to their full extent.

      The transfer of Flash cookies cannot be prevented via browser settings, but by changing the Flash Player setting.

  6. Contact form and e-mail contact
    1. Description and extent of data processing

      Whenever a message is sent, the following data is also saved:
      (1)    the IP address of the user
      (2)    the date and time of registration

      Your consent is obtained for processing of the data when a message is sent and reference made to this privacy statement.

      Alternatively, it is possible to get in touch using the e-mail address provided. In such cases the personal data of the user transmitted with the e-mail will be saved.

      This takes place without disclosure of the data to third parties. The data is used solely for processing of the exchange of messages.

    2. Legal basis for data processing

      Art. 6 para. 1 point a GDPR provides the legal basis for processing of the data with the user's consent.

      Art. 6 para. 1 point f GDPR provides the legal basis for processing of the data transmitted when an e-mail is sent. Where the purpose of contact via e-mail is the conclusion of a contract, Art. 6 para. 1 point b GDPR additionally serves as the legal basis for processing.

    3. Purpose of data processing

      The processing of personal data entered in the input screen is used by our company solely to deal with a request for contact. In the event of a request for contact via e-mail, this constitutes the necessary legitimate interest in the processing of data.

      Other personal data processed at the time of transmission helps to prevent misuse of the contact form and to ensure the security of our information technology systems.

    4. Duration of storage

      The data will be erased as soon as it is no longer needed to attain the purpose for which it was collected. This will be the case for the personal data from the input screen of the contact form and data transmitted by e-mail when the relevant exchange with the user comes to an end. The exchange comes to an end when circumstances indicate that the relevant issue has been finally clarified.

      The personal data additionally collected in the course of transmission will be erased at the latest after a period of seven days.

    5. Option of objection and removal

      Users have the option of withdrawing their consent for the processing of personal data at any time. Where users get in touch with our company by e-mail, they can object to the storage of their personal data at any time. In such case the exchange may no longer be continued.

      Should you wish to exercise your right to object, please simply notify us in an e-mail addressed to real-estate.at@bauholding.com.

      In this case all personal data stored in the course of a request for contact will then be erased.

  7. Google Analytics web analysis

    Privacy statement for the use of Google Analytics

    This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer to help the website analyse how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. If this website anonymises IP addresses, your IP address will be truncated by Google within a EU member state or other EEA state before being transmitted to the US. Only in exceptional situations will your full IP address be transmitted to Google servers in the United States and truncated there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and Internet usage. Google will not associate your IP address transmitted by your browser in the framework of Google Analytics with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser; please note however that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google from collecting information relating to your use of the website generated via cookies (including your IP address) and from processing this information by downloading this browser plug-in using the following link and installing it. Link to Google opt-out.

    You can also prevent Google Analytics from collecting information by clicking on the following link. This will set an opt-out cookie that prevents future collection of your data when accessing this website: Disable Google Analytics

    You can find further information on the terms of service and data protection at www.google.de/analytics/terms/de.html and policies.google.com/privacy. Please also note that this website uses Google Analytics with the code "anonymizeIp" to ensure the anonymisation of IP addresses (known as IP masking).

  8. Disclosure to service providers

    We only disclose your personal data to third parties where we commission service providers to manage our data on our behalf. Art. 6 para. 1 point f GDPR provides the legal basis in this regard. We have also concluded data processing agreements with our service providers to guarantee data protection in relation to your personal data.

  9. Rights of the data subject

    Where personal data belonging to yourself is processed, you are then the data subject within the meaning of GDPR and hold the following rights vis-à-vis the controllers:
    (1)     right to access
    (2)     right to rectification
    (3)     right to the restriction of processing
    (4)     right to erasure
    (5)     right to information
    (6)     right to data portability
    (7)     right to object
    (8)     right to withdraw your declaration of consent under the data protection law
    (9)     automated decision-making in the individual case including profiling
    (10)   right to lodge a complaint with a supervisory authority