Dataprotection MyPÖTTINGER

Controller

PÖTTINGER Landtechnik GmbH
Industriegelände 1
A-4710 Grieskirchen
Austria
Tel.: +43 (0) 7248 / 600-0
Email: dataprotection@poettinger.at

Data protection officer / Contact for data protection issues

In Austria, the appointment of a data protection officer is not currently required by law. Questions, requests and concerns relating to data protection and the exercise of data subject rights can be addressed at any time to the following contact address: dataprotection@poettinger.at
 

General notes about MyPÖTTINGER

MyPÖTTINGER is the personal customer portal of PÖTTINGER GmbH, which provides access to machine-specific data such as operating instructions, spare parts lists and maintenance information. By registering, users can manage their machines, receive tips and access the latest news directly.

Main features and jobs:

• My machine: Management of your own PÖTTINGER equipment
• Product range information: Online access to operating manuals and spare parts lists (from 1997 onwards)
• Information and tips on use and maintenance
• Machine configurator

1. Registration and user account

1.1 Registration process

To use MyPÖTTINGER, you must first create a personal user account. To register, enter your email address and choose a password, then select your country and preferred user language.
After submitting this data, a confirmation message will be sent to the email address provided. Registration is only complete once the confirmation link contained in this email has been clicked (known as the double opt-in procedure).
After successful confirmation, it is necessary to complete the registration by entering further mandatory personal data.

1.2 Processed personal data

The following personal data in particular is processed during the registration and use of your account:

a) Registration and account data

• Email address

b) Personal and contact details (mandatory upon completion of registration)

• Title
• First name
• Surname
• Address (street, postcode, town)
• Telephone

c) Technical metadata

• Time of registration and confirmation
• IP address in connection with the registration process (in particular when clicking on the confirmation link)

1.3 Purpose of processing

The aforementioned personal data is processed for the following purposes:

• Creation and management of the user account
• Identification of the user
• Provision of all functions of MyPÖTTINGER
• Prevention of misuse and unauthorised registrations
• Ensuring proper and secure portal operation
• Assistance when the user contacts us via the contact form

1.4 Legal basis

The processing of personal data in connection with registration and use of MyPÖTTINGER is based on: Art. 6(1)(f) GDPR (legitimate interest).

The legitimate interest of PÖTTINGER GmbH consists of:

• the provision and secure operation of a personalised customer portal,
• the user-related allocation of machine information,
• the prevention of misuse and unauthorised use,
• ensuring IT and information security.

The interests of users do not outweigh these interests, as processing is limited to what is necessary, no data is passed on to third parties, and users have the option to delete their data and object to its use at any time.

Art. 6(1)(f) GDPR also applies to the logging of technical metadata (e.g. IP address) for the purpose of preventing misuse.
 

1.5 Obligation to provide data

The provision of personal data requested during registration is necessary in order to set up a user account and use the functions of MyPÖTTINGER. Without this information, complete registration and use of the customer portal is not possible.
 

1.6 Registration via MyPÖTTINGER in the Fan shop

If the user chooses to log in to the Pöttinger fan shop with their MyPÖTTINGER login details, the login details and the address stored in "my profile" will be transferred to the fan shop so that they do not have to create a new customer account there. For more information about data processing there, please visit: https://fan shop.mypoettinger.com/dsgvo/

2. Machine management in MyPÖTTINGER

2.1 Adding and managing machines

Registered users have the option of independently storing and managing their own machines in MyPÖTTINGER. Machines are added exclusively by the respective user. Pöttinger does not automatically assign or transfer machine data.

As part of machine management, machine-related information that is actively entered or selected by the user (e.g. assignment to a user account) is processed.

2.2 Purpose of processing

The data collected as part of machine management is processed for the following purposes:

• Assignment of machines to a user account
• Provision of machine-specific information (e.g. Documents, Notes, Maintenance information)
• Supporting the user in managing their machine fleet

2.3 Legal basis

Processing is based on: Art. 6(1)(b) GDPR (for the performance of the user agreement), as machine management is an integral part of the use of MyPÖTTINGER.

3. Newsletter

Users have the option of registering for the PÖTTINGER GmbH newsletter via the MyPÖTTINGER Portal.
When registering for the newsletter, the user's email address is processed in order to send regular information about products, Services and news.
Registration for the newsletter is voluntary and based on express consent in accordance with Art. 6 (1) (a) GDPR.
The time of registration is logged for documentation and verification purposes. Consent can be withdrawn at any time with future effect, e.g. via the unsubscribe link contained in the newsletter or by email to dataprotection@poettinger.at.

4. Advertising

In addition to our newsletter, we inform registered portal users via email about current offers, technical innovations, and complementary products and services from PÖTTINGER Landtechnik GmbH. This advertising is independent of separate newsletter consent, as your registration for the MyPÖTTINGER portal establishes a privileged customer relationship within the meaning of advertising law. We use your email address, collected during registration, exclusively for direct marketing of our own similar goods or services (e.g., maintenance offers, spare parts, accessories, or service updates).

4.1 Legal Basis

The processing of your data for this purpose is based on the specific legal provision of Section 174 of the Austrian Telecommunications Act 2021 (in conjunction with Article 13 (2) of the ePrivacy Directive 2002/58/EC), which permits the sending of emails to existing customers without their consent under the aforementioned conditions. According to the European Court of Justice (ECJ), an additional legal basis under Article 6 of the GDPR is not required for the mere sending of emails.

You have the right to object to the use of your email address for advertising purposes at any time by:

• clicking the unsubscribe link included in every advertising email, or
• sending an informal email to dataprotection@poettinger.at.

Upon receiving your objection, we will immediately cease sending you advertising messages based on this legal basis.

4.2 Storage Period

Your personal data will remain stored with us until you deactivate your MyPÖTTINGER customer account. The use of your email address for sending advertising will cease in the event of an objection. However, your email address will remain stored with us, as it is required for the registration process on the portal.

Art. 14 DSGVO

Personal data is collected within the scope of MyPÖTTINGER exclusively directly from the persons concerned. Personal data is not collected from other sources (e.g. dealers, distribution partners, public directories). Therefore, the information obligations pursuant to Art. 14 GDPR do not apply.

Transfer of personal data

Personal data relating to user data is not passed on to third parties (dealers, sales partners or external service partners) within the scope of the use of MyPÖTTINGER.

Communication and notifications

In connection with the use of MyPÖTTINGER, no automated notifications or information are sent by e-mail, with the exception of technically necessary messages within the scope of the registration and authentication process (e.g. confirmation e-mail).

In particular, your email address will not be used for advertising or marketing purposes without your consent.

Storage period

Personal data is generally stored for the duration of the user account.

After the customer has actively deleted the user account or terminated the use of MyPÖTTINGER, the personal data will be deleted immediately, provided that there are no legal retention obligations or legitimate interests in further storage.

Hosting and data processing by contract processors

MyPÖTTINGER is operated in the Microsoft Azure Cloud. The processing of personal data takes place within the framework of order processing in accordance with Art. 28 GDPR.

Service provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland

Third country transfers

Personal data is generally processed within the European Union or the European Economic Area (EU/EEA).

If, in individual cases, the transfer of personal data to third countries (in particular the USA) by the cloud service provider cannot be ruled out, this will only take place on the basis of appropriate guarantees in accordance with Art. 44 ff. GDPR, in particular through the conclusion of standard contractual clauses of the European Commission and through additional technical and organisational measures.

Data security

To secure personal data, appropriate technical and organisational measures are taken in accordance with Art. 32 GDPR to protect the data from loss, misuse, unauthorised access, unauthorised disclosure or alteration.

These include in particular:

• Encrypted data transmission (e.g. TLS/SSL)
• Access restrictions and authorisation concepts
• Regular security updates and system maintenance
• Measures to ensure the availability and resilience of the systems
• The security measures are continuously adapted in line with technological developments.

Rights of data subjects

Within the framework of the statutory provisions, data subjects have the right at any time:

• to obtain information about the processing of their personal data (Art. 15 GDPR)
• to have inaccurate or incomplete data corrected (Art. 16 GDPR)
• to have personal data deleted (Art. 17 GDPR)
• to restrict processing (Art. 18 GDPR)
• to data portability (Art. 20 GDPR)
• to object to processing (Art. 21 GDPR)

Requests to exercise these rights can be sent at any time to the following contact address: dataprotection@poettinger.at.

Data subjects also have the right to lodge a complaint with the competent data protection supervisory authority. The competent supervisory authority in Austria is the Austrian Data Protection Authority, https://www.dsb.gv.at