Data protection

• IP address of the requesting device
• Date and time of access
• Page or file accessed
• Browser type and operating system used
• Referrer URL
   

• the technical provision of the website,
• ensuring system security,
• error analysis, and
• to prevent misuse and attacks.
   

• Art. 6 (1) lit. f GDPR (legitimate interest in the proper processing and response to enquiries).

• Customers (in particular dealers and distribution partners),
• contact persons at customers and sales partners,
• end customers, insofar as they contact PÖTTINGER GmbH in connection with service, information or satisfaction enquiries.

• Initiation, conclusion and processing of contractual relationships with customers and sales partners,
• Communication within the scope of business relationships,
• Technical advice, services and processing of enquiries,
• Conducting satisfaction surveys,
• quality assurance and further development of products and Services,
• Fulfilment of legal obligations.

• Art. 6 (1) (b) GDPR, insofar as processing is necessary for the initiation, execution or termination of a contractual relationship with customers or sales partners,
• Art. 6 (1) (c) GDPR, insofar as processing is necessary for compliance with legal obligations,
• Art. 6 (1) (f) GDPR, insofar as processing is necessary to safeguard the legitimate interests of PÖTTINGER GmbH, in particular for customer communication ( ), conducting satisfaction surveys, quality assurance and product improvement.

• at the request of the data subject and
• for the purpose of the responsible retailer contacting them.

• Sales partners and dealers,
• Contact details provided in the context of business relationships,
• publicly accessible sources (e.g. company websites).

• internal departments of PÖTTINGER GmbH,
• Sales partners and dealers,
• IT and system service providers,
• Logistics and service partners,
• authorities and public bodies, insofar as there is a legal obligation to do so.

• suppliers,
• contact persons at suppliers,
• other contact persons within the scope of existing or initiated supplier relationships
• in addition, if the data is transmitted to us by the dealer in the course of ordering a machine, the data will be printed by us in the order confirmation to the dealer.

• Initiation, conclusion and execution of contractual relationships with suppliers,
• Supplier management and communication,
• Quality, risk and compliance management,
• Processing of orders, deliveries and payments,
• Fulfilment of legal obligations.

• Art. 6 (1) (b) GDPR, insofar as processing is necessary for the initiation, execution or termination of a contractual relationship with suppliers,
• Art. 6 (1) (c) GDPR, insofar as processing is necessary for compliance with legal obligations,
• Art. 6 (1) (f) GDPR, insofar as processing is necessary to safeguard the legitimate interests of PÖTTINGER GmbH, in particular for supplier communication, quality assurance and to ensure legally compliant business processes.

• Information provided by the respective supplier,
• contact details transmitted within the frame of existing business relationships,
• publicly accessible sources (e.g. company websites, public registers).

• internal departments of PÖTTINGER GmbH,
• IT and system service providers,
• Logistics and transport service providers,
• tax advisors, auditors,
• authorities and public bodies, insofar as there is a legal obligation to do so.

• business partners and cooperation partners,
• prospective customers,
• contact persons at potential business partners,
• trade fair and event contacts,
• press and media representatives.

• Establishing and maintaining business relationships,
• Communication in a business environment,
• Responding to enquiries and requests for information,
• Organising and holding trade fairs, events and business appointments,
• Presentation of public relations work, in particular by taking photos at events (a separate privacy policy is posted at events for this purpose), 
• Maintaining and documentation of business contacts.

• Art. 6 (1) (f) GDPR (legitimate interest), in particular in business communication, maintaining contacts and preparing and carrying out business activities, 
• Art. 6 (1) (b) GDPR, insofar as processing is necessary for the initiation or execution of a contractual relationship with business partners,
• Art. 6(1)(c) GDPR, insofar as processing is necessary to fulfil legal obligations.

• personal contacts in the business environment,
• trade fairs, events and industry events (e.g. exchange of business cards),
• recommendations by business partners,
• publicly accessible sources (e.g. company websites, public Directories).

• internal departments of PÖTTINGER GmbH,
• IT and system service providers,
• external service providers in connection with the organisation of events,
• authorities and public bodies, insofar as there is a legal obligation to do so.

• On the basis of your consent: If you have actively registered for our newsletter via a contact form and have expressly consented to this.
• On the basis of an existing customer relationship (existing customer privilege): If we have received your email address in connection with registration for one of our digital portals (e.g. myPÖTTINGER). In this case, we use your data to inform you about our own similar products or services (e.g. accessories for your machines).

• Email address (mandatory),
• name and address (if provided voluntarily),
• Time of registration.

• sending the newsletter,
• providing evidence of consent given,
• proof of your registration in one of our portals (e.g. myPÖTTINGER).

• Art. 6 (1) (a) GDPR (consent given when registering for the newsletter).
• Sending advertising on the basis of Section 174 TKG 2021 (in conjunction with Art. 13 (2) ePrivacy Directive): as a special legal regulation, the TKG allows us to send advertising to existing customers without additional consent, provided that the legal requirements are met.

• via the unsubscribe link contained in each newsletter or
• by sending an informal message to dataprotection@poettinger.at

We process personal data by means of video surveillance systems at our Austrian sites (Grieskirchen, Taufkirchen, and St. Georgen).

This is carried out for the following purposes:

• Protection of the company premises and operational buildings against burglary, theft, and vandalism.
• Protection of the physical integrity of employees and visitors.
• Management and control of access routes to the company premises.
• Monitoring and securing automated manufacturing steps in the production halls to ensure smooth operational processes.

Targeted behavioral or performance monitoring of employees does not take place.

6.2 Legal Bases for Processing

The legal basis for video surveillance differs depending on the category of data subjects concerned:

• For our employees: Processing is carried out on the basis of Art. 88 (1) GDPR in conjunction with the relevant works agreement concluded pursuant to the provisions of the Austrian Labour Constitution Act (Sections 96 (1) No. 3, 96a ArbVG).
• For external individuals (e.g., visitors, suppliers, customers): Processing is carried out on the basis of our overriding legitimate interest pursuant to Art. 6 (1) lit. f GDPR. Our legitimate interests consist of exercising domiciliary rights, protecting property and infrastructure, averting dangers to persons, and securing evidence in the event of damage.

6.3 Covered Areas

The video surveillance covers specifically defined areas. In these areas the video surveillance is labeled:

• Outdoor areas and parking lots
• Access driveways to company premises and entrance areas
• Loading stations
• Specific production steps for automated manufacturing steps
• Fanshop

6.4 Categories of Data Processed

The following categories of data are processed by the camera systems:

• Image data and video recordings of individuals
• Image data of vehicles, including official license plates
• Technical log data: Timestamps (date and time of recording) as well as the location/position of the respective camera

6.5 Recipients of Data and Transfers to Third Countries

• Internal processing: The video surveillance system is operated exclusively by ourselves. No external security companies, IT service providers, or cloud providers are involved in the data processing. Storage takes place without exception on our own local servers in Austria. Data transfer to a third country outside the EU/EEA does not occur.
• Authorities in specific incidents: An evaluation of the recordings and disclosure of the data to third parties (e.g., competent police authorities, courts, or insurance companies) takes place exclusively on a case-by-case basis, provided this is strictly necessary for the investigation of criminal offenses (e.g., burglary, damage to property) or for the establishment, exercise, or defense of legal claims.

6.6 Retention Period of Video Recordings

Image data is generally stored for a maximum period of 72 hours and is thereafter automatically and irretrievably overwritten or deleted by the system. Storage exceeding 72 hours takes place exclusively in specific incidents (e.g., cases of damage or criminal offenses) for the duration required for investigation as well as for the establishment, exercise, or defense of legal claims.

• there is an adequacy decision by the European Commission for the respective third country in accordance with Art. 45 GDPR, or
• there are appropriate Guarantees in accordance with Art. 46 GDPR, in particular through the conclusion of standard contractual clauses of the European Union, or
• one of the exceptions specified in Art. 49 GDPR applies.

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR)

• Right to withdraw consent (Art. 7(3) GDPR)

• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)