Data privacy statement

Pursuant to Art. 13 of EU Regulation no. 2016/679 (“GDPR”)

We are pleased that you are visiting our website and we would like to thank you for your interest in our company and its products and services. Below you can find information about the collection of personal data that occurs when using our website. Personal data means all data related to you personally, such as your name, address, e-mail address or user behaviour.

Data controller
The data controller pursuant to Art. 4 (7) of the General Data Protection Regulation (GDPR) is Windegger Maschinen GmbH: see also our Legal Notice.

1. Information about the collection of personal data
When you contact us by means of e-mail or a contact form, the data that you provide (your e-mail address, your name and phone number if applicable) will be kept by us in order to answer your questions. We will delete the data collected in this respect once it is no longer necessary to retain it; or, where statutory retention obligations exist, the processing of the data will be restricted.

1.1 Collection of personal data when visiting our website
When using the website merely for information purposes, i.e. if you do not provide us with other information, we will only collect the personal data that your browser transfers to our server. If you wish to view our website we will collect the following data that are technically necessary for us to let you view our website and ensure its stability and security (legal basis: Art. 6 (1) (1) (f) GDPR):
–    IP address
–    date and time of query
–    time zone difference referenced to Greenwich Mean Time (GMT)
–    content of request (actual page)
–    access status/HTTP status code
–    data quantity transferred
–    website from which query is made
–    browser
–    operating system and user interface
–    language and version of browser software.

1.2 Data voluntarily provided by users/visitors
Data voluntarily and expressly transmitted to Windegger Maschinen GmbH by visitors to the website in order to use certain services or via e-mail requests may be automatically registered, but the information will only be used for the services referred to in the information notice.
Your data will be used for the purposes of fulfilling your specific requests, of contractual obligations, tax and accounting obligations, billing, debt recovery, or the performance of statutory obligations.

1.3 Cookies
This website also collects personal data through the use of cookies. For further information see the cookie policy of Windegger Maschinen GmbH.

2. Processing of personal data
Personal data are processed solely according to this privacy policy by employees and associates of Windegger Maschinen GmbH as explicitly named as supervisors/personnel for data processing purposes. Such personnel have been appropriately trained in this regard and work under the direct supervision and responsibility of the data controller.

2.1 Legality of processing
The processing of personal data is only lawful where is a legal basis for such processing. Pursuant to Art. (6) (1) (a – f) GDPR, such legal basis may be one of the following:
a.    the data subject has given his/her consent to the processing of personal data for one or more specific purposes;
b.    processing is necessary for the performance of a contract where one of the parties is the data subject, or to perform pre-contractual measures at the request of the data subject;
c.    processing is necessary for the fulfilment of a legal obligation incumbent upon the data controller;
d.    processing is necessary to protect the vital interests of the data subject or of another natural person;
e.    processing is necessary for the performance of a task that is in the public interest or involves the exercise of official authority granted to the data controller;
f.    processing is necessary to protect the legitimate interests of the data controller or of a third party, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not outweigh this, especially if the data subject is a child.

2.2 Disclosure to third parties
Personal data will in no cases be disclosed unless statutory provisions so require or a judicial authority or other bodies or institutions demand this. Windegger Maschinen GmbH will also make use of the services of other contractors and/or persons to provide certain services, e.g. sending e-mails, delivering packages or making payments. Such third parties will only have access to the personal data that are strictly necessary for the performance of the tasks. Windegger Maschinen GmbH emphasises that such third parties may not use the personal data for any other purpose and that they are obliged to use such data in accordance with the privacy policy and the applicable laws. Windegger Maschinen GmbH will not intentionally gather sensitive or legally relevant personal data via its website. We recommend that you avoid entering such information on our website.

2.3 Data retention
Information and personal data collected via this website, including data voluntarily provided by visitors in order to obtain the sending of information material or other communications by writing to the addresses in the “Contacts” section, will be retained solely for the provision of the required service and only for the time strictly necessary for this. Once the service has been provided, all personal data will – subject to any official requirements or to the legally required retention period – be deleted in accordance with the privacy policy of Windegger Maschinen GmbH

2.4 Data security
We also use technical and organisational security measures to protect the personal data that has been provided or collected, especially against accidental or intentional manipulation, loss, destruction or against attacks by unauthorised persons. Our security measures are continuously updated in line with technological developments. Your personal data will be encrypted for transfer using SSL technology (https) in order to prevent access by unauthorised third parties. We cannot guarantee full data security for e-mail communication and we therefore recommend that you use the postal service to send highly confidential information.

2.5 Minors
visiting the website The website of Windegger Maschinen GmbH as regulated by the data protection provisions is not intended for use by minors. We are aware that data relating to minors must in particular be protected in the online environment. We therefore do not collect or keep any data on underage visitors unless this has been submitted involuntarily.

3. Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, i.e. text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this site (including your IP address) is transmitted to a Google server and stored there. We have activated IP anonymisation on this website: your IP address will therefore be shortened by Google before transfer withi Member States of the European Union or in other States that are party to the agreement via the European Economic Area. Google will use this information on our behalf to evaluate your use of the website, to compile reports about website activities for the website operators and to provide further services related to website activity and internet usage. Google will in no circumstances merge your IP address with other Google data. You can prevent the installation of cookies by adjusting your browser software: please note however that in this case it may not be possible to fully use all of the functions of this website.

Information on third-party service provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001.
Conditions of use:
https://www.google.com/analytics/terms/gb.html
Data protection:
https://support.google.com/analytics/answer/6004245?hl=en
Privacy statement:
https://policies.google.com/privacy?hl=en&gl=gb

By using this site you agree to the processing of the data about you collected by Google in the above-described manner and for the above-mentioned purposes.

4. Integrated services
We include the following external services in order to offer additional features.

4.1 Google Maps
We incorporate content from Google Maps on our web pages in order to show you the exact location of our company. A connection will be automatically established to the Google Maps Server by your browser, which will also transmit your IP address. If you are simultaneously logged into Google with an existing user account while visiting our web pages, Google may also associate your visit to our website with your user behaviour. Google may also send other cookies to your browser. We have no influence over this procedure and receive no information from Google about the content submitted. The service provider is: Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
For more information on the privacy policy of Google Inc. please see: https://policies.google.com/privacy?hl=en

4.2 Google Web Fonts
Google Web Fonts are implemented on our web pages to control the appearance of fonts. Using Google Web Fonts connects to a Google server in the USA should your browser be unable to access a local cached copy. This will also send your IP address to Google. If you are simultaneously logged into Google with an existing user account while visiting our web pages, Google may also associate your visit to our website with your user behaviour. We have no influence over this procedure and receive no information from Google about the content submitted. The service provider is: Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. For more information on the privacy policy of Google Inc. please see: https://policies.google.com/privacy?hl=en

4.3 Social Media Links
There are links to various social media sites from our web pages via the corresponding logos. These are not social media plugins but simply shortcuts to our offers on these media. Clicking on one of these links will generally send your IP address to the respective operators of the various platforms. If you use one of these services and are also logged in with your specific account information, in certain circumstances the operators of the social media can gather data on your browsing behaviour. The sending of your IP address to the website operators is necessary on technical grounds and applies to all websites.

5. Information about your personal data
You can ask for your personal data that we hold to be disclosed free of charge at any time. As the data subject you may also exercise your right to the withdrawal, disclosure, deletion, rectification, restriction or transfer of your personal data, as long as there is no overriding obligation on our part to keep them. If you exercise your right to withdrawal, all of your data will be irreversibly deleted provided no overriding legal requirements are breached. For further information on your rights as the data subject please contact us at info@windegger.eu. We will be happy to help you.
The supervisory authority responsible for handling complaints is the “Garante per la protezione dei dati personali”, Piazza di Monte Citorio n. 121 00186 ROMA, fax: (+39) 06.69677.3785, phone: (+39) 06.696771, e-mail: garante@gpdp.it.

6. Amendments
This Privacy Policy will be effective as of 25 May 2018. The Data Controller reserves the right to amend or update its content, in part or in full, especially in the event of changes to the applicable law. The Data Controller therefore recommends that you visit this section regularly for the latest version of our Privacy Policy.

lg md sm xs