Privacy

This website is operated by Rosenbauer International AG (Austrian commercial register no. 78543f), 4060 Leonding, Paschinger Straße 90 (“We”, “Us”, “Our” and “Rosenbauer”). In this Privacy Policy, We, the controller in accordance with Art. 4(7) of the GDPR, describe which data We collect when you visit Our website and for what purpose We process it (Part A). In addition, We inform you about how We generally process data of Our customers, suppliers and prospects for marketing purposes (Part B) and generally explain what rights and guarantees We offer in the course of data processing (Part C). For all relevant contact details, please refer to para. C.4 of this Privacy Policy.

Since protection of your personal data is of particular concern to Us, We strictly adhere to the legal requirements of the DSG and the GDPR when collecting and processing your personal data.

In the following, We inform you in detail about the scope and purpose of Our data processing as well as your rights as a data subject of data processing. Therefore, please read Our Privacy Policy carefully before you continue to use Our website and, if necessary, give your consent to data processing.

A. Processing of personal data on our home page

1. Personal data

The use of Our website is generally possible without entering personal data. However, different regulations may apply to the use of individual services, which We will point out to you separately.

Apart from the cookies described in detail below, We only collect and store the data which you yourself provide to Us by entering it in Our input screens or by actively interacting with Our website in any other way.

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, your address, your telephone number or your date of birth, but also your IP address or geolocation data which allows a conclusion to be drawn about you.

2. Use of cookies

a. If you use Our website only for information purposes, i.e. if you do not register for a service or otherwise transfer information to Us – for example via a contact form –, We only collect personal data which your browser transmits to Our server. If you want to visit Our website, We collect the following data, which is technically necessary to enable Us to display Our website and ensure its stability and security (the legal basis is point (f) of Art. 6(1) of the GDPR):

 

• IP address;

• date and time of the request;

• access status/HTTP status code;

• the respective data quantity transmitted;

• website from which the request originates;

• your browser;

• operating system and its interface;

• browser software language and version.

b. In addition to the above data, we store first- and third-party cookies on your computer hard disk when you use Our website, that is, small text files allocated to the respective browser you use. The party which sets a cookie (in this case, We ourselves and third parties listed below) is provided with certain information this way. These cookies are necessary to recognise you as a website user and to make the use of Our services comprehensible. Finally, We use cookies for marketing purposes to analyse your usage behaviour and to send to you tailored advertising on a case-by-case basis.

A general distinction is to be made between first-party cookies, third-party cookies and third-party requests.

• First-party cookies

We and/or Our website store(s) first-party cookies on your browser to provide you with the best possible user experience. These cookies are, in particular, functional cookies, such as shopping cart cookies. We use the below first-party cookies on Our website:

• tarteaucitron (storage period: 1 year)

We use this cookie to determine whether you consented to cookie storage for the Google Analytics, Google Maps and Facebook services when you enter Our website.

• cb_enabled (storage period: 1 year)

This cookie also stores information on whether you consented to the placing of cookies.

• country (storage period: the session)

This cookie collects information on the country from which you access Our website.

• continent (storage period: the session)

This cookie determines the continent from which you access Our website

• fe_typo_user (storage period: the session)

This cookie is used by the TYPO 3 content management system (CMS) for unique user identification.

• Third-party cookies

Third-party cookies are stored on your browser by a third party. These mostly include tracking or marketing tools which, on the one hand, evaluate your user behaviour and, on the other hand, enable third parties to recognise you on other websites you visit. In principle, retarget marketing, as an example, is based on the function of such cookies. We store the below third-party cookies:

• ga (storage period: 2 years)

• gat (storage period: 1 hour)

• gid (storage period: 1 day)

• gat_UA (storage period: 1 hour)

• _gcl_au (storage period: 3 months)

Google Analytics, a web analysis service, uses and stores these cookies for up to 2 years. Para. 6.a of this Privacy Policy contains detailed information on how Google Analytics works.

• fbp (storage period: 3 months)

Facebook uses this for advertising purposes. It stores information stating that you visited Our website to be able to display to you customised product information the next time you use your Facebook account.

• Third-party requests

Third-party requests mean all requests which you, as a website user, make to third parties via Our site – including, without limitation, you interacting through social network plug-ins or using the offer of a payment provider. In this case, it is impossible to rule out that personal data is delivered to such third-party providers as a result of interaction, even if no cookies are stored on your browser. For this reason, We also provide you with detailed information in Our privacy policy about the tools and applications We use.

c. To provide comprehensive information about the cookies We use, We designed a cookie banner in accordance with the ECJ’s judgement of 1 October 2019, C-673/17 (“Planet 49”), and other relevant decisions, which will be displayed to you when accessing Our website for the first time. This cookie banner lists all cookies We use, their function, storage periods and origin. Only if you consent to the use of some or all cookies will We save them; exceptions may include technical cookies required for correctly displaying and using Our website.

d. You can change your browser settings at any time to reject, for example, third-party cookies or all cookies. In this case, however, We need to inform you that you might not be able to use all the features of Our website.

3. Collection and processing of personal data

a. General:

We process personal data which goes beyond information stored by cookies only if you voluntarily provide it to Us, for example when you register with Us, enter into a contractual relationship with Us or otherwise contact Us. This is exclusively contact data and information about the concerns with which you approach Us.

We use the personal data you provide only to the extent necessary to fulfil the purpose of the processing (e.g. registration; sending newsletters; processing purchase orders; sending information and advertising material; processing competitions; answering questions; granting access to certain information) and as permitted by law (in particular Art. 6 of the GDPR) (e.g. delivering advertisements and information for existing customers).

The purpose of the processing of your data is to operate Our website, to provide tailored company information and to present Our goods and services on offer (marketing). Any further use of your data will only take place if you expressly consented to it beforehand. You may revoke your consent – as explained in detail below – at any time for the future.

Every time you access Our website, We collect the technical information on your computer given under 1. The IP address of your computer is stored for only up to 7 days after you used our on-line offer and will subsequently be erased or anonymised based on IP address shortening. We use all this data to operate Our home page, in particular to detect and eliminate errors, to determine web service utilisation and to make adjustments or improvements. These purposes also represent our legitimate interest in data processing according to point (f) of art. 6(1) of the GDPR.

b. Applicant portal

We offer you the opportunity to directly apply for a job at Rosenbauer International AG by using Our website. We and Our subsidiaries collect, process and use all personal data from your application and attachments you provide in your application only for the purpose of the applicant selection process and internal statistics. Your personal data will be stored and processed in accordance with applicable data protection regulations. The data is stored on a Rosenbauer International AG server in Austria.

We might also send your data to departments or branches not located in the country in which you initially became interested in a job. Only the respective HR managers and selected executives of Rosenbauer International AG are granted access to your data. Your data will be treated as strictly confidential; no personal data will be transmitted to third parties outside Rosenbauer International AG.

We will store your personal data in Our system to be able to assign queries and, if necessary, to access older applications in the case of new vacancies. You have the right to object to the processing of your personal data with effect for the future and to request your personal data to be updated, corrected, blocked or erased. Please inform Us accordingly at any time by e-mail to hr@rosenbauer.com.

If applications are not successful, data voluntarily provided by the applicants and processed in the course of application procedures or speculative applications may be stored and archived for another two years from receiving a letter of refusal at the end of the specific application procedure. If the applicant does not agree to data storage and archiving, the documents will be automatically erased six months after the end of the recruitment process, unless erasure is contrary to other legitimate interests. Such legitimate interests include, without limitation, the duty to produce evidence with procedures under the Austrian Equal Treatment Act (sec. 15 of the GLBG).

In the case of applications not referring to advertised positions (speculative applications), the application is stored for as long as this application might be of interest, but not for more the 2 years. You have the possibility, at any time, to request your application to be erased, even before applicable retention periods expires. In the event of successful application, data transmitted is stored to process the employment relationship in compliance the legal provisions. In all other cases, the legal basis of applicant data storage is your consent in accordance with point (f) of Art. 6(1) of the GDPR.

c. Spincar

To display Our vehicles and other products, We offer Our customers the possibility to use Spincar, an application operated by Spincar, Suite 200, 344 Warren Street, Syracuse, NY 13202, United States. In this context, Spincar is a processor for Rosenbauer. To protect personal data which you disclose when using the application, We entered into appropriate agreements with Spincar to provide acceptable guarantees for data processing in the United States in accordance with the GDPR requirements.

For details on data processing at Spincar, please refer directly to its privacy policy at https://www.spincar.com/privacy-policy.

4. Retention period

Unless We have already specifically informed you about the personal data storage period in advance, the following general principles apply to data processing:

We will generally store data which you made available to Us only for after-sales, marketing and information purposes for a maximum period of three years after our last contact. However, if you so wish, We will also erase your data before this period expires, provided that there is no legal obstacle to this.

In the event of a contract being initiated and/or concluded, We will process your personal data after full contract has execution, until the warranty, guarantee, limitation and statutory retention periods applicable to us expire and, furthermore, until the end of any legal disputes in which the data is required as evidence.

5. Newsletter

You have the possibility to subscribe to Our free newsletter. With this newsletter, you will receive all the latest news and information about Our company and tailored advertising at regular intervals. You need a valid email address to receive Our newsletter.

We check the email address you entered in Our registration mask to ensure that you actually want to receive newsletters. This is done by sending you an email to the email address you mentioned, which you can confirm by clicking on a link provided. After email address confirmation, you are registered for Our newsletter (double opt-in).

As early as upon first registration with the newsletter, We store your IP address, the date and the time of your registration. We do this for security reasons in the case that a third party abuses your email address and subscribes to Our newsletter without your knowledge. We do not collect or process any other data for the newsletter subscription; the data is used exclusively for the purpose of receiving the newsletter.

Unless you object to this, We transfer your data within Our group for analyses and transmission of information for advertising purposes. Within the group, your data you provided to Us to receive the newsletter is compared to data which We might have collected in other ways (e.g. when purchasing a product or booking a service).

Your newsletter registration data will not be passed on to third parties who do not belong to the group. You may unsubscribe from Our newsletters at any time; the details for unsubscribing can be found in the confirmation email and in each individual newsletter.

6. Tools and applications used

a. We use Google Analytics, a web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. This service uses cookies, the functionality of which has already been explained in detail above. Information generated by these cookies concerning your use of this website is usually transmitted to and stored on a Google server.

Google uses this information on Our behalf to analyse your use of Our website, to compile reports on website activities and to provide the website operator with other services relating to website and internet use. The IP address transmitted by your browser in connection with Google Analytics will not be merged with any other Google data.

You can prevent Google Analytics from storing any cookies it needs to have by accordingly changing your browser software settings which, however, might lead to you not being able to make full use of all website functions. In addition, you can prevent the collection of data created by the cookie and related to your use of the website (including your IP address), the transmission and the processing of such data by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de

If you want to obtain more information on the nature, scope and purpose of the data collected by Google, We recommend that you read its privacy policy at https://support.google.com/analytics/answer/6004245?hl=de

Google processes your data also in the United States. Before consenting to Google Analytics storing any cookies, please read the related section in Our privacy policy.

b. We also use Google Maps services on Our website. This allows Us to display interactive maps directly on Our website and allows you to use the map function in a convenient way to find Our location and facilitate your journey.

By visiting Our website, Google is informed about you accessing the corresponding sub-page of Our website and obtains personal data listed under 2. It does so regardless of whether or not you are logged on to a Google account. If you are logged on to Google, your data will be directly linked to your account. If this is not what you want, you must log off of Google before using this service. Google uses your data for advertising, market research and demand-oriented website design purposes. You have the right to object to the use of your data in this respect, which you must exercise against Google.

For more information on the data collection purpose and scope, see the Google privacy policy available at http://www.google.de/intl/de/policies/privacy. Google processes your data also in the United States. Before consenting to Google Analytics storing any cookies, please read the related section in Our privacy policy.

c. On Our website, We also set links to other websites, which We only do for information purposes. We cannot influence these websites and Our Privacy Policy therefore does not apply to them. If you activate a link, it is possible that the operator of that website collects and processes personal data about you according to its privacy policy, which may differ from Ours. Please always inform yourself about the valid privacy policies on the websites linked by Us.

d. On Our website, plug-ins make it possible for you to interact with various social networks; they include:

• Facebook and Instagram, operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

• Twitter, operated by Twitter, Inc., 795 Folsom Street, Suite 600, San Francisco, CA 94107, United States

• YouTube, operated by Youtube, LLC, 901 Cherry Avenue, San Bruno, CA 94066, United States

When you click on a plug-in of one of these social networks, it is activated and establishes a connection to the respective network server as described above. We have no influence on the scope and contents of data transmitted to the respective social network operators by clicking on the plug-ins.

If you activate these plug-ins, you consent to the use of your data which they collect, if necessary also in the United States. Before consenting to Google Analytics storing any cookies, please read the related section in Our privacy policy.

We have no influence on the scope and contents of the data which is transmitted to the respective social network operators by clicking on the plug-ins and/or which may subsequently be subject to access by US public authorities.

If you want to find out about the nature, scope and purpose of the data collected by the social network operators, We recommend reading the respective social networks’ privacy policies.

7. Social media

a. Facebook fan page

We operate a Facebook fan page at https://www.facebook.com/rosenbauergroupDACH. The purpose of this fan page is to share information about Our company’s activities, to implement marketing activities and to provide another communication channel.

In this context, We are “joint controllers” together with Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, which provides this service to Us. Basically, Facebook makes it possible for you to change your settings and to select which personal data is shared with Us. If this is not what you want, We receive only anonymised information on the use of Our fan page and personal data about the visitors.

To this end, We concluded an agreement with Facebook pursuant to Art. 26 of the GDPR, which regulates Our and Facebook’s mutual rights and duties. You can find this at www.facebook.com/legal/terms/page_controller_addendum. In this context, We also ask you to read Facebook’s privacy policy available at https://www.facebook.com/policy.php.

In this agreement We concluded, Facebook undertakes to be the first point of contact for data subjects as to the processing of insights data and to fulfil the duties and tasks associated therewith.

You can therefore assert your rights as a data subject against Us in accordance with sec. 10 of this Privacy Policy and against Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

b. Instagram profile

We operate an Instagram profile at instagram.com/rosenbauergroup. With this profile, We want to implement marketing measures, draw attention to Our products and services and create another communication channel for Our customers.

In this context, too, We are “joint controllers” together with Instagram, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, which provides this service to Us. Basically, Facebook makes it possible for you to change your settings and to select which personal data is shared with Us. If this is not what you want, We receive only anonymised information on the use of Our fan page and personal data about the visitors.

To this end, We concluded an agreement with Facebook pursuant to Art. 26 of the GDPR, which regulates Our and Facebook’s mutual rights and duties. You can find this at www.facebook.com/legal/terms/page_controller_addendum. We ask you to read Instagram’s privacy policy available at https://help.instagram.com/519522125107875.

In this agreement We concluded, Facebook undertakes to be the first point of contact for data subjects as to the processing of insights data and to fulfil the duties and tasks associated therewith.

You can therefore assert your rights as a data subject against Us in accordance with sec. 10 of this Privacy Policy and against Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

B. Processing of data of our customers, suppliers and prospects for marketing purposes

We do not use Our customers’ and suppliers’ personal data, e.g. persons to contact, their contact data and marketing information only for contract processing purposes and within the scope of legal retention obligations (e.g. accounting purposes), but also for marketing and customer support purposes.

We additionally collect personal data from prospects (e.g. persons to contact, their contact details and marketing information) in the course of Our acquisition and sales activities. On the internet, at trade fairs and at other events We constantly look for potential contractual partners and therefore keep a marketing database to enable tailored advertising for Our products and services. All measures listed herein are implemented for marketing purposes in the legitimate interest in accordance with point (f) of Art. 6(1) of the GDPR in connection with Recital 47 for a three-year period from the end of a contractual relationship (customer & supplier) and/or from Us (fruitlessly) contacting others (prospects) for the first time, unless the data subject expressly consented to this.

If, for marketing purposes, We do not collect personal data from the data subjects themselves, We will inform them, upon contacting them for the first time, about the source of their personal data. For tax-law and administrative considerations, We founded various domestic and foreign companies which also process personal data, some of them together with Us, some of them in the position as our processor, for customer support and marketing purposes (and for other purposes). Together with these companies – which themselves are controllers pursuant to the GDPR –, We keep a joint marketing database.

A complete list of Our affiliates is available at www.rosenbauer.com. If We, as a part of existing business relationships or following an explicit request from prospects, are to deliver products and render services offered by Our affiliates, We transmit the prospect’s personal data to Our affiliates for marketing purposes and Our affiliates then offer the products and services of interest to the data subject.

We and each affiliate store data for marketing and customer support purposes for the periods described in A.4.

C. General information on data protection

1. Transfer of data

a. General

In principle, your data will not be transmitted to third parties, unless We are legally obliged to do so, data transmission is necessary for implementation of a contract We concluded or you previously expressly consented to the transmission of your data. External processors or other cooperation partners will only receive your data if this is necessary for processing the contract or if We have a justified interest in doing so, which We will always disclose separately on a case-by-case basis. If one of Our processors has access to your personal data, We will ensure that it complies with data protection laws in the same way as We do.

We do not sell or otherwise market your personal data to third parties. If Our contract partner or processors have their registered office in third countries. i.e. a country outside the European Economic Area (EEA), We will inform you on the consequences of that in the offer description.

b. Data transmission to the United States?

We occasionally offer some services which include or might include data transmission to the United States. However, to be able to use these services – unless there is another justification, e.g. fulfilment of contractual duties –, it is necessary for you to consent to the use of your data collected by these services in the United States, too (point (a) of Art. 49(1) of the GDPR).

Depending on the service, you grant your consent via Our cookie banner or separately by means of an appropriate declaration of consent displayed directly before using a service on offer.

Your consent is required because, according to recent public authority and court decisions and the ECJ case law, the United States does not guarantee an adequate data protection level when processing personal data (C-311/18, Schrems II). In particular, these public authority and court decisions critically show that access by US public authorities (FISA 0702) is not comprehensively restricted by the laws, requires no authorisation by an independent authority and grants data subjects no appropriate remedies to protect themselves from such interventions.

We have no direct influence to prevent US public authorities from accessing personal data transferred to service providers in the United States when using these services – apart from the agreements concluded with US service providers. Although We assume that Our service providers will take necessary steps to ensure the level of protection they promised in accordance with the agreements We concluded with them, it is still likely that US public authorities have access to data processed in the United States.

We therefore request your consent to the processing of the data in the United States before using such services. For each service and/or application, We separately point out that data might be transferred to the United States.

2. Security

We use numerous technical and organisational security measures to protect your data against manipulation, loss, destruction and access by third parties. We constantly enhance Our security measures in line with technological developments on the internet. Should you require more information on the type and scope of technical and organisational measures We implemented, please do not hesitate to contact Us in writing at any time.

3. Your rights

In accordance with the General Data Protection Regulation and the Austrian Data Protection Act, you have the following rights and legal remedies as a data subject regarding Our data processing:

• Right of access (Art. 15 of the GDPR)

As a data subject of the data processing described above and other data processing, you have the right to request information as to whether and, if so, which personal data about you are being processed. For your own protection – so that no unauthorised individual receives information about your data –, We will verify your identity in an appropriate form before providing information.

• Right to rectification (Art. 16) and erasure (Art. 17 of the GDPR)

You have the right to request, without undue delay, that inaccurate personal data concerning you be rectified, that – taking into account the purposes of the data processing – incomplete personal data be completed and that your data be erased, provided that the criteria of Art. 17 of the GDPR are met.

• Right to restriction of processing (Art. 18 of the GDPR)

You have the right, under the legal conditions, to restrict the processing of all personal data collected. As from the restriction request, this data will only be processed with your individual consent and/or for asserting and enforcing legal claims.

• Right to data portability (Art. 20 of the GDPR)

You may request unimpeded and unrestricted transfer to you or to any third party of personal data which you provided to Us.

• Right to object (Art. 21 of the GDPR)

You may object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is necessary for the purposes of protecting Our legitimate interests or those of a third party. Your personal data will no longer be processed after objection, unless there is proof of compelling and legitimate grounds for the processing which prevail over your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims. You may object to data processing for the purpose of direct advertising at any time with effect for the future.

• Revoke of a consent

If you separately provided Us with your consent to the processing of your data, you may withdraw that consent at any time. Such withdrawal affects legitimacy of the processing of your personal data after you submitted your withdrawal to Us.

If you take a measure to enforce any of your rights under the GDPR listed above, Rosenbauer shall immediately, but no later than one month after receiving your request, comment on and/or comply with the request.

We will respond to all reasonable requests within the law free of charge and as promptly as possible.

The data protection authority is responsible for requests concerning violations of the rights of access, to confidentiality, to rectification or to erasure. Their contact details are:

Österreichische Datenschutzbehörde

Barichgasse 40-42

1030 Vienna

dsb@dsb.gv.at

4. Contact information / contact person

a. Contact information of the responsible person

Rosenbauer International AG
Paschinger Straße 90
4060 Leonding, Austria
Tel.: +43 (0)732 6794-0
Fax: +43 (0)732 6794-89

Email: dataprivacy@rosenbauer.com

b. Contact information of the contact person for data protection matters

Rosenbauer International AG
Paschinger Straße 90
4060 Leonding, Austria
Tel.: +43 (0)732 6794-0
Fax: +43 (0)732 6794-89

Email: dataprivacy@rosenbauer.com

Last update: May 2022