Data protection
THEURL HOLZ ASSLING GmbH, THEURL HOLZ STEINFELD GmbH and THEURL HOLDING GmbH attach great importance to the protection of your data. The three companies listed are referred to on the website as THEURL Austrian Premium Timber. In order to fully inform you about the use of personal data, we ask you to take note of the following data protection information.
1. Personal data
Personal data that you transmit electronically on this website, such as name, email address, address or other personal details, will only be used by us for the purpose stated in each case, stored securely, not passed on to third parties and only stored until the request has been successfully processed.
2. Cookies
Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause any damage.
We use cookies to make our website more user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognise your browser on your next visit.
If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases.
If cookies are deactivated, the functionality of our website may be restricted.
3. Integration of third-party services and content
Third-party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites, may be integrated into this online offering. This always assumes that the providers of this content (hereinafter referred to as “third-party providers”) recognise the IP address of the user. This is because without the IP address, they would not be able to send the content to the respective user’s browser. The IP address is therefore required to display this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content. However, we have no influence on whether the third-party providers store the IP address, e.g. for statistical purposes. Insofar as we are aware of this, we will inform users of this.
4. Privacy policy for the use of Matomo
This website uses Matomo Analytics. To improve our online offering, we occasionally analyse how the site is used. To do this, we compile visitor statistics using the Matomo application. This application causes two identification numbers (HTTP cookies) to be stored in your browser in order to distinguish between different users. In this context, your IP address is included in the analysis, but immediately shortened so that it can no longer be assigned to you.
If you do not agree to your page views being included in the statistics, you have several options:
You can delete HTTP cookies in your browser.
In many modern browsers, you can set your browser to signal to the site operators that you do not wish to be included in such statistics (so-called “do-not-track”). We adhere to this specification.
Finally, you can also make specific settings for our website so that your usage is not included. For this purpose, Matomo will store a two-year opt-out cookie (“matomo_ignore”) to stop the recording.
You can decide here whether a unique web analysis cookie may be stored in your browser to enable the operator of the website to collect and analyse various statistical data.
If you wish to opt out, click the following link to place the Matomo deactivation cookie in your browser.
Your visit to this website is currently recorded by Matomo web analytics.
5. Privacy policy for the use of Facebook
Plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our website. You can recognise the Facebook plugins by the Facebook logo or the “Like” button on our site. You can find an overview of the Facebook plugins here: developers.facebook.com/docs/plugins/. When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook receives the information that you have visited our site with your IP address. If you click on the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook’s privacy policy at www.facebook.com/policy.php. If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
6. Privacy policy for the use of Instagram
Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Further information on this can be found in Instagram’s privacy policy: instagram.com/about/legal/privacy/
If you do not want Instagram to be able to associate your visit to our pages with your Instagram user account, please log out of your Instagram user account.
7. Privacy policy for the use of YouTube
Functions of the YouTube service are implemented on our website. These functions are offered by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. The embedded videos place cookies on the user’s computer when the website is accessed. If you have deactivated the setting of cookies for the Google advertising programme, you will not have to expect any such cookies when accessing YouTube videos. However, YouTube also stores non-personalised usage information in other cookies. If you want to prevent this, you must block it in your browser.
8. Use of links
The websites of THEURL Austrian Premium Timber contain links to websites that are not operated by us and over whose security and content we have no influence. The data protection provisions of THEURL do not apply to these websites, but rather the data protection provisions of the respective operator of the website
9. Privacy policy for the newsletter
If you would like to receive one of the newsletters offered on the website, we require a valid e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided or that the owner agrees to receive the newsletter. No further data is collected. The data will also not be passed on to third parties.
We use “dialog-Mail”, software from the Austrian company dialog-Mail eMarketing Systems GmbH, based in Nussgasse 31, 3434 Wilfersdorf, to create and send our e-mailings. We also use it to analyse openings, reading times and clicks so that we can adapt our information offering to the needs of our readers and provide them with targeted information.
We do not analyse IP addresses. All data is processed by dialog-Mail in a high-security data centre in Vienna. You can unsubscribe from the mail service (e.g. the newsletter) at any time and without giving reasons by clicking on the corresponding “unsubscribe” link in each e-mail or simply sending us an e-mail to this effect (newsletter@theurl-holz.at). If you wish to change or correct your data, you can also use the corresponding link in each e-mail or contact us by e-mail. Once you have cancelled your subscription, your e-mail address will be deleted from our newsletter mailing list immediately.
10. Privacy policy for applications
The applicant agrees that the personal data disclosed and transmitted by him/her in paper or electronic form may be used and processed for certain purposes within the framework of the entire application process at THEURL Austrian Premium Timber. This personal data is processed exclusively for the purpose of processing the application or applicant selection.
Access to stored personal data within THEURL Austrian Premium Timber is only granted to the persons responsible for filling vacancies. Within the scope of the intended use, these persons ensure that the confidentiality of the data is maintained in accordance with the GDPR. The data is stored on the company’s internal servers. Your data is protected against unauthorised access by physical security measures on the server.
Your data will be stored for the duration of the application process and for a maximum of one year for record-keeping purposes if no employment relationship is established. As soon as an employment relationship is established, we store your data for the duration of your employment and delete it after your employment has ended or after the statutory retention obligations have expired.
11. Privacy policy for the purchase/sale of our products and services
The customer agrees that the data provided, in particular the personal data of the contact person, may be processed regularly, including by electronic means, for the purposes of handling the business relationship and internal company presentation. If we make advance payments, we reserve the right to carry out a credit check on the basis of mathematical-statistical procedures in order to protect our legitimate interests. We transmit the personal data required for a credit check to the following service providers:
Association of the Austrian Wood Industry
Schwarzenbergplatz 4
1037 Vienna
KSV1870 Information GmbH
Wagenseilgasse 7
A-1120 Vienna
If a legal dispute arises during a business transaction, the data required for appropriate legal prosecution will be transmitted to legal representatives and courts. If the goods are transported by a logistics partner, we will pass on the name of the recipient and the delivery address to our logistics partner in the course of processing the contract. In certain cases, if requested by you, we will also pass on the telephone number to our logistics partner for queries. When selling PEFC-certified goods, we do not pass on your data, but only the region from which the wood originates. We reserve the right to adapt this privacy policy to technical and legal requirements at any time.
12. Privacy policy for the purchase of logs
The seller agrees that the data provided, in particular the personal data of the contact person, may be processed regularly, including electronically, for the purposes of processing the business relationship and internal company presentation.
When purchasing PEFC-certified round timber, THEURL Austrian Premium Timber collects personal data (first and last name, address, date of birth) on behalf of PEFC Austria if you are not yet registered with PEFC. If you sell PEFC-certified round timber to us, it is possible that your data will be compared with the data of PEFC Austria, checked and recorded in the course of a random check.
If the goods are collected by a logistics partner, we will inform them of the name and collection location. In certain cases, especially if requested by you, we will also pass on your telephone number to our logistics partner for any queries. If the purchased wood is resold unprocessed or processed, we do not pass on the seller’s details to third parties, but only the region from which the wood originates.
We reserve the right to adapt this data protection declaration to technical and legal requirements at any time.
13. Right to information / revocation
In principle, you have the right to information, rectification, erasure, restriction, data portability, cancellation and objection. If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the data protection authority.
For enquiries, please send us an email to datenschutz@theurl-holz.at
14. Privacy Policy for the submission of reports in accordance with the Whistleblower Protection Act (HSchG)
By submitting a report and using the reporting form, you consent to the processing of the personal data you provide. The processing is carried out for the purpose of internal review of the report and to take any necessary measures (in the event of unlawful behaviour, to initiate the prosecution of criminal sanctions, to take measures to prevent and prevent behaviour that is harmful to the company and to enforce legal claims against the perpetrator).
The legal basis for the processing of personal data of
– whistleblowers
– Persons who are affected by whistleblowing
– Persons who support whistleblowers and/or may be affected by adverse consequences
– Persons who are affected by follow-up measures
is based on the legal obligation and authorisation under the HSchG (§ 8 HSchG; Art 6 para 1 lit c, lit f & Art 9 para 2 lit g GDPR). Depending on the content of the report, this may result in the processing of identification data, data on the incident itself and additional information.
The reports received are viewed and processed in strict confidence exclusively by the responsible employees. In justified cases of suspicion, the data may be forwarded to legal representatives, competent authorities or courts while maintaining confidentiality.
The data is only stored for as long as is necessary for the stated purposes. Due to legal documentation and retention obligations, the storage period may be longer. The data will be deleted once the statutory retention period has expired. Personal data that is not required will be deleted immediately. (§ 8 para 11 and 12 HSchG, Art 17 para 3 lit b GDPR)
Temporary restriction of data subject rights based on the legal basis in Section 8 (9) HSchG: As long as and to the extent necessary to protect the identity of a whistleblower and the persons named in the HSchG, the right to information, access, rectification, erasure, restriction of processing, right to object and the right to be notified of a personal data breach of a natural person affected by a whistleblowing incident (Art. 13 – 18, Art 21 and Art 34 GDPR) and a legal person affected by a whistleblowing incident (§ 1 para. 3 no. 1 and 2, §§ 43 – 45 and § 56 DSG) shall not apply.