Privacy statement

Responsible for the processing of your personal data in accordance with the data protection provisions is VERBUND Hydro Power GmbH, Europaplatz 2,1150 Wien („VERBUND“, „we“, „us“).

Contact details of the data protection officer: 
E-Mail: datenschutz@verbund.com

2.1. What kind of personal data will we process?

During your visit to our website we will automatically collect the following personal data:

• Date and time of access to a page of our website
• Data about your device (device ID)
• IP address
• Name and version of your internet browser
• Session ID

We are not using cookies on our website.

2.2. What is our legal basis and purpose for processing personal data?

Where the data of your visit to our website are concerned, we justify the processing on the basis of our legitimate interest in accordance with Art. 6(1)(f) GDPR, which consists of giving our website a user-friendly design and protecting it against attacks.

We process your data relating to the visit to our website and online services for the following purposes:

• to make our website and online services, including their functions, available to you, and to improve and develop this website further;
• to create usage statistics;
• to detect, prevent and investigate attacks on our website and online services.

2.3. Retention period

We will generally store your data relating to the visit to our website for a period of three months. A longer retention period will apply only to the extent this is required to investigate identified attacks on our website and beyond that only until the end of the relevant limitation periods, statutory retention periods or any legal disputes.

2.4. Data recipients

In order to operate and administer the website, we regularly use IT service providers which, in accordance with our order and instructions, may under certain circumstances also have access to personal data in order to be able to render the commissioned IT services.

We will also transmit your personal data to the following recipients:

• to external third parties to the extent required by our legitimate interest (e.g. auditors, insurance companies in the event of an insured event, legal representatives as the occasion requires);
• to authorities and other public bodies to the extent required by law (e.g. financial authorities, courts).

Your data will not be passed to any other third parties for their own purposes without your consent.

3.1. What kind of personal data will we process?

If you contact us by e-mail or telephone, we will process the personal data you provide (e-mail, name, telephone number and the content of your inquiry or the associated documents) for the purpose of processing your inquiry and will reply to you accordingly.

The provision of these data by you is voluntary. If you do not provide these data for the handling of your inquiry, we will not be able to process your inquiry accordingly.

3.2. What is our legal basis and purpose for processing personal data?

The legal basis for the processing of your personal data is our legitimate interest in accordance with Art. 6(1)(f) GDPR which consists of processing and handling your inquiry.

3.3. Retention period

We process your data in order to handle your enquiry and beyond that for a period of three months, so that we can respond appropriately to subsequent questions. A longer retention period will be applied only on the basis of statutory retention periods or for defence purposes in any legal disputes.

3.4. Data recipients

We regularly use service providers (e.g. IT service providers) who may also have access to personal data on our behalf and in accordance with our instructions in order to provide the commissioned services.

We may also transfer your personal data to the following recipients:

• on the basis of our legitimate interests to VERBUND group companies and other external third parties involved in the project to the extent necessary (e.g. experts, appraisers), as well as, for example, to legal representatives, insurance companies or auditors in the event of an incident;
• to authorities and other public bodies to the extent required by law (e.g. tax authorities, courts).

Your data will not be passed on to any other third parties for their own purposes without your consent.

In principle, you have the right to information, correction, deletion, restriction, data portability, revocation and objection with regard to your data processed by us. If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can complain to us at datenschutz@verbund.com or to the national supervisory authority of your place of residence. In Austria this responsibility lies with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, e-mail: dsb@dsb.gv.at, Tel: +43 1 52 152-0.