Privacy Policy
Data protection information
Information obligation if the personal data was collected from the data subject (Article 13) or not from the data subject (Article 14).
Dear stakeholders (visitors, applicants, service providers, interested parties and competition participants, journalists, customers, suppliers, milk suppliers, inquiries regarding sponsorship, training participants: inside and former employees of the company), within the scope of our business activities, we process personal data.
Your rights and freedoms are of particular concern to us. For this reason, we provide you with comprehensive information about the data and processing that we process about your group of data subjects. By affected natural persons we mean all persons, all sole proprietors and legal entities who identify their beneficial owners via the company name.
We provide you with the information required by the General Data Protection Regulation in accordance with Art. 13 / 14 GDPR below:
Responsible:
Gebrüder Woerle Ges.mbH
Silvia Woerle, MBA
A-5302 Henndorf, Enzing 26
datenschutz@woerle.at
Gebrüder Woerle Ges.mbH has not appointed a data protection officer, as this is not required by law. The data controller's representative, Silvia Woerle, MBA, is responsible for this.
We process data for groups of data subjects who are outside the company:
Visitors, applicants, service providers, interested parties and competition participants, journalists, customers, suppliers, milk suppliers, inquiries regarding sponsorship, training participants and former employees of the company
Rights of data subjects
The data subject (that is the natural person whose personal data is processed) has various – very comprehensive – rights vis-à-vis the controller (that is Gebrüder Woerle Ges.mbH with its representative Silvia Woerle, MBA).
These rights serve to ensure transparency in the processing of personal data. The data subject should be able to obtain information and should also know by whom, how, in what way and why their data is being processed.
The data subjects have the following rights vis-à-vis the person responsible:
- Right to information
- Right to rectification
- Right to delete
- Right to withdraw consent
- Right to demand processing restrictions
- Right to object to processing (only if there is a legitimate interest)
- Right to data portability (only in the case of a contractual relationship or consent)
- Right of appeal to the supervisory authority
If the processing is based on consent, you have the right to withdraw consent at any time (marketing for own purposes); the revocation does not affect the legality of the processing carried out on the basis of the consent up to the revocation.
The persons concerned can exercise all rights by sending an email to datenschutz@woerle.at or by contacting them personally (e.g. by telephone or directly on site) or by sending a message by post.
The data subjects must identify themselves and contribute to identification to ensure that the response to the exercise of the respective right is actually addressed to the data subject.
Information according to Art 13 / 14 GDPR for visitors
Description:
Visitors are third parties for whom a factory tour is carried out.
Purpose of data processing:
The purpose of processing your data is to ensure that your visit to our company runs smoothly and that operational security is maintained.
involved data categories:
In the processing, both the master and contact data provided by you as part of the visitor registration, as well as the visiting times of the inviting host are stored and processed.
Transmission of the data:
Data from the processing for visitors is processed exclusively by the person responsible and is not transmitted to any external recipients.
Storage duration and deletion periods
For reasons of efficiency, we keep your visitor master data on file for our visitors and for our visitor processing for 2 years. The individual visit-related data are deleted immediately after the end of the visit.
automated decision-making / profiling:
In the context of processing personal data for visitors, no methods of automated decision-making / profiling are used.
collection of the data
Data is collected directly from the person concerned online or offline.
Information according to Art 13 / 14 GDPR for applicants
Description:
Anyone affected who applies for an employee, worker or internship position via a job advertisement, advertisement, unsolicited application or indirectly via recommendation.
Purpose of data processing:
The purpose of processing your data is to process applications both from a targeted campaign for employee recruitment and from unsolicited applications.
involved data categories:
During processing, the data you provide as part of the application documents, such as master and contact data, curriculum vitae, professional experience, language skills and additional information you have provided or information about your health are stored and processed. If you are invited to job interviews, these will be recorded in the minutes of the interview.
Transmission of the data:
We only transmit your data internally at our headquarters in Austria to the relevant specialist departments. Your data will not be transmitted to external parties.
Storage duration and deletion periods
We store your data without an order for keeping records for 6 months in accordance with §15 GIBG from the filling of the advertised position. With your consent, we will also keep your application on record for 2 years. After this storage period has expired, we will delete your data within 3 months.
automated decision-making / profiling:
In the context of processing personal data for visitors, no methods of automated decision-making / profiling are used.
collection of the data
Data is collected directly from the person concerned online or offline.
Information according to Art 13 / 14 GDPR for service providers
Description:
Service providers are external independent companies, sole proprietors or legal entities from which the beneficial owner is known or representatives of legal entities commissioned with the provision of services.
Purpose of data processing:
The purpose of the processing is both the recording and control of the services performed, as well as the billing of the external service.
involved data categories:
In the processing, both the master data (company name, address and name of the contact person) of the external service provider and contact details (telephone and email), as well as data on the service fee, bank details, UID are stored and processed.
Transmission of the data:
We only transmit your data internally to the respective, commissioning departments. With the exception of bank transfers, your data will not be transmitted to external parties.
Storage duration and deletion periods
We store your master and billing-relevant data during the ongoing contractual relationship and beyond on the basis of §132 BAO +7 years from the approved annual financial statements after the end of the contract. After this storage period has expired, we will delete your data within 1 month.
automated decision-making / profiling:
In the context of processing personal data for visitors, no methods of automated decision-making / profiling are used.
collection of the data
Data is collected directly from the person concerned online or offline.
Information according to Art 13 / 14 GDPR for interested parties and competition participants
Description:
All those affected who are addressed via marketing information, the Internet, email, competitions, etc. or who request product information are recorded as interested parties.
Purpose of data processing:
The purpose of the processing is both to inform interested parties about our products and to win customers for our products.
involved data categories:
In the processing, both the contact details of the interested party (name, address, email, telephone number) and the reason for the interest are stored and processed.
Transmission of the data:
We do not transmit your data to external third parties.
Storage duration and deletion periods
We store your data for a maximum of 3 years after the last contact. After this storage period has expired, we will delete your data within 1 month.
automated decision-making / profiling:
In the context of processing personal data for visitors, no methods of automated decision-making / profiling are used.
collection of the data
Data is collected directly from the person concerned online or offline.
Information according to Art 13 / 14 GDPR for journalists
Description:
Journalists are self-employed or employees of a media company who publish articles about our company or our products.
Purpose of data processing:
The purpose of the processing is to contact journalists as part of our public relations work.
involved data categories:
The contact details of the journalists (name, address, email, telephone number) and, if applicable, the name of the media company are stored and processed during processing.
Transmission of the data:
We do not transmit your data to external third parties.
Storage duration and deletion periods
We store your data for a maximum of 3 years after the last collaboration or until you object. After this storage period has expired, we will delete your data within 1 month.
automated decision-making / profiling:
In the context of processing personal data for visitors, no methods of automated decision-making / profiling are used.
collection of the data
Data is collected directly from the person concerned online or offline.
Information according to Art 13 / 14 GDPR for customers
Description:
Customers are all commercial companies that sell products from Gebrüder Woerle Ges.mbH, as well as sole traders or legal entities from which the beneficial owner is known or are representatives of legal entities who are commissioned to purchase products .
Purpose of data processing:
The purpose of processing is the processing and billing of customer orders, delivery logistics and customer administration.
involved data categories:
During processing, the customer's master data (name, salutation, address, company register number, UID (VAT ID)), contact details of the contact person as well as billing and payment data are stored and processed.
Transmission of the data:
We only transmit your data internally for the purpose of account management and invoicing. Your data will not be transmitted to external third parties.
Storage duration and deletion periods
We store your master and billing-relevant data during the upright customer relationship and beyond on the basis of §132 BAO +7 years from the approved annual financial statements after the end of the contract. After this storage period has expired, we will delete your data within 1 month.
automated decision-making / profiling:
In the context of processing personal data for visitors, no methods of automated decision-making / profiling are used.
collection of the data
Data is collected directly from the person concerned online or offline.
Information according to Art 13 / 14 GDPR for suppliers
Description:
Suppliers are independent companies, sole traders or legal entities from which the beneficial owner is known or representatives of legal entities who are commissioned with the delivery of supplier products.
Purpose of data processing:
The purpose of the processing is the processing and billing of delivery orders, delivery logistics and supplier:internal administration.
involved data categories:
During processing, the supplier's master data (name, salutation, address, company register number, UID (VAT ID)), contact details of the contact person as well as billing and bank data as well as an evaluation of the supplier are stored and processed .
Transmission of the data:
We only transmit your data internally for the purpose of account management and invoice verification. With the exception of bank transfers, your data will not be transmitted to external parties.
Storage duration and deletion periods
We store your master and billing-relevant data during the ongoing customer relationship and beyond on the basis of §132 BAO +7 years from the approved annual financial statements after the end of the contract. After this storage period has expired, we will delete your data within 1 month.
automated decision-making / profiling:
In the context of processing personal data for visitors, no methods of automated decision-making / profiling are used.
collection of the data
Data is collected directly from the person concerned online or offline.
Information according to Art 13 / 14 GDPR for milk suppliers
Description:
Milk suppliers are farmers who deliver milk to Gebrüder Woerle Ges.mbH with a valid milk supply contract.
Purpose of data processing:
The purpose of the processing is the processing and billing of milk delivery orders, delivery logistics, administration of the milk suppliers, quality control and milk price determination.
involved data categories:
During processing, the master data of the milk supplier (name, common name, salutation, address, company register number and UID (VAT ID) if applicable), contact details of the contact person, billing and bank data and an evaluation of the milk supplier :stored and processed inside. In addition, a clearing account for milk deliveries and returns (purchases) is kept for each milk supplier.
Transmission of the data:
We only transmit your data internally for the purpose of account management and invoice verification. An external laboratory is involved in determining the quality of the milk when it is collected from the farm. With the exception of bank transfers, your data will not be transmitted to external parties.
Storage duration and deletion periods
We store your master and billing data during the ongoing milk delivery relationship and beyond on the basis of §132 BAO +7 years from the approved annual financial statements after the end of the contract. After this storage period has expired, we will delete your data within 1 month.
automated decision-making / profiling:
In the context of processing personal data for visitors, no methods of automated decision-making / profiling are used.
collection of the data
Data is collected directly from the person concerned online or offline.
Information according to Art 13 / 14 GDPR for inquiries regarding sponsoring
Description:
Inquiries regarding sponsoring can be made by natural persons or associations. Mostly there are requests for the provision of product prices at events.
Purpose of data processing:
The purpose of the processing is the handling of sponsoring activities.
involved data categories:
During processing, the contact details of the sponsorship advertiser (name, email and telephone number), the subject of the sponsorship and the frequency of inquiries are stored and processed.
Transmission of the data:
Your data will not be transmitted to external parties.
Storage duration and deletion periods
Rejected inquiries or supplied, particularly sensitive data (e.g. for charity events) will be deleted immediately. We store your request-relevant data for a maximum of 3 years from the last sponsorship request. After this storage period has expired, we will delete your data within 1 month.
automated decision-making / profiling:
In the context of processing personal data for visitors, no methods of automated decision-making / profiling are used.
collection of the data
Data is collected directly from the person concerned online or offline.
Information according to Art 13 / 14 GDPR for training participants
Description:
Training participants are external participants in training courses conducted or organized by the company.
Purpose of data processing:
The purpose of the processing is the training and further education of external persons associated with the company.
involved data categories:
During processing, the contact details of the course participants (name, email and telephone number), participant confirmations and possibly also evaluations are stored and processed.
Transmission of the data:
Your data will not be transmitted to external parties.
Storage duration and deletion periods
We store your training-related data for a maximum of 3 years from the last training session. After this storage period has expired, we will delete your data within 1 month.
automated decision-making / profiling:
In the context of processing personal data for visitors, no methods of automated decision-making / profiling are used.
collection of the data
Data is collected directly from the person concerned online or offline.
Information according to Art 13 / 14 GDPR for former employees
Description:
All employees (blue-collar workers) whose employment contract has ended.
Purpose of data processing:
The purpose of the processing is the obligation to issue job references.
involved data categories:
Employee master data (name, address, title, personnel number, entry date (exit date), basic salary), employment relationship, are stored and processed for the issuance of job references after the end of the employment relationship.
Transmission of the data:
Your data will not be transmitted to external parties.
Storage duration and deletion periods
For the issuance of job references, we store your data for a period of 30 years after the end of the employment relationship. After this storage period has expired, we will delete your data within 1 month.
automated decision-making / profiling:
In the context of processing personal data for visitors, no methods of automated decision-making / profiling are used.
collection of the data
Data is collected directly from the person concerned online or offline.
Data protection information www.woerle.at
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google uses so-called "cookies", text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
IP anonymization takes effect on this website. Google Analytics has been expanded to include the code that ensures anonymous collection of IP addresses (so-called IP masking). Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online offer and from processing this data by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout
Alternatively, you can prevent Google Analytics from collecting data on this website by clicking on the following button:
An opt-out cookie will be set to prevent future collection of your data when you visit this website. Your browser must therefore generally allow the storage of cookies. If you delete your cookies regularly, you will need to click the link again each time you visit this website.
You can find more information on the terms of use and data protection on the Google website at www.google.com/analytics/terms/de.html or www.google.de/intl/de/policies/
Facebook Pixel
This website uses Facebook Pixel, a web analytics service provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook") on the legal basis of overriding legitimate interest (analysis of website usage). We have concluded a contract for order data processing with Facebook. Some of the data is transferred to the USA. The data is transmitted to the USA on the basis of the Privacy Shield.
When you visit our website, a connection to the Facebook servers is established via software and data is transmitted to Facebook servers, some of which are located in the USA. Facebook Pixel also uses cookies to store information about the website user and to analyze how the website is used by the website user.
According to information provided by Facebook, Facebook will use the data collected to evaluate use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage.
Facebook may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Facebook.
You can find detailed information on how Facebook handles user data in the privacy policy Facebook.
You can collect your user data on our website in general Prevent by setting "Do Not Track" in your web browser. Our website honors the "Do Not Track" signal that your web browser then sends to all websites.
You can prevent Facebook Pixel from collecting your user data on this website by clicking on the following button:
An opt-out cookie will be set to prevent future collection of your data when you visit this website. Your browser must therefore generally allow the storage of cookies. If you delete your cookies regularly, you will need to click the link again each time you visit this website.
Google Web Fonts
This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.
For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offering. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR.
If your browser does not support web fonts, a standard font will be used by your computer.
You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy at https://www.google.com/policies/privacy/.
Google Maps
This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
In order to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
The use of Google Maps is in the interest of making our website appealing and to facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 (1) (f) DSGVO.
You can find more information on handling user data in Google's data protection declaration: https://www.google.de/intl/de/policies/privacy/.
Cookie policy
Some of the websites use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.
Here you can view and change the previously made cookie settings:
Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.
The processing of the data entered in the contact form is therefore exclusively based on your consent (Article 6 (1) (a) GDPR). You can revoke this consent at any time. An informal message by e-mail to us is sufficient. The legality of the data processing operations that took place up until the revocation remains unaffected by the revocation.
The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- The type and version of browser used.
- The used operating system
- Referrer URL.
- The hostname of the accessing computer.
- The time of the server inquiry
These data cannot be attributed to specific persons and will not be combined with other data sources. We reserve the right to control these data subsequently, if there is concrete evidence for an unlawful use.
Social Media
Facebook plugins (Like & Share button)
Plugins from the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our website. You can recognize the Facebook plugins by the Facebook logo or the “Like button” (“I like”) on our site. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/.
When you visit our site, a direct connection is established between your browser and the Facebook server via the plugin. Facebook receives the information that you have visited our site with your IP address. If you click the Facebook "Like" button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our site with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the data transmitted or how it is used by Facebook. You can find more information on this in Facebook's privacy policy at: https://de-de.facebook.com/policy.php.
If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
