Data privacy notice
WALTER GROUP is responsible for ensuring that your personal data is sufficiently protected and complies with all statutory provisions regarding protection, lawful handling and privacy of personal data as well as data security.
The following statements are general and cover all data processing operations within the WALTER GROUP comprehensively. This means that the following statements will only partially apply to you.
1. Purposes of data processing
We process personal data primarily for the following purposes:
- Processing offers and enquiries to us, e.g. by (potential) transport partners, by persons who want to commission transports, deliveries, orders or the like or are otherwise looking for a collaboration
- Contract negotiations and offer/contract preparation
- Assessment of suitability as a contractual partner, e.g. credit checks on potential customers, suppliers, etc.
- Handling our contractual and business relationships, e.g. execution of transports (scheduling) and deliveries, fulfillment of inventory and leasing contracts, accounting, dunning, handling complaints and claims, quality management, processing our purchasing, optimisation of our services through the use of business applications (e.g. transport monitoring, portals, etc.).
- Customer relationship, i.e. sending information, newsletters, offers and advertising material, ongoing customer support, organising events etc.
- Provision and administration of insurance, handling of claims
- Fleet Management: Maintenance and servicing of our vehicles
- Product development
- Management of affiliated companies
- Operation of the IT infrastructure, e.g. ensuring the security, the current state of the technology, maintenance, etc.
- Provision of the websites: Improving and developing websites, creating usage statistics, identifying, preventing and investigating attacks on the websites, etc.
- from yourself: e.g. in enquiries to us, in the initiation of contracts, in the context of fulfilling contracts concluded with us
- from affiliated companies within the WALTER GROUP
- from third parties e.g. from transport partners or customers for order processing
- from publicly available sources, e.g. commercial register, land register, edict file, register of associations, trade register
- from your web browser (automatically) when visiting our websites according to the settings you have chosen
We receive personal data
The provision of your personal data is voluntary. However, business relationships with us will not be possible if the necessary personal data is not available to us. In the same way, we can't guarantee all the functions of our websites if you do not provide the necessary personal data.
2. Processed data categories
- Name data, e.g. first name, surname, username, etc.
- Personal data, e.g. age, gender, date of birth, nationality, role within the company, ID copies, etc.
- Contact data, e.g. address, telephone number, e-mail address, etc.
- Identification data, e.g. personal ID card number, passport number, customer number, etc.
- Bank data, e.g. account number, information on creditworthiness, etc.
- Official data, e.g. reference number, tax number, attachment of salary, tenant pass (Germany)
- Vehicle data, e.g. vehicle number, chassis number, engine number, registration plate, registration certificate, fuel card, forklift licence information, etc.
- Image files and video recordings
- IT usage data, e.g. connection data, logging information, access information, IP address, referrer, usernames for externally accessible systems, etc.
- Website usage data: date and time of request, IP address, name and version of the web browser, certain cookies, etc.
- Information on the behaviour of persons, e.g. notes on response behaviour and reminders, correspondence and explanations of ongoing surveys, etc.
- Racial/ethnic origin, e.g. birthplace on ID cards, etc.
- Location data, e.g. GPS data, time stamp for GPS signal, location data (latitude and longitude), etc.
3. Legal basis of processing
Legal bases for our processing of your data are:
- Contract fulfillment and implementation of pre-contractual measures (Article 6 Paragraph 1 (b) GDPR), e.g. when we organise the smooth processing of transports and deliveries, process complaints and damage reports, create invoices, operate quality management, prepare offers, process and respond to your enquiries, etc.
- Our overriding legitimate interest (Article 6 Paragraph 1 (f) GDPR), e.g. when we provide you with tailored information and offers, unless consent is required: our data processing in the context of prosecution, forwarding driver data, if this is necessary for the handling of the transport and there is no direct contact with the driver, processing of data that is necessary for the functions of our websites, etc.
- Legal obligations (Article 6 Paragraph 1 (c) GDPR) e.g. tax obligations, obligations according to road traffic regulations, motor vehicles act, administrative penal law, administrative procedure act, money laundering regulations, etc.
- As far as none of the aforementioned legal bases exist, our data processing is based on your consent in accordance with Article 6 Paragraph 1 (a) GDPR. You, of course, have the right to revoke your consent at any time. However, the revocation of consent does not affect the lawfulness of processing carried out on the basis of consent until the revocation (i.e. the revocation does not affect the past).
4. Forwarding of your personal data
For the aforementioned reasons we may forward your personal data to the following recipients:
- Companies that are part of our group as well as their employees
- Third parties employed by us, e.g. IT service providers, print service providers, data centres, hosting, software and service providers e.g. for sending newsletters, service providers in the area of claims settlement and loss adjustment (insurances and insurance partners), property management, lawyers, tax advisers, notaries, auditors, etc.
- Persons in a business relationship with us, e.g. transport partners, suppliers, trade partners, etc.
- Public bodies, e.g. customs offices, Federal Ministry of the Interior, embassies, district authorities, etc.
In some cases, data is also forwarded to recipients outside Austria and, in exceptional cases, to non-secure third countries. In this case, however, we ensure that suitable privacy safeguards are in place, e.g. through binding intra-corporate data protection regulations or EU standard data protection clauses.
5. Storage period
6. Your rights relating to personal data
7. Cookies
Most of the cookies on our websites are so-called session or temporary cookies. They are automatically deleted when you leave the website. In addition, we use persistent cookies, which remain stored on the hard drive. However, these can be manually deleted in your browser. Otherwise, these cookies last between 1 month and 10 years. We use these persistent cookies to recognise you when you next visit our website in order to make the website more comfortable for you to use and to adapt the website to your requirements in the best possible way.
We also use third-party cookies to help make the website more interesting for you. Therefore, temporary and persistent cookies from third parties are also stored when using the websites, provided we have your consent. The sole purpose of these third-party cookies is to give third party providers the opportunity to address you with targeted advertising. We assume no liability for the lawful use of cookies by third parties.
You can actively consent to the storage of cookies over and above a technically required extent when visiting our websites. You also have the option to enable or disable the storage of only certain types of cookies. If you want to adjust your cookie settings at a later date you can do so in the cookie settings at any time.
Cookie consent
Our website uses OneTrust cookie consent technology to obtain your consent to the storage of certain cookies on your device and to document this in compliance with data protection regulations. OneTrust Technology Ltd is the provider of this technology.
When you enter our website a connection to the OneTrust servers is established in order to obtain your consent to the use of cookies. OneTrust then stores a cookie in your browser in order to be able to assign the consent you have given or revoke it. The data collected in this way is stored until you ask us to delete it or you delete the OneTrust cookie yourself or the purpose for storing the data no longer applies.
OneTrust is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6 paragraph 1 clause 1 (c) of the GDPR.
We have concluded an order processing contract with OneTrust. This is a contract required by data protection law which ensures that OneTrust only processes the personal data of our website visitors according to our instructions and in compliance with the GDPR.
You can also control cookies on your computer by selecting your browser settings to get a notification when a website wants to store cookies. You can also block or delete cookies if they are already stored on your computer.
If cookies are associated with the storage of personal data in a third country outside the scope of the General Data Protection Regulation (GDPR) and without bilateral agreements on an appropriate level of protection, they will only be stored if you have given your consent.
However, disabling, blocking or deleting cookies may affect your online experience and prevent you from fully using our websites.
8. Google Analytics
Our websites use the option offered by Google Analytics for IP anonymisation. This means that the IP address of the user is being shortened by Google within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the websites, compile reports about website activity and to provide us with other services relating to website and internet usage. The IP address provided by the user's browser as part of Google Analytics will not be merged with any other Google data.
You can prevent the collection of data generated by the cookie and relating to use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en
Further information about Google's Terms of Use and Google's Privacy Policy can be found at http://www.google.com/analytics/terms/de.html or http://www.google.at/intl/at/policies.
9. Google Re-Marketing
You can opt out of Google Re-Marketing in Google Ads Preference Manager or edit your settings.
10. Google Maps
Data is processed on the basis of article 6 paragraph 1 (f) GDPR (legitimate interest in making it easier to find the places we have specified on the website).
11. Google reCAPTCHA
The purpose of reCAPTCHA is to check whether data on our websites (e.g. in a contact form) is entered by a human or by an automated programme. For this, reCAPTCHA analyses the behaviour of the website visitor based on various criteria. This analysis starts automatically as soon as the website visitor enters the website. reCAPTCHA analyses various information (e.g. IP address, how long the visitor spends on the website or mouse movements performed by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.
Data is processed on the basis of article 6 paragraph 1 (f) GDPR (legitimate interest in protecting websites from automated fradulent spying and SPAM).
12. Google YouTube
Data is processed based on article 6 paragraph 1 (f) GDPR.
13. Google Optimize
Data is processed based on article 6 paragraph 1 (f) GDPR.
14. Microsoft Bing Ads
Further information about the Microsoft data protection regulations can be found at https://privacy.microsoft.com/privacystatement.
You can change your settings for Microsoft interest-based advertising at https://account.microsoft.com/privacy/ad-settings/.
Data processing is carried out on the basis of Article 6 paragraph 1 (a) GDPR.
15. Hotjar
16. Social media plugins
Data is processed based on article 6 paragraph 1 (f) GDPR.
17. SmartSupp
Data is processed based on article 6 paragraph 1 (f) GDPR.
18. Cloudflare
Data is processed based on article 6 paragraph 1 (f) GDPR.
More information about security and data protection at CloudFlare can be found at
https://www.cloudflare.com/privacypolicy/.
19. Short.IO
Short.IO enables the creation and management of so-called short URLs, informative pretty URLs and associated QR codes. When these URLs are accessed, Short.IO carries out a corresponding redirect to the stored target page.
Data processing is carried out on the basis of Article 6 paragraph 1 (f) GDPR. We have a legitimate interest in making our websites accessible via simple and meaningful short URLs.
20. Lunio
Lunio checks clicks on our GoogleAds adverts for attempted fraud. Illegal sources are subsequently blocked from our GoogleAds adverts via IP address.
Data processing is carried out on the basis of Article 6 paragraph 1 (f) GDPR. We have a legitimate interest in protecting our adverts from click fraud and thus from financial damage.
21. Our contact details
Inquiry regarding the
General Data Protection Regulation (GDPR)