Data Protection Notice

Data Protection Notice

The protection of your personal data is very important to voestalpine High Performance Metals GmbH (hereinafter “we”, “us”). We comply with the applicable legal provisions on the protection, lawful handling and confidentiality of personal data and on data security, in particular the European General Data Protection Regulation (“GDPR”) and the applicable national data protection regulations. 

This data protection notice informs you about the type, scope and purpose of the collection and use of your personal data by us in connection with your visit to and the use of our website. 

In addition, you will find separate data protection notices for individual areas: 

1) Who is responsible for data processing? 

The Controller for the operation of this website is 

voestalpine High Performance Metals GmbH  

Donau-City-Strasse 7, 1220 Vienna, Austria

2) What is personal data?

‘Personal data’ (“data”) means any information relating to an identified or identifiable natural person (“data subject”). This includes, for example, the name, email address, date of birth, any contact details or IP address.  

3) Processing of data in the context of the use of our website 

3.1) Operation and protection of the website 

Purpose: You can visit our website without actively providing any personal data. However, when you visit our website, your end device sends data to our web servers. This data is processed by our web servers and automatically stored in so-called “log files”. The processing of your data is necessary in order to provide you with our website. Storage in log files is necessary to ensure the security and functionality of our website. 

Data categories: IT log and detection data (IP address, HTTP header fields, browser, operating system, website from which you were redirected to our website (‘referrer’), date and time of access, URL accessed) 

Legal basis:  

  • Art 6 (1) (f) GDPR – legitimate interests: Provision of a secure, functional and user-friendly website  

Storage period: The aforementioned data will be stored for 90 days and deleted after this period has expired, unless this data is still required to subsequently clarify a security incident (e.g. hacking attack) on our website and for the purpose of preserving evidence. 

Recipient categories: Processors (IT service providers); in the event of a security incident, your data may also be transmitted to the police, legal representatives, courts and administrative authorities.

3.2) Use of cookies and other services

For data protection-related information on the use and application of cookies and other services, please refer to the cookie banner, which you can access at any time via “My privacy settings” in the footer of this website. In the cookie banner we inform you, among other things, about the type, scope, purposes, processed data and recipient categories, legal bases and storage duration of the cookies used and of other services. 

3.3) Contact us

Purpose: You can contact us with enquiries about our company, our products and services using the contact form on this website, but also by e-mail, telephone or fax. In these cases, we process your data for the purpose of dealing with your enquiry. 

Data categories: Basic data of the data subject (e.g. salutation, title, first name and surname); contact details (e.g. address, telephone number, e-mail address); correspondence data (e.g. free text field on website, e-mails); documentation of appointments and agreements (e.g. in the course of a telephone enquiry) and, if applicable, data that you make available to us by uploading or attaching documents. 

Legal basis:  

  • Art 6 (1) (f) GDPR – legitimate interests: Contacting customers and interested parties to process their enquiries  

Storage period: We store your data until the purpose has been fulfilled. After fulfilment of the purpose, your data will only be stored if there is a legal obligation to retain it or another significant reason for further storage can be cited. This may be the case, for example, if we need your data to establish, exercise or defend legal claims. 

Categories of recipients: Processors (IT service providers). In order to achieve the intended purposes, it may also be necessary in some cases for us to forward your data to other voestalpine Group companies (www.voestalpine.com/locations) in order to ensure that your enquiry is processed quickly. 

3.4) Subscription to the newsletter

Purpose: Information about our products and events for our business partners and interested parties  

Data categories: Contact details (e-mail address) 

Legal basis:  

  • Art 6 (1) (a) GDPR – Consent: You are neither contractually nor legally obliged to provide us with your data required for subscribing to a newsletter. However, if you do not do so, we will not be able to send you a newsletter.  

You can withdraw your consent at any time (e.g. by sending an e-mail to the e-mail address of the data protection organisation listed at the end of this data protection notice or by clicking on the unsubscribe link directly in the footer of the newsletter sent to you).  

Storage period: We store your data for the purpose of sending the newsletter as long as you do not withdraw your consent to receive the newsletter.  

Categories of recipients: Processor (IT service provider) 

4) Data transfers to third countries

Due to the complexity of today’s data processing processes, we engage processors to process your data. As far as possible, we only use processors that are based within the European Union or the European Economic Area and are therefore subject to the GDPR. 

In exceptional cases, however, we may transfer data to third countries (i.e. outside the European Union or the European Economic Area) and have it processed there. If we transfer data to third countries, the transfer takes place exclusively in compliance with the required conditions of admissibility (in particular the existence of an adequacy decision by the EU Commission, conclusion of standard data protection clauses including – if necessary – additional agreement of further technical and organisational as well as contractual measures). If your data is transferred to a third country, you can request a copy of the appropriate or suitable safeguards from our data protection organisation. 

In order for us to efficiently respond to such a request, we ask you to contact us using the contact data listed below and to provide us with confirmation of your identity, for example, by sending us an electronic copy of your ID.

5) Rights of data subjects and the right to lodge a complaint

The security of your personal data is extremely important to us. We take specific measures to protect your personal data against loss, misuse, unauthorized access, manipulation or disclosure, including the following:

  • In accordance with Art 15 GDPR, you have the right to obtain confirmation from us as the controller as to whether or not personal data concerning you are being processed, and, where that is the case, you have the right of access to your personal data. 
  • In accordance with Art 16 GDPR, you have the right to request the rectification of inaccurate data concerning you and/or the completion of incomplete personal data without undue delay. 
  • In accordance with Art 17 GDPR, you have the right to obtain the erasure of your personal data. 
  • In accordance with Art 18 GDPR, you have the right to obtain the restriction of processing of your personal data. 
  • In accordance with Art 20 GDPR, you have a right to data portability. 
  • In accordance with Art 21 GDPR, you have the right to object to the processing of your personal data. 
  • If your data is processed on the basis of your consent, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. 
  • Finally, you have the right to lodge a complaint with the supervisory authority responsible for you. 

6) Contact details

For questions on the subject of data protection and to assert your aforementioned rights, please contact our data protection organisation by e-mail at buag-dataprotection@voestalpine.com or by post at voestalpine High Performance Metals GmbH, Donau-City-Strasse 7, A-1220 Vienna with the subject “Data protection”.  

Parts of this Data Protection Notice may be changed or updated by us for technical or legal reasons without prior notice to you. Please always check the current version of the Data Protection Notice to ensure that you are up to date with any changes or updates.