Data Privacy Declaration
PROTECTION OF THE PRIVACY OF PERSONAL DATA
ANDRITZ recognizes the importance of protecting the privacy of personal data. This privacy declaration explains how we collect, use, share, and protect personal data of our customers, potential customers, employees, prospective employees/applicants, investors, suppliers/vendors/contractors, consortium partners, media representatives and visitors of ANDRITZ websites and ANDRITZ locations in accordance with the EU General Data Protection Regulation (GDPR) and local data protection laws.
This document describes the personal data that may be collected by ANDRITZ legal entities through their websites, their locations, or your communication with them (in electronic form, at fairs etc.). It also provides information on your rights and choices regarding ANDRITZ´s use of your personal data and how we protect them.
CONTENTS OF THIS DOCUMENT
- Scope and terms used
- What personal data we collect and how we use them (typical use cases)
- Data retention
- Personalized Information / personalization
- Sharing of your personal data
- How we protect your personal data
- Legal basis for data processing
- Your acceptance of the ANDRITZ data privacy declaration
- Your rights as a data subject
- Contact us
- Complaints
- Changes to the data privacy declaration
SCOPE AND TERMS USED
This data privacy declaration only applies to the andritz.com website operated by ANDRITZ AG. Unless otherwise indicated, all references to “ANDRITZ,” “we” or “our” in this data privacy declaration shall mean the ANDRITZ GROUP.
Some of the sites may contain links to websites of other ANDRITZ legal entities or to websites of third parties. ANDRITZ is neither responsible nor liable for the privacy policies or practices published on these other websites. We recommend that you review the data privacy declaration of each website you visit.
As used in this data privacy declaration, “personal data” means data that may be used to identify a specific individual or that is about an identifiable individual, such as name, e-mail address or phone number.
WHAT PERSONAL DATA WE COLLECT AND HOW WE USE THEM (TYPICAL USE CASES)
You can visit our websites and find out more about our products, services, companies, and worldwide activities without providing personal data. However, to send further requests, use some of our services or receive newsletters, you will need to provide certain personal data. ANDRITZ does not collect any personal data unless you provide it voluntarily. You may also choose to provide personal data to us when visiting ANDRITZ locations or corresponding with us by mail or e-mail.
Below we describe different scenarios (use cases) for how you might get into contact with ANDRITZ. For each use case, we focus on the aspect of data privacy and explain which personal data we collect for what reasons and how we process them.
- I am a potential customer contacting ANDRITZ sales
- I am receiving ANDRITZ e-mailings (marketing, sales, and operational e-mails)
- I am subscribing to ANDRITZ customer magazines, events, or other communications/services
- I am using ANDRITZ (mobile) apps
- I am taking part in ANDRITZ live/hybrid/online events
- I am visiting an ANDRITZ location
- I am visiting an ANDRITZ website
- I am applying for a job at ANDRITZ
- I am ANDRITZ employee
- I am an ANDRITZ shareholder/investor
DATA RETENTION
We do not process personal data any longer than necessary for a specific purpose. However, due to statutory retention requirements, we sometimes might have to store personal data for a certain period even after the respective purpose has been fulfilled. Personal data required to be held harmless against any liability claims will be stored as long as needed for this purpose.
PERSONALIZED INFORMATION / PERSONALIZATION
Personalization refers to any automated processing of personal data that evaluates specific aspects of an individual to make decisions based on the collected data, which means selecting customized information, invitations, and offers, and tailoring advertisements based on user preferences.
If you give us your consent, we will process data about your use of company media services (websites, apps, customer magazines, newsletters, e-mail and mail communication, webinars) in order to send you personalized information about our products and services by e-mail, post, telephone, messaging and web services. This consent may be revoked at any time, which shall not affect the lawfulness of the data processing until revoked. Further information is provided in our Cookie Policy.
Several of the service providers that analyze activities on our websites and our apps also offer opt-out mechanisms as an alternative to preventing the placement of cookies through your browser settings.
SHARING OF YOUR PERSONAL DATA
ANDRITZ may share the personal data you submit with other members of its affiliated group of companies. However, ANDRITZ does not sell or rent your personal data to non-affiliated third parties for those parties’ promotional purposes, with the exception that we may share your name, address, contact details and similar information with our suppliers as part of our customer care and marketing efforts.
In other cases, ANDRITZ will only share your personal data with third parties without your permission, if necessary or appropriate to
(i) process or fulfill your order,
(ii) respond to your requests or answer your inquiries,
(iii) include you in promotional activities upon your request,
(iv) comply with any applicable law, court order or other judicial process,
(v) enforce or apply agreements with you,
(vi) protect the rights, property or safety of ANDRITZ or third parties,
(vii) or if otherwise required or permitted by law.
In addition, in the event of a corporate transaction such as a sale, merger or reorganization involving an ANDRITZ company, personal data may be disclosed or transferred to the acquiring company/companies.
ANDRITZ may collect and share aggregate statistical website information (such as sales, traffic patterns or related information) with third parties. No such shared statistics will contain any personally identifying user data.
HOW WE PROTECT YOUR PERSONAL DATA
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, modification, disclosure or other misuse, loss, or destruction.
When you submit any personal data via our sites or apps, your personal data is subject to state-of-the-art encryption technology in transition. Any personal data submitted to ANDRITZ in writing is kept in a secure location with strict access control in place. Our employees and computer service providers with access to your personal data are instructed to comply with the principles set forth in this data privacy declaration and applicable laws.
LEGAL BASIS FOR DATA PROCESSING
We process personal data based on the following legal grounds:
- Contractual Obligations: to fulfill our contractual obligations with customers, employees, (consortium) partners and suppliers.
- Compliance with a legal obligation: like processing employee salary information for tax purposes and compliance with labor laws or providing personal data as part of legal investigations or court cases.
- Tasks conducted for an official authority: like paying employees’ income tax to the tax authorities and social insurance to social insurance agencies.
- Protect the vital interests: this legal basis covers any emergency medical situation like an accident, allergic shock, or other medical emergencies at work.
- Legitimate Interests: for business operations, marketing, and analytics.
- Consent: when required, we obtain explicit consent for specific purposes like sending you our newsletters.
YOUR ACCEPTANCE OF THE ANDRITZ DATA PRIVACY DECLARATION
By using our websites, or by submitting personal data, you signify your acceptance of this data privacy declaration, consent to our use of the personal data you submit to ANDRITZ in accordance with this data privacy declaration, and you agree to adhere to the terms and conditions posted on the sites under “Terms of use”. If you do not agree with the terms of this data privacy declaration, please do not submit any personal data to us.
YOUR RIGHTS AS A DATA SUBJECT
Under GDPR (the General Data Protection Regulation of the European Union), you have certain rights regarding your personal data, including:
The right to access your personal data and obtain a copy of them
The right to rectify inaccurate or incomplete personal data
The right to have your personal data erased under certain circumstances
The right to restrict or object to the processing of your personal data
The right of data portability
If you, for instance, wish to have your personal data corrected or deleted or to opt out of any of the data sharing practices described in this data privacy declaration, please use the following “data subject request form”:
Go to data subject request form
By using this web form, you can make use of your data subject rights and submit a request to an ANDRITZ company.
These rights cover information about the personal data stored and processed by an ANDRITZ company, the right to have one's personal data corrected, deleted, or no longer processed (or only with certain restrictions), as well as the right to receive one's personal data in electronic form (in a commonly used and machine-readable format).
For a detailed description of your rights as a data subject, please refer to the:
CONTACT US
If you have any questions or comments about this data privacy declaration or your personal data, you may contact us by sending an e-mail to dataprotection@andritz.com, or by post to ANDRITZ AG, Stattegger Strasse 18, 8045 Graz, Austria.
COMPLAINTS
If you believe that your personal data has not been processed in accordance with applicable law(s), please contact us by sending an e-mail to dataprotection@andritz.com, or by post to ANDRITZ AG, Stattegger Strasse 18, 8045 Graz, Austria.
Of course, you always have the right to address your request or complaint to the competent data protection authority.
CHANGES TO THIS DATA PRIVACY DECLARATION
ANDRITZ reserves the right to modify this data privacy declaration as required. We adhere to international laws and national laws of all countries where ANDRITZ does business, and thus adopt this document to (inter)national laws as required.
October 14th, 2024
Copyright © 2024 ANDRITZ AG