Complete Data Privacy Declaration
PROTECTION OF THE PRIVACY OF PERSONAL DATA
ANDRITZ recognizes the importance of protecting the privacy of personal data. This privacy declaration explains how we collect, use, share, and protect personal data of our customers, potential customers, employees, prospective employees/applicants, investors, suppliers/vendors/contractors, consortium partners, media representatives and visitors of ANDRITZ websites and ANDRITZ locations in accordance with the EU General Data Protection Regulation (GDPR) and local data protection laws.
This document describes the personal data that may be collected by ANDRITZ legal entities through their websites, their locations, or your communication with them (in electronic form, at fairs etc.). It also provides information on your rights and choices regarding ANDRITZ´s use of your personal data and how we protect them.
SCOPE AND TERMS USED
This data privacy declaration only applies to the andritz.com website operated by ANDRITZ AG. Unless otherwise indicated, all references to “ANDRITZ,” “we” or “our” in this data privacy declaration shall mean the ANDRITZ GROUP.
Some of the sites may contain links to websites of other ANDRITZ legal entities or to websites of third parties. ANDRITZ is neither responsible nor liable for the privacy policies or practices published on these other websites. We recommend that you review the data privacy declaration of each website you visit.
As used in this data privacy declaration, “personal data” means data that may be used to identify a specific individual or that is about an identifiable individual, such as name, e-mail address or phone number.
WHAT PERSONAL DATA WE COLLECT AND HOW WE USE THEM (TYPICAL USE CASES)
You can visit our websites and find out more about our products, services, companies, and worldwide activities without providing personal data. However, to send further requests, use some of our services or receive newsletters, you will need to provide certain personal data. ANDRITZ does not collect any personal data unless you provide it voluntarily. You may also choose to provide personal data to us when visiting ANDRITZ locations or corresponding with us by mail or e-mail.
Below we describe different scenarios (use cases) for how you might get into contact with ANDRITZ. For each use case, we focus on the aspect of data privacy and explain which personal data we collect for what reasons and how we process them.
I am a potential customer contacting ANDRITZ sales
If you are interested in doing business with ANDRITZ and would like us to contact you by phone, e-mail, or post, we will ask you to provide us with your contact details.
We will store, process, and protect your contact data in accordance with national and international data protection laws.
Purpose & legal basis
The processing of personal data enables ANDRITZ to manage customer enquiries, provide information material and submit offers to interested parties. Legal reasons for data processing include (pre-)contractual necessity, legal obligations, and legitimate interests (to gain you as a new customer).
We process the following personal data
The main categories of personal data that are processed are contact information and employment information (i.e., company name and address, position), depending on the enquiry, also other relevant data may be processed (mainly business-related data). Sensitive information is not requested.
Data retention period
Your personal data will be deleted after 6 months if there are no follow-up activities (like a newsletter subscription or event registration). In case of a contract, your personal data will be retained according to national laws, in most countries, i.e. for 30 years after completion of the project.
We might share your data with the following recipients or categories of recipients
Data usage may include sharing with other ANDRITZ Group companies, if required for fulfilling your enquiry. External disclosure may occur to business partners and service providers, ensuring appropriate data protection measures are in place.
Your data subject rights
As a customer, you of course have rights regarding your data, including access, correction, deletion, objection, data portability, and withdrawal of consent, which can be exercised via the data subject request form provided below (in chapter DATA SUBJECT RIGHTS) or by contacting ANDRITZ.
In summary, ANDRITZ is committed to transparent and lawful processing of customer data, ensuring compliance with data protection regulations and respecting customer’s rights throughout the sales and contract execution process.
I am receiving ANDRITZ e-mailings (marketing, sales, and operational e-mails)
E-mail newsletters
On the ANDRITZ website, you may subscribe to various ANDRITZ newsletters that contain information about ANDRITZ and its activities. Alternatively, you may provide us with your postal address to receive newsletters by post.
Of course, we will process, store, and protect your personal data in accordance with national and international data protection laws.
Subscription to services (marketing automation)
On specific pages, you may provide us with your name, e-mail address and other business-related data to obtain access to special services (e.g., whitepapers, webinars, consultation, proposals, or events) and subscribe to different ANDRITZ e-mailings containing information about ANDRITZ and its activities.
Of course, we will process, store, and protect your personal data in accordance with national and international data protection laws.
Opt-out/unsubscription
If you want to unsubscribe an ANDRITZ e-mail newsletter, please use the unsubscribe button at the end of the newsletter. This will unsubscribe you from all ANDRITZ marketing communications.
E-mail communication in the context of a project
If you are engaged in a project with ANDRITZ, we will communicate with you via e-mail, MS Teams, and the probably other electronic media (for file and information sharing). Consequently, we will store and process your contact data in accordance with national and international data protection laws.
Sharing of your personal data
ANDRITZ may share the personal data you submit with other members of its affiliated group of companies. However, ANDRITZ does not sell or rent your personal data to non-affiliated third parties for those parties’ promotional purposes, with the exception that we may share your name, address, contact details and similar information with our suppliers as part of our customer care and marketing efforts. For further information on sharing of personal data, please see chapter “SHARING OF YOUR PERSONAL DATA”.
For more details on the protection of the privacy of your personal data, please see the further chapters of this data privacy declaration below the use cases.
I am subscribing to ANDRITZ customer magazines, events, or other communications/services
Customer magazines, events, communications
On subscription pages, you may provide us with your name, e-mail address, postal address, and other contact information (company, position in company, address, phone number) to subscribe to different ANDRITZ communications (e.g. magazines), which will inform you about the ANDRITZ GROUP and its activities.
We will store, process, and protect your contact data in accordance with national and international data protection laws.
Opt-out/unsubscription
If you want to unsubscribe from an ANDRITZ communication you receive by post (e.g., a magazine), please return it to the sender's address with a respective note on it or send us an e-mail to contact@andritz.com.
I am using ANDRITZ (mobile) apps
If you want to use an ANDRITZ app like the ANDRITZ AR app (“Augmented reality” app) or the ANDRITZ Metris apps, you can download them for free on our website or directly from Google Play Store or Apple App Store.
We will store, process, and protect your contact data in accordance with national and international data protection laws.
Personalized Information
In most of our (mobile) apps, we do not use user tracking. If we track your behavior to be able to provide you with personalized content, we ask for your consent.
I am taking part in live/hybrid/online events
Subscription to events/services (marketing automation)
If you want to participate in an ANDRITZ event (live/hybrid/online), you may provide us with your name, e-mail address and other business-related data to obtain access to special services (e.g. whitepapers, webinars, consultation, proposals, or events) and subscribe to various ANDRITZ e-mailings containing information about ANDRITZ and its activities.
We will process, store, and protect your personal data in accordance with national and international data protection laws.
For more details on the protection of the privacy of your personal data, please see the further chapters of this data privacy declaration below the use cases.
I am visiting an ANDRITZ location
It is important to ANDRITZ that visitors to ANDRITZ's private properties identify themselves in accordance with the specifications and are instructed in the safety regulations. This serves both the protection of visitors and the protection of our customers, suppliers, employees, and other stakeholders. Visitors primarily register with the porter.
Of course, we will treat your personal data confidential according to data protection laws and delete them after the retention periods that are defined by national laws. For further details on the protection of the privacy of your personal data, please see the further chapters of this data privacy declaration below the use cases.
Registration in advance
If you are invited to visit an ANDRITZ location (office building, plant etc.), you can reduce waiting time at the porter’s by registering in advance. Therefore, you need to provide some personal data like name, address, phone number and e-mail address (if available) on our online registration platform.
Your personal data will be processed and protected as described above.
Video surveillance
Video surveillance is used at ANDRITZ premises to ensure the safety and security of our employees, visitors, and business partners, as well as of our property and premises; preventing, mitigating, and investigating potentially criminal conduct; asserting, exercising, and defending legal claims.
Video surveillance is organized based on data protection law requirements. If you visit an ANDRITZ location (office building, plant etc.), you will see the CCTV symbol (closed-circuit television (CCTV), also known as video surveillance), indicating that everyone who enters this area is recorded on video for safety and security reasons.
Of course, we will treat your personal data confidential according to data protection laws.
Legal basis of video surveillance
We process data about you based on our legitimate interests or those of a third party within the meaning of Art 6 (1) (f) GDPR for the protection of life and limb and property, for the establishment, exercise, and defense of legal claims and for evidence in criminal cases, cf. Art 6 (1) (f), Art 6 (4) (c) and Art 10 GDPR.
We process the following aspects of personal data obtained through video surveillance
Image data, spatial and temporal context, identity of the data subject (if identifiable).
Storage period/deletion period
We do not store your data for more than 72 hours (3 days), unless longer storage is necessary and proportionate (e.g., if criminally relevant behavior has been identified that must be reported accordingly).
We might share your data with the following recipients or categories of recipients
If criminal conduct can be traced, we will disclose the data to law enforcement agencies and courts, as well as to legal representatives and insurance companies, if applicable.
For more details on the protection of the privacy of your personal data, please see the further chapters of this data privacy declaration below the use cases.
I am visiting an ANDRITZ website
Cookies
On our website, we use cookies (small text files stored by your browser that allow us to learn more about your visit or use of the website). Our cookies policy explains which cookies we use, for what purposes, and how you can accept, select, or reject cookies: ANDRITZ Cookies Policy
If you want to reject any non-essential cookies, please use the “Cookie Settings” on the ANDRITZ Cookies Policy page.
You may also set your browser to reject cookies or to notify you if a website tries to place cookies in your browser program. For your convenience, additional information about how to manage cookies for major browsers is available under the following links:
Google Chrome: Link
Mozilla Firefox: Link
Microsoft Internet Explorer: Link
Microsoft Edge: Link
Apple Safari: Link
Non-personal data
We collect non-personal data such as your internet browser type, operating system, and the IP address of the website from which you are linked to the sites. This information helps us tailor our sites to better match your computer settings, interests, and preferences.
We process, store, and protect all personal and non-personal data in accordance with national and international data protection laws.
For more details on the protection of the privacy of your personal data, please see the further chapters of this data privacy declaration below the use cases.
I am applying for a job at ANDRITZ
If you apply for a job at ANDRITZ, you will have to provide your relevant personal data via our ANDRITZ career platform on the internet. Of course, we will treat all your personal data strictly confidential according to data protection laws and only share it with the ANDRITZ company(ies) you apply for.
This Privacy Statement outlines the data processing activities of ANDRITZ, the company offering the position that you are interested in. ANDRITZ is committed to complying with data protection laws and employs technological safety standards to protect personal data used in the applicants' database. Only authorized personnel involved in the application process can access this data to ensure confidentiality.
Purpose & legal basis
The processing of personal data enables ANDRITZ to manage the job application process, assess applicant suitability, and offer employment where appropriate. Legal reasons for data processing include contract necessity, consent, legal obligations, and legitimate interests.
We process the following personal data
Various categories of personal data may be processed for evaluation and coordination of applications, including registration data, contact information, resume details, educational background, and other relevant information. Sensitive information is not requested.
Data retention period
Applicant data is retained for six months or up to three years for U.S. applications, with the option for extended storage with the applicant’s consent. If employed, applicant data becomes part of their personnel file.
We might share your data with the following recipients or categories of recipients
Data usage may include sharing with other ANDRITZ Group companies with applicant consent, subject to confidentiality agreements. External disclosure may occur to service providers, ensuring appropriate data protection measures are in place.
Your data subject rights
As an applicant, you have rights regarding your data, including access, correction, deletion, objection, data portability, and withdrawal of consent, which can be exercised through your applicant account or by contacting ANDRITZ.
In summary, ANDRITZ is committed to transparent and lawful processing of applicant data, ensuring compliance with data protection regulations and respecting applicants' rights throughout the recruitment process.
For more details on our rules for data privacy, please visit our ANDRITZ career platform and check out the “ANDRITZ Group Recruiting Data Privacy Statement” in our application platform SAP Success factors.
I am ANDRITZ employee
Our Data Privacy Declaration on our intranet explains how we process staff personal data. It covers details such as the purpose, methods, and legal basis for collecting, storing, and processing employee data, including contact details and medical data (ANDRITZ intranet access required).
I am an ANDRITZ shareholder/investor
Shareholder/investor register
If you buy ANDRITZ shares on the stock market, we are obliged to collect/process your personal data for maintaining a register of shareholders.
We will store, process, and protect your contact data in accordance with national and international data protection laws.
E-mail and mail newsletters
On our websites’ newsletter sections, you may provide us with your name and e-mail address to subscribe to various ANDRITZ newsletters that contain information about ANDRITZ and its activities. Alternatively, you may provide us with your postal address to receive newsletters by post.
We will store, process, and protect your contact data in accordance with national and international data protection laws.
SMS service for investors
On our website, we offer our investors an SMS service that provides information about the ANDRITZ share: SMS service for investors (andritz.com)
If you want to subscribe to this SMS service, you can send an SMS to the ANDRITZ SMS service number. By doing so, you submit your phone number to ANDRITZ.
We will store, process, and protect your contact data in accordance with national and international data protection laws.
Opt-out/unsubscription
If you want to unsubscribe an ANDRITZ e-mail newsletter, please use the unsubscribe button at the end of the newsletter. This will unsubscribe you from all ANDRITZ communications.
If you want to unsubscribe from an ANDRITZ communication you receive by post (e.g., a magazine), please return it to the sender's address with a respective note on it or send us an e-mail to contact@andritz.com.
DATA RETENTION
We do not process personal data any longer than necessary for a specific purpose. However, due to statutory retention requirements, we sometimes might have to store personal data for a certain period even after the respective purpose has been fulfilled. Personal data required to be held harmless against any liability claims will be stored as long as needed for this purpose.
PERSONALIZED INFORMATION / PERSONALIZATION
Personalization refers to any automated processing of personal data that evaluates specific aspects of an individual to make decisions based on the collected data, which means selecting customized information, invitations, and offers, and tailoring advertisements based on user preferences.
If you give us your consent, we will process data about your use of company media services (websites, apps, customer magazines, newsletters, e-mail and mail communication, webinars) in order to send you personalized information about our products and services by e-mail, post, telephone, messaging and web services. This consent may be revoked at any time, which shall not affect the lawfulness of the data processing until revoked. Further information is provided in our Cookie Policy.
Several of the service providers that analyze activities on our websites and our apps also offer opt-out mechanisms as an alternative to preventing the placement of cookies through your browser settings.
SHARING OF YOUR PERSONAL DATA
ANDRITZ may share the personal data you submit with other members of its affiliated group of companies. However, ANDRITZ does not sell or rent your personal data to non-affiliated third parties for those parties’ promotional purposes, with the exception that we may share your name, address, contact details and similar information with our suppliers as part of our customer care and marketing efforts.
In other cases, ANDRITZ will only share your personal data with third parties without your permission, if necessary or appropriate to
(i) process or fulfill your order,
(ii) respond to your requests or answer your inquiries,
(iii) include you in promotional activities upon your request,
(iv) comply with any applicable law, court order or other judicial process,
(v) enforce or apply agreements with you,
(vi) protect the rights, property or safety of ANDRITZ or third parties,
(vii) or if otherwise required or permitted by law.
In addition, in the event of a corporate transaction such as a sale, merger or reorganization involving an ANDRITZ company, personal data may be disclosed or transferred to the acquiring company/companies.
ANDRITZ may collect and share aggregate statistical website information (such as sales, traffic patterns or related information) with third parties. No such shared statistics will contain any personally identifying user data.
Contractors
ANDRITZ may occasionally hire contractors to provide certain services on its behalf, including data processing and storage or the management of communication, marketing, promotional activities, and surveys. These contractors are required to maintain the confidentiality of all information (including personal data) they receive from ANDRITZ and must not use it for any purposes other than those authorized by ANDRITZ.
Transmission of personal data
Personal data will generally not be transmitted to recipients outside the European Union or the European Economic Area unless it is required to fulfill the above-mentioned purposes. In these cases, we will ensure that such recipients are bound by respective data protection statutes (corporate binding rules, standard contractual clauses that require state-of-the-art technical and organizational measures).
Social media plugins (e.g., share buttons)
When you use the social media share button on our website, it allows you to share a link to our content directly on your chosen social media platform. Please be aware that by sharing content, you are navigating to a third-party platform where the data privacy and security settings are under your control. As such, we encourage you to review and adjust your privacy settings on your social media accounts in accordance with your preferences. Your decision to share content is governed by your consent and interaction with the social media platform, affirming your role in managing your data's security and privacy.
HOW WE PROTECT YOUR PERSONAL DATA
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, modification, disclosure or other misuse, loss, or destruction.
When you submit any personal data via our sites or apps, your personal data is subject to state-of-the-art encryption technology in transition. Any personal data submitted to ANDRITZ in writing is kept in a secure location with strict access control in place. Our employees and computer service providers with access to your personal data are instructed to comply with the principles set forth in this data privacy declaration and applicable laws.
LEGAL BASIS FOR DATA PROCESSING
We process personal data based on the following legal grounds:
- Contractual Obligations: to fulfill our contractual obligations with customers, employees, (consortium) partners and suppliers.
- Compliance with a legal obligation: like processing employee salary information for tax purposes and compliance with labor laws or providing personal data as part of legal investigations or court cases.
- Tasks conducted for an official authority: like paying employees’ income tax to the tax authorities and social insurance to social insurance agencies.
- Protect the vital interests: this legal basis covers any emergency medical situation like an accident, allergic shock, or other medical emergencies at work.
- Legitimate Interests: for business operations, marketing, and analytics.
- Consent: when required, we obtain explicit consent for specific purposes like sending you our newsletters.
YOUR ACCEPTANCE OF THE ANDRITZ DATA PRIVACY DECLARATION
By using our websites, or by submitting personal data, you signify your acceptance of this data privacy declaration, consent to our use of the personal data you submit to ANDRITZ in accordance with this data privacy declaration, and you agree to adhere to the terms and conditions posted on the sites under “Terms of use”. If you do not agree with the terms of this data privacy declaration, please do not submit any personal data to us.
YOUR RIGHTS AS A DATA SUBJECT
Under GDPR (the General Data Protection Regulation of the European Union), you have certain rights regarding your personal data, including:
The right to access your personal data and obtain a copy of them
The right to rectify inaccurate or incomplete personal data
The right to have your personal data erased under certain circumstances
The right to restrict or object to the processing of your personal data
The right of data portability
If you, for instance, wish to have your personal data corrected or deleted or to opt out of any of the data sharing practices described in this data privacy declaration, please use the following “data subject request form”:
Go to data subject request form
By using this web form, you can make use of your data subject rights and submit a request to an ANDRITZ company.
These rights cover information about the personal data stored and processed by an ANDRITZ company, the right to have one's personal data corrected, deleted, or no longer processed (or only with certain restrictions), as well as the right to receive one's personal data in electronic form (in a commonly used and machine-readable format).
For a detailed description of your rights as a data subject, please refer to the General Data Protection Regulation (GDPR).
CONTACT US
If you have any questions or comments about this data privacy declaration or your personal data, you may contact us by sending an e-mail to dataprotection@andritz.com, or by post to ANDRITZ AG, Stattegger Strasse 18, 8045 Graz, Austria.
COMPLAINTS
If you believe that your personal data has not been processed in accordance with applicable law(s), please contact us by sending an e-mail to dataprotection@andritz.com, or by post to ANDRITZ AG, Stattegger Strasse 18, 8045 Graz, Austria.
Of course, you always have the right to address your request or complaint to the competent data protection authority.
CHANGES TO THIS DATA PRIVACY DECLARATION
ANDRITZ reserves the right to modify this data privacy declaration as required. We adhere to international laws and national laws of all countries where ANDRITZ does business, and thus adopt this document to (inter)national laws as required.
October 14th, 2024
Copyright © 2024 ANDRITZ AG