The purposes for processing personal data can be found in technical, contractual, and obligations by law, as well as your consent.
We use the data listed above in sec. 2 for the following purposes:
- to provide the website and ensure technical security, in particular to correct technical errors and to ensure that unauthorized persons do not gain access to the website's systems;
- to transmit information;
- to send newsletters via e-mail;
- to run prize draws;
- to register and create a user account;
- for reach measurements and web analytics to make the website more efficient and interesting for you and to conduct market research.
The following sections contain further information on these purposes underlying the processing of your data.
4.1 Technical provision
4.1.1 Description and extent of the processing
For the provision of our website, including regular performance and security checks, server log files are stored as part of the information when our website is accessed. These log files contain the information and possibly personal data as indicated in section 2 above. Log files are used for the purposes of technical provision only and they are not merged with any other data. Part of the technical provision is a regular reviewing procedure that is designed to detect fraud, hacking and other forms of disruptive behavior.
4.1.2 Purposes and legal basis for the use of personal data
The legal basis for the use of server log files is to be found in Art. 6 sec. 1 lit. f GDPR. Our interest is the undisturbed, resilient and performant operation of our website.
4.1.3 Duration of storage
After accessing our website we store the server log files on the web server, and your IP address is deleted after a maximum of seven days. Any analyses of these data are conducted only in case of a disruptive event involving these data.
4.1.4 Right to object
You are entitled to object the use of your personal data pursuant to Art. 21 GDPR on grounds that relate to your particular situation. If you want to exercise that right contact the Data Protection Officer via the means of contact indicated in section 1 above.
4.2 Email or phone contact
4.2.1 Description and extent of the processing
On our website you are given the means of getting in touch with us using an email address or a phone number. If you use one of them, the data you enter, your email address and/or your phone number and your request will be transmitted to us. Depending on your request (e.g. questions about this website and its contents, assertion of your rights as a data subject e.g. right of access). Where this is necessary, some or all of the data collected under this clause can be transmitted to other entities, provided we need their support to answer your request. In that situation we ensure that the recipient has implemented a proper level of protection as well.
4.2.2 Purposes and legal basis for the use of personal data
The legal basis for using data in this regard is to be found in Art. 6 sec. 1 lit. f GDPR. Our shared interest is that you receive an adequate answer. Our legitimate interest lie in the transmission of information, communicating with you, and processing your request.
4.2.3 Duration of storage / Criteria that determine the duration of storage
After responding to your request and the end of possibly further communication, your information provided for the purpose of the query will be erased unless there are legal retention periods to the contrary. These may result, for example, from the exercise of rights of affected persons
4.2.4 Right to object
You are entitled to object the use of your personal data pursuant to Art. 21 GDPR on grounds that relate to your particular situation. If you want to exercise that right contact the Data Protection Officer via the means of contact indicated in section 1 above. If you object, we can no longer communicate with you. Other rules apply if the storage of your contact data is necessary for the assertion of your rights as an affected party.
4.3 Newsletter mailings
4.3.1 Description and extent of the processing
Our website offers you the option of subscribing to free newsletters and company news alerts via email or SMS. For this purpose, your data will either be forwarded to us by your HR department, or transmitted to us from the website’s registration form and (with the help of service providers) processed further for the dispatch of news alerts and newsletters. The user data is updated daily from the SAP payroll and administration system, among other things, and user data for individual companies is imported manually on an irregular basis. Users can also register independently via the website. When registering, you will be asked for your consent and referred to this data protection information. We will not forward your data to companies outside the Group. Mandatory data for receiving alerts and newsletters is your email address or your mobile phone number. The processing of your access data is also required so that we can prove that you have given your consent. Further data can be given voluntarily, so that we can address you personally.
4.3.2 Purposes and legal basis for the use of personal data
It is necessary for us to process your data in connection with sending a newsletter in order to transmit information to and communicate with you. The legal basis for the HR department's transmission [of your data] to us upon your joining the company is Art. 6 Para. 1 lit. f - entitled interests - of the GDPR. Our legitimate interest lies in the fact that you always receive the company's news first-hand and from a verified source. If you yourself subscribe to the newsletter , Art. 6 Para. 1 lit. a - Consent - GDPR is the legal basis.
4.3.3 Duration of storage
The data is stored for the duration of your subscription to the news alerts and newsletters. After you unsubscribe,, your data will only be stored in order to prove that the company had obtained your consent to send communications and newsletters. The same applies if you have revoked your consent.
4.3.4 Right to object
You have the following options to oppose our use of your data for the purpose of sending the newsletter: You can object to the transmission by your personnel department and the subsequent use of the data. Your data will then no longer be used for this purpose and the newsletter will no longer be delivered to you. If you have given your consent to receive news alerts and newsletters, you can revoke your consent at any time with effect for the future by informing the company of your revocation via the email address firstname.lastname@example.org with the subject "Revoke Consent Newsletter."
4.4 Contests and prize drawings (Online lottery)
4.4.1 Description and extent of the processing
If you win, your participation data ([INSERT data, like „Name, ZIP Code”] will be processed and published on our website. We will also contact you to let you know you have won, and deliver your reward, possibly by involvement of Processors. As part of the distribution of prizes, your data may also be forwarded to third parties (the prize sponsor).
4.4.2 Purposes and legal basis for the use of personal data
The processing of participant data is required for participation in the competition or prize drawing. The legal basis is the fulfilment of a contract in accordance with Art. 6 Para. 1 lit. b GDPR.
4.4.3 Duration of storage
After the winner is drawn, the participant data will be deleted after six months at the latest, unless its retention is mandated by law.
4.4.4 Right to object
Given that we need your data for you to participate in the competition or prize draw, there is no possibility for you to object.
4.5. Use of Data in the Context of BENET Reporting
4.5.1. Description of the data processing
The BENET is used for group-wide communication as well as information from employees and interested external parties. To this end, new articles on relevant topics, people and products from the Group are produced daily and published on BENET. In addition, the headlines and brief descriptions of these articles are sent out in a daily newsletter, to employees and external subscribers to the newsletter. If the data in BENET is processed in the form of a video contribution, both the video and the teaser for the contribution are also published in the BENET Clips App as well as in the newsletter. The data processing associated with this reporting varies according to the content of the report; first and last names, a picture or video, and other personal information (e.g. work/collaboration on a specific project, participation in a conference, assumption of responsibilities, CV information, etc.) that is thematically relevant are regularly included and published in articles. Where appropriate, further information relating to the person covered in the article will be processed. The data subject is notified of these prior to publication.
4.5.2. Purposes and legal basis of the data processing
Data processing in the context of BENET reporting/coverage is carried out on the basis of a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR; the legitimate interest on our part is to create identification with the Group among our readers, to create a corporate identity in the global community, and an attractive, collegial environment. As a rule, the interest of the parties concerned does not outweigh this legitimate interest until a right of objection is exercised.
4.5.3. Duration of storage or criteria for determining such duration
Generally, the data processed in the context of reporting is available in BENET for a period of three years after publication. The contributions are then removed from the freely accessible part of BENET and can only be viewed in the archive by members of the public relations department (ZÖ). The data is stored there for as long as the legitimate interest in retrievability is valid.
4.5.4. Objection and deletion options
In accordance with Art. 21 GDPR, you always have the right to object to the use of your data for the purposes specified under 4.5.1. You can assert this right informally vis-à-vis the body specified in Section 1 by referring to the data processing you no longer wish to be carried out in the future. If the conditions are met, your data will be blocked for this type of processing in the future and deleted in accordance with Art.17 GDPR.
4.6. Use of data in connection with the BENET Clips app
4.6.1. Description of the data processing
The BENET Clips app processes personal data only for purposes of providing the technology. So the data referred to in Section 2 may also be processed in connection with the BENET Clips app. In particular this includes data such as the Mac address of your device, information about the version and system, and technical information such as transmission rate, success, and time of access. After downloading the app, you will need to complete a one-time login with your BENET access information. The app establishes a secure connection to the BENET backend, where it is verified that this access is authorized. After successful registration, the app has permanent access to the BENET clips via a cookie on your smartphone. In addition, an evaluation tool collects anonymous information about which clips and articles are clicked on, when, and how often. For this purpose, it is technically ensured that only numerical values are collected for statistical evaluation.
4.6.2. Purposes and legal basis of the data processing
The processing of data in connection with the BENET Clips-App serves two purposes, both based on Section 6 para 1 letter f of the GDPR: the mobile and handy (technical) provision of the videos also available on BENET (with links to the corresponding BENET article), and the evaluation of the utilization (click rates) of the articles..
4.6.3. Duration of storage or criteria for determining such duration
The data processed for the purpose of providing the technology will generally be deleted after 14 days. Deviations from this rule will only be made if the data is required for further processing due to technical incidents as defined in Section 2.
4.6.4. Objection and deletion options
In principle, in accordance with Art. 21 GDPR you have the right to object to the use of your contact data for the purposes specified under 4.7.1. You can claim this informally vis-à-vis the body specified in Section 1 by referring to the data processing no longer desired in the future. If the conditions are met, your data will be blocked for this type of processing in the future. Please note that we do not use the data on a personalized basis and therefore cannot exclude data processing in the event that you continue to use the BENET Clips app.
4.7 Web tracking
Our website uses features to measure and evaluate user behavior and interaction. These features will utilize your access data (see section 2 above) and analyze your interactions with our website by means of tracking cookies (see section 3 above). The information collected will not be combined with other data, so no identifiable user profiles are created.
Web tracking is usually conducted by external providers (Processors). We have concluded data-processing agreements with these Processors; contracts that strictly bind them to our instructions and oblige them to process the collected data on our behalf and not for their own purposes. The website’s Processor is described in greater detail in the following.
4.7.1 Google Analytics
This website uses Google Inc.’s web analysis service (“Google Analytics”) to analyze the use of the website. A cookie is set for this purpose. The information generated by this cookie about your use of this website (including your IP address) is transferred to a Google server in the USA and stored there.
This website uses Google Analytics exclusively with the IP anonymization extension, whereby IP addresses are processed only in shortened form, to exclude the possibility of tracing them to a specific individual. Through the IP anonymization on this website your IP address is shortened by Google within EU Member States or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
Google will use this information to evaluate your use of the website, compile reports on website activity for these websites, and provide other services relating to website activity and internet usage. Google will not associate your IP address with any other data held by Google. Google may transfer this information to third parties provided this is required by law or if third parties process this data on behalf of Google. You can read more about Google Analytics security and privacy principles at:
4.7.2 Purposes and legal basis:
The legal basis for the creation and utilization of pseudonymous user profiles is Art. 6 sec. 1 lit. a GDPR. You granting your consent to data processing by Google Analytics in our cookie-consent tool authorizes us to process your data in the manner and for the purposes stated.
4.7.3 Duration of storage or criteria for determining the duration:
Data collected and evaluated by use of web tracking tools are usually stored until you object to their use. If the data processing is based on your consent, your data will be stored until you revoke your consent. The storage period for analysis cookies is generally a maximum of 24 months.
4.7.4 Right to objectand options for deletion:
The collection and storage of data by Google Analytics can be objected to at any time with effect for the future. You have the possibility to install a browser plug-in published by Google. This is available for various browser versions and can be downloaded
. Furthermore, it is possible to object at any time in the future using the corresponding data protection setting in our cookie consent tool.
4.7.5. Google Tag Manager
Google Tag Manager is a solution that allows you to manage website tags via an interface. The Google Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If disabled at domain or cookie level, it will remain disabled for all tracking tags implemented with Google Tag Manager. For more information about Google Tag Manager, please visit:
4.8 External services and content on our website
We integrate external services and content on our website. If you use such a service or if third-party content is displayed to you, communication data (access data, see section 2 above) will be exchanged between you and the respective provider for technical reasons. This access data is not personalized due to the type of technical integration.
For further information about the purpose and scope of the collection and processing of your data (by these service providers), please refer to the data protection notices of the providers responsible under data protection law of the services or content integrated by us: