Wastebox

Login

Login

Data protection declaration in accordance with Art. 13, 14 GDPR - fulfilment of information obligations

Thank you for visiting our website. We attach great importance to the protection of your data and inform you here in detail about the extent to which we process your data.

All personal designations always refer to all genders. The use of the masculine form is intended solely to simplify readability.

1 Person responsible for data processing

The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is

pink robin gmbh
Hans-Roth-Straße 1
8073 Feldkirchen bei Graz
Tel.: +43 59 800 3000
E-Mail: office@wastebox.biz
Website: www.wastebox.biz

The company has appointed Birgit von Maurnböck from MeineBerater as data protection officer. She can be contacted at datenschutz@wastebox.biz.

2 Data processing of persons in the business environment

2.1 Data processing in accordance with Art. 13 GDPR

We process the data that various people provide to us through their own information, for example as part of an enquiry by email, to initiate and conclude a contract or a business relationship.

2.2 Data processing in accordance with Art. 14 GDPR

In addition, we process data of persons who may be part of a contractual relationship, which we have legitimately received in the context of information from third parties (e.g. managing directors provide us with the data of their employees).   

2.3 Persons concerned

We process the following data from interested parties: Company, name of contact person and professional contact and address data.

We process the following customer data: Company, title and names of contact persons, professional address data and contact details, bank details, contract data.

We process the following data from suppliers and business partners: Company, title and names of contact persons, professional address data and contact details, bank details, contract data.

2.4 Forwarding of data

We only pass on personal data to third parties if this is necessary for the purpose of contract processing and fulfilment or due to legal regulations.

2.5 Storage/deletion of data

  1. Expiry of contractual obligations: If there are contractual provisions that stipulate how long personal data must be stored, the controller shall ensure that these deadlines are met. As soon as these periods have expired, the data is deleted or anonymised by the controller.
  2. Withdrawal of consent: If a person withdraws their consent to the processing of their personal data, the controller shall erase this data unless there is another legal basis for the processing.
  3. Expiry of legal obligations: In some cases, there may be exceptions that not only allow but even oblige the controller to continue to store personal data even after the expiry of contractual deadlines or after the withdrawal of consent. This may be the case if there are statutory deadlines that require the retention of personal data for a defined period of time, such as the storage of tax or accounting records. Once these statutory periods have expired, the controller also ensures that the data is anonymised or deleted.

2.6 Contact by e-mail

When you contact us by e-mail, the data you provide will be stored by us in order to answer your questions. We delete the data arising in this context after processing is no longer necessary, or restrict processing if there are statutory retention obligations.

Legal basis: Art. 6 para. 1 lit. f GDPR

2.7 Publication of the names of authors

We are legally obliged to disclose the names of the authors of image data (photos or videos) each time image data is published. We automatically delete this personal data as soon as we stop using the image data.

2.8 Legal bases

The legal basis for data processing is

  • the initiation and fulfilment of the contract pursuant to Art. 6 para. 1 lit. b GDPR.
  • legal obligations pursuant to Art. 6 para. 1 lit. c GDPR (e.g. statutory retention and documentation obligations, publication obligations under copyright law).
  • legitimate interests of our company within the meaning of Art. 6 para. 1 lit. f GDPR (e.g. use of software).
  • 6 para. 1 lit. a GDPR when obtaining consent (e.g. when processing image data or for advertising purposes).

3 Data processing when contacting us via our website and applications

3.1 Contact us

If you have asked us to contact you via our web form or if you have sent us a message, we will store the data required to contact you. This is your name and your e-mail address. The data will be deleted by us as soon as storage is no longer necessary or you object to the processing.

Legal basis: Art. 6 para. 1 lit. a GDPR

3.2 Applicants

3.2.1 General

If you send us your application documents, we will process your personal data contained therein as well as your CV and references for the purpose of personnel selection and recruitment. In the event of a rejection, we will delete your documents 7 months after sending the rejection to you.

Legal basis: Art. 6 para. 1 lit. b GDPR

If we wish to keep you on record for the purpose of contacting you at a later date, we will approach you with a separate request for your consent. If you explicitly give us this consent, we will save your application documents. If there is no further opportunity to fill a position with us within one year, we will delete all your applicant data one year after you have given us your consent.

Legal basis: Art. 6 para. 1 lit. a GDPR

4 Wastebox.biz app/web portal

4.1 Wastebox.biz App

Our customers can use our Wastebox.biz app to order the right waste containers for construction sites, including their installation and collection of filled containers for waste disposal.

In doing so, we process customer data such as name, address, telephone number, e-mail address, as well as the name and contact details of contact persons (e.g. construction site managers). This data processing serves to fulfil our services. The data will be deleted by us as soon as you delete your profile in the Wastebox app and statutory retention obligations have expired.

Legal basis: Art. 6 para. 1 lit. b GDPR

4.2 Login

Our customers have the option of logging in to our website with their login details in order to view all information, such as orders, construction site details, disposal costs, delivery notes, etc. in real time. We need your e-mail address and password for this.

The data processing serves exclusively for the use of the web portal. The data we collect will be stored for as long as you have an account with us and will be deleted as soon as it is no longer subject to statutory retention obligations.

Legal basis: Art. 6 para. 1 lit. b GDPR

5 Data processing when visiting our website

5.1 Informational use of the website

When using the website for information purposes only, we only collect the personal data that your browser transmits to our server (server log files). If you wish to view our website, we collect at most the data that is technically necessary for us to display our website to you and to ensure stability and security:

  • IP address
  • Date and time of the enquiry
  • Time zone difference to Coordinated Universal Time (UTC)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

This data is not merged with personal data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use and – if there has been a hacking attack – to pass the data on to the law enforcement authorities. The data will not be passed on to third parties beyond this.

Legal basis: Art. 6 para. 1 lit. f GDPR

5.2 Cookies

Cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the organisation that sets the cookie (in this case, us or a third-party provider). Cookies cannot execute programmes or transmit viruses to your computer.

The cookie allows you to be recognised when you visit the website without having to re-enter data that you have already entered.

The information contained in the cookies is used, for example, to determine whether you are logged in or what data you have already entered, or to recognise you as a user when a connection is established between our web server and your browser.

We distinguish between technical cookies that are used exclusively to ensure the operation of a website and other cookies that are set by us or third-party providers for the purpose of statistical analyses, tracking or advertising/marketing.

Legal basis: Art. 6 para. 1 lit. f GDPR (for technical cookies), Art. 6 para. 1 lit. a GDPR (for all other cookies)

Open Cookie Settings

6 Social media presence

We operate the following social media sites: LinkedIn, YouTube, Facebook, Instagram. When you visit our social media presence, personal data, including the IP address of the respective provider, is processed and cookies are used for data collection. Please refer to the privacy policy of the respective service to find out exactly what information is transmitted. There you will also find information about contact options and ways to restrict the processing of this data.

We would also like to point out that you use the respective services and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. sharing, commenting or rating).

The providers of the social media services have provided us with corresponding agreements – in most cases these are agreements on joint responsibility for data processing. The use of social media is based on our legitimate business interests.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

7 Data transfer to a third country

It cannot be ruled out that personal data will be transferred to a third country when you visit our website. If this is the case, we will point this out separately in this privacy policy.

The GDPR requires so-called appropriate safeguards in accordance with Art. 46 GDPR for data transfers to a third country or an international organisation.

In the case of data processing of personal data in a third country or in the case of data processing by US data recipients who have not submitted to the regulations of the EU-US Data Privacy Framework, the following risks in particular cannot currently be ruled out for you as the data subject:

  • Your personal data could possibly be passed on to other third parties (e.g. US, Chinese or Indian authorities) by the respective service provider beyond the actual purpose of order fulfilment.
  • You may not be able to assert or enforce your rights to information against the respective service provider in the long term.
  • There may be a higher probability that incorrect data processing may occur because the technical organisational measures for the protection of personal data do not fully meet the requirements of the GDPR in terms of quantity and quality.

By consenting to the processing of (advertising and marketing) cookies, you explicitly consent to the transfer of data to a third country. You can remove cookies stored on your PC yourself at any time by deleting the temporary internet files.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

8 Data processing when using Borlabs Cookie (Consent Management)

Our website uses the “Borlabs Cookie” consent management tool from Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany.

The service sets a technically necessary cookie (borlabs-cookie), which is used to store your cookie consent. The consent management tool records and stores the cookie selection of the respective user of our website. The explicit consent of the website visitor ensures that statistical and marketing cookies are only then set.

By integrating Borlabs Cookie on our own server, we guarantee that no data will be passed on to third parties.

For more information, please refer to Borlabs’ privacy policy at: https://de.borlabs.io/datenschutz/.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

9 Data processing of services from Google

We have entered into a contract with Google Ireland Limited (“Google”), a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland.

By using this service, personal data is transferred to the USA or such a transfer cannot be ruled out. Google has certified itself in accordance with the adequacy decision for the transfer of personal data to the USA. The European Commission concludes that there is an adequate level of protection for personal data transferred from the EU to a company certified under the EU-US data protection framework in the USA, which is why data transfer is permitted in accordance with Art 45 GDPR.

9.1 Google Analytics

We have integrated Google Analytics on our website, a web analysis service from Google, which enables us to analyse visitor flows and the time spent on our website.

This website uses the function “Activation of IP anonymisation” (i.e. Google Analytics has been extended by the code “gat._anonymizeIp();” to ensure anonymised collection of IP addresses (so-called IP masking)). As a result, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

According to Google, Google will use the information obtained to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. However, Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. You can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, we would like to point out that in this case you may not be able to use all functions of the website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the websites (including your anonymised IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link (https://tools.google.com/dlpage/gaoptout?hl=de).

Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or at https://support.google.com/analytics/answer/6004245?hl=de.

Legal basis: Art. 6 para. 1 lit. a GDPR

9.2 Google Fonts

We use Google Fonts. To ensure that the fonts and icons are displayed in a uniform and appealing manner, your browser loads the required fonts into your browser cache. To do this, it is necessary for the browser you are using to contact the Google Fonts servers, which means that Google Fonts becomes aware that our website has been accessed via your IP address.

You can find out what data is collected by Google and what this data is used for at https://www.google.com/intl/de/policies/privacy/.

Legal basis: Art. 6 para. 1 lit. a GDPR

9.3 Google Gstatic

Gstatic is a domain used by Google to load static content into a different domain name to reduce bandwidth utilisation and increase network performance for the end user.

Legal basis: Art. 6 para. 1 lit. a GDPR

9.4 Google Tag Manager

We use Google Tag Manager to recognise your user behaviour. Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The tool itself processes the following personal data IP address of the user. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data.  Google Tag Manager can set cookies, at least in the administrator’s preview and debug mode, but also outside of it. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

You can find more detailed information here: https://www.google.com/intl/de/tagmanager/faq.html.

Legal basis: Art. 6 para. 1 lit. a GDPR

9.5 Google APIs

We use Google APIs on our website to load additional Google services and to ensure the full functionality of our website. Google APIs are a series of interfaces that facilitate communication between Google services that are implemented on our website. In doing so, Google may collect personal data, such as your IP address.

Further information on the handling of the transferred data can be found in Google’s privacy policy: https://www.google.com/intl/de/policies/privacy/

Legal basis: Art. 6 para. 1 lit. f GDPR

9.6 Google Doubleclick

The website uses the online marketing tool DoubleClick. The Google advertising network and certain Google services can be used to support AdWords customers and publishers in placing and managing adverts on the web. DoubleClick uses cookies to serve ads that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which adverts are displayed in which browser and can thus prevent them from being displayed more than once. In addition, DoubleClick can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a DoubleClick advert and later visits the advertiser’s website with the same browser and makes a purchase there. According to Google, DoubleClick cookies do not contain any personal information. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: Through the integration of DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.

Legal basis: Art. 6 para. 1 lit. a GDPR

10 Data processing when using YouTube

We operate a YouTube channel and have integrated YouTube videos into our website, which are stored on http://www.YouTube.com. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube videos in extended data protection mode. With this setting, YouTube does not store any cookies when you visit our website. A connection to YouTube’s servers is only established when you start playing the embedded videos. YouTube uses cookies for data collection and statistical data analysis. YouTube is informed which pages you visit. If you are logged in to YouTube, your data will be assigned directly to your account. YouTube uses your data for advertising and market research purposes.

Through the use of this service, a transfer of personal data to the USA takes place or cannot be ruled out. Google has certified itself in accordance with the adequacy decision for the transfer of personal data to the USA. The European Commission concludes that there is an adequate level of protection for personal data transferred from the EU to a company certified under the EU-US data protection framework in the USA, which is why data transfer is permitted under Art 45 GDPR.

With your consent to data processing by YouTube, you agree that YouTube may load additional cookies and services, in particular from Google.

Further information on data protection at “YouTube” can be found in the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/

Legal basis: Art. 6 para. 1 lit. a GDPR

11 Your rights

You have the following rights vis-à-vis us with regard to your personal data:

  • Right to information, rectification and erasure
  • Right to restriction of processing
  • Right to object to the processing
  • Right to data portability
  • Right to lodge a complaint with the Austrian data protection authority

Barichgasse 40 – 42, 1030 Vienna, Telephone: +43 1 52 152-0

E-mail: dsb@dsb.gv.at

If you are of the opinion that we have violated Austrian or European data protection law when processing your data and thereby infringed your rights, please contact us so that we can clarify any questions you may have.

Please send your enquiries and requests by e-mail to datenschutz@wastebox.biz or contact us using the contact details provided.

12 Changes to this privacy policy

We reserve the right to make changes to our privacy policy from time to time. We will publish all changes to the privacy policy on this page. Please refer to the latest version of our privacy policy in this regard.