PRIVACY POLICY
S+B Gruppe AG
 

I. Overwiev

Welcome to the website https://www.sb-gruppe.at Please get an idea of how we process your personal data when you visit our website or otherwise have a business relationship with us (Art 13, Art 14 GDPR; section 96 Abs 3 of the Austrian telecommunication Act (“TKG”)).

If you visit our website, please continue reading under point II.

If we have a business relationship, please continue reading under point III.

II. What data do we process if you visit our website?

The following data may be processed when you visit our website:  

  • Browser type, 
  • operating system, 
  • country, 
  • date, 
  • time and duration of access, 
  • IP address1  and pages visited on our website including entry and exit pages,
  • data you enter via a contact form.

1 = An IP address is a number that is assigned to a device. With the help of this IP address, devices can communicate via the Internet. Each IP address contains information about the Internet ser-vice provider used and the physical location of the device used. In this way, information about the user of the device can be obtained.

The processing of this data is necessary to manage the security of the operation of the website and to ensure the functionality of the website from a technical point of view. The processing of this data is justified by our legitimate interest in the operation of our website (Art 6 para 1 lit f GDPR). 

For the operation of our website, it may be necessary for us to disclose your data to the fol-lowing recipients:

Recipient of the data: World4You Internet Services GmbH

  • Purpose of data procecssing:
    Hosting of website
  • Legal justification:
    Legitimate inter-est (Art 6 Abs 1 lit f GDPR)
    Data processing agreement Art 28 GDPR
  • Location:
    Austria
  • Basis for transfer to a third country2:
    Within the EEA

Recipient of the data: Inconcepts Marketing GmbH

  • Purpose of data procecssing:
    Administration of website
  • Legal justification:
    Legitimate inter-est (Art 6 Abs 1 lit f GDPR)
    Data processing agreement Art 28 GDPR
  • Location:
    Austria
  • Basis for transfer to a third country2:
    Within the EEA

Recipient of the data: LinkedIn (Microsoft, Inc)

  • Purpose of data procecssing: 
    LinkedIn Datenschutz-richtlinie
  • Purpose of data procecssing:
    Social-Media-Plattform    
  • Legal justification:
    Consensus (Art 6 Abs 1 lit a GDPR)
  • Location:
    USA
  • Basis for transfer to a third country2:
    Standard contractual clauses
    Art 46 Abs 2 lit 2 lit c GDPR

Recipient of the data: Xing (New Work SE)

  • See Privacy Policy:
    Datenschutz bei XING
  • Purpose of data procecssing:
    Social-Media-Plattform    
  • Legal justification:
    Consensus (Art 6 Abs 1 lit a DSGVO)
  • Location:
    Germany
  • Basis for transfer to a third country2:
    Within the EEA

Recipient of the data: Kununu GmbH (New Work SE)

  • See Privacy Policy:
    Datenschutz bei Kununu
  • Purpose of data procecssing:
    Employer-Rating-Plattform        
  • Legal justification:
    Consensus (Art 6 Abs 1 lit a GDPR)
  • Location:
    Austria
  • Basis for transfer to a third country2:
    Within the EEA

Recipient of the data: Instagram (Facebook, Inc)

Recipient of the data: Youtube (Alphabet, Inc)

Recipient of the data: Vimeo, LLC

  • See Privacy Policy:
    Datenschutzerklärung auf Vimeo Video-Plattform
  • Purpose of data procecssing:
    Video-Plattform            
  • Legal justification:
    Consensus (Art 6 Abs 1 lit a GDPR)
  • Location:
    USA
  • Basis for transfer to a third country2:
    Standard contractual clauses
    Art 46 Abs 2 lit 2 lit c GDPR
     

Recipient of the data: Google Maps (Alphabet, Inc)

Recipient of the data: Google Fonts (Alphabet, Inc)

2 = Third country" includes all states other than (1) the Member States of the European Union and (2) the Member States of the European Economic Area, i.e. in addition to the EU Mem-ber States, Iceland, Liechtenstein and Norway.

II.1.    Overview of the technical cookies

The above-mentioned data is stored via so-called „cookies“3 .These technical cookies are only used to the extent necessary (section 96 Abs 3 TKG). Cookies are text files that are stored on your computer and enable an analysis of the use of the website. They are used to recognise and store temporary data of the homepage visitor. We only use cookies to the extent necessary to communicate with you via the homepage.

These technical cookies are activated as soon as you visit our homepage.

The following cookies are used on our homepage on the basis of our predominantly legitimate interest (Art 6 Abs 1 lit f DSGVO):
We currently do not use technical cookies.

3 = You may refuse the use of cookies by selecting the appropriate settings on your browser. How-ever, we would like to point out that in this case you may not be able to use all the functions of this homepage to their full extent. 

II.2.    Overview of the commercial cookies  

In addition to the "technical cookies" described above, we also use so-called advertising cookies (including "statistical cookies"). These advertising cookies enable us to better under-stand and evaluate your interests. With the help of the advertising cookies, we can merge your "surfing behaviour" across the boundaries of our website with data from other websites. This is to enable us to better understand the interests of our homepage visitors and to target them more effectively.  

We respect that not every visitor to the website wants this. Therefore, we only process your data in the course of advertising cookies if you consent to this (Art 6 Abs 1 lit a GDPR). You can revoke this consent at any time, whereby the data processing carried out up to the time of revocation remains justified. 

These advertising cookies will only be activated once you have consented to them.

Name of cookie: _vuid (Vimeo)

  • Purpose:
    Statistical purpose
  • Duration of storage:
    2 years
  • Location of recipient:
    USA
  • Purpose of data transfer:
    ​​​​​​​
    Collects data about the user's visits to the website, such as which pages were read.

III. For what purposes do we store your data, if we are in a business relationship?

In the course of our business relationship with customers or suppliers, we process your data on the basis of contractual (processing of the contractual relationship with you, pre-contractual obligations, invoicing of services, dispatch of documents, communication for the processing of the contract, project management) and legal obligations (legally required storage within the meaning of § 132 BAO) (Art 6 Abs 1 lit b and c GDPR) as well as on the basis of our legiti-mate interests or on the basis of the legitimate interests of third parties (Art 6 Abs 1 lit f GDPR), namely:

  • for the purpose of internal administration and management of your business case to the ex-tent necessary (e.g.: Processing your business case, forwarding your business case to various departments, forwarding your business case within the group of companies, filing, archiving purposes, correspondence with you, project management);
  • for the purpose of direct advertising (e.g.: Mailing, e-mailing, satisfaction surveys, congratu-latory letters, statistical evaluations);

We would like to expressly inform you that you can object to the processing of your data for the purpose of direct advertising.

  • assertion and defence of legal claims

in each case to the extent necessary. The processing of your data serves the purpose of initiat-ing, maintaining and handling our business relationships and projects. If you do not provide us with this data, we will not be able to process your business case.

If particularly sensitive data is processed in the course of specific legal disputes, this is done for the purpose of asserting legal claims (Art 9 Abs 2 lit f in conjunction with Art 6 Abs 1 lit b GDPR).

IV. How long do we store your data?

We will only store your data for as long as is necessary for the purposes for which we collect-ed your data. In this context, statutory retention obligations must be taken into account (for example, for reasons of tax law, contracts and other documents from our contractual relation-ship must generally be retained for a period of seven years (§ 132 BAO)). In justified indi-vidual cases, such as for the assertion and defence of legal claims, we may also store your data for up to 30 years after termination of the business relationship. 

We store data of interested parties for up to three years from the time of the last contact by the respective person.

V. Who possibly receives your data?

In the course of our business relationship, it may be necessary for us to transmit your data to the following recipients:

Recipient: Companies of the S+B Gruppe AG:
S+B Plan & Bau Wien, S+B Plan  & Bau Prag, S+B Plan & Bau Bukarest, S+B Plan & Bau Warschau, S+B Wohnbau
Purpose: Project manage-ment and handling of construction projects
Legal justification: Contractual obligation (Art 6 Abs 1 lit b GDPR)
Location (Country): Austria, Czech Republic, Poland, Romania
Basis for transfer to a third country4: Within the EAA

Recipient: Companies of the i+R Gruppe:
ir-gruppe.com, For a detailed list see the link:
i+R Gruppe GmbH - Bauen | Im-mobilien | Bagger - i+R Gruppe GmbH
Purpose: Project management and handling of construction projects
Legal justification: Contractual obligation (Art 6 Abs 1 lit b GDPR)
Location (Country): Austria, Slovenia, Czech Republic, Croatia, Switzerland, Spain, Poland, Romania
Basis for transfer to a third country4: Within the EAA

Recipient: Scherter Holding
Purpose: Project management and handling of construction projects
Legal justification: Contractual obligation (Art 6 Abs 1 lit b GDPR)
Location (Country): Austria
Basis for transfer to a third country4: Within the EAA

Recipient: amb Holding GmbH
Purpose: Project management and handling of construction projects
Legal justification: Contractual obligation (Art 6 Abs 1 lit b GDPR)
Location (Country): Austria
Basis for transfer to a third country4: Within the EAA

Recipient: Professionals    
Purpose: Execution of individual trades on site
Legal justification: Contractual obligation (Art 6 Abs 1 lit b GDPR)
Location (Country): Depending on the location of the construction project 
Basis for transfer to a third country4: In most cases within the EAA

Recipient: Real estate agent        ​​​​​​​​​​​​​​
Purpose: Real estate brokerage ​​​​​​​
Legal justification: Legitimate Interest (Art 6 Abs 1 lit f GDPR)    ​​​​​​​
Location (Country): Depending on the location of the construction project​​​​​​​​​​​​​​
Basis for transfer to a third country4: In most cases within the EAA

​​​​​​​Recipient: Semerad IT Consulting GmbH     
Purpose: IT-Support and  Consulting
Legal justification: 
Legitimate Interest (Art 6 Abs 1 lit f GDPR)
Processor according to Art 28 DSGVO ​​​​​​​
Location (Country): Austria
Basis for transfer to a third country4: Within the EAA

​​​​​​​Recipient: Bank (Credit-Institution)        ​​​​​​​​​​​​​​
Purpose: Payment-Services ​​​​​​​
Legal justification: Contractual obligation (Art 6 Abs 1 lit b GDPR)    ​​​​​​​
Location (Country): Austria
Basis for transfer to a third country4: Within the EAA

​​​​​​​Recipient: Insurance        ​​​​​​​​​​​​​​
Purpose: Insurance coverage ​​​​​​​
Legal justification: Contractual obligation (Art 6 Abs 1 lit b GDPR)    ​​​​​​​
Location (Country): Austria
Basis for transfer to a third country4: Within the EAA

​​​​​​​Recipient: Courts and authorities    ​​​​​​​​​​​​​​
Purpose: Legal services ​​​​​​​
Legal justification: Legitimate Interest (Art 6 Abs 1 lit f GDPR)    ​​​​​​​
Location (Country): Austria​​​​​​​​​​​​​​
Basis for transfer to a third country4: Within the EAA

​​​​​​​Recipient: Auditor and tax consultant    ​​​​​​​​​​​​​​
Purpose: Tax consultancy and auditing ​​​​​​​
Legal justification: Contractual obligation (Art 6 Abs 1 lit b GDPR)   ​​​​​​​
Location (Country): Austria​​​​​​​​​​​​​​
Basis for transfer to a third country4: Within the EAA

​​​​​​​Recipient: Attorneys at law    ​​​​​​​​​​​​​​
Purpose: Enforcement and defence of legal claims ​​​​​​​
Legal justification: Legitimate Interest (Art 6 Abs 1 lit f GDPR)   ​​​​​​​
Location (Country): In most cases: Austria​​​​​​​​​​​​​​
Basis for transfer to a third country4: Within the EAA

​​​​​​​Recipient: BMD Systemhaus GesmbH    ​​​​​​​​​​​​​​
Purpose: Accounting software ​​​​​​​
Legal justification: Contractual obligation (Art 6 Abs 1 lit b GDPR)   ​​​​​​​
Location (Country): Austria​​​​​​​​​​​​​​
Basis for transfer to a third country4: Within the EAA

​​​​​​​Recipient: Microsoft, Inc    ​​​​​​​​​​​​​​
Purpose: MS-Office and Outlook, MS-Teams ​​​​​​​
Legal justification: Legitimate Interest (Art 6 Abs 1 lit f GDPR)   ​​​​​​​
Location (Country): USA
Basis for transfer to a third country4: Standard contractual clauses Art 46 Abs 2 lit 2 lit c GDPR

​​​​​​​Recipient: Nextcloud GmbH    ​​​​​​​​​​​​​​
Purpose: Hosting-Provider ​​​​​​​
Legal justification: Legitimate Interest (Art 6 Abs 1 lit f GDPR)   ​​​​​​​
Location (Country): Germany​​​​​​​​​​​​​​
Basis for transfer to a third country4: Within the EAA

​​​​​​​Recipient: Oracle, Inc    ​​​​​​​​​​​​​​
Purpose: Software for the control of construction projects ​​​​​​​
Legal justification: Legitimate Interest (Art 6 Abs 1 lit f GDPR)   ​​​​​​​
Location (Country): USA​​​​​​​​​​​​​​
Basis for transfer to a third country4: Standard contractual clauses Art 46 Abs 2 lit 2 lit c GDPR

​​​​​​​Recipient: thinkproject Deutschland GmbH    ​​​​​​​​​​​​​​
Purpose: Software for the control of construction projects ​​​​​​​
Legal justification: Legitimate Interest (Art 6 Abs 1 lit f GDPR)   ​​​​​​​
Location (Country): Germany
Basis for transfer to a third country4: Within the EAA

4 = "Third country" includes all states other than (1) the Member States of the European Union and (2) the Member States of the European Economic Area, i.e. in addition to the EU Mem-ber States, Iceland, Liechtenstein and Norway.

VI. From what source can we receive data (Art 14 GDPR)?

In the course of a business relationship or the initiation thereof, it is naturally necessary to conduct research on the business partner. This is done exclusively to the extent necessary for this purpose. In this context, data may be retrieved and processed from the following sources:

Source: Internet-Research
Pubicly available: Yes
Data subject: Contact data​​​​​​​
Purpose: Contact for business

Source: Credit protection associations​​​​​​​
Pubicly available: No
Data subject: Credit data​​​​​​​
Purpose: Evaluation of creditworthiness

VII. Does automated decision-making or profiling take plase (Art 13 Abs 2 lit f GDPR)?

No automated decision-making or profiling takes place in our company.

VIII. What are your rights as a data subject?

We would like to inform you that, provided the legal requirements are met, you have the right to request information about your personal data:

  • You have the right to request information about which of your data is processed by us (see in detail Art 15 GDPR).
  • You have the right to request the correction or completion of incorrect or incomplete data relating to you (see in detail Art 16 GDPR).
  • Have the right to have your data deleted (see in detail Art 17 GDPR).
  • Have the right to object to processing of your data which is necessary to protect our legiti-mate interests or those of a third party. This applies in particular to the processing of your data for advertising purposes.
  • Have the right to obtain the transfer of the data you have provided in a structured, commonly used and machine-readable format.

If we process your data on the basis of your consent, you have the right to revoke this consent at any time by email. This does not affect the lawfulness of the data processing carried out up to this point (Art 7 Abs 3 GDPR).

IX. Do you have a right to complain?

If, contrary to expectations, there is a breach of your right to lawful processing of your data, please contact us by post or e-mail. We will endeavour to deal with your concern promptly. However, you also have the right to lodge a complaint with the supervisory authority for data protection matters responsible for you. 

The address of the Austrian data protection authority is:
Austrian Data Protection Authority
Barichgasse 40-42,
1030 Vienna

X. How can you get in contact with us?

If you have any further questions about the processing of your data, please do not hesitate to contact our data protection coordinator using the contact details below.

XI. Controller

The controller in the sense of Art 4 Z 7 DSGVO is:

S+B Gruppe AG
Löwengasse 47
1030 Vienna
Austria

T. +43 / 1 / 713 06 50
datenschutz@sb-gruppe.at
www.sb-gruppe.at 

Company register number: FN 283434s