Data Privacy Statement

Statement of information obligations

The protection of your personal data is of particular concern to us. We process your personal data exclusively on the basis of the statutory provisions (GDPR, TKG 2021). In this data privacy information, we inform you about the most important aspects of data processing within the framework of our website.

Controller

Hochstaffl Nutzfahrzeuge GmbH
Bundesstraße 9
A-7221 Marz
Austria

Telephone: +43 5338 7500
E-mail: info@hochstaffl.com
Web: https://www.hochstaffl.com/en/

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, withdrawal of consent, and objection. Where processing is based on your consent, you may withdraw your consent at any time with effect for the future. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde).

Contact options

If you contact us via a form on the website, by telephone, or by e-mail, we process the data you provide (e.g. name, company, telephone number, e-mail address, message and, where applicable, vehicle-related information) for the purpose of processing your enquiry and in the event of follow-up questions.

Processing is carried out to handle your enquiry and to take pre-contractual steps or for communication.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps/contract performance) and/or Art. 6(1)(f) GDPR (legitimate interest in efficient communication). Where you expressly give consent in a form, processing is additionally based on Art. 6(1)(a) GDPR.

The recipient of your enquiry is generally our company. Processing is carried out in particular via the mailbox. Your data will not be passed on to third parties unless there is a legal obligation to do so or you have expressly consented.

Data is stored only for as long as necessary to process the enquiry and any follow-up questions. Unless statutory retention obligations apply, enquiries are generally deleted or anonymised no later than 12 months after completion.

Contact forms / enquiries

Contact and enquiry forms are available on our website. In particular, your name, company, telephone number, e-mail address, and your message are processed so that we can answer your enquiry and contact you. Vehicle enquiries may additionally contain vehicle-related information.

Data submitted via forms is transmitted to us by e-mail for processing and is additionally stored in the website backend to enable the processing and traceability of enquiries.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps) and/or Art. 6(1)(f) GDPR (communication/organisation). Where consent is provided in the form: Art. 6(1)(a) GDPR.

Hosting

Our website is hosted by the following service provider:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68, D-02742 Friedersdorf (Germany)

As part of hosting, server log files are processed for the operation and security of the website. The host acts as a processor pursuant to Art. 28 GDPR.

Server log files

For technical reasons, the browser transmits certain information to us or to the web hosting provider, which is stored in log files, in particular: browser including version, operating system, referrer URL, pages visited, date and time of access, and the IP address.

This data is processed to ensure operation, stability, error analysis, and the detection of misuse and attacks.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable website operation).

The storage period of server log files depends on the technical hosting settings and is generally limited (typically a few days to a few weeks), unless longer storage is required to investigate security incidents.

Security measures

Security functions are used to protect the website and to prevent attacks. In this context, in particular the IP address, time, accessed URL and technical request data may be processed in order to detect and block malicious access.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security of the website).

E-mail dispatch via the website

For sending website e-mails (e.g. from forms), we use an SMTP/e-mail server configured by us. The data necessary for delivery is processed (e.g. sender and recipient addresses, message content).

The legal basis is Art. 6(1)(b) GDPR (handling enquiries) and/or Art. 6(1)(f) GDPR (reliable delivery).

Information on the use of cookies

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device. Some cookies are technically necessary, while others are used for analytics or marketing purposes.

Technically necessary cookies are used within the scope of § 165(3) TKG 2021. Where personal data is processed in this context, processing is based on Art. 6(1)(f) GDPR (legitimate interest in technically error-free operation and the provision of the website).

Analytics and marketing cookies are only set after you have given your consent (Art. 6(1)(a) GDPR in conjunction with § 165(3) TKG 2021).

Consent to the use of cookies

No prior consent is required for technically necessary cookies. The use of cookies and technologies for analytics and marketing that are not strictly necessary for the operation of the website requires your prior consent.

We use a consent tool (Borlabs Cookie) to manage and document your consent. In addition, signals may be sent to Google tags within the meaning of Google Consent Mode in order to technically implement your selection.

You can change or withdraw your consent at any time:

Borlabs Cookie

Our website uses Borlabs Cookie to store and technically implement your consent to the use of cookies and external services. In particular, your selected choices (consents) are stored. Borlabs Cookie does not process the content of your form entries, but is used to manage your cookie preferences.

The storage period of the consent documentation depends on the consent tool settings and is generally up to 12 months, unless you change or withdraw your consent earlier.

Currently used cookies (general categories)

  • Website navigation / technical cookies: technically required cookies that enable the proper function of the website (e.g. language settings, security functions, performance).
  • Consent (Borlabs Cookie): storage of your cookie consents and settings.
  • Analytics: after consent, analytics cookies may be used (Google Analytics 4).
  • Marketing: after consent, marketing cookies may be used (Google Ads, Meta Pixel) to measure and optimise campaigns and for remarketing.

How to change your cookie settings

Configuring your internet browser is free and an effective way to manage cookies. You have the following options:

  • allow the use of all cookies,
  • block the use of cookies (note: navigation and individual functions may be impaired),
  • set your browser so that you are asked for consent before a new cookie is installed.

Technically necessary cookies (selection)

For the technical provision of the vehicle list and vehicle details, a technically necessary cookie is set (wpcs_ident). Storage period: 30 days. Legal basis: Art. 6(1)(f) GDPR in conjunction with § 165(3) TKG 2021.

Web analysis (Google Analytics 4) – integration via Google Tag Manager

After your consent, our website uses functions of the web analytics service Google Analytics 4. Integration is carried out via Google Tag Manager. Cookies or similar technologies are used for this purpose, which enable an analysis of the use of the website. The information generated in this way may be transmitted to Google servers and stored there.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing of data in third countries (especially the USA) cannot be ruled out.

You can prevent this by not accepting the “Analytics” category in the cookie settings or by withdrawing your consent, or by setting your browser so that no cookies are stored.

The legal basis is Art. 6(1)(a) GDPR (consent).

Google Tag Manager

After your consent, our website uses Google Tag Manager. Google Tag Manager is used to manage website tags via an interface. The Tag Manager itself generally does not collect personal data, but can trigger other tags that process data (e.g. Google Analytics 4, Google Ads).

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Transfers to third countries (e.g. the USA) cannot be ruled out.

The legal basis is Art. 6(1)(a) GDPR (consent).

Remarketing / Google Ads (conversion tracking)

After your consent, our website may use Google remarketing and conversion tracking functions to measure and optimise advertising campaigns. Cookies may be stored to track usage and to build audiences.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Transfers to third countries (e.g. the USA) cannot be ruled out.

You can withdraw your consent at any time in the cookie settings.

The legal basis is Art. 6(1)(a) GDPR (consent).

Meta Pixel (Facebook Pixel)

With your consent, we use the Meta Pixel on our website. This allows us to track user actions after they have seen or clicked on an ad. This enables us to measure advertising effectiveness and use remarketing.

Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Transfers to third countries (e.g. the USA) cannot be ruled out.

Further information:
https://www.facebook.com/about/privacy/

The legal basis is Art. 6(1)(a) GDPR (consent).

Facebook / Instagram / LinkedIn / WhatsApp (links)

Our website contains links to profiles on social networks (e.g. Facebook, Instagram, LinkedIn) and to WhatsApp. If you click on these links, you will leave our website. From this point on, the data protection regulations of the respective provider apply. When you click on WhatsApp, a chat may open.

WPML (multilingual website)

Our website is multilingual (German, English, Croatian, Romanian). Technically necessary cookies may be set to store your language selection.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in user-friendly presentation) in conjunction with § 165(3) TKG 2021.

Google Fonts

Fonts are hosted locally on this website. There is no automatic connection to Google servers solely for loading fonts.

Data security / SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL/TLS) via HTTPS.

Updating this data privacy statement

We update this data privacy statement regularly. If you have any questions, please contact us using the contact details provided above.