The protection of your personal data is of particular importance to us. We therefore process your data exclusively in accordance with legal requirements (in particular the EU General Data Protection Regulation GDPR and the Telecommunications Act TKG 2021).
In this privacy policy, we inform you about the most important aspects of data processing in connection with our website.
Data controller
The data controller for this website within the meaning of the GDPR is:
alcomtec Aufzugsmanagement & -Notruf GmbH
Scheydgasse 37
1210 Vienna, Austria
Email: call@alcomtec.at
Phone: +43 1 52174-760
Data protection officer
We have appointed a Data Protection Officer for our company. You can contact our Data Protection Officer using the following contact information:
DI Stephanie Kerenyi
Scheydgasse 37
1210 Vienna, Austria
Email: call@alcomtec.at
Phone: +43 1 52174-0
Data security (SSL/TLS Encryption)
For security reasons and to protect the transmission of confidential content (such as inquiries you send to us as the website operator), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock icon in your browser’s address bar.
Contact Us
If you contact us via a form on the website or by email, the data you provide (name, email address, phone number, and your message) will be stored by us for the purpose of processing your inquiry and in case of follow-up questions.
Data transmission via our website is encrypted (SSL/TLS encryption). We process this data to carry out pre-contractual measures or to fulfill a contract in accordance with Art. 6(1)(b) of the GDPR, or based on our legitimate interest in the efficient processing of inquiries in accordance with Art. 6(1)(f) of the GDPR.
Your inquiry data will be stored for a period of 12 months to handle any follow-up inquiries and will subsequently be deleted, provided that no statutory retention obligations prevent this or a contractual relationship arises from the inquiry. This data will not be disclosed to third parties without your express consent.
Data processing upon contract conclusion and for emergency call services
For the purpose of initiating, concluding, and fulfilling contracts for our elevator emergency call systems, as well as providing emergency call services, we process the master and contract data you provide (e.g., name/company, contact person, billing and property addresses, email address, phone number, selected rates/options, payment information, and technical master data for the emergency call system).
Necessity of the data
The data you provide is necessary for the performance of the contract or for the implementation of pre-contractual measures (Art. 6(1)(b) GDPR). Without this data, we cannot enter into the contract for the elevator emergency call system with you or provide the services owed under the contract.
Transfer to third parties
Your data will be transferred to third parties only to the extent necessary for the performance of the contract or where there is a legal obligation to do so. Depending on the transaction, this includes:
- to processing banks or payment service providers for the purpose of debiting the fee,
- to contracted subcontractors or technicians for on-site installation, maintenance, or troubleshooting,
- to emergency call centers / control centers for handling incoming emergency calls and initiating rescue measures,
- to our tax advisor and auditor to fulfill our tax obligations.
Retention period
Upon termination of the contractual relationship, all data arising from the contractual relationship is generally retained until the expiration of the retention period under tax and corporate law (pursuant to § 132 BAO or § 212 UGB in Austria, typically 7 years). In the case of claims for damages or product liability, relevant data is retained until the expiration of the respective statutes of limitations (up to 10 years under the Product Liability Act or up to 30 years for contractual claims for damages).
Use of cookies and local storage
Our website uses so-called cookies as well as your browser’s local storage technologies (e.g., local storage). These are small text files or data that are stored on your device with the help of your browser. They do not cause any harm and do not contain any malware.
Technically necessary functions and cookies
We use only technically necessary cookies and storage functions on our website. These are required to ensure the basic functions and security of the website. These include, in particular:
- Display settings (Light/Dark Mode): To save your preferred color scheme (light or dark mode), the corresponding information is stored in your browser so that the website continues to display in your chosen design when you visit other pages.
- Security and spam protection (WP Armour): To protect our forms from automated spambots, our spam protection plugin uses temporary session verifications (session cookies/tokens). This ensures that form submissions originate from a human visitor. No personal data or tracking profiles are created in the process.
- Form functionality (Fluent Forms): When you use our contact forms, technically necessary session cookies are set to ensure the error-free transmission of your entries.
Processing is based on our legitimate interest in providing our website in a technically sound, secure, and user-friendly manner in accordance with Art. 6(1)(f) GDPR in conjunction with § 165(3) TKG 2021. User consent is not required for these technically essential functions (exception pursuant to § 165(3) TKG 2021).
Retention period
- Session cookies / temporary data: These are automatically deleted at the end of your browser session (when you close the browser).
- Persistent data (e.g., color mode): These remain stored on your device until you delete the browser cache/cookies yourself or the browser’s retention period has expired.
Management and deactivation
You can configure your browser to notify you when cookies or storage entries are set, to allow them only on a case-by-case basis, or to block them entirely. However, if you completely disable cookies, the functionality of this website (e.g., the permanent saving of Light/Dark Mode) may be limited.
Google Fonts (Locally hosted fonts)
We use so-called web fonts from Google on our website to ensure a consistent and appealing font display. These fonts are integrated locally on our own web server.
As a result, no connection is established to Google’s servers. Neither IP addresses nor any other data are transmitted to or stored by Google. The use of local Google Fonts is in the interest of a secure, fast, and consistent presentation of our online content in accordance with Art. 6(1)(f) of the GDPR.
Google Maps (2-click solution / Click-to-Load)
On the “Service Area” subpage, we use the Google Maps service. The service provider for the European region is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
Consent and data transfer only after activation
To protect your privacy, the interactive Google Maps map is disabled by default when you visit the page. No connection to Google’s servers is established in advance, and no data is transmitted to Google.
Only when you give your explicit consent by clicking the “Load Map” button will the map be loaded and a connection to Google’s servers established. In the process, data (such as your IP address, the address of the page you are viewing, and, if applicable, location data) is transmitted to Google. Google may also use its own cookies or similar recognition technologies in this process.
Legal basis and transfer to third countries
Data processing after clicking the button is based exclusively on your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 165(3) TKG 2021. You may revoke this consent at any time with future effect by reloading the page.
Please note that activating the map may result in data being transferred to servers operated by Google LLC in the United States. Google is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection for transfers to the United States.
For more information on the handling of user data, please see Google’s Privacy Policy at: https://policies.google.com/privacy.
Your rights
With regard to the data we have stored about you, you generally have the rights to access, rectification, erasure, restriction of processing, data portability, withdrawal of consent, and objection (Articles 15 through 21 of the GDPR).
If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you may file a complaint with us (using the contact information provided in the legal notice) or with the competent supervisory authority.
In Austria, this is:
Austrian data protection authority
Barichgasse 40–42, 1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at
