Introduction to data protection

Your personal data (e.g. name, surname, e-mail address) will only be processed by us in accordance with the provisions of Austrian data protection law and the data protection law of the European Union (EU). In addition to the processing purposes, recipients, legal bases and storage periods, the following provisions also inform you about your rights and the party responsible for your data processing. This privacy policy only applies to our websites. If you are redirected to other sites via links on our pages, please inform yourself there about the respective handling of your data.

§ 1 Data processing

(1) Purpose of processing: In order to use our contact form, you must consent to your details being stored permanently by OrmoSys GmbH for the purpose of establishing contact and allocating them for any queries.
(2) Your consent must be given separately before sending the respective forms.
(3) Legal basis: The legal basis for this processing is Art. 6 para. 1 a) GDPR.

§ 2 Your rights

You can request confirmation from us as to whether personal data concerning you is being processed by us. Unless restricted by applicable law, individuals have the following rights:
1. right of access – the right to be informed about the personal data we process about you and to request information about it;
2. right to rectification – the right to request that we amend or update your personal data if it is inaccurate or incomplete
3. right to erasure – the right to request that we permanently delete your personal data
4. right to restriction of processing – the right to request that we temporarily or permanently stop processing all or part of your personal data;
5. right to object – the right to object, on grounds relating to your particular situation, at any time to processing of your personal data by us; the right to object to your personal data being processed for direct marketing purposes
6. right to data portability – the right to request a copy of your personal data in electronic format and the right to transfer this personal data for use in the service of another; and
7. the right not to be subject to automated decision-making – the right not to be subject to a decision based solely on automated decision-making, including profiling, where the decision would have a legal effect on you or similarly significantly affect you.

§ 3 Web analysis with Google Analytics

(1) Processing purpose: This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
2. (2) Legal basis: The legal basis for this processing is Art. 6 para. 1 f) GDPR.
3 (3) Legitimate interest: Our legitimate interest is the statistical analysis of user behavior for optimization and marketing purposes. To protect your interest in data protection, this website uses Google Analytics with the extension “anonymizeIP()”, so that the IP addresses are only processed further in abbreviated form in order to exclude direct personal references.
4 (4) Categories of recipients: Google, partner companies
5 (5) Transfer to a third country: Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.
6 (6) Storage period: unlimited
7 (7) RIGHT TO OBJECT: You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: optout
You can also prevent the collection of data by setting an opt-out cookie. If you wish to prevent the future collection of your data when you visit this website, please click here: Deactivate Google Analytics

§ 4 Information about cookies (1) Processing purpose:

1.(1) Technically necessary cookies are used on this website. These are small text files that are not permanently stored in or by your Internet browser on your computer system. These cookies make it possible, for example, to hide your consent to the use of cookies. Other cookies remain permanently and recognize your browser on your next visit. These cookies enable you to be recognized as a returning visitor, for example.
2.(2) Legal bases: The legal basis for this processing is Art. 6 para. 1 a) GDPR. You may have expressly given the following consent to the use of cookies on our website: This website uses cookies for consent to the use of cookies. For example, session information or consent is stored on your computer. In some cases, cookies are also set by third-party services. Without cookies, the functionality of this website is limited.
3.(3) Storage duration: The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have a different lifespan ranging from a few minutes to several years.
4.(4) Right of revocation: If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. However, this may limit the functionality of our website. You can revoke your consent to the permanent storage by deleting the stored cookies via your browser

§ 5 Newsletter

((1) Purpose of processing: When you register for the newsletter, your e-mail address will be used for advertising purposes, i.e. in the newsletter we will inform you in particular about products from our range. For statistical purposes, we can evaluate which links in the newsletter are clicked. We cannot identify which specific person has clicked on the link. You have expressly given the following consent separately or, if applicable, during the ordering process: Subscribe
(2) Legal basis: The legal basis for this processing is Art. 6 para. 1 a) GDPR.
(3) Categories of recipients: Newsletter mailing provider, if applicable
(4) Storage period: Your email address will only be stored for the newsletter mailing for the duration of the requested registration.
(5) Right of revocation: You can revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you can unsubscribe as follows:
Informally by e-mail to or via an unsubscribe link in the newsletter.

§ 6 TLS encryption with https

We use https to transmit data tap-proof on the Internet. By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data. You can recognize the use of this data transmission security by the small lock symbol at the top left of the browser and the use of the https scheme as part of our Internet address.

§ 7 Google Maps privacy policy

This website uses Google Maps, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. (“Google”). By using the functions of this map, data is transmitted to Google. You can find out what data is collected by Google and what this data is used for at www.google.com/intl/de/policies/privacy/.

§ 8. Data protection provisions about the application and use of Facebook

On this website, the controller has integrated components of the enterprise Facebook. Facebook is a social network. A social network is a social meeting place operated on the Internet, an online community that generally enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enables the Internet community to provide personal or company-related information. Among other things, Facebook allows users of the social network to create private profiles, upload photos and network via friend requests. The operating company of Facebook is Facebook, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller for the processing of personal data is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a Facebook component (Facebook plug-in) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding Facebook component from Facebook through the Facebook component. A complete overview of all Facebook plug-ins can be accessed at developers.facebook.com/docs/plugins/. During the course of this technical procedure, Facebook gains knowledge of what specific sub-page of our website was visited by the data subject. If the data subject is logged in to Facebook at the same time, Facebook recognizes which specific subpage of our website the data subject is visiting each time the data subject accesses our website and for the entire duration of their stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated on our website, for example the “Like” button, or if the data subject makes a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data. Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged in to Facebook at the same time as accessing our website; this occurs regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want this information to be transmitted to Facebook, they can prevent the transmission by logging out of their Facebook account before accessing our website. The data policy published by Facebook, which can be accessed at de-de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains the settings options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress the transmission of data to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

§ 9. Data protection provisions about the application and use of Twitter

The data controller has integrated Twitter components on this website. Twitter is a multilingual, publicly accessible microblogging service on which users can publish and disseminate so-called tweets, i.e. short messages limited to 140 characters. These short messages can be accessed by anyone, including people who are not registered with Twitter. However, the tweets are also displayed to the so-called followers of the respective user. Followers are other Twitter users who follow a user’s tweets. Twitter also makes it possible to address a broad audience via hashtags, links or retweets. The operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Each time one of the individual pages of this website is accessed, which is operated by the controller and on which a Twitter component (Twitter button) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Twitter component to download a representation of the corresponding Twitter component from Twitter. Further information about the Twitter buttons is available at about.twitter.com/en/resources/buttons.During the course of this technical procedure, Twitter gains knowledge of what specific sub-page of our website was visited by the data subject. The purpose of the integration of the Twitter component is to enable our users to redistribute the content of this website, to make this website known in the digital world and to increase our visitor numbers. If the data subject is logged in at the same time on Twitter, Twitter recognizes with each call-up to our website by the data subject and for the entire duration of his or her stay on our Internet site, which specific sub-page of our Internet page was visited by the data subject. This information is collected by the Twitter component and assigned by Twitter to the respective Twitter account of the data subject. If the data subject clicks on one of the Twitter buttons integrated on our website, the data and information transmitted with it is assigned to the personal Twitter user account of the data subject and stored and processed by Twitter. Twitter always receives information via the Twitter component that the data subject has visited our website if the data subject is logged in to Twitter at the same time as accessing our website; this takes place regardless of whether the data subject clicks on the Twitter component or not. If such a transmission of information to Twitter is not desirable for the data subject, then he or she may prevent this by logging off from their Twitter account before a call-up to our website is made. The applicable data protection provisions of Twitter may be accessed under twitter.com/privacy.

10. Data protection for applications and in the application process

The controller collects and processes the personal data of applicants for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case if an applicant submits relevant application documents to the controller by electronic means, for example by email or via a web form on the website. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests of the controller stand in the way of deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

11. Data protection provisions about the application and use of Xing

The data controller has integrated Xing components on this website. Xing is an Internet-based social network that enables users to connect with existing business contacts and to make new business contacts. Individual users can create a personal profile for themselves on Xing. Companies can, for example, create company profiles or publish job offers on Xing. The operating company of Xing is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a Xing component (Xing plug-in) has been integrated, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective Xing component to download a representation of the corresponding Xing component from Xing. Further information about the Xing plug-ins can be found at dev.xing.com/plugins. As part of this technical process, Xing receives information about which specific subpage of our website is visited by the data subject. If the data subject is logged in at the same time on Xing, Xing recognizes with each call-up to our website by the data subject and for the entire duration of their stay on our Internet site, which specific sub-page of our Internet page was visited by the data subject. This information is collected by the Xing component and assigned by Xing to the respective Xing account of the data subject. If the data subject clicks on one of the Xing buttons integrated on our website, for example the “Share” button, Xing assigns this information to the personal Xing user account of the data subject and stores this personal data. Xing always receives information via the Xing component that the data subject has visited our website if the data subject is logged in to Xing at the same time as accessing our website; this takes place regardless of whether the data subject clicks on the Xing component or not. If the data subject does not want this information to be transmitted to Xing, they can prevent the transmission by logging out of their Xing account before accessing our website. The data protection provisions published by Xing, which can be accessed at www.xing.com/privacy, provide information about the collection, processing and use of personal data by Xing. Xing has also published data protection information for the XING share button at www.xing.com/app/share. 14. legal basis for processing Art. 6 I lit. a GDPR serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service or consideration, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may become necessary in order to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and their name, age, health insurance details or other vital information would have to be passed on to a doctor, hospital or other third party. The processing would then be based on Art. 6 I lit. d GDPR. Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47 Sentence 2 GDPR).

Responsible for data processing:

OrmoSys GmbH
Mr. Fatmir Langmeier
Rosenheimer Str. 42
D-83064 Raubling
Germany