Data Protection and Cookie Regulations
UBM Development AG, 1100 Vienna, Laaer-Berg-Strasse 43 (“we”, “us”) places high value on providing effective protection for your personal data. We therefore comply with the applicable legal regulations, in particular the EU Data Protection Regulation (“DSGVO”) and the Austrian Data Protection Act (“DSG”), for the legally compliant and confidential treatment of personal data and for data security. The following sections explain what information we collect, process and use when you visit our website www.ubm-development.com (“website”):
1. What are personal data?
Personal data represent information relating to natural persons (so-called “data subjects”) who can be identified directly or indirectly. This type of data includes your name, address and/or email address.
2. What data do we collect from you?
Technical data: We record the IP address of your device, the Internet browser you use, your browser language and operating system, the files accessed on our website, your Java settings, monitor resolution, colour depth, your clicking behaviour on the website (access time, clicks) and the Internet page from which you visit us (referrer URL).
Social media plug-ins: A number of pages include buttons from social media networks (e.g. Facebook and YouTube), which you can use to recommend our website to others. These plug-ins are designated by symbols (e.g. “Facebook” and “YouTube” buttons). When you click on one of these buttons, the following data can be transmitted to the operator of the respective social network: IP address, browser information and operating system, monitor resolution, installed browser plug-ins, origin of the visitors and the URL for the current page. That allows the social network to assign your user behaviour to your personal social media account. See Point 7 for additional information.
3. How do we collect your data?
The data arising from your visit to our website are collected automatically. In all other cases, the data we collect are derived from your direct input (this applies, above all, to order and registration data).
4. What do we do with your data?
We use your personal data (i) to improve our services and our website and to increase its user friendliness and (ii) to personalise the services for website users through the temporary storage of search parameters. The transmission of this data to third parties – with the exception of public authorities or third party legal rights to information – only takes place within the scope defined by this statement.
If you have indicated your consent, we use the personal data entered in connection with your registration for our newsletter (name, address and email address) for the following direct marketing purposes:
By clicking on the “registration“ button when you register to receive our newsletter, you agree that we may use the name and email address which you have voluntarily provided to send you (i) satisfaction surveys on our service and advising, (ii) invitations to events and (iii) marketing and product information in connection with our services via email and also agree that we may process your personal data for the above-mentioned marketing purposes.
You may cancel your consent for a specific purpose, or for all purposes, at any time by contacting us (e.g. per email, clicking the deregistration link in the email footer, etc.).
5. Data transfer
We also transfer your personal data to external agents or service providers to the extent this is necessary:
- to IT service providers and/or providers of data hosting, data processing or similar services;
- to other service providers, providers of tools and software solutions who support us in providing our services and operate on our orders (incl. providers of marketing tools, marketing agencies, communication service providers and call centres);
- to third parties who help us meet our obligations to you (e.g. the parcel services which deliver the orders placed in our online shop, payment service providers involved in the settlement of payments connected with the online shop or banks involved in payment processing);
- to other external third parties as required (e.g. auditors, insurance companies in the event of a claim, legal representatives if required, etc.);
- to public authorities and other public institutions as required by law (e.g. taxation authorities, etc.).
6. How is your data protected?
We take appropriate steps in the areas of technical and organisational security to protect your personal data against unintended or illegal deletion, modification, damage or loss as well as unauthorised transmission or unauthorised access. We therefore offer to pseudonymise your personal data when you use our website. In addition, UBM and its employees are required to keep your personal data confidential.
7.1. Google Analytics
The following information is collected by Google Analytics: browser, type and model of device, country, service provider, monitor resolution (on mobile devices), time spent on the website, language, operating system, pages visited on the website. Google uses this information to evaluate your use of the website in order to compile reports for us on the website activity.
You can prevent the installation of cookies through a setting on your browser or download an appropriate browser plug-in under http://tools.google.com/dlpage/gaoptout.
7.2. Use of Facebook plug-ins
Plug-ins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA, are integrated on our websites. These plug-ins can be identified by the Facebook logo (a white “f” on a blue tile) on our website. You can find an overview of the Facebook plug-ins here: https://developers.facebook.com/docs/plug-ins.
When you visit our websites, the plug-in creates a direct connection between your browser and the Facebook server. Facebook then receives the information that you have visited our websites with your IP-address. If you click on the Facebook “Like” button or “Share” button while you are logged in to your Facebook account, you can link the content of our websites to your Facebook profile. Facebook can then assign your visit on our websites to your user account. We note that we do not receive any information on the transmitted data content or its use by Facebook. You can find additional information under Facebook’s data protection statement: https://www.facebook.com/policy.php.
If you do not want Facebook to be able to assign your visit on our website to your Facebook user account, please log off from your Facebook user account before you visit our website.
7.3. Use of YouTube plug-ins
YouTube plug-ins are also integrated on our website. These pages are operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our pages which is equipped with a YouTube plug-in, a connection is created to the YouTube servers. The YouTube server receives information on which pages you have visited and the following information is transmitted: IP-address and Cookie ID, the specific address of the pages accessed on our websites, the browser language, system date and time of access as well as the identification of your browser. This data is transmitted whether or not you are registered and logged in with Google. If you are logged in, this data will be assigned directly to your account. You can prevent this by logging off from your YouTube account.
You can find additional information on the handling of user data in YouTube’s data protection statement under https://www.google.de/intl/de/policies/privacy
7.4. Google Maps API
Our website uses Google Maps API to visually present geographical information on the page “contact/directions”. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
When you use Google Maps, information on the use of our website, including your IP-address, will be transmitted to and stored on a Google server in the USA. By using this website, you expressly agree to the collection, processing and use of this automatically collected data by Google.
7.5. Use of Freegeoip
The website uses freegeoip.net technology (“Freegeoip”; freegeoip.net), a publicly available HTTP-API for software developers. Freegeoip processes your IP-address for geo-localisation and uses a database with IP-addresses for this purpose. It only enables the allocation by city, relevant time zone, latitude and longitude. We use this information to personalise our website services.
Please feel free to contact us at any time if you would like to cancel the use of Freegeoip.
8. Storage period
We generally store your personal data only as long as it is needed to meet our obligations to you. In accordance with our retention obligations, we normally store the data you have provided in connection with orders for seven years after the relevant contract is completed.
If you have only registered to receive the newsletter and advertising information as indicated in Point 4 and are not one of our customers, we will store your data until you cancel your consent.
9. What are your rights?
You have the right to receive information in a clear, transparent and easily understandable manner on how we process your personal data and on your rights as a data subject (Art 13 ff of the Data Protection Regulation):
You therefore have the right to request and receive information on how and why we process your personal data. You also have the right to correct any incorrect data and to delete your data (“Right to be Forgotten”). Moreover, you can cancel your consent to the processing of your personal data in the future when this processing is based on your specific consent. You also have the right to restrict the processing of your data, the right to file a complaint and the right to the release of the data you have supplied in a structured, standard and machine-readable format (“Data Portability”). You are entitled to file a complaint with a data protection supervisory authority. The data protection supervisory authority responsible for UBM is: Österreichische Datenschutzbehörde, Wickenburggasse 8, 1080 Vienna.
Please contact us if you have any questions or require additional information and before you file a complaint with the data protection supervisory authority:
In order to help us handle your inquiries on the above-mentioned rights and to ensure that your personal data is not transmitted to unauthorised persons, please include specific personal identification with your inquiry as well as a brief description as to how you intend to exercise your above-mentioned rights as a data subject.
10. Concluding remarks
In connection with the continued development of the Internet, we will also regularly adapt these data protection rules. All changes will be announced on a timely basis on our website. You should therefore frequently review these data protection rules to remain up to date.
As of: May 2018