Privacy policy
The protection of your personal data is a special concern of ECOS GmbH. We therefore process your data exclusively on the basis of the legal regulations (in particular EU-GDPR, Austrian Data Protection Act (DSG), Austrian Telecommunications Act 2003 (TKG 2003)). In this Data Protection Statement we inform you about the most important aspects of data processing.
ECOS takes care in the collection and processing of personal data for lawfulness, fairness and transparancy, the limitations on use, the minimisation of data, correctness, storage limitation, integrity and confidentiality.
1. Legal basis for data processing
Data processing is carried out on the basis of the legal provisions of § 96 para. 3 TKG and Art. 6 para. 1 lit. a (consent) and/or lit. b (necessary for the implementation of pre-contractual measures and for fulfilment of the contract) and/or f (legitimate interest) of the GDPR.
Our legitimate interest is the improvement of our website and the adaptation of the contents of the website to the needs of the users.
2. Contact form – enquiry/application
- Purpose of data processing
If you contact us via form on the website or by e-mail, your personal data will be processed by the Controller (person responsible for data protection) for the purpose of processing your request (personal data: name, email address and voluntarily provided data)/application (personal data: name, address, postcode, place, telephone number, email address as well as the position applied for and the transmitted documents) on the basis of your consent given by sending the form/e-mail. - Duration of data storage
Your data will be stored for the duration of the processing of the request or application. If no contract is concluded, we will delete your data. - Transfer of the data
We will not pass on this data without your consent. - What happens if data is not provided
There is no obligation or legal requirement for you to provide your personal data. However, we cannot process your request without this data.
3. Contractual relationship
Purpose of data processing
Should you currently be in a sustained contractual relationship with us, the processing of personal data (company name, address, telephone number, email, fax, company register data, VAT ID number, bank details, form of address, name of contact, department/function of contact, telephone number/email of contact etc.) shall be exclusively used for the purpose of contract processing.
- Duration of data storage
Storage of your data shall take place for the runtime of the contractual relationships and also as long as statutory obligations or legitimate interests exist (e.g. in order to fulfil statutory storage obligations or to assert legal claims). - Transfer of the data
Your personal data shall only then be transmitted to third parties if this is necessary for processing of the contract, is based on legal foundations, a third party involved has a justified interest in the business processing, or for the assertion or defence against legal claims. Forwarding of your data could, if absolutely essential, be carried out to the following recipients: banks, legal representatives (during the enforcement of rights or the defence against claims, or within the scope of official procedures), public accountants, courts of law, administrative authorities, collection agencies, lenders (e.g. leasing), participating contractual and business partners (shipping providers, transport companies), insurances, providers (IT service providers), etc. - What happens if data is not provided
The provided data is required to fulfil the contract. Without this data, we cannot conclude the contract with you.
4. Cookies and Tracking
Our website does not use cookies that process personal data or store information on your device.
No analytics, marketing, or tracking technologies are used. Accordingly, no cookies are set for statistical or advertising purposes when you visit our website.
To the extent that technically necessary connection data (e.g., your IP address within the context of server communication) is processed by your browser, such processing is carried out solely for the purpose of providing and delivering the website.
5. Server Log Files
When you access our website, certain information is automatically processed by our hosting provider and stored in so-called server log files.
The following data may be collected:
- IP address of the requesting device
- Date and time of access
- Accessed page/file
- Amount of data transferred
- Notification of successful retrieval
- Browser type and version
- Operating system used
- Referrer URL (previously visited website)
This data is technically required in order to:
- provide the website,
- ensure system security and stability,
- detect and prevent attacks or misuse.
This data is not combined with other data sources.
Legal basis:
Article 6(1)(f) GDPR (legitimate interest in the secure and stable provision of our website).
Server log files are stored only for as long as necessary to ensure the proper technical operation of the website and are subsequently deleted automatically.
6. Third-country transfers
When using certain services (e.g., Google, Meta, YouTube), personal data may be transferred to third countries, in particular the USA.
Such transfers are carried out exclusively with the use of appropriate safeguards in accordance with Art. 44 ff. GDPR (e.g., standard contractual clauses).
Please note that third countries may not have a level of data protection equivalent to that of the EU.
7. Social media presence
We operate company pages on social networks to communicate with interested parties, customers, and applicants, and to provide information about our company.
When you visit our company pages, personal data is processed by the respective platform operator. Depending on the nature of the data processing, this may result in joint responsibility between us and the respective platform provider in accordance with Art. 26 GDPR. The respective agreements on joint responsibility clearly outline the corresponding responsibilities.
In addition, so-called social media plugins may be integrated into our website. These enable direct interaction with the following services:
- LinkedIn
- Meta (Facebook / Instagram)
- YouTube
When you actively use a corresponding plugin, a connection to the servers of the respective provider is established. In doing so, personal data (in particular your IP address and usage data) may be transmitted to the respective platform operator.
If the processing of personal data is based on consent and involves information society services, this consent can only be given by persons who have reached the minimum age required by Art. 8 GDPR or the applicable national provisions. Otherwise, consent must be given by the legal representatives.
We have no influence on the scope and content of the data collected and processed by the platform operator.
Further processing of your data is the sole responsibility of the respective platform operator in accordance with its privacy policy.
Information on the handling of your personal data can be found in the privacy policies of the respective providers.
We operate a company profile on the kununu platform. When using the platform, the data protection regulations of the respective provider apply. The platform operator is generally responsible for data processing within the framework of the platform.
The recipients of your personal data are internal departments.
We will delete your personal data after responding to the direct communication in full or after removing the post to be commented on. In addition, illegal content may be deleted. For information on deletion by kununu and further details, please refer to their privacy policy.
8. Rights of the data subject
As a data subject, you have the fundamental right to information about the data concerning you, to correction, deletion, restriction of processing, data transferability and objection to the processing of your personal data. Furthermore, you have the right to revoke your consent to the processing of your personal data. The revocation does not affect the legality of the processing carried out up to that time. These rights can be asserted at any time at datenschutz(at)ecos-at.com. Furthermore, you have the right of appeal to the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).
9. Storage period
We only store personal data for as long as is necessary for the respective purposes or as long as there are legal retention obligations.
Typical criteria:
- Contact requests: until final processing
- Statutory retention obligations (e.g., corporate or tax law)
- Consent-based data: until revoked
Once the purpose no longer applies, the data is deleted or anonymized.
10. Controller (responsible for data processing)
ECOS GmbH
Industriestraße 1
A-3470 Kirchberg / Wagram
Telefon: +43 2279 5050 - 0
Emailadresse: datenschutz(at)ecos-at.com
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services.
The current version on our website applies.