Data protection statement

We offer you the possibility to contact our company through our online contact form as well as the optional delivery of our company magazine “Beyond Magazin”. We inform you about the data processing in this context as follows:

Type of personal data

We process the personal data that you provide in the contact form: first and last name, professional e-mail address, company and, if applicable, the company or delivery address.

Purpose of data processing:

The purpose of data processing within the framework of our contact form website and the delivery of the company magazine is:

• Processing your request;
• If the topic ‘Products & Services’ is selected: additional storage and processing in the FACC CRM system;
• If applicable, Delivery of our company magazine to the voluntarily provided company or delivery address.

Lawfulness of processing

• Article 6 (1) (b) GDPR: Pre-contractual information obligations and performance of contract
• Article 6 (1) (f) GDPR: legitimate interest
• Article 6 (1) (a) GDPR: Consent (in connection with FACC CRM system)

Receipt and transmission of personal data

In principle, your data will not be transmitted or processed outside the European Union. In the context of processing using our IT systems, a transfer to the United States (USA) cannot be completely ruled out. In this regard, however, there is an adequacy decision for the EU-US Data Privacy Framework and the IT partner used has a corresponding certification.

Retention period of personal data

We store your data for as long as this is necessary to fulfil the aforementioned purposes or as long as statutory retention periods exist. In the event of a revocation of consent, the lawfulness of processing before the revocation remains unaffected.

Rights of data subjects and right of complaint

In accordance with the general data protection regulations, you can contact us free of charge if you have any questions about the collection, processing or use of your personal data and if you have corrected, blocked, deleted, objected or revoked your consent. We would like to point out that you have a right to rectification of incorrect data, deletion of personal data or restriction of processing, if this claim does not conflict with a statutory retention obligation.

You also have the right to appeal to the Austrian Data Protection Authority.

FACC offers the possibility of online applications for vacancies and the possibility of online unsolicited applications in certain companies within the group. We inform you about the associated data processing as follows:

1. Controller
   Responsible for the operation of our application system is:

• FACC Operations GmbH
  Fischerstraße 9
  4910 Ried im Innkreis
  dataprivacy@facc.comPlease note that the following companies are joint controllers with the first company (I.), unless your application is addressed to FACC Operations GmbH itself:

• FACC AG
  Fischerstraße 9
  4910 Ried im Innkreis
  dataprivacy@facc.com

• CoLT Prüf und Test GmbH
  Breitenaich 52
  4973 St. Martin im Innkreis
  dataprivacy@facc.com

2. Purpose of data processing
   The application data is processed for the purpose of carrying out the application process, in particular for the assessment of employment.

3. Lawfulness and legitimate interest
   • Article 6 (1) (b) GDPR: Pre-contractual relationship.
   • Article 6 (1) (a) or Article 9 (2) (a) GDPR: In the case of consent for the purposes specified therein.
   • Article 6 (1) (f) GDPR: In the case of joint controllership (see point 1.), intra-group transfer is based on the legitimate interest of internal administrative purposes.
4. Reception of data and transmission / information for joint processing
   For data processing (in particular for its technical implementation), we use service providers known as processors. These processors, carefully selected by us, are bound by our instructions. Currently, this is Abacus Umantis AG, which provides the applicant platform we use.As a matter of principle, your data will not be transmitted or processed outside the European Union. In the context of processing using our IT systems, a transfer to the United States (USA) cannot be completely ruled out. In this regard, however, there is an adequacy decision for the EU-US Data Privacy Framework and the IT partner used has a corresponding certification.The application process is managed by FACC’s HR department. This is organizationally assigned to FACC Operations GmbH. If the application is addressed to another company in the FACC Group (see point 1.), there is joint responsibility between the addressed company and FACC Operations GmbH within the meaning of Article 26 GDPR. The responsibility of the joint controllers can be viewed here. The data subject may assert his or her rights with and against each of the Data Controllers.
5. Provision of personal data
   The data is provided voluntarily by the applicant. No data will be collected from other sources.
6. Categories of personal data
   The categories of personal data is determined by the voluntary information provided in the application documents. This can be the following data in particular: name, address, telephone number, date of birth, country of birth, nationality, e-mail address, professional certificates, application photo, certificates, cover letter. It may contain Art 9 GDPR data (health data, religious confession) or Art 10 GDPR data (criminal convictions).
7. Retention period of personal data
   The data will be deleted 7 months after completion of the application process/rejection of the application. Insofar as longer storage is necessary in individual cases for the assertion, exercise or defence of legal claims, longer storage will take place (Art. 6 para. 1 lit. f and/or Art. 9 para. 2 lit. f GDPR). In the event that the applicant is employed, further storage and processing will take place in accordance with the information provided separately for this purpose.If consent to the keeping of records of the data has been given, the data will be kept on record for a total of 12 months or until a possible revocation.

This website uses Google Analytics, a web analysis service of Google Inc. “(“Google”). Google Analytics also uses cookies. The information generated by Google cookies about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for us and providing other services relating to the use of the website and the internet. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. Under no circumstances will Google associate your IP address with other Google data. By using this website, you consent to the processing of  data collected about you by Google in the manner and for the purposes described above.

Please note that our website uses Google Analytics with the extension “_anonymizeIp()” to improve data protection. In this case, Google will first shorten your IP address within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA before being shortened there. This therefore precludes personal identification when analyzing the use of our website. You can refuse the use of Google Analytics cookies by extending your browser, which allows you to exercise your right to object to the proactive collection, processing and use of data by Google Analytics. To do this, you can install the Google Analytics opt-out browser add-on. This prevents Google Analytics from storing information about websites you have visited. For more information and instructions for downloading and installing this opt-out browser add-on, click here.

This website uses the Facebook pixel of the social networking site Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA or, if you are a resident of the European Union, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as “Facebook”). Facebook is certified under the Privacy Shield agreement and thus guarantees compliance with European data protection law.

When visiting our website, software establishes a connection and transmits data to Facebook servers, some of which are located in the USA. The Facebook pixel also uses cookies to store information about website users and to analyze visitors’ use of the website.

All personal data collected by FACC AG is anonymous and therefore does not allow FACC AG to infer the identity of the user. However, as this data is stored and processed by Facebook, a link to the respective Facebook user profile may be established. Facebook may also transfer this information to third parties if this is required by law or in the case that third parties process this data on Facebook’s behalf.

Facebook processes data in accordance with Facebook’s data usage guidelines. For more information on how the remarketing pixel works and how Facebook ads are displayed in general, please refer to Facebook’s Data Use Policy.

FACC AG uses the Facebook pixel on its website for the purposes of pursuing its legitimate interests in analyzing, optimizing and efficiently managing its online content. The legal basis for the processing of personal data using the Facebook pixel is Article 6 para. 1 lit. f of the EU General Data Protection Regulation (GDPR).

The Facebook pixel allows Facebook to select visitors of the FACC AG website as target groups for the display of Facebook ads. FACC AG therefore uses the Facebook pixel accordingly so that the posted Facebook ads are only displayed to Facebook users who have shown an interest in the online content of FACC AG or who exhibit certain characteristics (e.g. an interest in certain topics or products determined on the basis of the websites visited) which FACC AG transmits to Facebook (“custom audiences”). By using the Facebook pixel, FACC AG also wishes to ensure that the Facebook ads match the potential interests of the users and are not perceived as a nuisance. In addition, the Facebook pixel allows FACC AG to track the effectiveness of Facebook ads for statistical and market research purposes by recording whether users were referred to the FACC AG website after clicking on a Facebook ad (“conversion”). For detailed information on how Facebook processes user data, please refer to Facebook’s privacy policy.

Disabling the Facebook pixel

You can disable the collection of your user data on our website by activating the option “do not track” in your web browser. Our website recognizes the “do not track” signal that your web browser then transmits to all websites.

Alternatively, if you wish to disable the use of the Facebook pixel only, please click on the following link – an opt-out cookie will be set to prevent the collection of your data when visiting this website in the future: See below.

This website uses the LinkedIn Insight Tag, a web analysis service of LinkedIn Ireland Unlimited Company (hereinafter referred to as “LinkedIn”), Wilton Place, Dublin 2, Ireland, on the legal basis of pursuing our overriding legitimate interests (website usage analysis) pursuant to Article 6 para. 1 lit. f of the EU General Data Protection Regulation (GDPR).

When visiting our website, software establishes a connection and transmits data to LinkedIn servers, some of which are located in the USA. The LinkedIn Insight Tag also uses cookies to store information about website users and to analyze visitors’ use of the website.

According to LinkedIn, the data collected will be used by LinkedIn to evaluate the use of the website, to compile reports on website activity and to provide other services relating to the use of the website and the internet. Furthermore, this information allows us to display relevant offers and recommendations tailored to your interests after you have consulted our website.

LinkedIn may also transfer this information to third parties to the extent that this is required by law or in the case that third parties process this data on behalf of LinkedIn.

Please refer to LinkedIn’s privacy policy for further information on the collection and use of data and on your options and rights with respect to the protection of your privacy. Once you have logged in to LinkedIn, you can disable the collection of data at any time. LinkedIn is certified under the Privacy Shield agreement and thus guarantees compliance with European data protection law.

Disabling the LinkedIn Insight Tag 

You can disable the collection of your user data on our website by activating the option “do not track” in your web browser. Our website recognizes the “do not track” signal that your web browser then transmits to all websites.

Alternatively, if you wish to disable the use of the LinkedIn Insight Tag only, please click on the following link – an opt-out cookie will be set to prevent the collection of your data when visiting this website in the future: See below.

This website uses the X Tag, a web analysis service of X Internet Unlimited Company (hereinafter referred to as “X“) on the legal basis of pursuing our overriding legitimate interests (website usage analysis) pursuant to Article 6 para. 1 lit. f of the EU General Data Protection Regulation (GDPR). Data is transferred to the USA on the basis of the Privacy Shields agreement.

When visiting our website, software establishes a connection and transmits data to X servers, some of which are located in the USA. The X Tag also uses cookies to store information about website users and to analyze visitors’ use of the website.

According to X, the data collected will be used by X to evaluate the use of the website, to compile reports on website activity and to provide other services relating to the use of the website and the internet. Furthermore, this information allows us to display relevant offers and recommendations tailored to your interests after you have consulted our website.

X may also transfer this information to third parties to the extent that this is required by law or in the case that third parties process this data on behalf of X.

Please refer to X’s privacy policy for detailed information on the processing of user data.

Disabling the X Tag 

You can disable the collection of your user data on our website by activating the option “do not track” in your web browser. Our website recognizes the “do not track” signal that your web browser then transmits to all websites.

Alternatively, if you wish to disable the use of the X Tag only, please click on the following link – an opt-out cookie will be set to prevent the collection of your data when visiting this website in the future: See below.

These cookies collect information on the browsing behavior of users of our website to ensure that only targeted advertising material which may be of interest to you is displayed. Targeting and advertising cookies may also be used to identify a repeat visit to our website or a visit to a website that is part of the network of our company’s advertising partner. IP addresses are exclusively stored in an anonymous and encrypted form. The information to be displayed can be selected based on the interests of the user or on which advertisements he or she has previously viewed. These cookies also ensure that advertisements are displayed correctly and prevent the same advertisement from being shown too often. They are also used to measure the efficiency of advertising campaigns. The storage period of these cookies is three months. To view or delete the anonymized data stored by you (opt-out), please go to the following link.

Types of cookies used

After submitting the competition entry form, the data you have entered will be processed by the person responsible for data protection for the purpose of conducting the competition on the basis of the competition agreement thus concluded until the competition has been concluded. There is no legal or contractual obligation to provide personal data. However, you must provide this information in order to take part in the competition. Failure to do so will merely result in you not being able to enter the competition. Further processing of the data, which is compatible with the original processing purpose, shall be performed, until revocation, on the same legal basis for the purpose of direct marketing in forms not requiring consent, such as the postal dispatch of advertising material addressed to you. In this case, the data will be forwarded to the shipping provider.

We offer you the possibility of contacting us on our website by using a contact form to request access to our data exchange solution “FACC-DEX (SWAN)”. The data you enter there will be used by our company to check and validate your request with respect to applicable law, in particular U.S. and EU export laws. In this case, the information provided by the user for the above-mentioned purposes will be forwarded to the responsible office at FACC. Your data will not be stored on the web server on which this homepage is operated. Your data will not be transferred to third parties and will be deleted upon completion of the check. For more detailed information regarding the procedure, please contact the office indicated on the registration form.

We take a number of security measures to ensure the protection and security of your personal data. We take appropriate data collection, storage and processing methods and measures to protect against unauthorized access, modification, disclosure or destruction of personal data processed by FACC. We also take reasonable steps to ensure that personal information is handled securely  by our contractors and service providers and in accordance with our privacy policy. The information is protected in a secure environment by a combination of physical and technical measures. There is no public access to this information. All information provided can only be accessed by special persons with access rights to our systems, who are obliged to keep the information strictly confidential. In addition, national legislation could force us to store information for a certain period of time. Encryption technology is used as required.

Pursuant to the General Data Protection Regulation, you can contact us free of charge if you have any questions regarding the collection, processing or use of your personal data, or if you wish to rectify, block, delete or object to this data or revoke your consent (the contact details are provided above). Please note that you have the right to have inaccurate data rectified, personal data deleted or data processing restricted if this is not in conflict with statutory storage obligations. You also have the right to appeal to the Austrian Data Protection Authority.

Interested parties

Interested parties are all persons who are interested in our product and our other services and would like to be kept up-to-date on our latest developments on a regular basis.

The personal data of interested parties is processed within the scope of the following processing activities for the following purposes:

The legal grounds for processing the personal data of interested parties are based on the following legal basis or legitimate interests:

The following categories of personal data are processed in the processing activities listed below:

We do not transfer personal data of the groups of data subjects concerned to recipients or categories of recipients within the scope of our processing activities.

We store your personal data for as long as is required by law and is necessary for the purposes for which it was collected or as is required for use in accordance with the legitimate interests of the company. After this storage period, the time limit for deletion as listed below applies.

Article 14 of the General Data Protection Regulation also requires information on the origin of the data that we process for the groups of data subjects of concern to you to be disclosed:

Automated decision making, including profiling, is not performed in any of the above processing activities.

Customers are all persons who request and purchase products and services from us.

The personal data of customers is processed within the scope of the following processing activities for the following purposes:

The legal grounds for processing the personal data of customers are based on the following legal basis or legitimate interests:

The following categories of personal data are processed in the processing activities listed below:

We do not transfer personal data of the groups of data subjects concerned to recipients or categories of recipients within the scope of our processing activities.

We store your personal data for as long as is required by law and is necessary for the purposes for which it was collected or as is required for use in accordance with the legitimate interests of the company. After this storage period, the time limit for deletion as listed below applies.

Article 14 of the General Data Protection Regulation also requires information on the origin of the data that we process for the groups of data subjects of concern to you to be disclosed:

Automated decision making, including profiling, is not performed in any of the above processing activities.

Applicants

Applicants are all persons who apply for a vacant position in the company or by means of an unsolicited application.

The personal data of applicants is processed within the scope of the following processing activities for the following purposes:

The legal grounds for processing the personal data of applicants are based on the following legal basis or legitimate interests:

The following categories of personal data are processed in the processing activities listed below:

We do not transfer personal data of the groups of data subjects concerned to recipients or categories of recipients within the scope of our processing activities.

Please note that the provision of personal data is required for a possible contract conclusion.

We store your personal data for as long as is required by law and is necessary for the purposes for which it was collected or as is required for use in accordance with the legitimate interests of the company. After this storage period, the time limit for deletion as listed below applies.

Article 14 of the General Data Protection Regulation also requires information on the origin of the data that we process for the groups of data subjects of concern to you to be disclosed:

Automated decision making, including profiling, is not performed in any of the above processing activities.

External service providers

External service providers are all persons who provide services to the company and invoice them accordingly.

The personal data of external service providers is processed within the scope of the following processing activities for the following purposes:

The legal grounds for processing the personal data of external service providers are based on the following legal basis or legitimate interests:

The following categories of personal data are processed in the listed processing activities:

We transfer personal data of the groups of data subjects concerned to the following recipients or categories of recipients within the scope of our processing activities:

We store your personal data for as long as is required by law and is necessary for the purposes for which it was collected or as is required for use in accordance with the legitimate interests of the company. After this storage period, the time limit for deletion as listed below applies.

Article 14 of the General Data Protection Regulation also requires information on the origin of the data that we process for the groups of data subjects of concern to you to be disclosed:

Automated decision making, including profiling, is not performed in any of the above processing activities.

Visitors

Visitors are all persons from outside the company who are on the company premises under supervision and without a relevant employment contract.

The personal data of visitors is processed within the scope of the following processing activities for the following purposes:

The legal grounds for processing the personal data of visitors are based on the following legal basis or legitimate interests:

The following categories of personal data are processed in the listed processing activities:

We do not transfer personal data of the groups of data subjects of concern to you to recipients or categories of recipients within the scope of our processing activities:

We store your personal data for as long as is required by law and is necessary for the purposes for which it was collected or as is required for use in accordance with the legitimate interests of the company. After this storage period, the time limit for deletion as listed below applies.

Article 14 of the General Data Protection Regulation also requires information on the origin of the data that we process for the groups of data subjects of concern to you to be disclosed:

Automated decision making, including profiling, is not performed in any of the above processing activities.

This statement has last been revised May 2025