Data Protection Notice
Thank you for your interest in our company. Data protection is a very high priority for the Executive Board of PORR AG. The use of the internet pages of PORR AG is essentially possible without providing any personal data. If a data subject wants to use certain special services of our company via our website, then processing of personal data may be necessary. If processing is necessary, we obtain the consent of the data subject.
The processing of personal data is always carried out in compliance with the General Data Protection Regulation (GDPR) and in accordance with national data protection regulations. With this Data Protection Declaration, our company would like to inform visitors about the content and purpose of the personal data we collect and process. In addition, data subjects are informed via this Data Protection Declaration about the rights they have as data subjects.
As the operator of this website, PORR AG has implemented extensive technical and organizational measures to ensure the reliable protection of the data processed within the framework of this website. Nevertheless, data transmissions between your terminal device and our server may in principle have vulnerabilities, especially if you communicate with our server via a device that is under third-party access. If you have any concerns about security, you can also obtain information through other means, by telephone or at one of our offices.
1) Personal data
Personal data is any information relating to an identifiable natural person.
2) Data subject
Data subject is any identifiable natural person whose personal data is processed by a controller.
3) Responsible party
Responsible party is the company that collects the data from data subjects and decides on the purposes and means of processing.
Processor is a natural person or a company involved in a processing operation by the controller.
Recipient is a natural or legal person or public body to whom personal data is made accessible.
6) Third party
Third party is a natural or legal person or public body that processes personal data for the controller or processor.
Processing is any operation carried out in relation to personal data. This ranges from the collection to the storage to the restriction or deletion of the data.
8) Restriction of processing
Restriction of processing means a reduction in the use of personal data.
Consent is any statement made by an individual that s/he consents to the processing of personal data relating to him or her.
Revocation describes a person withdrawing from the controller the right of processing based on consent.
Pseudonymisation separates the data from the identifiable person. This connection can only be re-established with the help of further, specially secured information. The process of pseudonymisation corresponds to so-called data minimisation.
Profiling is any type of automated assessment of personal data.
C. Responsible Persons
The responsible person in the sense of the GDPR is:
Tel.: +43 50 626-0
D. Data Collection
This PORR AG website collects a series of data and information every time the website is accessed, which is stored in log files on the server. Data recorded in this way includes:
1) Browser types and versions
2) Your computer’s operating system
3) The website that redirected you to us
4) Pages accessed on our web server
5) Date and time of your visit
6) Your IP address
7) Your internet service provider
When using this information, which is collected anonymously for us, PORR AG does not attempt to draw any conclusions about the data subject. However, this data is required in order to deliver the content of our website correctly and to present it optimally for you, and in order to provide the authorities with the necessary information in the event of a hacker attack. This data is therefore processed by PORR AG on the one hand for statistics purposes and on the other hand as a technical measure to ensure the data protection and information security of this processing and your data.
E. Registration on our Website
You have the option of registering on our website. The data entered by the data subject will be processed exclusively for internal use by the data controller for its own purposes.
By registering on our website, the IP address assigned by your internet service provider, the date and the time of registration are stored. In principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.
The registration enables us to offer you content or services that can only be offered to registered users. As a registered user, you are free at any time to change the data provided or to have it completely deleted from our database.
Cookies contain a cookie ID, which is a unique identifier. They enable PORR AG to distinguish the browser of the person concerned from other internet browsers and to display content individually in order to respond to the wishes and results of the person concerned.
One example is the cookie of a shopping cart in the online store. The online store remembers the items that a customer has placed in the virtual shopping cart via a cookie.
You can conveniently set which cookies you want to use at any time via our cookie settings.
Cookies already on your computer can be deleted at any time via the internet browser or directly in the file system. We would like to point out that if cookies are deactivated, then the functional set of the website may be limited.
G. Subscribing to our Newsletter
On our website, users are given the opportunity to subscribe to our newsletter. We inform our customers and business partners at regular intervals by means of newsletters or information updates about our offers. After your registration, a confirmation email is sent to the registered email address using the double opt-in method. This confirmation email serves to ensure that you, as the owner of the email address, have actually authorized the receipt of the newsletter and have consented to it in accordance with Art. 6 (1)a GDPR.
By subscribing to the newsletter on our website, your email address, the IP address assigned by your internet service provider, as well as the date and time of registration are stored. In principle, this data is not passed on to third parties, unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.
The sent messages contain a tracking pixel, which helps us to note the successful receipt and opening of the sent messages and to work on the basis of our legitimate interest in improving the range we offer.
You can avoid calling up the tracking pixel if you do not load the graphics from the mail sent and only call up the text version.
For technical reasons, the receipt of our mailings cannot be separated from the sending of the tracking pixel.
The tracking pixel collects the following data:
Timestamp of the call-up
Of course, you can cancel our newsletter at any time, which will result in the immediate deletion of your data for this processing. You can find the necessary information and an unsubscribe link at the end of each mailing.
H. Sending Publications
Our publications (magazine and e-paper) focus on national and international projects and the sharing of knowledge and experience from all areas of the construction industry.
The publications provide readers with a holistic view of the complex challenges and innovative solutions along the value chain of the construction industry. Another special feature: The articles are written by our experts themselves.
To send the current publication, we need to process the name, address and, in the case of electronic delivery, the email address of the recipient.
The legal basis is either your consent or our legitimate interest to inform the recipients about current topics in the construction industry. If you do not wish to receive our publications in the future, we request that you inform us at email@example.com or by post at the address given under item C. In this case, we will delete your contact data from this processing and stop any further sending.
I. Taking Photos and Video at Events
In the course of our events, photos and videos are taken that are subsequently used for publication on websites, in social media channels, as well as in our publications and other print media. Our aim is to promote our products and events, as well as the company itself, and to raise awareness in the construction industry.
The legal basis for this is our legitimate interest as defined by Art. 6 (1)a GDPR and Sections 12 and 13 of the Austrian Data Protection Regulation: Public relations and presentation of the activities of the responsible party.
If you do not agree to be photographed or videotaped during our events, please contact a representative of our company during the event.
We have carefully weighed the interests of data subjects and our company in this processing and are convinced that we are not violating any rights of data subjects. Of course, you still have the right to object to the processing of the photo and video recordings made. To do so, please simply send an email with a brief description of the objection to firstname.lastname@example.org.
J. Contact Option via the Website
Due to legal requirements, our website contains information for an easy contact with PORR AG. If you contact us by email, the data you provide will be automatically stored and used exclusively for responding to your contact.
If you use a contact form on our websites, we collect the following data from you:
- Email address
- Telephone number
- Name of the company
- Your personal message
By entering your data, you also consent to its use for the purpose of responding to your request in accordance with Art 6 (1)a GDPR.
Unless other purposes arise from the response, about which we will inform you separately, the data entered will be deleted after the response or processing of your request.
K. Routine Deletion and Blocking of Personal Data
PORR AG processes and stores personal data of the data subject only for the period of time that is necessary to achieve the purpose of storage or that has been provided for by legal requirements.
If the purpose or legal basis for processing ceases to apply, your personal data will be blocked or deleted in accordance with the law on the basis of our processes.
L. Data Subject Rights
Extensive rights of data subjects apply to the processing of personal data under the GDPR. The following is a rough list of these rights for your information:
1) Right to information
Every data subject has the right to obtain from the data controller, at any time, information about the personal data stored about him or her and a copy of such data.
2) Right to rectification
Any data subject has the right to request that inaccurate personal data concerning him or her be corrected or completed without undue delay.
3) Right to deletion
Any data subject has the right to obtain from the controller the erasure of personal data concerning him or her if
- the purposes for processing have ceased to exist
- the legal basis for processing no longer exists (end of contract, withdrawal of consent).
You can contact an employee – in particular electronically at email@example.com – at any time for the deletion of your data stored with us.
4) Right to restriction
Any person concerned by the processing of personal data has the right to obtain from the controller the restriction of processing if
- the purposes for processing have ceased to exist
- the legal basis for processing no longer exists (end of contract, withdrawal of consent).
You can contact an employee – in particular electronically at firstname.lastname@example.org – at any time to have your data stored by us restricted.
5) Right to data portability
Every data subject has the right to receive his or her personally provided personal data, in a structured, common and machine-readable format, or to transmit it to another controller without hindrance by the controller, if the processing is based on consent or on a contract and is carried out electronically.
You can contact an employee – in particular electronically at email@example.com – at any time for the transfer of your data stored with us.
6) Right of objection
Any person affected by the processing of personal data has the right to object to the processing of personal data concerning him or her which is carried out on the basis of a legitimate interest. PORR AG shall no longer process the personal data in the event of an objection, unless we can demonstrate compelling grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defence of legal claims.
To exercise the right of objection, you can contact a member of staff at any time - in particular electronically at firstname.lastname@example.org.
7) Automated decisions in individual cases including profiling
As a responsible company, we do not use automatic decision-making or profiling.
8) Right to revoke a declaration of consent
Every data subject has the right to withdraw consent to the processing of personal data at any time.
To exercise your right of revocation, you may contact any employee at any time – in particular electronically at email@example.com.
9) Right to complain to the supervisory authority
You have the right to lodge a complaint with a competent supervisory authority pursuant to Article 77 of the GDPR if you believe that the processing of personal data relating to you infringes the provisions of the GDPR.
You can contact the Austrian Data Protection Authority at Barichgasse 40-42, 1030 Vienna.
M. Data Protection during Job Applications and the Application Process
PORR AG collects and processes the personal data of applicants for the purpose of processing the application. The processing may also take place electronically. This is particularly the case if an applicant submits corresponding application documents to us electronically, for example by email or via the careers site porr-group.com/en/career/. If PORR AG concludes a service contract with an applicant, the transmitted data is stored for the implementation of the employment relationship. If PORR AG does not conclude a service contract with the applicant, his/her documents will be automatically deleted no later than thirteen months after receipt of the application, provided that no other legitimate interests of PORR AG or the applicant’s consent to further processing preclude deletion.
If an applicant asserts his or her right to deletion, the data can already be deleted after seven months.
If your application is not for a specific position in the careers site (unsolicited application), your data may be forwarded to a PORR Group company out of mutual legitimate interest in accordance with your qualifications.
What data is collected?
For the automated processing of your application, the following data will be collected and processed:
1) First name, surname, email and, if applicable, also address/city, date of birth, title, telephone number, citizenship
2) Additional questions depending on the respective advertisement (e.g. driver’s license)
3) Curriculum vitae
4) Professional experience and education
5) Skills (e.g. Photoshop, MS Office)
6) Application photo
7) Qualifications, awards and language skills
8) Cover letter
9) Files and documents that you upload, if applicable.
N. Further Processing within the Framework of the Homepage
The information is used to perform analyses of internet and website usage, such as anonymized evaluations and graphics on page views and visits. The data is processed exclusively for market research, website optimization and the provision of other services related to internet use. This information may also be transferred to third parties if required by law or if third parties process the data on our behalf. In no case will your IP address be merged with other data from Google. The IP addresses are anonymized so that an assignment is not possible (IP masking).
You can prevent the installation of cookies by selecting the appropriate settings on your browser software; in addition, the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google can be prevented by downloading and installing a browser add-on tools.google.com/dlpage/gaoptout?hl=en.
An opt-out cookie is set that prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics help: support.google.com/analytics/answer/6004245?hl=en.
On our website you will find plugins of the social network LinkedIn or LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”). You can recognize the LinkedIn plugins by the corresponding logo or the “Recommend” button. Please note that when you use the button, a connection is established between your respective internet browser and the server of LinkedIn. LinkedIn is thereby informed that our website has been visited with your IP address. If you click on the LinkedIn Recommend" button and are logged into your LinkedIn account at the same time, you have the option of linking content from our website to your LinkedIn profile page.
In doing so, you enable LinkedIn to assign your visit to our website to you or your user account. Please note that we do not gain any knowledge of the content of the transmitted data and its use by LinkedIn.
For further details on the collection of data and your legal options as well as setting options, please contact LinkedIn. These are made available to
you at www.linkedin.com/legal/privacy-policy-summary.
LinkedIn Insight Tag:
The LinkedIn tag sets a cookie in the browser of the website visitor via which the following data is collected:
Specification of your device
Properties of your web browser
Your IP address
LinkedIn associates this information with your LinkedIn account if you are logged in, but anonymizes the data collected via the cookie after 7 days and deletes it completely after 90 days.
We do not receive any personal data of our visitors as a result or purpose of this data processing, instead we receive a report about the demographic breakdown of our visitors and the performance of our ads on LinkedIn.
PORR AG has integrated the Shariff component on this website. The Shariff component provides social media buttons that are privacy compliant. Shariff was developed for the German computer magazine c't and is published via GitHub, Inc.
The developer of the component is GitHub, Inc. 88 Colin P. Kelly Junior Street, San Francisco, CA 94107, USA.
Usually, the button solutions provided by the social networks already transmit personal data to the respective social network when a user visits a website in which a social media button has been integrated. By using the Shariff component, personal data is only transmitted to social networks when the visitor to a website actively clicks one of the social media buttons. Further information on the Shariff component is provided by the computer magazine c't at www.heise.de/newsticker/meldung/Datenschutz-und-Social-Media.
The purpose of using the Shariff component is to protect the personal data of visitors to our website and at the same time to enable us to integrate a button solution for social networks on this website.
The website of PORR AG contains functions of Twitter Inc., 795 Folsom Street, Suite 600, San Francisco, CA 94107, USA (“Twitter”). When you use Twitter and in particular the “Retweet” function, Twitter links your Twitter account to the websites you visit. This is broadcast to other users on Twitter, in particular your followers. In this way, data transmission to Twitter also occurs. We, as the provider of our website, are not informed by Twitter about the content of the transmitted data or the use of data. You can obtain further information under the following link: twitter.com/en/privacy.
Please note, however, that you have the option of changing your privacy settings on Twitter in your account settings there at twitter.com/account/settings.
This website uses the “Share” button from XING. Therefore, when you use this button, a connection is established via your browser to the servers of XING AG, Gänsemarkt 43, 20354 Hamburg, Germany. This provides the share functions (e.g. displays the counter value). Your personal data relating to the call-up of this website is not stored in the process. In particular, no IP addresses are stored by XING. Your usage behaviour is also not evaluated. You can read the current information on data protection with regard to the “Share” button as well as other relevant information in this regard at www.xing.com/app/share. By using the Xing-button you consent to link your visit on our website with your XING-User, if you are logged in.
This website contains at least one plugin from YouTube. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
As soon as you visit a page of our website equipped with a YouTube plugin, a connection to the YouTube servers is established. In doing so, the YouTube server is informed which specific page of our Internet presence you have visited. If, on top of this, you are logged in to your YouTube account, you would enable YouTube to assign your surfing behaviour directly to your personal profile. You can exclude this possibility of assignment if you log out of your account before visiting our websites.
For more information about this company, please visit www.datareporter.eu. The cookie banner records and stores the consent to cookie use of the respective user of our website. Our Cookie Banner ensures that statistical and marketing cookies are only set when the user has given his/her explicit consent to use them.
PORR AG has integrated components of whatchado on this website. whatchado is a career platform that connects suitable candidates with companies.
The operating company of whatchado is whatchado GmbH, Möllwaldplatz 4/39, 1040 Vienna, Austria.
Whenever one of the individual pages of this website operated by the responsible person and on which a whatchado page (websites and videos) has been integrated, is called up, a whatchado component automatically causes the internet browser on the information technology system of the data subject to download a representation of the corresponding whatchado component. Further information on whatchado can be found at www.watchado.com/de/ueber-uns. Within the scope of this technical procedure, whatchado receives knowledge of which specific sub-page of our website the data subject visits.
If the data subject is logged in to whatchado at the same time, whatchado recognizes which specific sub-page of our website the data subject is visiting when calling up a sub-page that contains a whatchado video. This information is collected by whatchado and assigned to the respective whatchado account of the data subject.
Whatchado always receives information via the component that the data subject has visited our website if the data subject is simultaneously logged into whatchado at the time of calling up our website; this takes place regardless of whether the data subject clicks on a whatchado video or not. If the data subject does not want this information to be transmitted to whatchado, he or she can prevent the transmission by logging out of his or her whatchado account before accessing our website.
The integration of whatchado is based on our legitimate interest in filling vacancies with motivated and interested persons with the right skills (Art. 6 (1) f GDPR).
PORR AG has integrated kununu components on this website. kununu is currently the largest employer rating platform in Europe with over 2.4 million ratings for more than 650,000 companies. The operating company of kununu is kununu GmbH, a subsidiary of XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. Each time one of the individual pages of this website operated by PORR AG on which a kununu component has been integrated is called up, the internet browser on the information technology system of the data subject is automatically caused by the respective kununu component to download a representation of the corresponding kununu component from kununu. Within the scope of this technical procedure, kununu receives information about which specific subpage of our website the data subject visits.
If the data subject is logged in to kununu at the same time, kununu recognizes which specific subpage of our website the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the kununu component and assigned by kununu to the respective kununu account of the data subject. If the data subject activates one of the buttons integrated on our website, for example the “Rate employer” button, kununu assigns this information to the personal kununu user account of the data subject and stores this personal data.
kununu always receives information via the kununu component that the data subject has visited our website if the data subject is logged into kununu at the same time as calling up our website; this takes place regardless of whether the data subject clicks on the kununu component or not. If the data subject does not want this information to be transmitted to kununu, he or she can prevent the transmission by logging out of his or her kununu account before accessing our website.
The integration of kununu is based on our legitimate interest in the transparent presentation of employee satisfaction in the PORR Group (Art. 6 (1)f GDPR).
10. Facebook & Instagram
Instagram is a social media service provided by Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA) (“Facebook”) for sharing photos and videos. Users can follow other users on the service, post pictures and videos, and “Like” media from other users and make comments. We use Instagram to report on services, events and offers of the PORR Group, to inform customers, interested parties, employees and applicants by providing them with interesting content and to establish a lasting relationship.
The following data is collected when using Instagram:
Information from the address book of the Instagram user, if s/he allows it
Instagram uses this data for its advertising network, providers of other services, and search engines.
Instagram provides us with so-called “Page insights” regarding the visitors to our company website on Instagram and thereby establishes joint responsibility pursuant to Art. 26 GDPR. “Page insights” are page statistics on “Likes”, post reach and other topics that we use primarily on an anonymised basis. Details on this joint responsibility can be found at: www.facebook.com/legal/terms/page_controller_addendum
This agreement states that Facebook has primary responsibility for processing. However, if you have concerns about security on our Instagram page, you can also contact us at any time at our privacy contact address and we will forward your request to Facebook.
As Facebook is a global social network, we have no influence on the technical and organizational aspects and can only influence the content regarding PORR AG’s appearance and events.
A social network is a social meeting place operated on the internet, an online community that generally enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for sharing opinions and experiences or enables the internet community to provide personal or business-related information. Facebook allows users of the social network, among other things, to create private profiles, upload photos and network via friend requests.
Facebook’s European contractual partner for services is Facebook Ireland Ltd,4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland.
O. Data Forwarding
PORR AG may arrange for your contact data to be passed on to one or more processors, for example an IT service provider, who will also use the personal data exclusively for internal use attributable to PORR AG as the responsible party.
We have contracts with all potential processors, which ensure that the regulations of the GDPR are also adhered to by these service providers.
Data subject rights received by us are also forwarded to data recipients for implementation in accordance with Art. 19 GDPR, so that your rights can also be implemented there.
P. Legal Basis of the Processing
The legal basis for the processing of personal data on our website is either by legitimate interest to provide you with information about our products and services, or to attract you as a customer in the future, e.g. as a pre-contractual measure or for the performance of a contract with you as a data subject, if there is an order for which delivery of goods becomes necessary. As a result, legal obligations to retain or present data to the authorities may themselves become the legal basis.
For all other processing, such as newsletters, we obtain your consent, which can be revoked at any time.