Privacy Notice

Your privacy is important to us. It is ATL TOP Holding GmbH’s policy to respect your privacy regarding any information we may collect from you across our website, https://www.atl-immoinvest.com/.

When using your personal data, we consider all data protection regulations, in particular all provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter "GDPR") and all other applicable national and European regulations. This notice sets out, inter alia, how your personal data will be processed by us, discloses the purposes for and the legal basis upon which the data is processed, and your rights under the GDPR.

I. Contact details of ATL TOP Holding GmbH as a controller

The controller for the processing of your personal data described below is:

ATL TOP Holding GmbH (hereinafter „ATL“)
Wienerbergstraße 11
Turm B, 7. OG Büro 1
1100 ViennaTel.: +43 664 7864 3847
E-Mail: office@atl-immoinvest.com

II. Data processing activities

We process personal data of our website users only to the extent necessary to provide a functioning website and to contact us. For this purpose, the following processing activities of personal data are carried out which we will inform you in detail below in accordance with Art 13 and Art 14 GDPR:

2.1. Web site access

A. Scope of processing personal data

When accessing https://atl-immoinvest.com/, our system collects and stores information and data provided by your computer and its system used for the accessing. The following data are collected via log files:

  • Browser type

  • Browser version

  • Operating system used

  • Referrer URL (of the previous page you visited)

  • Host name of accessing computer / device

  • Date and time of server enquiry

  • IP address

  • Actual contents of the cookie information of https://atl-immoinvest.com/

B. Legal grounds for processing personal data

A temporary storage of your data is necessary for the security of our IT systems and to offer a user-friendly surfing experience, hence the legal basis for the processing is our legitimate interest within the meaning of Art 6 para 1 lit f GDPR.

C. Purpose of data processing

Processing your IP address is necessary to provide the website to your computer. For this purpose, your IP address must remain stored for the duration of the session. Other data is stored in log files to ensure the functionality of the website including its functions and to optimize the website.

We also process your personal data in order to detect, prevent and investigate attacks on our website. Generally, the data collected will not provide a direct link or contain any references to a person. This information will not be collated with other data sources. However, we reserve the right to screen server log-files in case of a grounded indication of unlawful use of our website and therefore for the exercise of our legal rights.

An evaluation of the data collected for marketing purposes does not take place.

D. Duration of storage

The log files will be deleted after a time period of max. 3 months.

E. Recipients of personal data

For operating the website, we use a technical service provider
In its capacity as a processor this provider is contractually bound by our orders and instructions for the processing of personal data. No personal data will be disclosed to third parties for their own purposes without prior given consent.

2.2. Direct communication

A. Scope of processing personal data

On our website we provide an electronic contact form to inquire for any kind of information about our company, our products and activities, vacancies or events. You may also contact us via E-Mail. We request the following data for this purpose: first name, last name, E-Mail address, telephone number, name of your company, content of your request. You may voluntarily provide your personal data to us for your enquiry. However, if you do not provide us with this data, we may not be able to respond to your request.

In addition, we process the date of the request, the content of the completion of the request / order with time data, the name of the controller’s representative handling your enquiry as well as the log data.

B. Legal grounds for processing personal data

The processing of these personal data is based on Art 6 para 1 lit b GDPR on the one hand in order to be able to process your enquiry as well as on the other hand on Art 6 para 1 lit f GDPR in order to be able to manage your enquiries and organize replies accordingly.

C. Purpose of data processing

Personal data of customers, interested parties, applicants and other persons concerned are processed in order to handle their enquiries submitted via the online contact form on the website or by E-Mail. The purpose of the storage and processing of these data is the administration of messages, in particular the allocation of messages to the responsible employee as well as the handling of the inquiry or of contacting and the communication with the person concerned.

D. Duration of storage

Personal data will be stored as long as necessary to answer your request or as required by law. We are subject to legal regulations in all our jurisdictions. In Austria, for instance, we have to store certain records related to our business relationships for seven years (§ 212 UGB and § 132 BAO).

E. Recipients of personal data

For operating the website, we use a technical service provider on a regular basis.

In its capacity as a processor this provider is contractually bound by our orders and instructions for the processing of personal data.

In addition, your submitted and processed data will be communicated internally if your contact can be attributed either to a business relationship with us or to an application for an open position.

No personal data will be disclosed to third parties for their own purposes without prior given consent.

2.3. Cookies

A cookie is a small piece of data that a website asks your browser to store on your computer or mobile device. The cookie allows the website to 'remember' your actions or preferences over time. Most browsers support cookies, but users can set their browsers to decline them and can delete them whenever they like.

We use cookies on our website. Some cookies are strictly necessary to provide certain basic features of our website. Other cookies are required for web analytics.

You have the possibility of setting your browser in a manner so that it either does not allow our cookies to be stored or that you are notified when our cookies are received. You can select this setting for common browsers under "Settings" in the "Security" or "Privacy" folders. If you reject our Cookies, your visit to our website may be associated with limited functionality, in the area of searches or queries. Once you have finished visiting our website, you can delete cookies from your system at any time.

We use the following strictly necessary cookies on our website:

Name

Function

Lifespan

Description

PHPSESSID

Session Cookie

 

1 session

 

PHP Session Cookie

csrf_https-contao_csrf_token

Sicherheits-Cookie

1 session

Schutz vor Cross Site Request Forgery

__cf_bm

Captcha

Circa 20 Minuten

Botschutz bei Formularen

2.4. Google Analytics

We use the website analysis tool "Google Analytics" from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). For users based in the European Economic Area or Switzerland, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google Ireland") is the controller responsible for your data.

Google Analytics uses cookies. With those cookies we collect information (including your IP address) about your use of our website. However, we use the "IP anonymization" function of Google Analytics. With this function, your IP address is truncated within the European Union (EU) and is transmitted to servers in the USA after anonymization. Only in exceptional cases (e.g. if the EU-based systems fail) the entire IP address is transmitted to a Google server in the USA and truncated there. Google holds a Data Privacy Framework certification and thus ensures an adequate level of protection.

Google Ireland uses the information obtained through these cookies to evaluate your usage behavior on this website and to provide us with reports on your website activity. You can learn more about Google Analytics here https://support.google.com/analytics/answer/6004245?hl=en and find additional information about the use of data by Google and Google Ireland at https://policies.google.com/privacy?hl=en-US and https://policies.google.com/technologies/partner-sites?hl=en.

If you have given us your consent, the following Google Analytics cookies will be stored on your device:

Name

Function

Lifespan

Description

_ga

Analysis

24 months

Contains a randomly generated user ID. Google Analytics can use this ID to recognize returning users on this website and merge the data from previous visits.

_gid

Analysis

24 hours

Contains a randomly generated user ID. Google Analytics can use this ID to recognize returning users on this website and merge the data from previous visits.

_gat

Analysis

1 minute

This cookie is used to throttle requests.

III. Your rights as a data subject

3.1. Right of access

Pursuant to Art 15 GDPR, you have the right to obtain all information about your personal data being processed by ATL. You may request access to the following information:

a) the purposes of the processing;

b) the categories of personal data concerned;

c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;

d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;

f) the right to lodge a complaint with a supervisory authority;

g) where the personal data are not collected from the data subject, any available information as to their source;

h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information whether personal data are transferred to a third country or to an international organization. If so, you have the right to be informed of the appropriate safeguards pursuant to Art 46 GDPR relating to the transfer.

3.2. Right to rectification

Pursuant to Art 16 GDPR, you have the right to rectification of inaccurate personal data and the right to have your incomplete personal data completed.

3.3. Right to erasure

Pursuant to Art 17 GDPR, you may exercise your right to demand that your personal data are erased provided that one of the grounds for erasure as stipulated by the GDPR applies.

3.4. Right to restriction of processing

Pursuant to Art 18 GDPR, you may request us to restrict the processing of your personal data if:

a) you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;

b) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

c) we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims;

d) you have objected to processing pursuant to Article 21(1) pending the verification whether our legitimate grounds override yours.

3.5. Right to withdraw consent

Pursuant to Art 7 GDPR, you have the right to withdraw your consent to processing of your personal data at any time. Please note that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

3.6. Right to object

Pursuant to Art 21 GDPR, you have the right to object, on grounds relating to your particular situation, to the processing of your personal data which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.

3.7 Right to data portability

Pursuant to Art 20 GDPR, you have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller, where:

a) the processing is based on consent pursuant to point (a) of Article 6(1) GDPR or point (a) of Article 9(2) GDPR or on a contract pursuant to point (b) of Article 6(1) GDPR; and

b) the processing is carried out by automated means.

Data portability shall not adversely affect the rights and freedoms of others.

3.8. Supervisory Authority

If you believe we process your data unlawfully, you can lodge a complaint with the competent national supervisory authority. In Austria, it´s an Austrian Data Protection Authority.

IV. Miscellaneous

We reserve the right to update this Privacy notice from time to time to reflect legal and / or technical changes and / or requirements or any changes to our business (activity).