- Österreichische Post AG, Postkundenservice, Bahnsteggasse 17-23, 1210 Vienna
Österreichische Post's data protection policy
Updated: May 2018
- for the provision of postal services (shipping and delivering mail), e.g. when you send a parcel. For the delivery of mail items sent by public authorities, we will process your personal data pursuant to the provisions of the Delivery Act. We will collect signature-related data about the signing speed and pen pressure and share them with the competent authority or court as required by law.
- for the payment of retirement benefits, unemployment benefits
- for logistics services, e.g. shipping goods
- for ongoing customer service and for answering your inquiries, e.g. when you contact us with a question
- for financial services
- for services related to communication and information technology using automated data processing and information technology, e.g. when you use our website or data processing at our distribution centres for letter mail and parcel shipping)
- to manage master data and contractual data, e.g. if you have a user account or a PO box with us or if you are an Austrian Post partner
- for the performance of contracts, e.g. for mail forwarding or release delivery authorizations, collection services, parcel stamps, e-letters or for prize draws
- for the provision of printing services (e.g. postcard app, Austrian Post online printing, photo printing)
- for the performance of contracts, e.g. regarding philately products such as stamps subscriptions, Meine Marke personalised stamps
- for real estate evaluation (e.g. when renting or selling real estate)
- for vehicle marketing purposes
- for the provision of postal services including clarification and processing of damaged items (letter mail shipping and delivery), e.g. when we deliver a parcel to you. In that case we process the personal data provided by the sender.
- for the compilation of statistics with the goal of developing new rates, for handling offers and inquiries, processing applications and providing services, event management
- for customer service and request/complaint management
- for supplier management purposes
- for invoicing and accounting purposes
- for safeguarding property and responsibility protection via video surveillance
- for visitor and access management
- for our event management
- to apply for subsidies
- for managing your loyalty pass
- for a sustainable environmental and waste management system as well as for the implementation of our sustainability strategy
- for marketing purposes: the use of your data for marketing purposes can also be a justified interest. An example is when you have a customer relationship with us, e.g. you have a user account with Austrian Post and rely on services such as mail forwarding, PO boxes or release delivery authorization. In this case, we might use your data for market research purposes such as satisfaction surveys and studies about the provided services and for consulting services as well as for direct marketing, provided that, having considered all interests, we believe that the there is a justified interest for processing the data. In any other case, we will only use your data if you explicitly agree to it. You can revoke this consent at any time.
- use of our data for third-party marketing purposes pursuant to Section 151 of the Austrian Industrial Code (activity as address broker and direct marketing company). With these activities, Austrian Post supports businesses in their active and targeted client communication processes. Austrian Post itself gets the required data (name, sex, title, degree, address, data of birth, profession, industry or business and client or interested person file where we obtained your address) from the persons in question, e.g. prior to prize draws. This means that you will receive written information at the time of the data collection saying that the data will be used for third-party advertising purposes. At the time at collection as well as at any later point in time, you have the option to object to this processing. For detailed information about an objection, please click here. However, the data can also be bought from other address brokers and direct marketing businesses. In that case, you will receive information from the suppliers of such address brokers about the planned use of your data.
Names and addresses collected in such manner can then be passed on to advertising businesses for sending out advertising mail or for other marketing purposes. The data can also be used for analyses and evaluations.
In order to improve customer communication processes, data may be analysed with marketing analysis tools and combined with other data. The data used for this purpose is collected with the help of publicly accessible information such as regional statistic data provided by Statistics Austria (no personal data), surveys among the data subjects similar to those done for voting analyses and projections. The lawfulness of the processing of such data is subject to constant verification and will be warranted pursuant to high legal standards.
- for compliance purposes. This means meeting statutory and other requirements, e.g. income tax and social security deductions, recording/reporting duties, audits, compliance with inspections by public authorities, “good governance”, reaction to legal disputes, administration of in-house inquiries/complaints/claims, investigation and behaviour in line with strategies/procedures, fulfilment of a trust-building communication policy as well as disclosure and information needs. To that effect, special categories of personal data (especially data from criminal proceedings) may be processed pursuant to Article 9 of the GDPR. When doing so, we comply with all special statutory stipulations for this processing.
- for planning, implementing and documenting internal revision action as well as forensic analyses to ensure that our business processes improve on a continuous basis and to meet provisions imposed by supervisory authorities. In addition, data collection for clarification and prevention purposes in the case of suspected unlawful activity towards Austrian Post. To that effect, special categories of personal data (especially data from criminal proceedings) may be processed pursuant to Article 9 of the GDPR. When doing so, we comply with all special statutory stipulations for this processing.
- to settle damages and insurance claims. To that effect, special categories of personal data (especially health-related data and criminally relevant data) may be processed pursuant to Article 9 of the GDPR. When doing so, we comply with all special statutory stipulations for this processing.
- for ensuring IT security and maintaining IT operations, the execution of stress tests, the development of new products and systems and the adaptation of existing ones, data migration to ensure system viability and integrity and ultimately, the viability and integrity of processed data. In this case, personal data is predominantly used for tests provided that such tests cannot be done with anonymous data without excessive costs. As a matter of course, data security pursuant to Article 32 of the GDPR will be ensured at all times.
In addition to the aforementioned personal data, we will process your personal master data, address data (e.g. from the provision of postal services), contact data (e.g. e-mail address, telephone number), payment data, shipping data, document content data, identification data, complaint/inquiry data from inquiries/complaints, image and audio data (e.g. video, image and telephone recordings).
- Austrian Post account: If you have signed up for an Austrian Post account or for the online services of Austrian Post, we will process the following data categories: personal main data, address data, contact data and, in the case of identification, the required ID data.
- Marketing purposes such as the electronic delivery of e-mails, text messages, messages in Austrian Post customer portals and mobile data applications, via social network and contact via telephone. Based on your consent, Austrian Post may send you marketing information via these channels about events and suggestions about products and services from the Austrian Post range of services.
- Tracking user behaviour on the websites and apps of Austrian Post provided that you use them. For additional information about cookies, please see legal information and cookie information for websites under item 9.
3. With whom are we allowed to share your data?
We use the services of Google Adwords to place advertising (so-called Google Ad-words) on external websites and highlight our attractive offerings. By linking the data to the advertising campaign, we can determine how successful specific advertising ef-forts have been. In doing so, we strive to show you advertising that is relevant to you, to make our website more interesting for you and to reach a fair calculation of adver-tising costs.
These advertising materials are delivered by Google via so-called "Ad Servers". We use Ad Server cookies which measure certain success parameters, including how many times the ads were shown and how many clicks they obtained from users. If you access our website via a Google ad, Google Adwords will place a cookie on your PC. These cookies are usually valid for 30 days only and do not identify you personally. The cook-ies save the following information: unique cookie ID, number of ad impressions per placement (frequency), last impressions (relevant for post-view conversions) as well as opt-out information (information that a user does not want to see the ad anymore).
These cookies allow Google to recognize your Internet browser at a later point. Should the user visit certain pages of the website of an Adwords client and the cookie saved on his or her computer has not yet expired, Google and the client can tell that the user has clicked on the ad and proceeded to that page. Each Google AdWords client receives a different cookie. Thus, cookies cannot be traced using the website of an AdWords cli-ent. We do not collect or process any personal data for the above-mentioned advertis-ing activities. We merely receive statistical analyses from Google. These analyses allow us to see which of our advertising activities are particularly effective. We do not receive any more detailed data related to the use of ads. Most importantly, we cannot identify users based on this information.
Given the marketing tool in use, the browser automatically creates a direct connection to a Google server. We have no influence on the extent and subsequent use of data col-lected by Google via the use of this tool. We would therefore like to disclose what we know about this process: by integrating Adwords Conversion, Google receives infor-mation that you have accessed a specific part of our website or that you have clicked on one of our ads. If you have registered for one of the services provided by Google, Google can link your visit to your account. Even if you have not registered or logged on, the service provider might obtain information about our IP address and save it.
In addition to Adwords Conversion, we use an application called Google Remarketing. This is a procedure that we use to target you once again. This application allows us to display our ads on your computer after you have visited our website. This is done via cookies saved on your browser. These cookies allow Google to identify and analyse your user behaviour when you access different websites. This is how Google can de-termine that you have previously visited our website. According to information provid-ed by Google, data collected as part of remarketing activities will not be associated with any of your personal data that Google may have saved. Google also highlights that it uses pseudo-anonymization for its marketing activities.
You have several options for blocking this tracking process: (1) by adjusting the set-tings in your browser. If you block third-party cookies, you will no longer receive ads from third-party providers; (2) by deactivating cookies for conversion tracking. You can do this by adjusting your browser settings so that cookies from the domain "www.googleadservices.com" are blocked. Use the link https://www.google.de/settings/ads; these settings will be deleted if you delete your cookies. (3) by deactivating interest-specific ads by providers who participate in the "About Ads" self-regulation campaign. To do that, use the link http://www.aboutads.info/choices; these settings will be deleted if you delete your cookies; (4) by permanently deactivating the process in your Firefox, Internet Explorer or Google Chrome browser. Use the link http://www.google.com/settings/ads/plugin. Please note that if you block cookies, you might not be able to use all functions of your website.
In addition, you have the option of blocking the pixel. All you have to do is click on the link below. In order for your objection to become permanent, your browser must ac-cept cookies.
The legal basis for processing your data is Article 6(1) (f) the GDPR. For more infor-mation about Google's data protection policy, please vis-it: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. As an alternative, you can also visit the website of the Net-work Advertising Initiative (NAI) at http://www.networkadvertising.org. Google is bound by the EU-US Privacy Shield Framework: https://www.privacyshield.gov/EU-US-Framework.
We use Facebook Pixel for marketing and optimization purposes, especially for placing Facebook ads that are relevant and interesting to you so that we can ultimately im-prove our offerings and make them more interesting for you as a user and to avoid ads that might bother you. The cookies placed on your computer are theoretically valid for up to 2 years.
You can object to data collection by Facebook Pixel described above as well as to the use of your data for displaying Facebook ads. To change the settings for the kinds of ads shown to you on Facebook, please visit this Facebook page: https://www.facebook.com/settings?tab=ads.
In addition, you have the option of blocking Pixel. All you have to do is click on the link below. In order for your objection to become permanent, your browser must accept cookies.
Please note that if you delete your cookies, this setting will be deleted as well.
The legal basis for processing your data is Article 6(1) (f) of the GDPR. For additional information about Facebook's data protection policy, please visit: https://www.facebook.com/about/privacy. The data protection policy for Facebook Pixel is available here: https://www.facebook.com/business/help/651294705016616. Facebook is bound by the EU-US Privacy Shield Agree-ment https://www.privacyshield.gov/EU-US-Framework.
This website uses conversion tracking by Adform ApS headquartered in Denmark (hereinafter referred to as "Adform"). A cookie for conversion tracking is placed when a user has contact to an ad placed by Adform. These cookies include no information that would allow for the personal identification of users.
We process our users' personal data to analyse their online behaviour. By analysing the data we collect, we can determine how specific parts of our website are used. This helps us improve our website and make it more user-friendly. The storage period for these cookies is 60 days maximum.
Users who do not want to participate in the tracking process can deactivate the Adform cookie via their Internet browser or directly via the following link https://site.adform.com/privacy-center/platform-privacy/opt-out/ http://www.adform.com/site/privacy-policy/. Please note that if you deactivate these cookies, you might not be able to use all functions of this website.
The legal basis for processing our users' personal data is Article 6(1) (f) of the GDPR. For more information about Adform's data protection policy, please visit https://site.adform.com/privacy-center/overview/.
By adjusting the relevant setting in your Internet browser, you can prevent our website from placing cookies. This will permanently block the placement of cookies on your computer. Adjusting the relevant setting in your Internet browser would also prevent Adition from placing a cookie in your system. Also, cookies that have already been placed by Adition can be deleted any time using an Internet browser or another soft-ware. Placed cookies are theoretically valid for one year.
In addition, you have the option of objecting to the collection of data generated by the Adition cookie related to the use of this website as well as to the processing of such data by Adition and of preventing any processing. Please click on the opt-out link provided here https://www.adition.com/kontakt/datenschutz/ for the opt-out cookie to be placed. If the cookies on your system are deleted after opting out, you will have to ac-cess the link once again and place a new opt-out cookie. Please note that after opting out, you might not be able to use all functions of our website.
The legal basis for processing users' personal data is Article 6(1) (f) of the GDPR. Adition's current data protection policy is available here: https://www.adition.com/en/privacy/
If you apply for a position at Österreichische Post, we will let you know how and to what extent we process your personal data before we start the application process. If you subsequently become an employee of Austrian Post, we will process your data as described in the data protection policy for employees of Österreichische Post. This policy is available on the Intranet under Employees/data protection and on our infor-mation board.