Data protection policy of the EBNER Group

1. General comments

Thank you for your interest in the EBNER Group.

Protecting your personal data is a responsibly that we take very seriously. Your data will only be processed in accordance with the provisions of the European General Data Protection Regulation (GDPR) and all other applicable regulations regarding data protection and privacy.

This data protection policy provides information on what types of personal data are collected and processed by companies that are members of the EBNER Group, either through their websites, at physical locations (e.g. at a trade fair) or through a means of electronic communication (e.g. email). It informs you of your rights with regard to the processing of your data and the choices available to you regarding EBNER’s use of your personal data, and also describes the measures that we employ to safeguard your data.

2. Scope of application and contact information

This data protection policy applies to all websites run by the EBNER Group. In the following text, both the name “EBNER” and the terms “we/our” refer to the EBNER Group.

Contact information for the departments responsible for data processing is listed below.

EBNER Corporate Service Group GmbH
Ebner-Platz 1
4060 Leonding
Austria
Telephone: (+43) 732 / 68 68
Email: office@ebner.cc
Website: https://www.ebner.cc

Any questions regarding the protection and use of personal data may be forwarded to the following:

EBNER Corporate Service Group GmbH
Data protection team (for inquiries regarding the protection and use of data)
Email: privacy@ebner.cc

3. The processing and use of personal data

We process personal data, specifically the data of employees, retirees, applicants, customers, suppliers and other partners, for the purpose of performing business activities and fulfilling the associated legal and contractual requirements.

In general, it is possible to visit our website without providing any personal data. Any exceptions to this general rule are described in the following sections.

3.1 The processing of customer, partner and supplier data

EBNER saves and processes data made available by prospective customers, customers, partners and suppliers, in particular names, email addresses and telephone numbers, to create proposals, process orders and fulfill the associated contractual and legal obligations.

The information is employed throughout the entire EBNER Group to ensure that exemplary service is provided. The data may be forwarded to the authorities and public institutions if this is necessary to fulfill legal obligations.

3.2 The processing of employee and retiree data

In order to fulfill contractual and legal requirements and discharge duties of compliance, EBNER saves and processes the personal data of employees, former employees, retirees and their relatives.

Personal data that is not essential to the fulfillment of contractual and legal requirements are only processed if employees have granted their permission.

3.3 The processing of job applicant data

The contact data and application documents provided by applicants for a job are electronically processed to allow suitable candidates to be selected.

Data are kept on record should an application be rejected, enabling review should other positions that match an applicant’s profile become open or the position for which the application was originally submitted again become vacant; this allows the application process to be accelerated in such cases. While data is on record, only a limited group of people in our Human Resources Department have access to application documents. Before any data is forwarded to another business unit within the company, applicants will be contacted to obtain their permission. Data are not retained longer than the legally-stipulated maximum time.

You may object to your application documents being stored in this way at any time: simply email us at privacy@ebner.cc.

If an applicant joins the company, their data are placed in their personnel file.

Data use may include transfer to other companies within the EBNER Group or transfer to an external service provider. Should this be necessary, we will of course ensure that appropriate measures are taken to ensure the security of the data.

3.4 The processing data of data associated with newsletters

The names and email addresses of our customers, as well as other people interested in our company and products, are used to subscribe to our newsletter. This newsletter keeps them up to date on company news and informs them of current offers. If the data are not correct, they can be changed by the newsletter recipient.

If the recipient no longer wishes to receive the newsletter, they can unsubscribe by clicking on a link in the relevant email.

The information is employed throughout the entire EBNER Group to ensure that exemplary service is provided.

3.5 The processing of data collected during events (in-person and/or on line)

In order to attend certain events (either in-person or on line), you must provide your name, your email address and other business-related information. This allows you to access special services and subscribe to the various newsletters of the EBNER Group.

We store, process and protect your contact information only in accordance with national and international data protection regulations.

The information is employed throughout the entire EBNER Group to ensure that exemplary service is provided.

3.6 The processing of data collected during visits

For the protection of our visitors, employees and business partners, visitors must sign in with our receptionist. Personal data such as name, address, telephone number and (if provided) email address are only stored in accordance with the applicable data protection regulations and only for the length of time required by law.

A video monitoring system (employing security cameras) is installed on our premises to protect both persons and property, as well as to reduce and provide evidence for criminal behavior. The right to process and store camera data is based upon the presence of legitimate interest (article 6, paragraph 1, item f of the GDPR). The data that are collected include images, times and places, and may potentially include identifiable people.

Data recorded and saved by the video monitoring system is deleted as soon as its storage is no longer required for the purposes listed above. Recorded data are automatically overwritten no later than one month after the time they were recorded, unless there are justifiable grounds for longer storage (e.g. they document an incident).

In certain cases, data may be handed over to public authorities, courts, legal representatives or insurance agencies.

4. Deadlines for the deletion of data

Personal data are only stored for as long as they are required for a particular purpose. Once the reason for storing the data has ended, it is deleted in accordance with our internal data deletion policy – usually immediately, as long as there is no legal requirement, contractual stipulation or legitimate interest that requires otherwise. Legal storage limits usually range from six to ten years.

5. Principles of processing personal data

The processing of personal data is based on strict principles regarding the protection and security of data, as well as the rights of affected persons (data subjects), that are employed throughout the EBNER Group.

Lawfulness and transparency: Data processing takes place lawfully, in accordance with applicable data protection regulations and taking into consideration the rights of data subjects.
Purpose limitation: Data are collected and processed for clearly specified and legitimate purposes. Data is not processed in a way that is considered incompatible with the initial purpose.
Data minimization: Only data essential to the specified purpose is recorded and processed. If the intended purpose can still be achieved and the effort is deemed reasonable, only anonymized data is processed.
Storage limitation and deletion: Personal data are erased as soon as the purpose for which the data was originally recorded no longer exists, should no legally-stipulated storage periods prevent erasure. If there are special cases where the data is deemed worthy of protection, the data will be stored until interest in the data no longer exists.
Data security: The principle of data secrecy applies to personal data. The data must be treated as confidential and suitable organizational and technical measures must be taken to prevent unauthorized access, unlawful manipulation and transfer, as well as loss and destruction.
Material accuracy: Personal data must be accurate, complete and kept up to date. Suitable measures must be taken to correct old, incorrect or incomplete data.

All employees of EBNER are obligated to keep data confidential, and are instructed and trained at regular intervals on how to securely handle personal and other critical data.

6. Rights of data subjects

Each data subject whose personal data is processed by EBNER may exercise the rights of a data subject at any time by contacting EBNER‘s Data Protection Coordinator.

Data security is extremely important as it relates to the rights of data subjects, for which reason the rights of a data subject may only be exercised after the data subject has presented clear proof of their identity.

To exercise your rights as a data subject, please feel free to email privacy@ebner.cc at any time. Every data subject also has the right to file grievances with the Austrian Data Protection Authority (https://dsb.gv.at/).

The exertion of any of the rights listed below by affected persons or data subjects is governed by the provisions of the EU GDPR.

Right to be informed: At any time, data subjects may demand to be informed of which elements of their personal data are being processed and what purpose the processing serves.
Right to rectification: Data subjects have the right to demand immediate rectification of any personal data that are incorrect.
Right to restriction: Data subjects have the right to restrict processing if the correctness of the data relating to them is disputed, the processing is unlawful, the data are no longer needed for processing or the data subjects have objected to the processing.
Right to object: Data subjects have the right to object to the processing of their personal data at any time.
Right to data portability: Data subjects have the right to obtain the personal data they have made available to EBNER in a structured, accessible and machine-readable format. They also have the right to demand that the data are transferred to another controller, insofar as this is technically possible. Portability applies only to personal data that have been processed using automated processes.
Right to erasure (right to be forgotten): The data subject has the right to demand immediate erasure of relevant personal data if the legal basis for processing the data is absent or no longer exists, an objection to processing the data has been made, processing the data is unlawful and no legally-stipulated storage period prohibits erasure of the data.

7. Data transfer

The transfer of personal data to recipients outside the EBNER group, as well as to recipients in non-EU countries, is only carried out in accordance with the applicable laws and for lawful reasons; strict confidentiality and data security are observed.

In the course of processing data throughout the EBNER Group, personal data is transferred between companies of the Group. This transfer is governed by guidelines established through standardized contract clauses, which create a uniform standard for the protection and legally-compliant processing of data.

EBNER contracts with a variety of processors to process data. All processors have signed a data processing agreement and are legally obliged to adhere to applicable data protection regulations.

8. Website

Additional information has been provided below for visitors to our website.

8.1 IP address

When our website is visited, information is saved automatically to the web server. This includes information on the browser used, the operating system, the IP address and the time of the visit. From EBNER‘s perspective these data are pseudonymized, and without another source of data they cannot be definitely associated with particular persons.

EBNER does not evaluate these data as long as no unlawful use of the website has occurred.

8.2 Cookies

To provide you with an optimal user experience, EBNER uses “cookies” to analyze website use, personalize contents and displays, and provide social media functions. When doing so, we strictly observe all applicable data protection regulations.

Cookies are small text files that are saved on your device. They help us better understand user behavior and so improve our website.

Cookies can be either permanent (“persistent”) cookies or temporary (“session”) cookies. Persistent cookies are saved as a file on your device. Session cookies are saved temporarily, and are deleted when you close the browser session.

You can easily delete cookies from your computer or mobile device using browser commands and settings. Check the “Help” menu of your browser to see how you can manage and delete cookies. You can also deactivate cookies or be notified if a new cookie is sent to your computer or mobile device. However, please note that if you reject cookies you may not be able to use the full spectrum of functions offered by a website.

We work closely together with Borlabs, a service provider, to ensure that the cookies we use are up to date.

8.3 Embedded YouTube videos

To be able to provide appealing depictions that relate to the content of our website, EBNER makes use of the “YouTube” video hosting platform. YouTube videos are embedded directly into our website. That is, our website uses plugins from YouTube, a web page operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (referred to below as “Google”).

If you visit one of the pages of our website with a YouTube plugin, a connection to the YouTube server is established. This tells the server which of our web pages you are visiting. If you are logged into your personal YouTube account, YouTube can log your actions directly into your personal profile. This data can be used to customize content or advertising to match your preferences and interests. If you would like to prevent this, you should log out of your YouTube account.

YouTube uses cookies to collect information about visitors to its site. If you play a YouTube video that is embedded in our website, YouTube cookies are used to analyze your user behavior. Additional information regarding these cookies can be found here: https://policies.google.com/technologies/cookies?hl=en-US

Additional information on YouTube’s use of user data is provided in Google’s Privacy Policy, which can be found here: https://policies.google.com/privacy?hl=en-US

8.4 Google Analytics

The website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (referred to below as “Google”). Google Analytics uses “cookies” for analysis. As a rule, information collected by the cookies regarding your use of the website (including your IP address) is transmitted to and stored by Google on a server located in the USA. Google uses this information to evaluate your use of the website, compile reports on website activity for website operators and provide other services related to website activity and use of the Internet. Google may also forward this information to third parties, should this be required by law or if those third parties are processing the data on behalf of Google. Under no circumstances will Google associate your IP address with other data stored by Google Inc.

You can prevent the installation of cookies by selecting the appropriate settings in your browser. However, please note that by doing so you may not be able to use the full functionality of this website.

Use of this website indicates that you agree to the collection of data, and that this data may be processed by Google using the methods and for the purposes stated above. Additional information on the terms and conditions of use and data protection can be found here: https://www.google.com/analytics/terms/ .

8.5 Google Maps

Our website uses Google Maps to display geographical information, e.g. the locations of offices and plants. If you call up a page in which Google Maps is embedded, personal data such as your IP address and possibly your physical location are transmitted to Google. This may mean that data is transferred to a site in the USA. Our right to make use of Google Maps is based upon the presence of legitimate interest (article 6, paragraph 1, item f of the GDPR), as it enables the locations of our offices and plants to be displayed in a user-friendly manner.

Additional information on the use of data by Google is provided in Google’s Privacy Policy.

8.6 Newsletter (Mailchimp)

If you sign up for our newsletter, we will use your personal information (i.e. name and email address) to regularly provide you with information about our company and current special offers. Emails are sent using the “Mailchimp” service provider, a platform operated by the Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

Mailchimp is certified under the EU-US Data Privacy Framework, meaning that it provides an adequate level of data protection as defined in article 45 of the GDPR. Data processing is based upon the presence of consent, as established in article 6, paragraph 1, item a of the GDPR. Additional information on the use of data by Mailchip can be found here: https://mailchimp.com/gdpr/

You may withdraw your consent to receive future newsletters at any time, for example by clicking the “unsubscribe” link found at the end of every newsletter.

8.7 Social media links

Our website contains links to our profiles on Facebook, Instagram and LinkedIn. Posts are not embedded, and there is no direct transfer of data when the site is loaded. The data protection policy of a platform does not apply until its link is clicked.

9. Your consent

Visiting our website or providing personal data indicates that you agree to the terms of this data protection policy. If you do not consent to the terms, please do not provide us with any of your personal data.

10 Ongoing checks and improvements

The ongoing improvement of quality and processes is very important to EBNER.

Compliance with the directives on data protection and applicable laws, as well as the effectiveness of the measures taken to ensure data protection and data security, are continuously being analyzed and improved to ensure that data protection measures function faultlessly.

For this reason, we reserve the right to update this data protection policy as needed.

October 21, 2025