Data Protection Declaration

We at TSSU consider it a matter of course to handle your personal data responsibly whenever you use our webpages and communicate with us by electronic means. We take all the required measures to protect the personal data provided by you and to comply with applicable national and European data protection regulations at all times. The collection, processing and use of the data by TSSU is exclusively based on applicable legal provisions, in particular in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council dated 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC – GDPR), the Data Privacy Act 2018 (DSG 2018), the Privacy and Electronic Communications Directive (Directive 2002/58/EC of the European Parliament and of the Council dated July 12, 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector – ePrivacy Directive) and the Telecommunications Act (TKG 2003), as well as any other applicable regulations under Union law.

1. Controller within the meaning of Art 4 (7) GDPR

tssu.at is a website that is operated by

TIROLER STRASSE-SCHIENE-Umschlaggesellschaft mbH.
Löfflerweg 35
6060 Hall in Tirol
Österreich
55240k

T +43.5223.56650
F +43.5223.56649
officetssu.at

who is the controller within the meaning of Art 4 (7) GDPR.

Should you have any questions regarding the protection and safety of your data, or if you want to assert your data privacy-related rights and claims, please call, or send an e-mail to the above-stated contact.

During access to or use of tssu.at, data will be collected and used that are personal and/or may influence your privacy – as described in greater detail below. You will not be able to use the services offered unless you provide your data.

2. Processing of personal data, purposes of data processing and legal basis

2.1. Visit to the website

Each access to the tssu.at website is logged by TSSU.

Personal data
In the process, the following data will be recorded about you:

- IP address
- date and time of your visit
- duration of the visit
- pages called up
- continent
- country
- region
- ZIP code
- city/town
- language
- longitude and latitude
- type and version of browser
- operating system
- referrer URL (the page from which you were linked through to our website)
- Internet Service Provider

Purpose of data processing
This data will be statistically analyzed in order to modify our website according to the users’ needs, to optimize the user friendliness of our website, to improve the services offered on the website, to identify any errors more quickly, and consequently optimize the website, as well as to control server capacities. Your IP address (internet identifier of your computer, consisting of numbers) will not be analyzed by us. Accordingly, the usage data will not deliberately be linked up with personal data at any time.

Storage period
Your data will not be stored.

Legal basis
The legal basis for the processing of access data according to Art 6 (1) (f) GDPR is the legitimate interest (online service offer and data security) of TSSU.

2.2. Licensed photos/use of images

Individual photos on the website originate from the following agencies: gettyimages.com, shutterstock.com, istockphoto.com and fotolia.com. We dispose of license agreements of the providers for the relevant rights of use.

3. Web tracking

3.1. Google Analytics and Google Remarketing

Purpose of data processing:
This website uses Google Analytics and Google Remarketing, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called cookies, or text files that are stored on your computer enabling an analysis of your use of the website. As a rule, the information generated by cookies regarding your use of the website is transferred to and stored on a server in the USA that is operated by Google.

Third-party providers, including Google, use the cookies to place ads on the basis of previous visits by a user to that website. In this way (if applicable), Google provides a service associated with the use of the website and with Internet use in general and transmits cookie information to third parties, provided it is required under the law or to the extent that this data is processed by third parties on behalf of Google.

We have activated IP-anonymization on this website. Thereby, your IP address will first be truncated by Google within the member states of the European Union or in other signatories of the treaty on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA to be truncated there. Google will use this information on behalf of the operator of this website in order to evaluate your use of the website, compile reports regarding website activities and provide further services for the website operator relating to website and Internet usage.

The IP address sent by your browser when using Google Analytics is not combined with any other Google data. You can prevent the storage of cookies through a corresponding setting in your brows-er software; please note, however, that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting and processing data relating to your use of the website (incl. your IP address) that is generated by the cookie by downloading and installing the available browser plug-in tools.google.com/dlpage/gaoptout.

We will carry out anonymized click tracking for statistical purposes. But this does not allow to retrace individual recipients. The tracking of personal responses enables us to optimize the content of our newsletter and to adjust the same to the changing habits and technical requirements of our users. The data collected will be analyzed in anonymized form; accordingly no personal data will be analyzed.

You can prevent the data use of Google Analytics if you click on the following link. An opt-out cookie will be set which prevents the collection of your data in future visits on our website: deactivate Google Analytics

This website uses the Remarketing function of Google Inc. (“Google”). This function serves to present interest-based publicity ads to website visitors within the scope of the Google advertising network. The browser of the website visitor stores so-called cookies, or text files that are saved on your com-puter, allowing for the recognition of the visitor when he or she calls up any websites belonging to the advertising network of Google. Publicity ads can then be presented to the visitor on those pages that relate to content which the visitor has previously called up on websites using the Remarketing func-tion of Google. Google claims not to collect any personal data during that process. Should you not agree to Google’s Remarketing function nevertheless, you can deactivate the same in general by making the corresponding settings at www.google.com/settings/ads.

4. Cookies

On this page, you will find information about the handling of cookies and personal data (tracking technology).

4.1. Technical cookies

Purpose of the use of cookies
Cookies are text files that are stored on your computer, primarily enabling an analysis of your use of tssu.at. TSSU uses or places cookies in accordance with the law of the European Union and of Austria (GDPR, Art 5 (3) ePrivacy Directive as well as § 96 (3) TKG 2003)

TSSU uses information passed on through cookies, such as the browser types used, the operating system, as well as activities such as duration of the visit, number of pages visited or the time of your visit. The usage data will be statistically analyzed only internally in order to adjust our website to the needs of the users. Your IP address (Internet identifier of your computer, consisting of numbers) will not be analyzed by us. Accordingly, the usage data will not be linked up with personal data at any time. After termination of your visit to our website, the data contained in the cookies are no longer available to us. Make sure that your computer settings reflect whether you want to accept cookies. You may choose your browser settings such that an alert will appear on the display prior to saving a cookie or that the placing of cookies is not possible. But please be aware that in that case you renounce the benefits of personal cookies and that certain applications may not be available in full.

Legal basis (technical cookies)
The legal basis for the placing of cookies is the legitimate interest of TSSU (Art 6 (1) (f) GDPR), which consists in maintaining the website functions as well as the technically flawless provision of the services of TSSU.

4.2. Other cookies

Legal basis (other cookies)
When using or placing cookies that include personal data or affect privacy, TSSU will previously ask for your consent (Art 6 (1) (a)), in fact by your active behavior when you read and accept the cookie information after being informed about the purposes of the cookies used through our cookie banners on tssu.at, thus agreeing to the cookies, by clicking on “accept”. By not accepting the consent, the lawfulness of the consent-based data processing effected until revocation shall not be affected.

You have the option to receive further information about the individual cookies via a link in the cookie banner, and you can block the placing of individual or all cookies through your browser settings.

The following cookies will be placed:

Name	Domain	Expiration Time	Information
CONSENT	.google.com	~20 years	This cookie saves the cookie consent settings.
UULE	www.google.xx	1 day	This cookie is used for Google Analytics Remarketing.
NID	google.com	6 months	https://www.google.com/policies/technologies/types/ Google uses cookies like NID and SID to help customize ads on Google properties, like Google Search. For example, we use such cookies to remember your most recent searches, your previous interactions with an advertiser‘s ads or search results, and your visits to an advertiser‘s website. This helps us to show you customized ads on Google.
cookieconsent_dismiss	tssu.at	1 year	This cookie flags that you accepted/dismissed the cookie info message.
fe_typo_user	tssu.at	browser session	The cookie used for the front-end user session. We can't disable this cookie.
_utma	google.com	2 years	With this cookie we can detect users who already visited the website.
_utmb	google.com	30 minutes	In combination with _utmc we can detect the average stay on the website.
_utmc	google.com	browser session	In combination with _utmb will be calculated when user end their session.
_utmt	google.com	10 minutes	Is used to throttle the polling rate.
_utmz	google.com	6 months	With the help of this cookie weg et to know from where the user gets tot he homepage (from another website, from search engines, …)

4.3. Cookies of third parties

If you visit a page on tssu.at, that contains embedded content (e.g. YouTube), cookies may be stored by these websites as well. The cookie settings of third parties will not be checked by us. Accordingly, we recommend to obtain information for the use of cookies on the respective website.

4.4. Further information on cookies

Further general information on cookies and their management is available at www.aboutcookies.org. Please remember that we are not responsible for the content of external websites.

4.5. Social plug-ins & tools

Social plug-ins (“Plug-ins”) & tools have been integrated on the website. The relevant social networks & tools are the following:

• Google WebFonts, operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Google Plus, operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

The plug-ins are marked with a logo or the designation of the operator. If you call up our website, which contains any of those plug-ins, your browser will establish a direct connection to the operators’ servers. The content of the plug-in is transmitted by the operator directly to your browser and embedded in the website by the same. By embedding the plug-ins, the operator receives the information that you have called up the relevant website. If you have logged in at the operator, the latter can match the visit with your user account. If you interact with the plug-ins, e.g. by activating a plug-in button, your browser will send the corresponding information directly to the operator, and the information will be stored there. By logging out from your user account, you can prevent the operator from matching the stored information with your user account.

The purpose and extent of data collection and the further processing as well as the use of the data by the operator including your associated rights and optional settings to protect your privacy are contained in the respective notes on data protection:

• Google WebFonts: https://policies.google.com/privacy?hl=en
• Google Maps: https://policies.google.com/privacy?hl=en

5. Storage period

At TSSU, your personal data will be stored for varying periods – depending on the necessity and the purpose – (see the information above)

Deletion of the data shall be effected as described above, unless any legal retention obligations (under business and/or tax law) exist.

Based on applicable legal provisions (§ 212 UGB, § 132 BAO etc) we are obliged, among others, to store certain personal data for a minimum period of seven years. This concerns the following data:

- first name
- surname
- ZIP code
- city/town
- country
- invoice and delivery address
- means of payment
- client number
- order number
- name of company and UID number, if applicable

Based on applicable legal provisions under §§ 933, 933a, 1486, 1489 ABGB (Austrian Civil Code), we are obliged, among others, to store certain personal data for a minimum period of 3years. This concerns the following data:

- salutation
- title
- date of birth
- telephone number
- user name
- e-mail address:
- password

6. Data security

6.1. Security measures implemented

TSSU takes measures to ensure an appropriate level of protection with respect to data processing security acc. to Art 25 and Art 32 GDPR.

We have taken comprehensive security measures to protect your data against unauthorized third-party access. In doing so, we use a data protection management system as well as ISO 27001 certification.

Please note, however, that it is equally important to protect your computer against unauthorized access, for instance by only allowing trustworthy third parties to use the same and by always using up-to-date firewall and antivirus software, and by checking your e-mails for authenticity and reliability (phishing mails).

6.2. Exclusion of liability

No liability shall be assumed for any loss caused due to the fact that you fail to adequately protect your computer against third-party access.

7. Rights of data subjects (Art 12 – 22 GDPR)

As a user of our website, you are entitled to the following rights:

7.1. Right of access (Art 15 GDPR)

You are entitled to demand information as to whether any personal data is processed that relates to you. Moreover, you are entitled to request further information about the specific purposes of data processing, the categories of personal data, the recipients or categories of recipients of personal data, the storage period, the existence of any right to erasure or rectification of your personal data, the existence of any right to lodge a complaint, as well as with respect to all available information about the source of your data.

7.2. Right to rectification (Art 16 GDPR)

You have the right to demand immediate rectification of your personal data.

7.3. Right to erasure (Art 17 GDPR)

You have the right to demand immediate erasure of your personal data.

7.4. Right to restriction of processing (Art 18 GDPR)

In the instances listed in Art 18 GDPR (for instance, the accuracy of the personal data is contested by you or the processing is unlawful), you are entitled to demand restriction of data processing.

7.5. Right to data portability (Art 20 GDPR)

You are entitled to receive the personal data about you, which you have provided to us, in a commonly used structured format and to demand that we transmit said data to another controller.

7.6. Right to object (Art 21 GDPR)

You have the right to object to the processing of your personal data, which is processed within the scope of our website.

7.7. Revocation of declarations of consent (Art 7 GDPR)

You have the right to revoke, at any time, any consent you have given to us.

7.8. Measures in connection with automated decisions in individual instances, including profiling (Art 22 GDPR)

In instances of automated decision-making, including profiling, you are entitled – provided that the relevant measure has any legal effect on you or considerably affects you in any similar way – to make any other person intervene on the part of the controller, to explain your point of view and to challenge the decision.

7.9. Right to lodge a complaint

Additionally, you may lodge a complaint at any time with

Österreichische Datenschutzbehörde
Wickenburggasse 8
1080 Vienna
T +43 1 521 52-25 69
dsbdsb.gv.at

Except for the right to lodge a complaint with the Austrian Data Protection Authority, you may also assert your rights as a data subject vis-à-vis TSSU at the following address:

TIROLER STRASSE-SCHIENE-Umschlaggesellschaft mbH.
Löfflerweg 35
6060 Hall in Tirol
Österreich