Privacy Policy

1. Data Controller

CGO Wohnbau GmbH
Kronthalerstraße 4
6330 Kufstein
Österreich

T: +43 5372 62404
M: office@cgo.at
UID: ATU38528704

2. Use of Our Website

You may view and use our website without disclosing personal data to us. Personal data is only retained if provided voluntarily—for instance, within the scope of an enquiry, an application, an instruction, or for the conclusion or performance of a contract. Such data is stored only for as long as necessary to fulfil the intended purpose.

2.1. Contact Form

When you use the contact form on our website, we process the details you provide to attend to your enquiry. In the event of follow-up matters, this data is retained for a period of six months. Your details will not be disclosed to third parties without your consent.

2.2. Use of Cookies

To enhance your experience of our website and enable specific features, we employ cookies. These are small text files stored on your device. Certain cookies we use are deleted at the end of the browser session, when your browser is closed (session cookies). Other cookies remain on your device, enabling us to recognise your browser upon your next visit (persistent cookies).

You may configure your browser settings to alert you to the placement of cookies, allowing you to accept them on an individual basis, to preclude their acceptance in specific instances or generally, and to remove stored persistent cookies from your hard drive.

2.3. Deployment of Google Analytics for Web Analysis

This website uses Google Analytics, a web analysis service provided by Google Inc. (www.google.de). Google Analytics likewise uses cookies that facilitate an analysis of your website use. The information generated by the cookie regarding your use of this website is typically transferred to a Google server in the United States and stored there. However, should IP anonymisation be activated on this website, your IP address will be truncated beforehand by Google within Member States of the European Union or other contracting parties to the Agreement on the European Economic Area. Only in exceptional cases will the complete IP address be transferred to a Google server in the United States and truncated there. IP anonymisation is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide further services associated with website and internet use to the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data held by Google. You can prevent the storage of cookies by adjusting your browser software accordingly.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout

3. Purposes of Processing and Legal Bases

We process your personal data for the purpose of providing the services commissioned by you (performance of contract) or to undertake pre-contractual measures. The processing of your data is grounded in Art. 6(1)(b) GDPR.

We must also process your data to comply with legal obligations (accounting, financial reporting, documentation, and statutory fiscal obligations) pursuant to Art. 6(1)(c) GDPR.

The data detailed in Section 4.1 is strictly requisite for entering into or performing a contract. Should this data not be provided, or provided incompletely, we may be unable to fulfil our contractual obligations entirely or enter into an agreement with you. The provision of other personal data pursuant to Section 4.2 is voluntary.

Furthermore, we process your data pursuant to Art. 6(1)(f) GDPR for the purposes of legitimate interests. These interests encompass client relationship management and the presentation of our bespoke properties and services.

4. Categories of Processed Data

4.1. Required Personal Data

Data required to process enquiries, prepare proposals, evaluate applications, and perform contracts—notably surname and first name, residential address, contact details (such as email address, telephone number), banking details, and information concerning the nature and substance of our contractual relationship.

4.2. Other Personal Data

Data provided with your consent or otherwise legitimately obtained during the initiation or course of a contractual relationship, including gender, academic titles, signing authority or powers of representation, or further personal details you have made publicly accessible.

This serves merely as an illustrative overview. We do not invariably hold all the data listed above. You are entitled to request an individual, comprehensive overview from us under your right of access (please refer to Section 9: Your Rights Concerning Data Processing).

5. Engagement of Data Processors

We remain your primary point of contact for the protection of your data even when engaging a data processor (Art. 4(8) GDPR). Processors established outside the European Union or the EEA are only retained if the third country in question is subject to an adequacy decision by the European Commission (Art. 45 GDPR) or if appropriate safeguards (Art. 46 GDPR) have been established with the processor.

6. Disclosure of Data to Third Parties

For the performance of contracts (e.g. preparation of proposals, delivery of services) and pursuant to statutory provisions, it may be necessary to disclose your data to third parties, including sub-contractors, transport providers, and service partners, as well as tax advisers, financial institutions, or public authorities (such as the tax office). The nature and extent of any disclosure are strictly confined to what is required for the respective purpose.

7. Data Erasure

Your master data and further personal records are routinely deleted following the termination of the contractual relationship, and at the latest upon expiry of all statutory retention obligations.

An overview of standard statutory retention periods is available via the Austrian Federal Economic Chamber at https://www.wko.at/service/wirtschaftsrecht-gewerberecht/eu-dsgvo-speicher-und-aufbewahrungsfristen.html.

For all records governed by the 2007 Document Archive Regulation (Urkundenarchiv-Verordnung), we are obligated to retain files for 30 years. We likewise retain relevant documentation for a period of 30 years to safeguard legal, warranty, and intellectual property claims.

For the ongoing maintenance of our client relationships, we retain your personal data for the duration of the active business relationship and for a subsequent five years following its conclusion.

In lieu of deletion, data may be anonymised, ensuring any reference to an individual is irretrievably removed.

Should you submit an application for an appointment with us, your application data will be held for twelve months. Retention of your details within our candidate records for an additional two years takes place only subject to your prior consent.

8. Profiling

We do not use automated data processing procedures to evaluate user behaviour. We do not engage in profiling within the meaning of Art. 4(10) GDPR.

9. Your Rights Concerning Data Processing

9.1. Right of Access (Art. 15 GDPR)

You are entitled to obtain confirmation from us as to whether, and to what extent, your personal data is processed.

9.2. Right to Rectification (Art. 16 GDPR)

Should we hold inaccurate or incomplete personal data concerning you, you may request its rectification or completion at any time.

9.3. Right to Erasure (Art. 17 GDPR)

Should you believe our processing of your personal data to be unlawful, you may request the erasure of your records. However, circumstances may preclude immediate deletion, notably statutory retention duties or obligations to preserve records for the assertion of legal and warranty claims.

9.4. Right to Restriction of Processing (Art. 18 GDPR)

If you contest the accuracy of the data, you may request the restriction of processing while this is verified; likewise if processing is unlawful yet you oppose erasure, if we no longer require the data for the agreed purpose but you require it for the establishment or enforcement of legal claims, or if you have lodged an objection to processing.

9.5. Right to Data Portability (Art. 20 GDPR)

You are entitled to receive the personal data you have provided to us in a structured, machine-readable format, provided the processing is founded upon consent or a contract.

9.6. Right to Object (Art. 21 GDPR)

Where the processing of your personal data is conducted for the performance of a task in the public interest, in the exercise of official authority, or on the grounds of our legitimate interests, you may object to such processing provided there are grounds relating to your particular situation.

9.7. Right to Lodge a Complaint (Art. 77 GDPR)

Should you consider that the processing of your personal data breaches European or Austrian data protection legislation, please contact us directly so we may address your concerns. You also hold the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).

10. Exercising Your Rights

To exercise any of the aforementioned rights, please contact:

CGO Wohnbau GmbH
Kronthalerstraße 4
6330 Kufstein
Österreich

T: +43 5372 62404
M: office@cgo.at
UID: ATU38528704

10.1. Proof of Identity

To safeguard your privacy and individual rights, we reserve the right to request proof of identity should any doubt arise.

10.2. Excessive Requests

Should you submit requests that are manifestly unfounded or excessive, notably due to their repetitive nature, we reserve the right to charge a reasonable administrative fee or refuse to act on the request.

10.3. Obligation to Cooperate

In accordance with statutory cooperation obligations, we are required to surrender data upon lawful request pursuant to statutory requirements (e.g. Code of Civil Procedure, Code of Criminal Procedure, etc.).

11. Validity

This Privacy Policy takes effect from 1 August 2019 and supersedes all prior privacy provisions.