Data privacy notice

1. Purposes of data processing

We process personal data primarily for the following purposes:

• Processing offers and enquiries to us, e.g. by (potential) transport partners, by persons who want to commission transports, deliveries, orders or the like or are otherwise looking for a collaboration
• Contract negotiations and offer/contract preparation
• Assessment of suitability as a contractual partner, e.g. credit checks on potential customers, suppliers, etc.
• Handling our contractual and business relationships, e.g. execution of transports (scheduling) and deliveries, fulfillment of inventory and leasing contracts, accounting, dunning, handling complaints and claims, quality management, processing our purchasing, optimisation of our services through the use of business applications (e.g. transport monitoring, portals, etc.).
• Customer relationship, i.e. sending information, newsletters, offers and advertising material, ongoing customer support, organising events etc.
• Provision and administration of insurance, handling of claims
• Fleet Management: Maintenance and servicing of our vehicles
• Product development
• Management of affiliated companies
• Operation of the IT infrastructure, e.g. ensuring the security, the current state of the technology, maintenance, etc.
• Provision of the websites: Improving and developing websites, creating usage statistics, identifying, preventing and investigating attacks on the websites, etc.




We receive personal data

• from yourself: e.g. in enquiries to us, in the initiation of contracts, in the context of fulfilling contracts concluded with us
• from affiliated companies within the WALTER GROUP
• from third parties e.g. from transport partners or customers for order processing
• from publicly available sources, e.g. commercial register, land register, edict file, register of associations, trade register
• from your web browser (automatically) when visiting our websites according to the settings you have chosen



The provision of your personal data is voluntary. However, business relationships with us will not be possible if the necessary personal data is not available to us. In the same way, we can't guarantee all the functions of our websites if you do not provide the necessary personal data.

2. Processed data categories

• Name data, e.g. first name, surname, username, etc.
• Personal data, e.g. age, gender, date of birth, nationality, role within the company, ID copies, etc.
• Contact data, e.g. address, telephone number, e-mail address, etc.
• Identification data, e.g. personal ID card number, passport number, customer number, etc.
• Bank data, e.g. account number, information on creditworthiness, etc.
• Official data, e.g. reference number, tax number, attachment of salary, tenant pass (Germany)
• Vehicle data, e.g. vehicle number, chassis number, engine number, registration plate, registration certificate, fuel card, forklift licence information, etc.
• Image files and video recordings
• IT usage data, e.g. connection data, logging information, access information, IP address, referrer, usernames for externally accessible systems, etc.
• Website usage data: date and time of request, IP address, name and version of the web browser, certain cookies, etc.
• Information on the behaviour of persons, e.g. notes on response behaviour and reminders, correspondence and explanations of ongoing surveys, etc.
• Racial/ethnic origin, e.g. birthplace on ID cards, etc.
• Location data, e.g. GPS data, time stamp for GPS signal, location data (latitude and longitude), etc.

3. Legal basis of processing

Legal bases for our processing of your data are:

• Contract fulfillment and implementation of pre-contractual measures (Article 6 Paragraph 1 (b) GDPR), e.g. when we organise the smooth processing of transports and deliveries, process complaints and damage reports, create invoices, operate quality management, prepare offers, process and respond to your enquiries, etc.
• Our overriding legitimate interest (Article 6 Paragraph 1 (f) GDPR), e.g. when we provide you with tailored information and offers, unless consent is required: our data processing in the context of prosecution, forwarding driver data, if this is necessary for the handling of the transport and there is no direct contact with the driver, processing of data that is necessary for the functions of our websites, etc.
• Legal obligations (Article 6 Paragraph 1 (c) GDPR) e.g. tax obligations, obligations according to road traffic regulations, motor vehicles act, administrative penal law, administrative procedure act, money laundering regulations, etc.
• As far as none of the aforementioned legal bases exist, our data processing is based on your consent in accordance with Article 6 Paragraph 1 (a) GDPR. You, of course, have the right to revoke your consent at any time. However, the revocation of consent does not affect the lawfulness of processing carried out on the basis of consent until the revocation (i.e. the revocation does not affect the past).

4. Forwarding of your personal data

For the aforementioned reasons we may forward your personal data to the following recipients:

• Companies that are part of our group as well as their employees
• Third parties employed by us, e.g. IT service providers, print service providers, data centres, hosting, software and service providers e.g. for sending newsletters, service providers in the area of claims settlement and loss adjustment (insurances and insurance partners), property management, lawyers, tax advisers, notaries, auditors, etc.
• Persons in a business relationship with us, e.g. transport partners, suppliers, trade partners, etc.
• Public bodies, e.g. customs offices, Federal Ministry of the Interior, embassies, district authorities, etc.

In some cases, data is also forwarded to recipients outside Austria and, in exceptional cases, to non-secure third countries. In this case, however, we ensure that suitable privacy safeguards are in place, e.g. through binding intra-corporate data protection regulations or EU standard data protection clauses.

5. Storage period

Your personal data will only be stored by us for as long as it is reasonably necessary to achieve the aforementioned purposes. We also store your personal data for as long as there are statutory retention obligations or the limitation periods for potential legal claims have not yet expired.

6. Your rights relating to personal data

You are entitled (subject to applicable law), among other things, (i) to verify whether and what personal data we have stored about you and to receive copies of this data, (ii) to request the rectification, amendment or deletion of your personal data that is incorrectly or improperly processed, (iii) to request us to limit the processing of your personal data and (iv) to object to the processing of your personal data or revoke the previously given consent for the processing in certain circumstances, (v) to request data portability, (vi) to know the identity of third parties to whom your personal data has been forwarded and (vii) to lodge a complaint with the relevant authority.

7. Cookies

So-called cookies are used on our websites. A cookie is a small file that can be stored on your computer when you visit a website. In principle, we use cookies to provide users with additional functions on the website, e.g. to help you navigate a website, to enable you to continue using the website where you left it and/or store your preferences or settings, if you visit the website again. Cookies can't access, read or edit any other data on your computer.

Most of the cookies on our websites are so-called session or temporary cookies. They are automatically deleted when you leave the website. In addition, we use persistent cookies, which remain stored on the hard drive. However, these can be manually deleted in your browser. Otherwise, these cookies last between 1 month and 10 years. We use these persistent cookies to recognise you when you next visit our website in order to make the website more comfortable for you to use and to adapt the website to your requirements in the best possible way.

We also use third-party cookies to help make the website more interesting for you. Therefore, temporary and persistent cookies from third parties are also stored when using the websites, provided we have your consent. The sole purpose of these third-party cookies is to give third party providers the opportunity to address you with targeted advertising. We assume no liability for the lawful use of cookies by third parties.

You can actively consent to the storage of cookies over and above a technically required extent when visiting our websites. You also have the option to enable or disable the storage of only certain types of cookies. If you want to adjust your cookie settings at a later date you can do so in the cookie settings at any time.

Cookie consent
Our website uses OneTrust cookie consent technology to obtain your consent to the storage of certain cookies on your device and to document this in compliance with data protection regulations. OneTrust Technology Ltd is the provider of this technology.

When you enter our website a connection to the OneTrust servers is established in order to obtain your consent to the use of cookies. OneTrust then stores a cookie in your browser in order to be able to assign the consent you have given or revoke it. The data collected in this way is stored until you ask us to delete it or you delete the OneTrust cookie yourself or the purpose for storing the data no longer applies.

OneTrust is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6 paragraph 1 clause 1 (c) of the GDPR.

We have concluded an order processing contract with OneTrust. This is a contract required by data protection law which ensures that OneTrust only processes the personal data of our website visitors according to our instructions and in compliance with the GDPR.

You can also control cookies on your computer by selecting your browser settings to get a notification when a website wants to store cookies. You can also block or delete cookies if they are already stored on your computer.

If cookies are associated with the storage of personal data in a third country outside the scope of the General Data Protection Regulation (GDPR) and without bilateral agreements on an appropriate level of protection, they will only be stored if you have given your consent.

However, disabling, blocking or deleting cookies may affect your online experience and prevent you from fully using our websites.

8. Google Analytics

Our websites use Google Analytics, a web analytics service from Google Inc. ("Google"), when you have agreed to the use by activating performance cookies in the cookies settings. Google Analytics uses cookies to allow an analysis of the use of the website and to provide us with easy-to-use website access statistics in a cost-efficient way. The information generated by the cookies about the use of our websites is usually transferred to a Google server in the USA and stored there, if you have given your consent.

Our websites use the option offered by Google Analytics for IP anonymisation. This means that the IP address of the user is being shortened by Google within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the websites, compile reports about website activity and to provide us with other services relating to website and internet usage. The IP address provided by the user's browser as part of Google Analytics will not be merged with any other Google data.

You can prevent the collection of data generated by the cookie and relating to use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en

Further information about Google's Terms of Use and Google's Privacy Policy can be found at http://www.google.com/analytics/terms/de.html or http://www.google.at/intl/at/policies.

9. Google Re-Marketing

The websites use Google Re-Marketing, when you have agreed to the use by activating marketing cookies in the cookies settings. Google Re-Marketing is an advertising service from Google Inc. that allows us to present you with targeted advertising of suspected interest based on your usage behaviour during previous visits to our websites, if you have given your consent. This advertising only appears on Google advertising spaces, either on advertising space from Google Adwords or the Google Display Network.

You can opt out of Google Re-Marketing in Google Ads Preference Manager or edit your settings.

10. Google Maps

Our websites use the Google Maps map service from Google Inc.. The user's IP address is transmitted between the browser and the Google Maps servers. If necessary this data is also transmitted to a Google Maps server in the USA.

Data is processed on the basis of article 6 paragraph 1 (f) GDPR (legitimate interest in making it easier to find the places we have specified on the website).

11. Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Inc.

The purpose of reCAPTCHA is to check whether data on our websites (e.g. in a contact form) is entered by a human or by an automated programme. For this, reCAPTCHA analyses the behaviour of the website visitor based on various criteria. This analysis starts automatically as soon as the website visitor enters the website. reCAPTCHA analyses various information (e.g. IP address, how long the visitor spends on the website or mouse movements performed by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

Data is processed on the basis of article 6 paragraph 1 (f) GDPR (legitimate interest in protecting websites from automated fradulent spying and SPAM).

12. Google YouTube

We have embedded YouTube videos on our website. This allows us to present you with interesting videos directly on our website. YouTube is a subsidiary of Google Inc. The video portal is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page on our website that has an embedded YouTube video, your browser automatically connects to the YouTube or Google servers. Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all data processing in Europe.

Data is processed based on article 6 paragraph 1 (f) GDPR.

13. Google Optimize

If necessary, we use Google Optimize temporarily and on individual pages, a service provided by Google Inc. Google Optimize analyses the use of different versions of the website so that we can adapt the user-friendliness to the behaviour of the website visitor. Google Optimize uses cookies to reference the versions.

Data is processed based on article 6 paragraph 1 (f) GDPR.

14. Microsoft Bing Ads

The websites use Bing Ads Universal Event Tracking (UET) if you have agreed to its use by activating marketing cookies in the cookie settings. Bing Ads is a service provided by the Microsoft Corporation that allows us to provide you with targeted advertising of presumed interest based on your usage behaviour during previous visits to our websites. In this case your data will be forwarded to the operator of Bing Ads, the Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States.

Further information about the Microsoft data protection regulations can be found at https://privacy.microsoft.com/privacystatement.

You can change your settings for Microsoft interest-based advertising at https://account.microsoft.com/privacy/ad-settings/.

Data processing is carried out on the basis of Article 6 paragraph 1 (a) GDPR.

15. Hotjar

Occasionally and temporarily we use Hotjar to get a better understanding of the needs of our users and to optimise the website design, when you have agreed to the use by activating performance cookies in the cookies settings. Using Hotjar technology we get a better understanding of our users' experiences with the websites e.g. how much time users need to fill in forms. Hotjar collects information about the user's device, its anonymised IP address, the geographic location, language settings as well as user interactions such as mouse movements, clicks and keyboard input. In addition, Hotjar uses cookies to recognise visitors. The information will not be used by Hotjar or us to identify individual users or be merged with other data about individual users. For more information, Hotjar's Privacy Policy can be found here.

16. Social media plugins

Our websites use social media plugins from Walls.io. These allow us to display social media updates from our company directly onto the website. When these plugins are called up the user's IP address is transmitted to Walls.io. Walls.io data processing takes place exclusively in the EU. Walls.io is operated by Walls.io GmbH in Vienna, Austria.

Data is processed based on article 6 paragraph 1 (f) GDPR.

17. SmartSupp

We use the SmartSupp chat plugin on individual sections of our websites. The provider is SmartSupp., Milady Horakove 13, 602 00 Brno, Czechia. You can use the SmartSupp Chat to communicate directly with our employees. Data is collected, stored and processed for the purpose of responding to your enquiries. SmartSupp records the history of your visited websites (URL and referrer) and information about the browser used. The contact details and content of enquiries that you have voluntarily provided via this form of contact will also be transmitted. Session cookies are used and deleted after visiting the website. The transmitted data is stored on servers in the European Union.

Data is processed based on article 6 paragraph 1 (f) GDPR.

18. Cloudflare

In order to secure our websites and optimise loading times, CloudFlare is used as a web firewall and CDN (Content Delivery Network). Therefore, all enquires are forced to be routed through their server and consolidated into statistics that cannot be deactivated.

Data is processed based on article 6 paragraph 1 (f) GDPR.

More information about security and data protection at CloudFlare can be found at 
https://www.cloudflare.com/privacypolicy/.

19. Short.IO

We use "Short.IO" to make our websites accessible via short and meaningful URLs under our own vanity domain. The provider is Short.cm Inc, Delaware, USA.

Short.IO enables the creation and management of so-called short URLs, informative pretty URLs and associated QR codes. When these URLs are accessed, Short.IO carries out a corresponding redirect to the stored target page.

Data processing is carried out on the basis of Article 6 paragraph 1 (f) GDPR. We have a legitimate interest in making our websites accessible via simple and meaningful short URLs.

20. Lunio

We use "Lunio Click Fraud Prevention" (hereinafter "Lunio") to prevent fraud attacks on our GoogleAds adverts. The provider is PPC Protect Limited, The Strawberry Fields Digital Hub, Euxton Lane, Chorley, United Kingdom, PR7 1PS.

Lunio checks clicks on our GoogleAds adverts for attempted fraud. Illegal sources are subsequently blocked from our GoogleAds adverts via IP address.

Data processing is carried out on the basis of Article 6 paragraph 1 (f) GDPR. We have a legitimate interest in protecting our adverts from click fraud and thus from financial damage.

19. Our contact details

We are available to answer questions or concerns about the processing of your personal data.

Inquiry regarding the General Data Protection Regulation (GDPR)