1. Controller within the meaning of Art 4 (7) GDPR

Transcription

1 Data Protection Information Art 13, 14 GDPR WEBSITE In our data privacy statement, we provide you with information about the processing of your personal data within the scope of our website. We at Gebrüder Weiss consider it a matter of course to handle your personal data responsibly whenever you use our webpages and communicate with us by electronic means. We take all the required measures to protect the personal data provided by you and to comply with applicable national and European data protection regulations at all times. The collection, processing and use of the data by Gebrüder Weiss is exclusively based on applicable legal provisions, in particular in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council dated 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC GDPR), the Data Privacy Act 2018 (DSG 2018), the Privacy and Electronic Communications Directive (Directive 2002/58/EC of the European Parliament and of the Council dated July 12, 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector eprivacy Directive) and the Telecommunications Act (TKG 2003), as well as any other applicable regulations under Union law. 1. Controller within the meaning of Art 4 (7) GDPR gw-world.com is a website that is operated by Gebrüder Weiss Gesellschaft m.b.h Transport and Logistics Bundesstrasse 110 A-6923 Lauterach FN k T F service@gw-world.com who is the controller within the meaning of Art 4 (7) GDPR. Should you have any questions regarding the protection and safety of your data, or if you want to assert your data privacy-related rights and claims, please call, or send an to the above-stated contact. During access to or use of gw-world.com, data will be collected and used that are personal and/or may influence your privacy as described in greater detail below. You will not be able to use the services offered unless you provide your data.

2 2. Processing of personal data, purposes of data processing and legal basis 2.1. Visit to the website Each access to the gw-world.com website is logged by Gebrüder Weiss. Personal data In the process, the following data will be recorded about you: - IP address - date and time of your visit - duration of the visit - pages called up - continent - country - region - ZIP code - city/town - language - longitude and latitude - type and version of browser - operating system - referrer URL (the page from which you were linked through to our website) - Internet Service Provider Purpose of data processing This data will be statistically analyzed in order to modify our website according to the users needs, to optimize the user friendliness of our website, to improve the services offered on the website, to identify any errors more quickly, and consequently optimize the website, as well as to control server capacities. Your IP address (internet identifier of your computer, consisting of numbers) will not be analyzed by us. Accordingly, the usage data will not deliberately be linked up with personal data at any time. Storage period Your data will not be stored. Legal basis The legal basis for the processing of access data according to Art 6 (1) (f) GDPR is the legitimate interest (online service offer and data security) of Gebrüder Weiss Data processing / press release distribution list On gw-world.com you can consent to being sent current news from our press release distribution list. Personal data If you register for our press release distribution list, you can enter and notify Gebrüder Weiss of the following of your personal data: - salutation - first name and surname - address (mandatory)

3 - category: daily press, business press, technical journals (mandatory) - country Purpose of data processing The data will be used to send you current press releases by , depending on the category chosen. To avoid any abuse of addresses, subscribers must confirm the registration for our newsletter in the course of an automated process by (double opt-in). Legal basis The legal basis of data processing for the purpose of sending you current press releases is your consent (acc. to Art 6 (1) (a) GDPR). By sending the form (click on the Send button), you consent to the data entered by you being processed for the specified purposes. Unsubscribe option Unsubscribing from the press release distribution list is effected through the Unsubscribe Link that is shown in each of our press releases. You may also declare your revocation by sending an to press@gw-world.com. By revoking the consent, the lawfulness of the consent-based data processing effected until the revocation shall not be affected. If you revoke your consent, you will not receive any further press releases after your notification has been processed. Data recipients For the purpose of dispatching the press releases, your data will be transmitted to our marketing service provider, who is responsible for handling the press releases for us. Storage period The data processed for the above-stated purposes will basically be stored until revocation of your consent to being sent press releases. Moreover, only the data absolutely required will be stored based on applicable legal provisions or retention obligations for the purpose of providing evidence of your consent and/or revocation Data processing/contact inquiry The contact form available on our homepage gw-world.com serves to establish contact and/or to submit your remarks. Personal data You need to enter some data to establish contact. Specifically, also personal data will be processed and stored in the process, namely - salutation - name (mandatory) - company - (mandatory) - telephone - city (town)/country - subject (mandatory) - message (mandatory)

4 Purpose of data processing The data will be used to process your inquiry and to get into contact with you in this respect. Legal basis The legal basis for data processing to handle your inquiry is the legitimate interest (adequate relationship with contact person) of Gebrüder Weiss acc. to Art 6 (1) (f) GDPR. Potentially, the inquiry may also be considered as a pre-contractual measure or be associated with a contract (Art 6 (1) (b) GDPR). Data recipients For the above mentioned reasons your data may be sent also to the respective subsidiary of Gebrüder Weiss. Storage period The data processed for the above-stated purposes will basically be stored until your inquiry has been processed. Moreover, only the data absolutely required will be stored based on applicable legal provisions or retention obligations. Should your inquiry relate to the performance of our contract, the data shall be stored for a maximum of seven years ( 212 UGB [Austrian Business Code], 132 BAO [Austrian Tax Code]) Data processing/transport inquiry The form provided for transport inquiries on our homepage gw-world.com serves to provide a nonbinding initial estimate of the potential costs. Personal data You need to enter some data to submit a transport inquiry. Specifically, also personal data will be processed and stored in the process, namely - type of shipping (mandatory) - contact details of both shipper and recipient (mandatory) o status at Gebrüder Weiss o contact person o company o ZIP code o city/town o telephone number o address - number/type and weight of packaging units (mandatory) - dimensions - terms of delivery: final destination, hazardous goods - comments Purpose of data processing The data will be used to process your inquiry and to get into contact with you in this respect. Legal basis The legal basis for data processing for the purpose of handling your inquiry is the pre-contractual step associated with your inquiry, acc. to Art 6 (1) (b) GDPR.

5 Data recipients For the above mentioned reasons your data may be sent also to the respective subsidiary of Gebrüder Weiss. Storage period The data processed for the above-stated purposes will basically be stored until your inquiry has been processed. Moreover, only the data absolutely required will be stored based on applicable legal provisions or retention obligations. Should a contract be concluded following your inquiry, the data shall be stored for a maximum of seven years ( 212 UGB [Austrian Business Code], 132 BAO [Austrian Tax Code]) Data processing for registration of customers and partners After registering on our homepage gw-world.com, you can obtain information about the status of your shipments (national and international land transports) and about orders (inbound and outbound). You may also access relevant data relating to your warehouse activities in the iwis (internet Warehouse Information System) around the clock. In this way, you will always be up-to-date. Personal data During transmission of the form for registration, all data entered by you will be stored, namely: - company name - master customer number (mandatory) - other customer numbers - first name and surname (mandatory) - (mandatory) - telephone number - address (street, ZIP code, city/town) - country - allocation of registration to isis or iwis You may also use the function by entering the following data in the Track & Trace and Order Information form: - sender/recipient - reference number Purpose of data processing The data will be used to track where your shipment is at the respective moment; to obtain information about your warehouse activities and to manage your customer/partner account. Legal basis The legal basis for data processing to track shipments, to access warehouse activities and to manage customer/partner accounts is the contract between Gebrüder Weiss and yourself that is associated with the service (Art 6 (1) (b) GDPR). Data recipients For the above mentioned reasons your data may be sent also to the respective subsidiary of Gebrüder Weiss.

6 Storage period The personal data will be stored for the duration of valid registration and then deleted. Moreover, only the data absolutely required will be stored based on applicable legal provisions or retention obligations Track & Trace and Order Information By using the Track & Trace and Order Information function on our homepage gw-world.com, you can obtain information about the status of your shipments (national and international land transports) and about orders (inbound and outbound) anywhere and at any time. Personal data During transmission of the form, all data entered by you will be stored, namely: - company name - master customer no. (mandatory) - other customer numbers - first name and surname (mandatory) - (mandatory) - telephone number - address: street, ZIP code, city/town - country - allocation of registration to isis or iwis Purpose of data processing The data will be used to track where your shipment is at the respective moment; to obtain information about your warehouse activities and to manage your customer/partner account. Legal basis The legal basis for data processing for registration purposes is the contract between Gebrüder Weiss and yourself that is associated with the service (Art 6 (1) (b) GDPR). Data recipients For the above mentioned reasons your data may be sent also to the respective subsidiary of Gebrüder Weiss. Storage period The personal data will be stored for the duration of valid registration and then deleted. Moreover, only the data absolutely required will be stored based on applicable legal provisions or retention obligations esourcing The esourcing platform is the central transaction medium for business relationships between suppliers and the Gebrüder Weiss Group and its subsidiary companies; it serves as a communication platform. Personal data - company name (mandatory) - industry - description of the company - D-U-N-S number

7 - street address (mandatory) - ZIP code and city/town (mandatory) - region - country (mandatory) - homepage - how did the contact with Gebrüder Weiss come about - contact person o salutation o first name and surname (mandatory) o function o telephone number (mandatory) o cell phone number o fax o address (mandatory) o language o time zone Purpose of data processing The data will be used to facilitate communication between suppliers and Gebrüder Weiss, to process inquiries and offers, and to consider applications from suppliers. Legal basis The legal basis for data processing for registration purposes is the pre-contractual step associated with your inquiry and/or the contract between Gebrüder Weiss and yourself that is associated with the service (Art 6 (1) (b) GDPR). Data recipients For the above mentioned reasons your data may be sent also to the respective subsidiary of Gebrüder Weiss. Storage period The personal data will be stored for the duration of valid registration and then deleted. Moreover, only the data absolutely required will be stored based on applicable legal provisions or retention obligations. Should the processing of data relate to the performance of the contract, the data shall be stored for a maximum of seven years ( 212 UGB [Austrian Business Code], 132 BAO [Austrian Tax Code]) Data processing/online application wizard The registration for our online application wizard and any associated application on our homepage gw-world.com facilitates the processing of job applications at Gebrüder Weiss Gesellschaft m.b.h and its subsidiary companies (hereinafter Gebrüder Weiss collectively). Personal data If you use the registration form, the following personal data will be stored for registration: - first name (mandatory) - surname (mandatory) - (mandatory)

8 If you also want to apply for any specific position or if you want to send an unsolicited application, the following of your personal data will be stored beyond that: - salutation (mandatory) - date of birth - street address - address suffix - country, region - city/town, ZIP code - private telephone number (mandatory) - internet references including description - annexes: photo, cv, other, certificate - training/further education - work experience - preferences o type of contract: limited, indefinite o type of employment: full time, part time o willingness to travel o willingness to relocate o description o preferred activity o preferred place of work - letter of introduction o reference, how did you come to know about GW (mandatory) o source of application (mandatory) o further information o description as to why you are applying for the position Purpose of data processing The data will be used to test your suitability for the position offered and/or your unsolicited application and to manage your candidate account. Legal basis The legal basis for data processing for registration purposes and to check your suitability for the position offered or to consider your unsolicited application is the pre-contractual step associated with your inquiry (acc. to Art 6 (1) (b) GDPR). Another legal basis for data processing is the legitimate interest (reasonable relationship with potential employees) of Gebrüder Weiss. Data recipients Applications addressed to subsidiaries will be stored at the parent company Gebrüder Weiss Gesellschaft m.b.h in Austria, but can be accessed by the subsidiary companies. If you are applying for a job at a subsidiary company of Gebrüder Weiss, your data will accordingly be transmitted to the relevant subsidiary company for the purpose of considering your suitability for the position offered or your unsolicited application. Transmission to Switzerland takes place on the basis of an appropriate adequacy decision. Storage period You may yourself inquire, amend or delete the personal data that we have stored about you. Obsolete versions of your candidate profile will not be stored.

9 If an employment contract is concluded, your personal data will be stored for the purpose of managing your employment, subject to applicable legal provisions. If, however, no employment contract is concluded, Gebrüder Weiss guarantees that your application documents will be deleted in compliance with applicable legal provisions (( 15 (1) in connection with 12 (1) and (5) GlBG (equal treatment act), 29 (1) in connection with 26 (1) and (5) GlBG, 7k (2) (1) in connection with 7e (1) and (2) BEinstG (act governing the employment of handicapped persons) within a period of six months after notification of the negative decision Licensed photos/use of images Individual photos on the website originate from the following agencies: gettyimages.com, shutterstock.com, istockphoto.com and fotolia.com. We dispose of license agreements of the providers for the relevant rights of use. 3. Web tracking 3.1. Google Analytics and Google Remarketing Purpose of data processing: This website uses Google Analytics and Google Remarketing, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called cookies, or text files that are stored on your computer enabling an analysis of your use of the website. As a rule, the information generated by cookies regarding your use of the website is transferred to and stored on a server in the USA that is operated by Google. Third-party providers, including Google, use the cookies to place ads on the basis of previous visits by a user to that website. In this way (if applicable), Google provides a service associated with the use of the website and with Internet use in general and transmits cookie information to third parties, provided it is required under the law or to the extent that this data is processed by third parties on behalf of Google. We have activated IP-anonymization on this website. Thereby, your IP address will first be truncated by Google within the member states of the European Union or in other signatories of the treaty on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA to be truncated there. Google will use this information on behalf of the operator of this website in order to evaluate your use of the website, compile reports regarding website activities and provide further services for the website operator relating to website and Internet usage. The IP address sent by your browser when using Google Analytics is not combined with any other Google data. You can prevent the storage of cookies through a corresponding setting in your brows-er software; please note, however, that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting and processing data relating to your use of the website (incl. your IP address) that is generated by the cookie by downloading and installing the available browser plug-in We will carry out anonymized click tracking for statistical purposes. But this does not allow to retrace individual recipients. The tracking of personal responses enables us to optimize the content of our

10 newsletter and to adjust the same to the changing habits and technical requirements of our users. The data collected will be analyzed in anonymized form; accordingly no personal data will be analyzed. You can prevent the data use of Google Analytics if you click on the following link. An opt-out cookie will be set which prevents the collection of your data in future visits on our website: deactivate Google Analytics This website uses the Remarketing function of Google Inc. ( Google ). This function serves to present interest-based publicity ads to website visitors within the scope of the Google advertising network. The browser of the website visitor stores so-called cookies, or text files that are saved on your com-puter, allowing for the recognition of the visitor when he or she calls up any websites belonging to the advertising network of Google. Publicity ads can then be presented to the visitor on those pages that relate to content which the visitor has previously called up on websites using the Remarketing function of Google. Google claims not to collect any personal data during that process. Should you not agree to Google s Remarketing function nevertheless, you can deactivate the same in general by making the corresponding settings at Google AdWords and Google Conversion-Tracking Purpose of data processing: This website uses Google AdWords. AdWords is an online ad program of Google Inc., 1600 Amphittheathre Parkway, Mountain View, CA , United States ("Google"). In the course of Google AdWords we use so-called conversion tracking. If you click on an ad placed by Google a cookie for conversion tracking is placed. Cookies are small text files that are stored on the computer of the user by the internet browser. Thee cookie expires after 30 days and does not serve for an personal identification purpose of the user. If the user visits certain pages of the website and the cookie is not expired yet,google and Gebrüder Weiss can identifiy that the user has clicked on an add to get to this page. Every Google AdWords customer gets a different cookie. The cookies can not be tracked through the websites. The collected information with the help of conversion cookies serve to prepare statistics of AdWords customers who decided for conversion tracking. Customers get to know the total number of users who have clicked on the ad and who have been redirected to a page which includes a conversion tracking tag. No information will be provided where the user can be identified by person. If you do not want to participate in the tracking, you can easily contradict if you deactivate the cookie of Google conversion tracking in the internet browser in your user settings. You will then not be recorded in the statistics. The storage of "Conversion cookies" is based on Art 6 Abs 1 lit. f. GDPR. The website operator has a legitimate interest on the analysis of user behavior to optimize the web offer as well as ads. More information on Google AdWords and Google conversion tracking can be found in the data policy of Google: / You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, the acceptance of cookies for certain cases or generally exclude and enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

11 4. Cookies On this page, you will find information about the handling of cookies and personal data (tracking technology) Technical cookies Purpose of the use of cookies Cookies are text files that are stored on your computer, primarily enabling an analysis of your use of gw-world.com. Gebrüder Weiss uses or places cookies in accordance with the law of the European Union and of Austria (GDPR, Art 5 (3) eprivacy Directive as well as 96 (3) TKG 2003) Gebrüder Weiss uses information passed on through cookies, such as the browser types used, the operating system, as well as activities such as duration of the visit, number of pages visited or the time of your visit. The usage data will be statistically analyzed only internally in order to adjust our website to the needs of the users. Your IP address (Internet identifier of your computer, consisting of numbers) will not be analyzed by us. Accordingly, the usage data will not be linked up with personal data at any time. After termination of your visit to our website, the data contained in the cookies are no longer available to us. Make sure that your computer settings reflect whether you want to accept cookies. You may choose your browser settings such that an alert will appear on the display prior to saving a cookie or that the placing of cookies is not possible. But please be aware that in that case you renounce the benefits of personal cookies and that certain applications may not be available in full. Legal basis (technical cookies) The legal basis for the placing of cookies is the legitimate interest of Gebrüder Weiss (Art 6 (1) (f) GDPR), which consists in maintaining the website functions as well as the technically flawless provision of the services of Gebrüder Weiss Other cookies Legal basis (other cookies) When using or placing cookies that include personal data or affect privacy, Gebrüder Weiss will previously ask for your consent (Art 6 (1) (a)), in fact by your active behavior when you read and accept the cookie information after being informed about the purposes of the cookies used through our cookie banners on gw-world.com, thus agreeing to the cookies, by clicking on accept. By not accepting the consent, the lawfulness of the consent-based data processing effected until revocation shall not be affected. You have the option to receive further information about the individual cookies via a link in the cookie banner, and you can block the placing of individual or all cookies through your browser settings. The following cookies will be placed: Name Domain Expiration Time DIE doubleclick.net 1 year, 1 month Information Used by Google/doubleclick.net to select ads, based on what s relevant to a user, to improve reporting on campaign performance and to avoid showing ads that the user has already seen." 1P_JAR.google.com 1 month Google advertising cookie used for user tracking and ad targeting purposes. These cookies are

12 used to gather website statistics, and track conversion rates. CONSENT.google.com ~20 years This cookie saves the cookie consent settings. DV browser session This cookie is used for Google ad personalization. UULE 1 day This cookie is used for Google Analytics Remarketing. NID google.com 6 months Google uses cookies like NID and SID to help customize ads on Google properties, like Google Search. For example, we use such cookies to remember your most recent searches, your previous interactions with an advertiser s ads or search results, and your visits to an advertiser s website. This helps us to show you customized ads on Google. _ga gw-world.com 2 years lection/analyticsjs/cookie-usage Google Universal Analytics collects information about visits, sessions, and campaigns for analytical purposes. _gat_ua gw-world.com 1 minute lection/analyticsjs/cookie-usage This cookie does not store any user information, it's just used to limit the number of requests that have to be made to Google/doubleclick.net (see cookie IDE) _gid gw-world.com 24 hours lection/analyticsjs/cookie-usage This cookie is used in conjunction with _ga to distinguish unique users. cookieconsent_dismiss gw-world.com 1 year This cookie flags that you accepted/dismissed the cookie info message. fe_typo_user gw-world.com browser session georedirected gw-world.com browser session domainredirected gw-world.com browser session The cookie used for the front-end user session. We can't disable this cookie. This cookie flags the location details in your IP adress to redirect to the correct language of the website. This cookie saves information about redirects from old to new URLs. selectedlanguage gw-world.com 31 days This cookie saves the selected language. tx_retargeting gw-world.com 30 days This cookie identifies the user returning by the tags Cookies of third parties If you visit a page on gw-world.com, that contains embedded content (e.g. YouTube), cookies may be stored by these websites as well. The cookie settings of third parties will not be checked by us. Accordingly, we recommend to obtain information for the use of cookies on the respective website.

13 4.4. Further information on cookies Further general information on cookies and their management is available at Please remember that we are not responsible for the content of external websites Social plug-ins & tools Social plug-ins ( Plug-ins ) & tools have been integrated on the website. The relevant social networks & tools are the following: facebook, operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, Comp. Reg. no / Facebook Inc., 1601 Willow Road, Menlo Park, CA Twitter, operated by Twitter International Company, 1 Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, Comp. Reg. no / Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, Comp. Reg. no Xing, operated by XING SE, Dammtorstrasse 30, Hamburg, Germany, Comp. Reg. no. HRB YouTube operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA Google Plus, operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA Google WebFonts, operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA Google Plus, operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA Google recaptcha, operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA The plug-ins are marked with a logo or the designation of the operator. If you call up our website, which contains any of those plug-ins, your browser will establish a direct connection to the operators servers. The content of the plug-in is transmitted by the operator directly to your browser and embedded in the website by the same. By embedding the plug-ins, the operator receives the information that you have called up the relevant website. If you have logged in at the operator, the latter can match the visit with your user account. If you interact with the plug-ins, e.g. by activating a plug-in button, your browser will send the corresponding information directly to the operator, and the information will be stored there. By logging out from your user account, you can prevent the operator from matching the stored information with your user account. The purpose and extent of data collection and the further processing as well as the use of the data by the operator including your associated rights and optional settings to protect your privacy are contained in the respective notes on data protection: facebook: Twitter: Instagram: LinkedIn: Xing: YouTube: Google Plus: Google WebFonts: Google Maps: Google recaptcha:

14 5. Storage period At Gebrüder Weiss, your personal data will be stored for varying periods depending on the necessity and the purpose (see the information above) Deletion of the data shall be effected as described above, unless any legal retention obligations (under business and/or tax law) exist. Based on applicable legal provisions ( 212 UGB, 132 BAO etc) we are obliged, among others, to store certain personal data for a minimum period of seven years. This concerns the following data: - first name - surname - ZIP code - city/town - country - invoice and delivery address - means of payment - client number - order number - name of company and UID number, if applicable Based on applicable legal provisions under 933, 933a, 1486, 1489 ABGB (Austrian Civil Code), we are obliged, among others, to store certain personal data for a minimum period of 3years. This concerns the following data: - salutation - title - date of birth - telephone number - user name - address: - password 6. Data security 6.1. Security measures implemented Gebrüder Weiss takes measures to ensure an appropriate level of protection with respect to data processing security acc. to Art 25 and Art 32 GDPR. We have taken comprehensive security measures to protect your data against unauthorized third-party access. In doing so, we use a data protection management system as well as ISO certification. Please note, however, that it is equally important to protect your computer against unauthorized access, for instance by only allowing trustworthy third parties to use the same and by always using upto-date firewall and antivirus software, and by checking your s for authenticity and reliability (phishing mails).

15 6.2. Exclusion of liability No liability shall be assumed for any loss caused due to the fact that you fail to adequately protect your computer against third-party access. 7. Rights of data subjects (Art GDPR) As a user of our website, you are entitled to the following rights: 7.1. Right of access (Art 15 GDPR) You are entitled to demand information as to whether any personal data is processed that relates to you. Moreover, you are entitled to request further information about the specific purposes of data processing, the categories of personal data, the recipients or categories of recipients of personal data, the storage period, the existence of any right to erasure or rectification of your personal data, the existence of any right to lodge a complaint, as well as with respect to all available information about the source of your data Right to rectification (Art 16 GDPR) You have the right to demand immediate rectification of your personal data Right to erasure (Art 17 GDPR) You have the right to demand immediate erasure of your personal data Right to restriction of processing (Art 18 GDPR) In the instances listed in Art 18 GDPR (for instance, the accuracy of the personal data is contested by you or the processing is unlawful), you are entitled to demand restriction of data processing Right to data portability (Art 20 GDPR) You are entitled to receive the personal data about you, which you have provided to us, in a commonly used structured format and to demand that we transmit said data to another controller Right to object (Art 21 GDPR) You have the right to object to the processing of your personal data, which is processed within the scope of our website Revocation of declarations of consent (Art 7 GDPR) You have the right to revoke, at any time, any consent you have given to us Measures in connection with automated decisions in individual instances, including profiling (Art 22 GDPR) In instances of automated decision-making, including profiling, you are entitled provided that the relevant measure has any legal effect on you or considerably affects you in any similar way to make any other person intervene on the part of the controller, to explain your point of view and to challenge the decision.

16 7.9. Right to lodge a complaint Additionally, you may lodge a complaint at any time with Österreichische Datenschutzbehörde [Austrian Data Protection Authority] Wickenburggasse Vienna T dsb@dsb.gv.at Except for the right to lodge a complaint with the Austrian Data Protection Authority, you may also assert your rights as a data subject vis-à-vis Gebrüder Weiss at the following address: Gebrüder Weiss Gesellschaft m.b.h Transport and Logistics Bundesstrasse 110 A 6923 Lauterach