We hereby inform you about the collection and use of your data as well as about your rights.
The legal basis is the General Data Protection Regulation (GDPR).
1. Responsible and Contact according to GDPR:
RESOUREX GmbH
Management: Matthias Hausegger and Günther Wutzl
Commercial Register Court: Handelsgericht Wien
Commercial Register Number: FN 510137b
Hegelgasse 21/5, 1010 Wien
E-Mail: office@resourex.com
Website: www.resourex.com
2. Collection and Storage of Data when visiting the website
When you visit our website, information is automatically sent to our website server by the browser used on your terminal device. This information is temporarily stored in so-called server log files. The following information is collected:
- Name and URL of the website visited
- Referrer URL
- Date and time of access
- IP address
- Web browser and the operating system used on your terminal device
- Domain name
The legal basis for data processing insofar is Art. 6 para. 1 sentence 1 lit. f GDPR. This data does not allow any conclusions to be drawn about your person. A combination of this data with personal data is not carried out. However, we reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.
The collection of this data is necessary to ensure a smooth connection of the website as well as the comfortable use, delivery and presentation of the contents of our website. We also use this data for the evaluation of system security and stability as well as for statistical purposes, in particular for the optimization of the website, the technology and our offer.
3. Personal data, use and transfer to third parties
Personal data is any information relating to an identified or identifiable natural person. This includes in particular name, address, e-mail address, telephone number and gender.
We only collect, process and use your personal data if you agree to the collection, processing and use or if there is another legal basis in accordance with the GDPR.
You can sell and purchase materials via our platform. In order to use our service via the platform, you must register on our website. We need the following data from you to open the user account:
- Company name
- Address of the company's registered office, if applicable, deviating plant locations with address
- in the case of legal entities, the company register court and the company register number.
- in the case of legal entities, the first and last name of the legal representative
- Contact details of the contact person in the company (name, email address and telephone number)
- Fax number (optional)
- UID number
- Account details of the company
After registration on the website, you will receive an email with a confirmation link. You must create your own password to use the account. This password is also stored by us for data processing. You can then access the platform via email address and password.
In the case of a transaction via our platform, in addition to the data listed above, we process the data of the purchase or sales orders placed by you as well as the purchase contracts concluded by you, in particular material, dimensions and weight of the goods, delivery period, purchase price, date and time of the conclusion of the contract, delivery and invoice address of the buyer and delivery address of the seller. With the processing of the contact person's data provided, we reserve the right to check whether the contact person is actually connected with the registered company.
The data processing takes place for the duration of the existence of the user account. If the user account is deactivated, your data will be deleted and the link to the data of transactions carried out or commissioned by you will be deleted after 6 months at the latest, provided that this data is no longer required by us for the fulfilment of our legal obligations or defence against liability claims.
If you want to do a transaction via our platform, you must post a buy or sell order. This will in particular make the name of your company as well as the place of delivery (plant) visible to other registered users. If a contract is concluded via our platform, you and the contractual partner will receive an automated email ("buy or sell confirmation") with details of the contract including addresses, contact details of the contact persons with telephone number and email address as well as the account details of the contracting companies. If a transaction is stopped, fails or is subsequently not completed, we may provide your contracting party with details of the unsuccessful transaction. In addition, we will only pass on your data to third parties if we are legally obliged to do so or in order to assert, exercise or defend legal claims, provided this is necessary and there is no reason to assume that you have an overriding interest worthy of protection in not having your data passed on. In these cases, your data will only be forwarded on the basis of the GDPR. Other registered users of our platform are not entitled to use the data provided by you in a buy or sell order for other purposes, for example for their own marketing purposes, unless you have expressly given your consent to this. The execution of the contract, in particular delivery and payment, takes place directly between the buyer and the seller. In this respect, it is beyond our knowledge whether and which third parties are involved in the execution of the contract and thus in the processing of your data, and where these third parties are based. RESOUREX GmbH accepts no liability for the transfer of data by the seller or buyer to third parties. It is the respective responsibility of the seller and the buyer to ensure an appropriate level of data protection for data processing and the handling of personal data.
4. Duration of Data Storage and Deletion
We process and store your personal data only for the period that is necessary to fulfil our contractual or legal obligations, especially to maintain your user account for the usability of the platform and to defend against liability claims. We will only store personal data that you have provided to us for the purpose of receiving our newsletter, information and advertising material or for invitations to our events until you revoke your consent for this use of your data. If the purpose of storage no longer applies or if a legally prescribed storage period expires, the personal data will be blocked or deleted.
5. Data Security
Your personal data is protected by appropriate organizational and technical precautions to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved with technological developments. Nevertheless, internet-based data transmissions can have security gaps, so that absolute protection cannot be guaranteed.
6. Cookies
We use cookies on our website to make our services more user-friendly, effective, and secure. A cookie is a small text file that we transfer via our web server to the cookie file of the browser on the hard drive of your computer. Cookies do not cause any damage to your end device, do not contain viruses, Trojans, or other malware. This enables our website to recognize you as a user when a connection is established between our web server and your browser. Cookies help us to determine the frequency of use and the number of users of our website. The content of the cookies we use is limited to an identification number that does not allow any personal reference to the user. The main purpose of a cookie is the recognition of visitors to the website.
Session cookies are used on our website to optimize user-friendliness. These are temporary cookies that remain in the cookie file of your browser until you leave our website and are automatically deleted at the end of your visit. We also use permanent cookies to statistically record the frequency of use of our website and to evaluate it for the purpose of optimizing our services for you. These cookies enable us to automatically recognize that you have already visited our website when you return.
Most browsers accept cookies automatically. However, you can configure your browser in such a way that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally as well as delete cookies that have already been set. If you deactivate cookies, however, the functionality of our website may be limited.
7. Newsletter
If you have registered for our newsletter, we will use your email address to send you our newsletter on a regular basis. This data will not be passed on to third parties. A valid email address is required to receive the newsletter. The date on which you subscribed to the newsletter is also stored. We work with the double opt-in procedure: As soon as you have registered for the newsletter, we will send you a confirmation email with a link to confirm your registration.
You can revoke your consent to the storage of data for the receipt of our newsletter at any time and unsubscribe from the newsletter. For the revocation, you can use the link attached to each newsletter or inform us of your request to unsubscribe by sending an email to office@resourex.com. This revocation does not affect the lawfulness of the processing carried out based on the consent prior to the revocation.
8. Your Rights
If you intend to make use of one or more of the rights listed below, you can contact one of our employees at any time.
8.1 Right to Information (Art. 15 GDPR)
You have the right to receive information from us at any time and free of charge about the personal data stored about you, as well as a copy of this information. You also have the right to be informed about the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations, if possible the planned storage period or, if this is not possible, the criteria for determining this period, the existence of a right to rectification or erasure of the personal data concerning you or to restriction of processing by the controller or a right to object to such processing, the existence of a right of appeal to a supervisory authority if the personal data are not collected from the data subject, any available information about the origin of the data, the existence of automated decision-making, including profiling, and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject. In addition, you as the data subject have the right to be informed whether personal data have been transferred to a third country or to an international organization. If this is the case, you have the right to obtain information about the appropriate safeguards in connection with the transfer.
8.2 Right to rectification (Art. 16 GDPR)
You have the right to request that inaccurate personal data relating to you be rectified without delay. Taking into account the purposes of the processing, you may request the completion of incomplete personal data.
8.3 Right to erasure (Right to be forgotten) (Art. 17 and 19 GDPR)
You have the right to obtain the erasure of personal data concerning you without undue delay, provided that one of the following reasons applies and to the extent that the processing is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims:
• the personal data are no longer necessary in relation to the purposes for which they were collected of otherwise processed;
• you withdraw your consent on which the processing is based pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR and there is no other legal ground for the processing;
• you object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR;
• the personal data have been unlawfully processed;
• the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject;
• the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
If the personal data has been made public by us and our company as the controller is obliged to erase the personal data pursuant to Article 17 (1) GDPR, we shall take reasonable measures, including technical measures, taking into account the available technology and the cost of implementation, to inform other data controllers which are processing the published personal data that you have requested the erasure of such personal data, unless the processing is necessary.
8.4 Right to restriciton of processing (Art. 18 GDPR)
You have the right to obtain restriction of processing insofar as you contest the accuracy of the personal data, the processing is unlawful, but you oppose the erasure of the personal data and we no longer need the personal data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims, or you have objected to processing pursuant to Article 21 (1) GDPR.
8.5 Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format or to transmit those data to another controller, insofar as this is technically feasible and insofar as this does not affect the rights and freedoms of other persons.
8.6 Right to object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you. This also applies to profiling based on these provisions. We will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. If we process personal data for the purpose of direct marketing, you have the right to object at any time to processing of personal data for such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. In addition, where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, you, on grounds relating to your particular situation, have the right to object to processing of personal data, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
8.7 Automated individual decision-making, including profiling (Art. 22 GDPR)
You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects in respect to you or similarly significantly affects you, unless the decision (i) is necessary for entering into, or performance of, a contract between us, or (ii) is authorized by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interest, or (iii) is based on your explicit consent.
Where the decision is either necessary for the conclusion or performance of a contract between you and us, or is made with your express consent, we will implement suitable measures to safeguard your rights and freedoms and your legitimate interests, at least the right to obtain human intervention, to express your point of view and to contest the decision.
8.8 Right to withdraw your consent under data protection law (Art. 7 Abs. 3 GDPR)
You have the right to withdraw your consent at any time. This has the consequence that we may not continue the data processing, which was based on this consent, for the future. An informal communication by email to us is sufficient for the withdrawal. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
8.9 Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
You have the right to lodge a complaint with a supervisory authority. You can usually contact the supervisory authority of your habitual residence, place of work or of our registered office for this purpose.
9. Up-to-dateness and Changes
This privacy policy is currently valid and was updated in March 2020. We reserve the right to change this policy from time to time by updating our website and offers respectively or due to changes in regulatory or legal requirements. You can access, download, and print out the current privacy policy on our website at https://cms.resourex.com/privacy-policy.
