Data Privacy Statement
Responsible for the data processing (controller)
Autobahnen- und Schnellstraßen-Finanzierung-Aktiengesellschaft (hereinafter briefly referred to as “ASFINAG”)
Austro Tower, Schnirchgasse 17
1030 Vienna
T +43 (1) 9551266
F +43 (1) 9551277
E office@asfinag.at
The ASFINAG data protection officer can be reached at: ASFINAG data protection, c/o Autobahnen- und Schnellstrassen-Finanzierung-Aktiengesellschaft, 1030 Vienna, Schnirchgasse 17, datenschutz@asfinag.at, T +43 1 955 1266, F +43 1 955 1277.
Log files and hosting
When you visit our website www.asfinag.at, information is automatically sent from your device to our website in an automated manner. The following information is temporarily stored in a so-called log file:
- IP address of the device
- Date and time of access
- Name and URL of the retrieved file
- The website from which access is made
- The browser and, if necessary, the operating system used by your device
These data are stored for 4 months until their automatic deletion.
The processing serves the following purpose:
The temporary storage of the user’s IP address by the system is necessary in order to enable the delivery of the website to the user’s computer. The data mentioned make it possible to gain important points of reference for the optimisation of the website. Error situations can be better understood, and the user friendliness can be improved. These data also serve to ensure the security of our systems (e.g. detection of attacks). Evaluation for marketing purposes does not take place.
The legal basis for the data processing is Art. 6 Para. 1 Item f GDPR. Our legitimate interest is in the above-mentioned purpose.
In order to make your visit to our website as pleasant as possible, we make use of the content delivery network of our hosting provider. A content delivery network (CDN) is a distributed network of servers with which static web contents (images, JavaScript, CSS files) can be efficiently transmitted to users and made available based on their region as quickly as possible, in order to minimise the loading times. The legal basis for the data processing is Art. 6 Para. 1 Item f GDPR. Our legitimate interest is in the above-mentioned purpose.
Cookies & consent
The legal basis for using technically necessary cookies is our legitimate interest according to article 6 paragraph 1 GDPR to ensure technical operability and basic functions of our website and to save your chosen cookie settings and operate the website accordingly. The legal basis for all other cookies is your consent in accordance with article 6 paragraph 1 GDPR. You can revoke your given consent at any time.
We place the following cookies that require your consent:
| Name | Objective | Storage duration |
| asfinag-gdpr-state | If you provide your consent to the placement of cookies, a cookie is placed that remembers your consent, so that you are not asked again when you call up the site in future | 1 year |
| tt_viewer | Retrieves the user's cookie ID via Teads Universal Pixel for advertising campaigns. | 1 year |
| tt_liveramp tt-salesforces | Technical cookie for the functioning of Teads Universal Pixel | 1 day |
Folgende nicht-zustimmungspflichtige Cookies werden durch uns gesetzt:
| Name | Objective | Storage duration |
| JSESSIONID | Required for the integration of the webcams. | Until you close your web browsers |
| _pk_id | Collects statistics about the user's visits to the website, such as the number of visits, average time spent on the website and which pages were read. | 13 months |
| _pl_ses | Used by Matomo Analytics Platform to track the visitor's page views during a session. | 30 minutes |
| _pk_ref | Used by Matomo Analytics Platform to identify the referral website the visitor came from. | 6 months |
Live-chat Userlike
Our website uses the live chat software Userlike (https://www.userlike.com/de/). This is operated by Userlike UG, Probsteigasse 44-46 50670 Cologne. The use of this software may result in the processing of the following data categories:
- Chat transcript
- Email address
- Name
- Location (country, city)
- Browser
- Operating system
- Device
- Number of times page is called up
- Number of visits to the page
- Referrer
- URL (where the chat started)
- Survey before and after the chat
- Chat topic
- Chat status (new, pending, closed)
- Chat evaluation after the chat
- Duration of the chat
- Date of the chat
- Links to the user’s social profiles (LinkedIn, Facebook, Twitter)
- Profile photo from social network
- Screenshot of the browser tab in which Userlike is integrated
These data are processed and stored exclusively within the European Union. The script necessary for this is run via Amazon S3 Cloud (Frankfurt). Some media files are incorporated using Amazon CloudFront.
In addition, the following cookies are also placed:
| Name | Objective | Storage duration |
| uslk_s | This cookie is generated automatically and defines a unique session ID. It ensures that the data provided by the users of the live chat is not lost while the website is being surfed. | Session cookie: is automatically deleted at the end of the visit |
| uslk_e | Live or asynchronous communication service. This cookie is usually used so that you can be identified again on the website if a call is dropped. It contains an individual user ID and the number of visits. | 1 year |
| _uslk_active | Ensuring the chat function. | Session cookie: is automatically deleted at the end of the visit. |
| uslk_e | Live or asynchronous communication service. This cookie is usually used so that you can be identified again on the website if the call is dropped. It contains an individual user ID and the number of visits. | 1 year |
Embedding of map data
In order to provide you with up-to-date information on traffic conditions, parking policies and route planning, we make use of the map service Basemap (https://basemap.at/en/). The maps are provided via servers of the City of Vienna and embedded in Asfinag.at. It is a technical requirement of this process for your IP address to be transmitted to the servers. In order to make your use of the route planner as comfortable as possible, your location is retrieved via the browser so as to pre-fill your starting point for any route queries.
For this, your consent pursuant to Art. 6 Para. 1 Item a GDPR is required. You have the right to revoke your consent at any time. The legality of the processing that has taken place until the time of your revocation is not affected hereby.
Teads Universal Pixel
To carry out targeted advertising campaigns, such as advertising the digital vignette, we use the “Teads Universal Pixel” technology from Teads Schweiz GmbH (Teads.tv) in the ASFINAG toll shop. In order to be able to show you personalized advertising content, the Teads Universal Pixel is processed on your end device or in the browser you are using.
The device source, the browser type, the operating system, the approximate location, the website accessed, the user's interactions with advertisements and the user's IP address, in which the last octet is deleted for anonymization, is stored via the Teads Universal Pixel. raised. This data is used across devices to filter an advertising campaign based on user interests and location, among other things, and to prevent a user from being shown the same ad again. This anonymous data is statistically evaluated for an internal business analysis. There is no exchange of personal data with Teads Schweiz GmbH or with Teads.tv. Teads.tv does not collect or process any information that allows a specific individual to be directly identified.
The legal basis for data processing is your consent via the cookie banner in accordance with Article 6 (1) (a) GDPR.
You can delete your consent to the display of interest-based advertising by the Teads Universal Pixel at any time via the settings in your browser. This does not affect the lawfulness of the processing up to the time of your revocation.
The Teads Universal Pixel will be stored until further notice.
Learn more about Teads.tv privacy here: https://teads.tv/privacy-policy/
Rights of data subjects
According to the General Data Protection Regulation, data subjects have the following rights:
Right to information
Every data subject affected by the data processing has the right - after proving his identity - to request information from ASFINAG regarding whether his personal data are processed. If this is the case, the data subject has a right to further information regarding the purposes as well as the legal basis of the processing, the categories of data concerning him, the data sources, the recipients of his data, the (non-)existence of automated decision-making including profiling, potential information on his rights and duties as well as a copy of the personal data.
Right to rectification and deletion
If the personal data are incorrect or incomplete, the data subject affected may — where necessary by means of a supplementary declaration — request the rectification, completion or deletion of the data concerning him within the scope of the processing purposes. ASFINAG is obliged to delete personal data in particular insofar as the deletion is prescribed by law or if any existing consent to the processing has been revoked, if there is no longer a legal basis for the processing or if personal data are no longer required for the processes for which they were collected.
However, the right to deletion does not exist if the processing occurs for the fulfilment of a legal obligation of ASFINAG or for the performance of a task carried out in the public interest or in the exercise of official authority or if it is necessary for the assertion, exercise or defence of legal claims.
Right to restrict processing
Every data subject has the right to have the processing of his personal data restricted. To do so, one of the following requirements must be fulfilled:
- The correctness of the personal data is disputed by the data subject, namely for a duration that enables ASFINAG to investigate the correctness of the personal data,
- The processing is unlawful and the data subject rejects the deletion of the personal data and instead requests the restriction of the use of the personal data;
- ASFINAG no longer requires the personal data for the purposes of the processing, and at the same time, however, the data subject requires them for the assertion, exercise or defence of legal claims;
- If the data subject has filed an objection to the processing, so long as it is not yet determined whether ASFINAG’s legitimate grounds outweigh those of the data subject.
However, restricted data may still be used for the protection of the rights of another person, for substantial public interest or for the assertion, exercise or defence of the legal claims of ASFINAG.
Right to data portability
The data subject has the right to receive the personal data concerning him that he has provided to ASFINAG in a structured, common and machine-readable format i.e. – insofar as technically possible – to have these data transmitted to another controller. However, this right only exists if the processing is based on the legal basis of a contract or on the consent of the data subject.
Right to objection
The data subject has the right to file an objection to the processing of personal data concerning him at any time due to reasons arising from his particular situation. This right only exists if the processing
- is necessary for the performance of a task carried out in the public interest or
- is carried out in the exercise of official authority vested in ASFINAG, or
- is necessary for the safeguarding of the legitimate interests of ASFINAG or of a third party.
ASFINAG will then no longer process the personal data unless it can demonstrably prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or unless the processing would facilitate efforts to assert, exercise or defend legal claims.
Right to object to direct mail
If personal data is processed in order to operate direct advertising, the person concerned has the right to object at any time to the processing of personal data relating to them for the purpose of such advertising. If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
Right to lodge a complaint with a supervisory authority
Every data subject has the right to lodge a complaint with the Data Protection Authority, Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at.