Responsible for the data processing (controller)
Autobahnen- und Schnellstraßen-Finanzierung-Aktiengesellschaft (hereinafter briefly referred to as “ASFINAG”)
Rotenturmstraße 5-9, P.O. Box 983
T +43 (1) 9551266
F +43 (1) 9551277
The direct contact partners for matters relating to data protection law are the data protection officers of ASFINAG. You can get in touch with them at firstname.lastname@example.org.
Log files and hosting
When you visit our website www.asfinag.at, information is automatically sent from your device to our website in an automated manner. The following information is temporarily stored in a so-called log file:
- IP address of the device
- Date and time of access
- Name and URL of the retrieved file
- The website from which access is made
- The browser and, if necessary, the operating system used by your device
These data are stored for 4 months until their automatic deletion.
The processing serves the following purpose:
The temporary storage of the user’s IP address by the system is necessary in order to enable the delivery of the website to the user’s computer. The data mentioned make it possible to gain important points of reference for the optimisation of the website. Error situations can be better understood, and the user friendliness can be improved. These data also serve to ensure the security of our systems (e.g. detection of attacks). Evaluation for marketing purposes does not take place.
The legal basis for the data processing is Art. 6 Para. 1 Item f GDPR. Our legitimate interest is in the above-mentioned purpose.
Cookies & consent
When you call up the website, we use a cookie banner to request your consent to the placement of functional and statistical cookies. Functional cookies are necessary so as to be able to execute basic functions of the website. If you do not accept these, the functionality of the website may be restricted. You have the right to revoke your consent at any time. You may delete these cookies at any time via the settings in your browser.
We place the following cookies that require your consent:
||If you provide your consent to the placement of cookies, a cookie is placed that remembers your consent, so that you are not asked again when you call up the site in future
We place the following cookies that do not require your consent:
||Required for the integration of the webcams.
||Until you close your web browsers
Google Analytics is used on our website. This is a web analysis service provided by Google Inc. (https://www.google.at/intl/de_at/about) (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) (hereinafter briefly referred to as Google).
The following information is generated by the use of the cookie and processed by Google:
- Browser type/version
- Operating system used
- Previously visited page
- IP address
- Time of the server request
The data is processed in the USA and stored there. It serves the purpose of evaluating use of the website.
In addition, the following cookies are also placed:
||Used to differentiate between users.
||Used to differentiate between users.
||Used to throttle the request rate.
The legal basis for the data processing and data transfer is your consent pursuant to Art. 6 Para. 1 Item a GDPR. This is obtained before placing the cookies and transmitting your IP address. The processing serves the purpose of continually improving our website, increasing the success of our web presence and optimising our offer. You have the right to revoke your consent at any time. You may delete these cookies at any time via the settings in your browser. The legality of the processing that has taken place until the time of your revocation is not affected hereby.
With the aim of data minimisation, the IP addresses are anonymised when using Google Analytics.
Further Google services
In addition, we also use Google Tag Manager and Google Fonts.
Both are necessary in order to ensure that the design of the website meets the needs of its users. Google Tag Manager is a free tool that makes it possible to easily integrate and manage tags (snippets of code) on the website. Google Fonts is used to ensure the uniform design of the fonts.
The legal basis for the data processing and data transfer is your consent pursuant to Art. 6 Para. 1 Item a GDPR.
Further information on the data processing by Google.
Google LLC is responsible for the further data processing. You can find more information on how your data are handled by Google at: www.policies.google.com/privacy and at developers.google.com/fonts/faq.
Our website uses the live chat software Userlike (https://www.userlike.com/de/). This is operated by Userlike UG, Probsteigasse 44-46 50670 Cologne. The use of this software may result in the processing of the following data categories:
- Chat transcript
- Email address
- Location (country, city)
- Operating system
- Number of times page is called up
- Number of visits to the page
- URL (where the chat started)
- Survey before and after the chat
- Chat topic
- Chat status (new, pending, closed)
- Chat evaluation after the chat
- Duration of the chat
- Date of the chat
- Links to the user’s social profiles (LinkedIn, Facebook, Twitter)
- Profile photo from social network
- Screenshot of the browser tab in which Userlike is integrated
These data are processed and stored exclusively within the European Union. The script necessary for this is run via Amazon S3 Cloud (Frankfurt). Some media files are incorporated using Amazon CloudFront.
In addition, the following cookies are also placed:
||This cookie stores information on the persisted state, machine state, session ID and chat statistics
||At end of session
||This cookie stores information about the end user. This can include the name, email address, user ID and the number of visits.
The legal basis for the data processing and data transfer is your consent pursuant to Art. 6 Para. 1 Item a GDPR. This is obtained before placing the cookies and transmitting your IP address. The processing serves the purpose of offering our customers even better service and support. The chat function makes it possible to speak to an ASFINAG employee in real time, thus contributing to customer satisfaction. You have the right to revoke your consent at any time. You may delete these cookies at any time via the settings in your browser. The legality of the processing that has taken place until the time of your revocation is not affected hereby.
Embedding of map data
In order to provide you with up-to-date information on traffic conditions, parking policies and route planning, we make use of the map service Basemap (www.basemap.at). The maps are provided via servers of the City of Vienna and embedded in Asfinag.at. It is a technical requirement of this process for your IP address to be transmitted to the servers. In order to make your use of the route planner as comfortable as possible, your location is retrieved via the browser so as to pre-fill your starting point for any route queries.
For this, your consent pursuant to Art. 6 Para. 1 Item a GDPR is required. You have the right to revoke your consent at any time. The legality of the processing that has taken place until the time of your revocation is not affected hereby.
Rights of data subjects
Data subjects are generally entitled to the rights to information, rectification, deletion, restriction, data portability, revocation and objection. These rights may be asserted by email to email@example.com or by post to the above-mentioned address
Right to information
Every data subject affected by the data processing has the right - after proving his identity - to request information from ASFINAG regarding whether his personal data are processed. If this is the case, the data subject has a right to further information regarding the purposes as well as the legal basis of the processing, the categories of data concerning him, the data sources, the recipients of his data, the (non-)existence of automated decision-making including profiling, potential information on his rights and duties as well as a copy of the personal data.
Right to rectification and deletion
If the personal data are incorrect or incomplete, the data subject affected may — where necessary by means of a supplementary declaration — request the rectification, completion or deletion of the data concerning him within the scope of the processing purposes. ASFINAG is obliged to delete personal data in particular insofar as the deletion is prescribed by law or if any existing consent to the processing has been revoked, if there is no longer a legal basis for the processing or if personal data are no longer required for the processes for which they were collected.
However, the right to deletion does not exist if the processing occurs for the fulfilment of a legal obligation of ASFINAG or for the performance of a task carried out in the public interest or in the exercise of official authority or if it is necessary for the assertion, exercise or defence of legal claims.
Right to restrict processing
Every data subject has the right to have the processing of his personal data restricted. To do so, one of the following requirements must be fulfilled:
- The correctness of the personal data is disputed by the data subject, namely for a duration that enables ASFINAG to investigate the correctness of the personal data,
- The processing is unlawful and the data subject rejects the deletion of the personal data and instead requests the restriction of the use of the personal data;
- ASFINAG no longer requires the personal data for the purposes of the processing, and at the same time, however, the data subject requires them for the assertion, exercise or defence of legal claims;
- If the data subject has filed an objection to the processing, so long as it is not yet determined whether ASFINAG’s legitimate grounds outweigh those of the data subject.
However, restricted data may still be used for the protection of the rights of another person, for substantial public interest or for the assertion, exercise or defence of the legal claims of ASFINAG.
Right to data portability
The data subject has the right to receive the personal data concerning him that he has provided to ASFINAG in a structured, common and machine-readable format i.e. – insofar as technically possible – to have these data transmitted to another controller. However, this right only exists if the processing is based on the legal basis of a contract or on the consent of the data subject.
Right to objection
The data subject has the right to file an objection to the processing of personal data concerning him at any time due to reasons arising from his particular situation. This right only exists if the processing
- is necessary for the performance of a task carried out in the public interest or
- is carried out in the exercise of official authority vested in ASFINAG, or
- is necessary for the safeguarding of the legitimate interests of ASFINAG or of a third party.
ASFINAG will then no longer process the personal data unless it can demonstrably prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or unless the processing would facilitate efforts to assert, exercise or defend legal claims.
Right to lodge a complaint with a supervisory authority
Every data subject has the right to lodge a complaint with the Data Protection Authority, Barichgasse 40-42, 1030 Vienna, firstname.lastname@example.org.
Validity and amendment of this data privacy statement
This data privacy statement is currently valid and was updated in June 2019.
The continued development of our website and offers, legal changes or official requirements may make it necessary to amend this data privacy statement. The currently valid version may be viewed and printed at https://www.asfinag.at/datenschutzerklaerung.