You can change your cookie settings here: To the cookie settings
Table of contents
1.1 For better readability, the generic masculine is used in this data protection information. Unless otherwise indicated, the personal designations used in this data protection information refer to all genders (m/f/d).
1.2 With this data protection information, we, OÖ Verkehrsholding GmbH (hereinafter referred to as "we"/"us"), inform our customers and visitors to our website (hereinafter referred to as "you"/"you") about the processing of their personal data, including the rights to which they are entitled. Please read this data protection information carefully.
1.3 This data protection information relates exclusively to the use of our website, which can be accessed by you at https://www.ooevh.at, including all sub-pages that can be accessed via a web browser.
1.4 For the purposes of this data protection information, the definitions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("General Data Protection Regulation"; "GDPR"). The most important terms are explained under point 2.
2.1 "General Data Protection Regulation" or "GDPR" means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, as amended.
2.2 "Personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Article 4(1) GDPR).
2.3 "Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Article 4(2) GDPR).
2.4 "Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law (Article 4(7) GDPR).
2.5 "Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller (Article 4(8) GDPR).
2.6 "Recipient" means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing (Article 4(9) GDPR)
2.7 "Consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her (Article 4(11) GDPR).
2.8 "Data Protection Information" means this Data Protection Notice in accordance with Articles 12 to 14 GDPR.
2.9 "Website" means the website https://www.ooevh.at offered and operated by us, including all subpages, including the digital services, widgets and web tools contained therein.
3.1 The controller within the meaning of Article 4(7) GDPR for the processing of your personal data is ("we"/"us"):
OÖ Verkehrsholding GmbH ("OÖVH" for short)
Volksgartenstraße 23
A-4020 Linz
Company register number: FN 267576 w of the Linz Regional Court
Tel: +43 732 661010 0
3.2 You are also welcome to contact our data protection officer if you have any questions about data protection. Their contact details are as follows
SAXINGER Rechtsanwalts GmbH, datenschutz@ooevh.at
4.1 Provision, proper display of the website, hosting
When you access and use our website, we process certain personal data that you transmit to us via your web browser in order to ensure a smooth connection to our website and its proper display. For this purpose, we collect from you, for example, the IP address and the name and URL of the file accessed, the operating system used, the browser type and version, the host name of the accessing computer and the date and time of the server enquiry.
When processing this data, we rely on the legal basis of our overriding legitimate interest (Article 6(1)(f) GDPR), which is to be able to fulfil the aforementioned purpose, in particular to be able to display our website to you without errors. The collection of this data is necessary for technical reasons.
We only process the aforementioned personal data for the duration of establishing and maintaining the connection between your device and our website. When you close your browser, no further processing takes place.
In order to provide you with this website, we use an external hosting service provider, namely Microsoft Ireland Operations Limited, 70 Sir John Rogersons's Quay, Dublin 2, Ireland as a processor. We have concluded a separate agreement with this hosting service provider on commissioned data processing in accordance with Article 28 GDPR.
4.2 Ensuring the security of the website and preventing misuse
When you access and use our website, we also process certain personal data that you transmit to us via your web browser in order to be able to recognise and, if necessary, prosecute any misuse of our website, including possible attacks on it. We collect the following data from you for this purpose
This data is stored in a log file on our server. When processing this data, we rely on the legal basis of our overriding legitimate interest (Article 6(1)(f) GDPR), which is to be able to recognise and, if necessary, track such attacks.
We store the data collected in this way in a log file for a period of 72 hours from the time it is collected. The data is then deleted.
We may transmit this data to law firms, authorities, public prosecutors and courts commissioned by us only in justified cases, in particular in cases of identified attacks on our website. Such a transfer is then made on the basis of our overriding legitimate interest (Article 6(1)(f) GDPR), which lies in being able to assert legal claims against the perpetrator of such an attack or to prosecute possible criminal offences. In such a case, the personal data will only be deleted once the underlying proceedings have been legally discontinued or concluded.
4.3 Analysing the use of our website
We use Matomo on our website. Matomo is an open source web analysis application that records online visits to our website and displays reports on these visits for analysis. We use this service to statistically analyse the composition of our visitors, which areas are particularly relevant for visitors to our website, or whether there are errors on our website. We may collect the following of your personal data:
The legal basis for the processing of your personal data is our legitimate interest in accordance with Article 6(1)(f) GDPR, which lies in being able to analyse the user structure, identify errors and improve our website; it is also in our legitimate interest to be able to better understand how visitors use our website.
If cookies are set, the legal basis for the processing is also the consent given by a visitor in accordance with Article 6(1)(a) GDPR. Consent given in this way can be withdrawn at any time without giving reasons. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. For the technical description of cookies, please see point 7.
5.1 We are pleased when you contact us by e-mail or telephone. When you contact us, we collect the following data from you:
We process the personal data collected from you in order to answer your enquiry or deal with your request. If a contractual relationship is concluded, you will be informed separately about the processing of your personal data as part of the contract.
5.2 The processing of your personal data when you contact us is based, depending on the occasion, on the implementation of pre-contractual measures in accordance with Article 6(1)(b) GDPR and/or on your and our legitimate interest (Article 6(1)(f) GDPR), which lies in the service-oriented response to your enquiry.
If a contract is concluded as part of the response to your enquiry, we will store your personal data for the duration of the contractual relationship and for the duration of any subsequent statutory retention obligation. If no contract is concluded or if your enquiry does not result in the conclusion of a contract (e.g. in the case of customer service or complaint management), we will store your personal data for a period of three years. Your data will then be deleted.
6.1 If you apply to us, we will use the personal data contained in your application to contact you and carry out the application process. The legal basis for this data processing is the initiation of a contractual relationship on your initiative (Article 6(1)(b) GDPR). We will retain your personal data for the duration of the application process.
6.2 If your application is rejected, we will continue to store your data for a period of seven months from the date of notification of rejection. This serves the purpose of being able to counter any claims on your part in accordance with Sections 12 and 26 of the Equal Treatment Act or Sections 7e and 7k (2) (1) of the Disability Employment Act. In doing so, we rely on our legitimate interest in defending against possible claims such as those mentioned above. If special categories of personal data within the meaning of Article 9(1) GDPR are processed, we also rely on the basis of the defence of legal claims (Article 9(2)(f) GDPR). After this period has expired, your personal data will be deleted.
6.3 Only if you voluntarily give us your consent (Article 6(1)(a) GDPR) may we retain your application documents for one year after a rejection in order to keep you on record if necessary. You have the right to withdraw this consent at any time without giving reasons. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
6.4 If an employment relationship is established with you, we will inform you about the processing of your personal data, including your application documents, in a separate privacy policy.
7.1 What are cookies?
Cookies can be used to collect information that is created by a website and stored via the user's browser. Cookies are small files or text information (usually less than one kilobyte) that a website stores on the hard drive of the user's computer or mobile device. These cookies allow the website to "remember" the user's activities and preferences for a short period of time or permanently. Most browsers support cookies, but users can configure their browsers to reject cookies or delete them at any time. Many users configure their browsers so that cookies are automatically removed as soon as the browser window is closed. Websites use cookies to identify users, remember their preferences and allow them to complete tasks without repeatedly entering information when they switch pages or return to the website.
Cookies can also be used to collect information for personalised advertising and marketing based on online behaviour. Companies use cookies to analyse user behaviour and create personal profiles. This allows them to display targeted adverts to users based on their previous searches. Cookies can be categorised into different types, whereby they can be classified according to their storage duration:
A further classification can be made based on the area to which they belong:
If the web server from which the website is loaded stores cookies on the user's computer or mobile device, these are referred to as "HTTP header cookies". Cookies can also be stored using JavaScript code that is located or referenced on the page.
Example: A website is offered in five different language versions. When you access the website for the first time, you select the language version "German". A text file (a "persistent cookie") is now stored on your device with the information that you wish to use the website in German. If you do not delete the cookies and call up the website again with the same browser, the website will know from the stored cookie that the website should be displayed in German. You can find more information about cookies here: https://allaboutcookies.org/.
We use the following cookies on our website
| Domain | domain name | Type of cookie | Category | Purpose | Type | Storage duration |
| ooevh.at | fe_typo_user | First-party cookie | Necessary | Session cookie | session | 30 minutes |
| ooevh.at | x_cookiepolicy_option_categories | First-party cookie | Necessary | Saves the consent given via the cookie banner | Permanent | 1 year |
| ooevh.at | infobox_<ID> | First-party cookie | Necessary | Infobox for a traffic message (setting a timestamp to prevent the popup from appearing again) | Permanent | 14 days |
| ooevh.at | ooeverkehrsverbund-_zldp | First-party cookie | Third-party services | This cookie identifies individual visitors to the website | Permanent | 2 years |
| ooevh.at | ooeverkehrsverbund-zldt | First-party cookie | Third party services | This cookie identifies a visitor's unique visits to the website. | Persistent | 1 day |
| ooevh.at | _pk_id | First-party cookie | Analysis cookie | Stores a unique visitor ID. | Persistent | 13 months |
| ooevh.at | _pk_ses | First-party cookie | Analysis cookie | Session cookie stores temporary data for the visit. | session | 30 minutes |
| ooevh.at | _pk_ref | First-party cookie | Analysis | Stores data about the origin of the user. | Permanent | 6 months |
7.2 What are web beacons?
"Web beacons" (also known as "trackingpixels") are small, usually invisible graphics - usually 1x1 pixel, transparent image files - that are integrated into a website or email via HTML code from an external server. As soon as a user visits the website or opens the email, this graphic is loaded from the external server, whereby the user's IP address in particular is transmitted to the web server. The information transmitted is then stored in a log file on the service provider's server.
Web beacons are primarily used for statistical analyses and in online marketing. They make it possible to track the movement behaviour of a user during a session, to identify which browser and operating system is being used, or to track when and how often a page or email has been accessed.
You can find more information about web beacons here: https://allaboutcookies.org/what-is-a-web-beacon.
Unless individual legal bases are addressed separately in this data protection information, we also rely in particular on the following legal bases when processing your personal data:
8.1 Consent (Article 6(1)(a) GDPR): If we refer to your consent in each case when presenting the purposes, we will only process your personal data if you have previously given us your voluntary consent, which can be revoked at any time. You can revoke any consent given at any time without giving reasons, even separately. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Consent can be withdrawn at any time by contacting us by email or post at our contact address (see point 12).
8.2 Contract fulfilment, contract initiation (Article 6(1)(b) GDPR): If the processing of your personal data is necessary for the purpose of fulfilling a contract between you and us, we rely on the legal basis of contract fulfilment. The same applies if the processing is necessary to take steps at your request prior to entering into a contract.
8.3 Compliance with legal obligations to which we are subject (Article 6(1)(c) GDPR): We are subject to provisions of Union, federal and state law that require us to process your personal data.
8.4 Overriding legitimate interest (Article 6(1)(f) GDPR): We also process your personal data on the basis of our overriding legitimate interest, which lies in particular in being able to offer you our respective services.
9.1 Unless otherwise stated in this data protection information, we store your personal data for as long as is necessary for the fulfilment of the respective purpose, and beyond that until the expiry of a statutory retention obligation that applies to us or, in the case of possible legal claims, until the expiry of a statutory limitation period. The data will then be deleted.
9.2 If your personal data is processed by us exclusively on the basis of your previously granted consent, your data will be deleted as soon as we receive your cancellation.
11.1 You have the following rights as a data subject under the conditions and restrictions of applicable law. You are entitled to
If you wish to assert one or more of these rights against us, you are welcome to contact us; our contact details can be found in point 12.
11.2 If you are of the opinion that we have violated data protection regulations, you have the right to lodge a complaint with the competent supervisory authority (for us this is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at).
If you have any questions about the processing of your personal data or wish to exercise a data subject right, please do not hesitate to contact us at any time by post, telephone or e-mail at the following address:
OÖ Verkehrsholding GmbH
Volksgartenstraße 23
A-4020 Linz