Privacy Statement
We process your personal data exclusively on the basis of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). Below we inform you about the type, scope and purpose of the processing.
Collection and processing of data
Every access to our website and every retrieval of a file stored on this website is logged. The storage serves internal system-related and statistical purposes. The following data is logged: name of the retrieved file, date and time of the retrieval, amount of data transferred, notification of successful retrieval, web browser and requesting domain. In addition, the IP addresses of the requesting computers are logged. Further personal data is only collected if the user of the website and/or customer provides this information voluntarily, for example in the context of an inquiry or registration or for the conclusion of a contract, or via the settings of their browser. Our website uses cookies. A cookie is a text file that is sent when visiting a website and is temporarily stored on the hard drive of the user of the website and/or customer. If the corresponding server of our website is called up again by the user of the website and/or customer, the browser of the user of the website and/or customer sends the previously received cookie back to the server. The server can then evaluate the information obtained through this procedure in various ways. Cookies can be used, for example, to control advertising displays or to facilitate navigation on a website. If the user of the website and/or customer wishes to prevent the use of cookies, they can do so by locally changing the settings of the internet browser used on their computer, i.e. the program used to open and display websites (e.g. Mozilla Firefox, Opera or Safari).
Use and disclosure of personal data
Insofar as the user of our website has provided personal data, we only use this data to respond to enquiries from the user of the website and/or customers, to process contracts concluded with the user of the website and/or customers and for technical administration. Personal data will only be passed on or otherwise transmitted by us to third parties if this is necessary for the purpose of contract processing or for billing purposes or if the user of the website and/or customer has given their prior consent. The user of the website and/or customer has the right to revoke any consent given at any time with effect for the future. The stored personal data will be deleted if the user of the website and/or customer withdraws their consent to storage, if knowledge of the data is no longer required to fulfil the purpose for which it was stored or if storage of the data is not permitted for other legal reasons. Data for billing and accounting purposes are not affected by a request for deletion. If a contractual relationship is to be established between you and us, or its content is to be developed or amended, we will collect and use your personal data insofar as this is necessary for these purposes. By order of the competent authorities, we may provide information about this data (inventory data) in individual cases, insofar as this is necessary for the purposes of criminal prosecution, to avert danger, to fulfil the statutory duties of the constitutional protection authorities or the Military Counter-Intelligence Service or to enforce intellectual property rights.
Newsletter
You have the option of subscribing to our newsletter by registering via our website. To do this, we need your e-mail address and your declaration that you agree to receive the newsletter.
In order to provide you with targeted information, we also collect and process information voluntarily given on areas of interest, your birthday and your company or private address.
Once you have subscribed to the newsletter, we will send you a confirmation email with a link to confirm the registration.
You can cancel your newsletter subscription at any time. Please send your cancellation to the following email address: austria@stasto.eu. We will then immediately delete your data in connection with the newsletter dispatch.
Email advertising to customers
If you order from us, we also use the email address you provide to inform you about our own products and services that are similar to your purchases (Section 174 (4) of the Austrian Telecommunications Act 2021). The legal basis is our legitimate interest in direct marketing (Art. 6 (1) (f) GDPR). You can object to this use at any time free of charge (Art. 21 (2) GDPR): by email to austria@stasto.eu or via the unsubscribe link in every promotional email. Before each mailing we check the addresses against the list kept under Section 7 (2) of the Austrian E-Commerce Act.
Live chat
If you contact us via the live chat, we store the chat history, the contact details you provide and the country from which you connect. We determine the country from your IP address on our own server; with the chat itself we store only the country, not the IP address. We create your enquiry in our customer management system and forward it to the responsible sales office (Art. 6 (1) (b) and (f) GDPR). If no business relationship results, we delete the data after one year.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). You can withdraw any consent you have given at any time with effect for the future. Please send your request to the address given in the legal notice. If you believe that the processing of your data violates data protection law, you can lodge a complaint with a supervisory authority; in Austria this is the Data Protection Authority (www.dsb.gv.at).
Web analytics
To measure our reach we use Plausible Analytics by Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible sets no cookies and stores no IP addresses; from the IP address and browser details it only derives an identifier that changes daily and cannot be traced back to you. The data is processed in the EU. The legal basis is our legitimate interest in analysing the use of our website (Art. 6 (1) (f) GDPR).
On www.stasto.com we additionally use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Analytics cookies are only set once you agree in the cookie notice (Art. 6 (1) (a) GDPR); without your consent the site only sends cookieless signals without an identifier. Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. You can withdraw your consent at any time by deleting the cookies in your browser.
Fonts
All fonts used on this website are loaded from our own server. No data is transmitted to Google or other font providers.
Use of an AI-supported processing system for order and invoice processing
For the efficient and error-reduced capture of incoming orders, supplier invoices, and incoming email correspondence, we use a technical processing system based on artificial intelligence.
In doing so, the contents of orders, incoming invoices and incoming emails (e.g. company name, contact person, business contact details, the content of email correspondence, order and invoice line items, delivery and billing information, payment data) are automatically analyzed and transferred into structured data for our internal ERP and financial accounting systems.
The controller responsible for this processing is the STASTO Automation KG, 6020 Innsbruck, Austria.
The technical implementation is carried out by our affiliated group company STASTO International KG as a processor within the meaning of Art. 28 GDPR. A data processing agreement has been concluded with this company.
As part of the processing, STASTO International KG uses the technical service providers OpenAI, L.L.C., 3180 18th Street, San Francisco, CA 94110, USA, and Anthropic, PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA, as sub-processors. A contract pursuant to Art. 28 GDPR has been concluded with each of these providers. In the course of use, personal data may be transferred to a third country (USA). The transfer is carried out on the basis of appropriate safeguards pursuant to Art. 46 GDPR, in particular the Standard Contractual Clauses approved by the EU Commission.
For checking incoming invoices, STASTO International KG additionally uses Mistral AI SAS, Paris, France, as a sub-processor; this processing takes place within the EU.
The processing is carried out exclusively for the purpose of the proper execution and handling of contractual relationships with customers and suppliers, as well as for compliance with statutory retention and documentation obligations.
The legal basis for processing is Art. 6 (1) (b) GDPR (performance of a contract), Art. 6 (1) (c) GDPR (compliance with legal obligations, in particular corporate and tax law regulations), as well as Art. 6 (1) (f) GDPR (legitimate interest in efficient and structured business operations).
No automated decision-making within the meaning of Art. 22 GDPR takes place.
Further information on the use of AI