The protection of your privacy and your personal data is an important matter we pay attention to in all our business relations. We respect the confidentiality of your personal data and always act in accordance with the provisions of data protection law and this Privacy Policy.
The controller responsible for the processing of your personal data within the meaning of the European General Data Protection Regulation (GDPR) is:
Wienerberger AG
Wienerbergerplatz 1
1100 Vienna, Austria
+43 1 60192-0
office@wienerberger.com
Data Protection Officer: If you have any questions about data protection, please contact our Data Protection Officer at privacy@wienerberger.com.
1. Scope of this Privacy Policy
This Privacy Policy is intended to inform you about how Wienerberger AG (“wienerberger”) processes personal data in connection with the BRICK AWARD website and related online services, including the website, newsletter, contact forms, BRICK AWARD submissions and related communications.
This Privacy Policy applies to Wienerberger AG in connection with the BRICK AWARD online services. It does not apply to online services of other companies of wienerberger that are covered by their own privacy policies or to online services operated independently by third parties.
2. Collection of information
2.1. Data provided by you
As a rule, disclosure of personal data is not required for the general use of our online services. Where you use specific functions, however, we process the personal data necessary for the respective purpose. This may include, for example, your salutation, first name, last name, email address, country, business type and other information you provide when subscribing to the newsletter, using a contact form or participating in the BRICK AWARD. Mandatory fields are identified as such in the relevant form.
2.2. Automatically collected data
When you use our online services, technical and usage data may be processed automatically. Depending on the service used, this can include, for example, IP address, browser and device information, operating system, referrer URL, date and time of access, pages accessed and technical log information. Such information may constitute personal data or pseudonymous personal data.
We process technical log data insofar as necessary to provide and secure the website, to prevent misuse and to troubleshoot technical issues. The legal basis is our legitimate interest in providing a secure and functional website pursuant to Article 6(1)(f) GDPR. Where optional technologies are used, the legal basis is the consent described below.
2.3. Cookies and web beacons
Our online services use cookies and similar technologies. Cookies are text files or comparable storage technologies that are stored on or accessed from your device. We distinguish between technically necessary technologies and optional technologies used for preferences, statistics or marketing.
Technically necessary cookies are used to provide basic website functions, security, load balancing and consent management. Their use is based on Section 165(3) TKG 2021 where they are strictly necessary, and related processing is based on Article 6(1)(f) GDPR. Optional preference, statistics and marketing technologies are used only with your consent pursuant to Section 165(3) TKG 2021 and Article 6(1)(a) GDPR. You can give, refuse or withdraw your consent at any time via the cookie settings. Detailed and current information about the cookies and similar technologies used, including provider, purpose, category and storage duration, is available in the Cookie Declaration on this website.
2.4. Web analysis
Where web analytics services are used, they may process pseudonymous online identifiers, device and browser information, IP address information and information about your interaction with the website. Optional analytics technologies are activated only after you have provided the required consent.
- Adobe Analytics: This website uses Adobe Analytics by Adobe Systems Ireland Ltd. (4-6 Riverwalk, Citywest Business Park, Dublin 24, Ireland) as a web analytics service. Adobe Analytics may process information about visits and interactions with the website, including page views, visit frequency, dwell time and technical information about the device and browser used. The data is analyzed in pseudonymous form. We use Adobe Analytics only if you have provided your consent. The legal basis for accessing or storing information on your device is Section 165(3) TKG 2021 and the subsequent processing of personal data is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future via the cookie settings. Information may be transferred to Adobe servers in third countries, including the United States. Where applicable, transfers to certified U.S. recipients are based on the EU-U.S. Data Privacy Framework. Further information is available in Adobe’s privacy policy at https://www.adobe.com/privacy/policy.html.
2.5. Website technologies
Google reCAPTCHA: Where Google reCAPTCHA is used to protect forms from spam and abuse, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, may process technical and interaction data such as IP address, browser information and user interaction signals. The processing serves our legitimate interest in protecting the website against automated abuse pursuant to Article 6(1)(f) GDPR. Further information is available in Google’s privacy policy at https://policies.google.com/privacy.
Google Tag Manager: We use Google Tag Manager, provided by Google Ireland Ltd., to manage website tags. Google Tag Manager is used as a technical management layer. Tags managed through it may process personal data depending on the respective service. Optional tags remain subject to the consent choices made through our cookie consent management platform.
Popupsmart: Where Popupsmart is used to display informational pop-ups and links, the service may store technical information in local storage or cookies. We do not use Popupsmart forms or lead-generation functions unless this is stated separately. Further information is available in Popupsmart’s privacy policy.
2.6. Social media and embedded content
Our website may contain links to social media profiles and embedded content from third-party platforms. A simple external link does not transmit data to the respective platform until you follow the link. Embedded third-party content may establish a connection to the provider and transmit technical information such as your IP address. Where an embedded service is not technically necessary, it is activated only in accordance with your cookie consent choices. Please refer to the respective provider’s privacy information for details about further processing.
Depending on the current website configuration, the following platforms may be relevant:
- YouTube: Where YouTube videos are embedded on the website, the service is provided by Google Ireland Ltd. Embedded YouTube content may store or access information on your device and may transmit data such as IP address, device/browser information and interaction data to Google. YouTube content that is not technically necessary is activated only after the relevant consent. Google may process data in the United States; where applicable, transfers to certified U.S. recipients are based on the EU-U.S. Data Privacy Framework. Further information is available at https://policies.google.com/privacy.
- Privacy information for visitors of our YouTube channel
- Instagram: We maintain a presence on Instagram. If you follow a link from our website to Instagram or otherwise interact with Instagram content, the processing of personal data by the platform is governed by Meta’s privacy information. Where Instagram content is embedded directly on our website, it will only be activated in accordance with your cookie consent choices.
- LinkedIn: We maintain a presence on LinkedIn. If you follow a link from our website to LinkedIn or otherwise interact with LinkedIn content, LinkedIn may process personal data in accordance with its privacy policy at https://www.linkedin.com/legal/privacy-policy. Where LinkedIn functionality is embedded directly on our website, it will only be activated in accordance with your cookie consent choices where required.
- Facebook: We maintain a presence on Facebook. If you follow a link from our website to Facebook or otherwise interact with Facebook content, Meta Platforms Ireland Limited may process personal data in accordance with Meta’s privacy policy at https://www.facebook.com/privacy/policy/. Where Facebook content is embedded directly on our website, it will only be activated in accordance with your cookie consent choices where required.
- Pinterest: We maintain a presence on Pinterest. If you follow a link from our website to Pinterest or otherwise interact with Pinterest content, Pinterest may process personal data in accordance with its privacy policy at https://policy.pinterest.com/en/privacy-policy. Where Pinterest content is embedded directly on our website, it will only be activated in accordance with your cookie consent choices where required.
3. Use of personal data
As a matter of principle, personal data provided by you are processed and used by us exclusively for the purposes specified. These include, in particular:
- Marketing: Marketing and competitions: We process personal data for marketing activities, surveys, competitions or similar campaigns where you have provided consent pursuant to Article 6(1)(a) GDPR or where another applicable legal basis is stated for the specific activity. Consent may be withdrawn at any time with effect for the future. Data is retained only for as long as required for the relevant campaign and applicable legal retention obligations.
- Newsletter: If you subscribe to the BRICK AWARD newsletter, we process the personal data you provide during registration, including the mandatory registration fields, for the purpose of managing your subscription and sending you the newsletter. The legal basis for this processing is your consent pursuant to Article 6(1)(a) GDPR.
We use a double opt-in procedure. After registration, you will receive a confirmation email asking you to confirm your subscription. In this context, we may process and store information such as the IP address used and the date and time of registration and confirmation in order to document the subscription and prevent misuse.
For the management of newsletter subscriptions and the distribution of newsletters, we use SAP Marketing Cloud, a service provided by SAP. SAP processes the relevant subscriber and communication data on our behalf as a service provider and processor in accordance with applicable data protection requirements.
Where newsletter usage is measured, for example through tracking pixels, opening statistics or link tracking, such processing is carried out only where permitted under applicable data protection law and, where required, on the basis of your consent. The information may be used to evaluate the performance of our newsletters and to improve their content.
You may withdraw your consent and unsubscribe from the newsletter at any time with effect for the future by using the unsubscribe link contained in each newsletter. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Personal data required for the active newsletter subscription is retained for the duration of the subscription and subsequently deleted or restricted in accordance with applicable legal retention requirements.
- Contact form and email contact: If you contact us through the contact form or by email, we process the personal data and information you provide in order to handle and respond to your inquiry. Where your request concerns the initiation or performance of a contractual relationship, the legal basis is Article 6(1)(b) GDPR. Otherwise, the processing is based on our legitimate interest in properly handling your inquiry pursuant to Article 6(1)(f) GDPR. We retain the data for the duration of processing the inquiry and thereafter in accordance with applicable statutory retention periods.
3.1. BRICK AWARD participation and submissions
If you submit a project to the BRICK AWARD or otherwise participate in the award process, we process the information necessary to administer the submission and selection process. This may include contact details of the submitter and project participants, professional information, project information, images, plans and other materials submitted through the award platform. Processing may also include communication with submitters and nominees, jury administration, award-event administration and the publication or presentation of nominated or winning projects in BRICK AWARD communications, publications and digital channels.
The applicable legal basis depends on the respective processing activity. Processing necessary to administer participation may be based on Article 6(1)(b) GDPR or, where appropriate, our legitimate interests pursuant to Article 6(1)(f) GDPR. Where consent is required for a specific use, the processing is based on Article 6(1)(a) GDPR. If you provide personal data relating to another person, you must ensure that you are entitled to provide that data. Where required by Article 14 GDPR, the affected person will be provided with the relevant privacy information.
- Protection of rights and compliance with legal obligations: We may process and disclose personal data where this is necessary to comply with legal obligations, respond to lawful requests from competent authorities, prevent or investigate fraud or security incidents, or establish, exercise or defend legal claims. The applicable legal basis is Article 6(1)(c) GDPR or Article 6(1)(f) GDPR, as appropriate.
4. Transmission and disclosure of your personal information
Depending on the service you use, personal data may be shared with processors and service providers that support the operation of the BRICK AWARD website, consent management, communications, newsletter distribution, website hosting, security, analytics and the administration of the BRICK AWARD. Personal data may also be shared with other companies of wienerberger where this is necessary for the relevant purpose, and may be disclosed where required by law or necessary to establish, exercise or defend legal claims.
- Service providers: Where we use external processors or other service providers, they may process personal data only for the agreed purposes and in accordance with applicable data protection requirements. The specific providers relevant to individual website functions are identified in the corresponding sections of this Privacy Policy or in the Cookie Declaration.
- Use of data within wienerberger: Wienerberger AG and its affiliated companies form an international group with cross-border operational processes, structures and technical systems. Where necessary for the purposes described in this Privacy Policy, personal data may be shared within wienerberger in accordance with applicable data protection law.
- International data transfers: If personal data is transferred to a country outside the European Economic Area, we ensure that the requirements of Chapter V GDPR are met. Depending on the recipient and destination country, transfers may be based on an adequacy decision, including the EU-U.S. Data Privacy Framework for certified U.S. recipients, or on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
5. Rights of data subjects
As a data subject, you have the right, within the scope and under the conditions provided by law, to obtain access to your personal data (Article 15 GDPR), request rectification (Article 16 GDPR), request erasure (Article 17 GDPR), request restriction of processing (Article 18 GDPR), receive data in a portable format where applicable (Article 20 GDPR), and object to processing based on legitimate interests or to direct marketing (Article 21 GDPR). You may also withdraw consent at any time with effect for the future (Article 7(3) GDPR). To exercise these rights, please contact our Data Protection Officer at privacy@wienerberger.com.
Wienerberger AG does not use automated decision-making within the meaning of Article 22 GDPR in connection with the processing described in this Privacy Policy.
If you have subscribed to our newsletter, you may unsubscribe at any time using the unsubscribe link contained in each newsletter.
You also have the right to lodge a complaint with a competent data protection supervisory authority pursuant to Article 77 GDPR. In Austria, the competent supervisory authority is the Austrian Data Protection Authority (Datenschutzbehörde).
6. Data security
We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, loss or destruction. Our measures are reviewed and adapted to the state of the art where appropriate. Nevertheless, data transmission over the Internet, including communication by email, cannot be guaranteed to be completely secure.
We maintain processes for handling security incidents and personal data breaches and, where required by law, notify the competent supervisory authority and affected data subjects.
7. Changes to this Privacy Policy
We may amend this Privacy Policy where this becomes necessary due to changes in the website, the services used, legal requirements, case law or our business processes. The current version is published on this website.
8. Contact
For any questions relating to this Privacy Policy or the processing of your data, please contact:
Wienerberger AG
Wienerbergerplatz 1, 1100 Wien
Austria
Phone: +43 1 / 60 192 - 0
e-mail: privacy@wienerberger.com