Other personal data

Beyond the above information, no personal data is processed on our website and no personal user profiles are created.

Data security and web servers

Our web servers are hosted by an external domestic service provider. This service provider is ISO 27001 certified, providing an exceptionally high level of security and data integrity.

Links disclaimer

We check links that leave our website very carefully from an editorial point of view. Nevertheless, we do not assume any responsibility or liability for the content on these pages.

Data subject rights

For information according to Art. 15 GDPR (request for information) please use this online form. You are also welcome to download a PDF version of the request here, fill it out offline and send it to us.

Social Media related data protection

Using this Data Protection Information, BBRZ additionally informs users about the processing of personal data of visitors to our Facebook fanpage https://de-de.facebook.com/bbrz.at/ as well as our Instagram fanpage https://www.instagram.com/accounts/login/?next=/bbrz_berufliche_reha/ 

1. Purpose of data processing

BBRZ runs these fan pages to raise awareness of its services and to inform. Visitors of our fan pages can also contact us directly via these fan pages.

We have no interest whatsoever in collecting or otherwise processing personal data for analysis or marketing purposes.

Meta Platforms Ireland Ltd. (Facebook and Instagram) processes user data for advertising purposes (analysis, creation of personalised advertisements), creation of user profiles and market research.

2. Joint responsibility

If you visit one of our fan pages, personal data is processed, regardless of whether you are logged in or registered with Facebook or Instagram. The operator of the platforms, Meta Platforms Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland and BBRZ Muldenstraße 5, 4020 Linz are jointly responsible for the collection of the data according to Art. 26 GDPR.

3. Type and scope of data collection

We have no influence on the data collection that is carried out by the operators of the platforms, especially with regard to the transmission of personal data to third countries.
You can find information on this in the privacy statements of Facebook and Instagram www.facebook.com/polihttps://help.instagram.com/519522125107875/?helpref=hc_fnav 

As the operator of a fan page on Facebook and Instagram, we are provided with the 'Facebook/Instagram Insights' function, which gives us statistical data about our visitors. However, this does not allow us to assign the statistical data to a specific person. Facebook uses so-called cookies to collect such data. These are small text files that are stored on your end-user device. By identifying the browser via characteristic character strings of the cookies, it is possible to detect the end-user device when the page is called up again. This enables statistical evaluation, which is made available to the fan page operators in anonymised form by Meta Platforms Ireland Ltd.

The following data is provided to us in anonymised form:

• Information about clicks (reach, page and profile views, likes (Facebook) or new followers (Instagram))
• Reports about individual posts (reach, likes, taps on stickers, replies, link clicks, comments, shared content)
• Info about the target group (age, gender, geo-targeting, info about potential target group: Age, gender, geo-targeting, most popular pages).

Bitte beachten Sie, dass wir die von Ihnen bereitgestellten Profil-informationen einsehen können, wenn Sie unsere Fanpages abonnieren oder damit interagieren (zB. durch Gefällt-mir-Angaben oder etwa das Senden von Direktnachrichten).

4. Legal basis

The processing of personal data with regard to our Facebook and Instagram fan pages is based on the one hand on consent pursuant to Art. 6 (1) lit a GDPR (by registering with Facebook/Instagram) or on the basis of legitimate interest pursuant to Art. 6 (1) lit f GDPR as part of our public relations and communication.

5. Storage period

Please refer to the respective privacy policy for the storage period of the data collected by Facebook and Instagram. Generally, data collected by Meta Platforms Ireland Ltd. is stored until it is no longer needed or until the account is deleted.

For information regarding cookies set by Facebook, please refer to Facebook's Cookie Policy https://www.facebook.com/privacy/policies/cookies and Instagram https://help.instagram.com/1896641480634370?cms_id=1896641480634370 .
You can delete or prevent the installation of cookies on your browser at any time (see the notes on cookies in connection with the visit to our website www.bbrz.at

6. Data subject rights

We only process anonymised statistics of our fan pages and have no influence on the processing of the personal data underlying the statistics by Facebook. To exercise your data subject rights in relation to our Facebook and Instagram Fanpages, please contact Meta Platforms Ireland Ltd:

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 Ireland.

Data privacy concerns

For any concerns on the subject of the GDPR, please write to us at datenschutz@bbrz.at.

Pursuant to Directive (EU) 2019/1937 of the European Parliament and of the Council dated 23 October 2019 on the protection of persons who report infringements of Union law ('Whistleblower Directive') and the Federal Act on the Procedure and Protection in Case of Information on Infringements in Certain Areas of Law (Whistleblower Protection Act - HSchG).

Our whistleblower system serves to maintain the integrity of our company and to avert possible damage.

In particular due to its social and socio-political mission, the Promotion Association of the Expertis Group - BBRZ BFI FAB feels obliged to strengthen the trust placed in it by employees, suppliers and other business and system partners and to base its relationship with competitors on fairness.

Who can use our whistleblower system?

In accordance with legal requirements, persons who work for us or are associated with us in the course of their professional activities may report violations. 

In particular, these can include:

1. Employees
2. Applicants
3. Interns, persons completing alternative service and social service volunteers
4. Suppliers as well as business and system partners
5. Self-employed persons working for us
6. Members of administration, managing or supervisory authorities

Reports

A reported tip must be 'true', i.e. the person giving the tip must believe 'in good faith' that 'a fact' is being reported which constitutes a 'violation of law' and which falls within the scope of the Whistleblower Protection Act.

The Whistleblower Protection Act only covers reports and information on violations and misconduct in the following subject areas:

1. Public procurement
2. Financial services, financial products and financial markets, and prevention of money laundering and financing or terrorist organisations
3. Product safety and conformity
4. Traffic safety
5. Environmental protection
6. Radiation protection and nuclear safety
7. Food and feed safety, animal health and welfare
8. Public health
9. Consumer protection
10. Protection of privacy and personal data and security of network and information systems
11. Prevention and punishment of criminal offences under Sections 302 to 309 of the Criminal Code (StGB), BGBl No. 60/1974.

The whistleblower system is not a platform for general inquiries or complaints, please use the general contact addresses for such submissions.

Deliberate false reporting with the aim of discrediting persons or the company itself are to be assessed as a compliance violation and may, if necessary, result in consequences under employment and/or administrative criminal law. 

How to report

Tips on possible violations to the detriment of the organisation can be submitted in writing to the whistleblower system at (whistleblower@bbrz.at) or via telephone at (0732 / 6922 - 561).

In order to be able to correctly assign your request during the review, you must provide the name and/or address of the business unit to which you refer in the message.

Every report is reviewed for its compliance relevance in a timely manner and in the event that a violation has occurred, suitable investigation steps are initiated. Information on the respective status of the surveys is available upon request.

Information pursuant to Article 13 of the General Data Protection Regulation

As a whistleblower, you are protected from reprisals by the company through the Whistleblower Protection Act (HSchG). This is subject to the condition that the violations or misconduct were justifiably reported.

Your contact details are known only to the compliance officers and are treated by them with absolute confidentiality. Anonymous submissions are not provided.

Your data will be processed exclusively for the purpose of handling your message and the associated (technical) administration. The legal basis for the processing of their data is our legitimate interest in detecting and preventing violations and the associated Prevention of damage and liability risks. If an employee is affected by a report received, the processing also serves to prevent criminal offences or other legal violations in connection with the employment relationship.

With regard to data protection, including data subject rights, we may refer you to our data protection declaration, which follows the legal provisions. Personal data will be deleted after expiry of the retention period.