We process personal data that we receive from you directly, data that we have legitimately received from business information services (CRIF GmbH), address services, creditor protection associations (KSV 1870), data from publicly accessible sources (e.g. company register, register of associations, land register, media), as well as data legitimately received from other companies affiliated with us.
We process your personal and contact details (such as name, address, e-mail, date of birth), household data and family circumstances (such as the number of children and other dependents), identification data from public authorities (such as ID card data), creditworthiness data (such as the type and amount of income), financial identification data (such as your bank details and customer numbers), insurance data, image and sound recordings (such as recordings in the course of an online identification), data on the business relationship, data on marketing and sales, AML (Anti Money Laundering) and compliance data, if applicable, Tax data (such as VAT numbers) and, if applicable, electronic log and identification data (such as your electronic signature, logging data or cookies), as well as other data comparable to the categories mentioned.
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Austrian Data Protection Act 2018 so as to …
a) Fulfill contractual obligations (Art. 6 para. 1 lit. b GDPR):
The processing of personal data (Article 4 No. 2 GDPR) takes place
for the provision of leasing transactions including hire purchase and fleet management services and may include the preparation of offers, conclusion and management of contracts, as well as the administration and sale of financing objects and fleets and the associated vehicles;
for the conclusion and arranging of insurance policies;
to process funding applications;
in particular for the implementation of our contracts with you and the execution of your requests, as well as for the implementation of pre-contractual measures.
The specific details on the purpose of data processing depend on the respective product and can be found in the respective contract documents and terms and conditions.
b) Fulfil legal obligations (Art. 6 Para. 1c DS-GVO):
Processing of personal data may be necessary for the purpose of fulfilling various legal obligations (e.g. from the Banking Act, Financial Market Money Laundering Act, Consumer Credit Act, etc.) as well as regulatory requirements (e.g. the Austrian Financial Market Authority, etc.) to which, as an Austrian financial institution our company is subject. Examples of such cases include:
Legally prescribed measures to combat money laundering and the financing of terrorism, combating fraud and compliance with financial sanctions and, if necessary, obtaining the necessary information and making reports (e.g. reporting to the Austrian money laundering agency in certain suspected cases);
Maintenance of statutory accounting and business records;
c) Protect legitimate interests (Article 6 (1) (f) GDPR) in general:
If necessary, in the context of balancing interests in favour of our company or a third party, data processing can take place beyond the actual fulfilment of the contract to protect our legitimate interests or those of third parties. Examples of data processing to protect legitimate interests include:
Consultation of, and data exchange with, business information services and creditor protection associations (e.g. CRIF GmbH and Kreditschutzverband 1870);
General information mails and newsletters on services and products and related marketing information;
Credit and risk assessments and calculation of rating classifications and probabilities of default and other risk management activities;
Testing and optimization of processes for needs analysis and direct customer contact;
Telephone recordings (for quality assurance measures or in the event of complaints);
Measures for business management and further development of services and products;
Measures to protect employees, customers, and the property of our company;
Measures to prevent and combat fraud, and to combat money laundering, terrorist financing and property-endangering crimes;
Measures for debt collection and legal prosecution;
Assertion of legal claims and defence in legal disputes;
Ensuring the IT security and IT operations of our company;
Prevention and investigation of criminal offenses;
Joint group risk management.
These processing activities serve to ensure the diligent management of our company.
e) Be within the scope of your consent (Art. 6 para. 1 lit. a DSGVO)
In some cases we need your consent so that we can carry out data processing. Such consent is given in separate declarations of consent and not in these data processing instructions. If you give us your consent to data processing for specific purposes, the data will also be processed for the purposes and to the extent contained in your declaration of consent. Such consent can be revoked by you at any time with effect for the future.
Your data will be passed on to Raiffeisen-Leasing Gesellschaft mbH, Vienna, which conducts our business for us. Employees of Raiffeisen-Leasing Gesellschaft mbH only have access to your data insofar as this is necessary within the scope of their tasks.
Furthermore, we forward your data insofar as is necessary to
a) insurance companies for insuring risks or processing claims;
b) our suppliers and service providers as well as lawyers and notaries, insofar as this is necessary or expedient to provide the services contractually agreed with you;
c) service providers and processors who process your data for us according to our orders;
d) our customers, insofar as this is necessary or expedient in the context of the business relationship;
e) authorities at their request, insofar as they are legally authorized to do so or if there are reporting obligations.
We store your data during our business relationship (from the initiation, through processing to the termination of a contract) as well as in accordance with the statutory storage and documentation obligations, which result from the German Commercial Code (UGB), the Financial Market Money Laundering Act (FM-GwG) and the Federal Fiscal Code (BAO).
In addition, the statutory limitation periods, which according to the General Civil Code (ABGB), can be three years in most cases but up to 30 years in certain cases, must also be taken into account with regard to the storage period.
As part of the business relationship, you must provide the personal data that is required for the establishment and implementation of the business relationship and that we are legally obliged to collect. If you do not provide us with this data, we will usually have to refuse to conclude the contract or will not be able to carry out an existing contract, and hence cancel it. However, you are not obliged to give your consent to data processing with regard to data that is not relevant for the conclusion of the contract or the fulfilment of the contract, or that is not required by law and/or regulation.
In accordance with the General Data Protection Regulation, you have the right to information about the personal data that we process from you; to the correction, deletion or restriction of the processing of this data; a right to object to this data processing and a right to request the transfer of the data you have provided.
If you believe that we are infringing your rights when processing your data, you have the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at, If you live or work in another member state of the European Union, you can also lodge your complaint with the supervisory authority responsible for data protection there.
In principle, we do not use fully automated decision-making to establish and implement the business relationship, in accordance with Article 22 GDPR.
If you contact us using the form on the website or by e-mail, the data you provide and transmit will be stored for as long as is necessary to process your request. In doing so, we are pursuing our legitimate interest in being able to offer you the best possible service and, if necessary, to create new ways for you to exchange information with us. If you do not (or no longer) want your data to be stored in this way, please address your objection in this regard to: datenschutz -ät- rl.co.at .
Our online presence in social networks or on platforms serves to communicate and inform interested parties or customers.
As a general rule, user data is processed for market research and advertising purposes, such as to create usage profiles. These profiles can be used, among other things, to place advertisements that correspond to user interests. For this purpose, cookies are stored on the user's computer, with the help of which the usage behaviour and interests of the user are then stored. User data can also be stored across devices in the usage profiles (this primarily affects users who are logged in to the relevant platform). It is possible for us to place target group-oriented advertising and to carry out an anonymous analysis of the use of our online presence.
The processing of the personal data of the user takes place on the basis of your consent (a declaration of consent, e.g. by activating a checkbox or confirming a button).
Below you will find details and information on possible data transfers to third countries (countries outside the European Union - EU or the European Economic Area - EEA) based on the provider information on processing and objection options.
Facebook, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Twitter, Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland
LinkedIn, LinkedIn Ireland Unlimited Company, Gardner House, 2 Wilton Place, Dublin 2, Ireland
Xing, XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany
Impactory GmbH, Steinenstettergasse 5/37 Vienna, Austria
Technically necessary cookies and other standard web controls are used on our website, in particular to be able to control and improve the website itself (JavaScript and tracking pixels). All data is collected anonymously. We can use this to collect information to check for which screen sizes, browsers and operating systems our website should be best optimized. JavaScript is a programming language for evaluating user interactions, changing, reloading or generating content.
We use the services of JENTIS GmbH, Schönbrunner Straße 231, 1120 Vienna ("JENTIS") for anonymous statistical evaluation and extended security precautions during visits to our website. For this purpose, data is transmitted to JENTIS, who evaluate the data on our behalf in an anonymous form. This means that JENTIS GmbH only processes data that cannot be traced back to an identifiable person. Furthermore, to protect your data, we use JENTIS to make your personal data anonymous before any data is transferred to a third country.
You can view the data protection regulations of JENTIS under the following link: https://www.jentis.com/privacy-policy/
Google Analytics
If you have given your consent, this website uses Google Analytics, which is a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies, which are stored on your computer. The information generated by the cookie about your use of this website (including your anonymized IP address and IDs and the URLs of the websites accessed) is transferred to Google's European servers and stored there. This website uses the IP anonymization option offered by Google Analytics. Your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
On our behalf, Google will use this information to evaluate the use of the website, to compile reports on website activity and to provide us with other services related to website and internet use.
You can prevent Google from collecting your data in connection with Google Analytics by downloading and installing the browser plugin available at tools.google.com/dlpage/gaoptout.
You can find more detailed information on the terms of use at https://policies.google.com/terms/de , https://policies.google.com/technologies/partner-sites or https://policies.google.com/privacy/ by Google and Google's privacy policy.
LinkedIn
Provided you have given your consent, this website uses the LinkedIn Insight Tag, which is a conversion tracking tool from LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn"). LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland is responsible for data processing within the EU, the EEA and Switzerland. By agreeing to the use of this provider, you also expressly consent to the processing of your data in the USA (Art 49(1)(a) GDPR). There is a risk that government agencies will have access to your data and you will not be able to enforce your rights as a data subject. It is therefore not guaranteed that the level of protection and your rights in relation to your data are comparable to those in the EU.
LinkedIn uses cookies that are stored on your computer. By integrating LinkedIn, (personal) data about your use of this website is transferred to the LinkedIn servers and stored there. According to LinkedIn, IDs with which members of LinkedIn can be identified are removed after seven days and the collected data is thus pseudonymised; the pseudonymised data itself is deleted after 180 days.
LinkedIn will use this information on our behalf to evaluate the use of the website, to assess the success of advertising campaigns, to obtain demographic information (such as employer or job description) about our users and to provide other services related to website and internet use.
Under https://www.linkedin.com/legal/privacy-policy , https://www.linkedin.com/help/linkedin/answer/a427660 respectively https://www.linkedin.com/legal/cookie-policy
You can find more information on LinkedIn's terms of use and LinkedIn's privacy policy.
Google Maps
When you use the corresponding function and you have given your consent, we use the Google Maps API service on our website. This service is a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. By integrating the service on our site, at least the following data is transmitted to Google LLC: IP address, time of visit to the website, screen resolution of the visitor, URL of the website (referrer), browser identifier (user agent) and search terms. The data transfer takes place regardless of whether you have a user account with Google through which you are logged in, or whether you do not have a user account. If you are logged in, this data will be assigned directly to your account. If you do not wish to be assigned to your profile, you must log out before activating the button. Google LLC stores this data as usage profiles and uses it for advertising, market research and/or needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact Google LLC to exercise your right of objection. For more information on the purpose and scope of data collection and processing by Google LLC, visit www.google.at/intl/de/policies/privacy . We do not process the data concerned.
YouTube
We have embedded YouTube videos on our website, which are stored on "www.youtube.com" and can be played directly from our website. These are all integrated in the so-called "extended data protection mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will data be transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the YouTube operator. When playing videos stored on YouTube, at least the following data is transmitted to Google Ireland Limited: IP address, the specific address of the page accessed from us, browser language setting, system date and time of access, and your browser identifier. The data transfer takes place regardless of whether you have a user account with Google through which you are logged in, or whether you do not have a user account. If you are logged in, this data can be assigned directly to your account. If you do not wish to be assigned to your profile, you must log out before activating the button. YouTube, or Google Ireland Limited, stores this data as usage profiles and uses it for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to provide needs-based advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google Ireland Limited as the operator of YouTube to exercise this right. For more information on the purpose and scope of data collection and processing by Google Ireland Limited, please visit www.google.at/intl/de/policies/privacy . We do not process the data concerned.
Matterport
Provided you give your consent, we use Matterport, a service provided by Matterport, Inc, 352 E. Java Dr., Sunnyvale, CA 94089, USA, to display panoramas and interactive tours. By agreeing to the use of this provider, you also expressly consent to the processing of your data in the USA (Art 49(1)(a) GDPR). There is a risk that government agencies will have access to your data and you will not be able to enforce your rights as a data subject. It is therefore not guaranteed that the level of protection and your rights in relation to your data are comparable to those in the EU.
More details can be found in the Matterport Privacy Policy as well as the Cookie Policy
Each time a user accesses our website and each time a file is accessed or attempted to be accessed on the server, data about this process is stored in a log file on the server (log file). It is not immediately clear to us which user accessed which data. Nor do we attempt to collect this information. This would only be possible in legally regulated cases and with the help of third parties (e.g. Internet service providers). In detail, the following data record is stored on the server for each call: the IP address, the name of the retrieved file, the date and time of the retrieval, the amount of data transferred, the message as to whether the retrieval was successful and the message as to why a retrieval may have failed, the name of your internet service provider, if applicable, the operating system, the browser software of your computer and the website from which you are visiting us.
The legal basis for any processing of this personal data is our legitimate interest (Art. 6 Para. 1 lit. f GDPR). This consists of being able to detect, prevent and investigate attacks on our website.
In addition, we process your personal data in special cases based on the legitimate interests of us or legitimate third parties in legal prosecution (Art. 6 Para. 1 lit. f GDPR) or on behalf of legally authorized authorities or courts (Art. 6 Para. 1 lit . c GDPR).
We generally store data for a period of three months to ensure the security of our website. A longer storage period only takes place if this is necessary to investigate attacks on our website or to pursue legal claims.
Cookies can be blocked, deactivated or deleted. There are a variety of tools at your disposal to do this (including browser controls and settings). You can find information on this in the help section of the web browser you are using. Deactivating all cookies used by us can lead to restrictions, such as the display of the website.
A cookie is a small piece of data (text file) that your browser stores on your device at the instruction of a visited website in order to "remember" information about you, such as your language preferences or login information. These cookies are set by us and are referred to as first-party cookies. We also use third-party cookies, which come from a different domain than the website you are visiting. We use these cookies to support our advertising and marketing efforts. In particular, we use cookies and other tracking technologies for the following purposes:
Technically required cookies
These cookies are necessary for the basic functions of the website and are used to be able to present our content to you, to be able to save your user settings and preferences (e.g. saving your input in form fields to protect against accidental loss). These cookies assign a randomly generated ID to your browser. The data is processed on the basis of our legitimate interests in the secure design and convenient use of our content or, in general, to provide our services on the specific website visited. No information is collected about you for marketing and statistical purposes. Furthermore, we can use information to prevent fraud and to ward off requests that overload the service (denial of service attacks). This category of cookies cannot be disabled.
Cookies
Name
Domain
Path
Validity
Purpose
PHPSESSID
.raiffeisen-wohnbau.at
/
Visit
PHP-Session:
Serves as a protective measure against CSRF in contact forms.
Content: Contains a random string with which we can identify you for the duration of a visit.
HomePage-intro
.raiffeisen-wohnbau.at
/
2 days
Intro on the home page:
Tracks if you've already seen the intro on the home page so you don't see it again.
Content: Whether the intro has been viewed before.
dpcm_consentid
www.raiffeisen-wohnbau.at
/_dpcm
6 months
The persistent identifier of the data protection settings made:
Saves the persistent identifier that can be used to query and update your privacy settings. The identifiers are not used for any other purpose.
Content: An identifier for the browser chosen randomly by the server.
vfsys-watchlist-id
.raiffeisen-wohnbau.at
/
6 months
Real estate watch list:
Necessary in order to be able to show you the watch list you have created every time you visit
Content: A randomly generated character string that uniquely identifies you in the respective browser.
ProjectAccess_*
.raiffeisen-wohnbau.at
/
3 months
Access to protected project objects:
Required to save when accessing selected objects of projects using special links.
Content: The token with which access to hidden project objects is obtained. It does not allow for a clear identification of the user.
Jentis
Cookies
Name
Domain
Path
Validity
Purpose
jts-rw
.raiffeisen-wohnbau.at
/
2 years
User ID for unique identification of visitors throughout a visit
jctr_sid
.raiffeisen-wohnbau.at
/
30 mins
Session ID for unique identification of a visit
Personalization cookies
We use personal cookies, pixels and scripts as a way to measure the effectiveness and success of our marketing tools and to better target them. These resources are used to draw conclusions about your interests and needs based on the analysis of your behaviour and to be able to segment users with the same or similar interests and needs, so that we can subsequently provide you with needs-based, interest-related and targeted advertising or content. The processing takes place for a maximum period of three years or until revocation. The revocation of the consent does not affect the legality of the processing carried out up to the point of revocation.
Both statistical and personalization cookies (and similar technologies) are also operated by companies that process data in the USA (such as Google LLC). By agreeing to the use of cookies from these providers, you also expressly consent to the processing of your data in the USA (Art 49(1)(a) GDPR). There is a risk that government agencies will have access to your data and you will not be able to enforce your rights as a data subject. It is therefore not guaranteed that the level of protection and your rights in relation to your data are comparable to those in the EU.
Google Analytics, Meta Pixel
Cookies
Name
Domain
Path
Validity
Purpose
_ga
.raiffeisen-wohnbau.at
/
2 years
Distinction/long-term recognition of users
_gat
.raiffeisen-wohnbau.at
/
60 secs
Used for request limitation
_gid
.raiffeisen-wohnbau.at
/
24 hours
Distinction/short-term recognition of users
jts-fbp
.raiffeisen-wohnbau.at
/
3 months
Cookie for using the Facebook/meta pixel via Jentis
jts-ga-fe-cid
.raiffeisen-wohnbau.at
/
12 months
Cookie for using Google Analytics via Jentis
jts-ga-fe-gid
.raiffeisen-wohnbau.at
/
12 months
Cookie for using Google Analytics via Jentis
LinkedIn
Cookies
Name
Domain
Path
Validity
Purpose
bcookie
.linkedin.com
/
12 months
Browser Identifier cookie to uniquely identify devices accessing LinkedIn to detect abuse on the platform and diagnostic purposes
bscookie
.www.linkedin.com
/
12 months
Used for remembering that a logged in user is verified by two factor authentication
JSESSIONID
.www.linkedin.com
/
Visit
Used for Cross Site Request Forgery (CSRF) protection and URL signature validation
lang
.linkedin.com
/
Visit
Used to remember a user's language setting to ensure LinkedIn.com displays in the language selected by the user in their settings
lidc
.linkedin.com
/
24 hours
To facilitate data center selection
sdsc
.linkedin.com
/
Visit
Signed data service context cookie used for database routing to ensure consistency across all databases when a change is made. Used to ensure that user-inputted content is immediately available to the submitting user upon submission
li_gc
.linkedin.com
/
6 months
Used to store consent of guests regarding the use of cookies for non-essential purposes
li_mc
.linkedin.com
/
6 months
Used as a temporary cache to avoid database lookups for a member's consent for use of non-essential cookies and used for having consent information on the client side to enforce consent on the client side
UID
scorecardresearch.com
/
24 months
Cookie used for market and user research
UserMatchHistory
.linkedin.com
/
30 days
LinkedIn Ads ID syncing
AnalyticsSyncHistory
.linkedin.com
/
30 days
Used to store information about the time a sync took place with the lms_analytics cookie
lms_ads
.linkedin.com
/
30 days
Used to identify LinkedIn Members off LinkedIn for advertising
lms_analytics
.linkedin.com
/
30 days
Used to identify LinkedIn Members off LinkedIn for analytics
li_fat_id
.raiffeisen-wohnbau.at
/
30 days
Member indirect identifier for Members for conversion tracking, retargeting, analytics
li_sugr
.linkedin.com
/
3 months
Used to make a probabilistic match of a user's identity outside the Designated Countries
_guid
linkedin.com
/
3 months
Used to identify a LinkedIn Member for advertising through Google Ads
BizographicsOptOut
.linkedin.com
/
10 years
Used to determine opt-out status for non-members
li_giant
.raiffeisen-wohnbau.at
/
7 days
Indirect identifier for groups of LinkedIn Members used for conversion tracking
ln_or
www.raiffeisen-wohnbau.at
/
24 hours
Used to determine if Oribi analytics can be carried out on a specific domain
Matterport
ADFORM
Cookies
Name
Domain
Path
Validity
Purpose
C
adform.net
/
31 days
Identifies if user’s browser accepts cookies.
Content: 1 – Cookies are allowed 3 – Opt-out
FLOODLIGHT
Cookies
Name
Domain
Path
Validity
Purpose
IDE
adform.net
/
31 days
This domain belongs to Doubleclick (Google). Doubleclick is Google
GOOGLE_ADS
Cookies
Name
Domain
Path
Validity
Purpose
_gcl_au
raiffeisen-wohnbau.at
/
3 months
Used by Google AdSense for experimenting with advertisement efficiency across websites using their services
XANDR
Cookies
Name
Domain
Path
Validity
Purpose
uuid2
adnxs.com
/
3 months
This cookie contains a unique randomly-generated value that enables the Platform to distinguish browsers and devices. It is matched against information – such as advertising interest segments and histories of ads shown in the browser or device – provided by clients or other third parties and stored on the Platform. This information is used by clients to select advertisements for delivery by the Platform, and to measure the performance of, and attribute payment for, those advertisements. In addition, we use this cookie to enable clients to use data which does not reveal or use an Internet user’s real-world identity or data they collect outside of the Platform or acquire from other third parties. This cookie is also sometimes matched to clients’ or other third parties’ cookies so that they can use data they collect outside of the Platform to serve more relevant advertisements to Internet users.
anj
adnxs.com
/
3 months
The anj cookie contains data denoting whether a cookie ID is synced with our partners.