Data Privacy Statement

Responsible for the data processing (controller)

Autobahnen- und Schnellstraßen-Finanzierung-Aktiengesellschaft (hereinafter briefly referred to as “ASFINAG”)
Austro Tower, Schnirchgasse 17
1030 Vienna
T +43 (1) 9551266
F +43 (1) 9551277
E office@asfinag.at

The ASFINAG data protection officer can be reached at: ASFINAG data protection, c/o Autobahnen- und Schnellstrassen-Finanzierung-Aktiengesellschaft, 1030 Vienna, Schnirchgasse 17, datenschutz@asfinag.at, T +43 1 955 1266, F +43 1 955 1277.

Log files and hosting

When you visit our website www.asfinag.at, information is automatically sent from your device to our website in an automated manner. The following information is temporarily stored in a so-called log file:

IP address of the device
Date and time of access
Name and URL of the retrieved file
The website from which access is made
The browser and, if necessary, the operating system used by your device

These data are stored for 4 months until their automatic deletion.

The processing serves the following purpose:

The temporary storage of the user’s IP address by the system is necessary in order to enable the delivery of the website to the user’s computer. The data mentioned make it possible to gain important points of reference for the optimisation of the website. Error situations can be better understood, and the user friendliness can be improved. These data also serve to ensure the security of our systems (e.g. detection of attacks). Evaluation for marketing purposes does not take place.

The legal basis for the data processing is Art. 6 Para. 1 Item f GDPR. Our legitimate interest is in the above-mentioned purpose.

In order to make your visit to our website as pleasant as possible, we make use of the content delivery network of our hosting provider. A content delivery network (CDN) is a distributed network of servers with which static web contents (images, JavaScript, CSS files) can be efficiently transmitted to users and made available based on their region as quickly as possible, in order to minimise the loading times. The legal basis for the data processing is Art. 6 Para. 1 Item f GDPR. Our legitimate interest is in the above-mentioned purpose.

Cookies & consent

The legal basis for using technically necessary cookies is our legitimate interest according to article 6 paragraph 1 GDPR to ensure technical operability and basic functions of our website and to save your chosen cookie settings and operate the website accordingly. The legal basis for all other cookies is your consent in accordance with article 6 paragraph 1 GDPR. You can revoke your given consent at any time.

We place the following cookies that require your consent:

Name	Objective	Storage duration
tt_viewer	Retrieves the user's cookie ID via Teads Universal Pixel for advertising campaigns.	1 year
tt_liveramp tt-salesforces	Technical cookie for the functioning of Teads Universal Pixel	1 day

Folgende nicht-zustimmungspflichtige Cookies werden durch uns gesetzt:

Name	Objective	Storage duration
MicrosoftApplicationsTelemetryDeviceId	This ID is used by Microsoft for technical monitoring of the Omnichannel - Chat Widget Service.	1 year
_pk_id	Collects statistics about the user's visits to the website, such as the number of visits, average time spent on the website and which pages were read.	13 months
_pl_ses	Used by Matomo Analytics Platform to track the visitor's page views during a session.	30 minutes
_pk_ref	Used by Matomo Analytics Platform to identify the referral website the visitor came from.	6 months

Omnichannel - Chat

Our website uses a chatbot as well as a live chat from the Microsoft Dynamics 365 module, Omnichannel for Customer Service (https://docs.microsoft.com/en-us/dynamics365/customer-service/introduction-omnichannel). This is provided by Microsoft Cooperation, 1 Microsoft Way, 98052 Redmond, USA.

The Chatbot is a dialogue system that can automatically answer your questions using routines and rules. If it is not possible for the chatbot to find a suitable answer, a live chat with an ASFINAG employee can be established. When the chatbot is started, the following data is processed:

Date and time of access
Duration of access
Device type, browser, operating system
Visitor language
Contents of the transmitted chats
Automatic mood recognition (sentiment analysis)

Depending on the course of the conversation with our chatbot or our employees, personal data may arise in the chat, which will be entered by you. We have configured our systems to process and store your data exclusively in the European Union.

For enquiries concerning information about ASFINAG products you have already purchased (digital vignettes, section tolls, etc.) or ASFINAG products you would like to purchase in the future, data processing is based on the contract already in place with you or our pre-contractual obligations for the future contract pursuant to Art. 6 para. 1 lit b GDPR.

For all other customer service enquiries that you address to the chatbot or our employees, our legitimate interest in the performance of our customer service pursuant to Art. 6 para. 1 lit f GDPR is used.

The chat histories with the chatbot are identified by means of an anonymous ID and stored for 90 days. The duration and time of the communication are processed for statistical purposes and to optimise the service.

Evaluations in the context of chats with our employees are carried out on the basis of your explicit, voluntary and informed consent pursuant to Art. 6 para. 1 lit a GDPR. Your consent may be revoked at any time at datenschutz@asfinag.at.

Alternatively, you are also welcome to contact the ASFINAG Service Center by telephone or via our contact form. Further information is available at www.asfinag.at/kontakt.

The chat logs of the live chats (incl. previous history with the chatbot) count as corporate communication and are stored for three years for archiving purposes.

The following cookies, which do not require your consent, are set by us:

Name	Storage period	Type/purpose
MicrosoftApplicationsTelemetryDeviceId	1 year	This ID is used by Microsoft for the purposes of technical monitoring of the Omnichannel – Chat Widget Service.

Embedding of map data

In order to provide you with up-to-date information on traffic conditions, parking policies and route planning, we make use of the map service Basemap (https://basemap.at/en/). The maps are provided via servers of the City of Vienna and embedded in Asfinag.at. It is a technical requirement of this process for your IP address to be transmitted to the servers. In order to make your use of the route planner as comfortable as possible, your location is retrieved via the browser so as to pre-fill your starting point for any route queries.
For this, your consent pursuant to Art. 6 Para. 1 Item a GDPR is required. You have the right to revoke your consent at any time. The legality of the processing that has taken place until the time of your revocation is not affected hereby.

Teads Universal Pixel

To carry out targeted advertising campaigns, such as advertising the digital vignette, we use the “Teads Universal Pixel” technology from Teads Schweiz GmbH (Teads.tv) in the ASFINAG toll shop. In order to be able to show you personalized advertising content, the Teads Universal Pixel is processed on your end device or in the browser you are using.

The device source, the browser type, the operating system, the approximate location, the website accessed, the user's interactions with advertisements and the user's IP address, in which the last octet is deleted for anonymization, is stored via the Teads Universal Pixel. raised. This data is used across devices to filter an advertising campaign based on user interests and location, among other things, and to prevent a user from being shown the same ad again. This anonymous data is statistically evaluated for an internal business analysis. There is no exchange of personal data with Teads Schweiz GmbH or with Teads.tv. Teads.tv does not collect or process any information that allows a specific individual to be directly identified.

The legal basis for data processing is your consent via the cookie banner in accordance with Article 6 (1) (a) GDPR.

You can delete your consent to the display of interest-based advertising by the Teads Universal Pixel at any time via the settings in your browser. This does not affect the lawfulness of the processing up to the time of your revocation.

The Teads Universal Pixel will be stored until further notice.

Learn more about Teads.tv privacy here: https://teads.tv/privacy-policy/

Rights of data subjects

According to the General Data Protection Regulation, data subjects have the following rights:

Right to information

Every data subject affected by the data processing has the right - after proving his identity - to request information from ASFINAG regarding whether his personal data are processed. If this is the case, the data subject has a right to further information regarding the purposes as well as the legal basis of the processing, the categories of data concerning him, the data sources, the recipients of his data, the (non-)existence of automated decision-making including profiling, potential information on his rights and duties as well as a copy of the personal data.

Right to rectification and deletion

If the personal data are incorrect or incomplete, the data subject affected may — where necessary by means of a supplementary declaration — request the rectification, completion or deletion of the data concerning him within the scope of the processing purposes. ASFINAG is obliged to delete personal data in particular insofar as the deletion is prescribed by law or if any existing consent to the processing has been revoked, if there is no longer a legal basis for the processing or if personal data are no longer required for the processes for which they were collected.

However, the right to deletion does not exist if the processing occurs for the fulfilment of a legal obligation of ASFINAG or for the performance of a task carried out in the public interest or in the exercise of official authority or if it is necessary for the assertion, exercise or defence of legal claims.

Right to restrict processing

Every data subject has the right to have the processing of his personal data restricted. To do so, one of the following requirements must be fulfilled:

The correctness of the personal data is disputed by the data subject, namely for a duration that enables ASFINAG to investigate the correctness of the personal data,
The processing is unlawful and the data subject rejects the deletion of the personal data and instead requests the restriction of the use of the personal data;
ASFINAG no longer requires the personal data for the purposes of the processing, and at the same time, however, the data subject requires them for the assertion, exercise or defence of legal claims;
If the data subject has filed an objection to the processing, so long as it is not yet determined whether ASFINAG’s legitimate grounds outweigh those of the data subject.

However, restricted data may still be used for the protection of the rights of another person, for substantial public interest or for the assertion, exercise or defence of the legal claims of ASFINAG.

Right to data portability

The data subject has the right to receive the personal data concerning him that he has provided to ASFINAG in a structured, common and machine-readable format i.e. – insofar as technically possible – to have these data transmitted to another controller. However, this right only exists if the processing is based on the legal basis of a contract or on the consent of the data subject.

Right to objection

The data subject has the right to file an objection to the processing of personal data concerning him at any time due to reasons arising from his particular situation. This right only exists if the processing

is necessary for the performance of a task carried out in the public interest or
is carried out in the exercise of official authority vested in ASFINAG, or
is necessary for the safeguarding of the legitimate interests of ASFINAG or of a third party.

ASFINAG will then no longer process the personal data unless it can demonstrably prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or unless the processing would facilitate efforts to assert, exercise or defend legal claims.

Right to object to direct mail

If personal data is processed in order to operate direct advertising, the person concerned has the right to object at any time to the processing of personal data relating to them for the purpose of such advertising. If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

Right to lodge a complaint with a supervisory authority

Every data subject has the right to lodge a complaint with the Data Protection Authority, Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at.