Privacy Policy

Privacy Policy

1)     Legal Information pursuant to the General Data Protection Regulation

a)     Information according to Art. 13 GDPR

With this privacy policy, Stummer Kommunalfahrzeuge GmbH, Werksgelände 14, 5500 Bischofshofen – hereinafter referred to as STUMMER – aims to inform the readers and users of the website (users) about the type, scope and purpose of the personal data processed. Furthermore, these data subjects/users are informed about their rights by means of this privacy policy.

We note that you attach great importance to the careful handling of your personal data and appreciate the trust you place in STUMMER to handle this data conscientiously.

b)     Controller as defined in Art. 24 GDPR

Stummer Kommunalfahrzeuge GmbH („STUMMER“)
Werksgelände 14
5500 Bischofshofen

c)     Privacy Policy

Our privacy policy explains:

  • what information we collect and for what reason;
  • how we use this information;
  • your rights as a data subject

We have tried to present this as straightforward as possible.

d)     Legal basis of the processing

STUMMER processes personal data exclusively on one of the following legal bases:

  • your consent
  • on a contractual basis
  • in the legitimate interest

On the website, data is processed exclusively on the basis of the statutory provisions (GDPR, TKG 2003 [Telecommunications Act]).

If analysis tools are used, the data is handled on the basis of Art. 6 para. 1 f) (legitimate interest) GDPR. The legitimate interest in the use of data lies in improving the web presence and measuring the success of online advertising.

IT data security measures are also used on the basis of Art. 6 para. 1 f) (legitimate interest) GDPR. The legitimate interest in the use of data lies in safeguarding the own IT systems.

Social media plug-ins are only used upon prior consent. The legal basis is therefore Art. 6 para. 1 a) GDPR. This consent must be granted again for each visit to this website.

e)     How do we protect your personal data

In order to guarantee the security of your personal data, we have introduced a number of technical and organisational measures as defined under Art. 32 GDPR. Your personal data is stored in secure networks that can only be accessed by a limited number of people, who have special access rights and undertake to respect and maintain the confidentiality of these data. Despite these measures, every time you make your personal data available on the Internet, there is a risk that it will be intercepted by third parties and used beyond our control. Although we do everything in our power to protect your personal data and privacy, we cannot guarantee the security of the information you provide over the Internet.

Data security measures:

  • we encrypt many of our services with SSL
  • user authentication controls
  • secured network infrastructures
  • restriction of access to personal data
  • network monitoring solutions
  • area restricted alarm systems and video surveillance
  • code of conduct for employees
  • obligation of data secrecy

f)      Who has access to your personal data and what is the scope of this access

STUMMER may commission processors to process the personal data. Personal data is processed exclusively on our instructions and for the purposes defined above.

Apart from your personal data and the use of your personal data for the purposes described above, we do not sell or trade your personal data or pass it on to third parties without informing you in advance and in accordance with the currently valid data protection law.

2)     Storage of personal data

In accordance to the applicable law, we are obliged to delete your data pursuant to Art. 5 para. 1 e) GDPR if the purpose is no longer given and there is no legal basis for data retention.

In any event, we will store and retain data in personal form until the end of the business relationship or until the expiry of the applicable guarantee, warranty or limitation periods, and also until the end of any legal disputes in which the data is required as evidence, or in any event until the expiry of the seventh year after the last contact with a business partner.

3)     Rights of data subjects

We would herewith like to inform you as a data subject about the following rights in accordance with the GDPR.

a)     Right to information (Art. 15 GDPR)

You have the right to obtain information about the personal data stored about you and a copy of this information at any time and free of charge from the controller. When the right of access is exercised beyond reasonable limits by excessive requests for information from the controller, STUMMER may charge a customary local fee for the administrative costs of disclosure.

b)     Right to rectification (Art. 16 GDPR)

You have the right to demand the controller to immediately rectify any inaccurate personal data relating to you.

c)     Right to cancellation (right to be forgotten) (Art. 17 GDPR)

You have the right to demand from the controller the immediate deletion of your personal data, provided that it is not necessary for the purposes for which it was collected or otherwise processed and that the deletion does not conflict with any legal reason. If the data subject requests deletion, STUMMER will examine the aforementioned legal requirements and inform you accordingly.

d)     Right to the restriction of processing (Art. 18 GDPR)

You have the right to request the controller to limit the processing of your personal data.

e)     Right to transferability (Art. 20 GDPR)

You have the right to receive your personal data that you have provided to the controller in a structured, common and machine-readable form, and you have the right to transfer such data to another controller without impediment from the controller to whom the personal data has been provided.

f)      Right of objection (Art. 21 GDPR)

If STUMMER processes personal data based on a public interest, or in the exercise of official authority, or if this is necessary for a legitimate interest, you have the right to object to this processing of your data at any time on the grounds of your particular situation. If STUMMER processes personal data for the purpose of direct advertising, you have the right to object to the processing of your data at any time. This also applies to profiling, insofar as this is linked to such direct advertising.

g)     Right of revocation of consent (Art. 7 para. 3 GDPR)

You have the right to revoke your previously given consent to data processing at any time. Revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

h)     Right of appeal (Art. 77 GDPR)

If you come to the conclusion that the processing of your data offends data protection regulations or that your data protection claims have been violated in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the data protection authority, Wickenburggasse 8, 1080 Vienna.

i)      Exercise of a right of the data subject

For enquiries regarding data protection or the exercise of the rights described above, you can reach us at the following contact details:

  • via e-mail: *
  • by post: Stummer Kommunalfahrzeuge GmbH, Werksgelände 14, 5500 Bischofshofen, attn. Company Management *

*Please enclose an official copy of your identity card.

We cannot process any requests from data subjects without prior successful identification. For this reason, we ask you to support the identification process accordingly.

4)     Data transmission/data transfer

a)     Data transmission to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

We will only share your personal data with third parties if:

  • you have given your express consent to this in accordance with Art. 6 para.1 a) GDPR,
  • the disclosure pursuant to Art. 6 para.1 f) GDPR is necessary to protect the interests of the company, as well as assert, exercise or defend legal claims and if there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
  • in the event of a legal obligation to disclose the data in accordance with Art. 6 para. 1 c) GDPR, and
  • this is legally permissible and, necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 b) GDPR.

STUMMER may pass on your personal data to suppliers who provide services on our behalf and according to our instructions.

STUMMER may also pass on your personal data to our affiliated companies and partners.

In addition, STUMMER may disclose your personal data if we are required to do so by statutory, legal or governmental authority, or if we believe that disclosure is necessary or appropriate to prevent physical damage or financial loss.

STUMMER reserves the right to transfer any personal data we hold about you if we sell or transfer all or part of our business or assets (including in the event of restructuring, dissolution or liquidation).

b)     Data transfer

STUMMER can also transfer personal data to countries outside the country in which the information was originally collected. These countries may not have the same privacy laws as in the country in which you have originally submitted the personal data. If we transfer your data to other countries, we protect that data as described in this privacy policy and such transfers are governed by the relevant local law.

The countries to which we transfer the personal data are located

  • within the European Union
    • or outside the European Union

When we transfer personal data from the European Union to countries or international organisations outside the European Union, the transfer is carried out on the basis of:

  • an adequacy finding by the European Commission;
  • In the absence of such a finding for other legally permissible reasons, such as the existence of a legally binding and enforceable document between the authorities and public bodies, binding internal company rules, standard data protection clauses, as well as approved or certified codes of conduct.

In exceptional cases, data may also be transferred on the basis of Art. 49 GDPR:

  • 49 para. 1 a) GDPR
    the data subject has given his or her express consent to the proposed data transfer after he or she has been informed about the potential risks of such data transfers for him or her when no adequacy decision has been taken and no appropriate safeguards have been put in place,
  • 49 para. 1 b) GDPR
    the transfer is necessary for the fulfilment of a contract between the data subject and the controller or for taking measures prior to the conclusion of the contract at the request of the data subject,
  • 49 para. 1 c) GDPR
    the transfer is necessary for the execution or fulfilment of a contract concluded between the controller and another natural or legal person in the interest of the data subject.

5)     Server log

When you access this website, the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. During this process, the following information is captured without your intervention and stored until it is automatically deleted:

  • IP address of the accessing computer,
  • date and time of access,
  • name and URL of the retrieved file,
  • website of origin (referrer URL),
  • the browser used and, if applicable, the operating system of your computer and the name of your access provider.

We are currently taking the opportunity to use this data on the legal basis pursuant to Art. 6 para. 1 f) GDPR for purposes such as

  • ensuring a smooth connection of the website,
  • ensuring a convenient use of our website,
  • evaluating the system security and stability and
  • for other administrative purposes

. Under no circumstances will we use the collected data to draw conclusions about your person.

6)     Data collection and processing

a)     Complaints management

Within the scope of complaint processing, we collect and store your data and pass it on if necessary. The collection, storage and transfer are therefore carried out for the purpose of fulfilling the contract and on the basis of Art. 6 para. 1 b) GDPR and, if applicable, for the purpose of fulfilling a legal obligation of the controller on the basis of Art. 6 para. 1 c) GDPR. Failure to provide such data may result in the complaint not being able to be processed.

Further processing will only take place if you have given your consent or a legal permission has been obtained. In some cases, we use external service providers based in the European Economic Area to process your data. We have carefully selected these service providers, commissioned them in writing and they are bound by our instructions. The service providers will not pass this data on to third parties, but delete it after fulfilment of the contract and the expiry of the legal retention periods, unless you have consented to further storage.

If necessary, we will transmit personal data from these actions to our lawyer and the competent court. This will be done – in accordance with the legal requirements – insofar as it is necessary to safeguard our legitimate interests and the legitimate interests of third parties and there is no reason to assume that your interests or fundamental rights and freedoms that require the protection of personal data prevail.

The processing is carried out on the basis of our legitimate interest pursuant to Art. 6 para 1 f) GDPR.

b)     Applications

By submitting your application to STUMMER, you expressly agree that STUMMER may process your personal data and is entitled to transfer, process and use this data within the companies of the STUMMER Group. The transmission, processing and use is limited to the purposes of recruitment and personnel administration.

The processing can also be done electronically. This is especially the case if you have submitted your application documents electronically, e.g. by e-mail or via our career portal.

If the application results in an employment contract, the data you submitted will be processed in compliance with the statutory provisions.

If, however, no employment contract is concluded, your application documents will be deleted in accordance with statutory requirements after a 6-month retention period, unless other justified interests prevent such deletion.

c)     Trade fairs/exhibitions

At trade fairs, we may collect personal data to facilitate subsequent contact in connection with the topics discussed at the fair.

Your personal data will be processed on the basis of your consent pursuant to Art. 6 para 1 a) and our legitimate interests pursuant to Art. 6 para 1 f) GDPR.

7)     COOKIES

This website does not use cookies.

8)     Google Tools

a)     Verwendung von Google Maps

This website uses Google Maps API for the visual presentation of information. When using Google Maps, Google also collects, processes and uses data regarding the use of the map functions by visitors. Further information about data processing by Google is available in the Google Privacy Policy. There you can also change the settings of your personal privacy policy in the Privacy Centre.

For detailed instructions on how to manage your own information in connection with Google products, click here.

b)     Use of script libraries (Google WebFonts)

To display our content correctly and in a graphically appealing way across browsers, we use script libraries and font libraries such as Google Web Fonts ( on this website. Google Web Fonts are cached in your browser to avoid multiple loading. If the browser does not support the Google Web Fonts or prevents access, the contents will be displayed in a default font.

Access to script libraries or font libraries automatically activates a connection with the library operator. Theoretically, this can allow the operators of such libraries to collect data – although it is currently unclear if this happens and if so, for what purposes.

You can find the privacy policy of the library operator Google here:


9)     Social-Media and Third-Party Tools

a)     Embedded YouTube videos

We embed YouTube videos on some of our websites. The corresponding plugins are operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit one of the pages with a YouTube plug-in, a connection to YouTube servers is established. This way, YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can trace your surfing habits back to you personally. You can prevent this by first logging out of your YouTube account.

If a YouTube video is activated, the provider uses cookies that collect information about user behaviour.

If you have disabled the storage of cookies for the Google Ad programme, you will not need to deal with such cookies when watching YouTube videos. However, YouTube also stores non-person-related usage information in other cookies. If you want to prevent this, you must block the storage of cookies in your browser.

Further information on data protection at “YouTube” is available in the provider’s privacy policy at:


10)  SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.  You can recognise an encrypted connection by the character string “https://” and the lock symbol in your browser line

11)  Amendments and additions

We reserve the right to make changes or additions to information content at any time and without prior notice. If parts or individual terms of this text do not, no longer or not completely correspond to the applicable legal situation, this will not influence the content and validity of the remaining parts of the document.