The protection of your personal data is of great importance to us. Therefore, we process your data exclusively in accordance with the statutory provisions (GDPR, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing within the scope of our website.

Controller in accordance with data protection laws, especially the EU General Data Protection Regulation (GDPR):

HS Timber Group GmbH Favoritenstraße 7/2 1040 Vienna AUSTRIA

Your Rights as a Data Subject You can exercise the following rights at any time by contacting our data protection officer using the provided contact details:

• Information about your stored data and its processing (Art. 15 GDPR)
• Rectification of inaccurate personal data (Art. 16 GDPR)
• Erasure of your stored data (Art. 17 GDPR)
• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR)
• Objection to the processing of your data by us (Art. 21 GDPR)
• Data portability, provided you have consented to data processing or have concluded a contract with us (Art. 20 GDPR)

If you have given us your consent, you can revoke it at any time with future effect.

SSL Encryption To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.

Collection of General Information When Visiting Our Website Type and Purpose of Processing: When you access our website, i.e., if you do not register or otherwise provide information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and the like. This is solely information that does not allow conclusions to be drawn about your person.

These data are processed for the following purposes:

• Ensuring a seamless connection to the website
• Ensuring smooth use of our website
• Evaluating system security and stability
• Further administrative purposes

In addition to the general information collected when visiting our website, we may also use cookies. Cookies are small text files that are stored on your device and can be accessed by our website. They serve various purposes, such as enhancing the functionality of the website, personalizing your experience, and analyzing website usage.

There are different types of cookies:

• Essential Cookies: These cookies are necessary for the operation of the website and enable basic functions such as page navigation and access to secure areas of the site. They do not collect personal information.
• Functional Cookies: These cookies allow the website to remember choices you have made and provide enhanced, more personalized features. For example, they may remember your preferred language or region.
• Analytical Cookies: These cookies help us understand how visitors interact with our website by collecting and reporting anonymous information. This helps us improve the website's performance and relevance.
• Marketing Cookies: These cookies are used to track visitors across websites with the intention of displaying targeted advertisements that are relevant and engaging for the individual user.

We do not use your data to draw conclusions about you personally. This information is statistically evaluated by us, if necessary, to optimize our website and the underlying technology.

Legal Basis: The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website.

Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

Retention Period: The data will be deleted as soon as it is no longer required for the purpose of its collection. For data collected for the provision of the website, this is generally the case when the respective session has ended.

Provision Prescribed or Required: The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and offerings may be restricted or unavailable. Therefore, an objection is excluded.

Protecting your personal data is of significant importance to HS Timber Group GmbH. In this privacy information, we inform you about the processing of your personal data during the "Evergreen Prize" event, the purposes of this processing, and the legal basis for it. This privacy information supplements the general privacy policy of HS Timber Group GmbH.

1. Data Controller 

The data controller in accordance with the General Data Protection Regulation (GDPR) is: 

HS Timber Group GmbH 
Favoritenstraße 7/2, 
1040 Vienna, 
Austria 

Our Data Protection Responsible, Michael Proschek-Hauptmann, is available for any questions regarding data protection and can be contacted at: compliance@hs.at.

1. Categories of Data, Purposes, and Legal Basis for Processing 

The personal data are processed for the following purposes: 

Registration and Handling of the Event

During registration, we request your name, email address, and postal address. These data are necessary to process your registration, register you as a participant, and properly conduct the event. The processing of these data is necessary for the performance of pre-contractual measures and contract performance (Art. 6(1)(b) GDPR) and is essential for the registration and handling of the event.

Documentation and Announcement Purposes 

Photos and video recordings are made during the event. These are used for documentation purposes as well as for announcing and promoting future events, including publication in reports, newsletters, on the website, and on social media. The processing of these data is based on our legitimate interest (Art. 6(1)(f) GDPR) to document the event and promote it in the course of our public relations work.

Invitations and Information about Future Events 

The data provided during your registration are also used to inform and invite you to our next event in two years. The processing of these data is based on our legitimate interest (Art. 6(1)(f) GDPR) to maintain contact with our participants and promote our events.

2. Categories of Recipients 

For the respective purposes, we transmit your personal data to the necessary extent to the following categories of recipients: 

• Software providers for handling the invitation and event management
• The event agency
• Photographers and PR agency 

We only work with third parties who take appropriate technical and organizational measures to ensure the protection of your data. If processors are used to support and fulfill the intended purposes, your data will only be transferred to previously carefully selected and contractually obligated processors.

3. Duration of Storage 

Your personal data are stored as long as necessary for the purposes mentioned above. Photos and video recordings of the event are stored until the execution of the next event and then archived or deleted unless other legitimate interests exist. Data for invitations and information about future events are stored until the execution of the next event in two years.

4. Your Rights 

You have the right to: 

• Request information about the processing of your personal data (Art. 15 GDPR)
• Request correction of incorrect or incomplete data (Art. 16 GDPR)
• Request deletion of your personal data if the conditions of Art. 17 GDPR are met
• Request restriction of processing your personal data if the conditions of Art. 18 GDPR are met
• Object to the processing of your personal data if the processing is based on a legitimate interest (Art. 21 GDPR)
• Request data portability if the processing is based on your consent or a contract and is automated (Art. 20 GDPR)
• To exercise your rights, please contact our Data Protection Officer, Michael Proschek-Hauptmann, at compliance@hs.at.

If you believe that your data is being processed contrary to the applicable legal provisions or that your data protection rights have otherwise been violated, you may file a complaint with the Austrian Data Protection Authority.

5. Right to Object 

You have the right to object at any time to the processing of your personal data if it is based on a legitimate interest according to Art. 6(1)(f) GDPR. In case of objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.

Effective: September 4, 2024