Privacy Policy

Privacy and Cookie Policy

This website is operated by GATX Rail Austria GmbH, Am Europlatz 5, Building C, A-1120 Vienna, Austria (“GATX”, “we” or “us”). GATX respects the privacy of the visitors of this website. This policy outlines the type of personal data we may collect from you in the course of your visit of this website and how we may use this data. We may update this policy from time to time, so please check it occasionally.

1. Processed data categories, legal bases and purposes of the processing

In the course of your visit of this website, we may collect and process the following personal data:

The Date and the time of your visit of this website, the address of the pages visited on our website (URL), your IP address, name and version of your web browser, the webpage (URL) you have visited before or will visit after you accessed this website, certain cookies (see point 3 below), your login data and the information that you provide to us when making an enquiry on this website (e.g., your name, address, telephone number and e-mail address).

We collect this data from you automatically when you visit this website or if you provide it to us via this website (e.g. by completing a contact form or signing up for our newsletter).

You are under no obligation to provide us with the data we ask you for. However, if you do not provide your data, you will not be able to make use of all the functions of this website. Should the provision of your data be mandatory by law, we will inform you separately thereof.

We will process the data set out above for the purposes of making this website and your user account available to you, to administer the user account, to further optimise and develop our website, to recognise, prevent and investigate attacks of our website, to analyse the usage of our website, to generate website access statistics, to analyse and forecast customer demand, to provide our newsletter and allow you to make inquiries using this website.

The legal basis of the processing of your personal data is our prevailing legitimate interest to achieve the purposes identified above (Article 6(1)(f) EU General Data Protection Regulation) or, where you have given us your consent, your consent (Article 6(1)(a) EU General Data Protection Regulation).

We do not use automated individual decision-making that would produce legal effects for you or would similarly significantly affect you.

2. Transfer of your personal data

To achieve the purposes set out above, we may transfer your personal data to our IT service providers, including the hosting provider Data Quest, and to other companies of the GATX Group as set out in point 7 below.

Some of the recipients referred to above may be located in or process personal data outside of your country. The level of data protection in another country may not be equivalent to that in your country. However, we only transfer your personal data to countries where the EU Commission has decided that they have an adequate level of data protection or we take measures to ensure that all recipients provide an adequate level of data protection. We do this for example by entering into appropriate data transfer agreements based on Standard Contractual Clauses (2010/87/EC and/or 2004/915/EC). These are accessible upon request (see the contact details in point 6).

3. Cookies and Google Analytics

3.1. Cookies

We use “cookies” to improve the functionality of our websites. Cookies are small text files that may be installed on your end device when you visit a website. Cookies are generally used to provide site visitors with additional functionality within the site. Cookies cannot access, read or modify any other data on your computer.

We may use cookies that

  • are going to be deleted again when you close your browser (session cookies),
  • remain stored on your end user device even after you close your browser (permanent cookies),
  • originate from us (first party cookies) or from third party cookies.

Through our cookies, we process data on the following legal bases:

  • We use cookies, which are absolutely necessary for our websites to function, on the basis of our prevailing legitimate interest to ensure the functioning and security of this website (Article 6(1)(f) EU General Data Protection Regulation).
  • We use all other cookies on the basis of your consent (Article 6(1)(a) General Data Protection Regulation).

In order to withdraw your consent or to restrict it to certain cookies, you have inter alia the following options:

  • Use the settings of your browser. Details can be found in the help function of your browser.
  • At http://www.youronlinechoices.com/uk/your-ad-choices you can have the system analyze which cookies are used by you and deactivate them individually or in their entirety. This is an offer from the European Interactive Digital Advertising Alliance.

Withdrawing your consent does not affect the lawfulness of processing based on your consent before your withdrawal. Please note that the functionality of our websites may be impaired if you withdraw or restrict your consent.

Details about the cookies we use:

Designation

Supplier

Purpose

Retention period

_ga

Google

Distinguish users

2 years

_gid

Google

Distinguish users

24 hours

_gat or _dc_gtm_<property-id>

Google

Throttle request rate

 
  1. minute
 

 

3.2. Google Analytics

This website also uses Google Analystics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyze how users use the site. We process your data on the basis of our prevailing legitimate interest to cost-efficiently generate easy to use website access statistics and optimize our web offerings and advertising (Article 6(1)(f) General Data Protection Regulation).

The information generated by the cookie about your use of the website (including your IP address and the URLs of the accessed websites) will be transmitted to and stored by Google on servers in the United States. We do not store any of your personal data collected in connection with Google Analytics.

This website uses the IP anonymization feature provided by Google Analytics. Your IP address will therefore be truncated/anonymized by Google as soon as Google receives you IP address. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to us. Google will not associate your IP address with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore, you can prevent Google’s collection and use of your data by downloading and installing the browser plug-in available under: https://tools.google.com/dlpage/gaoptout?hl=en-GB.

You can also refuse the use of Google Analytics on this website by clicking the following link. An opt-out cookie will be set on the computer, which prevents the future collection of your data when visiting this website:

Disable Google Analytics

Further information concerning Google’s terms of use and privacy statement can be found at https://www.google.com/analytics/terms/gb.html or at https://policies.google.com/?hl=en&gl=uk.

4. Retention period

Your personal data will only be kept for as long as it is necessary to achieve the purposes set out in point 1 above.

We will, in any case, retain your personal data for as long as (i) required under statutory retention obligations or (ii) potential legal claims, where personal data is needed to raise or defend against the claim, are not yet time-barred.

5. Your rights in connection with your personal data

Under applicable law, you have the right to (under the conditions set out in applicable law):

  • obtain confirmation as to whether and what kind of personal data we store about you and to request copies of such data,
  • request rectification or erasure of your personal data,
  • request us to restrict the processing of your personal data,
  • object to the processing of your personal data,
  • withdraw any consent previously granted for the processing (withdrawing your consent does not affect the lawfulness of processing based on your consent before your withdrawal),
  • request data portability, and
  • lodge a complaint with the competent supervisory authority.

6. Our contact details

Please address your requests or questions concerning the processing of your personal data to:

GATX Rail Austria GmbH
Am Europlatz 5
Building C
1120 Vienna
Austria

GDPR@remove-this.gatx.eu

Alternatively, you may also contact our data protection officer:

DPO Service GmbH
Attn: Mr. Philipp Karius

Bethmannstraße 50-54
60311 Frankfurt/Main
Germany

+49 69 2 99 08 901

Datenschutz@remove-this.dposervice.de

7. GATX Group companies

We may transfer your personal data to the following GATX Group companies:

Company

Address

GATX Rail Germany GmbH

Valentinskamp 70
Emporio Tower
20355 Hamburg
Germany

GATX Rail Poland Sp z o.o.

The Warsaw HUB
Rondo Daszyńskiego 2B
00-843 Warszawa
Poland

GATX Rail France SAS

64 rue Tiquetonne
75002 Paris
France

GATX Rail Europe B.V.

Herikerbergweg 88
1101 CM Amsterdam
Netherlands

GATX Rail Switzerland GmbH

Poststrasse 30
6300 Zug
Suisse

Wagon Service Ostróda Sp.z o.o.

ul. 11-go Listopada 26
14-100 Ostróda
Polen

 

Last updated on August 1st, 2020

 

© Copyright GATX | Website design: Data Quest