This website is operated by GATX Rail Austria GmbH, Am Europlatz 5, Building C, A-1120 Vienna, Austria (“GATX”, “we” or “us”). GATX respects the privacy of the visitors of this website. This policy outlines the type of personal data we may collect from you in the course of your visit of this website and how we may use this data. We may update this policy from time to time, so please check it occasionally.
1. Processed data categories, legal bases and purposes of the processing
In the course of your visit of this website, we may collect and process the following personal data:
The Date and the time of your visit of this website, the address of the pages visited on our website (URL), your IP address, name and version of your web browser, the webpage (URL) you have visited before or will visit after you accessed this website, certain cookies (see point 3 below), your login data and the information that you provide to us when making an enquiry on this website (e.g., your name, address, telephone number and e-mail address).
We collect this data from you automatically when you visit this website or if you provide it to us via this website (e.g. by completing a contact form or signing up for our newsletter).
You are under no obligation to provide us with the data we ask you for. However, if you do not provide your data, you will not be able to make use of all the functions of this website. Should the provision of your data be mandatory by law, we will inform you separately thereof.
We will process the data set out above for the purposes of making this website and your user account available to you, to administer the user account, to further optimise and develop our website, to recognise, prevent and investigate attacks of our website, to analyse the usage of our website, to generate website access statistics, to analyse and forecast customer demand, to provide our newsletter and allow you to make inquiries using this website.
The legal basis of the processing of your personal data is our prevailing legitimate interest to achieve the purposes identified above (Article 6(1)(f) EU General Data Protection Regulation) or, where you have given us your consent, your consent (Article 6(1)(a) EU General Data Protection Regulation).
We do not use automated individual decision-making that would produce legal effects for you or would similarly significantly affect you.
2. Transfer of your personal data
To achieve the purposes set out above, we may transfer your personal data to our IT service providers, including the hosting provider Data Quest, and to other companies of the GATX Group as set out in point 7 below.
Some of the recipients referred to above may be located in or process personal data outside of your country. The level of data protection in another country may not be equivalent to that in your country. However, we only transfer your personal data to countries where the EU Commission has decided that they have an adequate level of data protection or we take measures to ensure that all recipients provide an adequate level of data protection. We do this for example by entering into appropriate data transfer agreements based on Standard Contractual Clauses (2010/87/EC and/or 2004/915/EC). These are accessible upon request (see the contact details in point 6).
3. Cookies and Google Analytics
We use “cookies” to improve the functionality of our websites. Cookies are small text files that may be installed on your end device when you visit a website. Cookies are generally used to provide site visitors with additional functionality within the site. Cookies cannot access, read or modify any other data on your computer.
- are going to be deleted again when you close your browser (session cookies),
- remain stored on your end user device even after you close your browser (permanent cookies),
- originate from us (first party cookies) or from third party cookies.
Through our cookies, we process data on the following legal bases:
- We use all other cookies on the basis of your consent (Article 6(1)(a) General Data Protection Regulation).
In order to withdraw your consent or to restrict it to certain cookies, you have inter alia the following options:
- Use the settings of your browser. Details can be found in the help function of your browser.
- At http://www.youronlinechoices.com/uk/your-ad-choices you can have the system analyze which cookies are used by you and deactivate them individually or in their entirety. This is an offer from the European Interactive Digital Advertising Alliance.
Withdrawing your consent does not affect the lawfulness of processing based on your consent before your withdrawal. Please note that the functionality of our websites may be impaired if you withdraw or restrict your consent.
Details about the cookies we use:
_gat or _dc_gtm_<property-id>
Throttle request rate
3.2. Google Analytics
This website also uses Google Analystics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to help the website analyze how users use the site. We process your data on the basis of our prevailing legitimate interest to cost-efficiently generate easy to use website access statistics and optimize our web offerings and advertising (Article 6(1)(f) General Data Protection Regulation).
The information generated by the cookie about your use of the website (including your IP address and the URLs of the accessed websites) will be transmitted to and stored by Google on servers in the United States. We do not store any of your personal data collected in connection with Google Analytics.
This website uses the IP anonymization feature provided by Google Analytics. Your IP address will therefore be truncated/anonymized by Google as soon as Google receives you IP address. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to us. Google will not associate your IP address with any other data held by Google.
You can also refuse the use of Google Analytics on this website by clicking the following link. An opt-out cookie will be set on the computer, which prevents the future collection of your data when visiting this website:
4. Retention period
Your personal data will only be kept for as long as it is necessary to achieve the purposes set out in point 1 above.
We will, in any case, retain your personal data for as long as (i) required under statutory retention obligations or (ii) potential legal claims, where personal data is needed to raise or defend against the claim, are not yet time-barred.
5. Your rights in connection with your personal data
Under applicable law, you have the right to (under the conditions set out in applicable law):
- obtain confirmation as to whether and what kind of personal data we store about you and to request copies of such data,
- request rectification or erasure of your personal data,
- request us to restrict the processing of your personal data,
- object to the processing of your personal data,
- withdraw any consent previously granted for the processing (withdrawing your consent does not affect the lawfulness of processing based on your consent before your withdrawal),
- request data portability, and
- lodge a complaint with the competent supervisory authority.
6. GATX Group companies
We may transfer your personal data to the following GATX Group companies:
GATX Rail Germany GmbH
GATX Rail Poland Sp z o.o.
The Warsaw HUB
GATX Rail France SAS
64 rue Tiquetonne
GATX Rail Europe B.V.
GATX Rail Switzerland GmbH
Wagon Service Ostróda Sp.z o.o.
ul. 11-go Listopada 26
Last updated on August 1st, 2020
If you have any questions or suggestions concerning the processing of your personal data by the companies of the GATX Rail Europe Group, please contact Mr. Gregor Gessner via e-mail GDPR@ or in writing gatx.eu
GATX Rail Austria GmbH
Am Europlatz 5
For questions regarding the processing of your personal data by GATX Rail Germany GmbH, you can also contact their data protection officer:
DPO Service GmbH
Attn: Mr. Philipp Karius
+49 69 2 99 08 901