Privacy Policy

Protecting personal data is important to us. With this privacy policy, we inform you in accordance with Art. 13 of the General Data Protection Regulation (GDPR) about which personal data is processed when you visit our website, the purposes for which this is done, the legal basis for the processing, and the rights to which you are entitled.

We only process personal data to the extent necessary for the provision and secure operation of our website or if you actively provide us with data, particularly via a contact form. Furthermore, we may process data for the statistical analysis of the use of our website, provided you have given your consent for this.

The controller within the meaning of Art. 4(7) GDPR is:

Erdöl-Lagergesellschaft m.b.H. (ELG or ELG Group)
Radlpaßstraße 6
8502 Lannach, Austria
Phone: +43 3136 82300
Email: datenschutz@elg.at

Data protection inquiries and the exercise of your rights can be directed to the contact address provided above.

This website is operated and hosted via Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA ("Webflow"). When you visit our website, technically necessary data is processed, which is required for the provision, functionality, security, and stability of the website. This may include, in particular:

Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, technically error-free, and efficient provision of our website, as well as in the protection of our IT systems against misuse and attacks.

Where Webflow processes personal data on our behalf, it acts as a data processor in accordance with Art. 28 GDPR. Webflow engages further sub-processors to provide its services. An up-to-date overview of the sub-processors used by Webflow is available on their website. Webflow is based in the USA. As part of the provision of its services, personal data may therefore be processed in the USA and, depending on the sub-processors used, in other countries.

Further information on data processing by Webflow can be found in the EU & Swiss Privacy Policy of Webflow.

Personal data processed in the context of hosting is generally only stored for as long as is necessary for the respective processing purposes. For personal data that Webflow processes on our behalf, the corresponding provisions of the contract or Data Processing Addendum existing between us and Webflow apply. Upon termination of the contractual relationship, the Webflow DPA generally provides for the deletion of the personal data processed on our behalf, provided there are no legal or other binding reasons to the contrary.

When you contact us via a contact form provided on our website, we process the data you enter, in particular your name, email address, any other contact details provided, and the content of your message, in order to process and respond to your inquiry.

Depending on the content of your inquiry, processing is based on Art. 6(1)(b) GDPR if your contact serves to initiate or fulfill a contract. In all other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper processing and answering of inquiries addressed to us.

Your data will only be passed on if this is necessary for processing your inquiry, if we are legally obliged to do so, or if there is another legal basis under data protection law. Where technical service providers process data on our behalf as part of the provision of the contact form, this is done in accordance with Art. 28 GDPR.

Data transmitted via the contact form is generally only stored for as long as is necessary to process your inquiry and for any potential follow-up questions. Any storage beyond this only occurs if there are statutory retention obligations or if the data is required for the establishment, exercise, or defense of legal claims.

We use the Cookie Consent application by FlowAppz to manage your consent for cookies and similar technologies.

The cookie consent banner allows you to set your preferences regarding non-technically necessary cookies and similar technologies and to revoke or change any consent already given.

According to the provider, the selection you make in the cookie consent banner is generally stored in your browser. In particular, cookies are used to save your selection or the fact that the banner has already been displayed. According to the provider, the Cookie Consent app does not transmit this consent decision to FlowAppz, unless we have configured our own storage via an endpoint or webhook.

The storage period for the consent information depends on the consent duration we have configured in the cookie consent banner.

FlowAppz points out that the provider does not independently determine the configuration of our website for us, nor does it determine the categories we define or the actual use of cookies. As the website operator, we are responsible for the correct configuration and for providing information about the technologies actually used.

Our website may use cookies or similar technologies that are necessary for the technical operation, security, or functionality of the website that you have expressly requested.

Where such storage or access to information on your device is strictly technically necessary, this is done on the basis of the applicable legal provisions. Pursuant to Section 165(3) of the Telecommunications Act (TKG) 2021, consent is generally required unless the storage or access is strictly technically necessary.

We use Webflow Analyze, an integrated analysis feature offered by Webflow, to statistically evaluate the use of our website and to improve the content, structure, and user-friendliness of our website.

Webflow states that Analyze does not use cookies to recognize visitors. Instead, it uses local storage in the browser. According to Webflow, Analyze processes anonymous identifiers as well as non-personally identifiable usage information, such as device type and pages visited, and provides this information in aggregated form for the analysis of website usage.

Where consent is required for the use of Webflow Analyze, tracking on our website is only activated after you have provided your consent via our cookie consent banner.

In this case, processing is based on your consent pursuant to Art. 6(1)(a) GDPR and, where applicable, the provisions governing access to information in terminal equipment.

Webflow explicitly provides a setting for Analyze where visitors are not tracked by default and are only tracked after express consent ("Don't track by default"). The specific technical configuration of our website is set up in accordance with our chosen consent settings.

You can revoke or change your consent at any time with effect for the future via the settings in our cookie consent banner. The lawfulness of the processing carried out based on your consent until the revocation remains unaffected.

Webflow describes Analyze as a privacy-oriented analysis feature and states that no personally identifiable information ("PII") is intended to be collected. Regardless of this, we are informing you about the use of this feature, as information about the use of our website and technical information about the device used may be processed.

Our website uses SSL/TLS encryption to protect the transmission of confidential content. An encrypted connection can be recognized by the fact that the website address begins with "https://" and a corresponding security symbol is displayed in your browser.

Encryption protects the data transmitted between your device and our website from unauthorized access during transmission.

In the context of hosting and using Webflow services, personal data may be processed in countries outside the European Union or the European Economic Area.

Webflow is a company based in the USA. Webflow states that it relies on the EU-U.S. Data Privacy Framework for certain transfers of personal data from the European Economic Area to the USA, provided the relevant requirements are met. Furthermore, the Webflow Data Processing Addendum provides for the use of the European Commission's standard contractual clauses for such transfers.

Where an adequacy decision pursuant to Art. 45 GDPR exists for a transfer, the transfer may be based on this. Where necessary, appropriate safeguards pursuant to Art. 46 GDPR, in particular the European Commission's standard contractual clauses, are used.

A current overview of the sub-processors used by Webflow and their locations is available from Webflow.

Unless a more specific storage period is stated in this privacy policy, we only store personal data for as long as it is necessary for the respective processing purpose.

Longer storage may occur, in particular, if there are statutory retention or documentation obligations, or if personal data is required for the establishment, exercise, or defense of legal claims. Once the respective purpose has ceased to apply and relevant retention periods have expired, the data will be deleted or anonymized, provided there is no other legal basis for further processing.

Subject to the statutory requirements, you are entitled to the following rights in particular:

Insofar as processing is based on your consent, you may withdraw any consent given at any time with effect for the future in accordance with Art. 7(3) GDPR. The lawfulness of the processing carried out until the withdrawal remains unaffected.

To exercise your rights, you can contact us using the contact details provided in section 2.

If personal data is processed on the basis of Art. 6(1)(f) GDPR, you have the right, under the conditions of Art. 21 GDPR, to object to this processing at any time for reasons arising from your particular situation.

We will no longer process the personal data in question after a valid objection, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If you believe that the processing of your personal data violates the GDPR or other data protection regulations, you have the right to lodge a complaint with a competent data protection supervisory authority in accordance with Art. 77 GDPR.

In Austria, this is primarily the "Austrian Data Protection Authority" (DSB), Barichgasse 40-42, 1030 Vienna. Further information can be found on the DSB website.

As of the current status, no decision-making based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR takes place on this website.

We reserve the right to update this privacy policy if legal requirements, the technical design of our website, or the services we use change.

The current version published on our website applies.

This privacy policy is based in particular on:

For Webflow, particular consideration was given to the EU & Swiss Privacy Policy provided by Webflow, the Data Processing Addendum, and the current list of sub-processors.