Data protection
of the BOE

Privacy Policy

Data controller
BOE Gebäudemanagement Gesellschaft m.b.H.
FN 33879y
Ing.-Etzel-Str. 9, 6020 Innsbruck

Provision of the website

1. Scope and purpose of data processing

For technical reasons, every time you visit our website, our system automatically collects the following data and information, which your device transmits to our website server:
1.    Browser type and version used
2.    Operating system of the device
3.    Internet service provider
4.    IP address of the device (anonymised if necessary)
5.    Date and time of access
6.    Websites from which the device accesses our website
7.    Websites accessed by the device via our website

This data is processed in order to ensure a smooth connection to the website and to optimise our website and our offers. The aforementioned data is also temporarily stored in our system's log files. This data is not stored together with any personal data you may have provided, so that it cannot be traced back to a specific person. IP addresses are only stored in anonymised form.

2. Legal basis for data processing
Our legitimate interest pursuant to Art. 6(1)(f) GDPR.

3. Recipients
This data is also processed by the following recipients: our IT service providers in accordance with their obligation to our contract.

4. Storage period
In the case of data collection for the provision of the website: immediately after the end of the respective session.

In the case of data storage in log files: after seven days at the latest.

Contacting us

1. Scope and purpose of data processing
We offer you various options (telephone, contact forms, e-mail) for contacting us. The data you provide, enter or transmit by e-mail will be processed or stored. In the case of digital data transmission, additional information such as the IP address, date and time of the request is also stored. We require this information in order to process your request. Your data will not be passed on to third parties without your consent. The data collected in this way will also not be compared with data that may be collected by other components of our website.

The provision of your personal data is voluntary. However, without this information, we are unable to provide you with a means of contacting us by email or form.

2. Legal basis for data processing
Your consent in accordance with Art. 6(1)(a) GDPR or the fulfilment of the contract/implementation of pre-contractual measures in accordance with Art. 6(1)(b) GDPR.

3. Recipients
The data is also processed by the following recipients: our IT service providers in accordance with their obligation to us.

4. Storage period
-    Until the purpose is achieved
-    12 months for enquiries with long-term validity
-    7 years for matters subject to tax law retention requirements

Job applications

1. Scope and purpose of data processing
We offer you various options for applying for a position at BOE. As part of the application process, we process the data that you provide to us in the course of this process.

The provision of your personal data is voluntary. However, it is not possible to apply for a job via our website without providing this data.

2. Legal basis for data processing
Contract fulfilment/implementation of pre-contractual measures in accordance with Art. 6 (1) (b) GDPR or our legitimate interest in centralised applicant management in accordance with Art. 6 (1) (f) GDPR.

3. Recipients
The data is also processed by the following recipients: our IT service providers in accordance with our contract, List Beteiligungsges.m.b.H.

4. Storage period
For applicants who are not hired: no later than 6 months after completion of the application process.

Video surveillance

1. Scope and purpose of data processing
The car parks, multi-storey car parks and parking spaces operated by us (hereinafter referred to as ‘parking facilities’) are predominantly monitored by video surveillance. Video surveillance is indicated at the entrance in accordance with legal requirements. Image data from the video-monitored area, the time and location of the image recording and the details of the recording camera are processed and stored.

The data is processed for the purpose of monitoring compliance with the car park regulations, providing (technical) customer service, protecting property, protecting against damage (fulfilling traffic safety obligations, contractual liability towards customers, etc.), containing, preventing and prosecuting criminal behaviour, and exercising domiciliary rights.

The provision of data is voluntary. It is not possible to use a video-monitored parking facility without providing data.

2. Legal basis for data processing
Contractual performance in accordance with Art. 6 (1) (b) GDPR or safeguarding our legitimate interests as specified in point 1 in accordance with Art. 6 (1) (f) GDPR; Section 12 (2) (4) in conjunction with (3) (2) DSG, Section 80 StPO, Sections 353 ff ABGB.

3. Recipients
The data will be transmitted to the following recipients as necessary:
- IT service providers and customer centres as our processors in accordance with our contract,
- Courts for the preservation of evidence in civil law cases,
- Insurance companies for the settlement of insurance claims; solicitors exclusively for the enforcement or defence of legal claims,
-    authorities and courts for the purpose of securing evidence in criminal cases,
-    security authorities for security police purposes,
-    other authorities within the scope of their responsibilities,
-    clients of the operator of the parking facility as the operating manager.

4. Storage period
72 hours (Section 13 (3) DSG), unless longer storage of the data is necessary for specific reasons to fulfil its protection and evidence preservation purposes.

Licence plate recognition

1. Scope and purpose of data processing
The car parks, multi-storey car parks and parking spaces operated by us (hereinafter referred to as ‘parking facilities’) are predominantly equipped with licence plate recognition. In accordance with legal requirements, licence plate recognition is indicated before entry. The vehicle registration number, time and place of entry into and exit from the parking facility, vehicle status (present/absent), details of the recording camera and the parking tariff are processed and stored.

The data is processed to ensure efficient, ticketless and customer-friendly parking management as well as a quick and uncomplicated payment process.

The provision of data is voluntary. It is not possible to use the parking facility without providing data.

2. Legal basis for data processing
Contract fulfilment in accordance with Art. 6(1)(b) GDPR or our legitimate interest in achieving the legitimate interests mentioned in point 1 in accordance with Art. 6(1)(f) GDPR.

3. Recipients
The data will be transmitted to the following recipients as necessary:
-    IT service providers, operators of the customer portal and customer centre as our processors in accordance with our contract,
-    Credit card companies, payment service providers,
-    Lawyers exclusively for the enforcement or defence of legal claims, insurance companies for the settlement of insurance claims,
-    Clients of the operator of the parking facility as the operating manager.

4. Storage period
-    24 hours after complete completion of the parking process (payment and exit),
-    30 days after exit in the case of payment on account,
-    30 days after entry in the case of incomplete parking transactions,
-    90 days after entry in the case of open parking transactions,
-    90 days after a reminder in the case of completed parking transactions with outstanding costs,
unless longer storage of the data is necessary for a specific reason in order to enforce the claims of the controller.

Customer portal

On our website, we offer you the option of creating a BOE customer account so that you can benefit from regular customer price advantages and/or manage your long-term parking contracts and data. You will receive more detailed information on data protection in connection with the customer account during the registration process or at https://boe.arivo.app/privacy-policy.

Cookies and implemented technologies

1. Scope and purpose of data processing
We use the following cookies and implemented technologies from third-party providers on our website:
- Matomo for statistical evaluation of user access, whereby the IP address is immediately anonymised;
- Google Tag Manager for analysing and optimising website processes;
- Google Analytics for analysing user behaviour;
- Google Ads for displaying personalised or non-personalised advertising.

Unless cookies and implemented technologies are technically necessary for the operation of the website, you can manage their use via the consent management tool on the home page. Most browsers also have an option to restrict or completely prevent the storage of cookies. However, please note that the use and, in particular, the ease of use of the website will be restricted without cookies.

2. Legal basis for data processing
Your consent in accordance with Art. 6 (1) (a) GDPR or our legitimate interest in ensuring the functionality, optimisation and statistical evaluation of the website and the economic operation of our online offering in accordance with Art. 6 (1) (f) GDPR.

3. Recipients
The data is also processed by the following recipients: our IT service providers in accordance with our contract.

4. Storage period
-    Until you revoke your consent or until the purpose is achieved, but for a maximum of 400 days.

Integration of third-party services and content

Third-party content, such as videos from YouTube, map material from Google Maps or graphics from other websites, may be integrated into this online offering. This always requires that the providers of this content (hereinafter referred to as ‘third-party providers’) perceive the IP address of the users. Without the IP address, they would not be able to send the content to the browser of the respective user. The IP address is therefore necessary for the display of this content. We endeavour to use only content whose respective providers use the IP address solely for the delivery of the content. However, we have no influence on whether third-party providers store the IP address for statistical purposes, for example. As far as we are aware of this, we inform users accordingly.

Rights of data subjects – information, correction, transfer and deletion

In accordance with current data protection regulations, you have the right to obtain information about your personal data processed by us.
In addition, you have the right to correct inaccurate personal data concerning you and to complete incomplete personal data. You are entitled to request the deletion of personal data concerning you. We will delete your personal data if the personal data is no longer required for the purposes for which it was collected or processed. To the extent that we are aware of this, we will inform users accordingly.

Rights of data subjects – access, rectification, transfer and erasure

In accordance with current data protection regulations, you have the right to obtain information about your personal data processed by us.
In addition, you have the right to have inaccurate personal data concerning you rectified and incomplete personal data completed.
You are entitled to request the erasure of personal data concerning you. We will erase your personal data if the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, if consent required for processing is revoked; the personal data has been processed unlawfully, or the deletion of the personal data is necessary to comply with a legal obligation. Data that we need to assert, exercise or defend legal claims, as well as data that we are required to retain due to mandatory provisions, is excluded from deletion.
You may revoke any consent you have given to the collection and storage of your personal data at any time, in whole or in part, with effect for the future. In the event of your revocation, certain services may no longer be provided or may only be provided to a limited extent.

You may revoke any consent you have given to the collection and storage of your personal data at any time, in whole or in part, with effect for the future. In the event of your revocation, certain services may no longer be provided or may only be provided to a limited extent.
You may also have the right to restrict the processing of your data and the right to receive the personal data you have provided in a structured, commonly used and machine-readable format.
For any explanations or enquiries regarding the above points of the privacy policy, please contact the above-mentioned controller in writing or send an email to: datenschutz@boe.co.at.
To protect your security and privacy, we reserve the right to verify your identity before responding to your request or taking any of the above measures.

If you believe that the processing of your personal data violates data protection law or that your data protection rights have been violated in any other way, you have the right to lodge a complaint with the data protection authority.
Complaints should be addressed to:
Austrian Data Protection Authority | Barichgasse 40-42 | 1030 Vienna | Telephone: +43 1 52 152-0 | Email: dsb@dsb.gv.at

SSL encryption

Our website uses SSL encryption to securely transmit your data (e.g. contact form). You can recognise an encrypted connection by the string ‘https://’ and the lock symbol in the address bar of your browser.

Changes to this privacy policy

We reserve the right to amend this privacy policy as necessary, in particular in the event of changes to data protection requirements. Subject to any mandatory legal provisions to the contrary, the amendment shall take effect upon publication on our website.