Home | Privacy Statement

Privacy Statement

Privacy policy for Milford Tee Austria Gesellschaft m.b.H.

he requirements of the EU Data Protection Basic Regulation (hereinafter referred to as GDPR) apply throughout Europe. We would like to inform you about the processing of personal data carried out by our company in accordance with this regulation (see Articles 13 and 14 GDPR). If you have any questions or comments about this privacy statement, you can always send them to the e-mail address given in sections 2 and 3 respectively.

TTable of contents:

I. Overview

  1. Scope
  2. Data Controlle
  3. Data Protection Office

II. The Data Processing in Detail

  1. General information about data processing
  2. Accessing the website / application
  3. Contact for
  4. Job applicatio
  5. Tracking

III. Rights of the data subjects

  1. Right to objection
  2. Right to access
  3. Right to rectification
  4. Right to  erasure ("right to be forgotten")
  5. Right to restriction of processing
  6. Right to data transferability
  7. Right to withdraw consent
  8. Right of appea

IV. Glossary


I. Overview

In this section of the data protection declaration you will find information on the scope, the person responsible for data processing (the “Data Controller” or simply the “Controller”), the Data Protection Officer and on Data Security.  

1. Scope

Data processing by  Milford Tee Austria Gesellschaft m.b.H. may essentially be divided into two categories:

  • All data required for the performance of a contract with Milford Tee Austria Gesellschaft m.b.H. will be processed for the purpose of processing the contract. If external service providers are also involved in the performance of these contracts, your data will be passed on to them to the extent necessary in each case.
  • When you access the website / application of Milford Tee Austria Gesellschaft m.b.H., various pieces of information are exchanged between your device and our server. This may also involve personal data. The information collected in this way is used, among other things, to optimise our website or to display advertising in the browser of your device.

This privacy policy applies to the following services :

  • our online service is available at www.milford.at
  •   All other services (e.g. websites, subdomains, mobile applications, web services or links to third party sites) that refer to this privacy policy, regardless of how you access or use it. All of these services are collectively referred to as „services“.

2. Data Controller

The controller for the data processing - i.e. the person who or the undertaking that decides on the purposes and means of processing personal data - in connection with the Services is

Milford Tee Austria Gesellschaft m.b.H.
Postgasse 11 / Top 17
1010 Wien
Phone: +43 1 8900654-0
E-mail: [Email protection active, please enable JavaScript.]

3. Data Protection Officer

You  may contact our Data Protection Officer as follows:

Contact form: https://www.dsextern.de/anfragen

Dipl.-Kfm. Marc Althaus
Bredkamp 53a
22589 Hamburg


II. Data processing in detail

In this section of the Privacy Policy, we will inform you in detail about the processing activities within the scope of our services. For better clarity, we structure this information according to certain functionalities of our Services. During the normal use of the Services, different functionalities and thus also different processing operations can take effect one after the other or simultaneously.

1. General information about data processing operations

Unless otherwise indicated, all processing operations set out below are subject to the following conditions:

a. No obligation to provide personal data

There is no contractual or legal obligation to provide personal data. You are not obliged to provide data. 

b. Consequences of non-provision

In the case of necessary data (data that are marked as mandatory data when entered), non-provision of this data means that the service in question cannot be provided. Otherwise the non-provision may result in our services not being provided in the same form and quality . 

c. Consent

In various cases you may have the opportunity to give us your consent to further processing in connection with the processing activities described below (even for only some of the data concerned). In this case, we will inform you separately about all modalities and the scope of the consent and about the purposes that we pursue with these processing activities in connection with you giving the respective declaration of consent . 

d. Transfer of personal data to third countries

If we transmit data to third countries, i.e. countries outside the European Union, then the transmission takes place exclusively in compliance with the legally regulated conditions of permissibility. The admissibility requirements are regulated by Art. 44–49 DSGVO.

e. Hosting with external service providers

Our data processing is carried out to a large extent by so-called hosting service providers, who provide us with storage space and processing capacities in their data centres and also process personal data on our behalf in accordance with our instructions. These service providers process data either exclusively in the EU or we have guaranteed an adequate level of data protection through the EU standard data protection clauses. 

f. Transmission of public authorities

We only transfer personal data to government authorities (including law enforcement agencies) when such a transfer is necessary to fulfil a legal obligation to which we are subject to (legal basis: Art. 6 Para. 1 c) GDPR) or if it is necessary to assert, exercise or defend legal claims (legal basis: Art. 6 Para. 1 f) GDPR) .

g. Retention period

We do not store your personal data for a longer period than we need it for the respective processing purposes. If the data are no longer required for the fulfilment of contractual or legal obligations, they are regularly deleted, unless their temporary storage is still necessary. Reasons for this could be:

  • Compliance with commercial and tax retention obligation
  • Obtaining or retaining evidence for legal disputes within the scope of the statutory limitation provisions

We may also continue to store your data with us if you have given us your express consent.

h. Categories of recipients

In addition to the categories of recipients explicitly listed below, personal data is also transmitted to the following categories of recipients: postal or shipping providers, telephone and fax providers. 

i. Data categories

  • Account data: Login / user ID and password
  • Personal master data: title, gender, first name, last name, date of birth
  • Address data:  Street, building name or number, address supplements if applicable, postal code, city, country
  • Contact data:  Telephone number(s), fax number(s), e-mail address(es)
  • Registration data:  Information about the service you have registered for; times and technical information about registration, confirmation and cancellation; data provided by you during registration.
  • Access data: Date and time of the visit to our service; the page from which the accessing system accessed our site; pages accessed during use; session ID data; also the following information about the accessing computer system: Internet protocol address used (IP address), browser type and version, device type, operating system and similar technical information.
  • Application data:  Curriculum vitae, references and further evidence of previous employment, work samples, certificates, pictures

2. Accessing the website / application

This section describes how we process your personal data when accessing our services. We would particularly like to point out that the transmission of access data to external content providers (see b.) is unavoidable due to the technical functionality of information transmission on the Internet . 

2.1 We use the following cookies on our websites

Cookie name:

Purpose / function:

Retention period:

_pk_id.… /

Helps to keep the visitor ID value assigned by Piwik/Matomo in order to recognize returning visitors.

This cookie expires after 2 years.


Responsible for keeping the Piwik/Matomo session active after the last action tracked.

This cookie expires after 1 year.


A numeric code is generated (randomly) that identifies the user's session.

This is a session cookie and is deleted by the browser as soon as it is closed.


Saves the language selected by the user.

This is a session cookie and is deleted by the browser as soon as it is closed.


With this cookie, the load balancer decides which server answers the request.

This cookie expires after 1 hour.


With this cookie the website remembers that the data protection notice has been taken note of and the banner is no longer displayed.

This cookie expires 10 years after it was stored.

2.2 Processing activitie

a. Information on processing

Data category

Intended purpose

Legal basis

Legitimate interest, if any

Retention period

Access data   

Establishing a connection, displaying the contents of the service, detecting attacks on our site based on unusual activities, fault diagnosis

Art. 6 para. 1 letter f) GDPR           

proper functioning of services, security of data and business processes, prevention of misuse, prevention of damage caused by interference with information systems

7 days


User-friendly website design and device recognition


Art. 6 para. 1 f) GDPR         

User-friendly website design and device recognition


See list under 2.1.

b. Recipient of personal data

Recipient category

Data concerned

Legal basis for the transmission

Legitimate interest, if any

Hosting service provider

Access data

Order processing (Art. 28 GDPR)


IT security service provider

Access data

Order processing (Art. 28 GDPR)    


Access data

Order processing (Art. 28 GDPR)     

3. Contact form


We describe here what happens to your personal data in connection with the use of our contact forms: 

a. Information on processing

Data category Intended purpose Legal basis Legitimate interest, if any Retention period
Contact details (mandatory mail field) Inquiries from customers and interested parties Art. 6 para. 1 letter f) GDPR Processing of aubmitted requests Duration of processing the  requests
People master data Personalization of request processing Art. 6 para. 1 letter f) GDPR Personalization of request processing; delivery option for e.g: replacement delivery, information material … Duration of processing the  requests
Address data Mailing Art. 6 para. 1 letter f) GDPR Delivery option for e.g: Replacement delivery, information material … Duration of processing the  requests
Free text (mandatory specification) Information of the request Art. 6 para. 1 letter f) GDPR Processing of requests made Duration of processing the  requests

4. Job applications

We describe here what happens to your personal data in connection with applications: 

a. Information on processing

Data category Intended purpose Legal basis Legitimate interest, if any Retention period
Address data, contact details Identification, contacting, communication prior to concluding a contract Art. 6 para. 1 b) GDPR   6 months
Personal master data Identification, contacting, age verification Art. 6 para. 1 b) GDPR   6 months
Application details Applicant selection Art. 6 para. 1 b) GDPR   6 months

b. Recipient of personal data

Recipient category

Data concerned

Legal basis for the transmission

Legitimate interest, if any

HR consultants, temporary employment agencies

All data mentioned under a.

Order processing (Art. 28 GDPR)

Filling of vacant positions in the company

5. Tracking

Below we describe how your personal data is processed using tracking technologies to analyse and optimise our services and for advertising purposes.

The description of the tracking procedures also includes information on how you can prevent or object to data processing. Please note that the so-called "opt-out", i.e. the rejection of processing, is usually stored via cookies. If you use our services via a new device or in a different browser, or if you have deleted the cookies set by your browser, you must declare your rejection again.

The tracking procedures presented process personal data only in pseudonymous form. A connection with a specific, identified natural person, i.e. a combination of the data with information about the bearer of the pseudonym, does not take place.

Tracking to analyze and optimize our services and their use, as well as to measure the success of advertising campaigns and optimize advertising

Purposes of processing

The analysis of user behaviour by means of tracking helps us to check the effectiveness of our services, to optimise them and to adapt them to the needs of the users as well as to correct errors. In addition, it serves to statistically determine characteristic values about the use of our services (reach, intensity of use, surfing behavior of users) - on the basis of uniform standard procedures - and thus to obtain market-wide comparable values. The purpose of tracking to measure the success of advertising campaigns is to optimize our ads for the future and also to enable marketers and advertisers to optimize their ads accordingly. The purpose of tracking to optimize the display of advertising is to show users advertisements tailored to their interests, the success of the advertising and thereby increase advertising revenue.

Legal basis of the processing

Legitimate interest pursuant to Art. 6 para. 1 f) GDPR

The tracking procedures used in detail

Name of service How it works Possibility to prevent processing (opt-out) Data Transfer to third country? If applicable, adequacy decision (Article 45 GDPR) Appropriate guarantees, if any (Art. 46 GDPR)
Matomo/Piwik web analytics https://matomo.org/docs/privacy/ no  ./. ./.

If you wish to opt out of interest-based advertising, you may also visit the website http://www.youronlinechoices.com/en/, click on "Preference Management", and follow the instructions to completely or individually opt out of the use of interest-based advertising data by the service providers listed there. You will still receive advertising that is – however - not interest-based.


III. Rights of the data subjects

1. Right to objection

If we process your personal data for the purpose of direct marketing purposes, you have the right to object, taking effect for the future, at any time to the processing of your personal data for the purpose of such marketing.

You also have the right, for reasons related to your particular situation, to object at any time and with future effect to the processing of personal data concerning you carried out pursuant to Article 6 (1) (e) or (f) GDPR appeal.

You can exercise your right of objection free of charge. You can reach us via the contact details mentioned under I.2.

2. Right to access

You have the right to obtain from us confirmation as to whether or not we process personal data concerning you, which personal data this may be, and other information pursuant to Art. 15 GDPR.

3. Right to rectification

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning yourself (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to have incomplete personal data completed- including by means of providing a supplementary statement.

4. Right to erasure ("right to be forgotten")

You have the right to obtain from us the erasure of your personal data without undue delay if one of the grounds stated in Art. 17 para. 1 GDPR applies and the processing is not necessary for one of the purposes regulated in Art. 17 para. 3 GDPR.

5. Right to restriction of processing

You are entitled to obtain from us restriction of processing of your personal data if one of the conditions laid down in Art. 18 para. 1 letters a) to d) GDPR applies.

6. Right to data transferability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another responsible person without hindrance from us or to obtain a direct transfer by us, if this is technically possible. This shall apply whenever the data processing is based on consent or a contract and the data are processed automatically. This therefore does not apply to data held only in paper form.

7. Right to withdraw consent

If the processing is based on your consent, you have the right to withdraw your consent at any time. This shall not affect the lawfulness of the processing carried out on the basis of consent until withdrawal.

8. Right of appeal

You have the right of appeal to a supervisory authority.


IV. glossary

Processo: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Browser: Computer program for displaying websites (e.g. Chrome, Firefox, Safari)

Cookies: In connection with the World Wide Web, a cookie describes a small text file that is stored locally on the user's computer when a website is visited. This file stores data about the behaviour of the user. If the browser is called and the corresponding website is visited repeatedly, the cookie is used and provides the web server information about the surfing behaviour of the user using the stored data. Cookies in this context are about information that a website stores locally on the visitor's computer in a small text file. This can be settings already made by the user on a page, but also information that the website has collected completely independently from the user. Later, these locally stored text files can be read out again by the same web server from which they were created. Most browsers automatically accept cookies. You can manage cookies using the browser functions (usually under "Options" or "Settings"). This may deactivate the storage of cookies, make it dependent on your consent in individual cases or otherwise restrict it. You can also delete cookies at any time.

Third countries: country not bound by the legal requirements of the EU Data Protection Directive (country outside the EEA).

Personal data: Any information relating to an identified or identifiable natural person. A natural person shall be regarded as identifiable if he can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics expressing the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Pixel: Pixels are also called counting pixels, tracking pixels, web beacons or web bugs. These are small, invisible graphics in HTML emails or on web pages. When a document is opened, this small image is downloaded from a server on the Internet, where the download is registered. This allows the server operator to see if and when an e-mail was opened or a website visited. Usually this function is realized by calling a small program (Javascript). This allows certain types of information to be recognized and shared on your computer system, such as the content of cookies, the time  and date the page was viewed, and a description of the page on which the tracking pixel is located.

Profiling: any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects of that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or movement

Services: Our offers, to which this data protection declaration applies (see scope of applications).

Tracking: The collection of data and its evaluation regarding the behaviour of visitors to our services.

Tracking Technologies: Tracking can be done both through the activity logs (log files) stored on our web servers and by collecting data from your device device via pixels, cookies and similar tracking technologies.

Processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Our website uses cookies to help provide you with the best experience we can. For more information about cookies, please visit our privacy policy.