Last update: 20. April 2025
Thank you for your interest in the information on our website!
With the help of this Privacy Policy we would like to inform the users of our website about the type, scope and purpose of the personal data processed. Personal data in this context is all information that can be used to personally identify you as a user of our website (theoretically in an alternative way or by linking various data), including your IP address. Information that is stored in cookies is generally not or only in exceptional cases personally identifiable; however, cookies are covered by specific regulations that makes the permissibility of the use of cookies dependent on their purpose to a large extent on the active consent of the user.
In a general section of this Privacy Policy, we provide you with information on data protection, which generally applies to our processing of data, including data collection on our website. In particular, you as a data subject will be informed about the rights to which you are entitled.
The terms used in our Privacy Policy and our data protection practice are based on the provisions of the EU General Data Protection Regulation ("GDPR") and other relevant national legal provisions.
OMV Aktiengesellschaft
Trabrennstraße 6-8
1020 Wien
Austria
e: info@omv.com
On the one hand, personal data is collected from you when you expressly communicate such data to us, on the other hand, data, especially technical data, is automatically collected when you visit our website. Some of this data is collected to ensure that our website functions without errors. Other data may be used for analysis purposes. However, you can use our website without a need to provide personal information.
We use cookies to make our website as user-friendly and functional as possible for you. Some of these cookies are stored on the device you use to access the site.
Cookies are small packages of data that are exchanged between your browser and our web server whenever you visit our website. They do not cause any damage and are used solely to recognise website visitors. Cookies can only store information provided by your browser, e.g. information that you have entered into your browser or that is available on the website. Cookies cannot execute code and cannot be used to access your terminal device.
The next time you access our website using the same device, the information stored in the cookies can then either be sent back to us (“first-party cookie”) or to a web application of third party to whom the cookie belongs (“third-party cookie”). The information that is stored and sent back allows each web application to recognise that you have already accessed and visited the website using the browser on your device.
Cookies contain the following information:
We classify cookies in the following categories depending on their purpose and function:
Depending on the storage period, we also divide cookies into session and persistent cookies. Session cookies store information that is used during your current browser session. These cookies are automatically deleted when the browser is closed. No information remains on your device. Persistent cookies store information between two visits to the website. Based on this information, you will be recognized as a returning visitor on your next visit and the website will react accordingly. The lifespan of a persistent cookie is determined by the provider of the cookie.
The legal basis for using technically necessary cookies is our legitimate interest in the technically fault-free operation and smooth functionality of our website. The use of statistics and marketing cookies is subject to your consent. You can withdraw your consent for the future use of cookies at any time. Your consent is voluntary. If consent is not given, no disadvantages arise. For more information about the cookies we actually use (specifically, their purpose and lifespan), refer to this Privacy Policy and to the information in our cookie banner about the cookies we use.
You can also set your web browser so that it does not store any cookies in general on your device or so that you will be asked each time you visit the site whether you accept the use of cookies. Cookies that have already been stored can be deleted at any time. Refer to the Help section of your browser to learn how to do this.
Please note that a general deactivation of cookies may lead to functional restrictions on our website.
On our website, we also use so-called local storage functions (also called "local data"). This means that data is stored locally in the cache of your browser, which continues to exist and can be read even after you close the browser - as long as you do not delete the cache or data is stored within the session storage.
Third parties cannot access the data stored in the local storage. If special plug-ins or tools use the local storage functions, you are informed within the description of the respective plug-in or tool.
If you do not wish plug-ins or tools to use local storage functions, you can control this in the settings of your respective browser. We would like to point out that this may result in functional restrictions.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, e-mail: support-de@google.com
Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Purpose: Web analysis, performance measurement, conversion tracking, collection of statistical data
Category: Statistics
Recipient: EU, USA
Processed data: IP address, details of the website visit, user data
Data subjects: Website visitors
Technology: JavaScript call, cookies (details in the cookie list), fingerprinting, local storage
Legal basis: Consent (purpose)
Certifications: EU-U.S. Data Privacy Framework, Swiss-U.S. Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework
Further information:
https://policies.google.com/privacy
https://safety.google/intl/de/principles/
https://business.safety.google/adsprocessorterms/
Here you can find out exactly where Google data centers are located: https://www.google.com/about/datacenters/locations/
On our website, we use the functions of the web analysis service Google Analytics to analyze user behavior and to optimize our website. The reports provided by Google are used to analyze the performance of our website and to measure the success of possible campaigns via our website.
Google Analytics uses cookies that enable us to analyze the use of our website. All details (name, purpose, storage duration) of the cookies can be found in our specific list of cookies used.
Google Analytics can use local storage. This is an alternative to using cookies to store the client ID. This makes it possible to track user behavior without setting cookies.
Information about the use of the website such as browser type/version, operating system used, the previously visited page, host name of the accessing computer (IP address), time of the server request are usually transmitted to a Google server and stored there. We have concluded a contract with Google for this purpose.
Google will use this information on our behalf to evaluate the use of our website, to compile reports on the activities within our website and to provide us with further services associated with the use of our website and the Internet.
We only use Google Analytics with IP anonymization activated by default. This means that the IP address of a user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by a user's browser as part of Google Analytics is not linked to other Google data.
During the website visit, user behavior is recorded in the form of so-called events. These can be the following:
is also recorded:
This data is essentially processed by Google for its own purposes, such as profiling (without us being able to influence this).
The data on the use of our website will be deleted immediately after the end of the retention period set by us. Google Analytics specifies a standard retention period of 2 months for user and event data, with a maximum retention period of 14 months. This retention period also applies to conversion data. The following options are available for all other event data: 2 months, 14 months, 26 months (Google Analytics 360 only), 38 months (Google Analytics 360 only), 50 months (Google Analytics 360 only). We choose the shortest storage period that corresponds to our intended use. You can ask us at any time about the retention period we have currently set.
Data whose retention period has been reached is automatically deleted once a month.
Additional details can be found in the linked further information. It is recommended that you check these links regularly for changes, as Google Analytics may update its functions and privacy policy. Further information on rights and contact details can be found in the general section of this privacy policy.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC (USA)
Purpose: Personalized Advertising, Conversion Tracking, Remarketing, Campaign Performance Measurement
Category: Marketing
Recipients: EU, USA
Data processed: IP Address, Website Visit details, User data
Data subjects: Users
Technology: JavaScript Call, Cookies
Legal basis: Consent, Data Privacy Framework, https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
Website: https://www.google.com
Further information:
https://policies.google.com/privacy
https://safety.google/intl/de/principles/
https://business.safety.google/adsprocessorterms/
Here you can find out where exactly Google data centers are located: https://www.google.com/about/datacenters/inside/locations/
On this website, the Google Ads service is used for the purpose of advertising our products and services. Google Ads is Google's in-house online advertising system.
It is important for us to know whether an interested visitor ultimately becomes our customer. To be able to measure this, there is the so-called conversion tracking. Furthermore, we would like to be able to address visitors to our website again and in a targeted manner. We achieve this through so-called remarketing (retargeting).
Google Ads serves both conversion tracking and remarketing, i.e. we can see what happened after you clicked on one of our ads. In order for this service to work, cookies are used and visitors are sometimes included in remarketing lists in order to be served only with certain advertising campaigns.
This is done by means of a pseudonymous identification number (pID), which the browser of a user receives and is assigned to him. This pID enables the service to recognize which ads have already been displayed to a user and which have been called up. The data is used to serve ads across websites by enabling Google to identify the pages visited by the user.
Our goal is that the offer of our website through the use of Google Ads targeted to those visitors who are actually interested in our offer. The data from conversion tracking allows us to measure the benefit of individual advertising measures and optimize our website for our visitors. Conversion can be measured through the use of cookies.
The information generated is transferred by Google to a server in the U.S. for evaluation and stored there. A transfer of data by Google to third parties only takes place due to legal regulations or in the context of commissioned data processing. Under no circumstances will Google link data of a user with other data collected by Google.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC (USA)
Purpose: Launching Tools and Plugins
Category: Technically Required
Recipients: EU, USA (possible)
Data processed: IP Address
Data subjects: User
Technology: JavaScript Call
Legal basis: legitimate interest, Data Privacy Framework, https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
Website: https://www.google.com
Further information:
https://policies.google.com/privacy
https://safety.google/intl/en/principles/
https://business.safety.google/adsprocessorterms/
Here you can find out where exactly Google data centers are located: https://www.google.com/about/datacenters/locations/
The Google Tag Manager service is used on our website.
The Tag Manager is a service that allows us to manage website tags via an interface. This allows us to include code snippets such as tracking codes or conversion pixels on websites without interfering with the source code. In doing so, the data is only forwarded by the Tag Manager, but neither collected nor stored. The Tag Manager itself is a cookie-less domain and does not process any personal data, as it serves purely to manage other services in our online offering.
When the Google Tag Manager is started, the browser establishes a connection to Google's servers. These are mainly located in the U.S. Through this, Google obtains knowledge that our website was called up via the IP address of a user.
The Tag Manager ensures the resolution of other tags, which in turn may collect data. However, the Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags that are implemented with the Tag Manager.
In the process of hosting our website, we store all data related to the operation of our website. This is necessary for enabling operation of our website. Therefore, we process this data on the legal grounds of our legitimate interest in optimising our website. To provide access to our website, we use the services of web hosting providers, to whom we supply the aforementioned data within the context of contractual processing.
We offer various ways to get in touch with us on our website. Whenever you contact us, your information is used to process and handle your contact request in the course of fulfilling pre-contractual rights and obligations. To handle and answer your request it is necessary for us to process your data; otherwise we are unable to answer your request or only able to partially answer it. Your information can be stored in a database of customers and leads on the grounds of our legitimate interest in direct marketing.
We delete your request and contact information when your request has been definitively answered and there is no legally required time limit for storing this data prior to deletion (e.g. pursuant to a subsequent contractual relationship). This is usually the case when there is no further contact with you for three years in a row.
Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, Email: info@linkedin.com
Parent company: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA
Purpose: Website analysis, conversion tracking and optimization of LinkedIn advertising campaigns
Category: Marketing
Recipient: EU, USA
Processed data: IP address, time of visit, pages visited, device information, browser type, operating system, demographic data (e.g. job title, company, industry)
Affected: Website visitors
Technology: Cookies (details in the cookie list), JavaScript
Legal basis: Consent (purpose)
Certifications: EU-US Data Privacy Framework, Swiss-US Data Privacy Framework, UK Extension to the EU-US Data Privacy Framework
Website: https://business.linkedin.com/marketing-solutions/insight-tag
Further information:
https://www.linkedin.com/legal/privacy-policy
https://www.linkedin.com/help/lms/answer/85787 https://www.linkedin.com/help/linkedin/answer/a1445756?lang=en-US
We use the LinkedIn Insight Tag service on our website to analyze website visits, track conversions, and optimize LinkedIn advertising campaigns. The LinkedIn Insight Tag is a JavaScript code implemented on our website. When a visitor visits our website, the tag loads and collects various data about the visit.
The tool collects information such as IP address, time of visit, pages visited, device information, browser type, and operating system. Additionally, demographic data such as job title, company, and industry are collected if the visitor is logged into LinkedIn. This data is aggregated and anonymized to gain insights into our website visitors and measure the performance of our LinkedIn campaigns.
The LinkedIn Insight Tag uses cookies to identify visitors across multiple sessions and to attribute conversions. All details (name, purpose, storage duration) regarding the cookies can be found in our specific list of cookies used.
The collected data is stored for a period of up to 90 days before being aggregated and anonymized. After the expiration of the statutory retention periods, the data is deleted immediately.
Additional details can be found in the linked additional information. We recommend checking these links regularly for changes, as LinkedIn may update the functionality of the LinkedIn Insight Tag. Additional information on the rights of data subjects and the corresponding contact details are provided in the general section of this privacy policy.
On our website we use services of our advertising partner MediaCom. The provider of these services is Mediacom UK Limited, 124 Theobalds Road, London, WC1X 8RX, United Kingdom ("MediaCom").
MediaCom is a media agency through which online advertising is integrated on our website. A media agency represents a large number of advertising customers. MediaCom uses its own ad server to centrally manage advertising media and to control the display of ads on our website. This involves processing your IP address by counting calls to advertisements statistically and not on a personal basis. MediaCom uses a tracking pixel for this purpose.
The processing of your data is based on your consent pursuant to Art. 6 paragraph 1 lit a GDPR.
You can obtain further information about MediaCom's data protection at https://www.mediacom.com/en/privacy-policy.
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, e-mail: privacy@facebook.com
Parent company: Meta Platforms, Inc, 1601 Willow Road, Menlo Park, CA 94025, USA
Purpose: Web analysis, tracking (conversion)
Category: Marketing
Recipient: EU, USA
Processed data: Visitor data (e.g. IP address, location data), behavioral data (e.g. clicks, duration of visit, conversion data), device data (e.g. browser type, operating system), e-commerce data (e.g. order ID, product information)
Data subjects: Website visitors
Technology: JavaScript, cookies (details in the cookie list), tracking pixels
Legal basis: Consent (purpose)
Certifications: EU-U.S. Data Privacy Framework, Swiss-U.S. Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework
Website: https://www.facebook.com/business/tools/meta-pixel
Further information:
https://www.facebook.com/privacy/policy/
https://www.facebook.com/legal/terms
The Meta Pixel service of the social network Facebook is used on our website for the analysis, optimization and economic operation of our online offer.
With the help of Meta Pixel, it is possible for Meta to determine the visitors to our website as a target group for the display of personalized ads. Accordingly, we use Meta Pixel to display the advertisements placed by us only to those users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Meta (so-called “custom audiences”). With the help of Meta Pixel, we also want to ensure that our meta ads correspond to the potential interest of users and are not annoying. With the help of Meta Pixel, we can also track the effectiveness of the Meta Ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a meta ad (so-called “conversion”).
The actions of users are stored in one or more cookies. These cookies make it possible to match Meta user data (such as IP address, user ID) with the data of a Facebook account. The data collected is anonymous and not visible to us and can only be used in the context of advertisements. Users can prevent the link to their Facebook account by logging out before taking any action.
To set which types of ads are displayed within Facebook, users can go to the page set up by Meta and follow the instructions on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads
The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
Additional details can be found in the linked further information. It is recommended that you check these links regularly for changes, as Meta may update its functions and privacy policy. Further information on rights and contact details can be found in the general section of this privacy policy.
Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Purpose: User analysis, conversion measurement
Category: Statistics
Recipient: USA
Processed data: IP address, details of the website visit
Data subjects: Users
Technology: JavaScript call, cookies
Legal basis: Consent, EU-US Data Privacy Framework, https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000KzNaAAK&status=Active
Website:
Further information:
https://privacy.microsoft.com/en-us/
https://learn.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses
https://help.ads.microsoft.com/#apex/3/en/53056/2
Opt-out option: https://account.microsoft.com/privacy/ad-settings/signedout
The Microsoft Advertising service (formerly Bing Ads) is used on our website to analyze and optimize its economic operation.
Microsoft Advertising places cookies on users' devices that analyze user behavior on our website. This assumes that the user has reached our website via an advertisement from Microsoft Advertising. This provides us with information on the total number of users who clicked on such an ad, were redirected to our website and previously reached a specific target page (so-called conversion measurement). No IP addresses are stored and no personal information about the identity of our users is disclosed.
Microsoft operates its own servers worldwide. Most of these are located in the USA. Microsoft stores data for as long as is necessary to provide its own services or products or for legal purposes.
Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland
Parent company: Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA,
E-mail: privacy@microsoft.com
Purpose: Analysis of user behavior on websites, improvement of user-friendliness
Category: Statistics
Recipient: USA, EU
Processed data: User behavior, clicks, scroll movements, mouse movements, device information, IP address (shortened), browser information, screen recordings
Data subjects: Website visitors
Technology: JavaScript, cookies (details in the cookie list), local storage
Legal basis: Consent (purpose)
Certifications: EU-U.S. Data Privacy Framework, Swiss-U.S. Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework
Website: https://clarity.microsoft.com
Further information:
https://privacy.microsoft.com/privacystatement
https://clarity.microsoft.com/terms
https://learn.microsoft.com/compliance/regulatory/offering-eu-model-clauses
https://www.microsoft.com/concern/privacy
On our website, we use the Microsoft Clarity service to analyze user behavior in order to improve the user-friendliness of our website. Microsoft Clarity is a free analytics tool that provides insights into visitors' interactions with our website.
The tool collects various types of data to create a comprehensive picture of user behavior. This includes clicks, scroll movements and mouse movements. This information is used to generate heat maps that provide visual representations of the most frequently clicked and viewed areas of our website.
Microsoft Clarity also records individual user sessions, whereby personal information such as input or sensitive data is automatically made unrecognizable. These recordings enable us to better understand user navigation and potential problems.
The tool also collects technical information such as device type, browser version and screen resolution. The IP addresses of users are stored in abbreviated form to ensure anonymity.
Microsoft Clarity uses JavaScript code embedded in our website to collect data. This code sets cookies and uses the browser's local storage to store information and ensure the functionality of the tool. All relevant information about the cookies, including name, purpose of use and storage duration, is contained in our detailed list of cookies used.
The data collected by Microsoft Clarity is stored for a period of up to one year. At the end of this period or when you stop using the service, the data will be deleted, provided there are no statutory retention obligations.
Additional details can be found in the linked further information. We recommend that you check these links regularly for changes, as Microsoft may update the functionality and data processing of Clarity. Additional information on the rights of data subjects and the relevant contact details can be found in the general section of this privacy policy.
For technical reasons, particularly to ensure a functioning and secure website, we process the technically necessary data about accesses to our website in so-called server log files which your browser automatically sends to us.
The access data we process includes:
This data cannot be traced back to any natural person and is used solely to perform statistical analyses and to operate and improve our website while also optimising our site and keeping it secure. This data is sent exclusively to our website operator. The data is neither connected nor aggregated with other data sources. In case of suspicion of unlawful use of our website, we reserve the right to examine the data retroactively. This data processing takes place on the legal grounds of our legitimate interest in maintaining a technically fault-free and optimal website.
The access data is deleted within a short period of time after serving its purpose (usually within a few days) unless further storage is required for evidence purposes. In such cases, the data is stored until the incident is definitively resolved.
Within your visit to our website, we use the widespread SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser. We use this encryption procedure on the basis of our justified interest in the use of suitable encryption techniques.
We also make use of suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments and kept state-of-the-art.
Provider: DataReporter GmbH, Zeileisstraße 6, 4600 Wels, Austria.
Purpose: Consent Management
Category: technically required
Recipient: EU, AT
Data processed: IP Address, Consent Data
Data subjects: Users
Technology: JavaScript call, Cookies, Swarmcrawler
Legal basis: Legitimate interest, consent (swarmcrawler to evaluate search results)
Website: https://www.datareporter.eu/
Further information: https://www.datareporter.eu/company/info
On our website, we use the Webcare tool for consent management. Webcare records and stores the decision of each user of our website. Our Consent Banner ensures that statistical and marketing technologies such as cookies or external tools are only set or started if the user has expressly consented to their use.
We store information on the extent to which the user has confirmed the use of cookies. The user's decision can be revoked at any time by accessing the cookie setting and managing the declaration of consent. Existing cookies are deleted after revocation of consent. For the storage of information about the status of the consent of the user, a cookie is also set, which is referred to in the cookie details. Furthermore, the IP address of the respective user(s) is transmitted to DataReporter's servers when this service is called up. The IP address is neither stored nor associated with any other data of the user, it is only used for the correct execution of the service.
With the help of Webcare, our website is regularly checked for technologies relevant to data protection. This investigation is only carried out for those users who have expressly given their consent (for statistical or marketing purposes). The search results of the users are evaluated by Webcare in an anonymous form and only in relation to technologies and used for the fulfillment of our information obligations. To start the Swarmcrawler technology, a request is sent to our servers and the IP address of the user is transmitted for the purpose of data transfer. Servers are selected which are geographically close to the respective location of the user. It can be assumed that for users within the EU, a server with a location within the EU will also be selected. The IP address of the user is not stored and is removed immediately after the end of the communication.
The WebCare statistics function enables us to anonymously record the interactions of the users of our website with our Consent Banner. The statistics only record whether the Consent Banner was opened and which actions were carried out (purposes of consent, revocation). Only statistical data and no activities related to the specific user are stored. The visitor's IP address is only used for the purpose of the connection and is completely deleted after the connection is terminated.
The use of the WebCare statistics function is based on our legitimate interest in reviewing the performance of our Consent Banner and the related accessibility of our online offer.
The statistical data is stored for 30 days, older data is automatically deleted.
You can find more information about this function in the provider's help section at: https://help.datareporter.eu/docs/webcare/webcare_consent_statistic/
Further information on data protection can be found at: https://www.datareporter.eu/company/info
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC (USA)
Purpose: Integration of Video Content, Collection of Statistical Data
Category: Statistics
Recipients: EU, USA
Data processed: IP Address, Website Visit Details, User Data
Data subjects: Users
Technology: JavaScript Call, Cookies, Device Fingerprinting, Local Storage
Legal basis: Consent, Data Privacy Framework, https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active
Website: https://www.youtube.com
Further information: https://www.youtube.com/intl/ALL_at/howyoutubeworks/user-settings/privacy/
https://policies.google.com/privacy
https://safety.google/intl/en/principles/
https://support.google.com/youtube/answer/10364219?hl=en
On our website, we use the YouTube service to embed videos.
We have activated the extended data protection mode on YouTube. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch a video. However, the disclosure of data to YouTube partners is not excluded by the extended data protection mode.
As soon as you start a YouTube video, a connection to YouTube's servers is established. This tells YouTube which of our pages you have visited. If you are logged into your YouTube account, you thereby enable YouTube to assign your surfing behaviour directly to your personal profile. This can be prevented by logging out of your account.
Furthermore, YouTube can save various cookies on your end device after starting a video or use comparable technologies (e.g. device fingerprinting). YouTube also uses the local storage on your end device. In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts
The following provisions in its principles apply not only to the data collection on our website, but also in general to other processing of personal data.
Personal data is information that can be assigned to you individually. Examples include your address, your name as well as your postal address, email address or telephone number. Information such as the number of users who visit a website is not personal data because it is not assigned to a person.
Unless more specific information is provided in this Privacy Policy (e.g. in the case of the technologies used), we may process personal data from you on the basis of the following legal principles:
Please note that in addition to the provisions of the GDPR, national data protection regulations may apply in your or our home country.
Your personal data will not be transferred to third parties for purposes other than those listed in this Privacy Policy.
We will only transfer your personal data to third parties if:
We carefully select our service providers who process personal data on our behalf. If we commission third parties to process personal data on the basis of a data processing agreement, this is done in accordance with Art. 28 of the GDPR.
If we process data to a third country or if this is done in the context of using the services of third parties or disclosure or transfer of data to other persons or companies, this is only done on the legal basis described above for the transfer of data.
Subject to express consent or contractual necessity, we process or allow data to be processed only in third countries in accordance with Art. 44 - 49 of the GDPR with a recognized level of data protection or on the basis of special guarantees, such as contractual obligations through so-called standard contractual clauses of the EU Commission, the existence of certifications or binding corporate rules.
We would like to expressly point out that as of July 16, 2020, due to a legal dispute between a private individual and the Irish supervisory authority, the so-called "Privacy-Shield", an adequacy decision of the EU Commission according to Art 45 GDPR, which confirmed an adequate level of data protection for the US under certain circumstances, is no longer valid with immediate effect.
The Privacy Shield therefore no longer constitutes a valid legal basis for the transfer of personal data to the United States!
If a transfer of data by us to the US takes place at all or if a service provider based in the US is used by us, we refer to this explicitly in this Privacy Policy (see in particular the description of the technologies used on our website).
What can the transfer of personal data to the US mean for you as a user and what risks are involved?
Risks for you as a user are at any rate the powers of the US secret services and the legal situation in the US, which, in the opinion of the European Court of Justice, no longer ensure an adequate level of data protection. Among other things, this concerns the following points:
Legally compliant transfer of data to the US on the basis of standard contractual clauses?
The standard contractual clauses adopted by the Commission in 2010 (2010/87/EU of 05.02.2010), Art. 46 paragraph 2 lit. c GDPR, are still valid, but a level of protection for personal data must be ensured which is equivalent to the level in the European Union. Therefore, not only the contractual relationships with our service providers are relevant, but also the possibility of access to the data by U.S. authorities and the legal system of the U.S. (legislation and jurisdiction, administrative practice of authorities).
The standard contractual clauses cannot bind authorities in the US and therefore do not yet provide adequate protection in cases in which the authorities are authorized under the law in the US to intervene in the rights of the data subjects without additional measures by us and our service provider.
Legally compliant transfer of data to the US on the basis of your consent?
It is currently controversial whether informed consent and thus a deliberate and knowingly restriction of parts of your basic right to data protection is legally possible at all.
What measures do we take to ensure that a data transfer to the US complies with the law?
Insofar as US providers offer the option, we choose to process data on EU servers. This should technically ensure that the data is located within the European Union and cannot be accessed by US authorities.
Furthermore, we carefully examine European alternatives to US tools used. However, this is a process that does not happen overnight, as it also involves technical and economic consequences for us. Only if the use of European tools and / or the immediate switch off of the US tools is impossible for us for technical and / or economic reasons, US service providers are currently still used.
For the further use of US tools we take the following measures:
As far as possible, your consent will be asked for before using a US tool and you will be informed in advance in a transparent manner about the functioning of a service. The risks involved in transferring data to the USA can be found in this section.
We make every effort to conclude standard contract clauses with US service providers and to demand additional guarantees. In particular, we require the use of technologies that do not allow access to data, e.g. the use of encryption that cannot be broken even by US services or anonymization or pseudonymization of data, where only the service provider can make the assignment to a person. At the same time, we require additional information from the service provider if data is actually accessed by third parties or the service provider exhausts all legal remedies until access to data is granted at all.
If no explicit storage period is specified during the collection of data (e.g. in the context of a declaration of consent), we are obliged to delete personal data in accordance with Art. 5 paragraph 1 lit. e of the GDPR as soon as the purpose for processing has been fulfilled. In this context, we would like to point out that legal storage obligations represent a legitimate purpose for the further processing of affected personal data.
Personal data will be stored and retained by us in principle until the termination of a business relationship or until the expiry of any applicable guarantee, warranty or limitation periods, in addition, until the end of any legal disputes in which the data is required as evidence, or in any event until the expiry of the third year following the last contact with a business partner.
As part of the description of individual technologies on our website, there are specific references to the storage period of data. In our cookie table, you will be informed about the storage period of individual cookies. In addition, you always have the possibility to ask us directly about the specific storage period of data. To do so, please use the contact data listed in this Privacy Policy.
Data subject have the right:
The responsible data protection authority for OMV Aktiengesellschaft is:
Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Wien, Österreich
Tel.: +43 1 52 152-0, dsb@dsb.gv.at
You yourself decide on the use of your personal data. Should you therefore wish to exercise one of your above-mentioned rights towards us, you are welcome to contact us by email at info@omv.com or by post, as well as by telephone.
Please assist us in specifying your request by answering questions from our responsible employees regarding the specific processing of your personal data. If there are reasonable doubts about your identity, we may request a copy of your identification.
For questions regarding data protection, you can reach us at info@omv.com or at the other contact details stated in this Privacy Policy.
Wien, on 20. April 2025
Cookies are small text files that are stored on your computer, tablet computer or smartphone when you visit a website using your browser. These files do no harm and serve only to recognize the website visitor. On your next visit to the website using the same device, the information stored in cookies may subsequently be returned either to the website ("First Party Cookie") or to another website to which the cookie belongs ("Third Party Cookie"). You can set your browser so that the storage of cookies is generally prevented or you are asked each time whether you agree to the setting of cookies. Once set, you can delete cookies at any time. How this works can be found in the help function of your browser. An explanation for the browsers Firefox, Microsoft Internet Explorer and Google Chrome can be found at this link: http://www.meine-cookies.org/cookies_verwalten/index.html.
Technically necessary cookies are used to enable the technical operation of a website and make it functional for you. The use is based on our legitimate interest to provide a technically flawless website. However, you can generally disable the use of cookies in your browser.
| Surname | Purpose | Creator | Storage time | Domain |
|---|---|---|---|---|
| cookieconsent_mode | contains the information to what extent the user has confirmed the use of cookies. | DataReporter GmbH | 12 months | apps-omv.com |
| cookieconsent_status | contains the information to what extent the user has confirmed the use of cookies. | DataReporter GmbH | 12 months | apps-omv.com |
Statistics cookies collect information about how websites are used to improve their attractiveness, content and functionality. A use takes place only with your consent and only as long as you have not deactivated the respective cookie.
| Surname | Purpose | Creator | Storage time | Domain |
|---|---|---|---|---|
| _ga | Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. | 1 year | apps-omv.com | |
| _ga_(GA4-ID) | Contains information to help distinguish users from the page. Gathers data about user visits, such as which pages are relevant. | 1 year | apps-omv.com |
Marketing cookies come from external advertising companies and are used to collect information about the websites visited by the user. A use takes place only with your consent and only as long as you have not deactivated the respective cookie.
| Surname | Purpose | Creator | Storage time | Domain |
|---|---|---|---|---|
| _fbc | registers a unique ID that identifies and recognizes the user. Used for targeted advertising. | Session | www.omv.hu | |
| _fbp | registers a unique ID that identifies and recognizes the user. Used for targeted advertising. | 3 months | apps-omv.com | |
| _gcl_au | registers a unique ID that identifies and recognizes the user. Used for targeted advertising. | 3 months | apps-omv.com | |
| _gcl_aw | registers a unique ID that identifies and recognizes the user. Used for targeted advertising. | Session | www.omv.hu | |
| _gcl_dc | registers a unique ID that identifies and recognizes the user. Used for targeted advertising. | Session | www.omv.hu | |
| _gcl_gs | registers a unique ID that identifies and recognizes the user. Used for targeted advertising. | Session | www.omv.hu | |
| FPGSID | registers a unique ID that identifies and recognizes the user. Used for targeted advertising. | 30 minutes | omv.hu | |
| IDE | registers a unique ID that identifies and recognizes the user. Used for targeted advertising. | 1 year | doubleclick.net | |
| NID | registers a unique ID that identifies and recognizes the user. Used for targeted advertising. | www.google.com | ||
| test_cookie | registers a unique ID that identifies and recognizes the user. Used for targeted advertising. | 15 minutes | doubleclick.net |