Data Privacy Notice

Data Privacy Notice

Our contact details (data controller):
Brand Energy & Infrastructure Services Australia Pty. Ltd. ("Brand"/"BRAND®")
Unit B, 49 Boundary Road, Rocklea, QLD 4106 Australia
Tel.: +61 (0) 73713 3333
E-Mail: ausinfo@brandsafway.com

Updated: April 2020

Thank you for your visit to our website https://www.beis.com/au and your interest in our company. The protection of your personal data, such as your date of birth, name, phone number, address, etc., is of great importance to us.

This Privacy Statement aims to inform you about the processing of your personal data that we collect from you when you visit our webpage. Our data protection practices are in line with the legal provisions laid down in the General Data Protection Regulation of the European Union (GDPR). The following Privacy Statement is for the purpose of compliance with the duties to inform pursuant to the GDPR. Such duties are set out in e.g. Article 13 and Article 14 et seq. of the GDPR.

Provision of our Website
You can visit our website without providing any personal information. Each time one of our website pages is accessed, the web server automatically stores only the IP address, date and time of your request, the time zone difference from Greenwich Mean Time (GMT), the content of your request (specific site), the access status/http status code, the respective quantity of data transmitted, the website from which the request is sent, the browser, the operating system and its interface, as well as the language and version of the browser software. These data are never stored specifically to your person. These access data are evaluated exclusively for the purpose of ensuring trouble-free operation of our site and to improve our services. If the IP address is to be regarded as personal, it will be deleted after 90 days at the latest, unless there are other compelling reasons to the contrary.

Special Website Functions
Our webpage provides you with various functions, for the use of which we collect, process and store personal data. We explain below what happens with such data:

Job Application Form
•    What personal data are collected and to what extent are they processed?
The data that you enter and possibly upload in the fields of the job application form are processed for the purpose stated below.

•    Legal basis for the processing of personal data
Article 6(1) (b) GDPR (Performance of (pre)contractual measures)

•    Purpose of data processing
Verification and processing of the application documents that you upload via the form.

•    Storage period
The data are deleted as soon as the job application is processed and there is no legitimate interest in the further storage of the job application data. Therefore, your application documents are deleted after 6 months, at the latest, unless an employment relationship is established.

•    Possibility of objection and erasure
You can object to the processing in accordance with Article 21 GDPR and request the erasure of the data in accordance with Article 17 GDPR at any time. Your rights and the way in which you can exercise them are provided for at the end of this Privacy Statement.

•    Necessity to provide personal data
The data provided in the job application form are neither a statutory nor a contractual requirement, but they are required for the submission and processing of your job application. If you do not fill out all the existing mandatory fields or you only fill them in partially, the job application that you are interested in cannot be sent or processed.

Contact Form(s)
•    What personal data are collected and to what extent are they processed?
The data that you enter in our contact forms, which you provide in the input template of the contact form.

•    Legal basis for the processing of personal data
Article 6(1) (a) GDPR (Consent given by a clear affirmative action and/or behaviour)

•    Purpose of data processing
We use the data recorded via our contact form and/or our contact forms exclusively for the processing of the actual contact inquiry received through the contact form. Please note that in order to respond to your inquiry we may also send e-mails to the address provided. The purpose thereof is for you to receive a confirmation that your inquiry has been correctly transmitted to us. However, sending the confirmation e-mail is not mandatory for us and is meant only for your information.

•    Storage period
After the processing of your inquiry, the collected data are immediately erased, provided no legal retention periods apply.

•    Possibility of withdrawal and erasure
The possibility of withdrawal and erasure result from the general provisions hereinafter outlined on the right of withdrawal and erasure according to the data protection regulations.

•    Necessity to provide personal data
The use of contact forms is freely consented to and is neither statutorily nor contractually required. You are not obliged to contact us via the contact form, but you can also use the other contact possibilities provided on our webpage. If you want to use our contact form, you must fill out the fields marked as mandatory. If you do not fill in the information required in the contact form, either you will not be able to send the inquiry or unfortunately we will not be able to process your inquiry.

Login Domain / Registration
•    Scope of personal data processing and collected personal data
The registration and login data that you enter on our webpage or that are communicated to you.

•    Legal basis for the processing of personal data
Article 6(1) (b) GDPR (Performance of (pre)contractual measures)

•    Purpose of data processing
You have the option to use a separate login section on our website. In order to be able to check your authorization to use the protected domain and/or protected documents, you must enter your login details (e-mail and/or username and password) in the corresponding form. If necessary and upon your request, we can send you an e-mail with the login details and/or the possibility to have your password reset.

•    Storage period
The collected data are stored for as long as you have a user account with us.

•    Possibility of objection and erasure
You can object to the processing in accordance with Article 21 GDPR and request the erasure of the data in accordance with Article 17 GDPR at any time. Your rights and the way in which you can exercise them are provided for at the end of this Privacy Statement.

•    Necessity to provide personal data
The use of the login domain on our website is contractually required for the use of the protected domain. The use of the content protected through the login domain is not possible without providing the personal data. If you want to use our login domain, you must fill out the fields marked as mandatory (username and password). The input of data implies the existence of a user account. Logging in shall not possible if the data that you enter are incorrect. If you enter incorrect data or do not enter the login details, you cannot use the protected domain. However, you can continue to use the rest of the webpage without logging in.

Statistical Analysis of the Visits on this Website - WebTracker
Upon accessing this webpage or individual files on the webpage, we collect, process and store the following data: IP address, website from which the file has been accessed, name of the file, date and time of the access, transferred data volumes and message about the success of the access (the so-called web log). We use these access data exclusively in non-personalized form for the ongoing improvement of our Internet offer and for statistical purposes. Additionally, we use the following web trackers for the analysis of the visits on this website:

•    Google Tag Manager

o    What personal data are collected and to what extent are they processed?
Our website uses the service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google Tag Manager). Google Tag Manager provides a technical platform so as to be able to execute and jointly manage other web services and web-tracking programs by means of the so-called “Tags”. In this context, Google Tag Manager saves cookies on your computer and analyses your surfing behaviour (the so-called “tracking”) provided web-tracking tools are executed by means of the Google Tag Manager. These data sent by individual tags integrated in the Google Tag Manager are centralized, stored and processed by Google Tag Manager under a unified user interface. All the integrated “Tags” are separately presented again in this Privacy Statement. For further information about the data protection of the tools included in the Google Tag Manager please refer to the corresponding section in this Privacy Statement. Whilst using our website and if the integration of tags of Google Tag Manager is activated, data such as, in particular, your IP address and your user activities are transferred to the server of Google Ireland Limited and are processed and stored outside the European Union, e.g. in the USA. The European Commission has established that the USA can offer an adequate level of data protection, if the data processing company has adhered to the US-EU Privacy Shield and the data export to the USA has been configured in a manner permitted this way. This is the case of Google Ireland Limited. The provisions in the corresponding section of this Privacy Statement shall apply to the web services integrated with Google Tag Manager. The tracking tools used in the Google Tag Manager ensure that, prior to the transfer, the IP address is anonymized by Google Tag Manager by means of the IP anonymization of the source code. This way, Google Tag Manager is enabled to record only anonymized IP addresses (so-called IP masking).

o    Legal basis for the processing of personal data
In accordance with Article 6(1) (a) GDPR the legal basis for the data processing is your consent provided in the info banner to the use of cookies and web tracking (Consent given by a clear affirmative action and/or behaviour).

o    Purpose of data processing
On our behalf, Google uses the information obtained via the Google Tag Manager in order to assess your visit of the website, to prepare reports on the website activity and to provide us with further services related to the use of the website and of the Internet.

o    Storage period
Google shall store the data relevant to the function of the Google Tag Manager only as long as this is necessary in order to provide the contracted web service. Data are collected and stored in an anonymized manner. If any person-related reference could still be possible, the data are immediately erased unless they are subject to statutory retention obligations. In every case, the data are erased upon the expiry of the retention period.

o    Possibility of objection and erasure
You can prevent the recording and transmission of personal data to Google (particularly your IP address), as well as the processing of such data by Google, by deactivating the execution of script code in your browser, installing a script blocker in your browser or activating the “Do Not Track” setting of your browser. Additionally, you can prevent the recording with Google of the data generated through the Google cookie and related to your use of the website (including the IP address), as well as the processing of such data by Google, by downloading and installing the browser plugin available under the following link http://tools.google.com/dlpage/gaoptout?hl=de. The security and privacy policies of Google are available at https://policies.google.com/privacy.

•    Google-Analytics

o    Scope of processing of personal data
Our website uses the web-tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google Analytics). Within the web tracking activity, Google Analytics uses cookies, which are stored on your computer and enable an analysis of the use of our website and of your surfing behaviour (the so-called Tracking). We perform this analysis based on the Tracking service of Google Analytics in order to constantly optimize our Internet offer and improve its availability. Whilst using our website data such as, in particular, your IP address and your user activities are transferred to the server of Google Ireland Limited. We perform this analysis based on the Tracking service of Google in order to constantly optimize our Internet offer and improve its availability. Likewise, we need web tracking for security reasons. Web tracking enables us to detect possible third-party attacks on our website. Through the information provided by the web tracker we can take efficient countermeasures and protect the personal data that we process against such cyber-attacks. By the activation of the IP anonymization within the Google Analytics tracking code of this website, your IP address is anonymized by Google Analytics before transmission. This website uses a Google Analytics tracking code, which has been extended by the gat._anonymizeIp(); operator, in order to enable only an anonymized recording of IP addresses (the so-called IP masking).

o    Legal basis for the processing of personal data
In accordance with Article 6(1) (a) GDPR the legal basis for the data processing is your consent provided in the info banner to the use of cookies and web tracking (Consent given by a clear affirmative action and/or behaviour).

o    Purpose of data processing
On our behalf, Google uses this information in order to assess your visit of the website, to prepare reports on the website activity and to provide us with further services related to the use of the website and of the Internet. Likewise, we need web tracking for security reasons. Web tracking enables us to detect possible third-party attacks on our website. Through the information provided by the web tracker we can take efficient countermeasures and protect the personal data that we process against such cyber-attacks.

o    Storage period
Google shall store the data relevant to the provision of the web tracking service only as long as this is necessary in order to provide the contracted web service. Data are collected and stored in an anonymized manner. If any person-related reference could still be possible, the data are immediately erased unless they are subject to statutory retention obligations. In every case, the data are erased upon the expiry of the retention period.

o    Possibilities to object and obtain erasure
You can prevent the recording and transmission of personal data to Google (particularly your IP address), as well as the processing of such data by Google, by deactivating the execution of script code in your browser, or activating the “Do Not Track” setting of your browser. Additionally, you can prevent the recording with Google of the data generated through the Google cookie and related to your use of the website (including the IP address), as well as the processing of such data by Google, by downloading and installing the browser plugin available under the following link (http://tools.google.com/dlpage/gaoptout?hl=de). The security and privacy policies of Google are available at https://policies.google.com/privacy?hl=de.

Integration of External Web Services and Data Processing outside the EU
Our website uses active content of external providers, i.e. so-called web services. Upon accessing our website, these external providers may receive personal information about your visit on our webpage. In this context, data may be processed outside the EU. You can prevent this by installing an appropriate plugin or by deactivating the execution of scripts in your browser. This can result in functional restrictions of the website that you are visiting.

We use the following external web services:

•    Doubleclick
A service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Doubleclick) is downloaded on our website. We use these data in order to ensure the full functionality of our website. Therefore, your browser may send personal data to Doubleclick. The legal basis for the data processing is Article 6(1) (f) GDPR. The legitimate interest resides in a flawless operation of the website. Data are erased as soon as the purpose of their collection is achieved. For further information regarding the handling of the transferred data please refer to Doubleclick’s Privacy Statement: https://policies.google.com/privacy

You can prevent the recording, as well as the processing of your data by Doubleclick, by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

•    Google
A service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google) is downloaded on our website. We use these data in order to ensure the full functionality of our website. Therefore, your browser may send personal data to Google. The legal basis for the data processing is Article 6(1) (f) GDPR. The legitimate interest resides in a flawless operation of the website. Data are erased as soon as the purpose of their collection is achieved. For further information regarding the handling of the transferred data please refer to Google’s Privacy Statement: https://policies.google.com/privacy

You can prevent the recording, as well as the processing of your data by Google, by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

•    Google Maps

o    What personal data are collected and to what extent are they processed?

On our website we use Google Maps (a service by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to display our locations in the Google Maps plug-in. When using Google Maps, data that are necessary for use will be passed on. For more information, see the Google Maps Terms of Service (https://maps.google.com/help/terms_maps.html).

o    Legal basis for the processing of personal data
Article 6(f) GDPR (Legitimate interest). Our legitimate interest is to provide you with a visual representation of the general representation of location details on the Internet.

o    Purpose of data processing
Google shall use the information acquired via Google Maps on our behalf, in order to display the map for you. With Google Maps you can find us faster and more accurately than with a simple non-interactive roadmap.

o    Storage period
Google shall store the data relevant to the function of the Google Maps only for as long as this is necessary in order to provide the contracted web service. Data are collected and stored in an anonymized manner. If any person-related reference could still be possible, the data are immediately erased unless they are subject to statutory retention obligations. In every case, the data are erased upon the expiry of the retention period.

o    Possibility of objection and erasure
You can prevent the recording and transmission of personal data to Google (particularly your IP address), as well as the processing of such data by Google, by deactivating the execution of script code in your browser, installing a script blocker in your browser or activating the “Do Not Track” setting of your browser. The security and privacy policies of Google are available at https://policies.google.com/privacy.

o    Joint processing
We have concluded a joint processing agreement with Google with regard to Google Maps. The content thereof is made available at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.

•    Google APIS
A service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google APIS) is downloaded on our website. We use these data in order to ensure the full functionality of our website. Therefore, your browser may send personal data to Google APIS. The legal basis for the data processing is Article 6(1) (f) GDPR. The legitimate interest resides in a flawless operation of the website. Data are erased as soon as the purpose of their collection is achieved. For further information regarding the handling of the transferred data please refer to Google APIS’ Privacy Statement: https://policies.google.com/privacy

You can prevent the recording, as well as the processing of your data by Google APIS, by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

•    Gstatic
A service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Gstatic) is downloaded on our website. We use these data in order to ensure the full functionality of our website. Therefore, your browser may send personal data to Gstatic. The legal basis for the data processing is Article 6(1) (f) GDPR. The legitimate interest resides in a flawless operation of the website. Data are erased as soon as the purpose of their collection is achieved. For further information regarding the handling of the transferred data please refer to Gstatic’s Privacy Statement: https://policies.google.com/privacy

You can prevent the recording, as well as the processing of your data by Gstatic, by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

•    JQuery
A web service of The Linux Foundation, 1 Letterman Drive, Building D, Suite D4700, CA 94129 San Francisco, USA (hereinafter referred to as JQuery) is downloaded on our website. It you have activated the Java script in your browser and have no Java Script blocker installed, your browser may transmit personal data to JQuery. For further information regarding the handling of the transferred data please refer to Jquery’s Privacy Statement: https://js.foundation/wp-content/uploads/sites/33/2017/03/JS-Foundation-IP-Policy.pdf

You can prevent the recording, as well as the processing of your data by JQuery, by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

•    Youtube
A service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Youtube) is downloaded on our website. We use these data in order to ensure the full functionality of our website. Therefore, your browser may send personal data to Youtube. The legal basis for the data processing is Article 6(1) (f) GDPR. The legitimate interest resides in a flawless operation of the website. Data are erased as soon as the purpose of their collection is achieved. For further information regarding the handling of the transferred data please refer to Youtube’s Privacy Statement: https://policies.google.com/privacy.

You can prevent the recording, as well as the processing of your data by Youtube, by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

•    Google reCaptcha
A service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google reCaptcha) is downloaded on our website. We use these data in order to ensure the full functionality of our website. Therefore, your browser may send personal data to Google reCaptcha. The legal basis for the data processing is Article 6(1) (f) GDPR. The legitimate interest resides in a flawless operation of the website. Data are erased as soon as the purpose of their collection is achieved. For further information regarding the handling of the transferred data please refer to Google reCaptcha’s Privacy Statement: https://policies.google.com/privacy

You can prevent the recording, as well as the processing of your data by Google reCaptcha, by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

Information Regarding the Use of Cookies

Scope of Processing of Personal Data
We integrate and use cookies on different pages, in order to enable certain functions of our website and to integrate external web services. The so-called “cookies” represent small text files that can be saved by your browser on your access device. These text files contain a characteristic string that identifies the browser in a unique manner, when you return to our website. The saving of the cookie file is also referred to as “setting a cookie”. Thus, cookies can be set both by the website itself and by external web services.

Legal Basis for the Processing of Personal Data
Article 6(1) (f) GDPR (Legitimate interest) and Article 6(1) (a) and Article 9(1) (a) GDPR, respectively (Consent).

The applicable legal basis results from the Cookie Table provided below in this section.
In general, for the cookies that are collected based on a legitimate interest, our legitimate interest is to ensure the functionality of our website and of its integrated services (technically necessary cookies). Additionally, it could be that cookies make them more user-friendly and provide for a more individualized addressing. In this respect we have balanced your interests with our interest.
With the help of the cookie technology we can only identify, analyse and track individual website visitors if the website visitor has consented to the use of cookies according to Article 6(1) (a) GDPR.

Purpose of Data Processing
The cookies are set by our website and/or by the external web services in order to maintain the full functionality of our website, improve its user-friendliness or pursue the purpose declared with your consent. The cookie technology also enables us to identify individual visitors by means of pseudonyms, e.g. an individual or random ID, so that we are capable of offering more individualized services. Details are provided in this table.

Storage Period
The following listed cookies are stored in your browser until they are deleted or, in the case of a session cookie, until the session expires. Details are provided in this table.

Possibility to Object, Withdraw Consent and Erasure
You can set your browser at your own discretion, so that the setting of cookies is generally blocked. You can then decide regarding the acceptance of cookies or basically accept cookies on a case by case basis. Cookies can be used for various purposes, e.g. to detect that your access device is already connected to our website (permanent cookies) or to store the offers viewed last (session cookies). If you have expressly given your consent to our processing of your personal data, you can withdraw such consent at any time. Please note that the lawfulness of the processing performed based on the consent before the withdrawal shall not be affected.

Data Security and Data Protection, Communication per E-Mail
Your personal data shall be protected against third-party access through technical and organizational measures applied during the collection, storage and processing of such data. In the case of unencrypted communication via e-mail, the full data security on the transmission path to our IT systems cannot be ensured, so that we recommend encrypted communication or postal services for highly confidential information.

Your Rights
In respect to your personal data, you have the right to request from us information, correction, erasure or limitation in accordance with the legal regulations. Furthermore, we provide you with your data in a structured, conventional and machine-readable format. If we use your data based on your consent you may revoke your consent at any time. From the time of revocation, we will no longer use your data for the agreed purpose. If we believe to have a legitimate interest in processing your data, you may contact us here and raise your objection. Irrespective thereof, you may at any time contact the responsible supervising authorities.

Erasure of Data
When your data are no longer needed for the specified purposes or if their storage is inadmissible for other legal reasons, we will delete them. Excluded from this, are lawfully collected data which we are obliged to store for legal reasons. Please note that for each deletion the data are initially blocked in order to avoid accidental erasure or potential willful damage. For technical reasons, data may in certain cases be duplicated in data backup files or by mirroring. Such copies may be erased after some delay due to technical reasons.

Rights to Withdraw
If your personal data are based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 f. GDPR, you have the right to object to the processing of your personal data, if there are reasons arising from your particular situation. In the event of a justified objection, we will no longer process the personal data.

Reason form