Data protection information
VERBUND is committed to protecting your personal data.
We comply with the applicable legislation regarding the protection, lawful handling and confidentiality of personal data, as well as data security, in particular the Austrian Data Protection Act (“DSG”), the European General Data Protection Regulation (“GDPR”), and the Telecommunications Act (“TKG”). Below, we would like to inform you about how we handle your data.
Last updated: November 2025
1. Name and address of the controller
The controller responsible for processing your personal data in accordance with data protection regulations is VERBUND Green Hydrogen GmbH, Am Hof 6a, 1010 Vienna (“VERBUND”, “we”, “us”).
The contact details of the Data Protection Officer are as follows:
Email: datenschutz@verbund.com
2. Data processing in relation to the website
2.1. Scope of the processing of personal data
When you visit our website, we automatically collect the following personal data about you:
- date and time a page was viewed on our website;
- data about your end device (device ID);
- IP address;
- name and version of your web browser;
- session ID.
We do not use cookies on our website.
2.2. Legal basis and purpose of data processing
As far as the data of your visit to our website is concerned, we base the justification for the processing on our legitimate interest in accordance with Art. 6(1)(f) GDPR, which lies in making our website user-friendly and protecting our website from attacks.
We process your data in connection with your visit to our website for the following purposes:
- to provide you with our website, including its features;
- to improve and develop this website;
- to be able to compile usage statistics for statistical evaluations anonymously;
- to recognise, prevent, and investigate attacks on our website.
2.3. Retention period
We will generally store your data for visiting the website for a period of three months. Data will only be stored for longer if this is necessary to investigate any attacks on our website and only until the end of any applicable limitation periods, statutory retention periods or any legal disputes.
2.4. Data recipients
We regularly use IT service providers to operate and manage the website, who may also have access to personal data on our behalf and in accordance with our instructions in order to provide the commissioned IT services.
We may also transfer your personal data to the following recipients:
- to external third parties to the extent necessary on the basis of our legitimate interests (auditors, insurance companies in the event of an insurance claim, legal representatives in the event of an incident, etc);
- to regulatory authorities and other public bodies to the extent required by law (e.g. tax authorities, courts).
Your data will not be disclosed to any other third parties for their own purposes without your consent.
3. Data processing in the context of “contacting us/enquiries”
3.1. Scope of the processing of personal data
If you contact us by email or telephone, we will process your personal data (email, name, telephone number, as well as the content of your query or the associated documents) for the purpose of processing your query and respond accordingly.
You provide this data on a voluntary basis; however, if you do not provide this data, your request cannot be processed accordingly.
3.2. Legal basis and purpose of data processing
The legal basis for processing the data is our legitimate interest under Art. 6(1)(f) GDPR, which is to process and fulfil your request.
3.3. Retention period
We store your data until we have handled your query and beyond that for a period of three months to enable us to adequately respond to any follow-up questions. The data will only be stored for a longer period on the basis of statutory retention periods or to defend ourselves in the event of legal disputes.
3.4. Data recipients
We regularly use service providers (e.g. IT service providers), who may also have access to personal data on our behalf and in accordance with our instructions in order to provide the commissioned services.
We may also transfer your personal data to the following recipients:
- to VERBUND Group companies or other third parties (e.g. appraisers, experts) involved in a project or cooperation to the extent necessary based on our legitimate interests;
- where necessary, to external third parties such as legal representatives, insurance companies in the event of an insurance claim, auditors;
- to regulatory authorities and other public bodies to the extent required by law (e.g. tax authorities, courts).
Your data will not be disclosed to any other third parties for their own purposes without your consent.
4. Your rights
You have the right to information, rectification, erasure, restriction of processing, data portability, revocation of a granted consent and objection with regard to your data processed by VERBUND. If you believe that the processing of your data violates data protection law or that your rights under data protection law have otherwise been violated in any way, you can submit a complaint to us at datenschutz@verbund.com or to the national supervisory authority where you live. In Austria, this supervisory authority is the Data Protection Authority, Barichgasse 40–42, 1030 Vienna, email address: dsb.@dsb.gv.at, phone number: +43 1 52 152-0.