Cookie Settings

Changing Your Cookie Settings

When you visit our website for the first time, a cookie banner (Cookie-Consent) automatically appears, in which you can accept the use of cookies for the tracking technologies listed in principle ("Accept all" option) or only allow selected categories of cookies, in addition to those necessary for operation ("Accept selection" option). Without consent, only functionally necessary cookies will be stored on your end device. A new display will take place after the validity of the consent cookie has expired, after the consent cookie has been deleted or after the content based on the consent has been changed.

To change your cookie settings, please click on privacy settings.

We would like to inform you that the cookie settings you select on the website www.group.vig or other domains of group.vig (www.30colours.vig) are also adopted for the other websites in each case.

If you subsequently withdraw consent you have given for certain cookies, we will no longer use them for future visits to our websites. However, please note that Wiener Städtische / Vienna Insurance Group cannot delete the cookies already stored in your system (from the "External Services Cookies" and "Marketing Cookies" categories) for technical reasons. We recommend manually deleting these cookies via your web browser's settings or using corresponding browser extensions.

You can also configure your browser to not store cookies in general and/or delete already stored cookies. Additionally, you can use modern web browsers with built-in ITP/ETP/TP technology (such as Apple Safari, Mozilla Firefox, Microsoft Edge) that automatically delete cookies. All popular browsers allow you to block the storage of cookies altogether or the storage of third-party cookies.

What Are Cookies?

Cookies are small text files that are stored on your device (PC/laptop, tablet or smartphone). These text files are downloaded by your browser when you first visit our website. When you call up this website again with the same device or browser, the cookie and the information stored in it is either sent back to the respective website that generated it (first party cookie) or sent to another website to which it belongs (third party cookie). As a result, the website "recognises" that it is the same user and adjusts the presentation of website content accordingly. Furthermore, cookies can be used for various purposes, such as ensuring the functionality, security, and convenience of online services, as well as analysing visitor traffic and the functionality of an online service. Cookies cannot access, read, or modify any other data on your computer.

Many cookies on our website are temporary cookies, so-called session cookies. They are automatically deleted when you leave our website. Persistent cookies, on the other hand, remain on your computer, depending on the time specified in the cookies for automatic deletion, or until you delete them manually in your browser. We use such persistent cookies to recognise you the next time you visit our website. This cookie data may be used for statistical, marketing and personalisation purposes.

Consent notices: We use cookies in accordance with the law. We therefore obtain prior consent from users, except where this is not required by law. In particular, consent is not required if the storage and reading of information, including cookies, is absolutely necessary to provide the user with an online service that they have expressly requested. The revocable consent is clearly communicated to the users and contains the information on the respective cookie use. You can consent to the setting of all cookies or make a selective choice. You can change cookie settings at any time.

The permissibility of cookies in Austria is regulated in § 96 (3) Telecommunications Act 2003 (TKG 2003).

What Happens If I Do Not Accept Cookies?

You can also block or delete cookies if they have already been stored on your computer. If you would like to know more about how to set these steps, please use the "Help" function in your browser. For the most user-friendly handling possible, we sometimes also use a so-called "cookie management tool" (Commanders Act Trustmanager from our processor Fjord Technologies (France) as a consent management service), with which you can manage the setting of cookies even more easily. To manage your settings, please use your privacy settings.

Please note that blocking or deleting cookies may affect your online experience and prevent you from taking full advantage of our online offerings and services.

Use of Cookies and Other Tracking Tools

We use cookies and other tracking tools for the following purposes:

To provide our websites/applications and to provide basic functions of the online offers (order processing, orders, online forms, language settings, etc.), e.g. to save your cookie settings or for security reasons, such as check data for a valid login to the customer portal (for more information, see "Functionally necessary cookies");
for the professional presentation of the content of our website, e.g. by integrating externally provided content, such as map material from Google Maps and video services such as YouTube, etc. (for more information, see "External service cookies");
for anonymised analysis of website use ("web statistics") or range measurement, so that we can continuously improve our offer and better adapt it to the needs and interests of website visitors and to personalise our offers, e.g. to display personalised content including advertising on the end device used, provided you have given us your consent to do so (see "Marketing cookies" for details);

By consenting to the use of cookies, you are assisting us in improving the services and features of our online offerings (websites and applications) to provide you with an optimal user experience. For this purpose, we and our partners store personal technical data related to devices, interests, and user behaviour for marketing, analysis, and optimisation purposes.

Please note that the providers of these services set their own cookies on your device. In addition, this information may also be combined with information from other sources. This applies in particular if you yourself maintain an account with the service provider and are logged in there at the time of the session.

We would like to inform you that depending on the country of residence of the service providers listed below, data may be transferred and processed on servers located outside the European Union if you consent to the setting of cookies. In this case, there is a risk that the required level of data protection prescribed by the GDPR may not be maintained, and the enforcement of your rights may be hindered or not possible.

The deployment of consent-required cookies is carried out by the Commanders Act TagCommander service, provided by the French company Fjord Technologies. Therefore, if you consent to the setting of cookies, you also agree that the deployment will be done through this tag manager.

Affected Data

Usage data (e.g. access times, web pages clicked on, online services used)
Communication data (e.g. information about the device used, IP address)

Affected Individuals

Users of our online services (internet presence and smartphone applications).

Purpose of processing: Playing out our internet pages, offering content and applications, improving our internet offering, communication and marketing, ensuring the operation of our internet pages and applications

Legal basis:

Legitimate interest, Art. 6 (1) lit. f GDPR

Unless we obtain your consent to set cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, particularly its content and features. You can object to the use of cookies set by us based on our legitimate interest through the security settings of your browser. There, you have the option to specify whether you do not accept cookies at all or only accept them upon request, or to set cookies to be deleted after closing your browser. If cookies are disabled for our website, it may limit the full functionality of the website.

Consent, Art. 6 (1) lit. a GDPR, resp. § 165 Abs. 3 TKG 2021

If we ask you before your visit to our website to set certain cookies on your device and you consent to this, the legal basis can be found in the consent you have given. As part of the consent process, we will inform you which service providers we use in detail. If you do not give this consent, only the so-called technically necessary cookies, which are required for the proper operation of our website and its display in your browser, will be set. If you have consented to the setting of cookies, you have the option to revoke the consent given to us at any time.

Commanders Act Tagmanager

In case you give your consent, we process your personal data with the service Commanders Act TagCommander, of our data processor Fjord Technologies, 3 bis Rue Taylor 75010 Paris France, as joint controllers for the purpose of triggering, managing, and controlling other services on our website. In this specific case, the services mentioned on this page will be controlled through TagCommander. Not giving your consent will have the exact impact described for the respective services. You can revoke your consent already given by changing the privacy settings.

We allow TagCommander to collect connection data and data from your web browser. These are used by Fjord Technologies for the further development of the service.

Below you will find details about the cookies and services used for each purpose.

Functionally Necessary Cookies

When we use functionally necessary cookies and plugins, we process your personal data in order to be able to provide basic functions of our websites and the services you have requested (system cookies) and to temporarily store your cookie settings. Without the use of system cookies, there would be functional restrictions, e.g. the logged-in area could no longer be used.

You can find the specific purpose of the individual cookies in the table below ("Types of data, storage period, recipients").

The legal basis for processing your data when using functionally necessary cookies are our legitimate interests in providing a fully functional website, applications and the services you request, as well as in temporarily storing your cookie settings (Art. 6 (1) lit. f GDPR, § 165 (3) TKG 2021).

Types of Data, Storage Period, Recipients

The following functionally necessary cookies are used on our websites:

Cookie	Data Type	Purposes	Storage duration	Application
TC_PRIVACY_CENTER			12 months	Commanders Act
TC_PRIVACY			12 months	Commanders Act
WID	ID		Session, automatically deleted on closing the browser	Commanders Act
TCID	ID		12 months	Commanders Act
TCPID	ID		12 months	Commanders Act
hideCookieMessage	Yes/No	Controls display for "Cookie Management Tool"	8 months	Commanders Act

External Services Cookies

The cookies from these tools are set by service providers we use on the website to enable you to use, for example, online magazine content, informational videos, video content, infographics, financial market data display and social media content.

These cookies are able to track your browser across other websites and build a profile of your interests. If you do not allow these cookies, you may not be able to use or see these tools and content.

We would like to point out that we have no influence on the processing of personal data by these services and no complete knowledge of the scope, purpose and storage period.

Integration of Google reCAPTCHA Spam Protection

To protect input forms on our website, we may use the service Google reCAPTCHA provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, US (hereinafter referred to as “Google”). By using this service, it is possible to distinguish whether the respective input is of human origin or is being abused by automated machine processing.

To our knowledge, the referrer URL, the IP address, the behaviour of website visitors, information about the operating system, browser and length of stay, cookies, display instructions and scripts, the user's input behaviour and mouse movements in the area of the reCAPTCHA checkbox are transmitted to Google.

Google uses the information obtained in this way, among other things, to digitise books and other printed matter and to optimise services such as Google Street View and Google Maps (e.g. house number and street name recognition).

The IP address transmitted as part of reCAPTCHA will not be merged with other Google data unless you are logged into your Google account at the time of using the reCAPTCHA plug-in. If you wish to prevent this transmission and storage of data about you and your behaviour on our website by Google, you must log out of Google before visiting our site or using the reCAPTCHA plug-in.

The use of the reCAPTCHA service obtained information is in accordance with the Google terms of use.

Google transmits your personal data to the United States. The legal basis for the transfer of data to the US is your consent in accordance with Art. 49 (1) lit a in conjunction with Art. 6 (1) lit a GDPR. Before giving your consent, you were already informed that the US does not have a level of data protection that corresponds to the standards of the EU. In particular, US secret services can access your data without you being informed and without you being able to take legal action against it. For this reason, the European Court of Justice has ruled that the previous adequacy decision (Privacy Shield) is invalid.

The legal basis for the data processing is your consent pursuant to § 165 (3) TKG 2021 or Art. 6 (1) lit a GDPR.

Integration of the Google YouTube video service

In the event of your consent being granted, we process your personal data with the service YouTube, Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") as joint controller for the purpose of playing videos on our website.

We allow the service to collect connection data, collect data from your web browser and place an advertising cookie. By placing advertising cookies, Google is able to calculate an individual user ID for all users. This personal data, which is suitable for unique identification, is then processed within the advertising network operated by Google.

Insofar as Google carries out further independent processing of the data, in particular within the framework of the Google advertising network, Google is solely responsible for this. Details can be found in Google's privacy policy.

The legal basis for the data processing is your consent pursuant to Section 165 (3) TKG 2021. Google transmits your personal data to the USA. The legal basis for the data transfer to the USA is your consent pursuant to Art. 49 para. 1 lit a in conjunction with Art. 6 para. 1 lit a DSGVO. Before giving your consent, you were already informed that the USA does not have a level of data protection that corresponds to the standards of the EU. In particular, US secret services can access your data without you being informed and without you being able to take legal action against this. For this reason, the European Court of Justice has ruled that the previous adequacy decision (Privacy Shield) is invalid.

The only consequence of not giving consent is that the Youtube service is not made available to you. You can revoke consent you have already given by changing the privacy settings.

Integration of the video service Whatchado

In case of granting your consent, we process your personal data with the service Whatchado, whatchado GmbH, Mariahilfer Straße 103/4/66, 1060 Vienna, Austria as a processor for the transmission and display of videos.

Failure to give consent has no immediate effect on the function of the website, but you cannot view the whatchado videos without consent. You can revoke consent you have already given by changing the data protection settings.
Cookies set when retrieving data are necessary for functionality and are deleted when the browser window is closed. Some of the transmitted data is retrieved from servers in the USA, so for technical reasons the IP address of your end device must be transmitted to these servers.

The legal basis for the data processing is your consent pursuant to Section 165 (3) TKG 2021. Whatchado transmits your personal data to the USA. The legal basis for the transfer of data to the USA is your consent pursuant to Art. 49 para. 1 lit a in conjunction with Art. 6 para. 1 lit a DSGVO. Before giving your consent, you were already informed that the USA does not have a level of data protection that corresponds to the standards of the EU. In particular, US secret services can access your data without you being informed and without you being able to take legal action against this. For this reason, the European Court of Justice has ruled that the previous adequacy decision (Privacy Shield) is invalid.

Integration of SocialMedia content Walls.io

In case of granting your consent, we process your personal data with the service Walls.io, Walls.io GmbH, Schönbrunner Straße 213/215, 3rd Floor 1120 Vienna, Austria as joint controller for the purpose of providing social media services on our website.

We enable the service to collect connection data, collect data from your web browser and place advertising cookies. The placement of advertising cookies enables Walls.io to calculate an individual user ID for each user. This personal data, which is suitable for unique identification, is then processed within the advertising network operated by Walls.io.

Insofar as Walls.io carries out further independent processing of the data, in particular within the framework of the Walls.io advertising network, Walls.io is solely responsible for this. Details can be found in the privacy policy of Walls.io.

Failure to give consent will only result in the Walls.io service not being made available to you. You can revoke consent you have already given by changing the privacy settings.

The legal basis for the data processing is your consent in accordance with Section 165 (3) TKG 2021.

Integration of financial market data Euroland IR

If you give us your consent, we will process your personal data for the transmission and display of financial market data with the service Euroland IR, Eurolandcom AB, Kronhusgatan 2D, 411 13 Gothenburg, Sweden ("EurolandIR") as a processor.

In some areas of our website (e.g. "Investor Relations"), interactive financial market data from EurolandIR is integrated into the website via the embedding function.

Failure to give consent has no immediate effect on the function of the website, but you will not be able to view the financial market data without consent. You can revoke consent you have already given by changing the data protection settings.

Cookies set when retrieving the data are necessary for functionality and are deleted when the browser window is closed. Some of the transmitted data is retrieved from servers in non-EU countries, so for technical reasons the IP address of your end device must be transmitted to these servers.

The legal basis for the data processing is your consent pursuant to Section 165 (3) TKG 2021. EurolandIR may also transmit your personal data to data centres in non-EU states. In this case, there is a risk that the level of data protection prescribed by the GDPR will not be complied with and that the enforcement of your rights will not be possible or will be difficult.

The legal basis for the transfer of data to non-EU countries is your consent in accordance with Art. 49 (1) lit a in conjunction with Art. 6 (1) lit a GDPR.

Further information can be found in the EurolandIR privacy policy.

Integration of infographics 23degrees

In case you have given your consent, we process your personal data with the service 23degrees.io, 23degrees GmbH, Tigergasse 3/5, 1080 Vienna, Austria ("23degrees") as joint controller for the transmission and display of interactive infographics.

In parts of our website (e.g. "Investor Relations"), interactive infographics from 23degrees are integrated into the website via the embedding function.

23degrees uses a technically necessary cookie from Cloudflare (third-party provider) for the purpose of ensuring security and preventing DDoS attacks (hacker attacks).

We enable the service to collect connection data and to collect data from your web browser. Insofar as further independent processing of the data takes place by 23degrees, in particular in the context of marketing by 23degrees, 23degrees is the sole responsible party for this.

Failure to give consent has no immediate effect on the function of the website, but you will not be able to view the infographics without consent. You can revoke consent you have already given by changing the privacy settings.

For more information, please see the privacy policy of 23degrees.

Marketing Cookies

If you have given us your consent to do so, we use cookies to evaluate and optimise Vienna Insurance Group online and direct marketing campaigns and advertising activities on other channels (e.g. social media, such as Twitter, LinkedIn or ad servers such as Google Ads).

These technologies are used by advertising partners to serve ads that are relevant to your interests and to optimise marketing activities.

For example, this means that an advert will not be shown again if you have already engaged with a product. This allows us to target advertisements more effectively. These advertisements are not only placed on our website, but also on other advertising partner sites.

It is not possible to draw any direct conclusions about a person. If you do not allow these cookies, you will not experience our targeted advertising on other websites.

We would like to point out that with regard to the processing of personal data by these services, we have no influence and no complete knowledge of the scope, purpose and storage period.

Google Analytics with Google Signals

In case of granting your consent, we process your personal data with the service Google Analytics, Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") as joint controller for the purpose of error analysis and statistical evaluation of our website, as well as the placement of personalised advertising including consideration of demographic characteristics and cross-device measurement of our advertising success.

Not granting consent has no immediate effect on the function of the website, but without statistical data it will be more difficult for us to further develop the website. You can revoke consent you have already given by changing the privacy settings.

We enable the service to collect connection data, data from your web browser and data about the content accessed, as well as to run analysis software and store data on your terminal device. The service anonymises the collected data immediately after collection and provides us with the anonymous data in the form of statistics for evaluation. We use these statistics for troubleshooting and for the further development of our website. The data on your end device is stored for up to two years.

We have also activated Google Signals, an additional service to Google Analytics. This feature sends aggregated (non-personal) data such as interests or demographics of Google users to Google Analytics. The data is used for remarketing purposes by us. In addition, cross-device user behaviour can be measured. However, this only happens if the visitors have logged into a Google service when visiting the website and the "personalised advertising" option has been activated in the Google account settings at the same time.

For more information on Google Signals, please visit https://support.google.com/analytics/answer/7532985?hl=en.

The legal basis for the data processing is your consent pursuant to Section 165 (3) TKG 2021. The Google Group transfers your personal data to the USA. The legal basis for the transfer of data to the USA is your consent pursuant to Art. 49 para. 1 lit a in conjunction with Art. 6 para. 1 lit a DSGVO. Before giving your consent, you were already informed that the USA does not have a level of data protection that corresponds to the standards of the EU. In particular, US secret services can access your data without you being informed and without you being able to take legal action against it. For this reason, the European Court of Justice has declared the previous adequacy decision (Privacy Shield) invalid in a ruling.

For more information on Google's privacy policy and terms of use, please see the following link: Privacy Policy and Terms of Use

Google Dynamic Remarketing

If you give your consent, we will process your personal data with the service Google Ads, Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") as joint controller for the purpose of serving personalised advertising and measuring our advertising success.

Not giving consent has no direct effect on the function of the website, but it is not possible for us to serve personalised advertising on your end devices if you do not give consent. You can revoke consent you have already given by changing the privacy settings.

We enable the service to collect connection data, data from your web browser and data about the content accessed. In addition, we enable the service to run tracking and recognition software and to store data on your terminal device. By means of the tracking and recognition software, it is then possible for the service to enrich its advertising network and to recognise you when you visit external websites or to play personalised advertising. We also use the data collected to measure our advertising success. The data on your terminal device is stored for up to two years.

The legal basis for the data processing is your consent pursuant to Section 165 (3) TKG 2021. The Google Group transfers your personal data to the USA. The legal basis for the transfer of data to the USA is your consent in accordance with Art. 49 Para. 1 lit a in conjunction with Art. 6 Para. 1 lit a GDPR. Before giving your consent, you were already informed that the USA does not have a level of data protection that corresponds to the standards of the EU. In particular, US secret services can access your data without you being informed and without you being able to take legal action against this. For this reason, the European Court of Justice has ruled that the previous adequacy decision (Privacy Shield) is invalid.

LinkedIn Ads

In case of giving your consent, we process your personal data with the service LinkedIn Pixel, LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland as joint controllers for the purpose of serving personalised advertisements and measuring our advertising success.

Failure to provide consent will have no immediate impact on the operation of the website, however, failure to provide consent will prevent us from serving personalised advertising to your devices. You can revoke consent you have already given by changing the data protection settings.

The legal basis for the data processing is your consent pursuant to Section 165 (3) TKG 2021. The LinkedIn Group transfers your personal data to the USA. The legal basis for the transfer of data to the USA is your consent pursuant to Art. 49 para. 1 lit a in conjunction with Art. 6 para. 1 lit a GDPR. Before giving your consent, you were already informed that the USA does not have a level of data protection that corresponds to the standards of the EU. In particular, US secret services can access your data without you being informed and without you being able to take legal action against it. For this reason, the European Court of Justice has ruled that the previous adequacy decision (Privacy Shield) is invalid.

Contact

Data Protection Team Schottenring 30 1010 Wien Österreich
+43 50 390-22000 Send e-mail datenschutz@vig.com