We appreciate your interest in our website and in our company. Protecting your privacy is very important to us. We comply with the GDPR and process data according to its principles.
Below please find details about our handling of your data.
1. Who is responsible for data processing and how can you contact us?
Leichtfried GmbH & Co. KG (hereinafter also “Leichtfried Loden”)
Telefon: +43 3577 81505
E-Mail: firstname.lastname@example.org, email@example.com
Leichtfried Loden, based in Möbersdorf, Zeltweg, is an Austrian company, the operator of the website www.leichtfried-loden.com, as well as all online presence, and operationally responsible for the website content.
The present data protection declaration applies to all online appearances of Leichtfried Loden including social media sites, such as Facebook or Instagram.
3. Which data does Leichtfried GmbH & Co. KG process and where does the data come from?
Data is collected by us, e.g., when entered on our website or received from third parties, e.g., by an order via Facebook-Connect. Furthermore, we can process data that we receive from publicly available sources.
Leichtfried Loden only processes data that is required for the fulfilment of the contract, fulfilment of legal obligations or within the scope of legitimate interests, or if you expressly give us your consent for this purpose. As far as possible, we (pseudo)-anonymize your data. We do not process any special categories of customer data in accordance with Art. 9 GDPR.
- Personal data processed by Leichtfried GmbH & Co. KG include:
- Personal data, such as name, address, date of birth, place of birth, nationality
- Contact details, such as phone number & mail address
- Data and information from electronic traffic, such as IP addresses, cookies, pixels, apps, etc.
- Order-specific data
- Advertising and sales data
- General communication data, such as enquiries and customer service-related consultations
- Data such as buying behaviour, payment behaviour and interests
- Data to comply with legal and regulatory obligations
- Data for the fulfilment of contractual obligations, such as warranty or guarantee
- Credit card data only in the context of fraud control
- Other account data only in the context of remittances
4. For what purpose do we process data and on what legal basis (justification) do we do this?
Leichtfried Loden wants you to find the best possible product range and the best possible selection of products and services, tailored to your preferences and interests. We process the data based on the cited legal bases previously mentioned and the associated purposes noted below.
a) In order to fulfil (pre-)contractual obligations (Art. 6 sec. 1 lit.b GDPR)
b) In order to safeguard the legitimate interests of Leichtfried GmbH & Co. KG or a third party (Art. 6 sec. 1 lit. f).
In order to offer you an optimal shopping experience on our webshop and in our retail shop, the best service and advice and to inform you about products, trends, innovations and services, we collect, store, process and analyse the data provided. Eligible interests of Leichtfried Loden or a third party include:
– Implementation of marketing activities, in particular, personalized advertising in cooperation with third parties, e.g., advertising partners, such as Facebook, Google or Instagram
– Implementation of our customer loyalty programs
– Processing and storage of communication content from mail, telephone or other communications
– Analysis of purchasing behaviour by Leichtfried Loden and its advertising partners
– Monitoring measures for the protection of Leichtfried Loden’s employees, customers and property, its suppliers and other partners
– Enforcement of legal claims and defense against unauthorized claims
– Anti-fraud and prevention measures, e.g., credit card fraud
– Consultation with information agencies and data exchange for credit assessment
– Measurements to further develop the range of products and services
– Statistical analysis
– Coordination, business development and strategic measures within our company.
Providing a customer account and customer profile on the Leichtfried Loden website.
You can object to the processing for legitimate reasons on an individual basis, in accordance with Art. 21 GDPR.
c) Within the scope of your consent (Art. 6 sec. 1 lit. a GDPR)
5. Who receives your data?
a) General provisions
We have clear rules on who is allowed to receive personal data. Within our company, only those employees who need it to fulfil contractual, statutory and regulatory tasks and obligations and to safeguard the legitimate interests listed in point 3.b) receive your data. In addition, processors commissioned by Leichtfried GmbH & Co. KG, for example, companies that support us in fulfilling our corporate goals and tasks, such as IT
companies, payment providers, suppliers, delivery companies, printers, etc. receive your data, insofar as they need them to carry out the assigned tasks. Leichtfried GmbH & Co. KG forms written agreements with these processors, which oblige them to comply with the same requirements that apply to us.
Furthermore, third parties with whom we cooperate within the scope of the stated purposes of processing or who may have a legitimate interest in the cooperation, e.g., collection agencies, payment providers, trading platforms, such as Facebook Connect, may receive personal data from Leichtfried Loden, e.g., when you purchase from us via these platforms. If there is a legal or official obligation, public authorities may also receive data.
b) Transfer of data to third countries
Data transfers to countries outside the EU will only take place if that country has an adequate level of protection under Art. 45 GDPR or other guarantees under Art. 46 GDPR that adequately protect your data.
6. How long do we process and store data?
We store your data for the duration of the business relationship and beyond in order to carry out advertising activities within the limits of legitimate interests, as long as you do not object to this processing in a legitimate manner, in accordance with Art 21 GDPR or if you have given us your consent or have not revoked it. More details available under item 7.
Due to legal retention and documentation obligations, additional storage may be necessary. These include the Federal Tax Code (BAO) and the Business Code (UGB) in Austria, as well as other national and European legislation.
Due to our warranty obligations and our guarantees given by our suppliers, data storage of 3 years (short limitation period) up to 30 years in certain cases (long limitation period) is possible and necessary.
7. Your rights as a data subject
The GDPR guarantees you comprehensive protection and right of information, and, in particular, the right to object and revocation in accordance with Point e). You can contact our Data Protection Officer at any time with your request or complaint.
The responsible supervisory authority for the business consortium is the Austrian Data Protection Authority. You can also contact them in the event of a complaint at www.dsb.gv.at
Your rights in detail:
a) Right of access in accordance with Art. 15 GDPR
You have the right to free information about your personal and stored data, and, if applicable, a right to rectification, blocking or deletion as well as revocation of consents given. Contact our Data Protection Officer if you would like to know about how your data is used.
b) Right to correction in accordance with Art. 16 GDPR
Your data is no longer correct? Just let our customer service staff know (via firstname.lastname@example.org).
c) Right to deletion or restriction in accordance with Art. 17 and 18 GDPR
Upon request and under the conditions of Art. 17 GDPR, we will delete your data unless we are entitled to re-use it. Under the conditions of Art. 18 GDPR, if we cannot delete the data, you can demand that we restrict the data processing. In all cases, we will also inform the recipients of the data of your request and ask them to comply with your request.
d) Right to data transfer: as regulated in Art. 20 GDPR
You may request that we provide you with your stored data.
e) Right to object in accordance with Art. 21 GDPR and revocation in accordance with Art. 13 GDPR
If the data processing is based on your consent, you can revoke this consent at any time in accordance with Art. 6 sec. 1 lit. a.
If we process your data on the basis of our legitimate interest, you can object to this processing in accordance with Art. 21. GDPR. We will then immediately check whether your request is qualified.
To exercise your revocation and objection, simply contact our Customer Service or the Data Protection Officer.
f) Automated decisions in individual cases, including profiling, in accordance with Art. 22 GDPR
You have the right not to be subject to an automated decision and profiling if this has legal effect or significantly affects you in a similar way. For the use of automated decision-making and profiling, see Point 9.
8. Do you need to provide us with data?
We need your data to process your order. When you provide us with information, you are obligated to provide truthful information. In the event of false information, e.g., incorrect age information, we are entitled to claim any damage resulting from this and in case of criminal relevance, file a complaint. You are not obliged to provide data or give your consent to the processing if the data are not relevant for the fulfilment of the contract.
However, due to different age limits for consent and capacity to contract, we need your age in each case.
9. Automated decision-making and profiling
a) Automated decision-making
Leichtfried Loden does not use automated decision-making.
Cookie Guidelines of Leichtfried GmbH & Co. KG (henceforth referred to as “Leichtfried Loden”), Zeltweg (as of 15.11.2020)
When using cookies/pixels, we distinguish between:
Necessary cookies (First Party cookies only):
These cookies are necessary to maintain communication, necessary functions and/or to provide information. These are set automatically and deleted after the end of the browser session or the scheduled time.
Essential cookies (First Party Cookies and Third Party Cookies):
These cookies remain on your computer for the time provided and ensure that Leichtfried Loden recognizes your computer the next time you visit the site and the settings and information you have provided, which saves you from filling out forms with your data again. These cookies are set when using the offered functionality or contain only general anonymous information about your access to the website (not to the content of the website), in order to later provide Leichtfried Loden additional information for statistical purposes about these accesses or to enable Leichtfried Loden to analyse navigation behavior (anonymous) on the website and thus make improvements.
Advertising cookies/pixels (Third Party Cookies)
These are cookies that are used to tailor our offer and services to your needs, interests and preferences, and to provide you with customized promotional offers. These will only be used after your consent, unless we are entitled to use them without consent.
b) Cookies/Pixels Used by Leichtfried Loden
In the following list we give you a comprehensive description of all cookies/pixels where personal data are used and what options you have.
If you sign up for our free newsletter, the data you enter for this purpose: your e-mail address, name and – optionally – your date of birth, will be transmitted. At the same time, we will store the IP address of the internet connection from which you accessed our website, as well as the date and time of your registration. As part of the registration process, we will obtain your consent to receiving the newsletter, describe the content in detail and refer to this data protection declaration. We use the data collected here exclusively for sending the newsletter – in particular, it will not be forwarded to third parties.
The legal basis for this is Art. 6 sec. 1 lit. a) GDPR.
You can revoke your consent to receiving the newsletter at any time going forward in accordance with Art. 7 sec. 3 GDPR. To do so, you only need to inform us of your cancellation or use the unsubscribe link contained in each newsletter.
For newsletter mailing, we use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to only as “The Rocket Science Group”.
By certifying the EU-US Privacy Shield, The Rocket Science Group guarantees that EU data protection requirements are also adhered to when processing data in the US. In addition, The Rocket Science Group offers further data protection information under http://mailchimp.com/legal/privacy/.
If you register to receive our newsletter, the data requested during the registration process, such as your email address and, optionally, your name and address, will be processed by The Rocket Science Group. In addition, your IP address, as well as the date and time of your registration are stored. As part of the further registration process, your consent to the sending of the newsletter is obtained, the content is specifically described and reference is made to this data protection declaration.
The newsletter, sent through The Rocket Science Group, contains a so-called tracking pixel, also called a “web beacon”. With the help of this tracking pixel, we can evaluate whether and when you have read our newsletter and whether you have followed the further links contained in the newsletter. In addition to other technical data, such as the data of your computer system and your IP address, the data processed is stored so that we can optimize our newsletter offerings and respond to the wishes of our subscribers. The data will therefore increase the quality and attractiveness of our newsletter offerings.
- Contact Enquiries/ Contact Options
If you contact us via contact-form or e-mail, the data you provide will be used to process your request. The provision of the data is necessary for processing and responding to your request – without this provision, we cannot answer your request or at most to a limited extent.
The legal basis for this processing is Art. 6 sec. 1 lit. b) GDPR.
Your data will be deleted when your request has been answered or resolved and the deletion does not conflict with any legal retention requirements, such as in the event of any subsequent contract processing.
- Google Analytics
We use Google Analytics in our website. This is a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred only as “Google”.
By certifying the EU-US Privacy Shield, Google guarantees that the EU’s data protection requirements will also be complied with when processing data in the US.
The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is Art. 6 sec. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visiting our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. With this feature, Google is already shortening its IP address within the EU or the EEA.
The data collected in this manner is again used by Google to provide us with an evaluation of the visits to our website as well as the related usage activities. This data may also be used to provide other services related to the use of our website and the use of the internet.
Google states it will not connect your IP address to other data. In addition, Google provides you with further data protection information under https://www.google.com/intl/de/policies/privacy/partners, e.g., on possible options to prevent the use of data.
- Google AdWords with conversion tracking
In our website we use the advertising component Google AdWords and the so-called conversion tracking. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred only as “Google”.
By certifying the EU-US Privacy Shield, Google guarantees that EU data protection requirements are also adhered to when processing data in the US.
We use conversion tracking to target our offers. The legal basis is Art. 6 sec. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
If you click on an ad placed by Google, the conversion tracking used by us stores a cookie on your device. These so-called conversion cookies have an expiry of 30 days and are not for your personal identification.
If the cookie is still valid and you visit a certain page of our website, both we and Google can evaluate that you have clicked on one of our ads placed on Google and that you have subsequently been redirected to our website.
Based on the information obtained in this way, Google creates a statistic about visits to our website. In addition, we receive information about the number of users who have clicked on our ad(s) as well as about the pages of our website that are subsequently accessed. However, neither we nor third parties who also use Google AdWords will be able to identify you in this way.
You can also prevent or restrict the installation of cookies by selecting the appropriate settings of your internet browser. At the same time, you can delete cookies that have already been saved at any time. However, the steps and measures required for this depend on your specific internet browser. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer for support.
- Facebook Remarketing / Retargeting
Our pages include remarketing tags of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA, hereinafter referred only as “Facebook”. When you visit our site, a direct connection between your browser and the Facebook server is established via the remarketing tags. Facebook receives the information that you have visited our site with your IP address. This allows Facebook to assign the visit to our pages to your user account. We can use the information obtained in this way for the display of Facebook ads. We would like to point out that we, as the provider of the pages, do not receive any knowledge of the content of the transmitted data or their use by Facebook. For more information, see Facebook’s privacy statement at https://www.facebook.com/about/privacy . If you do not want data collection via Custom Audience, you can deactivate Custom Audiences.
c) Revocation and Opposition Options
Browser extensions, such as Ghostery, allow you to deactivate individual cookies and control which cookies are set and which are not. The installation is simple, fast and is available for all major browsers.
In the case of “third party cookies”, the service providers used often offer deactivation options themselves.