Privacy policy

Privacy policy

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, Austrian Telecommunications Act TKG 2003). In this privacy information we inform you about the most important aspects of data processing on our website.


Contacting us

If you contact us via the form on the website or by email, the data you provide will be stored by us for six months for the purpose of processing your enquiry and in case of follow-up questions. We will not pass on this data without your consent.


Cookies

Our website uses so-called cookies. These are small text files that are stored on your device with the help of your browser. They do no harm.

We use cookies to make our website user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognise your browser on your next visit.

If you do not wish this, you can set up your browser so that it informs you when cookies are set and allows them only in individual cases.

If cookies are deactivated, the functionality of our website may be limited.


Google Maps

We use the maps of the “Google Maps” service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.


Google Fonts

We use fonts (“Google Fonts”) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.


Google ReCaptcha

We use the “ReCaptcha” function to prevent bots from, for example, making entries in online forms. It is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.


Web analytics

Our website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Cookies are used for this purpose, enabling an analysis of how users use the website. The information generated in this way is transferred to Google’s servers in the USA and stored there. You can prevent this by setting up your browser so that no cookies are stored.

We have concluded a corresponding data processing agreement with the provider.

Our concern within the meaning of the GDPR (legitimate interest) is the improvement of our offering and our website. As the privacy of our users is important to us, user data is pseudonymised.

Your IP address is recorded but immediately pseudonymised (e.g. by deleting the last 8 bits). As a result, only an approximate localisation is possible.

Data processing is carried out on the basis of the statutory provisions of Section 96 (3) of the Austrian Telecommunications Act (TKG) and Art 6 (1) lit a (consent) and/or f (legitimate interest) of the GDPR.

In addition, Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

User data is retained for a period of 14 months.

Detailed information on the use of data by Google and your options for settings and objection can be found on the following Google websites: https://www.google.com/intl/de/policies/privacy/partners (“How Google uses data when you use our partners’ sites or apps”), http://www.google.com/policies/technologies/ads (“Use of data for advertising purposes”), http://www.google.de/settings/ads (“Manage information Google uses to show you advertising”).


Mouse tracking

Our concern within the meaning of the GDPR (legitimate interest) is the improvement of our offering and our website. We therefore use Hotjar to better understand our users’ needs and to optimise the offering on this website. With the help of Hotjar’s technology, we gain a better understanding of our users’ experiences (e.g. how much time users spend on which pages, which links they click, what they like and what they don’t, etc.), and this helps us to align our offering with our users’ feedback. Hotjar works with cookies (see above) and other technologies to collect information about the behaviour of our users and about their devices (in particular the device’s IP address (recorded and stored only in anonymised form), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for displaying our website). Hotjar stores this information in a pseudonymised user profile. The information is used neither by Hotjar nor by us to identify individual users, nor is it combined with other data on individual users. Further information can be found in Hotjar’s privacy policy: https://www.hotjar.com/legal/policies/privacy.

You can object to the storage of a user profile and of information about your visit to our website by Hotjar, as well as to the setting of Hotjar tracking cookies on other websites, by clicking this opt-out link.


Data storage via our web shop

For the purpose of contract processing, the following data is stored by us: salutation, first name and surname, address, email address and any optional data entered by the user (company name, address details, telephone number). The data you provide is required for the fulfilment of the contract or for the implementation of pre-contractual measures. Without this data we cannot conclude the contract with you. Data is not transferred to third parties, with the exception of the transfer of credit card data to the processing banks/payment service providers for the purpose of debiting the purchase price, to the transport/shipping company commissioned by us for the delivery of the goods, and to our tax advisor for the fulfilment of our obligations under tax law.

If the purchase process is cancelled, the data stored by us is deleted. In the event of a contract being concluded, all data from the contractual relationship is stored until the expiry of the retention period under tax law (7 years).

The data name, address, purchased goods and date of purchase are additionally stored until the expiry of product liability (10 years). Data processing is carried out on the basis of the statutory provisions of Section 96 (3) of the Austrian Telecommunications Act (TKG) and Art 6 (1) lit a (consent) and/or lit b (necessary for the fulfilment of the contract) of the GDPR.


Registration and user account

Users of our web shop can optionally create a user account. As part of the registration process, we inform users of the required information (mandatory fields and optional information). We use the data entered during registration for the purpose of using our offering. Users may be informed by email about information relevant to the offering or registration, such as changes to the scope of the offering or technical updates.

If users cancel their user account, their data relating to that account is deleted; an exception is data whose retention is necessary for commercial or tax law reasons in accordance with Art 6 (1) lit c GDPR. It is the responsibility of users to back up their data before the end of the contract in the event of cancellation. We are entitled to irretrievably delete all of the user’s data stored during the term of the contract.

On the basis of both our legitimate interests and the users’ interests in protection against misuse and other unauthorised use, we store the IP address and the time of the respective action when a user uses our registration and login function in connection with their user account. IP addresses are anonymised or deleted after 7 days at the latest.

As a matter of principle, we do not pass data on to third parties; exceptions are situations in which we must pursue our claims or comply with legal obligations pursuant to Art 6 (1) lit c GDPR.


Newsletter

You have the option of subscribing to our newsletter via our website. In order to provide you with targeted information, we may also collect and process additional details voluntarily provided by users.

To send our newsletter, we need your email address and your declaration that you agree to receive the newsletter. As soon as you have subscribed to the newsletter, we will therefore send you a confirmation email with a link to confirm your subscription.

You can cancel your newsletter subscription at any time. Please send your cancellation to the following email address: [EMAIL-ADRESSE].

We will then immediately delete your data in connection with the newsletter mailing.


Google re/marketing services

Our concern within the meaning of the GDPR (legitimate interest) is the improvement of our offering and our website. We therefore use the marketing and remarketing services (“Google marketing services” for short) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

With the help of Google marketing services, we can display advertisements for and on our website in a targeted manner so that users are only shown advertisements that potentially reflect their interests. For this purpose, Google executes a code and uses so-called (re)marketing tags, with the help of which an individual cookie is stored in the user’s browser. On the use of cookies, see above.

The information collected may also be combined by Google with such information from other sources. If the user subsequently visits other websites, they can be shown advertisements tailored to their interests.

In addition, Google Analytics records the users’ IP address, but it is immediately pseudonymised (e.g. by deleting the last 8 bits). As a result, only an approximate localisation is possible; advertisements are not managed and displayed for a specific person, but for the cookie holder, regardless of who this cookie holder is. This does not apply, of course, if a user has expressly permitted Google to process the data without this pseudonymisation. The information collected about users by Google marketing services is transmitted to Google and stored on Google’s servers in the USA. The user’s IP address is not merged with the user’s data within other Google services.

Among other things, we use cookies of the Google marketing service “Google AdWords”; we may display third-party advertisements on the basis of the Google marketing service “AdSense” and its cookies. Further information on the use of data for marketing purposes by Google can be found at https://policies.google.com/technologies/ads; Google’s privacy policy is available at https://www.google.com/policies/privacy.

We also use the “Google Tag Manager” to integrate and centrally manage the analysis and marketing services offered by Google on our website.


Online presences on social media

We maintain online presences within social networks and platforms in order to communicate with users, prospective customers and customers who are active there. When accessing these networks and platforms, the terms and conditions and data processing guidelines of the respective operators apply.

Unless otherwise stated in our privacy policy, we process users’ data when they communicate with us on social networks and platforms.


Use of Facebook social plugins

Our concern within the meaning of the GDPR (legitimate interest) is the improvement of our offering as well as the analysis, optimisation and economic operation of our website. We therefore use social plugins (“plugins”) of the social network facebook.com, which are operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins can display content such as graphics, text contributions or videos, or elements for interaction, on the website. You can recognise them by one of the Facebook logos (an “f” on a corresponding background, the “thumbs up” sign or the terms “Like” or “Gefällt mir”) or by the label “Facebook Social Plugin”. You can view the list and appearance of the Facebook social plugins here: https://developers.facebook.com/docs/plugins/.

Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

Further information on data collection by Facebook, the further processing and use of the data, as well as user rights and settings options for protecting privacy, can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.


Twitter

Content and functions of the Twitter service may be integrated within our online offering. These are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. This may include, for example, content such as images, videos or texts and buttons with which users can react to the content. If users are members of Twitter, Twitter can assign the access to the content and functions to the users’ respective profiles. Twitter’s privacy policy: https://twitter.com/de/privacy.

Twitter is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active).


Instagram

Content and functions of the Instagram service may be integrated within our online offering. These are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. This may include, for example, content such as images, videos or texts and buttons with which users can react to the content. If users are members of Instagram, Instagram can assign the access to the content and functions to the users’ respective profiles. Instagram’s privacy policy: http://instagram.com/about/legal/privacy/.


Pinterest

Content and functions of the Pinterest service may be integrated within our online offering. These are provided by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA. This may include, for example, content such as images, videos or texts and buttons with which users can react to the content. If users are members of Pinterest, Pinterest can assign the access to the content and functions to the users’ respective profiles. Pinterest’s privacy policy: https://about.pinterest.com/de/privacy-policy.


Xing

Content and functions of the Xing service may be integrated within our online offering. These are provided by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. This may include, for example, content such as images, videos or texts and buttons with which users can react to the content. If users are members of Xing, Xing can assign the access to the content and functions to the users’ respective profiles. Xing’s privacy policy: https://www.xing.com/app/share?op=data_protection.


LinkedIn

Content and functions of the LinkedIn service may be integrated within our online offering. These are provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. This may include, for example, content such as images, videos or texts and buttons with which users can react to the content. If users are members of LinkedIn, LinkedIn can assign the access to the content and functions to the users’ respective profiles. LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

LinkedIn is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active).


Vimeo

Videos from the “Vimeo” platform may also be embedded on our website. These are provided by Vimeo Inc., Attention: Legal Department, 555 West 18th Street, New York, New York 10011, USA. Privacy policy: https://vimeo.com/privacy.


YouTube

Videos from the “YouTube” platform may also be embedded on our website. These are provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.


Your rights

You are entitled in principle to the rights of access, rectification, erasure, restriction, data portability, revocation and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed in any way, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde).

You can reach us using the following contact details:

Lerchpeuntgut, the Antretter family
Wölting 35
5580 Tamsweg
Phone +43 664 75050015
servus@lerchpeuntgut.at

Source: This privacy policy is based on the model privacy policy of the Austrian Economic Chambers (WKO)
Version: