Data Privacy Statement

Information

We place great value on the protection and security of your data, regardless of whether you are a customer or visitor to our online presence. We therefore undertake to protect your private sphere and to handle your data confidentially. In this document, we are pleased to inform you of the specific personal data collected in relation to your visit to this website and the purposes for which it is used.

I. Responsible person

This website is operated by Zumtobel Group AG, Höchsterstraße 8, 6850 Dornbirn, Austria, FN 62309 g, which acts as the “responsible person” within the meaning of the EU General Data Protection Regulation (hereinafter “GDPR”).

The responsible person has not appointed a data protection officer, because this is not necessary in order to comply with the statutory requirements.

However, inquiries about data protection and the processing of your personal data can be sent to the following email address, and we will handle them in accordance with the statutory provisions: dataprivacy [AT] zumtobelgroup [DOT] com.

II. Data processing / Purpose of processing / Duration of storage

This section describes the data categories we use as well as the purposes we aim to achieve through use of the data. Information on the length of time for which various kinds of data are stored is provided where possible.

Every time this website is accessed, access data is saved in a log file known as the server log. The data record saved in this regard contains the following information: date and time of access, IP address, session ID, the website accessed, name of the website from which the website was accessed, and information about the browser used.

We only analyze these log files in the event of misuse of our website. We reserve the right to subsequently examine the log files of users against whom a concrete suspicion exists of having used our website illegally and/or in breach of contract. In general, it is not possible for us to associate this data with a specific person. If such association is possible, however, we only use such data in cases for which a corresponding legal basis exists (weighing of interests in the individual case).

When you log in to our website or online shop, we collect the contact data you provide (in particular, your name, salutation, telephone and fax number, email address, language of correspondence, industry, department and online shop access data) and use it on the basis of the processing agreement on this subject. Moreover, in our internal processes, you are assigned a customer number and one or more contact persons from our company. We use this data to make our online shop available and serve you insofar as you are a customer of, or interested in, our company. In most cases, such data is stored for six months after use of the online shop has ceased (the customer account is deleted).

If you place an order in the online shop, we collect additional information for this purpose, including a delivery address and other information necessary for order processing, which you provide. We store such data for up to six months after the customer relationship ends.

Insofar as personal contact or order data is also used in our accounting processes, such data is stored until the end of prescribed periods on the basis of the statutory retention periods to which we are subject (usually 7 years in Austria).

If you have provided corresponding consent to us as part of the registration process or at a later time, we will also use the data resulting from your use of the online shop and the website, such as the web pages you accessed, the length of time you stayed on individual web pages and the products you looked at, as well as your previous items of interest in order to optimize our customer service and provide you with customized information. This data is stored until you revoke consent to its use.

If you have agreed to receive a newsletter, we will use your name and e-mail address, your gender, address, company and industry sector, as well as language, for the delivery and personalisation of such a newsletter. These data are used for the duration of the subscription to the respective newsletter.

If you are one of our customers, we use your master data on the basis of our legitimate interest in direct marketing purposes and may invite you to events in your area. 

You can revoke at any time any consent you have provided for processing of your personal data. You can send notice of revocation in writing or via email to dataprivacy [AT] zumtobelgroup [DOT] com.

III. Data recipients and recipient categories

In connection with operating this website and/or online shop, the following service providers have been engaged by the responsible person.

Website hosting provider: Zumtobel Group AG

Online shop provider: Zumtobel Group AG

In addition, we refer to the explanations in Section VI, which describes in detail the use of your data by social networks.

Aside from the specific recipients listed, other service providers may be engaged in connection with providing this website and the online shop (e.g., hosting provider, shop provider) in the future.

Transmission of data to other Group companies is performed on the basis of consent granted for data transmission to the named recipients.

IV. General princioles for the processing of personal data

1. We comply with the statutory data protection regulations without restriction

The data protection regulations of the European Union and the national laws derived from them apply to the storage, processing and use of personal data. The legal basis for the processing of the respective personal data can be seen from the above list.

In some cases, personal data may be provided to processors, if they offer sufficient guarantee for a lawful and secure use of data and if they contractually undertake to comply with the principles described in this privacy policy and the statutory regulations.

We reserve the right to transfer personal data to other companies in the context of restructuring or company mergers if they also undertake to adhere to the principles of action described here and are either based in the European Union or in a third country with adequate data protection.

If you actively choose to use the social networking functions offered on our website, personal data may be transferred to the respective external providers of these social networks. You will find detailed information on this in Section VI below.

We also reserve the right to pass on personal data to third parties if we are forced to do so by law, by a judicial decision by the court of competent jurisdiction or by an order of the competent authority, or if we are forced, as a result of actions or omissions on your part, to have our rights, our property or our assets protected or enforced by the competent authorities.

2. In the procurement of data, we restrict ourselves to what is necessary and reasonable.

If we collect personal data, we will explain to you in each case for what purposes we use the data.

In individual cases, we only collect personal data to the extent necessary to achieve these purposes. If further use of personal data is no longer necessary, the data will be deleted.

V. Your rights in relation to the data used

If and insofar as we use personal data relating to you, you have the following rights in relation to such data:

  • Right of access (Art. 15 GDPR): You can demand information at any time as to whether personal data relating to you is being processed by us and if so, to demand that we inform you of the specific information, as well as the purposes of its processing, the origin of the data, any recipients to whom the data has been transmitted and the length of time that such data has been stored by us.
  • Right to correction (Art. 16 GDPR): If you become aware that personal data relating to you is incorrect, you can demand the correction of such data at any time. Insofar as you consider data to be incomplete, you can also demand that any missing data be added.
  • Right to erasure (Art. 17 GDPR): If you believe that the processing of your personal data is no longer necessary or that such use is occurring without a sufficient legal basis or is illegal for other reasons, you can demand the erasure of this data.
  • Right to restriction of processing (Art. 18 GDPR): Instead of erasure, you can also demand that data processing be restricted if data is being processed illegally. In particular, you can also demand such restriction of data processing if you dispute the correctness of the data or have filed an objection against an instance of data processing.
  • Right to data portability (Art. 20 GDPR): With regard to the personal data that you have created yourself and which is used on the basis of a contract or consent, you can demand that this data be provided to you in a structured, common and machine-readable format. You can also demand that this data be sent directly to another responsible person.
  • Right to lodge a complaint with a supervisory authority (Art 77 GDPR): If you believe that your rights have been violated in relation to personal data concerning you, you have the right to file a complaint with a supervisory authority. In particular, you may contact the supervisory authority responsible for your place of residence, your place of work or the place where the suspected violation occurred. In Austria, the responsible supervisory authority is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.

Separately, we would like to point out your right of objection (Art. 21 GDPR): If reasons arise from your particular situation which make the use of your personal data, which we use on the basis of a legitimate interest, impermissible, you have the right to object to such use of data. If your personal data is used for direct marketing purposes, you have the right to object in any case.

If you have any questions or are unclear about your rights regarding your personal data, you can contact us at any time at the following e-mail address: dataprivacy [AT] zumtobelgroup [DOT] com.

VI. Cookies

We use cookies on our website in order to enable the use of certain website functions, analyze user activity on our website and offer certain third party services.

Cookies are small text files stored on your computer. Most of the cookies we use are deleted from your hard drive at the end of your browser session (“session cookies”). Other cookies remain on your computer and enable us to recognize your computer on your next visit (“persistent cookies”). In addition, cookies placed by third party providers are used on our website.

You can prevent the saving of cookies by selecting the appropriate browser setting. Please note, however, that if you do so, some functions of this website may not be fully available.

If you do not wish to have cookies stored on your computer, please deactivate the storing of cookies in your browser for our website or configure your browser so that cookies in general are not stored on your computer. You can also delete previously saved cookies using your browser.

Deactivating the use of cookies may also require that a persistent cookie be saved on your computer. If you delete this cookie at a later time, you have to deactivate cookies again.

The following categories of cookies are used on our website:

I. Session cookies

To facilitate browsing on our website, we place a session ID (“session identifier”) that is associated with each visitor when they start using our website. This session ID allows our server to identify you and/or your computer/browser as the same visitor, even if your IP address has changed. This session ID makes it possible to associate multiple related requests by a user with a single session. The session ID cookie is only valid until the end of a session. When you close your browser, it is automatically deleted.

II. Persistent cookies

a. Google Analytics

This website uses Google Analytics, a web analytics service of Google Inc. (“Google”). Google Analytics also uses cookies that make it possible to analyze how you use the website, among other things. The information generated by these cookies is usually transmitted to a Google server in the US and stored there. Google uses this information on behalf of the operator of this website to analyze your use of the website, to compile reports about website activities and to render other services for the website operator related to use of the website and internet. These reports and services are used to continuously improve the offerings of this website.

You can prevent the saving of cookies by selecting the appropriate browser setting. Please note, however, that if you do so, some functions of this website may not be fully available.

Moreover, you can prevent the collection by Google of the data generated by these cookies and the data related to your use of the website (incl. your IP address) as well as the processing of this data by Google; to do so, click the following link, and download and install the Google plugin available for your browser: http://tools.google.com/dlpage/gaoptout?hl=de. Additional plugins of this sort are also available from other providers, depending on the browser used.

In light of the discussion around the use of complete IP addresses in analytic tools, we wish to note that this website uses Google Analytics with the “anonymizeIp()” extension and as such, the IP addresses are only processed in truncated form in order exclude direct association with a person. Your IP address is therefore truncated by Google within European Union member states and other signatories to the Treaty on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the US and truncated there. The IP address supplied by your browser within the scope of Google Analytics is not combined with other Google data.

VII. Links to other websites

Our website contains hyperlinks to the websites of other providers. If you click on one of them, you will be directed from our website directly to the website of the other provider. This is evident from the change in URL in the address bar of your browser.

We cannot assume any responsibility for the confidential handling of your data by such providers, since we have no influence on the compliance of the other providers with data protection provisions. For information about how your personal data is handled by these providers, please consult their websites directly.

VII. Security measures to protect your data

To protect your data, we take special technical and organizational security measures, which are reviewed and adapted to technological process on a regular basis.

Please note, however, that due to the structure of the internet, it is possible that data protection and data security rules will not be observed by other persons or institutions outside our scope of responsibility.

X. Amendment of data protection provisions

Since amendments to legislation or changes in our internal company processes may make it necessary to amend our data protection provisions, we reserve the right to do so, and we ask that you read this data protection policy regularly.

Last updated: November 2020