Privacy Policy
The protection of your personal data is of the utmost importance to us. To ensure you feel completely at ease and secure with us, we provide clear and transparent information about how we handle your data. Here you can find out what information we collect, why we do so, and how we manage it securely. True to our motto: Trust through openness and responsibility. We hope you enjoy exploring what we have to offer!
The purpose of processing your personal data (hereinafter referred to as “data”) is to provide information on the development, production and distribution of technical solutions, in particular shading systems, and to present and offer goods and services relating to this subject. In this privacy policy, we inform you, amongst other things, about
- the name and contact details of the data controller
- all the purposes for which your data is processed
- the legal basis on which the processing activities are based, including, where applicable, our legitimate interest
- all recipients of your data
- any transfer of your data to a third country and the legal basis for such a transfer
- the retention period for your data or the criteria used to determine this period
- the categories of your data that are processed
- the source of your data
- the rights of data subjects
LET Sonnensegel GmbH, Strass 6, A-4850 Timelkam, Tel.: 0043 7672 31 778, Email: sonnensegel@let.at
No data protection officer has been appointed, as this is not required by law.
You have the following rights in relation to your personal data:
- Right of access
- Right to rectification or erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
- Right to withdraw your consent
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. Please feel free to contact us
at any time regarding this matter or if you have any further questions about personal data.
Right of access
You have the right to request, at any time and free of charge, information from us regarding the personal data we hold about you, as well as a copy of this information, including details of
- the purposes of processing
- the categories of personal data that are processed
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular where recipients are in third countries or are international organisations
- where possible, the envisaged period for which the personal data will be stored, or, if this is not possible, the criteria used to determine that period
- the existence of a right to have personal data concerning you rectified or erased, or to have the processing restricted by us, or a right to object to such processing
- the existence of a right to lodge a complaint with a supervisory authority
- where the personal data are not collected from the data subject: all available information regarding the origin of the data
- the existence of automated decision-making, including profiling, in accordance with Article 22(1) and (4) of the GDPR and — at least in such cases — meaningful information about the logic involved, as well as the significance and the intended consequences of such processing for the data subject.
You also have the right to be informed whether personal data has been transferred to a third country or to an international organisation. If this is the case, you are also entitled to receive information about the appropriate safeguards in connection with the transfer.
Right to rectification
You have the right to request the immediate rectification of any inaccurate personal data concerning you.
Furthermore, you have the right to request that incomplete personal data be completed, taking into account the purposes of the processing, including by means of a supplementary statement.
Right to erasure
You have the right to request that we erase your personal data without delay, provided that one of the following grounds applies and provided that the processing is not necessary:
- The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
- You withdraw your consent on which the processing was based in accordance with Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, and there is no other legal basis for the processing.
- You object to the processing in accordance with Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing in accordance with Article 21(2) of the GDPR.
- The personal data was processed unlawfully.
- The erasure of personal data is necessary for compliance with a legal obligation under Union law or the law of the Member States to which the controller is subject.
- The personal data was collected in connection with the information society services offered, in accordance with Article 8(1) of the GDPR.
Right to be forgotten
If we have made the personal data public and our company, as the controller, is obliged under Article 17(1) of the GDPR to erase the personal data, we shall take appropriate measures, including technical measures, taking into account the available technology and the cost of implementation, to inform other controllers who process the published personal data that you have requested those other controllers to delete all links to such personal data or copies or replicas of such personal data, insofar as the processing is not necessary.
Right to restriction of processing
You have the right to request that we restrict the processing of your data if any of the following conditions apply:
- You dispute the accuracy of the personal data, for a period that allows us to verify the accuracy of the personal data.
- The processing is unlawful; you object to the erasure of the personal data and instead request that its use be restricted.
- We no longer require the personal data for the purposes of processing, but you require it to establish, exercise or defend legal claims.
- You have lodged an objection to the processing in accordance with Article 21(1) of the GDPR, and it has not yet been determined whether our legitimate grounds override yours.
Right to data portability
You have the right to receive the personal data concerning you that we have provided in a structured, commonly used and machine-readable format.
You also have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, when exercising your right to data portability, you have the right to request that we transfer your personal data directly to another controller, provided this is technically feasible and does not infringe upon the rights and freedoms of others.
Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.
In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
If we process personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing. This also applies to profiling, insofar as it is related to such direct marketing.
If you object to the processing of your personal data for the purposes of direct marketing, we will no longer process your personal data for these purposes.
You also have the right to object, on grounds relating to your particular situation, to the processing of personal data carried out by us for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
Automated decisions in individual cases, including profiling
You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you, provided that the decision (1) is not necessary for entering into or performing a contract between you and us, or (2) is authorised by Union or Member State law to which we are subject, and that law provides for appropriate measures to safeguard your rights and freedoms and your legitimate interests; or (3) is based on your explicit consent.
Right to withdraw consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time. However, your withdrawal of consent does not affect the lawfulness of the data processing carried out prior to your withdrawal.
Our website and services are not intended for use by minors, and we do not wish to collect data from minors. If a parent or guardian of a minor believes that their child may have provided us with personal data, please contact us using the details provided below, and we will then delete this personal data in accordance with applicable law and this policy.
We use appropriate technical and organisational measures and security safeguards (TOMs) designed to prevent unauthorised access, unlawful processing and the unauthorised or accidental loss of your data.
This includes, for example, encrypting your communications with us via this website using the Secure Socket Layer (SSL) encryption protocol.
You can check the quality of our encryption here: https://www.ssllabs.com/ssltest
We would like to point out that data transmission over the internet may be vulnerable to security breaches, as it is not possible to provide complete protection against access by unauthorised third parties.
The server on which this website is hosted is located in Germany and is operated by Alfahosting GmbH, Ankerstraße 3b, D-06108 Halle (Saale), with whom we have entered into a data processing agreement.
For further details, please visit https://alfahosting.de/datenschutz/
Every time you visit our website, an automated system collects a range of general data and information. This general data and information is stored in the log files of our server by Alfahosting GmbH in Germany.
The following can be recorded
- the types and versions of browsers used
- the operating system used by the accessing system
- the website from which a visiting system accesses our website (known as a referrer)
- the subpages accessed via a connecting system on our website
- the date and time of a visit to the website
- an Internet Protocol address (IP address)
- the internet service provider of the accessing system
- other similar data and information that serves to protect against attacks on our IT systems.
We do not draw any conclusions about you based on the use of this general data and information.
This information is required in order to
- to display the content of our website correctly
- to optimise the content of our website and the advertising on it
- to ensure the continued functionality of our IT systems and the technology underpinning our website
- to provide law enforcement agencies with the information necessary for criminal prosecution in the event of a cyber attack.
We analyse this anonymously collected data and information both for statistical purposes and with the aim of enhancing data protection and data security within our company, ultimately to ensure the highest possible level of protection for you. In any case, we are permitted to process this data on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR.
The logs are stored separately from any personal data you provide and are deleted after a maximum of two months.
When you visit and use this website, cookies (YouTube, Google Analytics, session cookies) are used.
Cookies are small text files that are stored on your computer.
This website uses the following types of cookies, the scope and functionality of which are explained below:
Transient cookies are automatically deleted when you close your browser. These include, in particular, session cookies. These store a so-called session ID, which allows various requests from your browser to be associated with the same session. This enables your computer to be recognised when you return to our website. Session cookies are deleted when you log out or close your browser.
Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete these cookies at any time via your browser’s security settings.
You can configure your browser settings as you wish and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the features of this website.
You can find more details about YouTube and Google Analytics cookies below.
At present, you can enter your details on our website, send us an email, or contact us by phone or in person.
If you contact us, for example simply to request information, we will process your data for this purpose. If you contact us, for example to enter into a contract, we will process your data for this purpose.
To process your order, including customer support
When you provide your order details on our website or via email, or contact us by telephone or in person, the information you provide – including your personal data – will be processed by us and the recipients listed below for the purpose of order processing within the framework of our business relationship with you, in order to process and manage your order and to provide you with customer support.
Dealer and Architect Account
You can voluntarily create a dealer or architect account on our website, which allows us to store your details for future logins. When you create such an account, the details you provide will be stored on a revocable basis.
If you contact us, for example, simply to request information from us, we may process your data on the basis of your consent in accordance with Article 6(1)(a) of the GDPR or Article 6(1)(f) of the GDPR. If you contact us, for example to enter into a contract, we may process your data on the basis of Article 6(1)(b) of the GDPR and, where applicable, store it on the basis of Article 6(1)(c) of the GDPR.
To process your order
The processing of your data, including the personal data you have provided and any special categories of personal data provided unsolicited and voluntarily, is carried out by us and the recipients listed below on the legal basis of Article 6(1)(b) and Article 9(2)(a) GDPR, in order to identify you as a customer, to process the order in question appropriately, and [Text Wrapping Break] to correspond with you. The data processing is carried out at your request and is necessary for the aforementioned purposes to ensure the proper processing of your order.
Dealer and Architect Account
The legal basis is Article 6(1)(a) of the GDPR.
Marketing (in general)
Legitimate interest under Article 6(1)(f) of the GDPR. The legitimate interest is our interest in establishing and strengthening business relationships with existing and potential customers.
In general, we expressly ask you not to disclose any data that is likely to be of little or no relevance to your intended purpose; this applies in particular to special categories of personal data (“sensitive” data). The provision of information on your part is entirely voluntary.
Information
If you contact us simply to request information, we will process the data you provide.
Order
Depending on the information you voluntarily provide to us, the data we process may include the following:
- Your contact details (name, address, telephone number, email address, etc.)
- Scope of the contract
- special categories of personal data that you have provided to us unsolicited and voluntarily
Dealer and Architect Account
Information required for the processing of contracts is marked separately; any further details are optional.
Your data may be disclosed, in whole or in part, but only to the extent necessary, to the following data controllers:
- Banks (Payment transactions – Austria)
- Tax adviser (Accounting – Austria)
- Debt collection agencies (debt recovery – Austria)
- Legal representative (Law enforcement – Austria)
- Courts (enforcement of the law – Austria)
- Administrative authorities (Austria)
In addition, your data may be disclosed to the following recipients acting as data processors; we have entered into a data processing agreement with each of them and verified that they have implemented appropriate technical and organisational measures (TOMs):
Alfahosting GmbH (web hosting, webmail – Germany)
Your data will be stored in a form that allows you to be identified only for as long as is necessary for the purpose for which it is being processed.
Information
By providing your details on our website or via email, or by contacting us by telephone or in person, you expressly consent to your data – including the personal data you have provided and any special categories of personal data provided unsolicited and voluntarily – being processed by us and the recipients listed above for the duration of the processing of the relevant enquiry.
If you contact us simply to request information, your data will therefore be deleted either immediately or after a reasonable period of time appropriate to the content of the communication, depending on the nature of the communication.
If you withdraw your consent, we will delete all your data – including aggregated data – from all our databases.
Order
We are required by commercial and tax law to retain your address, payment and order details for a period of 7 years. If you contact us to enter into a contract, the data will be deleted at the end of the seventh year following the posting of the last document (Section 132 of the Austrian Federal Tax Code). If a contract is concluded, all data relating to the contractual relationship will therefore be stored until the expiry of this period.
Statutory or legal retention obligations, or contractual obligations – for example, towards customers in relation to warranties or compensation, or towards contractual partners – provide a further basis for continuing to store your data. (Art. 6(1)(c) GDPR; Art. 17(3)(e) GDPR).
Dealer and Architect Account
Once the contract for the use of the platform’s services has been fully settled or your profile has been deleted, the data will be deleted or its processing restricted to the extent necessary to comply with retention obligations under tax and commercial law. The data will be deleted at the latest upon expiry of the relevant statutory retention periods, unless you have expressly consented to the continued use of the data.
Marketing (in general)
Marketing data is retained for up to three years after the last contact.
Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies that are stored on your computer and enable an analysis of how the website is used.
The purpose is to count and measure visits to our website and the content published there. On our behalf, Google uses the information collected to analyse your use of our website, to compile reports on website activity, and to provide us with other services relating to website and internet usage.
The legal basis for our use of Google Analytics is our legitimate interest, pursuant to Article 6(1)(f) of the GDPR, in improving our range of information and services and our website, as well as in measuring reach and tracking traffic for the purpose of advertising. You have the right to object to this at any time.
Here you will find detailed information about the names, purposes and retention periods of the Google Analytics cookies used: www.let.at/cookies.pdf
On this website, Google Analytics has also been enhanced with the “anonymize_IP” code to ensure that IP addresses are collected anonymously (known as IP masking). Your IP address is therefore truncated by Google to remove the last three digits and is recorded in a pseudonymised form. Only in exceptional cases is the full IP address transmitted to a Google server in the USA, where it is truncated and pseudonymised.
As the IP address is truncated and pseudonymised, it is only possible to determine the approximate location from which our website was accessed. The truncated IP address transmitted by your browser as part of Google Analytics is not combined with any other data held by Google.
The information generated by the cookie regarding your use of this website (truncated, pseudonymised IP address, website title, browser-specific information, information about website usage) is usually transmitted to a Google server in the USA and stored there. The relationship with Google and the transfer of information to Google is based on an adequacy decision by the European Commission: the EU-US Privacy Shield Agreement (‘Privacy Shield’).
You can also prevent cookies from being stored by adjusting the settings in your browser; however, please note that in this case you may not be able to make full use of all the features of this website.
You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.
On our website, we use the LuckyOrange service provided by Lucky Orange LLC, 8680 W 96th St Suite #100, Overland Park, KS 66212, USA, (www.luckyorange.com).
LuckyOrange collects and stores our users’ data for the purposes of web analytics, optimising user-friendliness and improving customer satisfaction. To this end, mouse clicks, mouse movements, scroll movements and keyboard inputs—such as those made in contact forms on this site—may be stored. The IP address is truncated to prevent it from being linked to specific individuals. Pseudonymised user profiles may be created from this anonymised data. Cookies may also be used for this purpose.
The data collected via LuckyOrange is not used to personally identify visitors to this website or to link it to personal data relating to the person behind the pseudonym.
The processing of your data using LuckyOrange is based on your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect in accordance with Article 7(3) of the GDPR.
LuckyOrange is certified under the US-EU Privacy Shield framework, which ensures compliance with the data protection standards applicable in the EU. See: https://www.privacyshield.gov/participant?id=a2zt0000000TSvDAAW&status;=Active
The transfer of data to LuckyOrange is therefore lawful under Article 45 of the GDPR.
For further information and alternative ways to object to Lucky Orange collecting your data in future, please visit: https://www.luckyorange.com/privacy.php
We have embedded YouTube videos into our website, which are hosted on https://www.YouTube.com and can be played directly from our website.
The legal basis for the use of YouTube is our legitimate interest, pursuant to Article 6(1)(f) of the GDPR, in optimising and expanding our online offering for the commercial operation of our website and in creating an attractive offering for users by embedding our content and services. In this regard, you have the right to object at any time.
In addition, our YouTube videos on this website are embedded in ‘enhanced privacy mode’, which means that no data about you as a user is transmitted to YouTube unless you play the videos. Data is only transmitted once you play the videos. We have no control over this data transmission.
If you are signed in to Google, your data will be linked directly to your account.
If you do not want your profile to be linked to YouTube, you must log out before playing the video.
You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube.
Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Embedding YouTube normally also activates DoubleClick by Google. However, we have added the suffix “nocookie” to the video links so that DoubleClick is no longer activated, in accordance with the GDPR. General information about DoubleClick by Google is available at https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090, and general information about data protection at Google is available at https://www.google.de/intl/de/policies/privacy.
This website uses web fonts to ensure consistent font display. We have stored these fonts locally on our server to ensure compliance with the GDPR and have integrated them into our website in such a way that no data is exchanged with Google.
We have a Facebook page at https://www.facebook.com/LETSonnensegel/
You can find the relevant provisions supplementing this privacy policy here:
https://www.facebook.com/policy.php
https://www.facebook.com/policies/cookies
https://www.facebook.com/business/news/updates-for-page-admins-in-the-eu-and-the-eea
https://www.facebook.com/legal/terms/page_controller_addendum#
We use a YouTube channel at
https://www.youtube.com/channel/UCRbBEiZ8_PCQCzf42fdKXIQ
You can find the relevant provisions supplementing this privacy policy here:
If you wish to communicate with us via WhatsApp, you are thereby voluntarily consenting to the processing of your data by Facebook Inc. The relevant provisions, which supplement this privacy policy, can be found here:
https://www.whatsapp.com/legal?eea=1#terms-of-service
https://www.whatsapp.com/legal#privacy-policy