Privacy Policy
The protection of your personal data is particularly important to us. So that you can feel entirely comfortable and secure with us, we inform you transparently and clearly about how we handle your data. Here you will learn what information we collect, why we do so and how we manage it securely. In keeping with our motto: trust through openness and responsibility. We hope you enjoy discovering what we offer!
The purpose of processing your personal data (hereinafter referred to as “data”) is the provision of information on the development, production and sale of technical solutions, in particular shading systems, and the presentation and offering of goods and services relating to this topic. In this privacy policy we inform you, among other things, about
- the name and contact details of the controller
- all purposes for which your data are processed
- the legal bases on which the processing activities are founded, including any legitimate interest of ours
- all recipients of your data
- any transfer of your data to a third country and the presentation of the legal basis for this
- the storage period of your data or the criteria for determining that period
- the categories of your data that are processed
- the origin of your data
- the rights of data subjects
LET Sonnensegel GmbH, Strass 6, A-4850 Timelkam, Tel.: 0043 7672 31 778, Email: sonnensegel@let.at
No data protection officer has been appointed, as this is not required by law.
You have the following rights vis-à-vis us regarding the personal data concerning you:
- Right of access
- Right to rectification or erasure
- Right to restriction of processing
- Right to object to the processing
- Right to data portability
- Right to withdraw your consent
You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us.
For this, as well as for any further questions on the subject of personal data, you may contact us at any time.
Right of Access
You have the right to obtain from us at any time, free of charge, information about the personal data stored concerning you and a copy of this information, in particular about
- the purposes of processing
- the categories of personal data that are processed
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
- where possible, the envisaged period for which the personal data will be stored, or, if this is not possible, the criteria used to determine that period
- the existence of a right to rectification or erasure of the personal data concerning you, or to restriction of processing by us, or of a right to object to such processing
- the existence of a right to lodge a complaint with a supervisory authority
- where the personal data are not collected from the data subject: all available information about the origin of the data
- the existence of automated decision-making, including profiling pursuant to Article 22(1) and (4) GDPR and — at least in these cases — meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You also have a right to be informed as to whether personal data have been transferred to a third country or to an international organisation. Where this is the case, you furthermore have the right to be informed about the appropriate safeguards relating to the transfer.
Right to Rectification
You have the right to request the rectification, without undue delay, of inaccurate personal data concerning you.
You also have the right, taking into account the purposes of the processing, to have incomplete personal data completed — including by means of a supplementary statement.
Right to Erasureschung
You have the right to obtain from us the erasure of personal data concerning you without undue delay, where one of the following grounds applies and to the extent that the processing is not necessary:
- The personal data were collected or otherwise processed for purposes for which they are no longer necessary.
- You withdraw the consent on which the processing was based pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
- You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
- The personal data have been unlawfully processed.
- The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
- The personal data were collected in relation to the offer of information society services pursuant to Art. 8(1) GDPR.
Right to Be Forgotten
Where we have made the personal data public and our company, as controller, is obliged pursuant to Art. 17(1) GDPR to erase the personal data, we shall, taking account of available technology and the cost of implementation, take reasonable steps, including of a technical nature, to inform other controllers processing the published personal data that you have requested the erasure by such controllers of any links to, or copies or replications of, those personal data, to the extent that the processing is not necessary.
Right to Restriction of Processing
You have the right to obtain from us restriction of processing where one of the following conditions applies:
- The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
- The processing is unlawful, you oppose the erasure of the personal data and request instead the restriction of their use.
- We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims.
- You have objected to the processing pursuant to Art. 21(1) GDPR, pending the verification of whether our legitimate grounds override yours.
Right to Data Portabilitybertragbarkeit
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format.
You also have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
Furthermore, in exercising your right to data portability, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
Right to Object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR. This also applies to profiling based on those provisions.
In the event of an objection, we shall no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where we process personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. This also applies to profiling to the extent that it is related to such direct marketing.
If you object to us regarding processing for direct marketing purposes, we shall no longer process your personal data for these purposes.
You also have the right, on grounds relating to your particular situation, to object to the processing of personal data carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Art. 89(1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
Automated Individual Decision-Making, including Profiling
You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you, unless the decision (1) is not necessary for entering into, or performance of, a contract between you and us, or (2) is authorised by Union or Member State law to which we are subject and which lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or (3) is based on your explicit consent.
Right to Withdraw Consent under Data Protection Law
You have the right to withdraw consent to the processing of personal data at any time. The withdrawal does not, however, affect the lawfulness of the data processing carried out up to the point of withdrawal.
Our website and our services are not intended for use by minors, and we do not wish to collect any data from minors. If a parent or guardian of a minor believes that their child may have provided personal data to us, please write to us using the contact options set out below, and we will then delete that personal data, subject to applicable law and this policy.
We use appropriate technical and organisational measures and security precautions (TOMs) designed to prevent unauthorised access to, unlawful processing of, and the unauthorised or accidental loss of your data.
This includes, for example, the encryption of your communication with us via this website based on the Secure Socket Layer (SSL) encryption protocol.
You can check the quality of our encryption here: https://www.ssllabs.com/ssltest
It is important to us to point out that data transmission over the internet may have security gaps, as complete protection against access by unauthorised third parties is not possible.
The server on which this website is hosted is located in Germany and is operated by Alfahosting GmbH, Ankerstraße 3b, D-06108 Halle (Saale), with which we have concluded a data processing agreement.
For further details, please refer to https://alfahosting.de/datenschutz/
With each access by you, our website records, through an automated system, a series of general data and information. These general data and information are stored in the log files of our server by Alfahosting GmbH in Germany.
The following may be recordeennen
- the browser types and versions used
- the operating system used by the accessing system
- the website from which an accessing system reaches our website (so-called referrer)
- the sub-pages accessed via an accessing system on our website
- the date and time of access to the website
- an internet protocol address (IP address)
- the internet service provider of the accessing system
- other similar data and information serving to avert danger in the event of attacks on our information technology systems.
In using these general data and information, we draw no conclusions about you.
This information is requireed in order to
- deliver the contents of our website correctly
- optimise the contents of our website and the advertising for it
- ensure the lasting functionality of our information technology systems and the technology of our website
- provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.
We evaluate these anonymously collected data and information partly statistically and, furthermore, with the aim of increasing data protection and data security within our company, ultimately to ensure an optimal level of protection for you. In any event, we are permitted to process these data on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.
The logs are stored separately from all personal data provided by you and are also deleted after a maximum of 2 months.
When this website is accessed and used, cookies (YouTube, Google Analytics, session) are processed.
Cookies are small text files that are stored on your local computer.
This website uses the following types of cookies, the scope and functioning of which are explained below:
Transient cookies are deleted automatically when you close the browser. These include, in particular, the session cookies. They store a so-called session ID, by which various requests from your browser can be assigned to the common session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent cookies are deleted automatically after a specified period, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third-party cookies or all cookies. We point out that you may not be able to use all functions of this website.
Further details on YouTube and Google Analytics cookies can be found below.
At present, you can enter data on our website, send us an email, or contact us by telephone or in person.
If you contact us, for example, merely to obtain information from us, we process your data for this purpose. If you contact us, for example, to conclude a contract, we process your data for this purpose.
For the processing of your order, includingg customer support
If you provide your order data on our website or via email, or contact us by telephone or in person, the data provided by you, including your personal data, are processed by us and the recipients named below for the purpose of order processing within the scope of our business relationship with you, for the (pre-)contractual processing, in order to process and administer your order, and to support you as a customer.
Dealer and Architect Accoungt
On our website you can voluntarily create a dealer or architect account, through which we can store your data for a later additional login. When such an account is created, the data provided by you are stored on a revocable basis.
If you contact us, for example, merely to obtain information from us, we are permitted to process your data on the basis of your consent pursuant to Art. 6(1)(a) GDPR or Art. 6(1)(f) GDPR. If you contact us, for example, to conclude a contract, we are permitted to process your data on the basis of Art. 6(1)(b) GDPR and, where applicable, to store them on the basis of Art. 6(1)(c) GDPR.
For the processing of your order
The processing of your data, including the personal data provided by you and, where applicable, special categories of personal data provided unsolicited and voluntarily, is carried out by us and the recipients listed below on the legal basis of Art. 6(1), first sentence, (b) and Art. 9(2)(a) GDPR, in order to be able to identify you as a customer, to be able to process the order in question appropriately, and[Text Wrapping Break]for correspondence with you. The data processing is carried out at your request and is necessary for the stated purposes in order to process your order appropriately.
Dealer and Architect Accoungt
The legal basis is Art. 6(1), first sentence, (a) GDPR.
Marketing (general)
Legitimate interest pursuant to Art. 6(1), first sentence, (f) GDPR. The legitimate interest is our interest in initiating business and intensifying the business relationship with existing and potential customers.
In general, we expressly ask you not to disclose to us any data that are likely to be of little or no relevance to the purpose you intend; this applies in particular to special categories of personal (“sensitive”) data. The provision of information by you is on a purely voluntary basis.
Information
If you contact us merely to obtain information from us, we process the data provided by you.
Order
Depending on what you voluntarily make available to us, the data processed by us may include the following:
- your contact details (name, address, telephone number, email address, etc.)
- content of the order
- special categories of personal data provided to us by you unsolicited and voluntarily
Dealer and Architect Accoungt
Mandatory details necessary for the processing of contracts are marked separately; further details are voluntary.
Your data may be disclosed in whole or in part, but always only to the extent and where necessary, to the following controllers:
- Banks (payment transactions – Austria)
- Tax advisors (accounting – Austria)
- Debt collection agencies (debt recovery – Austria)
- Legal representatives (enforcement of rights – Austria)
- Courts (enforcement of rights – Austria)
- Administrative authorities (Austria)
In addition, your data may be disclosed to the following recipients as processors ; with all of them we have concluded a data processing agreement and verified the appropriate technical and organisational measures (TOMs):
Alfahosting GmbH (web hosting, webmail – Germany)
Your data are stored in a form which permits your identification only for as long as is necessary for the purpose for which they are processed.
Information
By providing us with your data on our website or via email, or contacting us by telephone or in person, you expressly consent to your data, including the personal data provided by you and, where applicable, special categories of personal data provided unsolicited and voluntarily, being processed by us and the recipients listed above for the duration of the handling of the request in question.
If you contact us merely to obtain information from us, your data will therefore, depending on the content of the communication, either be deleted without undue delay or deleted after the expiry of an appropriate period corresponding to the content.
Upon withdrawal of your declaration of consent, we will delete (or have deleted) all of your – including aggregated – data from all databases.
Order
Under commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of 7 years. If you contact us to conclude a contract, the data will be deleted at the end of the 7th year following the posting of the last document (Section 132 BAO). In the event of the conclusion of a contract, all data from the contractual relationship will therefore be stored until the expiry of this period.
Statutory/legal retention obligations or contractual obligations, e.g. towards customers arising from warranty or damages or towards contractual partners, are a further basis for continuing to store your data. (Art. 6(1), first sentence, (c) GDPR; Art. 17(3)(e) GDPR).
Dealer and Architect Accoungt
After complete performance of the contract regarding the use of the platform’s services, or deletion of your profile, the data are deleted or the processing is restricted to the extent required for tax-law and commercial-law retention obligations. At the latest after the expiry of the relevant statutory retention periods, the data are deleted, unless you have expressly consented to further use of the data.
Marketing (general)
Marketing data are retained for up to 3 years after the last contact.
Our website uses Google Analytics, a web analytics service provided by Google Inc. („Google“). Google Analytics uses cookies, which are stored on your computer and which enable an analysis of the use of the website.
The purpose is the counting and measurement of accesses to our website and the contents published there. On our behalf, Google uses the collected information to evaluate your use of our website, to compile reports about website activity and to provide us with further services connected with website use and internet use.
As the legal basis for the use of Google Analytics, we rely on our legitimate interest pursuant to Art. 6(1), first sentence, (f) GDPR in improving our information and service offering and our web presence, reach measurement and access counting for the marketing of advertisements. In this respect, you have a right to object at any time.
Here you will find precise information about the names, purpose and deletion periods of the Google Analytics cookies used: www.let.at/cookies.pdf
On this website, Google Analytics has additionally been extended with the code „anonymize_IP“ in order to ensure an anonymised collection of IP addresses (so-called IP masking). Your IP address is therefore truncated by Google by the last three digits and recorded in pseudonymised form. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated and pseudonymised there.
Due to the truncated collection of the IP address and its pseudonymisation, only a rough localisation of where our website was accessed from is possible. The truncated IP address transmitted by your browser within the scope of Google Analytics is not merged with other data held by Google.
The information generated by the cookie about your use of this website (truncated pseudonymised IP address, website title, browser-specific information, information about website use) is as a rule transferred to a Google server in the USA and stored there. The relationship with Google and the transfer of the information to Google is based on an adequacy decision of the European Commission: EU-US Privacy Shield agreement („Privacy Shield“).
You can also prevent the storage of cookies by a corresponding setting of your browser software; we point out, however, that in this case you may not be able to use all functions of this website to their full extent.
You can furthermore prevent the collection by Google of the data generated by the cookie and relating to your use of the website (including your IP address) as well as the processing of these data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, data protection overview: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy: http://www.google.de/intl/de/policies/privacy.
On our website we use the LuckyOrange service provided by Lucky Orange LLC, 8680 W 96th St Suite #100, Overland Park, KS 66212, USA, (www.luckyorange.com).
Through LuckyOrange, data of our users are collected and stored for the purpose of web analytics and the optimisation of user-friendliness as well as the improvement of customer satisfaction. For this purpose, mouse clicks, mouse movements and scrolling movements, and keyboard entries in, for example, contact forms on this page may be stored. The IP address is truncated in the process so that an attribution to natural persons can be excluded. From these anonymised data, pseudonymised usage profiles may be created. Cookies may also be used for this purpose.
The data collected with LuckyOrange are not used to personally identify the visitor of this website nor merged with personal data about the bearer of the pseudonym.
The processing of your data with the help of LuckyOrange is based on your explicit consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future pursuant to Art. 7(3) GDPR.
LuckyOrange is certified under the US-European data protection agreement „Privacy Shield“, which guarantees compliance with the level of data protection applicable in the EU. See for this: https://www.privacyshield.gov/participant?id=a2zt0000000TSvDAAW&status=Active
A transfer of data to LuckyOrange is therefore lawful pursuant to Art. 45 GDPR.
Further information and alternative ways in which you can object to data collection by Lucky Orange for the future can be found at: https://www.luckyorange.com/privacy.php
We have embedded YouTube videos in our online offering, which are stored on https://www.YouTube.com and can be played directly from our website.
As the legal basis for the use of YouTube, we rely on our legitimate interest pursuant to Art. 6(1), first sentence, (f) GDPR in the optimisation and extension of the online offering for the economic operation of our website and the creation of an attractive offering for users by embedding our content and service offerings. In this respect, you have a right to object at any time.
Furthermore, our YouTube videos on this website are embedded in „enhanced privacy mode“, i.e. no data about you as a user are transferred to YouTube if you do not play the videos. Only when you play the videos are data transferred. We have no influence over this data transmission.
If you are logged in to Google, your data are assigned directly to your account.
If you do not wish your data to be associated with your YouTube profile, you must log out before playing the video.
You have a right to object to the creation of these user profiles, whereby you must address YouTube in order to exercise this right.
Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and the settings options for protecting your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The embedding of YouTube normally also activates DoubleClick by Google. We have, however, provided the video links with the addition „nocookie“, so that DoubleClick is, in compliance with the GDPR, no longer activated. General information on DoubleClick by Google can be found at https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090, as well as on data protection at Google in general: https://www.google.de/intl/de/policies/privacy.
This website uses so-called web fonts for the uniform display of typefaces. For GDPR compliance, we have stored these fonts locally on our server and embedded them in our website in such a way that no data are exchanged with Google.
We operate a Facebook page at https://www.facebook.com/LETSonnensegel/
The relevant provisions supplementing this privacy policy can be found here:
https://www.facebook.com/policy.php
https://www.facebook.com/policies/cookies
https://www.facebook.com/business/news/updates-for-page-admins-in-the-eu-and-the-eea
https://www.facebook.com/legal/terms/page_controller_addendum#
We operate a YouTube channel at
https://www.youtube.com/channel/UCRbBEiZ8_PCQCzf42fdKXIQ
The relevant provisions supplementing this privacy policy can be found here:
If you wish to communicate with us via WhatsApp, you thereby voluntarily consent to the data processing by Facebook Inc. The relevant provisions supplementing this privacy policy can be found here:
https://www.whatsapp.com/legal?eea=1#terms-of-service
https://www.whatsapp.com/legal#privacy-policy