Privacy Statement

Status: August 2022

We attach great importance to the protection and security of your data, regardless of whether you are a customer or visitor to our online presence. We therefore undertake to protect your privacy and to treat your data confidentially. At this point, we would like to inform you which of your personal data is collected in relation to your visit to this website and for which purposes it is used.

I. Data controller

This website is operated by Zumtobel Group AG, Höchsterstrasse 8, 6850 Dornbirn, Austria, FN 62309 g, which is also the data controller within the meaning of the EU General Data Protection Regulation (hereinafter referred to as "GDPR").

No data protection officer has been appointed by the data controller since the legal requirements for mandatory appointment are not met.

However, inquiries regarding data protection and the use of your personal data can be sent to the following e-mail address and will be handled by us in accordance with the legal requirements: [email protected].

II. Data used / processing purposes / retention period

The categories of data we use and the purposes pursued through the use of this data are described below. As far as possible, you will also find information on the storage period of the respective data.

Each time this website is accessed, access data is stored in a log file, the server log. The data record stored in this log file contains the following information: Date and time of access, IP address, session ID, accessed website, name of the website from which the website was accessed and information about the browser used.

We evaluate these log files only in the event of misuse of our website. We reserve the right to subsequently check the log files of those users about whom there is a concrete suspicion of using our website in violation of the law and/or the contract. In general, we cannot attribute these data to a specific person. Should such an attribution be possible, we will only use these data in cases where there is a corresponding legal basis (weighing of interests in individual cases).

If you register on our website or for our web shop, we will record the master data you provide (in particular, your name, salutation, telephone and fax number, e-mail address, language of correspondence, industry, department, web shop access data) and use it on the basis of the relevant user agreement. In addition, you will be assigned an internal customer number and one or more contact persons in our company. These data are used by us in order to provide the web shop and to support you, as a customer or interested party of our company. As a rule, such data will be stored for six months after use of the web shop (erasure of the customer account) ends.

If you place an order in the web shop, we will collect any additional delivery addresses for this purpose and other data provided by you that are necessary for the processing of the order. We store such data for up to six months after the end of the customer relationship.

If personal master data or order data are also used in our accounting system, such data will be stored until the end of the prescribed periods (generally 7 years in Austria) on the basis of the statutory retention obligations applicable to us.

If you have given us your consent during registration or at a later time, we will use the data resulting from your use of the web shop or the website, such as the web pages you have accessed, the time spent on individual web pages and the products you have viewed as well as your previous demand interests, in order to optimise customer service and to be able to provide you with customised information. These data will be stored until you revoke your consent for the use of your data.

If you have agreed to receive a newsletter, we will use your name and e-mail address, your gender, address, company and industry sector, as well as language, for the delivery and personalisation of such a newsletter. These data are used for the duration of the subscription to the respective newsletter.

If you are one of our customers, we use your master data on the basis of our legitimate interest in direct marketing purposes and may invite you to events in your area.

If you have given your consent to the processing of your personal data, this consent can be revoked by you at any time. You can declare a revocation in writing or by e-mail to [email protected].

III. General principles for processing personal data

1. We comply with the statutory data protection regulations without restriction.

The data protection regulations of the European Union and the national laws derived from them apply to the storage, processing and use of personal data. The legal basis for the processing of the respective personal data can be seen from the above list.

In some cases, personal data may be provided to processors, if they offer sufficient guarantee for a lawful and secure use of data and if they contractually undertake to comply with the principles described in this privacy policy and the statutory regulations.

We reserve the right to transfer personal data to other companies in the context of restructuring or company mergers if they also undertake to adhere to the principles of action described here and are either based in the European Union or in a third country with adequate data protection.

If you actively choose to use the social networking functions offered on our website, personal data may be transferred to the respective external providers of these social networks. You will find detailed information on this in Section V. below.

We also reserve the right to pass on personal data to third parties if we are forced to do so by law, by a judicial decision by the court of competent jurisdiction or by an order of the competent authority, or if we are forced, as a result of actions or omissions on your part, to have our rights, our property or our assets protected or enforced by the competent authorities.

2. In the procurement of data, we restrict ourselves to what is necessary and reasonable.

If we collect personal data, we will explain to you in each case for what purposes we use the data.

In individual cases, we only collect personal data to the extent necessary to achieve these purposes. If further use of personal data is no longer necessary, the data will be deleted.

IV. Recipients and recipient categories of data

In connection with the operation of this website or the web shop, the following processors are acting on behalf of the data controller:

Hosting provider website: Zumtobel Group AG
Provider web shop: Zumtobel Group AG

In addition, we refer to the explanations in Section IX., which describes in detail the use of your data by social networks.

In addition to the recipients specifically mentioned, other processors may also be consulted in the future in connection with the provision of this website and the web shop (e.g. hosting providers, shop operators).

A transfer of data to group companies is carried out based on any consent granted to the recipients named in the consent.

V. Links to external websites

Our website contains so-called hyperlinks to websites from other providers. In these cases, you will be directly forwarded from our website to the websites of the other providers. You can recognise this by the change of the URL in the address bar of your browser, among other things.

We cannot assume any responsibility for the confidential handling of your data by such providers, as we have no influence on whether the other providers comply with the data protection regulations. Please refer to the websites of these providers directly for information on how they handle your personal data.

VI. Security measures to protect your data

To protect your data, we have taken special technical and operational security measures which are regularly reviewed and adapted to technological progress.

However, we would like to point out that due to the structure of the Internet, it is possible that the rules of data protection and data security may not be observed by other persons or institutions that are not within our area of responsibility.

VII. Your rights in relation to the data used

If and insofar as we use personal data concerning you, you are entitled to the following rights in particular with regard to such data:

• Right of access to information (Art 15 GDPR): You may at any time request information as to whether and which personal data concerning you are being used by us, for what purposes the data are being processed, where the data originate, to which recipients the data may be transmitted and how long such data are stored by us.

• Right of rectification (Art. 16 GDPR): If you discover that personal data concerning you are inaccurate, you may request the rectification of such data at any time. If data are incomplete from your point of view, you can also request that data be supplemented.

• Right of erasure (Art. 17 GDPR): If you believe that the use of your personal data is no longer necessary or that it is carried out without a sufficient legal basis or is unlawful for other reasons, you can request the erasure of these data.

• Right to restriction of the use of data (Art. 18 GDPR): Instead of erasure of data, you can also demand restriction of the use of data, if data are used unlawfully. In particular, you can also demand such a restriction of the use of data if you dispute the accuracy of data or have lodged an objection to the use of data

• Right to data portability (Art. 20 GDPR): With regard to personal data that you have provided yourself and that are used on the basis of a contract or consent, you can demand that these data be made available to you in a structured, common and machine-readable format. You may also request that this data be transferred directly to another data controller.

• Right to file a complaint with a supervisory authority (Art. 77 GDPR): If you believe that your rights have been violated in relation to personal data concerning you, you have the right to file a complaint with a supervisory authority. In particular, you may contact the supervisory authority responsible for your place of residence, your place of work or the place where the suspected violation occurred. In Austria, the responsible supervisory authority is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.

Separately, we would like to point out your right of objection (Art. 21 GDPR): If reasons arise from your particular situation which make the use of your personal data, which we use on the basis of a legitimate interest, impermissible, you have the right to object to such use of data. If your personal data is used for direct marketing purposes, you have the right to object in any case.

If you have any questions or are unclear about your rights regarding your personal data, you can contact us at any time at the following e-mail address: [email protected].

VIII. Changes to the data protection policy

Since changes in the law or changes in our internal company processes may make it necessary to adapt this data protection policy, which we reserve the right to do accordingly, we ask you to read this data protection policy regularly.

IX. Cookies

We use cookies on our website to enable the use of certain functions of the website, to analyse how users use our website and to provide certain third-party services.

These are small text files that are stored on your computer. Most of the cookies we use are deleted from your hard drive at the end of the browser session (so-called session cookies). Other cookies remain on your computer and enable us to recognise your computer during your next visit (so-called persistent cookies). In addition, cookies from third parties are also used on our website.

You can prevent the storage of cookies by adjusting your browser settings accordingly. However, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent.

If you do not wish our cookies to be stored on your computer, please deactivate the storage of cookies in your browser for our website or set your browser so that cookies are generally not stored on your computer. You can also use your browser to delete cookies that have already been stored.

We have no influence on the further processing of the personal data collected by the respective operators. Furthermore, it is not possible for us to determine the extent to which, where and for how long the data is stored by the social networks, the extent to which the social networks comply with existing deletion obligations, which evaluations and links to the data are carried out by them and to whom the data is passed on by the social networks.

Deactivating the use of cookies may require a permanent cookie to be stored on your computer. If this cookie is subsequently deleted by you, you must perform the deactivation again.

Pardot

Beschreibung des Services

Hierbei handelt es sich um ein CRM-Softwaresystem, das Lösungen für Vertrieb, Kundenservice und Marketing bietet.

Verarbeitendes Unternehmen

Salesforce.com, Inc.

Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, United States of America

Zweck der Daten

Diese Liste stellt die Zwecke der Datenerhebung und -verarbeitung dar.

  • Werbung

  • Marketing

  • Optimierung

Genutzte Technologien

Diese Liste enthält alle Technologien, mit denen dieser Dienst Daten sammelt. Typische Technologien sind Cookies und Pixel, die im Browser platziert werden.

  • Cookies

  • Web beacons

  • Logdatei

Gesammelte Daten

Diese Liste enthält alle (persönlichen) Daten, die von oder durch die Nutzung dieses Dienstes gesammelt werden.

  • Browser-Typ

  • Gerätekennung

  • Gerätebestriebssystem

  • IP-Adresse

  • Log file Daten

  • Anzahl der Seitenaufrufe

  • Informationen zu Drittanbietern

  • Nutzungsdaten

Rechtliche Grundlage

Im Folgenden wird die erforderliche Rechtsgrundlage für die Verarbeitung von Daten genannt

  • Art. 6 Abs. 1 S. 1 lit. a DSGVO

Ort der Verarbeitung

Dies ist der primäre Ort, an dem die gesammelten Daten verarbeitet werden. Sollten die Daten auch in anderen Ländern verarbeitet werden, werden Sie gesondert informiert.

Europäische Union

Aufbewahrungsdauer

Die Aufbewahrungsdauer ist die Zeitspanne, in der die gesammelten Daten für die Verarbeitung gespeichert werden. Die Daten müssen gelöscht werden, sobald sie für die angegebenen Verarbeitungszwecke nicht mehr benötigt werden.

Daten werden gelöscht, sobald sie für die Verarbeitungszwecke nicht mehr benötigt werden.

Weitergabe an Drittländer

Dieser Service kann die erfassten Daten an ein anderes Land weiterleiten. Bitte beachten Sie, dass dieser Service Daten in ein Land, welches kein angemessenes Datenschutzniveau bietet, übertragen kann. Falls die Daten in die USA übertragen werden, besteht das Risiko, dass Ihre Daten von US Behörden zu Kontroll- und Überwachungszwecken verarbeitet werden können, ohne dass Ihnen möglicherweise Rechtsbehelfsmöglichkeiten zustehen. Nachfolgend finden Sie eine Liste der Länder, in die die Daten übertragen werden. Weitere Informationen zu den Sicherheitsgarantien finden Sie in den Datenschutzrichtlinien des Website-Anbieters oder wenden Sie sich direkt an den Website-Anbieter.

  • Vereingtes Königreich

  • Vereinigte Staaten von Amerika

Datenempfänger

Im Folgenden werden die Empfänger der erhobenen Daten aufgelistet.

  • Salesforce.com, Inc.

  • Third-party social media and advertising networks

  • Contracted service providers

Klicken Sie hier, um die Datenschutzbestimmungen des Datenverarbeiters zu lesen.

https://www.salesforce.com/company/privacy/full_privacy/

Speicherinformation

  • Höchstgrenze für die Speicherung von Cookies: 10 Jahre

Gespeicherte Informationen

  • Name: visitor_id; This is used to track the website visitor.; Typ: cookie; Dauer: 10 Jahre; Domain: pardot;

  • Name: pi_opt_in; This is used to check if the user has allowed tracking.; Typ: cookie; Dauer: 10 Jahre;

  • Name: lpv; This is set to keep the service from tracking multiple page views on a single asset over a 30-minute session. ; Typ: cookie; Dauer: 10 Jahre;

  • Name: pardot; Used in context with Account-Based-Marketing (ABM). The cookie registers data such as IP-addresses, time spent on the website and page requests for the visit. This is used for retargeting of multiple users rooting from the same IP-addresses. ABM usually facilitates B2B marketing purposes.; Typ: cookie; Dauer: Session;

  • Name: campaign_id#; Used in context with Account-Based-Marketing (ABM). The cookie registers data such as IP-addresses, time spent on the website and page requests for the visit. This is used for retargeting of multiple users rooting from the same IP-addresses. ABM usually facilitates B2B marketing purposes.; Typ: cookie; Dauer: Session;

  • Name: account_id#; Wird im Zusammenhang mit Account-Based-Marketing (ABM) verwendet. Das Cookie registriert Daten wie IP-Adressen, auf der Website verbrachte Zeit und Seitenaufrufe für den Besuch. Dies wird für das Retargeting mehrerer Benutzer verwendet, die von denselben IP-Adressen stammen. ABM erleichtert normalerweise B2B-Marketingzwecke.; Typ: cookie; Dauer: Session;

YouTube Video

Beschreibung des Services

Dies ist ein Video-Player-Dienst. Es kann vom Benutzer verwendet werden, um Videos anzusehen, zu teilen, zu kommentieren und hochzuladen.

Verarbeitendes Unternehmen

Google Ireland Limited

Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Datenschutzbeauftragter des verarbeitenden Unternehmens

Nachfolgend finden Sie die E-Mail-Adresse des Datenschutzbeauftragten des verarbeitenden Unternehmens.

https://support.google.com/policies/contact/general_privacy_form

Zweck der Daten

Diese Liste stellt die Zwecke der Datenerhebung und -verarbeitung dar.

  • Videos anzeigen

Genutzte Technologien

Diese Liste enthält alle Technologien, mit denen dieser Dienst Daten sammelt. Typische Technologien sind Cookies und Pixel, die im Browser platziert werden.

  • Cookies (wenn der "Privacy-Enhanced" Modus nicht aktiviert ist)

Gesammelte Daten

Diese Liste enthält alle (persönlichen) Daten, die von oder durch die Nutzung dieses Dienstes gesammelt werden.

  • Geräteinformationen

  • IP-Adresse

  • Referrer URL

  • Angesehene Videos

Rechtliche Grundlage

Im Folgenden wird die erforderliche Rechtsgrundlage für die Verarbeitung von Daten genannt

  • Art. 6 Abs. 1 S. 1 lit. a DSGVO

Ort der Verarbeitung

Dies ist der primäre Ort, an dem die gesammelten Daten verarbeitet werden. Sollten die Daten auch in anderen Ländern verarbeitet werden, werden Sie gesondert informiert.

Europäische Union

Aufbewahrungsdauer

Die Aufbewahrungsdauer ist die Zeitspanne, in der die gesammelten Daten für die Verarbeitung gespeichert werden. Die Daten müssen gelöscht werden, sobald sie für die angegebenen Verarbeitungszwecke nicht mehr benötigt werden.

Daten werden gelöscht, sobald sie für die Verarbeitungszwecke nicht mehr benötigt werden.

Weitergabe an Drittländer

Dieser Service kann die erfassten Daten an ein anderes Land weiterleiten. Bitte beachten Sie, dass dieser Service Daten in ein Land, welches kein angemessenes Datenschutzniveau bietet, übertragen kann. Falls die Daten in die USA übertragen werden, besteht das Risiko, dass Ihre Daten von US Behörden zu Kontroll- und Überwachungszwecken verarbeitet werden können, ohne dass Ihnen möglicherweise Rechtsbehelfsmöglichkeiten zustehen. Nachfolgend finden Sie eine Liste der Länder, in die die Daten übertragen werden. Weitere Informationen zu den Sicherheitsgarantien finden Sie in den Datenschutzrichtlinien des Website-Anbieters oder wenden Sie sich direkt an den Website-Anbieter.

  • Weltweit

Datenempfänger

Im Folgenden werden die Empfänger der erhobenen Daten aufgelistet.

  • Alphabet Inc.

  • Google LLC

  • Google Ireland Limited

Klicken Sie hier, um die Datenschutzbestimmungen des Datenverarbeiters zu lesen.

https://policies.google.com/privacy?hl=en

Klicken Sie hier, um die Cookie-Richtlinie des Datenverarbeiters zu lesen.

https://policies.google.com/technologies/cookies?hl=en

Klicken Sie hier, um auf allen Domains des verarbeitenden Unternehmens zu widerrufen.

https://safety.google/privacy/privacy-controls/

Speicherinformation

  • Höchstgrenze für die Speicherung von Cookies: 8 Monate

Gespeicherte Informationen

  • Name: __sak; This is used to store information about the visitor's video preferences.; Typ: web;

  • Name: LAST_RESULT_ENTRY_KEY; This is used to save the user settings when retrieving a Youtube video integrated on other web pages.; Typ: web;

  • Name: yt-player-bandaid-host, yt-player-bandwidth, yt-player-headers-readable; This is used to determine the optimal video quality based on the visitor's device and network settings.; Typ: web;

  • Name: yt-remote-cast-installed, yt-remote-connected-devices, yt-remote-device-id, yt-remote-fast-check-period, yt-remote-session-app, yt-remote-session-name; This is used to store the user's video player preferences using embedded YouTube video.; Typ: web;

  • Name: YEC; This is used to store the user's video player preferences using embedded YouTube video.; Typ: cookie; Dauer: 1 Jahr, 1 Monat;

  • Name: CONSENT; This is used to detect if the visitor has accepted the marketing category in the cookie banner. ; Typ: cookie; Dauer: 2 Jahre;

  • Name: DEVICE_INFO; This is used to track user’s interaction with embedded content.; Typ: cookie; Dauer: 5 Monate, 26 Tage;

  • Name: remote_sid; This is used for the implementation and functionality of YouTube video content on the website.; Typ: cookie; Dauer: Session;

  • Name: test_cookie; This is a test for cookie setting permissions in user's browser.; Typ: cookie; Dauer: 1 Tag;

  • Name: VISITOR_INFO1_LIVE; This is used to measure the users bandwidth to determine whether they get the new or old player interface.; Typ: cookie; Dauer: 6 Monate;

  • Name: YSC; This is set by the YouTube video service on pages with embedded YouTube videos.; Typ: cookie; Dauer: Session;

  • Name: PREF; This is used to store information such as your preferred page configuration and playback settings such as explicit autoplay options, random mix, and player size.; Typ: cookie; Dauer: 8 Monate;

  • Name: pm_sess; This is used to maintain your browsing session.; Typ: cookie; Dauer: 30 Minuten;

  • Name: CGIC; This is used to provide search results by auto-completing search queries based on a user's initial input.; Typ: cookie; Dauer: 6 Monate;

  • Name: UULE; Dies wird verwendet, um den geografischen Standort des Benutzers zu bestimmen.; Typ: cookie; Dauer: 6 Stunden;

Fathom Analytics

We want to process as little personal data as possible when you use our website. For this reason, we have chosen Fathom Analytics, which does not use cookies and is compliant with the GDPR, ePrivacy (including PECR), COPPA and CCPA. With this privacy-friendly website analytics software, your IP address is processed only briefly, and we (as the operator of this website) have no way to identify you. In accordance with the CCPA, your personal data is anonymized. For more information, please visit the Fathom Analytics website.

We use this software to understand traffic to our website in the most privacy-friendly way possible so that we can continually improve our website and business. The lawful basis under the GDPR is "Article 6(1)(f); our legitimate interest is to continuously improve our website and business." As stated in the declaration, no personal data is stored for a longer period of time.