This data protection declaration (hereinafter «Declaration») shows how we, Lenzlinger Söhne AG, Lenzlinger Austria GmbH, Lenzlinger Bodenbeläge AG and other affiliated group companies (hereinafter together referred to as «Lenzlinger» or «we»), collect, use, transmit and disclose personal data (summarised hereinafter under the term «process»). In addition, the Declaration describes how we ensure that the personal data which are processed remain secure and what rights data subjects have.
This data protection declaration is directed at everyone whose personal data we process. This data protection declaration applies in all our areas of our business regardless of the channel via which people contact us and their intention when doing so. It applies to business partners and customers (also customers of our online shop) as well as to visitors to our websites and other persons interested in our products and services. This data protection declaration applies to both the processing of personal data which has already been collected and that which will be collected in the future.
People who contact us are in agreement that we will process personal data in accordance with the Declaration. If you provide us with personal data from other people (e.g. family members, data from work colleagues), please ensure that these persons are aware of this data protection declaration and you are informing us of their personal data only because you are permitted to do so and if these personal data are correct.
This data protection declaration is based on the EU General Data Protection Regulation (GDPR) and the Swiss Data Protection Act (DSG).
1. Contact
The responsible office within the meaning of data protection legislation is:
Lenzlinger Söhne AG
Data Protection Officer
Grossrietstrasse 7
CH - 8606 Nänikon
Email: dataprotection@lenzlinger.ch
Website: www.lenzlinger.ch
EU representative:
Lenzlinger Austria GmbH
Doppelböden
Prinz-Eugen-Straße 70/2/2.2b
AT - 1040 ViennaAustria
2. Collection and processing of personal data
We primarily process personal data (e.g. name, gender, address, email address, telephone or fax number), which we receive as part of our business relationship with our customers and other business partners from the latter and other people involved in the latter (e.g. as part of registering the customer in the quotation/invoice system). This also applies if the person participates in events (online or in person) organised by Lenzlinger. We also process personal data which we receive from participants in competitions/advertising campaigns. In addition, we collect and process personal data in connection with the operation of our websites, apps, online shops and other applications.
Insofar as this is permitted, we also gather certain data from publicly accessible sources (e.g. register of the debt collection and bankruptcy office, land registers, commercial registers, press, internet) or receive such data from other companies within Lenzlinger, from authorities and other third parties. As well as the data from you, which you give us directly, the categories of personal data, which we receive from third parties via you, include in particular:
- Information from public registers,
- Information, which we discover in connection with official and court proceedings,
- Information in connection with your professional functions and activities,
- Information about you in correspondence and discussions with third parties,
- Creditworthiness details,
- Information about you, which people from your environment (family, advisers, legal representatives, etc.) give us so that we can conclude or process contracts with you.
- Information from banks, insurance companies, sales and other contracting partners to take up or provide services through you,
- Information from the media and internet about you,
- Data in connection with the use of the website (e.g. IP address, MAC address of the Smartphone or computer, information about your device and settings, cookies, date and time of the visit, pages and content which were downloaded, functions used, referring website, location details).
3. Purposes of data processing and legal basis
We process personal data in line with Swiss data protection legislation. As for the rest, we process – insofar as and to the extent that the EU GDPR is applicable – personal data in accordance with the following legal basis in connection with Art. 6 Para. 1 GDPR:
- lit. a) processing of personal data with the consent of the data subject.
- lit. b) processing of personal data to satisfy a contract with the data subject and to implement corresponding pre-contractual measures.
- lit. c) processing of personal data to satisfy a legal obligation, to which we may be subject in accordance with the EU law to be applied or the law to be applied in a country in which the GDPR is applicable in full or in part.
- lit. d) processing of personal data to protect the vital interests of the data subject or another natural person.
- lit. f) processing of personal data to maintain the justified interests of us or third parties, insofar as the basic freedoms and basic rights as well as interest of the data subject do not prevail. Justified interests are in particular our business interest in being able to make our website available, security of information, the implementation of our own legal claims and the maintenance of Swiss law.
We primarily use the personal data we have collected to conclude and process our contracts with our customers and business partners and to safeguard the purchase of products and services from our suppliers and subcontractors, as well as to satisfy our statutory obligations in Switzerland and abroad. If you are working for such a customer or business partner, you may naturally also be affected by data processing by us in this position with your personal data.
Furthermore, we process personal data from you and other people, insofar as this is permitted and it appears appropriate to us, also for the following purposes, in which we (and sometimes also third parties) have a corresponding justified interest in the purpose:
- Further development of our quotations, services and websites, apps, our online shops and additional platforms, on which we have a presence;
- Communication with third parties and processing of their inquiries (e.g. job applications, media inquiries);
- Review and optimisation of procedures for requirement analysis to contact customers directly and to collect personal data from publicly accessible sources for the purpose of customer acquisition;
- Advertising and marketing (including holding events), insofar as you have not withdrawn your consent to the use of your data (if you receive advertising from us as an existing customer, you can cancel this at any time);
- Determination of competition winners and delivery of the prizes.
- Market and opinion research, media observation;
- Assertion of legal claims and defence in connection with legal disputes and official procedures;
- Prevention and solving of crimes and other misconduct (e.g. undertaking internal investigations, data analyses to combat fraud);
- Safeguarding our business, in particular its IT, our websites, apps, our online shop and other platforms;
- Video surveillance to ensure compliance with in-house rules and other measures for IT, building and asset security and protection of our employees and other people and assets which belong or are entrusted to us (such as access checks, visitor lists, network and email scanners, telephone records);
- Purchase and sale of business areas, companies or parts of companies and other transactions under company law and the associated transmission of personal data as well as measures to control the business and insofar as required to comply with statutory and regulatory obligations as well as the internal provisions of Lenzlinger.
Insofar as you have given your consent to the processing of your personal data for certain purposes, (for example when you registered to receive our newsletters), we will process your personal data as part of and based on this consent, insofar as we have no other legal basis and we require the latter. The consent granted can be withdrawn at any time, but this will not affect any data processing which has already been carried out.
4. Cookies / Tracking and other technologies in connection with the use of our website
4.1 Cookies
Our websites uses cookies, which are saved on your computer. As a result, we can track your visit to the website and save your preferences if you move between pages or revisit the website. Cookies are used in particular for the following purposes:
- Statistical assessment of the number of users and usage habits
- Improvement of the loading speed of the individual pages.
You can control the behaviour of cookies through the browser settings under the Data protection tab. You can generally find the corresponding options for the browser and instructions for use in the browser manual. If you decline cookies or if you block or deactivate them, this may restrict the availability of the services offered via the website. In addition, parts of the websites may no longer function correctly.
4.2 Web analysis
Our website uses Google Analytics, a web analysis service of Google Inc. Google Analytics uses methods which enable your use of the website to be analysed, such as for example so-called cookies, which are text files saved on your computer. The information generated about your use of this website is in general transmitted to a server of Google in the USA and saved there. By activating the IP anonymisation on this website, the IP address is abbreviated before transmission within the Member States of the European Union or in other contracting states of the European Economic Area Agreement. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and abbreviated there. The anonymised IP address transmitted from your browser as part of Google Analytics, will not be merged with other data of Google.You can find more information at http://tools.google.com/dlpage/gaoptout?hl=de or at http://www.google.com/intl/de/analytics/privacyoverview.html (general information about Google Analytics and data protection).
4.3 Google Maps, Google Invisible, Youtube and other services of Google
Our websites may use Google Maps to embed maps, Google Invisible reCAPTCHA for protection against bots and spam as well as YouTube to embed videos. Other services such as Google Adsense, Google WebFonts, Google Tag Manager may also be used. These services of the American Google LLC use cookies among other things and consequently the data are transmitted to Google in the USA, whereby we assume that no person-related tracking takes place solely as part of this process by using our website. Google has undertaken to ensure appropriate data protection in accordance with the American-European and the American-Swiss privacy shield. You can find more information in the data protection declaration of Google.
4.4 Social Media Buttons
Functions (plug-ins) from third-party providers or from social media platforms (e.g. Facebook, Instagram, Linkedin, Youtube) are incorporated in our websites. These plug-ins make it possible for you to share content in the above-mentioned social networks. The buttons are deactivated as standard when the website is called up. This means that without any action by you no personal data will be transmitted to the relevant third-party provider. After you have activated the buttons, data including personal data are automatically transmitted via the plug-ins to the corresponding third-party provider. If you are simultaneously registered in the network of the relevant third-party provider when visiting the website, the latter can assign the visit to your network account. We have no influence on this. The purpose and scope of this data collection and the further processing and use of the personal data is explained in the data protection information provided by the relevant social networks. You will also find information there about the rights and settings options regarding protection of privacy.
4.5 Links
Our websites may contain hyperlinks to other websites, which we do not operate or monitor. Websites of third parties are not subject to this Declaration. We are not responsible for their content or handling of personal data.
5. Data dissemination and data transmission abroad
As part of our business activities and the purposes mentioned in Section 3, insofar as this is permitted and it appears appropriate to us, we will also provide the data to third parties, either because they are processing these for us or because they wish to use them for their own purposes. This applies in particular to the following:
- Our service-providers (within Lenzlinger and externally, such as banks, insurance companies), including order administrators (such as IT providers);
- Dealers, suppliers, subcontractors and other business partners;
- Customers;
- Authorities, official bodies or courts in Switzerland and abroad;
- Media;
- Public relations, including visitors to websites and social media;
- Competitors, industry organisations, associations, organisations and other bodies;
- Purchasers or those interested in purchasing business areas, companies or other parts of the Lenzlinger Group;
- Other parties in possible or actual legal proceedings;
- Other group companies of Lenzlinger.
Some of these recipients are in Switzerland, but they can be anywhere in the world. You must in particular expect the transmission of your data to every country in which we are represented by group companies, branches or other offices as well as in other countries in Europe and the USA, where the service-providers we use are located. When we transmit data into a country without the appropriate statutory data protection, we ensure there is an appropriate level of protection with corresponding measures or base ourselves on the statutory exceptional facts of the consent, contract processing, the identification, exercising or implementation of legal claims, of overwhelming public interest, the published personal data or because it is necessary to protect the integrity of the data subject. You can request further information at any time from the contact named in Section 1. However, we retain the right to not disclose sensitive data or black out sections or supply only extracts for reasons under data protection law or confidentiality.
6. Duration of retention of personal data
We process and save your personal data, for as long as it is to satisfy our contractual and statutory obligations or is necessary for the purposes pursued with the processing, i.e. also for example for the duration of the entire business relationship (from the start, processing up to the termination of a contract) as well as additionally in accordance with the statutory obligations regarding retention and documentation. In doing so, it is possible that personal data are retained for the period during which claims can be asserted against our company and insofar as we are otherwise obliged by legislation or justified business interests require this (e.g. for purposes of providing evidence and documentation). As soon as your personal data are no longer required for the above-mentioned purposes, they will in principle be deleted or rendered anonymous as far as possible.
7. Data security
We take the appropriate technical and organisational security measures to protect your personal data against unauthorised access and misuse such as by issuing instructions, training courses, IT and network security solutions (firewalls, personal passwords etc.), access checks and restrictions, encryption of data carriers and transmissions (insofar as personal data are collected via a website of Lenzlinger in an individual case, they will be transmitted in an encrypted form by using the latest most popular and most secure data transmission procedures called SSL "Secure-Socket-Layer"), pseudonymisation and checks.
8. Provision of personal data
As part of our business relationship, you must provide the relevant personal data which are necessary for the start and implementation of a business relationship and the satisfaction of the associated contractual obligations (you do not generally have a statutory obligation to provide us with data). Without these data, we will in general not be in a position to conclude a contract with you (or the office or person you represent) or process the latter. The website can also not be used if certain information to safeguard data traffic (such as the IP address) is not disclosed.
9. Your rights
As part of the data protection law applicable to you and insofar as this is envisaged in the latter (such as in the case of the GDPR), you have the right to information, correction, deletion, the right to restrict data processing and also to withdraw consent to our data processing as well as to disclosure of certain personal data for the purpose of transmission to another office (so-called data portability). However, please note that we retain the right to assert restrictions envisaged by legislation for our part, such as if we are obliged to retain or process certain data, have an overwhelming interest in the latter (insofar as we are permitted to rely on the latter) or require them to assert claims. If costs are incurred for you, we will inform you of this in advance. We have already informed you in Section 3 of the option of withdrawing your consent. Please note that exercising these rights may contradict contractual agreements and may have consequences such as the early cancellation of the contract or costs. In this case, we will inform you in advance, where this is not already regulated contractually. Exercising such rights generally requires that you provide clear evidence of your identity (e.g. through a copy of your identity card where your identity is otherwise not clear or cannot be verified). You can contact us at the address shown in section 1 to assert your rights. Every data subject also has the right to lodge their claims in court or submit a complaint to the responsible data protection authority. The responsible data protection authority in Switzerland is the Swiss Federal Data Protection and Public Relations Office (http://www.edoeb.admin.ch).
10. Exclusion of liability
All the information on our internet presence has been reviewed carefully. We make every effort to keep the information we provide up to date with the correct, complete content. Despite this, the occurrence of errors cannot be completely ruled out, whereby we cannot assume any guarantee for completeness, accuracy and currentness of information also of a journalistic-editorial nature. Liability claims arising from physical damage or of an ideal nature, which were caused by the use of the information offered, are ruled out, insofar as there is no evidence of intentional or grossly negligent fault. The publisher can amend or delete texts at its own discretion without notification and is not obliged to update the content of this website. The use of or access to this website takes place at the visitor's own risk. The publisher, his client or partner are not responsible for damages, whether they are direct, indirect or accidental consequential losses or those specifically determined in advance, which are alleged to have occurred through the visit to this website and consequently do not assume any liability for the latter.
11. Amendments
We can amend this data protection declaration at any time without prior notice. The current version published on our website applies in each case. Insofar as the data protection declaration is part of an agreement with you, we will inform you if there is an update about the amendment by email or in a different appropriate manner.
Version of 1 September 2023
*****