We attach utmost importance to the protection and security of your data, regardless of whether you are a customer or visitor to our website. We therefore undertake to protect your privacy and to treat your data confidentially. At this point we would like to inform you of the specific personal data of yours that are collected in relation to your visit to this website and for what purposes they are used.
I. Data controller
This website is operated by Zumtobel Group AG, Höchsterstrasse 8, 6850 Dornbirn, Austria, FN 62309 g, which is also the data controller within the meaning of the EU General Data Protection Regulation (hereinafter referred to as "GDPR").
No data protection officer has been appointed by the data controller since the legal requirements for mandatory appointment are not met.
However, inquiries regarding data protection and the use of your personal data can be sent to the following e-mail address and will be handled by us in accordance with the legal requirements: email@example.com.
II. Data used / processing purposes / retention period
The categories of data we use and the purposes pursued through the use of this data are described below. As far as possible, you will also find information on the storage period of the respective data.
Each time this website is accessed, access data is stored in a log file, the server log. The data record stored in this log file contains the following information: Date and time of access, IP address, session ID, accessed website, name of the website from which the website was accessed and information about the browser used.
We evaluate these log files only in the event of misuse of our website. We reserve the right to subsequently check the log files of those users about whom there is a concrete suspicion of using our website in violation of the law and/or the contract. In general, we cannot attribute these data to a specific person. Should such an attribution be possible, we will only use these data in cases where there is a corresponding legal basis (weighing of interests in individual cases).
If you register on our website or for our web shop, we will record the master data you provide (in particular, your name, salutation, telephone and fax number, e-mail address, language of correspondence, industry, department, web shop access data) and use it on the basis of the relevant user agreement. In addition, you will be assigned an internal customer number and one or more contact persons in our company. These data are used by us in order to provide the web shop and to support you, as a customer or interested party of our company. As a rule, such data will be stored for six months after use of the web shop (erasure of the customer account) ends.
If you place an order in the web shop, we will collect any additional delivery addresses for this purpose and other data provided by you that are necessary for the processing of the order. We store such data for up to six months after the end of the customer relationship.
If personal master data or order data are also used in our accounting system, such data will be stored until the end of the prescribed periods (generally 7 years in Austria) on the basis of the statutory retention obligations applicable to us.
If you have given us your consent during registration or at a later time, we will use the data resulting from your use of the web shop or the website, such as the web pages you have accessed, the time spent on individual web pages and the products you have viewed as well as your previous demand interests, in order to optimise customer service and to be able to provide you with customised information. These data will be stored until you revoke your consent for the use of your data.
If you have agreed to receive a newsletter, we will use your name and e-mail address, your gender, address, company and industry sector, as well as language, for the delivery and personalisation of such a newsletter. These data are used for the duration of the subscription to the respective newsletter.
If you are one of our customers, we use your master data on the basis of our legitimate interest in direct marketing purposes and may invite you to events in your area.
If you have given your consent to the processing of your personal data, this consent can be revoked by you at any time. You can declare a revocation in writing or by e-mail to firstname.lastname@example.org.
III. Recipients and recipient categories of data
In connection with the operation of this website or the web shop, the following processors are acting on behalf of the data controller:
Hosting provider website: Zumtobel Group AG
Provider web shop: Zumtobel Group AG
In addition, we refer to the explanations in Section VI, which describes in detail the use of your data by social networks.
In addition to the recipients specifically mentioned, other processors may also be consulted in the future in connection with the provision of this website and the web shop (e.g. hosting providers, shop operators).
A transfer of data to group companies is carried out based on any consent granted to the recipients named in the consent.
IV. General principles for processing personal data
1. We comply with the statutory data protection regulations without restriction.
The data protection regulations of the European Union and the national laws derived from them apply to the storage, processing and use of personal data. The legal basis for the processing of the respective personal data can be seen from the above list.
We reserve the right to transfer personal data to other companies in the context of restructuring or company mergers if they also undertake to adhere to the principles of action described here and are either based in the European Union or in a third country with adequate data protection.
If you actively choose to use the social networking functions offered on our website, personal data may be transferred to the respective external providers of these social networks. You will find detailed information on this in Section VI below.
We also reserve the right to pass on personal data to third parties if we are forced to do so by law, by a judicial decision by the court of competent jurisdiction or by an order of the competent authority, or if we are forced, as a result of actions or omissions on your part, to have our rights, our property or our assets protected or enforced by the competent authorities.
2. In the procurement of data, we restrict ourselves to what is necessary and reasonable.
If we collect personal data, we will explain to you in each case for what purposes we use the data.
In individual cases, we only collect personal data to the extent necessary to achieve these purposes. If further use of personal data is no longer necessary, the data will be deleted.
V. Your rights in relation to the data used
If and insofar as we use personal data concerning you, you are entitled to the following rights in particular with regard to such data:
• Right of access to information (Art 15 GDPR): You may at any time request information as to whether and which personal data concerning you are being used by us, for what purposes the data are being processed, where the data originate, to which recipients the data may be transmitted and how long such data are stored by us.
• Right of rectification (Art. 16 GDPR): If you discover that personal data concerning you are inaccurate, you may request the rectification of such data at any time. If data are incomplete from your point of view, you can also request that data be supplemented.
• Right of erasure (Art. 17 GDPR): If you believe that the use of your personal data is no longer necessary or that it is carried out without a sufficient legal basis or is unlawful for other reasons, you can request the erasure of these data.
• Right to restriction of the use of data (Art. 18 GDPR): Instead of erasure of data, you can also demand restriction of the use of data, if data are used unlawfully. In particular, you can also demand such a restriction of the use of data if you dispute the accuracy of data or have lodged an objection to the use of data
• Right to data portability (Art. 20 GDPR): With regard to personal data that you have provided yourself and that are used on the basis of a contract or consent, you can demand that these data be made available to you in a structured, common and machine-readable format. You may also request that this data be transferred directly to another data controller.
• Right to file a complaint with a supervisory authority (Art. 77 GDPR): If you believe that your rights have been violated in relation to personal data concerning you, you have the right to file a complaint with a supervisory authority. In particular, you may contact the supervisory authority responsible for your place of residence, your place of work or the place where the suspected violation occurred. In Austria, the responsible supervisory authority is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.
Separately, we would like to point out your right of objection (Art. 21 GDPR): If reasons arise from your particular situation which make the use of your personal data, which we use on the basis of a legitimate interest, impermissible, you have the right to object to such use of data. If your personal data is used for direct marketing purposes, you have the right to object in any case.
If you have any questions or are unclear about your rights regarding your personal data, you can contact us at any time at the following e-mail address: email@example.com.
VI. Use of personal data by social networks
Links to social networks
This website uses links to various social networks. With the help of these links you can, for example, share the content of our website with your contacts in social networks or recommend this content to others.
We link to pages of the following social network operators:
• Facebook: Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
• Twitter: Twitter Inc., Folsom St., Suite 600, San Francisco, CA 94107, USA
• Pinterest: Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA
• LinkedIn: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA
• Instagram: Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA
• YouTube: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066 United States
• Vimeo: Vimeo, Inc., 555 West 18th Street, New York, NY 10011
Conversion Tracking through Facebook Pixels, LinkedIn Insight Tags, Pinterest Tags & Twitter Website Tags
We use Facebook pixels, LinkedIn Insight tags, Pinterest tags, Twitter Website Tags to measure and improve the effectiveness of our advertising on social media.
Accordingly, we use the pixels/tags to ensure that our ads match the potential interest of users and are not perceived as annoying. The pixel and tags also allow us to track the effectiveness of our ads for statistical and market research purposes, by seeing whether users have been directed to our site after clicking on an ad.
According to the most recent judicature of the European Court of Justice, our responsibility with regard to the data processed by the aforementioned tools is limited to the collection and transmission of these data. To this extent, the rights of data subjects may also be asserted against us.
The collection and transmission of this data is based on the consent you have given, of which you were expressly notified when you visited our website.
The data collected by the above-mentioned operators cannot be viewed directly by us, but can only be used within the scope of placing advertisements.
Furthermore, we use the "Custom Audiences from File" procedure of the social network Facebook, Inc. and LinkedIn. In this case, the e-mail addresses of the persons are uploaded to Facebook/LinkedIn after consent has been granted. The upload process is encrypted. The upload is used solely to determine recipients of our ads. We want to ensure that the ads are only shown to users who are interested in our information and services.
We have no influence on the further processing of the personal data collected by the respective operators. Furthermore, it is not possible for us to determine the extent to which, where and for how long the data is stored by the social networks, the extent to which the social networks comply with existing deletion obligations, which evaluations and links to the data are carried out by them and to whom the data is passed on by the social networks.
Insofar as the data you send us via Facebook is also or exclusively processed by Facebook (Insights data), Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, in addition to us, also serves as the data controller for the data processing within the meaning of the General Data Protection Regulation (GDPR). The data processing in this respect is based on an agreement between joint data controllers in accordance with Art. 26 GDPR, which you can view here.
On our website, we include videos from YouTube, YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066 United States. We have no control over the amount of data collected in this manner (for example, by playing and viewing the pages with embedded video) by the providers of the social networks.
The following data are transmitted, according to our knowledge:
• IP address
• User identification if you are logged in to the corresponding service
• previously visited page (referrer), if you followed a link
• Browser type and settings
• installed plug-ins, such as Adobe® Flash® or Adobe® Reader®
• URL of the page on which the social plugin is embedded
• the date and time of the visit
• technical specifications of the operating system
• Location-related information
By embedding the YouTube videos, the operator receives the information that you have called up the respective pages of our Internet presence. If you are logged into one of the social networks at the same time, the operator can correlate the corresponding access instances to your account with the respective social network. If you also interact with the plug-ins, the corresponding information is transmitted to the respective social network.
In addition, you may be able to technically prevent a data transfer to YouTube. Please adjust the security settings in the web browser you are using for this purpose. Please refer to the "Help" section in your web browser to find out how this works.
These are small text files that are stored on your computer. Most of the cookies we use are deleted from your hard drive at the end of the browser session (so-called session cookies). Other cookies remain on your computer and enable us to recognise your computer during your next visit (so-called persistent cookies). In addition, cookies from third parties are also used on our website.
You can prevent the storage of cookies by adjusting your browser settings accordingly. However, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent.
If you do not wish our cookies to be stored on your computer, please deactivate the storage of cookies in your browser for our website or set your browser so that cookies are generally not stored on your computer. You can also use your browser to delete cookies that have already been stored.
The following categories of cookies are used on our website:
I. Session cookies
To make it easier for you to browse our website, we use a so-called session ID (session identifier), which is assigned to each visitor at the beginning of each use of our website. This session ID is used by our server to recognise you or your computer/browser as the same visitor, even though your IP address may have changed in the meantime. This session ID enables the assignment of several related requests of a user to one session. The session ID cookie we use is only valid until the end of a session. It is automatically deleted when you close your browser.
II. Persistent cookies
a. Google Analytics
Moreover, you can also prevent the data generated by these cookies and related to your use of the website (including your IP address) from being collected by Google, and prevent Google from processing this data, by downloading and installing the browser plug-in from Google available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Other such plug-ins are also made available by other providers, depending on the browser used.
In view of the discussion about the use of analytic tools with complete IP addresses, we would like to point out that this website uses Google Analytics with the extension "anonymizeIp()" and therefore the IP addresses are only processed in abbreviated form, in order to exclude the possibility of direct personal attribution. Your IP address will therefore be shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and only shortened there. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.
On this website we use Oracle Eloqua for login and to send you emails. The servers of Oracle Eloqua are located in the European Union (Netherlands). Oracle Eloqua places a permanent cookie on the respective login page, unless an Eloqua cookie is already present on your device. If you have already used a website that uses Eloqua, you may already have an Eloqua cookie. We may use the Eloqua cookie to analyse your use of our sites so that we can continually improve them and, if necessary, adapt our information offering to your interests.
Emails sent using Oracle Eloqua use tracking technologies. We use these data primarily to find out which topics are of interest to you by tracking whether our e-mails are opened and which links you click on. We then use this information to improve the emails we send you and the services we provide.
When subscribing to the newsletter and confirming your subscription, the IP address is stored at the time of subscription, so that we can prove your subscription in case of doubt. In addition, when registering for the subscription, we collect other personal data such as the first name, last name and e-mail address, your gender, address, company and industry sector, as well as language. We use this data to personalise and execute our newsletter mailings. We do not pass this information on to other third parties. You have the option to cancel your subscription at any time. You can do so conveniently, either by using the link located at the bottom of each newsletter, by e-mail or directly from your e-mail program, provided that it supports the function of a list-unsubscribe header.
To conduct surveys, we use the services of Qualtrics, LLC, 400 West Qualtrics Drive, Provo UT, 84606 USA ("Qualtrics").
For this purpose, your data will be stored and processed on Qualtrics servers in the EU.
III. Third-party cookies
Third-party services are also integrated within the framework of our website. With regard to these services, personal data may be used by the providers mentioned below, which are not within the responsibility of the provider of this website.
a. Google Maps
This website uses Google Maps on some subpages to display interactive maps and to provide directions. Google Maps is a map service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. By using Google Maps, information about the use of this website, including your IP address and the (start) address entered in the route planner function, can be transmitted to Google in the USA.
When you access a web page of our website that contains Google Maps, your browser establishes a direct connection with the Google servers. The map content is transmitted by Google directly to your browser and integrated into the website by it. Therefore, we have no influence on the extent of the data collected by Google in this way.
According to our present knowledge, these are at least the following data:
• Date and time of the visit to the relevant website,
• Internet address or URL of the web page accessed,
• IP address,
• (Start) address entered during route planning.
We have no influence on the further processing and use of the data by Google and can therefore not take responsibility for this.
b. Haufe recruiting
VIII. Links to external websites
Our website contains so-called hyperlinks to websites from other providers. In these cases, you will be directly forwarded from our website to the websites of the other providers. You can recognise this by the change of the URL in the address bar of your browser, among other things.
We cannot assume any responsibility for the confidential handling of your data by such providers, as we have no influence on whether the other providers comply with the data protection regulations. Please refer to the websites of these providers directly for information on how they handle your personal data.
IX. Security measures to protect your data
To protect your data, we have taken special technical and operational security measures which are regularly reviewed and adapted to technological progress.
However, we would like to point out that due to the structure of the Internet, it is possible that the rules of data protection and data security may not be observed by other persons or institutions that are not within our area of responsibility.
X. Changes to the data protection policy
Since changes in the law or changes in our internal company processes may make it necessary to adapt this data protection policy, which we reserve the right to do accordingly, we ask you to read this data protection policy regularly.
Last updated: November 2020