Data Protection

Scope

This privacy policy applies to TIROLER LAMELLIERHOLZ GMBH (TLH for short).

Contact us

When you contact us, the data you provide will be stored by us for six months for the purpose of processing your enquiry and in case of any follow-up questions. This data will not be passed on to third parties without your consent. To withdraw your consent or for any other enquiries, please contact us using the following details:

Tiroler Lamellierholz GmbH
Innweg 3, 6424 Silz
datenschutz@riedergruppe.at

Data controller

The data controller within the meaning of the Data Protection Act is Tiroler Lamellierholz GmbH. It is a member of the Rieder Group. A joint processing agreement has been concluded with some of the other companies in this group. Specifically, joint processing agreements are in place with the following companies:

Rieder GmbH & Co KG

Purpose of data processing

TLH processes personal data relating to partners, customers and suppliers solely for the purpose of conducting its business activities and fulfilling the associated legal and contractual requirements, or where there is a legitimate interest. Depending on the specific business transaction, we collect the following categories of data:

Identification data: e.g. first name and surname, date of birth, address, email address, telephone and fax numbers
Payment and creditworthiness data: e.g. IBAN, BIC, account name, creditworthiness information from credit reference agencies
Audio call data, e.g. recordings made for quality improvement purposes within our customer service department
Data relating to your online behaviour on our website, e.g. IP address, duration of visit and which pages you have visited

Personal data

The processing of personal data at TLH is based on strict principles. These are designed to ensure the protection and security of the data, as well as the rights of data subjects.

We require your data so that you can make use of our services and products (performance of a contract). In order to carry out our tasks and provide our services, we need to process your data. This also applies to pre-contractual information that you provide to us as part of the initial stages of a business relationship, for example when submitting a quotation.

If you enter into a contractual relationship with us, you will have certain expectations of us. To enable us to meet these expectations, we must, for example, process your identification and contact details so that we can get in touch with you. To process payments, we process your bank details, for example, in the case of a SEPA direct debit mandate. Data processing is carried out lawfully and in good faith.

We collect and process data only for specified, explicit and legitimate purposes. Only data that is strictly necessary for the stated purposes is collected and processed.

In some cases, an authorised dealer, subcontractor or subsidiary may take on all or part of the order placed with us, or the enquiry may be forwarded to the relevant authorised dealer. In such cases, we pass on the data required for the preparation of a quotation, the fulfilment of a contract or to facilitate administration (legitimate interest) to that company.

Some activities are carried out on behalf of TLH by service providers (subcontractors). This requires the disclosure of your data for the purpose of carrying out the activity.

Occasionally, we are required to report insurance claims and, in doing so, may need to pass on your data, for example, as the injured party or a witness.

In some cases, we make use of external support. These (e.g. IT) service providers are carefully selected by us and are subject to strict requirements regarding data processing on our behalf.

In certain circumstances, we may be required to pass on your data due to a legal obligation. This usually involves public authorities, courts or the public prosecutor’s office.

Under no circumstances do we sell your data to third parties.

Personal data must be treated as confidential and is protected by appropriate organisational and technical measures against unauthorised access, unlawful manipulation or disclosure, as well as against loss and destruction.

Personal data is kept accurate, complete and up to date. Appropriate measures are taken to correct inaccurate or incomplete data where necessary (e.g. upon request by data subjects).

Personal data is deleted as soon as the purpose for which it was originally collected ceases to apply and provided that statutory retention periods do not prevent its deletion. We only store your data for as long as we have a legal and legitimate basis for doing so. As soon as the data is no longer necessary to fulfil a contractual or legal obligation and we do not have consent to process the data, we will delete it on a regular basis. As a company, we are subject to a number of regulations and laws that oblige us to process data. Examples of such legal obligations include the storage of data for seven years in accordance with the Austrian Commercial Code (UGB), or the storage of data that may be relevant to the fulfilment of a warranty or a claim for damages. In certain cases, this may be for up to 30 years. An exception to this is data which we are required to retain for a specified period in accordance with a retention period.

Obligation to maintain data confidentiality

All TLH staff and the staff of our contractual partners are bound by a duty of confidentiality and are regularly reminded of the need to handle personal data and other sensitive information securely, and are provided with training where necessary. Only those individuals within our company who genuinely require access to your data in order to fulfil our contract, comply with a legal obligation or serve a legitimate interest of the company are granted access. These include, for example, staff in sales, order processing, authorised dealers, customer advisers or our accounts department.

Data security

Safeguarding the confidentiality, availability and integrity of data is a responsibility that applies equally to trade and business secrets, customer data, personal data and other critical information. To this end, state-of-the-art technical and organisational security measures are put in place and continuously improved.

Encryption

We use HTTPS to transmit data securely over the internet. By using TLS (Transport Layer Security), an encryption protocol for secure data transmission over the internet, we can ensure the protection of confidential data. You can recognise that this data transmission security is in use by the small padlock icon in the top-left corner of your browser and by the use of ‘https’ as part of our web address.

Google Analytics and Cookies

Cookies are small text files, usually consisting of letters and numbers, which are stored on your computer and saved by your browser. Cookies do not cause any damage to your computer and do not contain viruses. We do not collect any personal data from you. You have the option to disable cookies in your browser. This will prevent any further cookies from being stored on your computer.

This website uses Google Analytics, a web analytics service provided by Google Inc. (‘Google’). Google Analytics uses so-called ‘cookies’, which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website – including your IP address – is usually transmitted to a Google server and stored there. On this website, Google Analytics has been extended to include the ‘anonymizeIp’ code to ensure that IP addresses are collected anonymously (known as IP masking). Your IP address is therefore truncated by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.

Further information on this can be found directly in Google’s Privacy Policy: https://policies.google.com/privacy?hl=de#information

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link:http://tools.google.com/dlpage/gaoptout?hl=de.

Please note, however, that in this case you may not be able to make full use of all the features of our website. By using this website, you consent to the processing of data collected about you by Google in the manner and for the purposes set out above.

Google uses the DoubleClick DART cookie
. Users can disable the use of the DART cookie by accessing the privacy policy of Google’s advertising network and content advertising network. No direct personal data relating to the user is stored in this process; only the Internet Protocol (IP) address is recorded. This information is used to automatically recognise you the next time you visit our websites.

Of course, you can also view our websites without cookies. If you do not wish us to recognise your computer, you can prevent cookies from being stored on your hard drive by selecting ‘do not accept cookies’ in your browser settings. Please refer to your browser manufacturer’s instructions for details on how to do this. However, if you do not accept cookies, this may result in certain features of our services being restricted.

Cookie Policy

For a more detailed explanation of the cookies we use and their purposes, please refer to our Cookie Policy: https://www.tlh.at/cookie-policy/.

Email security

If you send us an email, your email address will only be used for correspondence with you and, where applicable, the contractual partner responsible for your case. Please note that data transmission over the internet may be subject to security vulnerabilities. It is not possible to guarantee complete protection of data against access by third parties.

Right of access and rectification

You have the right to obtain information at any time about the data we process. If the data is no longer accurate or is incomplete, you have the right to request that it be rectified or corrected. Please let us know as soon as possible so that we can comply with your request. Should we have passed your data on to a third party, we will also inform them of your request, provided there is a legal obligation to do so.

Right to erasure and the ‘right to be forgotten’

You have the right to have your data erased if there is no longer any contractual or legal basis, or any legitimate interest, for the processing of your data.
Should your data have been published without authorisation (e.g. a photo on Facebook), the data processor must, at your request, ensure that all reasonable measures are taken, such as deleting links or copies.

Right to restriction of processing and data portability

In certain circumstances, you have the right to request that the processing of your data be restricted. The data may then only be used to a limited extent (e.g. to assert legal claims).
You also have the right to request that your data be transferred to a third party.

Your right to object

You always have the right to object to the processing of your personal data without giving any reason. If you object, we will not process your data any further, unless

a) we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms; or

b) we require your data to establish, exercise or defend a legal claim.

2. Objection to the processing of your data for the purposes of our direct marketing or market research.

From time to time, we may wish to send you personalised direct marketing or ask you about your experiences and opinions. You have the right to object to this at any time.

Should you exercise this right, we will no longer process your data for these purposes. The objection may be made informally and should, if possible, be sent to the following address: TIROLER LAMELLIERHOLZ GMBH, Innweg 3 | 6424 Silz / Tyrol, datenschutz@riedergruppe.at.

Complaint to the Data Protection Authority

You have the right to lodge a complaint with us or with a data protection supervisory authority. The data protection supervisory authority responsible for us is: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna

Links to other websites

Our website contains so-called hyperlinks to websites operated by other providers. When you click on these links, you will be redirected directly from our website to the websites of those other providers. You can recognise this, amongst other things, by the change in the URL. In addition, we may incorporate third-party content in certain sections of our website, such as videos from YouTube or Google Maps (see also below). For technical reasons, it may be necessary for these third parties to know your IP address in order to provide this content. We cannot accept any responsibility for the confidential handling of your data by the other provider, as we have no influence over whether that provider complies with data protection regulations. This privacy policy applies exclusively to our website. Websites linked to from this page are not covered by it.
You can find the privacy policies of these websites here:

YouTube: https://www.youtube.com/intl/ALL_at/howyoutubeworks/user-settings/privacy/
Google Maps: https://policies.google.com/privacy?hl=de&gl=de
Rieder Group: https://www.riederteam.at/datenschutz/

Additional information regarding our Facebook presence (e.g. fan page, Facebook app)

If you use our Facebook page, for example by posting on our Facebook wall, liking our page, sending us messages via Facebook or taking part in our promotions and competitions, we will collect the personal data you have voluntarily provided. We process this data solely for the purpose for which you provided it to us (e.g. to respond to your enquiry or to organise and administer the promotion or competition). Further information may be available, where applicable, in the terms and conditions for the respective promotions and competitions.

In the course of your use of our Facebook page, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, also collects and processes the personal data you have voluntarily provided. We have no influence over the scope of the data collected and processed by Facebook. For details on the purpose and scope of data collection, processing and use by Facebook, as well as your rights and settings options in this regard, please refer to Facebook’s respective privacy policies: www.facebook.com/about/privacy and www.facebook.com/about/privacy/your-info-on-other

As at 14 March 2023