1) Introduction and Controller Contact Details
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is any data with which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is LORD Hausgeräte GmbH, Nymphenburger Straße 4, 80335 Munich, Germany, Tel.: +49 1703650161, E-Mail: eshop@lord.eu. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 When you merely use our website for informational purposes, i.e. when you do not register or otherwise transmit information to us, we only collect such data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/referral from which you reached the page
- Browser used
- Operating system used
- IP address used (possibly in anonymised form)
Processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used for any other purpose. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser's address bar.
3) Hosting & Content Delivery Network
For hosting our website and displaying its content we use a provider that performs its services itself or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorised disclosure to third parties.
4) Cookies
To make your visit to our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for longer and allow the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of your web browser's cookie settings.
Insofar as personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the performance of the contract, in accordance with Art. 6 (1) lit. a GDPR in the case of consent given, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interest in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contacting Us
5.1 Smartsupp
This website uses a live chat system from the following provider: smartsupp.com, s.r.o., Milady Horakove 13, 60200 Brno, Czech Republic
The processing of personal data transmitted via the chat is carried out either in accordance with Art. 6 (1) lit. b GDPR because it is necessary for the initiation or performance of a contract, or in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the effective support of our website visitors.
Subject to any conflicting statutory retention periods, the data you transmit in this way will be deleted once the matter in question has been conclusively clarified.
In addition, further information may be collected and evaluated for the purpose of creating pseudonymised usage profiles with the help of cookies; however, this information does not serve to identify you personally and is not merged with other data sets. Insofar as this information contains personal references, the processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation purposes.
The setting of cookies can be prevented by corresponding browser settings. If applicable, the functionality of our website may be limited in this case. You may object to the collection and storage of data for the purpose of creating a pseudonymised usage profile at any time, with effect for the future.
We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorised disclosure to third parties.
5.2 When contacting us (e.g. via contact form or e-mail), personal data is processed — exclusively for the purpose of handling and responding to your request and only to the extent necessary for that purpose.
The legal basis for processing this data is our legitimate interest in answering your enquiry in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that no statutory retention obligations prevent deletion.
6) Data Processing When Opening a Customer Account
In accordance with Art. 6 (1) lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. Which data is required for opening the account can be seen from the input mask of the corresponding form on our website.
Your customer account can be deleted at any time and can be done by sending a message to the controller's address mentioned above. After deletion of your customer account, your data will be deleted provided that all contracts concluded via it have been fully processed, no statutory retention periods prevent deletion, and we have no legitimate interest in further storage.
7) Use of Customer Data for Direct Advertising
Subscription to our e-mail newsletter
When you subscribe to our e-mail newsletter, we regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Providing further data is voluntary and is used to address you personally. For sending the newsletter we use the so-called double opt-in procedure, which ensures that you will only receive the newsletter once you have expressly confirmed your consent to receiving the newsletter by activating a verification link sent to the specified e-mail address.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) lit. a GDPR. In doing so, we store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later point in time. The data collected by us upon registration for the newsletter will be used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your e-mail address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
8) Data Processing for Order Handling
8.1 Insofar as this is necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data you provided when placing the order in order to inform you personally within the scope of our statutory information obligations in accordance with Art. 6 (1) lit. c GDPR. Your contact data will be used strictly for the purpose of notifying you about updates owed by us and will be processed by us only to the extent necessary for the respective information.
For the processing of your order we also work with the service provider(s) listed below, who support us wholly or partly in the performance of contracts concluded. Certain personal data will be transmitted to these service providers in accordance with the following information.
8.2 Use of Payment Service Providers (Payment Services)
- GoPay
One or more online payment methods of the following provider are available on this website: GoPay s.r.o., Planá 67, 370 01 Planá, Czech Republic
When selecting a payment method from the provider under which you make an advance payment (e.g. credit card payment), the payment data you provide during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to it in accordance with Art. 6 (1) lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
8.3 Electronic Right of Withdrawal Function for Distance Contracts
Consumers who conclude contracts on this website for which a statutory right of withdrawal exists have the option of declaring their withdrawal via an electronic withdrawal function in accordance with the applicable withdrawal provisions.
When using the withdrawal function, in addition to information identifying the contract to be withdrawn, further personal information such as the consumer's first and last name as well as their e-mail address must be provided or confirmed.
The collection of this information and its transmission to us is carried out in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for the proper handling of the withdrawal. Also on the basis of Art. 6 (1) lit. b GDPR, the personal data provided will be used to confirm receipt of the withdrawal declaration by e-mail. A further legal basis for the processing is Art. 6 (1) lit. c GDPR. We are legally obliged to provide an electronic withdrawal function for paid consumer distance contracts.
9) Web Analysis Services
9.1 Google Analytics 4
This website uses Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.
By default, when visiting the website, Google Analytics 4 sets cookies, which are stored as small text blocks on your device and collect certain information. The scope of this information also includes your IP address, which is, however, shortened by Google by the last digits in order to exclude direct personal reference.
The information is transmitted to Google's servers and further processed there. Transfers to Google LLC, based in the USA, may also occur.
Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activities for us, and to provide further services related to website use and Internet use. The IP address transmitted by your browser and shortened by Google within the scope of Google Analytics will not be merged with other Google data. The data collected within the scope of Google Analytics 4 will be stored for a period of two months and then deleted.
All of the processing described above, in particular the setting of cookies on the device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to our site. You may revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with Google, which ensures the protection of our visitors' data and prohibits unauthorised disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://business.safety.google
Demographic characteristics
Google Analytics 4 uses the special function "demographic characteristics" and can thereby create statistics that make statements about the age, gender and interests of site visitors. This is done by analysing advertising and information from third-party providers. This makes it possible to identify target groups for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after being stored for a period of two months.
Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have activated personalised advertising and linked your devices to your Google account, Google may — subject to your consent to the use of Google Analytics in accordance with Art. 6 (1) lit. a GDPR — analyse your usage behaviour across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, but only statistics. If you wish to stop cross-device analysis, you can disable the "Personalised advertising" function in your Google account settings. To do so, follow the instructions on this page: https://support.google.com
Further information about Google Signals can be found at the following link: https://support.google.com
User IDs
As an extension of Google Analytics 4, the "UserIDs" function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 (1) lit. a GDPR, set up an account on this website and logged in to this account on different devices, your activities, including conversions, can be analysed across devices.
Collection of user-provided data
In order to improve the analysis results for users whose contact data we have received in the context of business or business-like relationships, we use the function "Collection of user-provided data".
Subject to your express consent in accordance with Art. 6 (1) lit. a GDPR, within the scope of this function we transmit one or more files with customer data aggregated about your person (in particular e-mail address and telephone number) electronically to Google. Google does not receive access to clear data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information may then only be used by Google to assign it to existing Google accounts set up by the data subjects.
The processing serves to refine measurement data, improves cross-device user traceability and enables the integration of analysis results into Google's ad personalisation and conversion tracking functions.
You may revoke your consent to us at any time with effect for the future. Further information on Google's data protection measures regarding the transmission of customer data can be found here: https://support.google.com
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
9.2 Google Tag Manager
This website uses "Google Tag Manager", a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").
The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and for calibrating, controlling and linking them to conditions via a unified user interface. The Google Tag Manager itself does not store or read any information on user devices. Nor does the service carry out any independent data analyses. However, when a page is accessed, the Google Tag Manager transmits your IP address to Google and stores it there if applicable. A transfer to servers of Google LLC. in the USA is also possible.
This processing will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR. Without this consent, the Google Tag Manager will not be used during your visit to our site. You may revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
Further legal information on Google Tag Manager can be found at https://business.safety.google
9.3 Microsoft Clarity
This website uses the web analysis service of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including information about the device used such as the IP address and browser information, in order to evaluate it for statistical analyses of user behaviour on our website and to create pseudonymised usage profiles. Among other things, this enables the evaluation of movement patterns (so-called heatmaps), which show the duration of page visits as well as interactions with page content (e.g. text input, scrolling, clicks and mouse-overs). Pseudonymisation fundamentally rules out direct personal reference. The data will not be merged with clear data about your person collected in other ways.
All of the processing described above, in particular the reading or storing of information on the device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
10) Retargeting / Remarketing and Conversion Tracking
10.1 Meta Pixel
Within our online offering we use the "Meta Pixel" service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta")
If a user clicks on an advert placed by us on Facebook and/or Instagram, the URL of our linked page is extended by a parameter with the help of "Meta Pixel". This URL parameter is then entered into the user's browser by a cookie that our linked page itself sets, after the redirection.
On the one hand, this enables Meta to identify the visitors of our online offering as a target group for the display of adverts (so-called "Ads"). Accordingly, we use the service to display the Facebook and/or Instagram ads placed by us only to those users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in specific topics or products determined on the basis of the websites visited) which we transmit to Meta (so-called "Custom Audiences").
On the other hand, the "Meta Pixel" can be used to track whether users were redirected to our website after clicking on an advert and which actions they carry out there (so-called "Conversion Tracking").
The data collected is anonymous for us, i.e. it does not allow us to draw conclusions about the identity of users. However, the data is stored and processed by Meta, so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes.
All of the processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorised disclosure to third parties.
The information generated by Meta is usually transmitted to a Meta server and stored there; in this context, a transfer to servers of Meta Platforms Inc. in the USA may also occur.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
10.2 Google Ads Conversion Tracking
This website uses the online advertising programme "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads offering to draw attention to our attractive offers with the help of advertising materials (so-called Google AdWords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. We thereby pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an Ads ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the ad and been redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Google Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. Within the scope of using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details on the processing triggered by Google Ads Conversion Tracking and on how Google handles data from websites can be found here: https://policies.google.com
All of the processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR. You may revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link:
https://support.google.com
Please note that certain functions of this website may not or may only be used to a limited extent if you have deactivated the use of cookies.
Google's privacy policy can be viewed here: https://business.safety.google
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
10.3 Microsoft Advertising Universal Event Tracking
This website uses conversion tracking technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
For the use of Universal Event Tracking, a tag is embedded on each page of our website that interacts with the conversion cookie set by Microsoft. This interaction makes user behaviour on our website traceable and sends the information collected in this way to Microsoft. The purpose is to record and statistically evaluate certain predefined goals, such as purchases or leads, in order to design the alignment and content of our offers in a more interest-oriented way. The tags are never used for the personal identification of users.
All of the processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR. Without this consent, the retargeting technology will not be used during your visit to our site.
You may revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.
11) Rights of the Data Subject
11.1 Applicable data protection law grants you the following data subject rights (information and intervention rights) against the controller with regard to the processing of your personal data, whereby the respective prerequisites for exercising them are referred to in the legal basis cited:
- Right of access in accordance with Art. 15 GDPR;
- Right to rectification in accordance with Art. 16 GDPR;
- Right to erasure in accordance with Art. 17 GDPR;
- Right to restriction of processing in accordance with Art. 18 GDPR;
- Right to information in accordance with Art. 19 GDPR;
- Right to data portability in accordance with Art. 20 GDPR;
- Right to withdraw consent given in accordance with Art. 7 (3) GDPR;
- Right to lodge a complaint in accordance with Art. 77 GDPR.
11.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA WITHIN THE SCOPE OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU MAKE USE OF YOUR RIGHT OF OBJECTION, WE WILL STOP THE PROCESSING OF THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT OF OBJECTION, WE WILL STOP THE PROCESSING OF THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
12) Duration of the Storage of Personal Data
The duration of the storage of personal data is measured on the basis of the respective legal basis, the processing purpose and — if applicable — additionally on the basis of the respective statutory retention period (e.g. commercial and tax retention periods).
When processing personal data on the basis of express consent in accordance with Art. 6 (1) lit. a GDPR, the data concerned will be stored until you withdraw your consent.
If statutory retention periods exist for data that is processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 (1) lit. b GDPR, this data will be routinely deleted after the retention periods have expired, insofar as it is no longer required for the performance or initiation of the contract and/or there is no legitimate interest on our part in further storage.
When personal data is processed on the basis of Art. 6 (1) lit. f GDPR, this data will be stored until you exercise your right of objection under Art. 21 (1) GDPR, unless we can prove compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
When personal data is processed for the purpose of direct advertising on the basis of Art. 6 (1) lit. f GDPR, this data will be stored until you exercise your right of objection under Art. 21 (2) GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
