Data Policy
Data Privacy Statement
Responsible person for the data processed in connection with this website:
Lehmann Holzwerk AG
Erlenhof
9200 Gossau
Schweiz
T +41 71 388 58 00
General Information on Data Processing
Extent of Processing of Personal Data
We only ever process our users’ personal data where this is necessary to provide a properly functioning website, along with our content and services. Our users’ personal data is processed regularly and only with the users’ consent. An exception applies in cases where it is not possible to obtain the prior consent of users for de facto reasons and data processing is permitted by statutory regulations.
Data Deletion and Storage Period
The data subject’s personal data will be deleted or blocked as soon as the purpose for which it was stored ceases to apply. The data might be stored for longer if this has been stipulated by the European or national legislators within Union regulations, laws or other requirements to which the responsible party is subject. The data is also blocked or deleted if a storage period stipulated by the standards mentioned expires, unless there is a continued need to store the data in order to enter into a contract or for the performance of a contract.
Making the Website Available and Creating Log Files
Each time our website is visited, our system automatically collects the data and information from the operating system of the requesting computer. The following data enables assignment to a user and is collected at this point:
• type and version of the browser used
• user’s operating system
• user’s Internet Service Provider
• user’s IP address
• date and time of access
• websites from which the user's system accesses our Internet site
• websites accessed by the user's system through our website
The data is also stored in our system’s log files. This data is not stored together with other personal data pertaining to the user.
The IP address needs to be stored by the system in order to make the website available to the user’s computer. The user’s IP address must remain stored for the duration of the session for this purpose. In addition, the data is stored in log files, in order to ensure the functionality of the website. The data is used to optimize the website and to ensure the security of our IT systems. These purposes also include our legitimate interest in data processing. The legal basis is thus Article 6 Paragraph 1 Point f of the GDPR (EU’s General Data Protection Regulation).
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Where the data is stored in order to make the website available, this takes place when the respective session is ended. In the case of log files, the data is stored in rolling log files, with older entries being automatically deleted. The storage duration is thus dependent on the circumstances and cannot be restricted accordingly in terms of time. In general, it can be assumed that the data will be deleted after one year at the latest, although storage beyond this time is possible.
It is vital to store the data in order to make the website available, and the data must be stored in log files in order to operate the website. Users therefore have no possibility to object to processing of this personal data.
Usage of cookies
Our website uses cookies. Cookies are text files that are stored in the user’s computer system in the Internet browser or by the Internet browser. If a user visits a website, a cookie can be stored in their operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified the next time the website is visited.
Technically Necessary Cookies
The user data collected by technically necessary cookies is not used to create user profiles. The purpose of using technically necessary cookies is to make it simpler for users to use websites. Some of the functions on our website cannot be provided if we do not use cookies. For this purpose, the browser must be recognized even after a page change.
Other Cookies
We also use cookies on our website which enable us to analyse the behaviour of our users. This is because we use Google's services (see below).
Storage period, possibility of objection and removal
Cookies are stored on the user's computer. Therefore, you as a user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that some functions of our website cannot be used to their full extent.
With regard to technically unnecessary cookies, we also refer you to the explanations below.
Third Party Services (Plugins)
Google Analytics
We use the service Google Analytics on our website. This is a service provided by the US company Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, resp., for European users, the Irish company Google Limited Ireland, Gordon House, Barrow Street, Dublin 4, Ireland. We have concluded a data processing agreement with Google.
Google Analytics is a web analysis service. Web analysis is the measurement, collection, analysis and reporting of data on visitors' behaviour on websites. A web analysis service collects data, among other things, from which website a data subject came to another website (so-called referrers), which subpages of the website were accessed or how often and for how long a subpage was viewed.
The service uses cookies (see above). On this website, the Google Analytics’ IP anonymization is activated. This shortens Google's IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before it is transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
The information created by Google Analytics is usually transmitted to a Google server in the USA, where it is stored. Google uses this information on our behalf to evaluate the use of the website, compile reports on website activities and to provide services associated with the use of the website and the use of the Internet for us. The IP address transmitted by the browser in Google Analytics is not merged with other data from Google.
This data processing therefore takes place on the basis of our legitimate interest in analysing user behaviour in order to optimise both our website and our advertising. The legal basis is therefore Art. 6 para. 1 lit. f GDPR.
You can prevent cookies from being stored by making a corresponding setting in the browser software you use, but you might then not be able to use all of the functions of this website to the full extent. In addition to the changes in browser settings, you can also use a browser plug-in to object to the processing of data. This plugin is available at https://tools.google.com/dlpage/gaoptout.
Please refer to the Google’s data privacy statement for details on data processing by Google and your possibilities to object: https://policies.google.com/privacy?gl=de
Contact Form and Contact by Email
Our website provides forms enabling you to contact us by electronic means. If you take advantage of this option, the data entered in the input screen is transmitted to us and stored. This data is:
• First name and last name
• Address (Street, ZIP code, City, Country)
• E-mail address
• Phone number
• Individual message
• Event-specific data (application etc.)
To process the data, your consent is obtained during the transmission process, and you are referred to this data privacy statement.
Alternatively, you can make contact using the e-mail address provided. In this case, your personal data transmitted to us in the e-mail is stored.
We only process personal data from the input screen in order to process establishing contact. If you contact us via e-mail, this also constitutes the required legitimate interest pursued in processing the data. The other personal data processed during the transmission procedure is used to prevent the contact form from being misused and to ensure that our IT systems are secure. Depending on the circumstances, data processing is based on the consent of the user, the implementation of pre-contractual measures, the performance of a contract and/or to safeguard our legitimate interests. The legal basis for data processing is accordingly Article 6 Paragraph 1 Points a, b and/or f of the GDPR.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. With regard to the personal data from the input screen of the contact form and the data that has been sent by e-mail, this is the case once the respective conversation has ended with the user. The conversation is considered ended once it has been established from the circumstances that the matter in question has been fully clarified.
Users can revoke their consent to the processing of their personal data at any time. If a user contacts us via e-mail, they can object to the storage of their personal data at any time. The conversation may not be continued in such cases. All personal data that has been stored during contact is then deleted, unless it needs to be stored in order to comply with contractual or legal obligations.
Rights of the Data Subject
If your personal data is processed, you are the person concerned and you have the following rights against the responsible party:
• Right to confirm whether the data concerning you should be processed, right to information on the processed data, right to further information on data processing as well as right to copies of the data (Article 15 of the GDPR);
• Right to correct and complete incorrect or incomplete data (Article 16 of the GDPR);
• Right to immediate deletion of data concerning you, or, if further processing is necessary, to restriction of processing (Articles 17 and 18 of the GDPR);
• Right to receipt of data concerning you and provided by you and to transmit this data to other providers/responsible parties (Article 20 of the GDPR);
• Right to receive the personal data concerning you that you have provided to the responsible party in a structured, current and machine-readable format.