Privacy policy

The protection of your data is a central concern for LEGERO Schuhfabrik GmbH (hereinafter: “we“). Therefore, we would like to inform you about how we process your personal data via our website.

In any case: Your data will be processed exclusively in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

General information:

Controller for the processing of your personal data is

LEGERO Schuhfabrik GmbH
Legero-United-Straße 4,
A-8073 Feldkirchen bei Graz
Austria
Telephone: +43 316 429 100
Email: datenschutz@legero-united.com

Data processing:

1. Purposes of data processing:

We process your personal data exclusively for the following purposes:

a) Ensuring the correct performance of our website;
b) Receiving messages via our website contact form and responding to such messages;
c) Enforcement of or defense against legal claims raised in connection with our website;
d) Compliance with record-keeping, information and disclosure requirements, as required by law;
e) With your consent in the cookie banner: collecting statistical data about your use of our website and forwarding it to our advertising partners to measure the reach of our advertising;

2. Origin of the personal data processed:

We collect these data exclusively from you by you providing them to us via our contact form or by us collecting them based on your use of our website.

For the purpose 1a stated above, we may also create server logs about your visit to our website. The server logs created contain certain meta data about your visit to our website (e.g. IP address, browser type used and date and time of access). The data collected in this way can generally not be connected to you as an identified person, but such a connection may be possible in exceptional cases by combining the server logs with other data. Likewise, it may be possible to determine from the data collected (such as your IP address) that several different accesses originate from the same person. These server logs are only reviewed and evaluated by us in exceptional cases.

3. Legal bases for the processing of your personal data:

This processing of your personal data for the purposes mentioned under 1. is based on the following legal bases:

• Data processing for the purpose 1a):

Data processing for this purpose is based on the fact that we have a legitimate interest in improving and securing the performance of our website by creating and using server logs in order to make our web presence as attractive as possible for you (Article 6 (1f) GDPR).

• Data processing for the purpose 1b):

The data processing of your data that you enter in our website contact form for this purpose 1b) is based on the fact that we have a legitimate interest in being able to receive, process and respond to your contact messages (Article 6 (1f) GDPR).

• Data processing for the purpose 1c):

Data processing for this purpose is based on the fact that we have a legitimate interest in enforcing any legal claims that arise, could arise or are raised in connection with our website and in defending ourselves against any such legal claims (Article 6 (1f) GDPR).

• Data processing for the purpose 1d):

The processing of data for this purpose is based on the fact that the processing of these data is necessary for us to fulfill our legal record-keeping, information and disclosure obligations (Article 6 (1c) GDPR), such as our obligation to retain all company-related messages that we receive via our contact form in accordance with § 212 of the Austrian Commercial Code (UGB).

• Data processing for the purpose 1e):

Data processing for this purpose only takes place if you have explicitly consented to the use of cookies in our cookie banner. In this case, statistics are collected based on unique user IDs stored in cookies, your shortened IP address and other meta data about your device. If you have given this consent, the data processing is based on this consent of yours (Article 6 (1a) GDPR, § 165 (3) Austrian Telecommunications Act (TKG 2021)). This consent is voluntary and not required to use our website. You can revoke this consent at any time by clicking on the “Cookie Settings” link in the footer of our website, which will reopen the cookie banner and allow you to refuse data processing using cookies, or by deleting the cookies from our website in your browser.

4. Forwarding of your personal data to third parties:

We involve IT service providers as processors to ensure the security, accessibility and efficiency of our website and working environment. Under certain circumstances, your personal data may also be made accessible to them for the above-mentioned purposes (1a-1e).

Furthermore, if you agree to this in the cookie banner, your data will be transmitted to Google Ireland Ltd. and Google LLC for purpose 1e), as we use the service “Google Analytics” for analysis purposes and the service “Google Maps” for displaying maps. In this context, Google may also transmit the collected data to the USA. This data transfer is based on standard contractual clauses pursuant to Article 46 (2c) GDPR, for which Google has taken additional security measures. You can find more information about this here.

If necessary for the above-mentioned purpose 1c), we may forward your personal data to our legal representatives as well as to courts. If necessary to achieve the above purpose 1d) and required by law, we will disclose your personal data to authorized authorities or third parties.

With the exception of the above-mentioned transfers to third countries, we do not transfer personal data to third countries outside the European Economic Area without first obtaining your consent (which you may revoke at any time).

5. Retention of your personal data:

Your personal data will be retained by us only for as long as reasonably deemed necessary by us to achieve the purposes set out above and as permitted by applicable law. In any case, we store your personal data as long as statutory retention obligations (in particular the seven-year retention period pursuant to § 212 of the Austrian Commercial Code (UGB) for contact inquiries) exist or the statute of limitations for potential legal claims has not yet expired. We keep the server logs we create for a maximum of one year. We will keep your data longer than this period if and as long as we need it to enforce or defend specific legal claims.

6. Voluntariness of the provision of personal data:

The provision of your personal data is generally voluntary. However, if you do not provide the data, you may not be able to use all the functions of our website and we may not be able to process your contact request. It is not possible to use our website without server logs being created. Consent in the cookie banner is not required to use our website.

The contact form indicates which data are mandatory. The provision of all other data is voluntary and not necessary for us to process your contact request.

Your rights:

What rights do you have under applicable data protection law?

You have the right to (i) obtain from us confirmation whether and which personal data we have stored about you and to receive copies of such data (Article 15 GDPR), (ii) require us to correct, amend or delete your personal data if it is incorrect or not processed in accordance with the law (Article 16, 17 GDPR), (iii) in certain circumstances, require us to restrict the processing of your personal data (Article 18 GDPR), (iv) under certain circumstances, to receive your data in a structured, commonly used and machine-readable format or to transfer it to a third party (right to data portability, Article 20 GDPR) and (v) under certain circumstances, to object to the processing of your personal data (Article 21 GDPR). Where our data processing is based on your consent, you also have the right to withdraw your consent at any time (Article 7 (3) GDPR). If you wish to exercise one or more of these rights, please feel free to contact us.

In addition, you have the right to file a complaint with the Austrian Data Protection Authority (for contact details, see www.data-protection-authority.gv.at/) if you believe that your data protection rights have been violated.