Privacy

Copyright © by pewag International GmbH. All rights reserved, worldwide.

This website and/or webshop is operated by pewag International GmbH, Gaslaternenweg 4, 8041 Graz (‘we’ or ‘us’). This notice describes how we, as the data controller, process your personal data in connection with this website and/or webshop.

This privacy policy was last updated on 10 September 2024.

In this privacy statement, we explain what we do with the data we have collected about you via this website and/or webshop. We recommend that you read this document carefully. We meet the legal requirements when processing data. This means, among other things, that:

• We clearly state the purposes for which we process personal data. This is done through this privacy statement.

• We aim to limit our processing of personal data to only the personal data that is required for legitimate reasons.

• We will first obtain your explicit consent if this is necessary to process your personal data.

• We take appropriate security measures to protect your personal data and also require this of parties that process personal data on our behalf.

• We respect your right to access, correct or delete your personal data.

If you have any further questions or would like to know what personal data we hold about you, please contact us at dataprotection(at)pewag.com.

1. Purpose, data and retention period

We process personal information for a number of purposes related to our business, including the following.

1.1 Contact – by phone, post, email and web formats

As soon as you contact us by phone, email or contact form, we process your data.

For this purpose, we process the following data:

• First name and surname

• Account name or pseudonym (only for B2B customers)

• Email address

• Telephone number

• IP address

• Geolocalisation data

• Attachment of documents

• Any information you voluntarily provide to us

The legal basis

The data processing is carried out on the basis of our legitimate interest in communicating with webshop users (Art. 6 para. 1 lit. f GDPR).

Data recipients

Your personal data will be processed by our relevant departments, such as IT and customer service, in accordance with the applicable data protection regulations, which they require to achieve the above-mentioned purpose.

We also pass on your personal data to external service providers who support us in fulfilling our activities; e.g. our e-commerce tool (Shopware, Frankfurt DE) and content management system (Wordpress, hosted by Lorem Ipsum, Graz AT). These service providers act as processors and process the data exclusively in accordance with our instructions and the applicable data protection regulations.

Transfer to third countries

There is no transfer of data to countries outside the EU and the EEA.

Retention period

We delete or anonymise your personal data as soon as it is no longer needed for the purposes for which it was collected and processed, and provided that no other legal obligations require further storage.

Data required for commercial or tax law reasons or for the assertion or defence of legal claims and their enforcement in official or judicial proceedings will be stored until the corresponding statutory retention periods or limitation periods have expired or the proceedings have been legally concluded.

1.2 Registering an account

As a pewag dealer, you have the option to create a B2B account. To do so, you must register. All registrations are manually approved by one of our employees. Registration is intended for B2B customers only and consumer registrations will be rejected.

The information required for registration is clearly marked as a mandatory or optional field. We process this information to show you the right products at the appropriate prices, and you can also place orders via your account. 

For this purpose, we process the following data:

• A first and last name,

• name or pseudonym of the account

• company data as well as VAT number

• A home or other physical address, including street name and city/town name

• A telephone number

• An e-mail address

The legal basis

Data recipients

Your personal data will be processed by our relevant departments, such as IT, customer service and accounting, in accordance with the applicable data protection regulations, which they require to achieve the above-mentioned purpose.

We also forward your personal data to external service providers who support us in performing our activities; e.g. our e-commerce tool (Shopware, DE). These service providers work as processors and process the data exclusively in accordance with our instructions and the applicable data protection regulations.

The processing of the data that you voluntarily provide to us is based on your consent in accordance with § 107 TKG and Art. 6 para. 1 lit. a DSGVO.

Transfer to third countries

There is no data transfer to countries outside the EU and the EEA.

Retention period

Your data is stored in our B2B shop (Shopware) until you delete your account. If you cancel your user account, your data will be deleted from this account. The user is solely responsible for backing up data in the event of cancellation before the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract.

The data required for commercial or tax law reasons or for the assertion or defence of legal claims and their enforcement in official or judicial proceedings will be stored until the corresponding statutory retention periods or limitation periods have expired or the legal proceedings have been finally terminated.

Withdrawal

You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal can be sent to us informally by email to [dataprotection(at).pewag.com]. The lawfulness of the processing carried out until the withdrawal remains unaffected.

1.3 Orders

As soon as you place an order in our webshop, we process your data in order to execute this order.

For this purpose, we process the following data:

The legal basis

The data processing is carried out because it is necessary for the conclusion and fulfilment of online purchase contracts (Art. 6 para. 1 lit. b DSGVO) and for the fulfilment of legal storage obligations (Art. 6 para. 1 lit. c DSGVO).

Data recipients

Your personal data will be processed by our relevant departments, such as IT, customer service and accounting, in accordance with the applicable data protection regulations, which they require to achieve the above-mentioned purpose.

We also pass on your personal data to external service providers who support us in fulfilling our activities; e.g. our e-commerce tool (Shopware, DE), Apollon (DE), banking institutions, payment providers (Adyen, NL [Link]), logistics partners. These service providers act as processors and process the data exclusively in accordance with our instructions and the applicable data protection regulations. 

Transfer to third countries

There is no transfer of data to countries outside the EU and the EEA.

Retention period

The data that we process with your order will be stored for the period required by law, provided that statutory retention requirements do not preclude deletion and we do not need the data in individual cases to defend or enforce legal claims.

The data associated with your order and the specific transaction will be stored for a period of seven years in accordance with the statutory retention periods.

The data required for commercial or tax reasons or for the assertion or defence of legal claims and their enforcement in official or judicial proceedings will be stored until the corresponding statutory retention periods or limitation periods have expired or the proceedings have been legally concluded.

1.5 Creation and analysis of statistics to improve the website and/or web shop

If you have given your consent, the following web analysis tools are used on this website and/or web shop using cookies to analyse and improve the performance of our website and/or web shop, including evaluating your pseudonymous use of the website and/or web shop and creating reports on website and/or web shop activities:

For this purpose, we process the following data:

During your visit to our website, your user behaviour is recorded in the form of ‘events’. Events can be:

• Page views

• First visit to the website

• Start of the session

• Visited websites

• Your ‘click path’, interaction with the website Scrolls (whenever a user scrolls to the bottom of the page (90%))

• Clicks on external links

• Internal search queries

• Interaction with videos

• File downloads Seen / clicked on ads

• Language setting

• Your approximate location (region)

• Date and time of your visit

•  Your IP address (in truncated form) 

• Technical information about your browser and the end devices you use (e.g. language settings, screen resolution) 

• Your internet service provider 

• The referrer URL (via which website or advertising medium you came to this website)

• Purposes of processing 

We use Google Signals. This means that Google Analytics collects additional information about users who have activated personalised ads (interests and demographic data) and ads can be delivered to these users in cross-device remarketing campaigns. 

The legal basis 

Data processing is carried out on the basis of your consent in accordance with § 107 TKG and Art. 6 para. 1 lit. a DSGVO.

Data recipients

Your personal data will be processed by our responsible departments, such as IT and Marketing, which require them to achieve the above-mentioned purpose, in accordance with the applicable data protection regulations.

We also share your personal data with external service providers who support us in fulfilling our activities; e.g. digital marketing agencies. These service providers act as processors and process the data exclusively in accordance with our instructions and the applicable data protection regulations.

In addition, the data is also processed by the following web analysis services:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a processor according to Art. 28 GDPR),

• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, 

• Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, 

• Matomo, InnoCraft Limited New Zealand. 

Third-country transfer 

There is no data transfer to countries outside the EU and the EEA, neither in our internal data processing nor in the external data processing by our processors and the web analysis tool Matomo. For Matomo, we use the cloud solution offered here. The data we collect here is stored in Europe and will not be passed on to external parties.

On the other hand, when using Google Analytics 4, the data collected by means of cookies is usually transferred to a Google server in the USA and stored there. To ensure an adequate level of data protection here as well, the following protective measures are applied:

• For the USA, the European Commission adopted its adequacy decision on 10 July 2023. Google LLC is certified according to the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.

• For Google Analytics 4, the anonymisation of IP addresses is activated by default. Due to IP anonymisation, your IP address will be shortened by Google within member states of the EU or the EEA. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. According to Google, the IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.

Retention period 

Google Analytics

The data we generate and send and link to cookies will be automatically deleted or anonymised after 14 months. The maximum lifespan of Google Analytics cookies is 2 years.

The deletion or anonymisation of data whose retention period has been reached is carried out automatically once a month.

Matomo

The raw data we collect does not contain any personal data (IP addresses) that could be used to identify you as a person. These variables are either anonymised when they are accessed (e.g. by removing the last 6 digits of your IP address).

These raw data are deleted after 14 months. The data required for commercial or tax reasons or for the assertion or defence of legal claims and their enforcement in official or judicial proceedings are stored until the corresponding statutory retention periods or limitation periods have expired or the proceedings have been legally concluded.

Revocation

You can revoke your consent at any time with effect for the future by accessing the cookie settings [you can access the settings via the fingerprint icon in the bottom left-hand corner] and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a restriction of functionalities on this and other websites. You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser add-on for deactivating Google Analytics. 

For more information about the terms of use and data protection of the web analytics service providers, please visit:

• Google Analytics and Google: https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

• Matomo: Privacy Policy - Analytics Platform - Matomo

2. Cookies

This website uses cookies. A cookie is a small text file that can be stored on your computer when you visit a website. The cookies are used to provide the users with additional website functionality. They can, for example, be used to make it easier to navigate a website, to enable you to continue using a website where you left off, and/or to store your preferences and settings when you return to the website. Cookies cannot access, read or modify any other data on your computer. Most cookies on this site are ‘session cookies’ that are automatically deleted once you leave our site. ‘Persistent cookies’, on the other hand, remain on your computer until you manually delete them in your browser. We use such persistent cookies to identify you when you return to our site. If you want to manage cookies on your computer, you can set your browser to notify you when a website wants to store cookies. You can also block or delete cookies that are already stored on your computer. For more information on how to do this, please refer to the ‘Help’ function of your browser. We would like to point out that blocking or deleting cookies may affect your online experience and you may not be able to use all the features of our website.

2.1 Technical or essential cookies

Some cookies ensure that parts of our website work properly and that your user preferences remain known. By placing functional cookies, we make it easier for you to visit our website. This way, you do not have to repeatedly enter the same information when you visit our website, or your items remain in your shopping cart, for example, until you pay. We can place these cookies without your consent. 

2.2 Statistics cookies

These cookies are used to optimise the website experience for our users. They provide us with insights into how our website is used. We ask for permission to set static cookies.

2.3 Marketing cookies

These technologies are used by advertisers to serve ads that are relevant to your interests.

3. Data processing and storage

We take all possible measures to ensure that your data is stored securely and that unauthorised access to the data is not possible. All collected information is stored on our own servers or those of our partners, who are obliged to maintain the same level of data protection.

4. Your rights in relation to data processing

In principle, you have the right to information, correction, deletion, restriction of processing, data portability, revocation of consent and objection.

If you believe that the processing of your data violates data protection law or your data protection rights have otherwise been violated, you can file a complaint with the relevant national supervisory authority.

• The list of the respective national supervisory authorities can be found at: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en. 

• In Austria, this is the Austrian Data Protection Authority (https://www.dsb.gv.at/kontakt).

• pewag International GmbH, Gaslaternenweg 4, 8041 Graz 

• dataprotection(at)pewag.com