We, Lorencic Bauservice GmbH, attach great importance to the protection of your personal data. Therefore, in accordance with the applicable data protection regulations – in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG) – we provide you with information about the collection, processing and use of your personal data.

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. Detailed information on data protection can be found in the Privacy Policy below.

Data Collection on This Website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find the operator's contact details in the section "Information on the Data Controller" of this Privacy Policy.

How do we collect your data?

Some data is collected when you provide it to us. This may include, for example, data you enter into a contact form.

Other data is collected automatically or after you have given your consent when you visit our website. This primarily includes technical data (e.g. internet browser, operating system, or the time the page was accessed). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors.

Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to obtain information, free of charge and at any time, about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data.

If you have given your consent to data processing, you may withdraw this consent at any time with effect for the future.

Furthermore, under certain circumstances, you have the right to request the restriction of the processing of your personal data.

You also have the right to lodge a complaint with the competent supervisory authority.

If you have any questions regarding data protection or your personal data, you may contact us at any time.

Analytics Tools and Third-Party Tools

When you visit this website, your browsing behavior may be statistically analyzed. This is primarily done using analytics programs.

Detailed information about these analytics programs can be found in this Privacy Policy.

2. Hosting

We host the content of our website with the following provider:

Host Europe

The provider is Host Europe GmbH, Hansestraße 111, 51149 Cologne, Germany (hereinafter referred to as "Host Europe").

When you visit our website, Host Europe collects various log files, including your IP address.

Further information can be found in Host Europe's Privacy Policy.

The use of Host Europe is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in ensuring the reliable presentation of our website.

Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and, where applicable, Section 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting). Consent may be withdrawn at any time.

3. General Information and Mandatory Information

Data Protection

The operators of this website take the protection of your personal data very seriously.

We treat your personal data confidentially and in accordance with the applicable statutory data protection regulations and this Privacy Policy.

When you use this website, various personal data is collected. Personal data is information that can be used to identify you personally.

This Privacy Policy explains what data we collect, how we use it, and for what purpose.

Please note that data transmission over the Internet (e.g. communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the Data Controller

The controller responsible for data processing on this website is:

Lorencic Bauservice GmbH
Puchstraße 208
8055 Graz
Austria

Phone: +43 316 47 25 64-0

E-mail: headquarters@lorencic.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

Storage Period

Unless a more specific storage period has been specified within this Privacy Policy, your personal data will remain with us until the purpose for processing the data no longer applies.

If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. statutory retention obligations under tax or commercial law). In the latter case, deletion will take place once these reasons no longer apply.

Legal Basis for Data Processing

If you have given your consent, we process your personal data on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR where special categories of personal data are concerned.

If you have expressly consented to the transfer of personal data to third countries, processing is also carried out on the basis of Art. 49 (1) (a) GDPR.

If you have consented to the storage of cookies or access to information on your device, processing is additionally based on Section 25 (1) TTDSG.

Where your data is required for the performance of a contract or pre-contractual measures, processing is based on Art. 6 (1) (b) GDPR.

Where processing is necessary to comply with a legal obligation, it is based on Art. 6 (1) (c) GDPR.

Processing may also be carried out on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR.

The applicable legal basis for each individual processing activity is explained in the relevant sections of this Privacy Policy.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent.

You may withdraw your consent at any time. The legality of any data processing carried out prior to the withdrawal remains unaffected.

Right to Object to Data Processing (Art. 21 GDPR)

If your personal data is processed on the basis of Art. 6 (1) (e) or Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. This also applies to profiling based on these provisions.

The legal basis for each processing activity is explained in this Privacy Policy.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims (objection pursuant to Art. 21 (1) GDPR).

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. This also applies to profiling insofar as it is related to direct marketing.

If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21 (2) GDPR).

Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work or the place of the alleged infringement.

This right exists without prejudice to any other administrative or judicial remedies.

Right to Data Portability

You have the right to receive personal data that we process automatically on the basis of your consent or in fulfillment of a contract in a commonly used, machine-readable format.

Where technically feasible, you also have the right to request the direct transfer of your data to another controller.

Right of Access, Rectification and Erasure

Within the framework of the applicable legal provisions, you have the right at any time to obtain information, free of charge, about your stored personal data, its origin, recipients and the purpose of the processing.

You also have the right to request the correction or deletion of your personal data.

If you have any questions regarding personal data, you may contact us at any time.

Right to Restrict Processing

You have the right to request the restriction of the processing of your personal data.

This right applies in the following cases:

• If you contest the accuracy of your personal data stored by us, we generally require time to verify this. During this verification period, you have the right to request the restriction of processing.
• If the processing of your personal data is unlawful, you may request restriction of processing instead of deletion.
• If we no longer require your personal data, but you need it for the establishment, exercise or defense of legal claims, you may request restriction of processing instead of deletion.
• If you have objected pursuant to Art. 21 (1) GDPR, a balancing of interests between your interests and ours must be carried out. Until it has been determined whose interests prevail, you have the right to request the restriction of processing.

Where processing has been restricted, your personal data may—apart from storage—only be processed with your consent or for the establishment, exercise or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL / TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator, this website uses SSL or TLS encryption.

You can recognize an encrypted connection by the browser's address changing from "http://" to "https://" and by the lock symbol displayed in your browser's address bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to Promotional Emails

The use of contact data published within the scope of our legal notice for sending unsolicited advertising and informational material is hereby expressly prohibited.

The operators of this website expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails.

4. Data Collection on This Website

Cookies

Our website uses so-called cookies.

Cookies are small data files that do not cause any damage to your device.

They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted after your visit. Persistent cookies remain stored on your device until you delete them yourself or they are automatically removed by your web browser.

Cookies may originate from us (first-party cookies) or from third-party providers (third-party cookies). Third-party cookies enable the integration of certain third-party services within websites (for example, payment processing services).

Cookies serve various functions.

Many cookies are technically necessary because certain website functions would not operate without them (for example, shopping cart functions or video display).

Other cookies are used to analyze user behavior or for advertising purposes.

Cookies required for carrying out electronic communications, providing requested website functions or optimizing the website are stored on the basis of Art. 6 (1) (f) GDPR, unless another legal basis applies.

Where consent is requested, cookies are processed exclusively on the basis of Art. 6 (1) (a) GDPR and, where applicable, Section 25 (1) TTDSG. Consent may be withdrawn at any time.

You can configure your browser to notify you whenever cookies are set, allow cookies only in individual cases, exclude cookies in certain or all cases, or automatically delete cookies when closing the browser.

Please note that disabling cookies may limit the functionality of this website.

Further information about the cookies and services used on this website can be found in this Privacy Policy.

Server Log Files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

These include:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not combined with other data sources.

The collection of this data is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of the website. For this purpose, server log files must be collected.

Contact Form

If you send us inquiries via the contact form, the information you provide in the inquiry form, including the contact details you enter, will be stored by us for the purpose of processing your request and in the event of follow-up questions.

We will not share this data without your consent.

The processing of this data is based on Art. 6 (1) (b) GDPR, provided your request is related to the performance of a contract or is necessary for carrying out pre-contractual measures.

In all other cases, processing is based on our legitimate interest in the efficient handling of inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR) where such consent has been requested. Consent may be withdrawn at any time.

The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g. after your inquiry has been fully processed). Mandatory statutory provisions—especially statutory retention periods—remain unaffected.

Contact by Email, Telephone or Fax

If you contact us by email, telephone or fax, your inquiry, including all personal data resulting from it (such as your name and inquiry), will be stored and processed for the purpose of handling your request.

We will not disclose this data without your consent.

Processing is based on Art. 6 (1) (b) GDPR, where your inquiry is related to the performance of a contract or pre-contractual measures.

In all other cases, processing is based on our legitimate interest in the effective handling of inquiries (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), where applicable.

The data transmitted to us via contact inquiries will remain with us until you request deletion, withdraw your consent, or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.

5. Analytics Tools and Advertising

Matomo

This website uses the open-source web analytics service Matomo.

Matomo enables us to collect and analyze data about how visitors use our website. This allows us, among other things, to determine when individual pages were accessed and from which region visitors originated.

We also collect various log files (such as IP address, referrer, browser type and operating system) and can determine whether visitors perform certain actions (e.g. clicks or purchases).

The use of this analytics tool is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both the website and advertising.

Where consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and, where applicable, Section 25 (1) TTDSG. Consent may be withdrawn at any time.

IP Anonymization

We use IP anonymization with Matomo.

Your IP address is shortened before analysis so that it can no longer be directly attributed to you.

Hosting

We host Matomo exclusively on our own servers.

Therefore, all analytics data remains under our control and is not shared with third parties.

6. Newsletter

Newsletter Data

If you would like to subscribe to the newsletter offered on our website, we require your email address and information that enables us to verify that you are the owner of the email address provided and that you agree to receive the newsletter.

No further data is collected unless provided voluntarily.

This information is used exclusively for sending the requested information and is not shared with third parties.

The processing of the data entered into the newsletter registration form is based exclusively on your consent (Art. 6 (1) (a) GDPR).

You may withdraw your consent to the storage of your data, your email address and its use for sending the newsletter at any time, for example by clicking the "Unsubscribe" link contained in every newsletter.

The legality of the data processing already carried out remains unaffected by the withdrawal.

The data stored for the purpose of receiving the newsletter will remain with us until you unsubscribe from the newsletter and will then be deleted from the mailing list.

We reserve the right, within the scope of our legitimate interest pursuant to Art. 6 (1) (f) GDPR, to remove or block email addresses from our mailing list at our own discretion.

Data stored by us for other purposes remains unaffected.

After unsubscribing, your email address may be stored in a blacklist where necessary to prevent future mailings.

The blacklist data is used exclusively for this purpose and is not merged with other data.

This serves both your interests and our legitimate interest in complying with the legal requirements governing newsletter distribution.

Storage in the blacklist is not subject to any time limit.

You may object to this storage if your interests outweigh our legitimate interest.

Information for Customers and Suppliers

As part of our customer and supplier relationships, we process the following categories of personal data:

• Name
• Address
• Contact details (telephone number, fax number, email address, including contact persons)
• Internal customer or supplier information (e.g. customer/supplier number, category or classification)
• Details relating to supplied goods and services
• Payment information such as payment terms and discount agreements

If you are not in direct contact with us as a customer or supplier but we nevertheless process your personal data for the performance of a contract, such data has been provided to us by persons authorized by you (e.g. processors, construction companies or intermediaries).

Purpose of Data Processing / Disclosure of Data

We process your personal data for the performance of contracts and pre-contractual business activities on the basis of Art. 6 (1) (b) GDPR.

In addition, we have a legitimate interest in using data for statistical analyses in order to continuously improve and adapt our products and services to market requirements.

We also have a legitimate interest pursuant to Art. 6 (1) (f) GDPR in keeping customers and suppliers informed about new products, services and company news by means of regular newsletters.

Further information can be found in the Newsletter section of this Privacy Policy.

You may object to receiving these newsletters at any time.

For the execution of processing activities, personal data may be disclosed to:

• IT service providers supporting our IT infrastructure
• Freight forwarders and logistics providers for product delivery
• Service providers responsible for sending newsletters

Personal data will not be disclosed to other third parties unless required for the establishment, exercise or defense of legal claims before a court or public authority.

In such cases, the data will be deleted immediately after completion of the respective proceedings.

Retention Period

In Austria, statutory retention periods apply to business documents, which we comply with accordingly.

Unless another legal basis requires longer storage, personal data will be deleted without undue delay.

This does not apply where the data is required for the establishment, exercise or defense of legal claims before courts or public authorities.

Information for Event Participants

When participating in our events, we may process the following personal data:

• Name
• Address
• Contact details (telephone number and email address)
• Areas of interest
• Photographs documenting the event

Purpose of Data Processing / Disclosure of Data

By attending or registering for one of our events, you consent to the processing of your personal data in accordance with Art. 6 (1) (a) GDPR.

We use your personal data for organizing and managing the event and, where appropriate, for contacting you.

Photographs taken during the event may also be published.

Before publication, the content of each photograph is carefully reviewed to ensure that your personal rights are protected.

In general, such photographs are used for documentation and reporting purposes.

Where necessary, the event organizer and our IT service providers may receive access to the personal data required for processing.

No disclosure to additional third parties will take place unless legally required for the establishment, exercise or defense of legal claims.

In such cases, the data will be deleted immediately after the proceedings have been completed.

Retention Period

Following completion of the event, your personal data will be deleted without undue delay unless statutory retention obligations or other legal grounds require continued storage.

The same applies where personal data is required for the establishment, exercise or defense of legal claims before courts or public authorities.