We welcome you to our website and appreciate your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable legal provisions for the protection of personal data, in particular the EU General Data Protection Regulation (EU GDPR) and the country-specific implementation laws applicable to us. With the help of this privacy policy, we inform you comprehensively about the processing of your personal data by LAA-Custom and your rights.

Personal data is the information that makes it possible to identify a natural person. This includes, in particular, name, date of birth, address, telephone number, e-mail address but also your IP address. Anonymous data exists if no personal reference can be established to the user.

Contents

1. Responsible body
2. Scope
3. Your rights as a data subject
4. General processing of your data
5. Processing of your data on this website
6. Processing of your data on registration
7. Processing of your data outside these propositions

1. Responsible body

Address:

LAA-Custom

Via Nicola Porpora 7
IT – 10155 Torino
Italy, EU

Website: https://www.laa-custom.com/contact.html

2. Scope

This privacy policy applies to the processing situation listed below. It does not apply to the handling of personal data within the employment relationship.

3. Your rights as a data subject

First, we would like to inform you about your rights as a data subject. These rights are standardised in Articles 15 – 22 of EU-GDPR. They include:

• Right of access (Art. 15 EU-GDPR),
• Right to erasure (Art. 17 EU-GDPR),
• Right to rectification (Art. 16 EU-GDPR),
• Right to data portability (Art. 20 EU-GDPR),
• Right to restriction of processing (Art. 18 EU-GDPR),
• Right to object to processing of data (Art. 21 EU-GDPR).

To assert these rights, please contact us on https://www.laa-custom.com/contact.html. The same applies if you have questions regarding data processing in our company. You have a right of appeal. If you already are a LAA-Custom customer, supplier or employee or former employee, you are also welcome to contact your known contact person. This may be the case, for example, if you wish to notify us of changes regarding your contact details.

Rights to object for direct advertising
Please note the following when it comes to rights of objection:
If we process your personal data for direct advertising purposes, you have the right to object to this data processing at any time without giving reasons. The same applies to profiling in so far as it is connected with direct advertising.

If you object to the processing of data for direct advertising purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made form-free, if possible to: https://www.laa-custom.com/contact.html

In the event we process your data to safeguard legitimate interests, you can object to such processing at any time for reasons arising from your particular situation – the same applies to profiling based on these provisions.

We will then no longer process your personal data, unless we can prove compelling reasons worth being protected for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.

4. General processing of your data

Generally-collected data from web-based applications and services

For the purpose of ensuring the security, availability and quality of our web-based services, we process the following data in accordance with Art. 6 para. 1 pt. f) EU-GDPR:

• Name of the internet service provider
• Information about the website from which you are visiting us
• Web browser and operating system used
• IP address assigned by your internet service provider (in anonymous form)
• Requested files, transferred data volume, downloads/export of files
• Information about the websites you visit within our internet presence, including date and time

These data are kept for as long as they are needed for the purpose.

Automated case-by-case decisions
We do not use any purely automated processing processes to arrive at any decisions.

Purposes of the processing
Regardless of the individual processing purposes, we reserve the right to process data if it is absolutely necessary for the assertion, exercise or defence of legal claims and if no legal provision precludes this.

Disclosure of personal data
Insofar as we are unavoidably affected by a requirement of disclosure by legal requirement or official order, in addition to the other recipients mentioned in detail, may be

• Regulatory, supervisory and other authorities
• Law enforcement agencies

5. Processing of your data on this website

Cookies
Our websites utilise cookies in several places. These are small text files which your browser stores on your computer (locally on your hard drive). The legal basis for the use of cookies is our legitimate, predominant interest in the respective processing in each of the uses described below (Art. 6 para 1 pt. f. EU-GDPR).

We use cookies to make our service more user-friendly, effective and safe. Furthermore, we use cookies, as they allow us to analyse how users use our websites. Thus, we are able to tailor the contents to the requirements of the user. Cookies also make it possible to measure the effectiveness of a particular advert and show us where best to place it depending, for example, on the topics the user is interested in.

Most of the cookies we use are so-called “session cookies”. These are automatically deleted after your visit. Permanent cookies are deleted from your computer automatically when their period of validity has expired or if you delete them yourself before they expire. Most web browsers accept cookies automatically. However, if you would prefer not to send this information you can usually change the settings on your browser.

Cookies are stored on your computer and transmitted to our site. This is why you as a user also have full control over the use of cookies. By changing the settings in your browser, you can deactivate or limit the transfer of cookies. In addition, already placed cookies can be deleted my means of an internet browser or other software programs at any time. This is possible in all common internet browsers. Please note: If you deactivate the setting of cookies, not all functions of our website may be fully usable.

Which cookies do we use?

Links to other websites
Our website may also include – clearly marked – links to the websites of other companies. If there are links to websites of other providers, we have no influence on their contents and their handling of personal data. Therefore, we shall not be responsible or liable for any of these contents. The respective provider or operator of the pages is always responsible for the content of these sites and the declarations of data protection valid there.

The linked-to pages were checked for any possible infringements or noticeable violations of the law at the moment of establishing the link. There were not any noticeable illegal contents at the moment of linking. A continuous control of the contents of the linked-to websites, however, is not reasonable without any specific evidence of a violation of the law. As soon as such violations of the law become evident, we will remove such links promptly.

User profiles / web tracking procedures
We use various analysis tools on our website to improve your user experience. The legal basis for this is Art. 6 Para. 1 pt. f. EU-GDPR. The individual tools are described in more detail below.

Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC., Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses “cookies”, text files that are stored on your computer to help the website analyse how users use the website. We use Google Analytics on the internet pages of the WIKA blog and the WIKA online shop. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

By activating IP anonymisation on this website your IP address will be truncated within the area of member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the whole IP address be first transferred to a Google server in the USA and truncated there.

Google will use this information on behalf of the operator of this website for the purpose of evaluating the use of the website, compiling reports on website activity for website operators and providing them with other services relating to website activity and internet usage. The IP address that your browser conveys within the scope of Google Analytics will not be associated with any other data held by Google.

Sessions and campaigns stop after a certain amount of time. By default, sessions will end after 30 minutes of no activity and campaigns after six months. The personal data of users will be deleted or anonymised after 14 months. For more information about Terms of Use and Privacy, please visit https://www.google.com/analytics/terms/gb.html and https://policies.google.com/?hl=en.

You may refuse the storage of cookies by selecting the appropriate settings on the browser; however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of the data generated by the cookie about your use of the website by Google, and the processing of these data by Google, by downloading and installing the available browser plug-in from the following link [https://tools.google.com/dlpage/gaoptout?hl=en].

Google also processes your personal information in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

6. Processing of your data on registration

We only process the data provided by you within the scope of the registration form for the execution or processing of the contractual relationship, unless you agree to further use.

The principle of data economy and data avoidance is observed by you only having to give us the data that we absolutely need to identify you and for acceptance of the non-disclosure agreement (i.e. your title, first name, surname, company, department, address, country, telephone number, e-mail).

Moreover, your IP address is processed for technical reasons and for legal protection. Without this data, we unfortunately have to refuse the conclusion of the registration, as we will then not be able to execute it. Of course, you are free to enter more data on your own accord if you wish.

By registering on our website, the IP address of the user, the date and the time of the registration are also stored (technical background data). By activating the button “Register” you consent to the processing of your data, insofar as they go beyond the compulsory information.

Please note: The password used by you is stored in encrypted form. Employees of our company cannot read this password. This is why they cannot give you any information if you have forgotten your password.

In this case please use the function “Lost password?”. Using this function, you will receive an automated link from us. You can then change your password by using this link. No employee is entitled to ask you for your password by telephone or in writing. This is why you should never give your password if you receive such requests.

After the creation of the customer account has been completed, your data is stored with us for the use of the protected customer area. As soon as you log in to our website with your e-mail address as user name and your password, this data is provided in our website for actions performed by you.

Any further access to your information by third parties is not intended by us. In particular, we will not sell your data or use it in any similar way. The legal basis is to secure modern, reliable and secure payment options, to fulfil the purchase contract with you in accordance with Art. 6 para. 1 pt. b. EU-GDPR. Irrespective of this, we will comply with our duty of notification as required by law or authorities; in these cases, we will forward the relevant information to the public authorities.

7. Processing of your data outside these propositions

Below we explain our handling of data from customers, suppliers, contractors and prospects outside the website.

Categories / origin of data
Within the framework of the contractual relationship outside the website and for the initiation of contracts, we process the following personal data:

• Contact details (e.g. first name/surname of the current and, if applicable, previous contact persons and title, company name and address of the customer (employer), telephone number with direct dial, business e-mail address)
• Occupational data (e.g., function in company, department)
• If necessary, bank details (as part of a SEPA direct debit mandate also the first/last name of the account holder)
• If necessary, preferred payment system, information on creditworthiness and credit behaviour
• If applicable, additional data, if you choose to provide us with this information

In principle, we will maintain your personal data from you as part of the initiation of the contract or during the current contractual relationship.

Purposes and legal bases of data processing
Even when processing your personal data outside the website, the provisions of the EU GDPR and other relevant legal provisions are always observed.

Your personal data will be used exclusively for the execution of pre-contractual measures (e.g. for the preparation of offers for products or services) and for the fulfilment of contractual obligations (e.g. for the performance of our services or for purchase order processing/order fulfilment/payment processing), (Art. 6 para. 1 pt. b EU GDPR) or if there is a legal obligation to process it (e.g. due to tax regulations) (Article 6 para. 1 pt. c. of the EU GDPR). For these purposes, the personal data were originally collected.

Of course, a legal data protection permission requirement may also constitute your consent to data processing (Article 6 para 1. pt. a. EU GDPR). Before issuing, we will inform you about the purpose of the data processing and about your right of withdrawal in accordance with Art. 7 (3) EU GDPR.

In rare cases, your data may also be processed for our legitimate interest in the enforcement, exercise or defence of legal claims.

Recipients of data/categories of recipients
Of course, the processing of your personal data outside the website will also ensure that only those individuals will receive the data they need to fulfil their contractual and legal obligations.

Data is generally collected, processed and used by us, in particular, if we guarantee it. In certain cases, however, your data is also collected, processed and used by other companies of the Divisia group (affiliate companies). This is carried out, in any case, in the event where customer relationships have a cross-border connection (also to countries outside the European Union) and the passing-on serves the fulfilment of the contract and related obligations.

In this case, too, service providers support our specialist departments in the fulfilment of their tasks, whereby the necessary data protection contract has been concluded with these service providers. In the case of processing outside the EU/EEC, the security of processing and the level of data protection is ensured through appropriate guarantees. For the appropriate guarantees, we implement:

• Adequacy decision of the European Commission (Art. 45 EU-GDPR)
• EU standard data protection clauses (Art. 46 para. 2 pt. c. and d. EU-GDPR)
• Associated internal company guidelines (Art. 47 EU-GDPR)

Last update: 01 October 2021