Data Protection Statement
A. General
We, Liebherr-Purchasing Services GmbH, Hans-Liebherr-Strasse 45, 88400 Biberach/Riss, Germany, (referred to in the following as 'Liebherr'), are pleased that you have visited out website at www.liebherr.com/liebherrshop (referred to in the following as 'Liebherr shop') and are grateful for the interest you have thus shown in the Liebherr Group. We place great importance on the protection and security of your personal data (referred to in the following as 'data'). We therefore find it important to provide you with information on which data we collect during your visit to the Liebherr shop, how we use this data and what rights you have with regard to your data.
Please take the time to read through this Data Protection Statement.
B. Data Processing
I. Who is responsible for the processing of my personal data?
The responsible party for the processing of your personal data is
Liebherr-Purchasing Services GmbH
Hans-Liebherr-Strasse 45
88400 Biberach/Riss, Germany
Tel: +49 (0) 7351 41 4982
Fax: +49 (0) 7351 41 4978
E-mail: [email protected]
II. Who is the Data Protection Officer at Liebherr?
Data Protection
Liebherr-IT Services GmbH
Oberopfingen, St. Vitus 1
88457 Kirchdorf an der Iller, Germany
E-mail: [email protected]
III. What data do we process, for what purpose and on what legal basis?
Data is information from which we can create a direct or indirect reference to your person, for example your first name and surname, sex, address, telephone number, date of birth or e-mail address.
1. Log Files
When you visit the Liebherr shop, your Internet browser will transfer the following data to our web server, which we store in so-called log files:
• date of access
• time of access
• URL of the referring website
• data retrieved
• data quantity transmitted
• Browser type and version
• Operating system
• Domain name of your Internet access provider
• IP address
We process this data for the following reasons:
a. In order to discover, trace and stop cases of misuse of the Liebherr shop and thus to ensure data security on our web servers and
b. In order to fulfil legal obligations and/or uphold legal claims, particularly in order to be able to fulfil surrender claims from security authorities based on the corresponding national and international laws or other requirements.
The legal basis for the processing is Art. 6 (1f) ('safeguarding the legitimate interests' of Liebherr) and Art. 6 (1c) ('fulfilment of a legal obligation') of the General Data Protection Regulation (GDPR).
2. Ordering in the Liebherr shop
To initiate, place and process your orders in the Liebherr shop and to meet our legal commitments, arising from tax law or other legal obligations, we collect the following data from you:
• first name, surname, company, address, postcode, town, region, customer number, e-mail address, type of payment, amount, date and time of the payment.
a. When paying by credit card (MasterCard/Visa), the following information is also collected (see IV.1.):
credit card holder, type of card, credit card number, credit card expiry date (month and year), credit card CVC, payment amount, reference line, date/time
b. When paying by debit card (VISA Electron, Postepay, Servired, Carte Bleue, Dankort, Maestro, V-Pay, etc.), the following information is also collected from you (see IV.1.):
debit card holder, debit card number, debit card expiry date (month and year), debit card CVC, payment amount, reference line, date/time
c. When paying by Giropay or Sofortüberweisung [immediate bank transfer], the following information is also collected from you (see IV.1.): bank, IBAN, BIC.
The legal basis for the processing is Art. 6, paragraph 1, letter b (“Performance of a contract” between you and Liebherr), Art. 6, paragraph 1, letter f (“Legitimate interests” of Liebherr) and Art. 6, paragraph 1, letter c (“Compliance with a legal obligation”) of the General Data Protection Regulation (GDPR).
a. If you are an entrepreneur, as part of your order we also collect the following data: Company name, VAT number
We use these data to verify your business status with the Bundeszentralamt für Steuern [Federal Central Office for Taxes].
The legal basis for the processing is Art. 6, paragraph 1, letter b (“Performance of a contract” between you and Liebherr), Art. 6, paragraph 1, letter f (“Legitimate interests” of Liebherr) and Art. 6, paragraph 1, letter c (“Compliance with a legal obligation”) of the General Data Protection Regulation (GDPR).
b. If you are an employee of a Liebherr company, as part of your order we also collect the following data: Personnel number, Liebherr company by which you are employed
We process this data for the purpose of collecting tax-relevant data (in particular granted discounts) on employee purchases and sending it to your employer, as the discounts you receive here depend on the respective local legislation, e.g. as a so-called monetary benefit upon which you can be taxed.
The legal basis for the processing is Art. 6, paragraph 1, letter c (“Compliance with a legal obligation”) of the General Data Protection Regulation (GDPR).
IV. To whom and for what purposes do we send your data?
1. Payment processing by service providers
As we do not process your payment ourselves, the collection, processing and storage of data for completing the electronic payment is carried out exclusively by our partner, Heidelberger Payment GmbH, Vangerowstraße 18, 69115 Heidelberg, Germany (hereinafter referred to as Heidelpay). As part of the processing of the electronic payment, Heidelpay obtains the following data directly from you in connection with your order:
a. For completing the payment and any reverse transactions, the following information is sent by you to Heidelpay: first name, surname, company, address, postcode, town, region, e-mail address, transaction amount, date and time
b. When paying by credit card (MasterCard/Visa), the following information is also sent by you to Heidelpay: credit card holder, type of card, credit card number, credit card expiry date (month and year), credit card CVC, payment amount, reference line, date/time
c. When paying by debit card (VISA Electron, Postepay, Servired, Carte Bleue, Dankort, Maestro, V-Pay, etc.), the following information is also sent by you to Heidelpay: debit card holder, debit card number, debit card expiry date (month and year), debit card CVC, payment amount, reference line,
d. When paying by Giropay or Sofortüberweisung [immediate bank transfer], the following information is also sent by you to Heidelpay: bank, IBAN, BIC.
The data processing takes place on behalf of Liebherr. At no time can credit card numbers and credit card CVCs or debit card numbers and debit card CVCs be seen in full by Liebherr.
3. Other third parties
To supply the Liebherr shop we also use the support of service providers to whom, in order to carry out the tasks requested of these by us, we may, if necessary, have to make your data available. These service providers are only entitled to process this data as specified by us and have been obliged by us to delete this data after performing the service agreement or fulfilling the purpose.
V. Will my data be processed outside the European Union?
No. We only process your data within the legally permitted scope inside the European Union on servers in Germany.
VI. When will you delete my data?
Your data will be deleted if its processing is no longer required for the purposes described in this data protection statement; legal conditions do not require longer storage; you did not place an order within 24 hours of your first visit to the Liebherr shop or you deleted your user account with Liebherr-IT Services GmbH and no other legal basis permits its processing.
C. Data security
We use technical and organisational security measures in order to ensure that the data of our users is protected from loss, incorrect modification and unauthorised access by third parties. Moreover, on our part, only authorised persons will ever have access to your data and they can only access it to the extent required within the framework of the purposes named above. All data is transferred in encrypted form.
D. Cookies
Liebherr uses so-called cookies in order to recognise your preferences and achieve optimum site design. This makes navigation easier and ensures a high level of user friendliness for the Liebherr shop
I. What are cookies?
Cookies are small files that are stored on your terminal device. They can be used in order to determine whether communication has already taken place between your terminal device and our website. Only the cookie is identified on your terminal device. Personal data can then be stored in cookies should you have given your consent or if this is technically essential, e.g. in order to allow a protected login.
Further information on cookies is available at www.allaboutcookies.org.
II. What do we use cookies for?
We use cookies in order to improve user-friendliness and traceability for our customers and the online experience.
We do not use your cookies in order to track your Internet activity.
III. What kind of cookie do we use and what is their purpose?
Session cookies
Session cookies are deleted when the browser is closed. They record navigation on the website and the length of the visit and store the contents of your registration information for the duration of the visit to the website. Session cookies also keep your login active during the session.
IV. Can I delete cookies that are stored on my terminal device?
You can delete the cookies that are saved for the Liebherr shop. However, this will cause you to lose your individual data and contents, including your cookie settings, and you will not be recognised as a returning visitor when you next visit our website.
V. Do you agree to the use of our cookies?
Some online features are part of the user concept on our website, designed to make your visit as pleasant as possible. However, these only work with the help of cookies. Continued navigation on our website indicates your agreement to the use of these cookies. You can revoke your agreement at any time.
VI. How can I revoke my agreement regarding cookies?
If you do not want us to recognise your terminal device, you can prevent the storage of cookies on your hard disk by selecting 'do not accept cookies' in your browser settings. Please refer to the instructions from your browser producer for more details.
You can set your browser so that cookie storage is only accepted if you give your agreement. If you do not want to accept cookies from our service providers then you can select the setting 'block cookies from third party providers' in your browser.
You can usually search in the help function in the menu of your web browser to find out how to reject new cookies or deactivate those you have already received.
However, please note that some 'important' cookies are essential for unimpeded navigation on our website and for selection and design. We only use these cookies to check website efficiency and record visit frequency.
E. Rights of Affected persons and Right of Appeal
Within the legal framework, you have the right to
• Information on your data.
• The correction of incorrect data and the completion of incomplete data.
• The deletion of your data, especially should this no longer be required for the purposes named in this data protection statement; you revoke your consent and there is no other legal basis for the processing; your data was processed illegally or you have filed an objection to the processing and there are no overriding reasons for such processing.
• Limitation of the processing of your data, especially should you dispute the accuracy of the data or the processing of your data is illegal and you demand limitation of use in place of deletion.
• The right to receive your data in a structured, standard and machine-readable form and to demand that we transfer your data directly to another responsible party.
You also have a right of appeal with the responsible supervisory authority.
As of October 1st, 2019