- The protection of personal information (data) of users (data subjects or persons concerned by the data processing) of the website(s) is very important to Lenzing AG (“Lenzing”, “us”, “we”). If Lenzing processes data during the use of the website(s), this is done solely on the basis of the relevant statutory data protection regulations, in particular the European General Data Protection Regulation (GDPR) and the Austrian Data Protection Act.
- If you voluntarily disclose personal information as part of the use of this website, the data is used solely for the purpose that is clearly apparent in each case. Hence, Lenzing processes personal data, comprising title, name, job description, company, address, phone, facsimile, email address, details on your procurement (type of report, year, duration and language), type of delivery (by mail or via email) and comments for responding to a procurement request; data will be processed for a maximum of three years.
- In case that you voluntarily make use of our supplier application platform on this website, Lenzing processes your name, address, phone, facsimile, email, homepage, VAT-number, currency, plants which can be supplied for, contact (title, name, language, function, phone, mobile, facsimile, email), product range, description of supplier (legal form, including (part of) group of companies, annual revenue, number of employees, year of establishment, other locations, details on the relationship to Lenzing, manufacturer/distributer, references) and provided documents as well as the withdrawal of the consent by supplier for the performance of the application process. After the application process has been completed, data will only be further processed by us in case that we will engage you as our new supplier. Otherwise, they will be deleted. In case that, by using this service, you disclose personal data of third person (e.g. an employee of the supplier applying), you ensure that you have obtained consent of this person to disclose his or her data to us or that you process his or her data on any other legal basis, such as legitimate interests and, hence, have the right to the disclosure of these data.
- As part of the “https://brandingservice.lenzing.com” program, we process the personal data of our business partners as set out below, but also the data of those who process and sell our products (and their employees), or products in which our products are used. Based on the nature and purpose of the program (verifying whether the criteria for licensing or certification have been met, advertising for Lenzing products and advertising with the company name of firms which process or sell Lenzing products), this information is also processed to provide information about developments, events and Lenzing products and services. This comprises the following data: Name, gender, and contact details (email, telephone, etc.). The personal data of the person represented by me is: Name/Company name, identifiers (registration or tax number, etc.), address, contact person, supplier, product category, products, materials and manufacturing process and connection with Lenzing brands.
- As part of the "Growth Partnerships" Program, we (and in case of a cooperation with a respective group company also this company) process the personal data listed below in the CANVAS (Partner for a better future) contact form of our (potential) business partners. This information is processed due to the nature and purpose of the Growth Partnerships Program for the validation and evaluation of possible cooperation and their strategic fit for the Lenzing Group. This involves the following personal data: Name, contact information, company name, description of the economic challenge, market data, unique selling proposition, business idea, market entry barriers, existing alternatives, customer segments, alternative suppliers, early adopters, value chain, distribution channels, resources and sales and break-even analyses, Start-Up Team Data (number of employees, roles in the company etc.)“, support information, filed files (such as business plans or customer presentations), resources, result of the evaluation and assessment process, date of (re-)evaluation. The data processing takes place on the legal basis of the initiation of a possible contract conclusion with the business partner, who uses the CANVAS contact form, which takes place due to a request by the data subject himself (Art. 6 para. 1 lit b GDPR). The provision of the personal data is necessary to enter into a possible contract with Lenzing, the failure to provide such data would have the consequences that a contract cannot be concluded and therefore no cooperation with the business partner can be entered into. In the case of the conclusion of a contract, the data relevant for accounting purposes will be deleted seven years after the collection of the data. All other data relating to the conclusion of a contract will be deleted at the end of the contractual relationship. If the data subject agrees that in case a contract with Lenzing AG (or one of the group companies) is (currently) not being concluded, the personal data is going to be stored for a period of three years, in order to enable the documentation of the business idea for a possible cooperation in the future, the processing takes place exclusively on the basis of this freely given consent (Art. 6 para. 1 lit a GDPR). However, the data subject can withdraw the consent given to the further storage of the data at any time without affecting the lawfulness of processing based on consent before its withdrawal. The data will be transmitted to internal evaluators and external consultants as part of the evaluation process and to our service partners, who are responsible for hosting the website and providing the portal. If a cooperation with one of our other group companies of the Lenzing Group (https://www.lenzing.com/de/lenzing-gruppe/standorte/) is an option, we transmit the data to this group company for this purpose. If the company is located outside the European Economic Area, the personal data will be transferred to a third country. In this case, we have concluded standard contractual clauses with the companies of the Group - a copy of the clauses will be sent to you upon request to [email protected].
- Personal data is stored within the European Union and will not be transferred, unless explicitly stated in other applicable data privacy policies by Lenzing. The website is hosted by our external service provider MMCAGENTUR für digitale Kommunikation GmbH, who has been contractually bound by us to process data confidentially and only on our behalf and our instruction. In case that we change our service provider, we will ensure adequate protection of your information also by our newly selected partner.
- This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on the user's computer and allow the use of the website to be analyzed. Information about the use of this website generated by the cookie is generally transferred to a Google server in the USA and stored there. Google will use this information on behalf of the operator of this website to evaluate how the website is used, compile reports about activities on the website and to provide services associated with use of the website and the internet to the website operator. The IP address transferred by Google Analytics from the user's browser will not be combined with other data from Google. However, cookies are not activated by the website unless and until the user of the website has expressly stated his or her consent by accepting the text in the cookie banner. Additionally, and after consent has been provided, cookies being stored may be prevented by adjusting the settings in their browser software; however, we would point out that this may prevent all the functions of this website from being used to their full extent. Furthermore, users can disable the collection and transmission of data (including their IP address) generated by the cookie and relating to their use of the website to Google, and the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en. This website has been expanded with the function gat._anonymizeIp(); to ensure that IP addresses are recorded in anonymised form (so-called IP masking).
- Other cookies may also be used on the Lenzing website(s) which are stored by the browser on the user's computer. These cookies are used solely for the purpose of ensuring that the various functions of the website(s) can be used optimally by the user. These cookies are in principle deleted as soon as the user closes the browser. Some of the Lenzing websites offer users the option of using functions individually (e.g. the function of the “Personal Edition” website(s)). In order to store the user's individual preferences on the website(s), the cookies required for this remain until they expire or are deleted manually. The use of cookies can also be completely deactivated in the settings of the respective browser software. In this case, there is the possibility that not all of the functions of the website(s) can be used to their full extent.
- The Lenzing website(s) may contain links to other websites, which are not operated by Lenzing, such as social networks, including “Facebook”, “Google Plus”, “Twitter”, “LinkedIn”, “Xing”, “Google+”, “Instagram”, “Pinterest”, “WeChat”, “YouTube”, “Vimeo”, “Snapchat”, “Slideshare” and “WhatsApp”. Lenzing has no influence on the collection of data by the respective operators of the social networks. Information on the extent and use of the data collected can be found in the data policies of the relevant social networks.
- Lenzing will review this Data Policy on a regular basis. It may be necessary from time to time to make amendments to the Data Policy. The latest version of the Data Policy will be published on the Lenzing website(s).
- Lenzing complies with all data protection measures imposed by law to their full extent.
- Data subjects have the right to access their personal data processed by Lenzing, to have the data rectified, erased and port to other data controllers as well as to object to and to restrict the processing of their personal data. If the data processing is based on consent, they also have the right to withdraw the consent. Data subjects can assert their aforementioned personal rights at any time at [email protected].
- Eventually, data subjects have the right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at) or any other competent Data Protection Authority.
