Data Privacy Statement
Data protection manager
Responsible person for the data processed in connection with this website:
9200 Gossau SG
Depending on the circumstances (direct communication, orders etc.) the responsibility lies with one of the following persons:
Phone +41 71 388 58 58
Blumer-Lehmann S.à r.l
31, Op der Heckmill
T + 352 2880454-0
Am Wäldle 3
+49 8232 9597 870
+49 2225 91130 - 0
T +49 160 3623069
Lehmann Holzwerk AG
Phone +41 71 388 58 00
In case of doubt about the controllership, the request can be addressed to Blumer Lehmann (Erlenhof AG).
Data Protection Manager in the EU
Blumer-Lehmann S.à r.l
31, Op der Heckmill
T + 352 2880454-0
General Information on Data Processing
Extent of Processing of Personal Data
We only ever process our users’ personal data where this is necessary to provide a properly functioning website, along with our content and services. Our users’ personal data is processed regularly and only with the users’ consent. An exception applies in cases where it is not possible to obtain the prior consent of users for de facto reasons and data processing is permitted by statutory regulations.
Data Deletion and Storage Period
The data subject’s personal data will be deleted or blocked as soon as the purpose for which it was stored ceases to apply. The data might be stored for longer if this has been stipulated by the European or national legislators within Union regulations, laws or other requirements to which the responsible party is subject. The data is also blocked or deleted if a storage period stipulated by the standards mentioned expires, unless there is a continued need to store the data in order to enter into a contract or for the performance of a contract.
Making the Website Available and Creating Log Files
Each time our website is visited, our system automatically collects the data and information from the operating system of the requesting computer. The following data enables assignment to a user and is collected at this point:
- type and version of the browser used
- user’s operating system
- user’s Internet Service Provider
- user’s IP address
- date and time of access
- websites from which the user's system accesses our Internet site
- websites accessed by the user's system through our website
The data is also stored in our system’s log files. This data is not stored together with other personal data pertaining to the user.
The IP address needs to be stored by the system in order to make the website available to the user’s computer. The user’s IP address must remain stored for the duration of the session for this purpose. In addition, the data is stored in log files, in order to ensure the functionality of the website. The data is used to optimize the website and to ensure the security of our IT systems. These purposes also include our legitimate interest in data processing. The legal basis is thus Article 6 Paragraph 1 Point f of the GDPR (EU’s General Data Protection Regulation).
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Where the data is stored in order to make the website available, this takes place when the respective session is ended. In the case of log files, the data is stored in rolling log files, with older entries being automatically deleted. The storage duration is thus dependent on the circumstances and cannot be restricted accordingly in terms of time. In general, it can be assumed that the data will be deleted after one year at the latest, although storage beyond this time is possible.
It is vital to store the data in order to make the website available, and the data must be stored in log files in order to operate the website. Users therefore have no possibility to object to processing of this personal data.
Usage of cookies
Technically Necessary Cookies
Storage period, possibility of objection and removal
With regard to technically unnecessary cookies, we also refer you to the explanations below.
Third Party Services (Plugins)
We use the service Google Analytics on our website. This is a service provided by the US company Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, resp., for European users, the Irish company Google Limited Ireland, Gordon House, Barrow Street, Dublin 4, Ireland. We have concluded a data processing agreement with Google.
Google Analytics is a web analysis service. Web analysis is the measurement, collection, analysis and reporting of data on visitors' behaviour on websites. A web analysis service collects data, among other things, from which website a data subject came to another website (so-called referrers), which subpages of the website were accessed or how often and for how long a subpage was viewed.
The information created by Google Analytics is usually transmitted to a Google server in the USA, where it is stored. Google uses this information on our behalf to evaluate the use of the website, compile reports on website activities and to provide services associated with the use of the website and the use of the Internet for us. The IP address transmitted by the browser in Google Analytics is not merged with other data from Google.
This data processing therefore takes place on the basis of our legitimate interest in analysing user behaviour in order to optimise both our website and our advertising. The legal basis is therefore Art. 6 para. 1 lit. f GDPR.
You can prevent cookies from being stored by making a corresponding setting in the browser software you use, but you might then not be able to use all of the functions of this website to the full extent. In addition to the changes in browser settings, you can also use a browser plug-in to object to the processing of data. This plugin is available at https://tools.google.com/dlpage/gaoptout.
Please refer to the Google’s data privacy statement for details on data processing by Google and your possibilities to object: https://policies.google.com/privacy?gl=de
The use of Google Maps is based on our legitimate interest in optimizing the functionality of our website and in finding the locations given on our website more easily. The legal basis is thus Article 6 Para 1 lit. f of the GDPR.
jQuery / Google Hosted Libraries
The use of Google Hosted Libraries is in the interest of an appealing presentation and a short loading time of our website. In addition, by using Google Hosted Services we make sure that we always use a patched version of jQuery, which increases security. Those are our legitimate interests for this data processing based on Art. 6 Para. 1 lit. f GDPR.
Services provided by Facebook
We use services of the social network Facebook. Facebook.com is a service provided by Facebook, Inc. 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the person responsible for processing personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Whenever the user accesses a subpage of this website, on which a Facebook component (Facebook plug-in) has been integrated, his Internet browser automatically downloads a representation of the corresponding Facebook component from Facebook. Thus, Facebook obtains information about which specific subpage of our website is visited by the data subject.
If the data subject is logged into Facebook at the same time, Facebook can assign this data to the respective Facebook account of the data subject. If the data subject interacts with one of the Facebook plugins (e.g. clicking on the "Like" button), Facebook also assigns this information to the personal Facebook user account of the data subject.
This data processing is based on our legitimate interest in linking our Facebook presence and content to our website. The legal basis is therefore Art. 6 Para. 1 lit. f GDPR.
We use YouTube on our website. This is a video portal operated by YouTube LLC, 901 Cherry Ave, 94066 San Bruno, CA, USA. YouTube is a subsidiary of the aforementioned Google LLC.
When you click on a YouTube video, your IP address is transmitted to YouTube and YouTube obtains information that you viewed the video, the date and time it was played, and the website on which the video was embedded. If the data subject is logged in to YouTube when starting a YouTube video, YouTube will assign the connection information to the data subject’s YouTube account. To prevent this, the data subject you must either log out of YouTube before starting a video on our site or make the appropriate settings in your YouTube account.
YouTube permanently stores cookies on your device via your browser. You can prevent cookies from being stored by making a corresponding setting in the browser software you use.
This data processing is necessary to be able to display YouTube videos on our website within your browser. The legal basis is therefore Art. 6 Para. 1 lit. f GDPR and our legitimate interest in in improving the quality of our website.
Further information about the collection and use of data as well as the data subject’s rights and protection options can be found at https://policies.google.com/privacy
You can subscribe to a free newsletter on our website. The data from the input screen is transmitted to us when you apply for the newsletter. In addition to the e-mail address, the IP address of the computer to be called up, as well as the date and time of registration are collected.
The data required is entered via a service provided by the Swiss company Mayoris AG, Suurstoffi 16, 6343 Rotkreuz, with whom we have concluded a contract for order data processing. Using Mayori, we also collect data, specific to the user, on whether and when our newsletter has been opened and whether the links it contains have been clicked (performance measurement by means of opening and click rates).
You can find more detailed information on data processing by Mayoris at https://www.mayoris.com/data-privacy/.
The user’s e-mail address is collected in order to deliver the newsletter. The data entered in conjunction with the performance measurement is used to further optimize our content in the future.
For the presented processing of data, your consent is obtained during the dispatch process, and you are referred to this data privacy statement. The legal basis is thus Article 6 Paragraph 1 Point a of the GDPR.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user’s e-mail address is therefore stored as long as the subscription to the newsletter is active. The user concerned can cancel the subscription to the newsletter at any time. Each newsletter contains a corresponding link for this purpose.
Contact Form and Contact by Email
Our website provides forms enabling you to contact us by electronic means. If you take advantage of this option, the data entered in the input screen is transmitted to us and stored. This data is:
- First name and last name
- Address (Street, ZIP code, City, Country)
- E-mail address
- Phone number
- Individual message
- Event-specific data (application etc.)
To process the data, your consent is obtained during the transmission process, and you are referred to this data privacy statement.
Alternatively, you can make contact using the e-mail address provided. In this case, your personal data transmitted to us in the e-mail is stored.
We only process personal data from the input screen in order to process establishing contact. If you contact us via e-mail, this also constitutes the required legitimate interest pursued in processing the data. The other personal data processed during the transmission procedure is used to prevent the contact form from being misused and to ensure that our IT systems are secure. Depending on the circumstances, data processing is based on the consent of the user, the implementation of pre-contractual measures, the performance of a contract and/or to safeguard our legitimate interests. The legal basis for data processing is accordingly Article 6 Paragraph 1 Points a, b and/or f of the GDPR.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. With regard to the personal data from the input screen of the contact form and the data that has been sent by e-mail, this is the case once the respective conversation has ended with the user. The conversation is considered ended once it has been established from the circumstances that the matter in question has been fully clarified.
Users can revoke their consent to the processing of their personal data at any time. If a user contacts us via e-mail, they can object to the storage of their personal data at any time. The conversation may not be continued in such cases. All personal data that has been stored during contact is then deleted, unless it needs to be stored in order to comply with contractual or legal obligations.
Rights of the Data Subject
If your personal data is processed, you are the person concerned and you have the following rights against the responsible party:
- Right to confirm whether the data concerning you should be processed, right to information on the processed data, right to further information on data processing as well as right to copies of the data (Article 15 of the GDPR);
- Right to correct and complete incorrect or incomplete data (Article 16 of the GDPR);
- Right to immediate deletion of data concerning you, or, if further processing is necessary, to restriction of processing (Articles 17 and 18 of the GDPR);
- Right to receipt of data concerning you and provided by you and to transmit this data to other providers/responsible parties (Article 20 of the GDPR);
- Right to receive the personal data concerning you that you have provided to the responsible party in a structured, current and machine-readable format.