This Privacy Policy informs you about the nature, scope and purpose of the processing of personal data (hereinafter “data”) within our offering and the associated websites, functions and content, as well as external online presences.
1. Controller
S.A.M. KUCHLER Electronics GmbH
Klatteweg 4-6, 9020 Klagenfurt am Wörthersee, Austria
E-mail: office@sam-kuchler.com
Management: Constantin Kuchler, B.A., Valentina Kuchler, LL.M. (WU)
Legal notice: https://www.sam-kuchler.com/impressum/
Data protection is an important topic for the entire Kuchler Group. All employees of the Kuchler Group are subject to confidentiality obligations and the provisions of data protection law.
2. Categories of data processed:
Depending on how you use the website and whether you contact us, we process in particular:
– Contact data (e.g. name, e-mail address, phone number, company, job title/function)
– Communication/content data (e.g. messages via contact forms/e-mail, correspondence, files/photos/videos you provide)
– Usage data (e.g. pages visited, interactions, access times)
– Device/meta/communication data (e.g. browser type, operating system, referrer URL, cookie IDs; technical IP information within server logs)
3. Categories of data subjects
– Visitors and users of our website
– Prospective customers, customers, suppliers and other business partners, as well as their contact persons
4. Purposes of processing
– Operation and provision of the website (including security and troubleshooting)
– Handling enquiries and communication
– Reach measurement and optimisation of our online offering (only with consent)
– Marketing, campaign measurement and retargeting (only with consent)
5. Contact via contact form / e-mail & CRM (enquiry management)
If you contact us via the contact form or by e-mail, we process the data you provide to handle your enquiry and for further communication.
We store enquiries and the related correspondence in our CRM system in order to process enquiries in a structured manner, enable follow-up communication, and document our customer and prospect relationships.
Legal basis:
– Art. 6(1)(b) GDPR (pre-contractual measures/contract), where the enquiry relates to initiating or performing a contractual relationship, and
– Art. 6(1)(f) GDPR (legitimate interest in efficient handling, documentation and traceability of communication), where it concerns other enquiries.
Retention period:
We delete enquiries as soon as they are no longer required for processing, unless statutory retention obligations or overriding legitimate interests (e.g. evidence, establishment/exercise/defence of legal claims) prevent deletion.
6. Server log files (hosting)
Each time you access our website, technically necessary information is processed by our hosting provider and/or by us (e.g. IP address, date/time, page/file accessed, user agent/browser, referrer URL).
Purpose: operation, security, troubleshooting and prevention of misuse.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Retention period: generally short-term; log data is deleted as soon as it is no longer necessary for the stated purposes.
7. Cookies / consent management
We use cookies and similar technologies.
We use technically necessary cookies, where required, without consent.
All non-essential cookies/technologies (in particular statistics and marketing) are used only after your prior consent (Section 165(3) TKG 2021).
You can withdraw or change your consent at any time via the cookie settings.
8. Google Tag Manager (GTM)
We use Google Tag Manager to manage website tags. Tag Manager itself generally does not set tracking cookies; however, services implemented via Tag Manager may set cookies or process data (e.g. Google Analytics, Meta Pixel).
Legal basis: depending on the implemented service (see below), typically consent (Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021) for non-essential tracking.
9. Google Analytics 4 (GA4)
We use Google Analytics 4 for statistical analysis of website usage (e.g. page views, interactions, approximate location, technical device/browser information).
For EU traffic, GA4 does not log or store IP addresses permanently; IP addresses are discarded before logging.
Legal basis: consent (Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021).
Retention period: In GA4, user-level data retention can be configured, e.g. to 2 or 14 months.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
International transfers: It cannot be ruled out that data is transferred to affiliated companies in third countries (e.g. the USA). Where applicable, transfers take place on the basis of an adequacy decision (e.g. the EU–US Data Privacy Framework, if the recipient is certified) or appropriate safeguards (e.g. Standard Contractual Clauses).
10. Meta Pixel (Facebook/Instagram)
We use the Meta Pixel to measure the effectiveness of our ads, record conversions, and create audiences for advertising (retargeting/lookalike audiences).
In doing so, event data (e.g. page views, interactions, technical information) may be processed and transmitted to Meta; Meta may use cookies for this purpose.
Legal basis: consent (Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021).
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Joint controllership: For certain processing activities in connection with Meta Business Tools, we and Meta may be joint controllers (details and allocation of responsibilities are set out in the Meta Controller Addendum / Business Tools Terms).
International transfers: Transfers to third countries (e.g. the USA) cannot be ruled out; where applicable, transfers take place on the basis of an adequacy decision (e.g. the EU–US Data Privacy Framework, if the recipient is certified) or appropriate safeguards (e.g. Standard Contractual Clauses).
11. YouTube
Our website may contain links to YouTube. In the case of simple links, data is only transmitted to YouTube when you click the link.
If videos are embedded, a connection to YouTube is established when the video is loaded/played; cookies may be set and data may be processed. We recommend using “Privacy Enhanced Mode” (youtube-nocookie.com) and embedding videos only after consent.
Legal basis (for embedding): consent (Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021).
12. Recipients / processors
We use service providers (e.g. hosting, technical service providers). They process data either as processors under Art. 28 GDPR or as independent controllers (e.g. Meta/Google, depending on the service).
13. Your rights
Subject to the applicable requirements, you have rights of access, rectification, erasure, restriction, data portability and objection. You can withdraw your consent at any time with effect for the future.
14. Right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority. In Austria: Austrian Data Protection Authority (Datenschutzbehörde, DSB), Vienna.