Privacy Policy

Copyright © by pewag Schneeketten GmbH. All rights reserved, worldwide.

This website and webshop is operated by pewag Schneeketten GmbH, Gaslaternenweg 4, 8041 Graz (‘we’ or ‘us’). This notice describes how we, as the data controller, process your personal data in connection with this website and webshop.

This privacy policy was last updated on 14 October, 2024.

In this privacy policy, we explain what we do with the data we collect from you via this website and/or webshop. We recommend that you read this document carefully. We meet the legal requirements when processing personal data. This means, among other things, that:

  • We clearly state the purposes for which we process personal data. This is done through this privacy statement.
  • We aim to limit our processing of personal data to only that personal data which is required for legitimate purposes.
  • We will first obtain your explicit consent if this should be necessary to process your personal data.
  • We take appropriate security measures to protect your personal data and also require this of parties that process personal data on our behalf
  • We respect your right to information, rectification or erasure of your personal data.

If you have any further questions or would like to know what personal data we hold about you, please contact us at info(at)serea-locks.com

1. Purpose, data and storage period

We process personal data for a number of purposes related to our business, including the following.

1.1 Contact – by phone, post, email and web formats

As soon as you contact us by phone, email or contact form, we process your data.

For this purpose, we process the following data:

  • First name and surname
  • Account name or pseudonym (for B2B customers only)
  • Email address
  • Telephone number
  • IP address
  • Geolocalisation data
  • Attachment of documents
  • Any information you voluntarily provide to us

The legal basis

The data processing is carried out on the basis of our legitimate interest in communicating with webshop users (Art. 6 para. 1 lit. f GDPR).

Data recipients

Your personal data will be processed in accordance with the applicable data protection regulations by our departments, such as IT and customer service, as required to achieve the above-mentioned purpose.

Your personal data will also be shared with external service providers who support us in performing our activities; e.g. our e-commerce tool (WooCommerce, hosted by Lorem Ipsum – in Germany) and content management system (WordPress, hosted by Lorem Ipsum – in Germany). These external service providers act as processors and process the data exclusively in accordance with our instructions and the applicable data protection regulations.

Transfer to third countries

There is no data transfer to countries outside the EU and the EEA.

Storage period

We erase or anonymise your personal data as soon as it is no longer needed for the purposes for which it was collected and processed, and provided that no other legal obligations require further storage.

Data required for commercial law or tax law reasons or for the filling or defence of legal claims and their enforcement in official or judicial proceedings will be stored until the expiry of the corresponding statutory storage periods or expiration periods or the final resolution of the proceedings.

1.2 Registering an account

As a Serea dealer, you can voluntarily create a B2B account. To do this, you must register. All registrations are manually approved by one of our employees. Registration is intended for B2B customers only and consumer registrations will be rejected.

The information required for registration is clearly marked as a mandatory or optional field. We process this information to show you the right products at the appropriate prices, and you can also order via your registered account.

For this purpose, we process the following data:

  • First name and surname,
  • Account name or pseudonym and company
  • Company data as well as VAT number
  • Home or other physical address, including street name and city/town name
  • Telephone number
  • Email address

The legal basis

The processing of data that you voluntarily provide to us is based on your consent in accordance with § 107 TKG and Art. 6 para. 1 lit. a GDPR.

The processing of data that needs to be stored for commercial law or tax law purposes is based on Art. 6 para. 1 lit. c GDPR.

Data recipients

Your personal data will be processed in accordance with the applicable data protection regulations by our departments, such as IT, customer service and accounting, as to achieve the above-mentioned purpose.

Your personal data will also be shared with external service providers who support us in performing our activities; e.g. our e-commerce tool (WooCommerce, hosted by Lorem Ipsum – in Germany). These external service providers act as processors and process the data exclusively in accordance with our instructions and the applicable data protection regulations.

Transfer to third countries

There is no data transfer to countries outside the EU and the EEA.

Storage period

Your data is stored in our B2B shop (WooCommerce) until you delete your account. If you cancel your user account, your data will be erased from this account. The user is solely responsible for backing up data in the event of cancellation before the end of the contract. We are entitled to irretrievably erase all user data stored during the term of the contract.

Data required for commercial law or tax law reasons or for the filling or defence of legal claims and their enforcement in official or judicial proceedings will be stored until the expiry of the corresponding statutory storage periods or expiration periods or the final resolution of the proceedings.

Consent withdrawal

You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal can be sent to us informally by e-mail – info(at)serea-locks.com. The lawfulness of the processing carried out until the withdrawal remains unaffected.

1.3 Orders

As soon as you place an order in our webshop, we process your data in order to execute this order.

For this purpose, we process the following data:

  • Your email address
  • Whether you are a private or business customer
  • Name or company name
  • Home or other physical address, including street name and city/town name
  • Country
  • Browser type
  • IP address
  • Method of payment

The legal basis

Data processing is necessary for the performance of online purchase contracts (Art. 6 para. 1 lit. b GDPR) and for the compliance with statutory storage obligations (Art. 6 para. 1 lit. c GDPR).

Data recipients

Your personal data will be processed in accordance with the applicable data protection regulations by our departments, such as IT, customer service and accounting, as required to achieve the above-mentioned purpose.

Your personal data will also be shared with external service providers who support us in fulfilling our activities; e.g. our e-commerce tool (WooCommerce, hosted by Lorem Ipsum – in Germany), banking institutions, payment providers (Adyen, NL), and logistics partners. These external service providers act as processors and process the data exclusively in accordance with our instructions and the applicable data protection regulations.

Transfer to third countries

There is no data transfer to countries outside the EU and the EEA.

Storage period

The data that we process with your order will be stored for the period required by law, provided that statutory storage requirements do not preclude deletion and we do not need the data in individual cases to defend or enforce legal claims.

The data associated with your order and the specific transaction will be stored for a period of seven years in accordance with the statutory storage periods.

The data required for commercial law or tax reasons or for the filing or defence of legal claims and their enforcement in official or judicial proceedings will be stored until the expiry of the corresponding statutory storage periods or expiration periods or the final resolution of the proceedings.

1.4 Newsletter

On our website, you have the option to subscribe to our newsletter. This is 100% optional, free of charge and can be cancelled at any time.

For this purpose, we process the following data:

  • Your email address
  • Your first name

The legal basis

Your email address is processed on the basis of your consent in accordance with 107 TKG and Art. 6 para. 1 lit. a GDPR.

After you have cancelled your subscription to the newsletter, your declaration of consent will continue to be stored on the basis of our legitimate interests (Art. 6 para. 1 lit. f DSGVO) for the fulfilment of statutory storage obligations or for the defence against or enforcement of legal claims.

Data recipients
Your personal data will be processed in accordance with the applicable data protection regulations by our departments, such as IT and marketing,as required to achieve the above-mentioned purpose.

Your personal data will also be shared with external external service providers who support us in fulfilling our activities; e.g. Brevo (DE). These external service providers act as processors and process the data exclusively in accordance with our instructions and the applicable data protection regulations.

Transfer to third countries

There is no data transfer to countries outside the EU and the EEA.

Storage period

Your cancellation of the newsletter is automatically noted in the newsletter database. We will erase your personal data immediately, unless statutory obligations prevent the erasure and we do not need the data in individual cases to defend or enforce legal claims.

Data required for commercial law or tax law reasons or for the filling or defence of legal claims and their enforcement in official or judicial proceedings will be stored until the expiry of the corresponding statutory storage periods or expiration periods or the final resolution of the proceedings.

Consent withdrawal

You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal can be sent to us informally by e-mail – info(at)serea-locks.com. The lawfulness of the processing carried out until the withdrawal remains unaffected.

1.5 Generation and analysis of statistics to improve the website and/or web shops

If you have given your consent, the following web analysis tools are used on this website and/or web shop with the help of cookies to analyse and improve the performance of our website and/or web shops, including the evaluation of your pseudonymous use of the website and/or web shops and the generation of reports about website and/or web shop activities:

  • Google Analytics 4:

Google Analytics 4 is a web analysis service provided by Google LLC, headquartered in the United States. The controller for users in the EU, the EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‘Google’). More info.

For this purpose, we process the following data:

During your visit to our website, your user behaviour is recorded in the form of ‘events’. Events can include:

  • Page views
  • First-time visit to the website
  • Start of the session
  • Websites visited
  • Your ‘click path’, interaction with the website
  • Scrolls (whenever a user scrolls to the bottom of the page (90%))
  • Clicks on external links
  • Internal search queries
  • Interaction with videos
  • File downloads
  • Ads viewed/clicked on
  • Language setting

The following is also recorded:

  • Your approximate location (region)
  • Date and time of the visit
  • Your IP address (in abbreviated form)
  • Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
  • Your internet provider
  • the referrer URL (via which website or advertising medium you came to this website)
  • Purposes of processing

Type of processing

We use Google Signals. This means that Google Analytics collects additional information about users who have activated personalised ads (interests and demographic data) and ads can be delivered to these users in cross-device remarketing campaigns.

The legal basis

The data processing is carried out on the basis of your consent in accordance with § 107 TKG and Art. 6 para. 1 lit. a DSGVO.

Data recipients

Your personal data will be processed in accordance with the applicable data protection regulations by our departments, such as IT and marketing, as required to achieve the above-mentioned purpose.

Your personal data will also be shared with external service providers who support us in the fulfilling of our activities; e.g. digital marketing agencies. These external service providers work as processors and process the data exclusively in accordance with our instructions and the applicable data protection regulations.

In addition, the data is also processed by the following web analysis service providers:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a processor in accordance with Art. 28 GDPR)
  • Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA,
  • Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA,

Transfer to third countries

No data transfer takes place to countries outside the EU and the EEA, neither in our internal data processing nor in the external data processing by our chosen processors.

On the other hand, when using Google Analytics 4, the data collected by means of cookies is usually transferred to a Google server in the USA and stored there. In order to ensure an adequate level of data protection here as well, the following protective measures are applied:

  • On 10 July 2023, the European Commission adopted its adequacy decision for the United States. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are located worldwide and a transfer to third countries (e.g. to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider
  • With Google Analytics 4, the anonymisation of IP addresses is activated by default. Due to IP anonymisation, your IP address will be truncated by Google within the area of member states of the EU or the EEA. Only in exceptional cases will the full IP address be sent to a Google server in the United States and truncated there. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other data from Google, according to Google.

Storage period

The data we generate and send that is linked to cookies is automatically erased or anonymised after 14 months. The maximum lifespan of Google Analytics cookies is 2 years.

Data that has reached the end of its retention period is automatically erased or anonymised once a month.

Data required for commercial law or tax law reasons or for the filling or defence of legal claims and their enforcement in official or judicial proceedings will be stored until the expiry of the corresponding statutory storage periods or expiration periods or the final resolution of the proceedings.

Consent withdrawal

You can withdraw your consent at any time with effect for the future by accessing the cookie settings Cookie-Einstellungen and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until the withdrawal remains unaffected.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in a reduced functionality of this and other websites. You can also prevent the collection of data generated by cookies and related to your use of the website (including your IP address) to Google and the processing of this data by Google by

    1. do not give your consent to the setting of cookies or
    2. download and install the browser add-on to deactivate Google Analytics HERE.

For more information about the terms of use and privacy policy of web analytics providers, please visit:

2. Cookies

This website uses cookies. To find out more about our cookie policy, click here.

3. Data processing and storage

We take all possible measures to ensure that your data is stored securely and that unauthorised access to the data is not possible. All collected information is stored on our own servers or on those of partners who are obliged to maintain the same appropriate level of data protection.

4. Your rights in relation to data processing

In principle, you have the right to information, rectification or erasure, restriction of processing, data portability, consent withdrawal and objection.

If you believe that the processing of your data violates data protection regulations or your data protection rights have been violated in any other way, you can file a complaint with the relevant national supervisory authority.

You can contact us using the following contact details:

  • pewag Schneeketten GmbH, Gaslaternenweg 4, 8041 Graz
  • info(at)serea-locks.com