[PRELIMINARY VERSION – The information in square brackets must be completed or confirmed by the developer before publication. This version assumes that no visitor analytics, externally embedded maps or videos, public comments, or customer registration are used.]
Last updated: 2026
1. Controller
The controller responsible for the processing of personal data on this website is:
LDDE Vertriebsgesellschaft m.b.H.
Simmeringer Hauptstraße 357
1110 Vienna, Austria
Telephone: +43 1 7671811
Email: office@ldde.com
Website: https://www.ldde.com
2. Provision of the Website and Server Logs
Our website is hosted by [NAME AND ADDRESS OF THE HOSTING PROVIDER]. The servers are located in [COUNTRY].
When you access the website, the server processes technically necessary data, including your IP address, date and time of access, the page requested, browser, operating system, referrer URL, and error and security information. This processing is necessary to provide the website and to ensure its stability and security.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Server logs are deleted after [NUMBER] days unless longer storage is required to investigate a security incident.
3. Contacting Us
If you contact us through the contact form, by email, or by telephone, we process the information you provide, including your name, company, email address, telephone number, and the content of your message. The data are processed to handle and respond to your enquiry.
If your enquiry relates to a contract or pre-contractual measures, the legal basis is Article 6(1)(b) GDPR. General enquiries are processed on the basis of our legitimate interest in handling business communications in accordance with Article 6(1)(f) GDPR.
The data are deleted once the enquiry has been conclusively dealt with, unless statutory retention obligations or legitimate reasons require further storage. Enquiries that do not result in a business relationship are deleted no later than [NUMBER OF MONTHS] after completion.
4. RMA, Repair and Service Form
When you use our RMA, repair, or service form, we process the information required to handle the request. This includes, in particular, contact and company details, billing, delivery and return addresses, product and serial numbers, fault descriptions, the RMA reference number, and uploaded photographs, documents, or videos.
The data are processed to assess and carry out the RMA, repair, or service procedure, communicate with you, prepare a cost estimate, and, where applicable, perform a contract. The legal basis is Article 6(1)(b) GDPR. Documents subject to statutory retention obligations are additionally processed pursuant to Article 6(1)(c) GDPR.
Where necessary to handle the request, data may be disclosed to the responsible employees, service technicians, affiliated companies, and commissioned transport, logistics, or other service providers.
Please upload only files that are necessary for the relevant procedure and avoid including unnecessary personal data or location information that is not required in images.
RMA and business records are retained in accordance with statutory retention periods. Other uploaded files are deleted no later than [NUMBER OF MONTHS] after the procedure has been finally completed unless longer retention is necessary for the establishment, exercise, or defence of legal claims.
5. Email Delivery and Spam Protection
For the sending and receipt of form messages, we use [NAME, ADDRESS AND COUNTRY OF THE EMAIL/SMTP PROVIDER]. The contact details, message content, and technical delivery data required for transmission are processed. Depending on the nature of the enquiry, the legal basis is Article 6(1)(b) or Article 6(1)(f) GDPR.
[USE ONLY IF ACTUALLY ENABLED:]
To protect our forms against spam and automated submissions, we use Google reCAPTCHA v3. The provider in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service may process, in particular, your IP address, browser and device information, referrer URL, time of access, and interactions with the website.
reCAPTCHA is activated [ONLY AFTER CONSENT / ON THE FOLLOWING CONFIRMED LEGAL BASIS]. Where processing is based on your consent, the legal basis is Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect through [NAME/LINK OF THE COOKIE SETTINGS]. Processing of data in the United States cannot be ruled out. [ADD THE TRANSFER MECHANISM AND RETENTION PERIOD.]
A technically necessary honeypot mechanism may additionally be used to identify automated form submissions.
6. Cookies and Language Settings
Our website uses technically necessary cookies where these are required for basic functions, security, or language settings.
Polylang uses the “pll_language” cookie to remember the language you have selected. It is stored for one year. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the user-friendly provision of the selected language version.
[IF A COOKIE BANNER IS USED: Add the name of the consent management tool, the retention period for the consent record, and a link to the cookie settings.]
7. Recipients and Data Transfers
Where necessary for the purposes described above, recipients of personal data may include hosting and IT providers, website support providers, email providers, security services, affiliated companies, responsible employees, and transport, logistics, and service providers. Where a service provider processes personal data on our behalf, we enter into the required agreement pursuant to Article 28 GDPR.
Personal data are transferred to countries outside the European Economic Area only where the legal requirements of Articles 44 et seq. GDPR are met. [ADD THE SPECIFIC THIRD-COUNTRY TRANSFERS BASED ON THE DEVELOPER’S INFORMATION.]
8. Retention Period
We retain personal data only for as long as necessary for the relevant purpose. Data are retained for a longer period only where statutory retention obligations apply or where the data are required for the establishment, exercise, or defence of legal claims. The data are then deleted or anonymised.
9. Your Rights
Subject to the applicable legal requirements, you have the right of access, rectification, erasure, restriction of processing, data portability, and objection. You may withdraw your consent at any time with future effect.
To exercise your rights, you may contact us at office@ldde.com or at the postal address stated above.
You also have the right to lodge a complaint with a data protection supervisory authority. In Austria, the competent authority is:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna, Austria
Telephone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at
10. Required Information and Automated Decision-Making
The information marked as mandatory in our forms is required so that we can process your enquiry or RMA, repair, or service request. Without this information, we may not be able to process the request.
No decision based solely on automated processing, including profiling within the meaning of Article 22 GDPR, takes place. [TO BE CONFIRMED BY THE DEVELOPER.]