Data protection information

We, Liebherr-IT Services GmbH, attach great importance to the protection and security of your personal data. Therefore, we consider it vital to inform you in the following about which of your personal data we process for what purpose and what rights you have in respect of your personal data. The following data protection information relates to the web-based offers and modules provided by us, which you can access via a registered user account (i.e. a so-called Liebherr account, Liebherr business account or Liebherr business service partner account) after successful registration (hereinafter referred to as “offers/modules” or “web services”). For such offers and modules, which you can also access via a user account mentioned above depending on your respective authorisation, but which are not listed in the following data protection information, the respective data protection information of the respective providers of these offers or modules shall apply. For information on the functionality and scope of the offers/modules, please refer to the terms of use.

“Personal data” (hereinafter also referred to as “data”) are all the details that make a statement about a natural person. Personal data are not just details that allow a direct conclusion to be drawn about a certain person (such as the name or e-mail address of a person), but also information with which with suitable additional knowledge a connection can be made with a certain person.

“Processing” means any action taken with your personal data (such as collection, recording, organisation, structuring, storage, use or erasure of data).

Data processing during the use of our website
Data processing during registration/authentication
Data processing during the use of various modules
Rights of the data subject & contact
General information
General information for data processing

Each time you access and use our website, the web browser used on your terminal equipment (computer, smartphone or similar) automatically sends information to our web servers, which we store in so-called log files:

  • Date and time of access to the website
  • Your (external) IP address
  • Domain name of your internet access provider
  • The type and version of browser you are using and the operating system you are using
  • URL (address on the internet) of the website you were on at the time of the call-up
  • The files you retrieve via the respective website (type of access, name of the retrieved file, URL of the retrieved file, success of the retrieval)
  • The amount of data transferred to you when visiting the website

We process the data stored in the log files to ensure the security and stability of our website.

Each time you access and use our website, the web browser used on your terminal equipment (computer, smartphone or similar) automatically sends information to our web servers, which we store in so-called log files: • Date and time of access to the website • Your (external) IP address • Domain name of your internet access provider • The type and version of browser you are using and the operating system you are using • URL (address on the internet) of the website you were on at the time of the call-up • The files you retrieve via the respective website (type of access, name of the retrieved file, URL of the retrieved file, success of the retrieval) • The amount of data transferred to you when visiting the website

What data are processed during registration/authentication? When registering and using a Liebherr account via the web services (so-called “Liebherr account”) without using an existing account with Liebherr-Hausgeräte, Apple, Google, Facebook or Microsoft, we process the following data:

  • The data you provide within the registration/authentication process
  • User Principal Name (UPN)
  • Log data such as registration date and date and time of the last successful login When registering and using a Liebherr account via the web services using an existing account with Liebherr-Hausgeräte, Apple, Google, Facebook or Microsoft (so-called “external login”), we also process the following data:
  • External login identifier (so-called “identifier”), the external login provider and your email address

Note: If you register or authenticate with an external login from Liebherr-Hausgeräte, Apple will not send us any additional data. Note: If you register or authenticate with an external login from Apple, Apple will not send us any additional data. Note: If you register or authenticate with an external login from Facebook, Facebook will also send us your profile picture. This is not processed by us for any purpose. Note: If you register or authenticate with an external login from Google, Google will also send us your surname, first name and the link to your Google Plus profile. We do not process this data for any purpose. Note: If you register or authenticate with a Microsoft external login, Microsoft will also send us your name and first name. We do not process this data for any purpose. Note: Please note that we have no influence on the processing of your personal data at and by Liebherr Hausgeräte, Apple, Google, Facebook and Microsoft. For more information on the processing of your personal data by Google, Facebook and Microsoft, please refer to the respective data protection declaration of these providers. When registering and using a Liebherr account for business use (so-called “Liebherr business account”), we process the following data:

  • The data you provide within the registration process
  • Unique company ID (Company ID) When registering and using a Liebherr account as a service partner (so-called “Liebherr business service partner account”), we process the following data:
  • The data you provide within the registration process
  • Unique Service Partner ID (Service Partner ID)

These data are in principle only processed by us for the following purposes:

  • Registration of a Liebherr account, Liebherr business account or Liebherr business service partner account for the use of the website either via double opt-in or via an external login account
  • Authentication or central authentication (Liebherr account, Liebherr business account, Liebherr business service partner account for the use of the web offer and, if applicable, for the use of further modules or offers for which you are authorised
  • Central administration of user and company data of the Liebherr account, Liebherr business account, Liebherr business service partner account
  • Transmission of data stored in the respective user account (such as name and address as well as validated devices) to the provider of the modules and offers you use
  • If necessary, verification of the data provided by you, such as value added tax identification number
  • Support for your Liebherr account, Liebherr business account, Liebherr business service partner account Note: Please note that a transfer of your personal and company-related data to countries outside the EU or the EEA is possible if the respective provider of one of your modules and offers is based in such a country. Processing for other purposes may only be considered if the necessary legal requirements pursuant to Article 6 para. 4 GDPR are met. In this case, we will of course comply with any information obligations pursuant to Article 13 para. 3 GDPR and Article 14 para. 4 GDPR.

The processing of your data is carried out for the performance of a contract or in order to take steps prior to entering into a contract pursuant to Article 6 para. 1 point b GDPR.

What data are processed within the"My Business Relationships” module?

When using the “My Business Relationships” module, we may process the following data:

  • As far as necessary, the data you provided during the registration process
  • Information on the status of the validation process of your business relationship(s) with your service partner(s)
  • Information on the status of the validation process of your business relationship(s) with your service partner(s)
  • Information about your business relationship(s) with your service partner(s) (such as customer number, Company ID, product area, billing address, order type, shipping method, payment method, price source, availability source, available promotions, minimum order quantity, contact details of the assigned contact person)

For what purposes do we process your data?

These data are in principle only processed by us for the following purposes:

  • Management of your business relationship with your service partner(s)
  • Enabling the provision of offers by your service partner(s)
  • Maintenance or further development of the “My Business Relationships” module and support

Processing for other purposes may only be considered if the necessary legal requirements pursuant to Article 6 para. 4 GDPR are met. In this case, we will of course comply with any information obligations pursuant to Article 13 para. 3 GDPR and Article 14 para. 4 GDPR.

On what legal basis do we process your data?

The processing of your data is carried out on the following legal basis:

  • Processing for the performance of a contract or in order to take steps prior to entering into a contract pursuant to Article 6 para. 1 point b GDPR.
  • Processing for purposes of legitimate interests pursuant to Art. 6 para. 1 point f GDPR. Our legitimate interests pursued is the improvement of the offer/module.

When using the “My products” module, we may process the following data:

  • As far as necessary, the data provided by you during the registration process
  • Information on the product registration process (such as serial number (LMID), product photo, device reference (internal product name) and protocol data)
  • Information on the product validation process (such as status of the product validation, protocol data, validator (customer’s main service partner from the product area), comments such as reason for rejection, reason why a service partner removes the device from his customer’s fleet)
  • Authorisation information on the validated products (such as activated modules/functions, additionally authorised enterprise/company/service partner with the name of the enterprise/company, authorised users (internal authorised users and in the case of external companies (e.g. various branches)), authorising user, date of authorisation allocation or expiry date of the authorisation)

For what purposes do we process your data?

These data are in principle only processed by us for the following purposes:

  • Registration and administration of the products
  • Validation of registered products by main service partners
  • Provision of additional modules/functions for a validated product
  • Maintenance or further development of the “My Products” module and support

Processing for other purposes may only be considered if the necessary legal requirements pursuant to Article 6 para. 4 GDPR are met. In this case, we will of course comply with any information obligations pursuant to Article 13 para. 3 GDPR and Article 14 para. 4 GDPR.

On what legal basis do we process your data?

The processing of your data is carried out on the following legal basis:

  • Processing for the performance of a contract or in order to take steps prior to entering into a contract pursuant to Article 6 para. 1 point b GDPR.
  • Processing for purposes of legitimate interests pursuant to Art. 6 para. 1 point f GDPR. Our legitimate interests pursued is the improvement of the offer/module.

What data are processed within the “Spare parts catalogue” module?

When using the “Spare parts catalogue” module, we may process the following data: • As far as necessary, the data provided by you during the registration process • As far as necessary, information on already validated products • Favourite articles and notes on a product/article • Log data of the system/application

For what purposes do we process your data?

These data are in principle only processed by us for the following purposes:

  • Individual address within the spare parts catalogue
  • Control of access authorisations
  • Provision of the note and favourites function within the authorised user group of your company
  • Provision of a specific download link to a document selected by you via e-mail
  • Maintenance and further development of the “Spare Parts Catalogue” module and support

Processing for other purposes may only be considered if the necessary legal requirements pursuant to Article 6 para. 4 GDPR are met. In this case, we will of course comply with any information obligations pursuant to Article 13 para. 3 GDPR and Article 14 para. 4 GDPR.

On what legal basis do we process your data?

The processing of your data is carried out on the following legal basis:

• Processing for the performance of a contract or in order to take steps prior to entering into a contract pursuant to Article 6 para. 1 point b GDPR. • Processing for purposes of legitimate interests pursuant to Art. 6 para. 1 point f GDPR. Our legitimate interests pursued is the improvement of the offer/module.

What data are processed within the ‘Shop’ module?

When using the “Shop” module, we may process the following data:

  • As far as necessary, the data provided by you during the registration process
  • As far as necessary, information on already validated products and on business relationships
  • Information on the item selection process (such as last viewed items, shopping cart, shopping cart identification, address of the shopping cart creator/recipient)
  • Information on the order process (such as internal order reference, order number, order type, payment type, product range, shipping method, date of creation, product, delivery (status of delivery (sales order tracking) transmitted by company responsible for delivery, partial delivery, desired delivery date, delivery address), billing address, ordered items, status of order, attachments and comments)
  • Information on the offer process (such as reference to the shopping cart, offer number, offer name, item, status, order type, product range, product, update date, change history (price changes, added or deleted items, quantity changes, comments)

For what purposes do we process your data?

These data are in principle only processed by us for the following purposes:

  • Processing of orders/offers for spare parts
  • Control of access authorisations
  • Maintenance and further development of the “Shop” module and support

Processing for other purposes may only be considered if the necessary legal requirements pursuant to Article 6 para. 4 GDPR are met. In this case, we will of course comply with any information obligations pursuant to Article 13 para. 3 GDPR and Article 14 para. 4 GDPR.

On what legal basis do we process your data?

The processing of your data is carried out on the following legal basis:

  • Processing for the performance of a contract or in order to take steps prior to entering into a contract pursuant to Article 6 para. 1 point b GDPR.
  • Processing for purposes of legitimate interests pursuant to Art. 6 para. 1 point f GDPR. Our legitimate interests pursued is the improvement of the offer/module.

What data are processed within the ‘Spare parts catalogue’ module?

When using the “Spare parts catalogue” module, we may process the following data:

  • As far as necessary, the data provided by you during the registration process
  • As far as necessary, information on already validated products
  • Favourite articles and notes on a product/article
  • Log data of the system/application

For what purposes do we process your data?

These data are in principle only processed by us for the following purposes:

  • Individual address within the spare parts catalogue
  • Control of access authorisations
  • Provision of the note and favourites function within the authorised user group of your company
  • Provision of a specific download link to a document selected by you via e-mail
  • Maintenance and further development of the “Spare Parts Catalogue” module and support

Processing for other purposes may only be considered if the necessary legal requirements pursuant to Article 6 para. 4 GDPR are met. In this case, we will of course comply with any information obligations pursuant to Article 13 para. 3 GDPR and Article 14 para. 4 GDPR.

On what legal basis do we process your data?

The processing of your data is carried out on the following legal basis:

  • Processing for the performance of a contract or in order to take steps prior to entering into a contract pursuant to Article 6 para. 1 point b GDPR.
  • Processing for purposes of legitimate interests pursuant to Art. 6 para. 1 point f GDPR. Our legitimate interests pursued is the improvement of the offer/module.

As a data subject, you have the right, within the legal scope, to:

  1. Information about your data;
  2. Rectification of inaccurate data and completion of incomplete data;
  3. Erasure of your data, particularly if (1) they are no longer necessary for the purposes stated in this Data Protection Declaration, (2) you have withdrawn your consent and there is no other legal ground for the processing, (3) your data have been unlawfully processed, or (4) you have objected to the processing and there are no overriding legitimate grounds for the processing;
  4. Restriction of the processing of your data, particularly if the accuracy of the data is contested by you or the processing of your data is unlawful and instead of deletion you demand restriction of use;
  5. Object to processing of your data based on legitimate interests, on grounds relating to your particular situation, or, without specific justification, to processing of your data carried out for direct marketing purposes;
  6. Receive your data in a structured, commonly used and machine-readable format and to have your data transmitted from us directly to another controller. Please note that the lawfulness of processing based on consent before its withdrawal will not be affected by your withdrawal. If you assert any of the above-stated rights, please understand that we may require you to provide evidence showing that you are the person you claim to be.

Furthermore, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your data infringes the GDPR.

Our website may contain links to and from websites of other providers not affiliated with us (“third parties”). After clicking on the link, we no longer have any influence on the processing of any data transmitted to the third party when the link is clicked (such as the IP address or the URL on which the link is located), as the behavior of third parties is naturally beyond our control. Therefore, we cannot assume any responsibility for the processing of such data by third parties.

We may transmit your data to: • Other Liebherr companies, provided this is necessary to initiate, perform or terminate a contract, or for our part we have a legitimate interest in the transmission and your predominant legitimate interest is not opposed to this; • Our service providers that we use in order to achieve the below-stated purposes; • The providers of the offers/modules and any other services actively used by you or an employee of your company; • The respective service partner selected by you to provide services and to ensure security in the central administration of your “Liebherr Business Account”; • The respective users selected by you to view the products defined by you or the shopping cart defined by you; • The recipient you wish (for example, to a service partner/customer for handling, to recipients selected by you of a file you have saved); • The provider with whom you have an existing account, with which you have registered or authenticate yourself; • Courts of law, courts of arbitration, authorities or legal advisers, if this is necessary to comply with current law or for the establishment, exercise or defence of legal claims.

Note: Depending on the respective authorisations of the other employees of your company, your personal and company-related data may also be visible to them if you have registered as an employee of a company. This is to ensure a simpler organisation for the users of the same company. This particularly affects your contact details as well as the authorisations assigned to you by your company administrator. The respective company administrator is obliged to ensure compliance with the respective applicable data protection regulations in relation to the registered/entered employees of his company

The controller of the processing of your data is Liebherr-IT Services GmbH, St. Vitus 1, 88457 Kirchdorf an der Iller, Contact: info.lis@liebherr.com