Legal hub
Terms & Conditions
Terms & Conditions
General Terms and Conditions (GTC) of Läderach (Österreich) GmbH
As at: August 2026
1.1.These General Terms and Conditions (“GTC”) apply to orders and contracts placed via the online shop of
Läderach (Österreich) GmbH
Mariahilfer Straße 86
1070 Vienna
Austria
Tel: +43 6642108853
Email: [email protected]
VAT No.: ATU75157679
Company register number: FN 527650 g
Company Register Court: Vienna Commercial Court
(hereinafter referred to as “Läderach”, “we” or “us”)
be concluded.
1.2.Our offer is aimed in particular at consumers. Insofar as orders from business customers are permitted, these General Terms and Conditions shall also apply to business customers, unless expressly stated otherwise below.
1.3.A consumer is any natural person who enters into a legal transaction for purposes that are predominantly neither commercial nor related to their self-employed professional activity. A business is a natural or legal person, or a partnership with legal capacity, which, at the time of entering into the legal transaction, is acting in the course of its commercial or self-employed professional activity.
1.4.These General Terms and Conditions do not restrict consumers’ mandatory statutory rights.
1.5.Any deviating terms and conditions of the customer shall only apply if we have expressly agreed to their validity.
2.1.The presentation of our products in the online shop does not, in principle, constitute a legally binding offer, but rather an invitation to the customer to place an order.
2.2.The customer may select products and add them to the shopping basket. Before submitting the order, the selected products and the key order details are displayed to the customer once again. The customer can identify any input errors and correct their entries using the technical tools provided in the online shop.
2.3.Before placing the order, the customer will, in particular, be provided with information regarding the total price and, where applicable, any additional delivery or other costs.
2.4.By clicking the appropriately labelled ‘Order’ button, the customer submits a binding order for the products contained in the shopping basket, which entails a payment obligation.
2.5.Upon receipt of the order, the customer will receive electronic confirmation of receipt of the order. This confirmation of receipt does not constitute acceptance of the order unless acceptance is expressly stated therein.
2.6.The contract of sale is concluded as soon as we expressly accept the order, in particular by sending an order or dispatch confirmation, or by dispatching the goods ordered.
2.7.We may reject an order for objective reasons, in particular if a product is unavailable, payment cannot be processed or authorised correctly, there is reasonable suspicion of misuse or fraud, or there are legal grounds preventing the performance of the contract.
3.1.The individual technical steps of the ordering process are displayed to the customer in the online shop. The customer may check and correct their entries before submitting the order.
3.2.The language of the contract is German. Any other languages available for the conclusion of the contract are displayed in the online shop.
3.3.We store the text of the contract after it has been concluded.
3.4.The customer receives the contractual information relevant to their contract, including these General Terms and Conditions, in the form prescribed by law.
3.5.Where a customer account is offered, information about orders already placed may also be accessed there.
4.1.Where provided for in the online shop, the customer may place orders as a guest or via a customer account.
4.2.When setting up a customer account, the customer must provide the required details completely and accurately and update them accordingly in the event of any changes.
4.3.Login details must be treated as confidential and protected from access by unauthorised third parties. If there is any suspicion of unauthorised use of the customer account, the customer should inform us immediately.
4.4.We may temporarily suspend or delete a customer account for a valid reason. A valid reason may include, in particular, misuse, reasonable suspicion of fraud, or significant or repeated breaches of contractual or statutory obligations.
4.5.The customer may request the deletion of their customer account at any time. Statutory retention obligations and other permissible grounds for retention remain unaffected.
5.1.The key characteristics of the products on offer are set out in the relevant product description in the online shop.
5.2.Product images are intended to be as true to life as possible. In the case of handmade products or products made from natural ingredients, minor variations may occur, particularly with regard to colour, shape, size, decoration or appearance.
5.3.Such minor variations, arising from production or raw materials, do not constitute a defect, provided that they do not impair the agreed or legally required quality.
5.4.Information on ingredients, allergens, nutritional values, storage and other product characteristics is provided alongside the relevant product or in any other manner required by law.
6.1.Products are only available whilst stocks last.
6.2.Should it transpire after an order has been received that a product ordered is unavailable, we will inform the customer immediately.
6.3.We will only supply a different or comparable product in place of the ordered product with the customer’s consent.
7.1.The prices stated in the online shop are final prices (in €) including the applicable statutory VAT, where applicable.
7.2.Any additional postage, delivery or other costs will be shown to the customer before they place their binding order.
7.3.As a general rule, the price displayed at the time the order is placed shall apply.
7.4.In the event of obvious typographical, calculation or presentation errors, we will inform the customer immediately. A contract based on a price that is obviously incorrect will not be concluded, provided this is obvious to the customer and is also permitted by law.
7.5.For cross-border deliveries, customs duties, import duties, taxes or other public-law charges may apply, depending on the country of delivery. Whether such amounts are included in the stated final price or are to be borne by the customer is determined by the delivery and pricing terms specified during the ordering process, as well as the applicable legal provisions.
8.1.The payment methods accepted in each case are displayed to the customer in the online shop at the latest during the ordering process.
8.2.Unless otherwise specified for the chosen payment method, the purchase price is due upon conclusion of the contract.
8.3.Where an external payment service provider is used, that provider’s terms and conditions may also apply.
8.4.We may exclude individual payment methods in specific cases for objective reasons, insofar as this is permitted by law.
8.5.The customer’s statutory rights to set-off remain unaffected.
9.1.We deliver exclusively to the delivery areas specified in the online shop. Any existing delivery restrictions are displayed to the customer in the online shop.
9.2.The available delivery methods, estimated delivery times and delivery charges are specified in the online shop or during the ordering process.
9.3.Delivery is made to the delivery address provided by the customer.
9.4.Delivery dates requested by the customer are only binding if we have expressly confirmed them as such.
9.5.If delivery is not possible due to an incorrect or incomplete delivery address provided by the customer, or for any other reason for which the customer is responsible, the customer may be charged the reasonable costs of redelivery, insofar as this is permitted by law.
9.6.The customer’s mandatory statutory rights in the event of a delay in delivery remain unaffected.
10.1.For consumers, the risk of loss or damage to the goods passes in accordance with the statutory provisions.
10.2.Customers are asked to check the delivery for obvious transport damage upon receipt and to report any such damage promptly to the carrier and our customer service team. This request does not impose any additional obligation on consumers to inspect the goods or raise a complaint. In particular, failure to report such damage does not result in the loss of statutory warranty or compensation claims.
11.1.The goods delivered remain our property until the purchase price has been paid in full.
12.1.Consumers are entitled to a statutory right of withdrawal or cancellation in the case of distance contracts, provided that no statutory exceptions apply.
12.2.We provide information on the conditions, time limit, exercise and legal consequences of this right, as well as on any statutory exceptions, in our separate cancellation policy.
12.3.The cancellation policy applicable to the relevant order forms part of the pre-contractual information provided to the customer.
13.1.There is no statutory right of withdrawal or cancellation if and insofar as the statutory conditions for the exclusion of this right are met.
Depending on the product, this may apply in particular to goods
- which are manufactured to the customer’s specifications or are clearly tailored to the customer’s personal needs;
- which are liable to deteriorate rapidly or whose expiry date would be exceeded rapidly;
- which are delivered sealed and are not suitable for return for reasons of health protection or hygiene, provided that the seal has been broken after delivery.
13.3.The mere fact that goods consist of chocolate, pralines or other foodstuffs does not automatically mean that a statutory right of withdrawal is excluded.
13.4.The statutory requirements and our separate cancellation policy apply.
14.1.Returns made in exercise of a statutory right of withdrawal or cancellation are governed by our separate cancellation policy.
14.2.The handling of defective goods is governed by the statutory warranty provisions.
14.3.Customers are asked to pack goods securely for return.
14.4.The use of the original packaging or the inclusion of the original invoice is not a prerequisite for asserting statutory rights, unless otherwise provided for by law.
15.1.The statutory warranty provisions apply to the goods we supply.
15.2.If goods are defective, consumers are entitled to the remedies provided for by law. In accordance with the applicable legal requirements, these include, in particular, the restoration of the goods to a defect-free condition through repair or replacement, as well as, where applicable, a price reduction or termination of the contract.
15.3.A consumer’s statutory warranty rights are not contingent on inspecting the goods immediately upon receipt, nor on a short notice period for raising a complaint set by us.
15.4.However, customers are asked to report any apparent defects to our customer service team as soon as possible. This will facilitate a swift investigation and resolution. Consumers’ statutory rights are not affected by a failure to provide such notification.
15.5.The measures and costs required in connection with the statutory warranty are governed by the applicable statutory provisions.
15.6.For business customers, the applicable statutory obligations regarding inspection and notification of defects apply.
16.1.We are liable in accordance with statutory provisions.
16.2.Any limitation or exclusion of liability shall not apply where mandatory statutory provisions preclude it. This applies in particular to damage resulting from injury to life, limb or health, as well as to claims under mandatory product liability legislation.
16.3.Statutory warranty claims remain unaffected by this liability provision.
16.4.We shall not be liable for damage caused solely by a product being handled contrary to the expressly stated storage, usage or other product instructions, insofar as we bear no statutory responsibility in this regard.
17.1.In addition, the terms and conditions announced for the respective promotion apply to vouchers, promotional codes, discount campaigns and other price reductions.
17.2.Discounts and promotional codes may, in particular, be subject to time limits, apply only to certain products or be subject to a minimum order value.
17.3.Multiple discounts or promotional codes may only be combined if this is specified in the relevant promotion.
17.4.If a discounted product is returned, the refund will generally not exceed the amount actually paid for that product. Mandatory statutory rights remain unaffected.
17.5.If a discount was conditional upon the joint purchase of several products, a set or a specific minimum order value, the treatment of the discount in the event of a partial cancellation shall be governed by the terms and conditions of the relevant promotion and the mandatory statutory provisions.
18.1.Where personalised products or products made to the customer’s specifications are offered, the customer is responsible for checking the personalisation details they have provided before placing the order.
18.2.Once production has commenced, it may no longer be possible to voluntarily amend or cancel the personalisation; statutory rights remain unaffected.
18.3.The customer may only provide content for personalisation for which they are authorised to use and which does not infringe any statutory provisions or the rights of third parties.
18.4.In the case of goods manufactured to the customer’s specifications or clearly tailored to personal needs, a statutory right of withdrawal or cancellation may be excluded. Further details can be found in our separate cancellation policy.
19.1.Where our product range includes products containing alcohol, these are sold and delivered exclusively in compliance with the youth protection regulations applicable to the respective order and delivery.
19.2.By placing an order, the customer confirms that they meet the legal requirements necessary for the purchase of the relevant product, in particular the required minimum age.
19.3.We may, where necessary and permitted by law, require proof of age or implement appropriate measures to verify age.
19.4.The handover of an alcoholic product may be refused if the legal requirements for its supply are not met or cannot be verified.
20.1.Information regarding the processing of personal data in connection with the online shop and the fulfilment of orders is set out in our separate privacy policy.
21.1.If you have any questions or complaints, you may contact our customer service team using the contact details provided in the online shop or in the legal notice.
21.2.Where there are statutory obligations to provide information regarding participation in out-of-court dispute resolution procedures, the relevant information is provided separately on our website or in the legal notice.
22.1.Contracts with us are governed, to the extent permitted by law, by Austrian law, to the exclusion of the UN Convention on Contracts for the International Sale of Goods.
22.2.For consumers, the statutory places of jurisdiction apply.
22.3.For business customers, to the extent permitted by law, it is agreed that the court with subject-matter jurisdiction at our registered office shall have jurisdiction over disputes arising from or in connection with the contractual relationship.
23.1.Mandatory statutory rights of consumers remain unaffected.
23.2.Should any individual provisions of these General Terms and Conditions be or become wholly or partially invalid or unenforceable, this shall not affect the validity of the remaining provisions, unless otherwise required by mandatory law.
23.3.Any invalid or unenforceable provision shall be replaced by the applicable statutory provisions.
23.4.As a general rule, the version of these General Terms and Conditions in force at the time the contract was concluded shall apply to the individual contract.
Privacy Policy
Privacy Policy
Thank you for visiting our website and for your interest in the products and services of the Läderach Group.
The controller responsible for the processing of your personal data in connection with this website and the online shop provided via this website is:
LÄDERACH (Switzerland) Terms & Conditions 14CH-8755 Ennenda Switzerland
E-mail: [email protected]
LÄDERACH (Schweiz) AG decides on the purposes and means of the processing of personal data and is therefore a controller within the meaning of the General Data Protection Regulation (GDPR), the Swiss Data Protection Act (DSG) and other applicable data protection laws. LÄDERACH (Schweiz) AG decides on the purposes and means of the processing of personal data in connection with the website, the European online shop, central customer processes and the technical systems used for this purpose.
The operation of the European online shop is carried out by:
LÄDERACH Österreich GmbHMariahilfer Straße 861060 Vienna Austria
LÄDERACH (Schweiz) AG may involve other companies of the Läderach Group in the provision of its services. You can find information on this in the chapter "Intra-group data transfers".
The Läderach Group has appointed a data protection officer.
If you have any questions about data protection, the processing of your personal data or the exercise of your data protection rights, you can contact our Data Protection Officer at any time:
Data Protection Officer / Data Protection Consultant
Dipl.-Ing. Lars EbertzEBERTZ DATENSCHUTZ GmbH
Ober den Wiesen 1735756 Mittenaar Germany
E-mail: [email protected]
You can also contact us at any time via the general contact options of the Läderach Group. Data protection requests are immediately forwarded to the data protection officer.
We collect and process personal data when you interact with us in person, in our stores, by telephone, by e-mail, through our websites, online shops and mobile applications, through our customer service channels, at events, competitions or promotions, and through our pages and social media profiles.
We may receive personal information about you from other people. This may be the case, for example, if friends, family, business partners or others purchase products or gift cards for you, arrange for delivery to you, register you for an event, book an event on your behalf, or otherwise provide us with your contact or delivery details.
In these cases, we may process in particular your name, delivery address, contact details, details of the relevant order or event booking as well as any messages sent to us by the person ordering or booking.
Persons who provide us with personal data of other persons are responsible for ensuring that they are authorised to disclose such data and, where necessary, inform the data subject of the data processing.
Depending on the nature of your use of our website, the following categories of personal data may be processed in particular:
Contact Details
- First and last name
- Salutation
- E-mail address
- Phone number
- Postal address
- Delivery and billing address
Account details
- Username and password
- Customer or account number
- Security Questions and Related Answers
- Learn about multi-factor authentication
- Learn how to recover an account.
- Authentication protocols
- Account Status and Account Settings
- Learn about login attempts and password resets.
Profile data
- Profile picture
- preferred form of address
- Gender
- Age or date of birth
- Relationship or marital status
- Interests
- Hobbies
- Preferred Products
- Dietary or consumption preferences
- Preferred branch
- Other information voluntarily added to the customer profile
Order and transaction data
- purchased or returned products and services
- Order number
- Order and delivery status
- Purchase price, discounts and payment information
- Date and time of purchase
- Place of purchase
- Branch or point of sale visited
- Sales channel used, e.g. online shop, stationary branch, telephone order or event
- Delivery and billing information
- Refunds, Complaints, and Warranty Claims
- About gift cards and vouchers
- Transaction and Payment Reference Numbers
Communication data
- Contact requests
- E-mail correspondence
- Customer Service Inquiries
- Feedback
- Survey Responses
Marketing and preference data
- Newsletter Sign-ups
- Consents
- Marketing preferences
- Interest Profiles
- Interactions with advertising campaigns
- Preferred language
- preferred communication channels
- Newsletter and marketing subscriptions
- Proof of consent and revocation
- Age or date of birth
- Gender
- Country, region, city, or preferred store
- Product and brand interests
- Lifestyle and shopping preferences
- Dietary and consumption preferences
- Previous reactions to marketing communication
- Participation in campaigns, competitions and events
- Information on the personalization of offers and communication
Technical usage data
- IP address
- Device Information
- Browser Type
- Operating System
- Language settings
- Referrer URL
- Date and time of access
- Pages viewed
- Length of stay
- Click and engagement data
- viewed or searched products
- Pages visited
- clicked links and buttons
- Products added to or removed from a cart
- abandoned carts
- Unfinished ordering processes
- Purchase and browsing history
- Date, time, and duration of website visits
- Interactions with product recommendations and advertising content
Security and Log Data
- Server log data
- Security Events
- Fraud prevention data
- Proof of consent
- Authentication information
Photo booth and event data
- Photographs and images
- Date, time and place of recording
- Information about the event or campaign
- Name and contact details
- Email address or mobile phone number to submit the photo
- Technical image metadata
- Communication and Dispatch Metadata
- Proof of consent
- Information on the use, distribution or publication of the photo
Data from social networks
When you interact with our social media presences or log in through related services, we may receive information that you have shared with the relevant provider.
Data from credit and fraud checks
To the extent permitted by law and necessary for the performance of the contract, we may process information for credit assessment or fraud prevention.
We process personal data exclusively for specified, explicit and legitimate purposes.
Provision of the online shop and our services
We process personal data to provide our website, our digital services and our online shop.
These include, in particular:
- Website content delivery
- Customer account management
- Order processing
- Payment Processing
- Shipping and returns management
Legal basis (EU):
Art. 6 para. 1 lit. b GDPR
Legal basis (Switzerland):
Contract initiation and contract fulfilment according to DSG.
Customer Service and Communication
We process personal data to process inquiries, complaints, support cases and other communication.
Legal basis (EU):
Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR
Legal basis (Switzerland):
Overriding legitimate interest or performance of contract.
Marketing and customer loyalty
If you subscribe to our newsletter, we will use your email address to send you regular information about our products, offers and promotions.
Registration takes place within the framework of a simple opt-in procedure: You enter your e-mail address in the corresponding form and confirm the registration by submitting the form. An additional confirmation link (double opt-in) is currently not used.
The legal basis (EU) is your consent according to Art. 6 para. 1 lit. a GDPR, for Switzerland your consent according to FADP. You can revoke your consent at any time with effect for the future, e.g. via the unsubscribe link in each newsletter or by sending a message to the contact addresses provided.
To the extent required by law, this is done solely on the basis of your consent.
Direct marketing to existing customers Insofar as we have received your e-mail address in connection with the sale of a product or service, we may use this e-mail address for direct advertising for our own similar products, provided that you have not objected to this use.
The legal basis (EU) is our legitimate interest in direct advertising in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with the applicable competition law regulations (e.g. § 7 para. 3 UWG for Germany). For Switzerland, we rely on our overriding interest in accordance with the FADP.
You can object to the use of your e-mail address for direct marketing at any time without incurring any costs other than the transmission costs according to the basic rates. In particular, the unsubscribe link in each e-mail or the use of the contact options provided are available to you for this purpose.
Birthday Deals
If you voluntarily provide us with your date of birth and expressly consent to receive birthday-related communications, we may use your date of birth to send you birthday greetings, a birthday gift, a voucher or other personalised birthday offer. The legal basis is your consent. You can revoke this at any time with effect for the future.
Photo booth
We only process photos and associated contact or communication data from a photo booth if you have expressly consented to the respective processing. Before creating or transmitting it, we provide information about the intended use. For publication or marketing use, a separate and specific consent is generally obtained.
Legal basis (EU):
- Art. 6 (1) (a) GDPR
- Art. 6 (1) (f) GDPR
Legal basis (Switzerland):
- Consent
- Overriding legitimate interest
Analysis, optimization and personalization
We analyse the use of our website in order to continuously improve its functionality, security, usability and cost-effectiveness.
For this purpose, we may use analysis, tracking and optimization technologies.
Legal basis (EU):
- Art. 6 (1) (a) GDPR (insofar as consent is required)
- Art. 6 (1) (f) GDPR
Legal basis (Switzerland):
- Consent
- Overriding legitimate interest
Tracking in emails
Information Collected
- Delivery of an e-mail
- Opening an email
- Clicking on a link
- Time of interaction
- Technical information about the device or e-mail program
Purpose
Measuring the effectiveness of communications and, where permitted, personalizing future content.
Legal basis
Where required by law: consent; revocation or cancellation must be possible at any time.
Competitions, raffles and events
We process personal data for the organisation and implementation of competitions, raffles, advertising campaigns, tastings, customer events and other events.
Scope
- Registration of participants
- Confirmation of participation
- Transmission of event information
- Implementation of the raffle
- Determination and notification of winners
- Sending or handing over prizes
- Documentation of consents
- Publication of winner information, if applicable
Legal basis
Depending on the design: contract or pre-contractual measures, legitimate interests or consent.
IT security and fraud prevention
We process personal data to protect our systems, our customers, our employees and our business processes.
These include, in particular:
- Intrusion detection
- Prevention of abuse
- Access control
- Fraud prevention
- Security Logging
Legal basis (EU):
Art. 6 para. 1 lit. f GDPR
Legal basis (Switzerland):
Overriding legitimate interest.
Fulfilment of legal obligations
We process personal data to the extent necessary to comply with legal obligations.
These include, in particular:
- Retention obligations under commercial and tax law
- Obligations to provide proof and documentation
- Statutory obligations to provide information
- Compliance Requirements
Legal basis (EU):
Art. 6 para. 1 lit. c GDPR
Legal basis (Switzerland):
Fulfilment of legal obligations.
Use of analytics, AI, and automation technologies
To improve our services, we may use analytics, automation, and AI-powered systems.
In particular, these technologies support:
- Search and information functions
- Translations
- Quality improvements
- Process optimizations
- Customer Service Processes
There are no exclusively automated decisions with legal effect or comparably significant effects on data subjects.
Legal basis (EU):
- Art. 6 (1) (a) GDPR
- Art. 6 (1) (f) GDPR
Legal basis (Switzerland):
- Consent
- Overriding legitimate interest
The Läderach Group is internationally organised and uses group-wide processes, systems and services to provide its products and services efficiently and to ensure a uniform level of quality, safety and service.
In order to fulfil the purposes described in this data protection notice, personal data may be processed and transmitted within the Läderach Group, insofar as this is necessary and permissible under data protection law.
Intra-group processing is carried out in particular for the following purposes:
- Operation and administration of the online shop
- Customer Service and Customer Support
- Order and returns processing
- Payment and invoicing processes
- Marketing and customer communication
- IT operations and information security
- Fraud prevention and abuse detection
- Reporting and corporate management
- Compliance and governance requirements
- Fulfilment of legal obligations
Use of central corporate functions
To support certain internal business processes, the Läderach Group uses central service functions.
This includes, in particular, the:
LÄDERACH Global Capability Center Ltd. (GCC Portugal)
GCC Portugal provides intra-group services in particular in the following areas:
- Finance and Accounting
- Reporting and controlling
- IT Operations
- IT Administration
- IT Support
- Process support
- Technical operation and support services
GCC Portugal does not engage in any independent sales or marketing activities towards customers and does not act as an independent controller towards visitors to this website.
To the extent that GCC Portugal employees gain access to personal data in the course of their duties, this is done exclusively on the basis of documented authorisation concepts, defined processing purposes and appropriate technical and organisational protective measures.
Group-wide data protection and security standards
The companies of the Läderach Group are obliged to process personal data exclusively within the framework of the applicable data protection laws and on the basis of group-wide defined data protection, information security and compliance requirements.
Access to personal data is based on the need-to-know principle and is limited to those persons who need this data to perform their respective tasks.
Insofar as personal data is transferred between companies of the Läderach Group to different jurisdictions, such transfers will only take place in compliance with the applicable data protection requirements and with the application of appropriate protective measures.
We treat personal data confidentially and only transmit it to the extent necessary to fulfil our contractual, legal or legitimate business purposes.
Recipients of personal data may include, in particular:
Companies of the Läderach Group
Personal data may be processed within the LÄDERACH Group to the extent necessary for the provision of our services, the operation of our systems, customer support, corporate management, information security or the fulfilment of legal obligations.
For details, please refer to Chapter 5 "Intra-Group Data Transfers".
IT & Cloud Service Providers
We use external service providers to provide and operate our IT systems, in particular for:
- Hosting and Cloud Infrastructure Providers
- E-commerce and website operators
- Payment service providers
- Logistics and delivery service providers
- Call center and customer service providers
- Photo booth and event service providers
- Advertising and media agencies
- Web Development and Software Development Agencies
- CRM Implementation and Management Service Provider
- Newsletter sending and marketing automation providers
- Analysis and conversion measurement service provider
- Fraud prevention and cybersecurity providers
- Consultants, auditors and legal service providers
Payment service providers
Personal data may be transmitted to payment service providers for the purpose of processing payments.
These include, in particular:
- Adyen N.V.
- Banks
- Credit card companies
- Other payment providers offered in the order process
The respective payment service providers may process personal data in part as independent controllers.
Shipping and logistics service providers
For the delivery of orders, we transmit the data required for this to shipping and logistics companies.
These include, in particular:
- Name
- Delivery address
- Contact Details
- Shipment information
Marketing and communication service providers
For the implementation of marketing measures, customer communication, campaign management and reach measurement, personal data may be transmitted to specialized service providers.
Analysis and Optimization Service Providers
In order to analyse the use of our website and to improve our digital offerings, personal data may be transmitted to analysis and optimisation providers.
Authorities and public bodies
To the extent required by law or necessary to safeguard legitimate interests, personal data may be transferred to authorities, courts, law enforcement agencies or other public bodies.
Consultants and auditors
Personal data may be transferred to lawyers, auditors, tax advisors or comparable professional advisors to the extent necessary.
All recipients receive personal data only to the extent necessary for the performance of their respective tasks.
| Recipients / Providers | Category | Purpose |
|---|---|---|
| LÄDERACH Österreich GmbH | Group companies | Operational operation EU-Shop |
| LÄDERACH (Deutschland) GmbH | Group companies | Local customer/sales processes |
| LÄDERACH France SAS | Group companies | Local customer/sales processes |
| GCC Portugal | Intra-group service provider | IT and finance back office |
| Adyen N.V. | Payment service providers | Payment Processing |
| AWS / Amazon CloudFront | Hosting/CDN | Infrastructure and delivery |
| Cloudflare | Security/CDN | Security, Performance, Bot Protection |
| Analytics/Marketing | Analytics, Ads, Tag Management | |
| Meta | Marketing | Meta Pixel / Advertising |
| Microsoft | Communication/Analysis/Marketing | M365, Clarity, Advertising |
| Klaviyo | CRM/Marketing | Newsletter, Marketing Automation |
| Hotjar | Analysis | Usage analysis |
| VWO | Optimization | A/B Testing |
| UserWay | Accessibility | Accessibility features |
| Intrum AG | Credit check | Credit and risk assessment |
To provide our website, our online shop and our services, we use various technical platforms, software solutions and external service providers.
Shop Platform
We use Adobe Commerce (Magento) to operate our online shop.
In particular, this platform processes:
- Customer account data
- Ordering data
- Shopping cart data
- Payment Information
- Technical usage data
Consent Management
To manage consent and cookie settings, we use the consent management platform Cookie Information.
Through this platform, visitors can manage their privacy settings and adjust or revoke consents at any time.
Hosting, infrastructure and security
For hosting, performance, reliability, security functions and technical website analysis, we use in particular:
- Amazon Web Services (AWS)
- Amazon CloudFront
- Cloudflare CDN and Security Services
- Cloudflare Analytics
- Cloudflare Gymnastics Styles
Cloudflare Analytics supports us in the technical analysis of the use of our website, the measurement of performance and stability, error analysis and the detection of abusive or automated access. In particular, IP address, device and browser information, pages accessed, time of access, referrer information as well as technical connection and log data may be processed. The processing is carried out for the secure, stable and efficient provision of our website. If required by law, the assignment is based on your consent.
Communication and collaboration
For internal and external communication, we use in particular:
- Microsoft 365
- Microsoft Exchange Online
- Microsoft Teams
- Microsoft SharePoint
- Microsoft OneDrive
These systems are used for communication, collaboration, document management and processing of customer requests.
Analysis and optimization
To analyse and optimise our website, we use in particular:
- Google Analytics
- Hotjar
- Microsoft Clarity
- VWO (Visual Website Optimizer)
These services help us understand how visitors use our website and how we can improve usability, content and processes.
Google Analytics
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics helps us analyze the use of our website and continuously improve our content, products, and usability.
In particular, the following information may be processed:
- pages visited,
- clicking, scrolling and navigation behavior,
- Search queries within the website,
- products viewed,
- Initiation and termination of order processes,
- Device and browser information,
- operating system,
- Language settings,
- Referrer information,
- approximate location information,
- the date and time of the visit,
- technical usage data and
- pseudonymized identifiers.
Where enabled, Google Analytics may provide additional features such as enhanced measurement, cross-device evaluations, statistical modeling, or other analytics to create aggregated reports on the use of our website.
Google processes the information collected on our behalf in order to compile reports on the use of our website, to provide statistical evaluations and to analyse the performance of our digital offerings.
The processing is carried out exclusively on the basis of your consent, insofar as such consent is required by the applicable data protection laws.
You can revoke your consent at any time via our Cookie Preference Center with effect for the future.
Insofar as personal data is processed in countries outside Switzerland or the European Economic Area, this is done exclusively under the application of appropriate safeguards, in particular on the basis of an adequacy decision, the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework or the standard contractual clauses adopted by the European Commission, to the extent applicable from time to time.
Tag Management
For the technical management and control of analysis and marketing services, we use:
Google Tag Manager
Google Tag Manager itself does not create user profiles and does not set cookies itself, but is only used to manage other tags.
We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is used exclusively for the technical management and control of website tags and scripts. Google Tag Manager is used to centrally integrate and manage analytics, marketing and other services on our website.
The Google Tag Manager itself does not create any user profiles, does not regularly set its own cookies and does not carry out any independent analyses of user behaviour. However, it processes technical connection data, in particular the IP address, insofar as this is necessary for the provision and execution of the integrated services.
The actual processing of personal data is carried out exclusively by the services integrated via Google Tag Manager. The information and legal bases described in this Privacy Notice apply to these services.
Tags that are not technically required will only be activated via our consent management system after you have given your consent. You can revoke or adjust your consent at any time with effect for the future.
Insofar as personal data is processed outside Switzerland or the European Economic Area, this is done exclusively under the application of appropriate safeguards, in particular on the basis of an adequacy decision, the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework or the standard contractual clauses adopted by the European Commission, to the extent applicable from time to time.
Hotjar
We use Hotjar, a web analytics and optimization service provided by Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St. Julian's STJ 3141, Malta.
Hotjar supports us in continuously improving the usability, functionality and performance of our website. To do this, Hotjar analyzes how visitors use our website and interact with individual pages or features.
In particular, the following information may be processed:
- pages and content viewed,
- clicking, scrolling and navigation behavior,
- mouse movements,
- Interactions with forms (without storing the entered content, if technically configured),
- Initiation and termination of ordering or registration processes,
- Use of individual functions or buttons,
- technical equipment information,
- Browser type and version,
- operating system,
- screen resolution,
- Language settings,
- Referrer information,
- the date and time of the visit,
- pseudonymised device and session identifiers,
- IP address in abbreviated or pseudonymized form, insofar as this is technically intended.
In particular, the following functions can be used for analysis:
- Heat maps for evaluating the use of individual page areas,
- Scroll maps for analyzing scrolling behavior,
- Session Recordings (pseudonymized session recordings),
- Conversion and funnel analytics,
- Form Analytics,
- Feedback and survey functions,
- technical error and performance analyses.
The information collected by Hotjar is only used to:
- Improve the usability of our website,
- identify technical errors,
- Optimize navigation and usability,
- To further develop purchasing and ordering processes,
- Adapt content and features to the needs of our visitors, and
- Continuously improve the quality of our digital services.
We configure Hotjar in such a way that personal data is only processed to the extent necessary. In particular, input fields with personal data, passwords and payment information are technically masked or excluded from recording, insofar as this is supported by Hotjar.
The processing is carried out exclusively on the basis of your consent, insofar as such consent is required by the applicable data protection laws.
You can revoke or adjust your consent at any time via our Cookie Preference Center with effect for the future.
In addition, you can object to the processing by Hotjar via the opt-out option provided by Hotjar. Further information on this and Hotjar's data protection measures can be found in the provider's privacy policy.
Insofar as personal data is processed outside Switzerland or the European Economic Area, this is done exclusively under the application of appropriate safeguards, in particular on the basis of an adequacy decision, the EU-U.S. Data Privacy Framework, the Swiss-U.S. Data Privacy Framework or the standard contractual clauses adopted by the European Commission, to the extent applicable from time to time.
Läderach uses Hotjar exclusively in a privacy-friendly configuration. The collection of keystrokes, passwords, payment data and other sensitive input fields is disabled. Session recordings are processed exclusively in pseudonymized form and are used exclusively for statistical and qualitative evaluations.
Marketing and advertising
In order to carry out, control and measure the success of marketing measures, we can use the following services in particular:
- Google Ads
- Google Ads Conversion Tracking
- Google Ads Remarketing
- Meta Pixel
- Microsoft Advertising
- Klaviyo
Shared responsibility at Meta Pixel
When Meta Pixel is used, joint responsibility within the meaning of Art. 26 GDPR may arise in the context of the collection and transmission of event data to Meta Platforms Ireland Limited.
Insofar as such joint responsibility exists, the parties involved have concluded corresponding agreements on the respective responsibilities under data protection law. For more information on Meta's processing of personal data, please refer to Meta's Privacy Notice.
External content and additional functions
External services can be integrated on individual pages, in particular:
- Google Maps
- Google Fonts
- UserWay
By using these functions, technical connection data can be transmitted to the respective providers.
Address validation and credit check
To improve data quality and avoid incorrect entries, we may use the following services in particular:
- PCA Predict
In order to carry out legally permissible credit checks, we may use in particular:
- Intrum AG
Credit checks are only carried out for selected payment methods or if there is an increased risk of fraud.
Surveys and feedback
In order to conduct surveys, competitions or feedback surveys, we may use in particular:
- Typeform
Search Engine Optimization and Marketing Support
To improve our digital visibility and marketing measures, we can use the following service providers in particular:
- Green.Click A/S
- Refyne
An up-to-date overview of the third-party providers used and their functions can be requested from the data protection officer at any time.
In the context of the use of our website and the use of our services, it may be necessary to transfer personal data to countries outside Switzerland or the European Economic Area.
This applies in particular to certain cloud, analytics, marketing, security and communications services.
Countries outside Switzerland and the European Economic Area
Depending on the services used, personal data may be transferred to the following countries in particular:
- United States of America (USA)
- India
| Provider / Service | Possible third country | Protection mechanism |
|---|---|---|
| Google Services | USA | DPF / SCC, if necessary |
| Meta Pixel | USA | DPF / SCC, if necessary |
| Microsoft Services | USA | DPF / SCC, if necessary |
| Cloudflare | USA | SCC / additional protective measures |
| Klaviyo | USA | DPF / SCC |
| UserWay | USA | SCC / additional protective measures |
| VWO / Wingify | India | SCC / additional protective measures |
| Typeform | U.S. through Affiliates | SCC |
Adequacy decisions
If an adequacy decision has been made by the European Commission or the Swiss Federal Council for a recipient country, the data will be transferred on this basis.
Standard contractual clauses
Unless an adequacy decision has been made, international data transfers are generally based on the Standard Contractual Clauses (SCCs) adopted by the European Commission or other legally recognised transfer mechanisms.
For data transfers from Switzerland, the requirements of the Swiss Data Protection Act will be taken into account accordingly.
Additional protective measures
Where necessary, we take additional technical, organisational and contractual protective measures to ensure an appropriate level of data protection.
These may include, in particular:
- Encryption
- Access restrictions
- Logging
- Authorization concepts
- Contractual security requirements
Data Privacy Framework
If individual service providers are certified according to the EU-U.S. Data Privacy Framework, the data transfer can also take place on this basis.
Learn more
Further information on the international transfer mechanisms we use can be requested at any time from the Data Protection Officer.
Our website uses cookies, local storage, session storage, pixel technologies, tags and similar technologies (hereinafter collectively referred to as "cookies").
These technologies are used to ensure the functionality of our website, to analyze usage, to personalize content and to control marketing measures and measure their effectiveness.
What are cookies?
Cookies are small text files or similar technologies that are stored or read on your device when you visit our website.
Cookies may contain information about your usage behaviour, your settings or technical information about your device.
Categories of cookies
Technically necessary cookies
These cookies are necessary for our website and online store to function properly.
In particular, they enable:
- Login to customer accounts
- Shopping cart functions
- Storage of language settings
- Security features
- Load Balancing and System Stability
Without these cookies, the website cannot function properly.
Preference cookies
These cookies store settings you have chosen to make your use of our website more convenient.
These include, for example:
- Language settings
- Regional settings
- User Settings
Analytics and statistics cookies
These cookies help us understand how visitors use our website.
In particular, the following services can be used for this purpose:
- Cloudflare Analytics
- Google Analytics
- Hotjar
- Microsoft Clarity
- VWO
The information obtained in this way helps us to optimise our website and our services.
Marketing and advertising cookies
These cookies enable the measurement and optimization of marketing campaigns and the display of interest-based advertising.
In particular, the following services can be used for this purpose:
- Google Ads
- Google Ads Conversion Tracking
- Google Ads Remarketing
- Meta Pixel
- Microsoft Advertising
- Klaviyo
Technologies
- Local Storage
- Session Storage
- Pixels and tracking pixels
- Web Beacons
- Tags
- Software Development Kits
- Server-side interfaces
- APIs and APIs
Purposes
- Provide and secure websites and online shops
- Save settings and cart contents
- Measure website and campaign performance
- Analyze usage behavior
- Recognize devices and browsers
- Attribute purchases and conversions to ad campaigns
- Personalize content and advertising
- Measure delivery, opens, and clicks on marketing emails
Consent management
To manage your cookie settings, we use the consent management platform Cookie Information.
You can use the consent banner to give, adjust or revoke your consent at any time.
The storage or reading of unnecessary cookies is carried out exclusively on the basis of your consent, insofar as this is required by law.
Withdrawal of consent
You can revoke or change your consent at any time with effect for the future via the cookie settings of our website.
The revocation does not affect the lawfulness of the processing carried out up to the revocation.
Further information on the specific cookies used, storage periods and providers can be found in our current Cookie Policy.
The current complete overview of the cookies, local storage and session storage objects used, including provider, purpose, category and storage period, can be accessed via our Cookie Preference Center.
Browser settings
Regardless of the settings of our consent management system, you can configure your internet browser to block, restrict or delete cookies and similar technologies.
In particular, depending on the browser you are using, you can:
- delete cookies that have already been stored,
- prevent the storage of new cookies,
- only allow or reject certain cookies,
- Block third-party cookies,
- be notified before a cookie is stored, or
- delete all cookies automatically after the end of the browser session.
Please note that deactivating technically necessary cookies or comparable technologies may result in individual functions of our website or our online shop not being available or only available to a limited extent.
Information on how to manage cookie settings can be found in the help sections of the respective browsers, in particular:
- Google Chrome
- Mozilla Firefox
- Microsoft Edge
- Apple Safari
In addition, you can revoke or adjust consents you have already given at any time via our Cookie Preference Center.
We only store personal data for as long as is necessary for the respective processing purposes or as long as there are statutory retention obligations.
The specific storage period depends in particular on:
- the purpose of the processing,
- statutory retention obligations,
- tax and commercial law requirements,
- contractual obligations,
- legitimate interests,
- statutory limitation periods.
After the respective purpose has ceased to exist, personal data will be deleted, anonymised or blocked, provided that there are no statutory retention obligations to the contrary.
Typical retention periods
| Data category | Retention period |
|---|---|
| Customer account data | Until the deletion of the customer account |
| Order and invoice data | 10 years |
| Payment and accounting data | 10 years |
| Contract-relevant correspondence | 10 years |
| Support and Service Requests | Up to 3 years |
| Newsletter data | Until consent is withdrawn |
| Marketing Consents | Up to 3 years after withdrawal or last interaction |
| Proof of consent | Up to 3 years |
| Web server logs | Up to 90 days |
| Security and audit logs | Up to 90 days |
| Credit check data | In accordance with the legal requirements and the retention periods of the respective service provider |
If there are longer statutory retention obligations or claims have to be asserted, exercised or defended, personal data may be stored for a correspondingly longer period.
You have various rights under applicable data protection laws regarding the processing of your personal data.
To exercise your rights, you can contact the Data Protection Officer or the contact points mentioned in this data protection notice at any time.
Right to information
You have the right to request information as to whether we are processing personal data about you.
If this is the case, you can request information on the following points in particular:
- Processing Purposes
- Categories of personal data
- Recipients or categories of recipients
- planned storage period
- Origin of the data
- Existence of automated decisions
Right to rectification
You have the right to request the correction of inaccurate or incomplete personal data.
Right to erasure
You have the right to request the deletion of your personal data, provided that there are no statutory retention obligations or other legal reasons to prevent it from being deleted.
Right to restriction of processing
You can request that the processing of your personal data be restricted under the legal conditions.
Right to data portability
To the extent provided by law, you have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format or to have it transferred to another controller.
Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data to the extent that it is based on legitimate interests.
If personal data is processed for direct marketing, you can object to this processing at any time.
Withdrawal of consent
A given consent can be revoked at any time with effect for the future.
The revocation does not affect the lawfulness of the processing carried out up to the revocation.
Automated decisions
We do not make purely automated decisions with legal effects or comparably significant effects on data subjects. There may be an analysis of interests or preferences for marketing purposes; however, this does not constitute an automated decision within the meaning of Art. 22 GDPR.
If you believe that the processing of your personal data violates applicable data protection laws, please contact us or our Data Protection Officer in the first instance.
Regardless, you have the right to lodge a complaint with a competent data protection supervisory authority.
European Union
Data subjects within the European Union may contact the data protection supervisory authority of their habitual residence, place of work or place of the alleged infringement.
An overview of the European data protection supervisory authorities can be found on the website of the European Data Protection Board (EDPB).
Switzerland
Data subjects in Switzerland can contact the Federal Data Protection and Information Commissioner (FDPIC).
Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1CH-3003 Bern Switzerland
Website: www.edoeb.admin.ch
Contacting Läderach
Regardless of your right to lodge a complaint, we are always available to answer any questions you may have about data protection or how to exercise your rights.
Data Protection Officer
Dipl.-Ing. Lars EbertzEBERTZ DATENSCHUTZ GmbH
E-mail: [email protected]
We will carefully consider each request and endeavour to deal with your request in a timely and transparent manner.
This Privacy Notice may be published in several language versions. The foreign-language versions are for information purposes only.
To the extent permitted by law, in the event of contradictions, differences of interpretation or inconsistencies between the various language versions, only the German language version shall prevail.
This does not affect mandatory statutory rights of data subjects under the applicable data protection laws.
| Provider | Function | Processed data | Role | Legal basis | Third country | Protection mechanism |
|---|---|---|---|---|---|---|
| Adobe Commerce (Magento) | Shop Platform | Customer account, orders, shopping cart, product data | Processors | Art. 6 (1) (b) GDPR | no | GCU |
| Amazon Web Services (AWS) | Hosting and Cloud Infrastructure | Server data, usage data, technical data | Processors | Art. 6 (1) (f) GDPR | USA (possibly) | DPF / SCC |
| Amazon CloudFront | Content Delivery Network | IP address, browser data, technical connection data | Processors | Art. 6 (1) (f) GDPR | USA | DPF / SCC |
| Cloudflare | CDN, WAF, bot protection, performance | IP address, browser data, log data | Processors | Art. 6 (1) (f) GDPR or consent for analytics | USA | SCC / DPF if applicable |
| Cookie Information | Consent Management Platform | Consent ID, consents, browser data | Processors | Art. 6 (1) (c) GDPR in conjunction with Section 25 TDDDG or legitimate interest in providing evidence | EU | GCU |
| Google Analytics | Web analytics | Usage data, device information, pseudonymized identifiers | Processors | Art. 6 (1) (a) GDPR | USA | DPF / SCC |
| Google Tag Manager | Tag Management | Technical connection data | Processors | Art. 6 (1) (f) GDPR | USA | DPF / SCC |
| Google Ads | Advertisement | Cookie ID, campaign data, conversion data | Processor / own controller per function | Art. 6 (1) (a) GDPR | USA | DPF / SCC |
| Google Maps | Maps | IP address, location data (if shared) | Independent controller | Art. 6 (1) (a) GDPR | USA | DPF |
| Google Fonts | Font display | IP address | Processor or controller per integration | Art. 6 (1) (f) GDPR or consent | USA | DPF |
| Meta Pixel | Conversion Tracking | Cookie ID, Device Information, Usage Behavior | Joint responsibility according to Art. 26 GDPR | Art. 6 (1) (a) GDPR | USA | DPF |
| Microsoft Clarity | UX Analysis | Usage data, scrolling and click behavior | Processors | Art. 6 (1) (a) GDPR | USA | DPF |
| Microsoft Advertising | Advertisement | Advertising IDs, conversion data | Processors | Art. 6 (1) (a) GDPR | USA | DPF |
| Microsoft 365 | Communication and collaboration | Communication data, documents | Processors | Art. 6 (1) (b) (f) GDPR | USA (possibly) | DPF / SCC |
| Klaviyo | Newsletter and Marketing Automation | Email address, marketing preferences, open and click data | Processors | Art. 6 (1) (a) GDPR | USA | DPF / SCC |
| Hotjar | Usage analysis | Usage data, heat maps, session data | Processors | Art. 6 (1) (a) GDPR | Malta / third country if applicable | SCC if necessary |
| VWO | A/B Testing | Usage data, browser data | Processors | Art. 6 (1) (a) GDPR | India | SCC |
| Typeform | Surveys | Contact details, answers | Processors | Art. 6 (1) (a) or (b) GDPR | USA | SCC |
| PCA Predict | Address validation | Address data | Processors | Art. 6 (1) (b) GDPR | UK | Adequacy decision |
| Intrum AG | Credit check | Identity and creditworthiness data | Independent controller | Art. 6 (1) (b) (f) GDPR | Switzerland | Adequacy decision |
| UserWay | Accessibility | Technical usage data | Processors | Art. 6 (1) (f) GDPR | USA | SCC / DPF |
| Green.Click A/S | SEO and Marketing | Usage and Marketing Data | Processors | Art. 6 (1) (f) GDPR | Denmark | EU |
| Refyne | Marketing Optimization | Marketing and analytics data | Processors | Art. 6 (1) (f) GDPR | Denmark | EU |
Purpose of the register
As part of the use of our website, our online shops and group-wide business processes, it may be necessary to transmit personal data to recipients outside the European Union, the European Economic Area or Switzerland.
LÄDERACH carries out international data transfers exclusively in compliance with the GDPR, the Swiss FADP and other applicable data protection laws.
Unless an adequacy decision has been made, international data transfers will only be carried out using appropriate safeguards in accordance with Art. 46 GDPR or the corresponding provisions of Swiss data protection law.
| Service Provider / Recipient | Purpose of processing | Data categories | Recipient country | Transfer mechanism | Additional protective measures |
|---|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud Hosting | Server and Usage Data | USA (possibly) | EU-U.S. DPF / SCC | Encryption, access controls |
| Amazon CloudFront | CDN | IP address, browser data | USA | EU-U.S. DPF / SCC | TLS |
| Cloudflare | CDN/WAF | IP address, technical data | USA | SCC or DPF | Encryption |
| Google Analytics | Web analytics | Usage Data | USA | EU-U.S. DPF / Swiss-U.S. DPF / SCC | IP anonymization |
| Google Tag Manager | Tag Management | Technical data | USA | EU-U.S. DPF / SCC | Consent Management |
| Google Ads | Marketing | Advertising data | USA | EU-U.S. DPF / SCC | Consent Management |
| Google Maps | Maps | IP address | USA | EU-U.S. DPF | TLS |
| Google Fonts | Fonts | IP address | USA | EU-U.S. DPF | TLS |
| Meta Platforms | Meta Pixel | Cookie ID, device information | USA | EU-U.S. DPF | Consent Management |
| Microsoft 365 | Communication | Communication data | USA (possibly) | EU-U.S. DPF / SCC | Enterprise Security |
| Microsoft Clarity | Analysis | Usage Data | USA | EU-U.S. DPF | Consent Management |
| Microsoft Advertising | Marketing | Advertising data | USA | EU-U.S. DPF | Consent Management |
| Klaviyo | Newsletters | Email, marketing data | USA | EU-U.S. DPF / SCC | Access restrictions |
| Hotjar | Analysis | Pseudonymised usage data | Malta / third country if applicable | SCC | Pseudonymization |
| Typeform | Surveys | Contact Details | USA | SCC | Encryption |
| UserWay | Accessibility | Technical usage data | USA | SCC or DPF | TLS |
| VWO (Wingify) | A/B Testing | Usage Data | India | SCC | Encryption |
| Refyne | Marketing | Marketing data | Denmark | No third-country transfer | EU |
| Green.Click A/S | SEO | Marketing data | Denmark | No third-country transfer | EU |
| PCA Predict | Address validation | Address data | UK | Adequacy decision | GCU |
| Intrum AG | Credit check | Creditworthiness data | Switzerland | Adequacy decision | GCU |
General protective measures
- Transport Encryption (TLS)
- Encryption of stored data
- Pseudonymization as far as possible
- Need-to-Know Authorization Concepts
- Multi-factor authentication
- Logging of security-relevant access
- Regular security and compliance audits
- Data processing agreements in accordance with Art. 28 GDPR
- Transfer Impact Assessments (TIA), where required
Ongoing review
International data transfers are regularly reviewed. Changes in service providers, transfer mechanisms, adequacy decisions or regulatory requirements will lead to an update of this register.
Data exchange between LÄDERACH Schweiz AG, Österreich GmbH, Deutschland GmbH, France SAS and GCC Portugal for defined purposes.
| Society | Role | Purposes | Data categories |
|---|---|---|---|
| LÄDERACH (Schweiz) AG | Responsible persons | Control, Shop, Governance | Customer, order, usage data |
| LÄDERACH Österreich GmbH | Operative shop company | EU shop operation | Customer, order, payment data |
| LÄDERACH Deutschland GmbH | Local Society | Customer/Sales Processes | Contact, communication data |
| LÄDERACH France SAS | Local Society | Customer/Sales Processes | Contact, communication data |
| GCC Portugal | internal service provider | IT / Finance Backend | Support, financial, technical data |
LÄDERACH stores personal data only for as long as is necessary for the respective processing purposes or as long as there are statutory retention, proof or statute of limitations. After the respective purpose has ceased to exist, personal data will be deleted, anonymised or blocked, provided that there are no legal or justified reasons to the contrary.
| Data category | Retention period |
|---|---|
| Customer account data | Until the deletion of the customer account or until inactivity in accordance with the internal deletion guidelines |
| Order and invoice data | 10 years from the end of the financial year of the respective transaction |
| Payment and accounting data | 10 years in accordance with commercial and tax retention obligations |
| Contract-relevant correspondence | Up to 10 years |
| Customer Service, Support, and Complaint Data | Up to 3 years after completion of the process |
| Newsletter data | Until you revoke your consent or unsubscribe from the newsletter |
| Marketing Consent and Opt-in Evidence | Up to 3 years after revocation or last relevant interaction |
| Proof of consent (cookie and tracking consents) | Up to 3 years |
| Web server logs | Up to 90 days |
| Security, access, and audit logs | Up to 90 days, unless longer retention is required to investigate security incidents |
| Credit and fraud prevention data | In accordance with the legal requirements and the retention periods of the respective service provider |
Insofar as the further storage of personal data is necessary for the assertion, exercise or defence of legal claims or if there are statutory retention obligations, personal data may be stored beyond the above periods. After the respective reason for storage has ceased to exist, the data will be deleted or anonymized.
Possible systems: Microsoft Copilot, Azure OpenAI, DeepL or comparable systems according to internal AI governance.
| System Category | Examples | Purpose | Personal data | Decision with legal effect |
|---|---|---|---|---|
| Translation | DeepL | Translations | Preferably none / minimized | No |
| Office AI | Microsoft Copilot | Text/research support | depending on the input | No |
| Azure AI | Azure OpenAI | Process support | only after approval | No |
| Processing | EU GDPR | Switzerland FADP |
|---|---|---|
| Shop operation | Art. 6 para. 1 lit. b | Performance of the contract |
| Customer account | Art. 6 para. 1 lit. b | Performance of the contract |
| Newsletters | Art. 6 para. 1 lit. a | Consent |
| Direct marketing to existing customers | Art. 6 para. 1 lit. f | overriding interest |
| Analytics cookies | Art. 6 para. 1 lit. a | Consent |
| IT Security | Art. 6 para. 1 lit. f | overriding interest |
| Storage | Art. 6 para. 1 lit. c | legal obligation |
| Credit check | Art. 6 para. 1 lit. b/f | Contract / overriding interest |
1. Purpose of our social media presences
The LÄDERACH Group maintains official company profiles on various social media platforms in order to communicate with customers, interested parties, business partners and the public, to present products and services, to carry out marketing and recruiting measures and to provide information about the company.
The use of our social media presences is voluntary. When visiting these presences, personal data may be processed both by LÄDERACH and by the respective platform operator.
The operators of social networks regularly process personal data for their own purposes, in particular for the creation of usage profiles, reach measurements, personalisation of advertising and to improve their services. LÄDERACH has only limited influence on the type and scope of this processing.
2. Categories of personal data
Depending on the nature of your use of our social media presences, the following personal data in particular may be processed:
Identification data
- Name
- Username
- Profile picture
- public profile information
Communication data
- Comments
- Direct messages
- Posts
- Reviews
- Likes
- Reactions
- Shares
- Mentions
Usage Data
- Pages visited
- Interactions with posts
- Video views
- Click behavior
- Range information
- Statistical usage data
- Campaign interactions
Technical data
- IP address
- Browser Information
- Device Information
- Operating System
- Language settings
- Referrer
- Cookie Information
- Location information (if released)
3. Purposes of processing
The processing of personal data is carried out in particular for the following purposes:
- Providing our social media presences
- Communication with prospects and customers
- Processing of inquiries
- Customer Service
- Disclosure of company information
- Product and brand communication
- Implementation of marketing campaigns
- Employer Branding
- Recruiting
- Reach analysis
- Measuring the success of campaigns
- Improving our digital communication
- Protecting our company profiles from misuse
4. Legal basis
European Union
Insofar as personal data is processed by LÄDERACH, this is done in particular on the basis of:
- Art. 6 (1) (a) GDPR (consent)
- Art. 6 (1) (b) GDPR (contract or contract initiation)
- Art. 6 (1) (f) GDPR (legitimate interest)
Our legitimate interest consists in particular in
- contemporary corporate communication,
- Customer service,
- Marketing,
- Brand management,
- Reach analysis as well as
- improving our digital offerings.
Switzerland
For Switzerland, the processing is carried out on the basis of
- your consent,
- the performance of the contract or
- our overriding legitimate interest in accordance with the Swiss Data Protection Act (FADP).
5. Joint Responsibility
In the case of the operation of individual social media presences, there may be joint responsibility between LÄDERACH and the respective platform operator in accordance with Art. 26 GDPR.
This applies in particular:
Where provided for by law, agreements on joint responsibility have been concluded.
The operators of the respective platforms remain independently responsible for their own data processing.
6. International data transfers
When using social networks, personal data may be transferred to countries outside the European Union, the European Economic Area or Switzerland.
Where necessary, such data transfers are made on the basis of
- an adequacy decision,
- the EU-U.S. Data Privacy Framework,
- of Swiss-U.S. Data Privacy Framework,
- the European Commission's Standard Contractual Clauses (SCC),
- other legally recognised transfer mechanisms.
Further information on this can be found in Chapter 8 of this Privacy Policy.
7. Social Media Register
| Platform | Provider | Purpose | Shared responsibility | Transfer to third countries |
|---|---|---|---|---|
| Meta Platforms Ireland Ltd. | Corporate Communications, Marketing, Customer Service | Yes | USA | |
| Meta Platforms Ireland Ltd. | Brand Communication, Marketing | Yes | USA | |
| LinkedIn Ireland Unlimited Company | Corporate Communications, Recruiting | Partially | USA | |
| YouTube | Google Ireland Limited | Company videos, product information | No | USA |
| TikTok | TikTok Technology Limited | Marketing, brand communication | Partially | Third countries possible |
8. Platform-related features
For our Facebook page, there may be joint responsibility with Meta Platforms Ireland Limited for the processing of page statistics (Facebook Insights).
Meta provides further information in its privacy policy.
Our Instagram presence is operated by Meta Platforms Ireland Limited.
When using the platform, Meta processes personal data independently in accordance with Instagram's privacy policy.
Our LinkedIn company page is used in particular for corporate communication, recruiting and information about career and business opportunities.
LinkedIn processes personal data on its own responsibility in accordance with the company's data protection regulations.
YouTube
Our YouTube presence is used to provide company, product and informational videos.
When you visit our channel, Google processes personal data in accordance with Google's privacy policy.
TikTok
Our TikTok presence is used to showcase our brand and publish corporate and marketing content.
TikTok processes personal data on its own responsibility in accordance with its privacy policy.
9. Rights of data subjects
Your rights regarding the processing of personal data are governed by Chapter 11 of this Privacy Notice.
You can assert your rights both against LÄDERACH and – insofar as the respective processing takes place in the area of responsibility of the platform operator – directly against the respective operator.
10. Contact person
If you have any questions about the processing of personal data in connection with our social media presences, you can contact our data protection officer at any time.
Data Protection Officer
Dipl.-Ing. Lars Ebertz
EBERTZ DATENSCHUTZ GmbH
E-mail: [email protected]
For more information about your privacy rights, please see Chapter 11 and the right to lodge a complaint in Chapter 12 of this Privacy Notice.
Cookie Policy
Cookie Policy
The cookie policy was last updated on 10.08.2026
Necessary Cookies are used to
- Remember information you have entered when you navigate on our websites
- Identify you as being logged in to our websites
- Remember your order when you book our websites
Functional Cookies are used to
- Remember settings you have applied such as layout, language, or preferences
- Show you when you are logged in to our websites
- Share information with partners to provide a service on our websites
Statistical Cookies are used to
- Provide statistics on how our website is used
- See how effective our adverts are
- Detect any errors that occur
- Test different designs of our websites
Marketing Cookies are linked to services provided by third parties, such as 'Like' buttons and 'Share' buttons. We use them to
- Provide adverts that are most relevant to you
- Link to social networks like Facebook, which may subsequently use information about your visit to target advertising to you on other websites
- Provide advertising agencies with information on your visit so that they can present you with adverts that you may be interested in.
You can find the complete list of cookies and their respective details at the following link.
You may at any time block all or just third-party cookies completely by changing the browser settings on your computer, tablet or smartphone. The location of these settings will depend on the browser you use. However, you should be aware that if you block all or just third-party cookies, there may be functions and services that you will be unable to use on the website (because these depend on cookies). You can also opt-out of cookies from Google Analytics here.
Right of withdrawal
Right of withdrawal
Information on the right of withdrawal under the FAGG
Withdrawal Policy
You have the right to withdraw from the contract concluded with us within fourteen days without giving any reason, provided that the contract was concluded exclusively by means of distance selling, i.e. for example, exclusively via our online shop or by email.
Please note: Your right of withdrawal may be excluded in certain cases, for example, if our chocolate was delivered sealed and the seal was removed after delivery, and the product is unsuitable for return on grounds of health protection or hygiene, or if the goods are perishable or their use-by date may be exceeded quickly, or if the goods have been manufactured to the customer’s specifications or are clearly tailored to their personal needs.
The withdrawal period is fourteen days and begins on the day on which you, or a third party designated by you who is not acting as a carrier, takes possession of the goods.
To exercise your right of withdrawal, you must inform us of your decision to withdraw from this contract by means of a clear statement (for example, a letter sent by post or an email). Your notice of withdrawal does not need to be in any specific form. You may use the attached model withdrawal form for this purpose, although this is not mandatory.
You may also complete the model withdrawal form or another unambiguous statement electronically on our website Electronic Withdrawal Form and submit it. If you make use of this option, we will send you confirmation of receipt of such a withdrawal without delay (e.g. by email).
To meet the withdrawal deadline, it is sufficient for you to send notification of your exercise of the right of withdrawal before the withdrawal period expires.
If you withdraw from this contract, we shall refund to you all payments we have received from you, including delivery costs (with the exception of any additional costs arising from your choice of a delivery method other than the cheapest standard delivery offered by us), without delay and at the latest within fourteen days of the day on which we receive notification of your withdrawal from this contract.
We will use the same means of payment for this refund as you used for the original transaction, unless expressly agreed otherwise with you; in no event will you be charged any fees in connection with this refund.
We may withhold the refund until we have received the goods back or until you have provided evidence that you have returned the goods, whichever is the earlier.
You must return the goods to us without delay and, in any event, no later than fourteen days from the day on which you notify us of your withdrawal from this contract. The deadline is met if you post the goods before the expiry of the fourteen-day period.
You shall bear the direct costs of returning the goods.
You will only be liable for any loss in value of the goods if this loss in value is attributable to handling of the goods that goes beyond what is necessary to check their nature, characteristics and functioning.
If you wish to withdraw from the contract, you may complete the withdrawal form attached below withdrawal form and return it to us. However, you are not obliged to use this form.
Legal Notice
Legal Notice
Information on the data controller
Läderach (Schweiz) AG
Bleiche 14
CH-8755 Ennenda
Switzerland
Represented by:
CEO: Johannes Läderach
Registration:
Entry in the Commercial Register.
Register court: Glarus
Registration number: VAT number: CHE-105.952.960
VAT:
VAT registration number:
CHE-105.952.960
On behalf of / responsible for the online shop:
Läderach (Österreich) GmbH
Mariahilfer Straße 86
1070 Vienna
Austria
Registered office: Vienna
Company registration number: FN 527650 g
Commercial Register Court: Vienna Commercial Court
Managing Directors: Marco Heyn, Mag. (FH) Horant Woschitz
Registered for business purposes in: Vienna, Austria
Members of the Austrian Chamber of Commerce
Supervisory authority/Trade Authority: MA 63
Applicable trade regulations: GewO (available at www.ris.gv.at)
VAT registration number: ATU75157679
Telephone number: +436642108853
Email address: [email protected]
We are not obliged to participate in dispute resolution proceedings before a consumer arbitration board.
As a service provider, we are responsible for our own content on these pages in accordance with general legislation. However, as a service provider, we are not obliged to monitor third-party information that is transmitted or stored, or to investigate circumstances that indicate unlawful activity.
Obligations to remove or block the use of information in accordance with general laws remain unaffected by this. However, liability in this regard is only possible from the time we become aware of a specific legal infringement. Should we become aware of any such infringements, we will remove the content in question immediately.
Our website contains links to external third-party websites over whose content we have no control. We therefore cannot accept any liability for this third-party content. The respective provider or operator of the linked pages is always responsible for their content. The linked pages were checked for possible legal infringements at the time the links were created. No unlawful content was identifiable at the time the links were created.
However, it is not reasonable to expect us to monitor the content of the linked pages on an ongoing basis without specific evidence of a legal infringement. Should we become aware of any legal infringements, we will remove such links immediately.
The content and works on these pages created by the site operators are subject to copyright. The reproduction, adaptation, distribution and any form of use outside the limits of copyright law require the written consent of the respective author or creator. Downloads and copies of this site are permitted only for private, non-commercial use.
Where the content on this site has not been created by the operator, the copyright of third parties is respected. In particular, third-party content is identified as such. Should you nevertheless become aware of a copyright infringement, please notify us accordingly. Should we become aware of any infringements, we will remove such content immediately.








Cyprus 








































