privacy policy
privacy policy
ZALTO GLAS GMBH
This Privacy Policy informs you about the type, scope, and purpose of the processing of personal data by ZALTO GLAS GMBH within the scope of our online offering and business relationships. Protecting your personal data is particularly important to us. We treat your data confidentially and in accordance with the statutory data protection regulations (in particular the GDPR, DSG 2018, TKG 2003).
For more information about cookies, please see our
cookie Policy.
Controller and Data Protection Contact
Controller:
ZALTO GLAS GMBH
Zweiländerstraße 8
3950 Gmünd, Austria
Phone: 0043 – 2852 20820
Fax: 0043 – 2852 20820 40
Email: office@zaltoglas.at
Data Protection Officer:
Due to the company size, no data protection officer has been appointed.
For any questions regarding data protection, please contact us directly:
Email: office@zaltoglas.at
Principles and Legal Basis of Data Processing
We process personal data exclusively on the basis of legal provisions. Processing only takes place if at least one of the following legal bases applies:
- Art. 6(1)(a) GDPR: Consent
- Art. 6(1)(b) GDPR: Contract fulfillment or pre-contractual measures
- Art. 6(1)(c) GDPR: Legal obligation
- Art. 6(1)(f) GDPR: Legitimate interest (e.g., IT security, marketing, customer service)
Data Collection When Using the Website (Server Log Files & Hosting)
When you visit our website, the following data is automatically collected and stored in server log files:
- IP address
- Date and time of the request
- Name and URL of the requested file
- Referrer URL
- Browser type/version, operating system
- Hostname of the accessing computer
Purpose: System stability, IT security, technical administration
Legal basis: Art. 6(1)(f) GDPR
Retention period: Log files are automatically deleted after 30 days unless required for the clarification of legal violations.
Hosting providers: df.eu / easyname.com
Contact
If you contact us via contact form, email, telephone, or social networks, we process the following
- First and last name
- Email address
- Telephone number (optional)
- Message content
- Time of the inquiry
Purpose: Processing and responding to your inquiry, customer support
Legal basis: Art. 6(1)(f) GDPR
Retention period: Data will be deleted after final processing and no later than two years, unless statutory retention obligations exist.
Newsletter
You can subscribe to our newsletter. We require your email address (mandatory) and optionally your first name. Registration is carried out using the double opt-in procedure. The registration time and IP address are logged.
Purpose: Sending information about products, offers, and company news
Legal basis: Art. 6(1)(a) GDPR (consent)
Withdrawal: Possible at any time via the unsubscribe link in the newsletter or by email to
office@zaltoglas.at.
Order Processing, Payment and Shipping Service Providers
Order Processing & Customer Account
We process the following data for orders:
- Name, address, date of birth
- Email, telephone number
- Payment data (e.g., IBAN, credit card details)
- Order history and preferences
Purpose: Contract fulfillment, order processing, invoicing
Legal basis: Art. 6(1)(b) GDPR
Retention period: 7 years in accordance with § 132(1) BAO (Austria).
Payment Processing via Mollie
For payment processing, we transfer data to Mollie B.V., Netherlands.
Further information:
https://www.mollie.com/de/privacy
Legal basis: Art. 6(1)(b) GDPR
Shipping Processing via SendCloud
For shipping, we transfer the necessary data to SendCloud GmbH, Germany.
Further information:
https://www.sendcloud.de/datenschutz
Legal basis: Art. 6(1)(b) GDPR
Accounting & Invoice Solutions (REST API)
For synchronization with our accounting, we transmit relevant data via REST API.
- Legal basis: Art. 6(1)(b) and (c) GDPR
- Security measures: Encrypted transmission (HTTPS), order processing in accordance with Art. 28 GDPR
Cooperation with Processors and Third Parties
We commission external service providers (e.g., IT, shipping, payment processing) in accordance with Art. 28 GDPR and only transfer data based on legal grounds, consent, or legitimate interest.
Transfer to Third Countries
Personal data is only transferred to third countries if special guarantees are in place in accordance with Art. 44 ff. GDPR (e.g., adequacy decision, standard contractual clauses, EU-U.S. Data Privacy Framework).
Social Media Presence
We maintain profiles on social networks (e.g., Facebook, Instagram, LinkedIn) to communicate with users and inform them about our services. The privacy policies of the respective platform operators apply.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest: marketing and communication)
Integration of Third-Party Services and Content
When retrieving integrated third-party content (e.g., videos, maps), your IP address is transmitted to the respective provider.
Legal basis: Art. 6(1)(f) GDPR (optimization of website functionality)
Data Protection for Applications
In the context of applications, we process the personal data and application documents provided.
Purpose: Conducting the application process
Legal basis: Art. 6(1)(b) GDPR, § 26 BDSG
Retention period: 6 months after completion of the process, except in the case of successful employment.
Technical and Organizational Measures
We implement extensive security measures, including:
- SSL/TLS encryption
- Access control and authorization concepts
- Regular, encrypted backups
- Employee data protection training
- Emergency plans for data protection breaches
Your Rights as a Data Subject
You have the following rights regarding your personal
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdrawal of consent
To exercise your rights, please contact:
Email: office@zaltoglas.at
Post: ZALTO GLAS GMBH, Zweiländerstraße 8, 3950 Gmünd
Right to Lodge a Complaint with the Supervisory Authority
You have the right to lodge a complaint with the competent supervisory authority:
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
Phone: +43 1 52 152-0
Email: sb@dsb.gv.at
https://www.dsb.gv.at
Management of Used Cookies
To manage the cookies and similar technologies (tracking pixels, web beacons, etc.) used and the associated consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at
https://devowl.io/knowledge-base/real-cookie-banner-data-processing/.
The legal bases for processing personal data in this context are Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR.
Our legitimate interest is the management of the cookies and similar technologies used and the associated consents.
The provision of personal data is neither legally nor contractually required nor necessary for the conclusion of a contract. You are not obliged to provide personal data. If you do not provide the personal data, we cannot manage your consents.
Changes to this Privacy Policy
This privacy policy is currently valid (as of June 2025).
Due to the further development of our website or changes in legal requirements, it may become necessary to amend this privacy policy. The current privacy policy can be found at any time on our website.
Last updated: 25.06.2025 / Version: 2.0