Privacy Policy

How LEC GmbH processes personal data collected through this website

This website is operated by LEC GmbH, A-8010 Graz, Inffeldgasse 19 („we“ or „us“). The protection of your personal data is of particular concern to us. We process your data exclusively based on legal regulations (especially GDPR, DSG, TKG 2003). In this statement, we inform you according to Article 13 of the General Data Protection Regulation (GDPR) about how we, as the data controller, process your personal data in connection with this website.

1. What Data We Process About You

During your visit to this website, we collect the following information: the date and time you access a page on our website, your IP address, the name and version of your web browser, the webpage (URL) you visited before accessing this website, certain cookies (see point 2 below), and the information you provide to us as a user and/or customer (e.g., during an inquiry or registration on our website). When entering into a contract, the following data will be stored for the purpose of contract execution: contact details such as name, address, email address, and job function in the company, as well as bank details.

If processing your personal data is not necessary to fulfill the obligations of a contract with you, there is no obligation to provide the data that we request on our website.

2. Cookies

This website uses so-called cookies. A cookie is a small text file that can be stored on your computer when you visit a website. Generally, cookies are used to provide additional features to website users. They can, for example, be used to make navigation easier, allow you to continue browsing a website from where you left off, and/or store your preferences and settings when you revisit the site. Cookies cannot access, read, or change any other data on your computer.

We use cookies to make our offerings more user-friendly. Most of the cookies on this website are session cookies. These are automatically deleted when you leave our website. Permanent cookies, on the other hand, remain stored on your device until you manually delete them in your browser. We use these permanent cookies to recognize you when you visit our website again.

If you want to control cookies on your computer, you can configure your browser settings to notify you when a website wants to store cookies. You can also block or delete cookies already stored on your computer. If you want to learn how to do this, please use the „Help“ function in your browser. Please note that blocking or deleting cookies may affect your online experience and prevent you from fully using this website.

For clarity: our web analytics (see point 3) sets no cookies at all. The only cookie this website sets is a session cookie for the internal, password-protected statistics area, which is used exclusively by our own staff.

3. Web Analytics

To find out how our website is used, we run our own analytics on the same server that delivers this website. We do not use Google Analytics or any other third-party analytics service. No usage data is transferred to third parties, to other countries, or to any advertising network.

For each page view, we record the time of access, the page requested, the domain of the website that referred you (not the full address), and a pseudonymous visitor identifier. That identifier is a cryptographic hash (SHA-256) computed from your IP address, your browser identification, and a secret key known only to us. Your IP address itself is not stored — only the hash, which cannot be traced back to you without the secret key. Its sole purpose is to let us recognise a repeat visit, so that our statistics can count visitors rather than only page views. It is not combined with any other data, is not used to recognise you across other websites, and is not used to build a profile.

No cookies are set for this purpose, and nothing is stored on your device.

The legal basis is our legitimate interest under Art. 6(1)(f) GDPR in basic, privacy-preserving statistics about the use of our website. Because the data is pseudonymous, minimal, and never leaves our own server, we consider that your interests and rights do not override that interest.

This data is deleted automatically after 24 months at the latest.

If you do not want your visit to be counted, activate the „Do Not Track“ or „Global Privacy Control“ setting in your browser: our analytics honours both signals and records nothing in that case. Blocking JavaScript for this website also prevents any recording.

4. Purposes of Data Processing

We will process your personal data for the following purposes:

  • To provide you with this website and to improve and develop it further
  • To create usage statistics
  • To detect, prevent, and investigate attacks on our website
  • For marketing and advertising purposes (note: as potential customers of our offerings, we would like to inform you about new developments and offers of our products)
  • To respond to your inquiries
  • To process the contract with you (to your full satisfaction) and to conduct pre-contractual measures
  • To send you a newsletter or other information about upcoming events

5. Legal Grounds for Processing

The legal grounds for processing your personal data are:

  • Our legitimate interest (pursuant to Art. 6(1)(f) GDPR) in achieving the purposes mentioned above under point 4
  • Your consent (pursuant to Art. 6(1)(a) GDPR) during registration
  • The necessity for contract initiation and performance (pursuant to Art. 6(1)(b) GDPR)

6. Transmission of Your Personal Data

For the above purposes, we will transmit your personal data to the following recipients:

  • IT service providers we engage
  • Banks/payment service providers
  • Tax consultants

Some of the aforementioned recipients may be located outside your country or process your personal data there. The level of data protection in other countries may not meet the level in your country. However, we will only transfer your personal data to countries for which the EU Commission has determined that they provide an adequate level of data protection.

7. Retention Period

We will retain your data in case of a contact inquiry for a period of six months. In the case of a contract conclusion, all data related to the contractual relationship will be stored at least until the expiration of the tax retention period (i.e., 7 years), and beyond that until the conclusion of any legal disputes where the data is needed as evidence.

8. Your Rights in Relation to Personal Data

You are entitled to the following rights in relation to your personal data:

  • To check whether and which personal data we have stored about you and to request copies of this data
  • To request the correction, completion, or deletion of personal data that is incorrect or unlawfully processed
  • To request that we restrict the processing of your personal data
  • To request data portability
  • To object to the processing of your personal data or to withdraw your consent previously given for processing
  • To know the identity of third parties to whom your personal data is transferred
  • To lodge a complaint with the competent supervisory authority (in Austria: the Data Protection Authority) if you believe that the processing of your data violates data protection law or your data protection rights have been violated in any way. For more information, please refer to the website of the Data Protection Authority.

9. Our Contact Details

If you have any questions or concerns regarding the processing of your personal data, please contact us at:

LEC GmbH, A-8010 Graz, Inffeldgasse 19
Tel: +43 316 873 30101
Email: office@lec.tugraz.at