Privacy Policy

 

 

 

1. Introduction

 

LX Hausys Europe’s Privacy Policy describes how LX Hausys Europe GmbH (“LX Hausys Europe”, or “we”) collects, uses, and shares your personal data. As the data controller, we determine the purposes and the means of processing your personal data in accordance with the applicable laws and regulations, specifically the EU General Data Protection Regulation 2016/679 (“GDPR”). We ensure to take all necessary measures to protect the privacy of your personal information as set forth under this Privacy Policy.

 

 

2. Identity and contact information

 

For the processing of personal data on https://www.lxhausys.com/ (“website”) as well as in the context of our business operations we determine the purposes and means alone.

 

LX Hausys Europe GmbH

Lyoner Str. 15

60528 Frankfurt

Germany

 

Managing Directors:

Kang, In Sik / Chang, Cheol Ho / Park, Min Soo / Chun, Min Chul / Park, Seong Jun    

E-Mail: gdpr@lxhausys.com

 

Contact details of our data protection officer

 

Dr. Michael Foth

IBS data protection services and consulting GmbH

Zirkusweg 1, 20359 Hamburg, Germany

E-Mail: gdpr@lxhausys.com

 

 

 

3. Collection of Personal Data

 

Following personal data are collected by us:

 

• Data provided by the users directly
  • Contact form: name, company name, E-mail, postal/zip code, country, phone number, information related to your request
  • Newsletter: E-mail, timestamp and the IP address
• Information collected while the users use our website or services

• Log information: Device information, log data, use time, search word input by users, internet protocol address; cookie information (see also “Cookie Policy” https://www.lxhausys.com/eu-en/cookie-policy)

 

 

4. Use and Storage of Personal Data

 

4.1 Provision of our website

 

If you visit our website, your web browser communicates with our web server to provide the requested pages and content. Therefore, the following information is collected and stored automatically in so-called server log files:

 

• type and version of web browser and operating system
• Referrer URL (visited page)
• Target URL (requested page)
• IP address and hostname of the accessing device
• timestamp of the request

Purpose and legal basis

The server log files are processed for the purpose of providing the website on the basis of our overriding legitimate interests pursuant to Art. 6 (1) (f) GDPR. The legitimate interests pursued by us, are to ensure a secure, technically error free and comprehensible operation of our website.

 

As the processing of the data in the server log files is essential to operate the website, we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms in case you claim the right to object according to Art. 21 (1) GDPR.

 

Storage period

The server log files will be stored for 90 days and then deleted automatically.

 

 

4.2 Cookies and local storage

 

Cookies are small text files which are stored locally in your web browser and do not cause any damage to your device. Alternatively, your web browser provides a local storage to store small sizes of information. Cookies and local storage are storage technologies (“web technologies”), provided by your browser.

 

Web technologies could be used temporarily to store data for the duration of a session (“session cookies”, “session storage”) or permanently to archive data on your device until you or your browser actively delete them (“persistent cookies”, “local storage”).

 

In some cases, the web technologies are not set by our web server directly than by another server (“third party cookies”), to enable you or us to take advantage of certain services offered by the third party.

 

Purpose and legal basis

We use technically essential cookies or local storage for the purpose of providing certain website features on the basis of our overriding legitimate interests pursuant to Art. 6 (1) (f) GDPR. The legitimate interests pursued by us or a third party, are to provide essential website features which would not work in the absence of those web technologies.

 

As the processing of the data in the technically essential cookies or local storage is necessary to operate the website, we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms in case you claim the right to object according to Art. 21 (1) GDPR.

 

Additionally, we use technical essential cookies for the storage of your consent to the use of technically non-essential cookies (cookie consent) for the purpose of demonstration of compliance with the GDPR pursuant to Art. 6 (1) (c) GDPR.

 

We use technically non-essential cookies or local storage for analytics, marketing or functional purposes on the basis of your prior consent pursuant to Art. 6 (1) (a) GDPR. Your consent will be obtained via the cookie banner if you accept all cookies or if you select your preferences. You have the right to withdraw your consent at any time with future effect, by changing your preferences in the cookie settings.

 

Independently from any setting on this website, you can control the use of web technologies with your browser settings at any time. Please be aware, that the use of our website could be restricted, in case we are not able to use technically essential cookies or local storage.

 

Storage period

More detailed information about the specific usage of cookies and third-party services, including the storage periods, we provide in the Cookie Policy.

 

 

 

4.3 Analytical services

 

We use analytical webservices to help us understand the use and accessibility of our website by tracking and reporting the website traffic and visitor related behavior.

 

Purpose and legal basis

We use analytics services for the purpose of optimization of our website on the basis of your prior consent pursuant to Art. 6 (1) (a) GDPR. Your consent will be obtained via the cookie banner if you accept all cookies or if you select your preference to analytical cookies in the cookie settings. You have the right to withdraw your consent at any time with future effect, by changing your preferences in the cookie settings.

 

Storage period

More detailed information about the specific usage of cookies and third-party services, including the storage periods, we provide in the Cookie Policy (details for analytical cookies).

 

 

 

4.4 Marketing services

 

We use marketing webservices to optimize our marketing activities, integrate additional services and serve targeted ads to people who already visited or taken action on our website.

 

Purpose and legal basis

We use marketing services for the purpose of marketing activities on the basis of your prior consent pursuant to Art. 6 (1) (a) GDPR. Your consent will be obtained via the cookie banner if you accept all cookies or if you select your preference to marketing cookies. You have the right to withdraw your consent at any time with future effect, by changing your preferences in the cookie settings.

 

Storage period

More detailed information about the specific usage of cookies and third-party services, including the storage periods, we provide in the Cookie Policy (details for marketing cookies).

 

 

 

​​​​​​​4.5 Functional services

 

We use functional webservices to optimize the use and accessibility of our website and to provide comfortable features to our visitors.

 

Purpose and legal basis

We use functional services for the purpose of optimization of our website on the basis of your prior consent pursuant to Art. 6 (1) (a) GDPR. Your consent will be obtained via the cookie banner if you accept all cookies or if you select your preference to functional cookies. You have the right to withdraw your consent at any time with future effect, by changing your preferences in the cookie settings.

 

Storage period

More detailed information about the specific usage of cookies and third-party services, including the storage periods, we provide in the Cookie Policy (details for functional cookies).

 

 

 

​​​​​​​4.6 Contact form

 

You may contact us via email or phone. In any case, we only collect personal data directly from you which is necessary to handle your request. E-Mails and phone calls are transmitted over the Internet. Please be aware, that those connections are not encrypted by default and may cause risks for your rights and freedoms.

 

Purpose and legal basis

We process personal data related to the use of the contact form, electronic mails or phone calls for the purpose of handling your request. The legal basis depends on the context of your relationship.

 

Generally, if you are a customer or an interested person, we process your personal data for the performance of a contract to which you are party or in order to take steps prior to entering into a contract according to Art. 6 (1) (b) GDPR.

 

Otherwise, we process your personal data on the basis of our overriding legitimate interests pursuant to Art. 6 (1) (f) GDPR. The legitimate interests pursued by us, are to be able to handle your request.

 

Storage period

We store any personal data related to a request via email or telephone as long as it is necessary to handle the request.

 

 

 

​​​​​​​4.7 Newsletter

 

If you subscribe to our newsletter, we collect your email address and store it together with the timestamp and the IP address of your subscription as well as the confirmation with a separate mail (double opt-in). With every newsletter you will receive we process your email address to send you an email.

 

Purpose and legal basis

We process personal data related to the newsletter service to send you emails and provide you interesting information about our products and services, based on your prior consent according to Art. 6 (1) (a) GDPR. Your consent will be obtained by subscribing to the newsletter and confirming your subscription (double opt-in). You have the right to withdraw your consent at any time with future effect, by using the link “Unsubscribe” in the newsletter email.

 

Additionally, we process the information related to your subscription and unsubscription (withdrawal of your consent) for the purpose of demonstrating compliance with the GDPR, based on our legal obligation according to Art. 6 (1) (c) GDPR.

 

Storage period

Your email address will be stored as long as your consent to receive the newsletter is active. After your withdrawal we store your personal data related to the newsletter subscription for an additional period of two years to demonstrate your consent.

 

 

 

 

​​​​​​​4.8 Social media

 

The processing is carried out for the purpose of provision of our fan pages in social networks (company pages) as well as for marketing purposes on the basis of an overriding legitimate interest pursuant to Art. 6 (1) lit. f GDPR. Our legitimate interests are the support of the social media platforms as well as the presentation of our business activities and the implementation of marketing activities.

 

We have set a link to each of the social media pages. No further data exchange takes place with these pages on our site.

 

If you visit our company page on one of the following social media platforms, we jointly determine the purposes and means with the platform operators. In terms of data protection, we are jointly responsible pursuant to Art. 26 GDPR.

 

 

4.8.1 ​​​​​​​Facebook

 

The Facebook Fanpage is provided by Meta Platforms Ireland Ltd (Meta), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”).

 

If you visit our Facebook Fanpage, we process the following data:

 

• your username,
• comments posted on our Fanpage,
• messages you send us via Facebook,
• Page insights (site visits, range of contribution, country / city the visitors come from, gender related statistics).

 

More information about Page Insights can be found here.

 

Purpose and legal basis

Together with Meta, we determine the purposes and means of processing your personal data on our Facebook Fanpage including the Page Insights, so we are joint controllers as referred to in the page controller addendum (“joint controller agreement”).

 

We process your personal data on our Facebook Fanpage for the purpose of providing this page to you, run our business and to perform public relations and direct marketing activities on the basis of our overriding legitimate interests pursuant to Art. 6 (1) (f) GDPR. The legitimate interests pursued by us, are to support the contract between you and Meta as well as to present our business and perform marketing activities.

 

As the processing of the Facebook Fanpage data is dependent from your activity and membership on Facebook, we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms in case you claim the right to object according to Art. 21 (1) GDPR.

 

Storage period

The storage of your personal data collected and stored within our Facebook Fanpage will be performed solely by Meta. Therefore, we do not determine the purposes of storage and any storage periods. More information about Meta as the controller of personal data can be found here.

 

4.8.2 ​​​​​​​Instagram

 

The LX Hausys Europe Instagram page is provided by Meta, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”).

 

If you visit our Instagram page, we process the following data:

 

• your username,
• comments posted on our page,
• messages you send us via Instagram,
• Page insights (site visits, range of contribution, country / city the visitors come from, gender related statistics).

 

More information about Page Insights can be found here.

 

Purpose and legal basis

Together with Meta, we determine the purposes and means of processing your personal data on our Instagram page including the Page Insights, so we are joint controllers as referred to in the page controller addendum (“joint controller agreement”).

 

We process your personal data on our Instagram page for the purpose of providing this page to you, run our business and to perform public relations and direct marketing activities on the basis of our overriding legitimate interests pursuant to Art. 6 (1) (f) GDPR. The legitimate interests pursued by us, are to support the contract between you and Meta as well as to present our business and perform marketing activities.

 

As the processing of the Instagram page data is dependent from your activity and membership on Instagram, we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms in case you claim the right to object according to Art. 21 (1) GDPR.

 

Storage period

The storage of your personal data collected and stored within our Instagram page will be performed solely by Meta. Therefore, we do not determine the purposes of storage and any storage periods. More information about Meta as the controller of personal data can be found here.

 

​​​​​​​4.8.3 YouTube

 

The LX Hausys Europe YouTube channel is provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google is operating YouTube as a separate controller, responsible for the processing of your personal data as a registered user. More information about Google’s privacy policy can be found here.

 

If you visit or subscribe to our YouTube Channel or watch and react to our YouTube Videos, Google is collecting and providing the following information to us:

 

• your username,
• comments posted on our video’s page,
• if you subscribe to our channel,
• if you liked or disliked our video,

 

Additionally, Google is collecting your reaction and behavior related to our YouTube channel and our videos and providing statistical information in an anonymized way to us via the YouTube Analytics. Google processes the personal data as a processor on our behalf pursuant to Art. 28 GDPR.

 

Storage period

The storage of your personal data collected and stored within our YouTube Channel or related to our video will be performed by Google on our behalf. Your personal data will be stored as long as our videos will be published on YouTube or you delete them on your own. Additionally, the storage of your personal data related to your membership as a YouTube user will be performed solely by Google in their responsibility.

 

​​​​​​​4.8.4 LinkedIn

 

If you, as a registered user, access our profile on the social network "LinkedIn", follow us or interact with us (e.g. message, comment), LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn") processes personal data to provide us with aggregated information ("page insights"). In doing so, no information is provided that enables us to track the behavior of an individual user.

 

We and LinkedIn are jointly responsible for the processing of personal data for the purpose of providing page insights pursuant to Art. 26 GDPR. LinkedIn ensures the legally compliant collection of user data as well as appropriate security for the storage of data in the social network and compliance with data protection requirements. You can assert your rights directly against LinkedIn. Independently of this, however, you are also entitled to your rights towards us. You can obtain further information on the processing of your personal data as a joint controller directly from LinkedIn at the following external link: https://legal.linkedin.com/pages-joint-controller-addendum .

 

If, as a registered user, you also interact with our profile or posts shared by us (e.g. reading, following, commenting) or we call up your profile, LinkedIn processes your information as an independent controller (operation of the social network) and shares with us all information that is required for the operation of the social network in accordance with LinkedIn's terms of use.

 

In this case, we collect user data (e.g. name, location), qualification data (e.g. occupation, position, education) and communication data (e.g. message content) directly from you or through the use of the LinkedIn social network.

 

For more information on the processing of personal data by LinkedIn, please visit the following external link: https://de.linkedin.com/legal/privacy-policy .

 

You are under no legal or contractual obligation to provide us with this information. The use of the social network "LinkedIn" is independent of the provision of your data, however, contacting us or visiting our profile is not possible without LinkedIn providing us with this data.

 

​​​​​​​4.8.5 Twitter

 

We use the short message service Twitter. The provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

 

If you are logged into your account and visit our profile, Twitter can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.

 

Our social media presence on Twitter is intended to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR.

 

You can independently adjust your Twitter privacy settings in your user account. To do so, click on the following link and log in: https://twitter.com/personalization.

 

​​​​​​​4.8.6 Pinterest

 

The LX Hausys Europe Pinterest page is provided by Pinterest Europe Ltd. Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

 

If you visit our Pinterest page, we process the following data:

 

• your username,
• comments posted on our page,
• messages you send us via Pinterest,
• Page insights (site visits, range of contribution, country / city the visitors come from, gender related statistics).

 

Our social media presence on Pinterest is intended to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR.

 

Storage period

The storage of your personal data collected and stored within our Pinterest page will be performed solely by Pinterest. Therefore, we do not determine the purposes of storage and any storage periods. More information about Pinterest as the controller of personal data can be found here: https://policy.pinterest.com/en/privacy-policy-2018.

 

​​​​​​​4.9 Google Fonts

 

We use Google Fonts on our website. Google Fonts are provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

 

The integration of these web fonts takes place through a server call, usually a Google server in the USA. This transmits to the server which of our Internet pages you have visited. Also, the IP address of the browser of the end device of the visitor of these Internet pages is stored by Google.

 

The transfer of personal data to the USA is based on the adequacy decision (Data Privacy Framework)

 

The legal basis for the use of Google Fonts is Art. 6 para. 1 lit. a GDPR.

 

​​​​​​​4.10 Use of Google reCAPTCHA

 

Google reCAPTCHA is provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland and it is used to distinguish whether the input is made by a human or abused by automated, machine processing. The query includes sending the IP address and possibly other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there further.

 

Google collects and processes the following data:

- IP-Address

- operating system

- Browser Information

- location and usage data

 

The legal basis for the use of google reCAPTCHA is Art. 6 para. 1 lit. a GDPR.

 

You must accept to activate Google reCAPTCHA in order to send us a message via the contact form. Alternatively, you can send us an email directly from your email account.

 

​​​​​​​4.11 Google Maps

 

We integrated content from Google Maps ("Google"). Google Maps is provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. By visiting a sub-page of our website on which Google Maps is integrated, data about your behavior when using Google Maps is transmitted to Google and processed by Google.

 

The processing and transmission to Google does not take place automatically, but exclusively through active clicking by the user. Only through this conscious use, data about your behavior when using Google Maps is transmitted to Google and processed by Google. Google thereby receives, for example, the information that you have called up the corresponding sub-page of our website.

 

The data processed by Google may include, in particular, your IP address and location data, which, however, are not collected without consent (usually completed as part of the settings of your mobile devices).

 

Google processes this data as usage profiles and uses it for the purpose of market research and/or demand-oriented design of Google Maps. If you are a Google customer and logged in to a Google service, this data is directly linked to your Google account. If you do not wish this, you must log out of Google before visiting our website.

 

The processing of the data is based on Art. 6 para. 1 lit. a) GDPR.

 

The provision of personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide it would possibly result in you not being able to use our website or not being able to use it to its full extent.

 

​​​​​​​4.12 Google Tag Manager

 

Google Tag Manager is a solution that allows marketers to manage web page tags through a single interface. The ‘Tag Manager’ tool itself, which implements the tags, is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data under certain circumstances. The “Google Tag Manager” does not access this data. If deactivation occurs at domain or cookie level, it remains in use for all tracking tags, insofar as they are implemented with “Google Tag Manager”. For more information, see: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/ .

 

 

 

5. Sharing Personal Data

 

We do not sell or disclose your personal data to third parties for their marketing or advertising purposes without your consent. We only disclose your personal data when it is necessary for the purposes mentioned in this Privacy Policy or when we have obtained your consent.

 

Processors according to Art. 28 GDPR, who are processing personal data on our behalf, will receive your personal data, as far as this is necessary for the purpose of processing.

 

When necessary, we share your personal data with the following data processors and recipients for the purposes described in this Policy:

• Our affiliates and subsidiaries; LX Hausys Ltd.
• Vendors who provide services on our behalf;
• Advertising networks; and - AGENCE FÉLIX (www.felix-creation.fr)
• Operating systems and platforms - Basic International (https://basicit.co.kr)
• Any other third party especially courts, public authorities, payment providers, banks, tax or legal consultants, auditors, insurance companies and data protection officers

 

 

 

6. Rights of data subjects

 

As a data subject you have the following rights:

 

Right to access:

You have the right to obtain a confirmation as to whether or not we process your personal data. If so, you have the right to receive information about your personal data processed by us and to receive a copy of your personal information in a commonly used electronic form.

Right to rectification:

You can demand that we correct incorrect data or complete incomplete.

 

Right to erasure of your personal data:

You have the right to request from us the erasure of your personal data without undue delay. We are obliged to erase your personal data without undue delay, where one of the grounds according to Art. 17 (1) GDPR applies.

 

Right to restriction of processing:

You have the right to request that we restrict the processing of your personal data under certain circumstances:

• When the accuracy of your information is being contested, processing may be restricted while its accuracy is being verified;
• When the processing is unlawful, but you chose not to erase the information;
• Where we no longer use your information, but it is still required by you for establishment, exercise or defense of legal claims. The right to withdraw your consent previously granted to us.

 

Right to data portability:

If you have provided us with data on the basis of a contract or consent, you may, if the legal requirements are met, demand that the data you have provided us with are handed over in a structured, common and machine-readable format or that we transfer it to another controller.

 

Right to object to the processing:

You have the right to object to processing of your personal data at any time, on grounds relating to your particular situation, where the processing is legally based on our overriding legitimate interests according to Art. 6 (1) (f) GDPR, or when your personal is processed for direct marketing purposes according to Art. 21 (2) GDPR.

 

Right to lodge a complaint with a supervisory authority:

You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can contact the supervisory authority responsible for your place of residence or your country, or the supervisory authority responsible for us.

 

Please be advised that your rights will apply to any personal information relating to you.

If you wish to exercise your data protection rights, please contact us gdprweb@lxhausys.com or use the data subject request forms: https://www.lxhausys.com/eu-en/rights-data-subject-request-forms .

 

7. Cookies and Other Technologies

 

We use cookies and other webservices to optimize the use and accessibility of our website and to provide comfortable features to our visitors. For more information read our “Cookie Policy” https://www.lxhausys.com/eu-en/cookie-policy .

 

8. Protection of Personal Data

 

LX Hausys Europe has implemented a comprehensive information security program that includes technical and organizational measures designed to secure and protect your data. We apply especially the following security measures to protect the users' personal information from any unauthorized access, release, use or modification:

 

• Encryption of personal information
  • Transfer of users' personal information by using encrypted communication zone
  • Storage of significant information such as passwords after encrypting it
• Countermeasures against hacking
  • Installation of a system in the zone the external access to which is controlled to prevent leakage or damage to users' personal information by hacking or computer virus
• Establishment and execution of the internal security management plan
• Installation and operation of an access control system
• measures to prevent forging or alteration of access record

 

Nevertheless, due to the design of the Internet, ever-changing technology, and other factors outside our control, we cannot guarantee that communications between you and our servers will be free from unauthorized access by third parties or that we will not be subject to security breaches.

 

9. Data Transfer and processing in third countries

 

For the provision of website services as well as for the performance of the contract you are party to, we transfer your personal data to third countries outside the European Union (“EU”) or European Economic Area (“EEA”). In particular, your personal data will be processed by our personnel and affiliates in South Korea and the UK.

 

Data transfer to the South Korea and the UK is based on an adequacy decision by the European Commission pursuant to Art. 45 GDPR.

The transfer of data to the USA is either based on the adequacy decision or is subject to standard data protection clauses adopted by the European Commission pursuant to Art. 46 (2) (c) GDPR or one of the following derogations pursuant to Art. 49 (1) GDPR applies:

 

• you have given your explicit consent to the processing of your personal data with cookies and the webservice provider or the third-party servers are located outside the EU / EEA. Therefore, you agree to the transfer of your personal data to the USA, although there is no adequacy decision or appropriate safeguards and this could cause risks for your rights and freedoms due to the absence of an adequate level of data protection;
• we transfer your personal data to a third country as far as this is necessary for the performance of a contract between you and us;
• we transfer your personal data to a third country as far as this is necessary for the implementation of pre-contractual measures taken at your request.

 

10. Other relevant information

 

​​​​​​​10.1 Automated decision making

 

You are not subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, according to Art. 22 GDPR.

 

​​​​​​​10.2 Required or obligated provision of personal data

 

Generally, the provision of your personal data is neither a statutory or contractual requirement or a requirement necessary to enter into a contract nor you are obliged to provide your personal data to us.

 

​​​​​​​10.3 Changes to our Privacy Notice

 

We review the Privacy Policy regularly and publish any updates on this website. This Privacy Policy was last updated on November 2023.