Privacy by myLILO. The processing of personal data of the client or their affected employees (hereinafter referred to as the client) is carried out by Bürzle und Pacher Petfood GmbH, Dorf 32, 8592 Maria Lankowitz, Austria for the purpose of contract fulfillment in accordance with Art. 6 Para 1 lit b GDPR (contract fulfillment, implementation of pre-contractual measures, e.g., quotation), Art. 6 Para 1 lit c (fulfillment of a legal obligation, e.g., invoicing) as well as in accordance with Art. 6 Para 1 lit f (legitimate interest of myLILO, e.g., documentation of the business relationship). If personal data of special categories (e.g., health data, biometric data) is processed within the scope of the contractual relationship, this processing is carried out exclusively for purposes explicitly defined in advance and only on the basis of the consent of the data subject in accordance with Art. 9 Para 2 lit a GDPR.

Further processing. Further processing compatible with the purpose of contract fulfillment is carried out in accordance with Art. 6 Para 4 GDPR of the client’s contact data for the purpose of direct marketing in forms that do not require consent, such as addressed postal delivery of advertising.

Electronic direct marketing. Processing for the purpose of direct marketing in forms that require consent, such as electronic delivery of advertising or the placement of personalized advertisements, is carried out only on the basis of additional voluntary consent from the client in accordance with Art. 6 Para 1 lit a GDPR.

Mandatory data provision / consequences of non-provision. There is no legal or contractual obligation to provide the client’s personal data. However, if the client does not provide myLILO with the personal data required for contract fulfillment before concluding the contract, this will result in myLILO being unable to submit an offer to the client or no contract being concluded between myLILO and the client. There is also no legal or contractual obligation to grant consent to the processing of the client’s personal data. Failure to grant consent would result, depending on the consent, in either no contract being concluded between myLILO and the client or the client not receiving direct marketing in forms that require consent.

Disclosure. All data is subject to the agreed or legal obligation of confidentiality and the protection of personal data. The client’s personal data is disclosed only to the following recipients or categories of recipients: – Banks and payment service providers (payment processing) – Shipping service providers (delivery of goods and invoices) – Tax advisors (bookkeeping in accordance with UGB/BAO, preparation of annual financial statements) – Collection agencies (debt collection) – Lawyers (in the event of asserting contractual or legal claims) Disclosure to other recipients not listed here is carried out only on the basis of legal grounds or in coordination with the client.

Worldwide processing. The processing of the client’s personal data by myLILO is carried out—where possible—exclusively in the European Union. Processing or transfer of the client’s personal data to third countries is carried out only – if this is necessary for the fulfillment of the contract between myLILO and the client (Art. 49 Para 1 lit b GDPR), or – if this is necessary for the implementation of pre-contractual measures at the request of the client (Art. 49 Para 1 lit b GDPR), or – after informing the client of the possible risks of data processing by myLILO in the third country where data processing is planned and with the express consent of the client in accordance with Article 49 Para 1 lit a GDPR.

Storage duration. The client’s personal data is retained for the purpose of fulfilling legal obligations in accordance with § 132 Para 1 BAO for at least seven years. In addition, the client’s personal data is stored for the purpose of documentation and fulfillment of legal obligations for up to a maximum of thirty years after completion of the orders. If no contract is concluded between myLILO and the client, the client’s personal data is retained for the purpose of documenting the business relationship for an expected twelve months.

Right of withdrawal. The client has the right to withdraw consent granted at any time. In the case of written consent, withdrawal can only be made in writing; in the case of consent to receive electronic advertising, this can also be done by clicking the unsubscribe link. In the event of withdrawal of consent, processing will be discontinued unless another legal basis exists. The lawfulness of data processed up to the point of withdrawal is not affected by the withdrawal.

Right to object. The client has the right to object to the processing of their personal data for the purpose of direct marketing. In the event of an objection, your personal data will no longer be processed for the purpose of direct marketing.

Data subject rights. The client has the right to access, rectification, and deletion of their personal data, the right to restriction of data processing, the right to data portability, and the right to lodge a complaint with the data protection authority. The contact details of the Austrian Data Protection Authority are: Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, Phone: +43 1 531 152 – 0, Email: dsb@dsb.gv.at.