1. Controller
The controller responsible for data processing on this website is:
Springtech Automotive AG
2045 Törökbalint, Topark str. 9, Hungary
E-mail: info@lkw-federn.at
2. Scope
This website is a business-to-business trade portal. It is intended exclusively for commercial customers. We process personal data only to the extent necessary to operate the portal, to review partner applications, and to process orders.
3. What we process, why, and on what legal basis
3.1 Visiting the website
When you visit our website, our hosting provider automatically processes technical data required to deliver the site, including your IP address, the time of the request, the pages requested, and technical information about your browser and device. This processing is necessary to provide the website securely and reliably.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the site).
3.2 Partner registration
To apply for a partner account, we ask for your company name, contact person, e-mail address and country. We use this data to assess your application and, if approved, to create and administer your account.
Legal basis: Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest in verifying that applicants are commercial customers).
3.3 Account administration and log-in
Once your account is active, we process your log-in details and account data to authenticate you and to show you your own prices, orders and documents.
Legal basis: Art. 6(1)(b) GDPR (performance of the contract).
3.4 Orders
When you place an order, we process the order details together with your account and delivery data in order to fulfil, deliver and invoice the order.
Legal basis: Art. 6(1)(b) GDPR (performance of the contract), and Art. 6(1)(c) GDPR for the retention of accounting records.
3.5 Contact by e-mail
If you contact us by e-mail, we process the data contained in your message in order to answer it.
Legal basis: Art. 6(1)(b) or Art. 6(1)(f) GDPR, depending on the purpose of your enquiry.
4. Cookies and local storage
We use technically necessary storage in your browser to keep you logged in during a session. This storage is required for the portal to function.
Our platform provider records basic page-view information for the operation and maintenance of the portal. We do not use advertising cookies, and we do not use tracking for marketing purposes.
5. Recipients and processors
We pass personal data to third parties only where this is necessary, where you have consented, or where we are legally obliged to do so. The following categories of recipient may process data on our behalf:
- our hosting and application platform provider, which operates the technical infrastructure of this portal;
- our e-mail service provider, for transactional messages such as order confirmations;
- our customer relationship and customer service systems, in which enquiries and orders are administered;
- transport service providers, to the extent necessary to deliver your order;
- our tax advisers and auditors, and public authorities where we are legally required to disclose data.
Processors act on our instructions under a data processing agreement pursuant to Art. 28 GDPR.
6. Transfers outside the EU/EEA
Some of our service providers may process data outside the European Economic Area. Where this is the case, the transfer is based on an adequacy decision of the European Commission or on the European Commission's Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR, together with appropriate additional safeguards.
7. Retention
We keep personal data only for as long as it is needed for the purposes described above.
- Partner applications that are not approved: 12 months.
- Partner accounts: for the duration of the business relationship and 3 years thereafter.
- Order and invoicing records: for the statutory retention period under applicable accounting and tax law, currently 8 years.
- E-mail correspondence: 3 years, unless a longer period is required for accounting or legal purposes.
8. Your rights
Under the GDPR you have the right to:
- request access to the personal data we hold about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data erased, where the conditions are met (Art. 17);
- request restriction of processing (Art. 18);
- receive your data in a portable format (Art. 20);
- object to processing based on our legitimate interests (Art. 21);
- withdraw any consent you have given, with effect for the future (Art. 7(3)).
To exercise these rights, contact us at the address given in section 1.
9. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement. The competent authority for our company is:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
1055 Budapest, Falk Miksa utca 9-11, Hungary
10. Is providing data mandatory?
Providing the data requested during registration and ordering is not a legal requirement, but it is necessary in order to enter into and perform a contract with us. Without it we cannot approve a partner account or process an order.
11. Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
12. Changes to this policy
We may update this privacy policy to reflect changes to the portal or to legal requirements. The current version is always available on this website.
Last updated: 18 September 2026