This notice explains how APEX Technology GmbH, which runs the catalogue website servicepacklcd.net under the brand Service Pack LCD, processes personal data. We supply original service pack displays and spare parts to repair businesses and distributors. The website is an enquiry-based product catalogue; orders are agreed by quote and written order confirmation, so the personal data we hold comes from enquiries, the forms on this site and the trade relationship that follows.
1. Controller
APEX Technology GmbH
Brunner Straße 63, Obj. 21
1230 Wien, Austria
Email: sales3@apexgmbh.com
Telephone / WhatsApp: +43 660 2015298
Please send any question about this notice, or any request concerning your data, to the email address above.
2. What this notice covers
It applies to servicepacklcd.net and to the data we receive when you use a form on the site, write to us by email or WhatsApp, call us, request a quote, register a trade account, subscribe to our newsletter, post a product review or buy from us as a business customer. It does not cover third-party websites we link to, such as manufacturer or courier sites, which have their own privacy notices.
3. Processing activities at a glance
| Activity | Data involved | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|---|
| Visiting the site (server log files) | IP address, date and time, requested address, referrer, browser and operating system | Delivering the pages, detecting attacks, diagnosing faults | Art. 6(1)(f) – legitimate interest in a secure and working website | The hosting provider keeps server logs for a short period for security purposes and deletes them afterwards |
| Contact form and the "Question" form on product pages | Name, email address, company, telephone (if entered), chosen subject, message text, product reference | Answering the enquiry, checking stock, preparing a quote | Art. 6(1)(b) – steps prior to a contract at your request; Art. 6(1)(f) for general questions | For as long as necessary to deal with the enquiry; longer if it leads to an order (see the rows below) |
| Email, telephone and WhatsApp correspondence | Your contact details and the content of the exchange | Quotes, availability checks, order handling, after-sales support | Art. 6(1)(b); Art. 6(1)(f) | Correspondence that documents an order: 7 years (§ 132 BAO, § 212 UGB); other correspondence for as long as necessary for the purpose, then deleted |
| Trade account (only if you register one) | Company name, contact person, address, email, telephone, VAT ID, login credentials | Managing the trade relationship and your enquiry history | Art. 6(1)(b) | Until you close the account, then only what accounting law requires |
| Newsletter (only if you subscribe through the newsletter form or tick the newsletter option in your account) | Email address; if you subscribe from your trade account, also the name and company on the account; date and source of consent | Informing you about new stock, newly listed model ranges and catalogue updates | Art. 6(1)(a) – consent; § 174 TKG 2021 | Until you withdraw consent; afterwards only a record that consent was given and withdrawn |
| Product reviews (review form on product pages) | The name you enter, star rating, review text, date of submission | Publishing trade feedback on a part on its product page | Art. 6(1)(a) – consent given by submitting the review | Until the product is withdrawn from the catalogue or you ask us to remove the review |
| Orders, invoicing and dispatch | Company and invoice details, delivery address, contact person, VAT ID, payment references | Performing the contract, bookkeeping, tax reporting | Art. 6(1)(b); Art. 6(1)(c) – BAO, UGB | 7 years from the end of the calendar year of the transaction |
Newsletter. Subscriptions are stored in the shop's own database on our hosting; we do not use an external mailing service, and your address is not passed to a third party for sending. You can withdraw your consent at any time through the unsubscribe link in every mailing, through the newsletter setting in your account or by email to sales3@apexgmbh.com.
Product reviews. A review is shown publicly on the product page, together with the name you entered, once we have released it. Enter a first name or initials if you do not want your full name to be visible. To have a review corrected or removed, email sales3@apexgmbh.com with the product name and the name shown.
4. Cookies
The website software sets a small number of strictly necessary cookies: a session identifier that keeps your page requests together (OCSESSID), your language and currency selection (language, currency), and small flags that remember you have closed a notice or popup. Their lifetimes range from the browser session to a few weeks. These cookies are required for the catalogue to function and are exempt from consent under § 165(3) TKG 2021; the legal basis for the related processing is Art. 6(1)(f) GDPR.
This website does not show a cookie banner. The services described in sections 5, 6 and 8 – Google Analytics, Google reCAPTCHA and the YouTube player – set cookies that are not strictly necessary. Google Analytics is loaded when you open a page, reCAPTCHA is loaded on pages that contain a protected form, and the YouTube player is loaded when you open the video on the home page. You can block or delete these cookies at any time in your browser settings or with a content-blocking extension, and you can object to the analytics processing as described in section 5. The catalogue remains fully usable with these cookies blocked.
5. Google Analytics
We use Google Analytics (gtag.js), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us which brands and product pages are viewed most, which pages are reached from search engines and from which countries visitors come, so that we can keep the catalogue useful for trade customers. The analytics script is loaded when a page is opened; no consent banner is shown beforehand.
- Cookies:
_ga(distinguishes returning browsers) and_ga_*(keeps the session state for our Google Analytics property). - Data: a pseudonymous client ID, pages viewed, time and duration of the visit, referrer, approximate location, device, browser and screen size. Your IP address is transmitted to Google when the script loads. The reports we work with are pseudonymous usage statistics; we do not combine them with the data from enquiries, accounts or orders.
- Transfer: Google may transfer the data to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework and Google additionally applies the EU standard contractual clauses. Google processes the data on our behalf under the Google Ads Data Processing Terms (Art. 28 GDPR).
- Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in understanding how the catalogue is used. You can object at any time (Art. 21 GDPR) and you can stop the measurement in your own browser: install Google's browser add-on to deactivate Google Analytics (https://tools.google.com/dlpage/gaoptout), block third-party scripts with a content-blocking extension, or delete the
_gacookies.
Further information: Google's privacy policy at https://policies.google.com/privacy
6. Google reCAPTCHA
The contact form and the review and "Question" forms on product pages are protected against automated spam submissions by Google reCAPTCHA, a service of Google Ireland Limited (address as above). To decide whether a form is being completed by a person or a program, reCAPTCHA loads a script from google.com, analyses your interaction with the page (mouse movements, typing rhythm, time spent) and transmits to Google your IP address, browser and device information, the address of the page, and Google cookies already present in your browser. It may also set its own cookie, _GRECAPTCHA, with a lifetime of 6 months. The script is loaded when a page containing a protected form is opened, and the analysis runs in the background without a separate notice.
Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in keeping automated spam out of our enquiry and review channels. If you prefer that your browser does not contact Google, send your enquiry or review by email to sales3@apexgmbh.com instead. Data may be processed by Google LLC in the USA on the basis of the EU-US Data Privacy Framework and standard contractual clauses. Further information: https://policies.google.com/privacy and https://policies.google.com/terms
7. Google Fonts
The typefaces of this website are loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), a service of Google Ireland Limited. When a page is opened, your browser requests the font files from Google's servers; this transmits your IP address, the requested font and your browser type to Google. According to Google, font requests do not set cookies and are not linked to other Google data. Purpose: a uniform, fast-loading presentation of the catalogue. Legal basis: Art. 6(1)(f) GDPR. The request may be answered by servers of Google LLC in the USA under the EU-US Data Privacy Framework. If you do not want your browser to contact Google for fonts, a browser extension that blocks third-party requests can be used; the catalogue remains readable with a substitute font. Information from Google: https://developers.google.com/fonts/faq/privacy
8. YouTube video
The home page contains a video hosted on YouTube, which is operated by Google Ireland Limited (address as above). The video opens in an overlay with the standard YouTube player when you click it; the player is loaded from youtube.com when you open the video. As soon as the player loads – and before you press play – your browser connects to YouTube, which receives your IP address, the page you are visiting and information about your browser, and may set cookies; if you are signed in to a Google account, YouTube can link the visit to that account. Google may also process this data on servers of Google LLC in the USA (EU-US Data Privacy Framework, standard contractual clauses). Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in presenting the company and its stock in video form to trade visitors who choose to open it. Further information: https://policies.google.com/privacy
9. Contact via WhatsApp
The site contains WhatsApp click-to-chat links (wa.me / api.whatsapp.com) to +43 660 2015298. Nothing is loaded from WhatsApp while you browse the catalogue. Only when you click a link does your device open the WhatsApp app or api.whatsapp.com; from that point WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), a Meta Platforms company, processes your telephone number, profile name, the content and time of each message and related metadata under its own privacy policy, including transfers to Meta Platforms, Inc. in the USA under the EU-US Data Privacy Framework. We use the chat for the same purposes as email: questions, availability checks and quotes (Art. 6(1)(b) and (f) GDPR). Chat content that documents a quote or order is kept with the rest of the correspondence (section 3). Please use email rather than WhatsApp for sensitive information. WhatsApp's privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea
10. Hosting
servicepacklcd.net is hosted by Hostinger International Ltd., Larnaca, Cyprus, on servers located in the European Union. The hosting provider stores the website database – including trade accounts, newsletter subscriptions and reviews – and the server logs on our behalf and is bound by a data processing agreement under Art. 28 GDPR. Server logs are kept for a short period for security purposes and deleted afterwards.
11. Who receives your data
- Courier companies that deliver your order: name, delivery address and, for delivery notifications, telephone number or email address
- Hostinger International Ltd. as our hosting provider, and IT service providers who maintain the website, acting as processors under Art. 28 GDPR
- Google Ireland Limited for Google Analytics, reCAPTCHA, Google Fonts and YouTube (sections 5 to 8)
- WhatsApp Ireland Limited, only if you choose to contact us through WhatsApp (section 9)
- Our tax adviser and accounting staff, and the banks that process payments
- Public bodies where the law requires it, for example tax or customs authorities
We do not sell personal data, and we do not hand contact details to third parties for their own marketing. Newsletter subscriptions stay in our own database; no mailing service provider receives them.
12. Transfers outside the EU/EEA
Our own processing, including hosting, takes place in the European Union. A transfer to a third country can occur in the following cases:
- Google services – Google Analytics, reCAPTCHA, Google Fonts and YouTube (sections 5 to 8): processing by Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing adequate protection (Art. 45 GDPR); Google additionally uses the EU standard contractual clauses (Art. 46(2)(c) GDPR).
- WhatsApp (section 9): Meta Platforms, Inc., USA, likewise certified under the EU-US Data Privacy Framework.
- Shipments to customers outside the EU: the name of the contact person, the delivery address and a telephone number or email address are passed to the courier and, where applicable, to customs authorities in the destination country. This is necessary to perform the contract with your company, which is concluded in your interest as its contact person (Art. 49(1)(b) and (c) GDPR).
13. Your rights
- Access to the personal data we hold about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16)
- Erasure, unless a retention obligation prevents it (Art. 17)
- Restriction of processing (Art. 18)
- Data portability for data you provided to us (Art. 20)
- Objection to processing based on legitimate interests (Art. 21), including the web analytics described in section 5
- Withdrawal of consent with effect for the future (Art. 7(3)), including consent to the newsletter and to a published review
To exercise these rights, email sales3@apexgmbh.com. We may ask for information that lets us confirm your identity. If you believe we process your data unlawfully, you can lodge a complaint with the Austrian supervisory authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb@dsb.gv.at, www.dsb.gv.at.
14. Security
The site is served over TLS (https). Enquiry and customer data are accessible only to staff who need them for quoting, order handling and accounting, and are backed up regularly.
15. Is providing data mandatory?
There is no legal obligation to provide personal data. Without a name and an email address or telephone number we cannot answer an enquiry or send a quote, and without company and delivery details we cannot invoice or ship an order. The newsletter and product reviews are entirely optional.
16. Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
17. Changes to this notice
We update this notice when our processing or the legal requirements change. The version published on this page applies. Version: 1 October 2026.