Data protection information

Table of Contents:

General information

We take the protection of your personal data very seriously. Data is "processed" by us in accordance with the applicable statutory data protection provisions, in particular in accordance with the European General Data Protection Regulation (hereinafter referred to as: GDPR) and the country-specific data protection provisions.

"Personal data" means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

"Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.

Below we will inform you about the processing of your data, in particular about the type, scope and purposes of the collection and use of your personal data when you visit our website and use our products and services, as well as the corresponding legal basis of the individual processing procedures. In addition, we will explain your rights with regard to data processing within the framework of our data protection policy.

Entity responsible for data processing

The entity responsible for data processing is:

LGD Datenschutz GmbH
Joelle Müns
Rogätzer Straße 8
39106 Magdeburg, Germany
Tel.: +49 391 55686325
E-Mail: j.muens@lgd-data.de

Type, scope, purposes and legal basis for the processing of your data

Personal data will only be processed by us if this is permitted by law (e.g.: for the fulfilment of a contract or if there is legitimate interest) or if you consent to the processing of your personal data.

Below we inform you about the type, scope, purposes and legal basis for the processing of your personal data:

a) Processing of personal data when using the services offered by us or for the implementation of necessary pre-contractual actions, which take place upon your request.

If you wish to use the services offered by us, it may be necessary for you to provide us with personal data. We only request the data we absolutely need for providing the services. You may voluntarily provide further information that is not required for the purposes described above; we will identify this information accordingly when collecting the data.

We process your personal data for the aforementioned purposes on the legal basis of Article 6(1)(b) of the GDPR in order to conclude a contract with you or to carry out necessary pre-contractual measures which take place at your request. The purpose of processing your personal data is therefore, for example, to process enquiries or to provide the requested service. Without the provision of the personal data, we cannot process your enquiry and/or conclude the contract with you and subsequently provide the services offered.

In addition, we process your data for the purpose of exercising, asserting or defending any legal claims arising from the contractual relationship and, if necessary, to enable law enforcement authorities to prosecute any misuse of our services. The above data processing is carried out on the legal basis of Art. 6(1)(f) of the GDPR. Our legitimate interest in processing data on the legal basis of Art. 6(1)(f) of the GDPR is to allow us to exercise, assert or defend any legal claims arising from the contractual relationship and, if necessary, to enable the law enforcement authorities to prosecute.

We also process your personal data for the purpose of fulfilling our legal retention obligation period. The legal basis for fulfilling our legal retention obligation period is standardised in Article 6(1)(c) of the GDPR.

In order to fulfil the contract or to carry out necessary pre-contractual measures, which are carried out at your request, your data may be passed on to service providers supporting us, who we have carefully selected. These may be technical service providers or service providers assisting us with payment processing or accounting.

We also reserve the right to integrate external content from third-party providers (e.g. YouTube videos, external map services, external graphics, etc.) on our Internet pages. If we use third-party tools, we will inform you about the use, the functioning, the legal basis and further details of the respective third-party tools under section 17 of this data protection policy.

Your personal data will otherwise only be passed on to other third parties if we are legally obliged to do so on the legal basis of Article 6(1)(c) of the GDPR and, where applicable, on the basis of our legitimate interests on the legal basis of Article 6(1)(f) of the GDPR. If your personal data is disclosed on the legal basis of Article 6(1)(f) of the GDPR, we will inform you about this disclosure to third parties in detail and about our respective legitimate interests in this data protection policy. Please note that you have the right to object in accordance with section 7 of this data protection policy.

b) Visiting our website (server log files)

When you visit our website, the server stores data in so-called server log files, which your internet browser automatically transmits to the server. Specifically:

Visited website
Time at which the website was accessed
Amount of data sent in bytes
Source/reference from where you accessed the page
Browser used
Operating system used
IP address used in anonymised format

The data collected is only used for statistical analysis and to improve the website. However, the website operator reserves the right to check the server log files retrospectively if there are indications of unlawful use.

The data is processed in order to enable the use of the Internet pages you have accessed, for statistical purposes, to improve our website and for security against unlawful cyber-attacks, as well as to exercise, assert or defend legal claims. Your IP address will only be stored for as long as necessary to defend against possible cyber-attacks and to provide law enforcement authorities with the information necessary for prosecution.

The aforementioned data is processed separately from all personal data that you provide to us when visiting our website and/or using a service and is never combined.

This data processing described above has its legal basis in Article 6 (1) (b) of the European General Data Protection Regulation (EU-GDPR) for the implementation of necessary pre-contractual measures, which are carried out at your request, in order to enable you to use the Internet pages you have accessed. Insofar as the above data is processed for security against unlawful cyber-attacks, or in order to exercise, assert or defend legal claims, this is done on the legal basis of Article 6(1)(f) of the GDPR. Our legitimate interest for this data processing lies in the evaluation of the data to improve our website, to exercise, assert or defend legal claims, if necessary, and to protect our systems against unlawful cyber-attacks.

c) Enquiries via contact forms on our website and e-mail/messenger enquiries

If you send us enquiries via the contact form on our website and/or enquiries via e-mail/messenger, your details, including the contact data you provide on the form, will be stored by us for the purpose of processing the enquiry as well as for follow-up enquiries, until the purpose no longer applies. We do not disclose this data without your consent or legal permission.

This data processing described above has its legal basis in Article 6(1)(b) of the GDPR for the implementation of necessary pre-contractual measures, which take place upon your request.

d) Direct advertising

Your name and address may also be processed for an unlimited period of time for our own postal advertising purposes on the legal basis of Article 6(1)(f) of the GDPR, whereby our legitimate interest lies in direct postal advertising of our own services.

Use of cookies on our website

Cookies are small data files that are sent to your browser by a web server when you visit a website and are stored by the browser on your device (e.g. PC, smartphone, tablet) for a limited period of time for various purposes.

Insofar as we use so-called "cookies" on our website, we obtain your active consent beforehand via a so-called "cookie banner", from which you can obtain further details about the cookies used by our site. Particularly about their functionality, the duration they remain in place and the possibilities for third-party providers to access the data contained in the cookies.

You can also decide for yourself whether cookies are allowed or not through the settings in your browser. For example, in your browser you can deactivate the storage of cookies altogether, restrict it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be activated and asks for your permission to do so. In addition, you can set your browser so that cookies are automatically deleted when you close the browser. Finally, if necessary, you can activate a Do-Not-Track function ("DNT") in your browser, so that you are not automatically recorded by any web analysis tool that may be used. Information on how to configure your browser settings can be found in the “privacy and security” settings of your particular internet browser.

Storage and deletion periods for personal data

If the processing purpose for your personal data required in each case no longer applies, your personal data processed by us will routinely be deleted or blocked, unless you have consented to permanent storage of your personal data.

If, due to statutory retention periods (e.g. retention requirements under tax and commercial law), individual data must be retained after the processing purposes no longer apply the deletion will be replaced by the blocking of the data. The data to be retained may then be processed exclusively for the aforementioned purposes on the legal basis of Article 6(1)(c) of the GDPR.

Rights as a subject of data processing

At all times, you have the following rights:

Right to confirmation and to information about the personal data processed by us pursuant to Article 15 of the GDPR
Right to rectification of your personal data pursuant to Article 16 of the GDPR
Right to erasure of your personal data ("right to be forgotten") pursuant to Article 17 of the GDPR
Right to restrict the processing of your personal data pursuant to Article 18 of the GDPR
Right to data portability of your personal data pursuant to Article 20 of the GDPR
You have the right not to be subject to a decision based solely on automated individual decision-making, including profiling, which produces legal effects concerning you or significantly affects you in a similar manner pursuant to Article 22 of the GDPR

Please send your request to the contact details provided in section 2 of this data protection policy.

—————————————————————————————————————————

Right to object

You have the right to object at any time on grounds relating to your particular situation, to the processing of personal data concerning you which is based on the legal basis of Article 6(1)(e) or (f) of the GDPR.

In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which supersede your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. In this case, we will no longer use your personal data for direct marketing purposes.

—————————————————————————————————————————

Right to revoke consent

You may revoke any consent expressly given to us under data the protection law with future effect at any time. The legal basis of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.

Complaints regarding data protection violations to the supervisory authorities

If you are of the opinion that your data protection rights are being violated, you can contact the supervisory authority of your federal state or the federal state of our registered office. If a complaint concerns a company with its registered office in another federal state, the supervisory authority will forward the complaint to the supervisory authority responsible there.

The supervisory authority for our registered office is the following:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

Kavalleriestr. 2 - 4

40213 Düsseldorf, Germany

Telefon: +49 (0) 2211/38424-0

Fax: +49 (0) 2211 / 28424-999

E-Mail: poststelle@ldi.nrw.de

Obligation to notify in relation to the rectification or erasure of personal data or the restriction of processing

We will notify all recipients whose personal data has been disclosed of any rectification or erasure of personal data or restriction of processing pursuant to Article 16, Article 17(1) and Article 18 of the GDPR, unless this proves impossible or involves a disproportionate effort. We will also inform you about these recipients upon your request.

Legal or contractual requirements to provide your personal data as well as information about the necessity for the contractual agreement; Your obligation to provide personal data and possible consequences if data is not provided:

As previously stated, we collect and process your personal data specifically for the fulfilment of a contract with you or for the implementation of pre-contractual measures that take place at your request. In some cases, the provision of personal data for the conclusion of contracts (e.g. for invoices) is required by law due to tax and/or commercial regulations, otherwise it is a contractual or pre-contractual obligation. If you do not provide us with personal data, this means that we will not be able to provide our services and/or answer your enquiries.

Insofar as we process your personal data on the basis of a legitimate interest pursuant to Art. 6(1)(f) of the GDPR, the provision of your data for these purposes is neither contractually nor legally required. The details of data processing on the basis of legitimate interest can be found above in the respective sections. If you do not provide us with personal data for these purposes, this may result in you not being able to use our website and services, or not being able to use them to their full extent.

Automated decisions in individual cases, including profiling

We do not use automated decision-making - including profiling in accordance with Article 22(1) and (4) of the GDPR.

Data security

We use technical and organisational security measures to protect the processing of personal data, in particular against accidental or intentional manipulation, loss, destruction or against attacks by unauthorised third parties. Our security measures are continuously improved in line with technological developments.

Questions / Comments

If you have any questions or comments about this data protection policy or about data protection in general, please contact us using the contact details provided in section 2 of this data protection policy.

Use of third-party tools and plug-ins

We are currently using the third-party tools (programs) described below on our website. You can find detailed information about the use of cookies by third-party providers in our cookie consent banner.

If we refer below to data protection information from third parties for your information, which may only be available in English or another foreign language, you can easily translate the foreign-language texts into German (or into another language) for free using the following services, for example:

Prompt Translator: https://www.online-translator.com/
Google translator: https://translate.google.de/
iOS app: "iDict"
Android app: "Promt-Online-Translators"
There are other translation programs that you can find in app stores and/or search engines that you can use to translate foreign language texts into German (or any other language).

Third party tools from the USA:

—————————————————————————————————————————

Important NOTE:

We may use technically unnecessary tools from third-party providers from the USA on our website (in particular for marketing and analysis purposes), which may use cookies or process your unabridged IP address or other personal data.

The USA is currently assessed as a country with an insufficient level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being informed of this data processing and without you being able to appeal against this data processing by the US authorities.

If you consent to the use of the technically unnecessary tools of the third-party providers named below via our cookie consent banner, this personal data will be processed by the specified third-party providers in the USA.

If you do not consent to the use of these technically unnecessary third-party tools, the third-party tool will not be started and the transmission and processing of your data by the third-party provider as described above will not take place.

—————————————————————————————————————————

We currently use the following tools (programs) from third-party providers from the USA on our website:

Google Analytics:

Purposes: Data traffic analysis of websites (web analysis)
Legal basis: Your consent in accordance with Article 6 paragraph 1 number a) GDPR
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Provider's data protection information:
https://policies.google.com/privacy?hl=en
https://support.google.com/analytics/answer/6004245?hl=de&ref_topic=2919631

You can revoke your consent to data collection by Google Analytics at any time by clicking on the following link to "Deactivate Google Analytics". An opt-out cookie will be set to prevent future collection of your data when you visit this website.

Deactivating Google Analytics

VIMEO:

Purposes: Video features
Legal basis: Your consent in accordance with Article 6 paragraph 1 number a) GDPR
Provider: Vimeo, Inc. 555 West 18th Street, New York, New York 10011, USA
Provider's data protection information: https://vimeo.com/privacy

hub spot:

Purposes: Contact form
Legal basis: Article 6 paragraph 1 letter b) GDPR for the implementation of necessary pre-contractual measures,
Provider: HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA,
Provider's data protection information: https://legal.hubspot.com/de/privacy-policy

Data protection policy updated: 23.03.2023

Data protection information

Company

Resources