Privacy policy

as of June 2024

Information on the collection of personal data and contact details of the controller

We are pleased that you are visiting our website and thank you for your interest.

We take the protection of your privacy and your private data very seriously. This privacy policy explains the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering and the associated websites, functions and content as well as external online presences, such as our social media profile.

With regard to the terms used, such as “personal data” or their “processing”, we refer to the definitions in Art. 4 of the GDPR.

Personal data

 

We collect, store and use your personal data only in accordance with the content of this privacy policy and the applicable data protection regulations, in particular the European General Data Protection Regulation (GDPR) and the national data protection regulations.

Personal data is all information that relates to you as an identified or identifiable natural person.

It is generally possible to use our website without providing personal data. If personal data (e.g. name, address or e-mail addresses) is collected on our website, this is always done on a voluntary basis as far as possible and we generally obtain consent from the data subject. This data will not be passed on to third parties without your express consent.

Controller within the meaning of the GDPR


We, lento GmbH & Co. KG, as the operator of this online service, are responsible for processing the personal data of users of the online service in accordance with Article 4(7) of the EU General Data Protection Regulation (GDPR):

lento GmbH & Co. KG
Weidenring 1
07554 Korbußen
Korbußen, Germany
Phone: +49 (0) 36602 510-0
E-mail: [email protected]
www.lillus-world.com/en/

(see also our legal notice)

If you have a data protection-related concern, a complaint or a question about our electronic or digital services, please contact our data protection officer.

You can reach our data protection officer at [email protected] or at our postal address with the addition “Data Protection Officer”.

External service providers

If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. In doing so, we will also state the specified criteria for the storage period.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

Changes to our data protection provisions

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Rights of the data subjects: Rights under the GDPR

The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

Right to information about your data stored by us and its processing in accordance with Art. 15 GDPR

In particular, you have the right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period and the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information on the logic involved and the scope and intended effects of such processing on you, as well as your right to be informed of the guarantees pursuant to Art. 46 GDPR if your data is transferred to third countries.

Right to rectification of inaccurate personal data pursuant to Art. 16 GDPR

You have the right to immediate correction of incorrect data concerning you and/or completion of your incomplete data stored by us.

Right to erasure of your data stored by us in accordance with Art. 17 GDPR

You have the right to request the erasure of your personal data if the requirements of Art. 17 para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.

Right to restriction of data processing pursuant to Art. 18 GDPR

You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse to delete your data due to inadmissible data processing and instead request the restriction of the processing of your data, if you need your data for the assertion, exercise or defence of legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail.

Right to information in accordance with Art. 19 GDPR

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

Right to data portability in accordance with Art. 20 GDPR

You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible.

Right to revoke consent given in accordance with Art. 7 para. 3 GDPR

You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint pursuant to Art. 77 GDPR

If you believe that the processing of your personal data violates the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

Right of objection

If we process your personal data as part of a balancing of interests on the basis of our overriding legitimate interest, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation.

If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. You can exercise your objection as described above. If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.

Collection of general information

If you only use our website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”).

This information (server log files) includes, for example, the type of web browser used, the operating system used, the domain name of your Internet service provider, your IP address (if applicable: in anonymised form), the amount of data sent in bytes, the date and time at the time of access, pages visited, the source/reference from which you accessed the page, and similar information.

They are technically necessary for us to display the website to you, to ensure a smooth connection to the website, smooth use, to analyse system security and stability and for other administrative purposes.

We do not use your data to draw conclusions about your person. Information of this kind may be statistically evaluated by us in order to optimise our website and the technology behind it.

This information is processed in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website when the respective session has ended.

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason, an objection is excluded.

Cookies


In order to make visiting our website attractive, to enable the correct display of our web pages, to facilitate navigation and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website.

Cookies cannot be used to start programmes or transfer viruses to a computer.

If cookies are set, they collect and process certain user information such as browser, location data, operating system or IP address values to an individual extent.

Under no circumstances will the data collected by us be passed on to third parties or linked to personal data without your consent.

Internet browsers are regularly set to accept cookies. Of course, you can also view our website without cookies. Please note that the functionality of our website may be restricted if you have deactivated the use of cookies.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable your browser to be recognised the next time you visit (persistent cookies).

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.

You can delete individual cookies or the entire cookie inventory via your browser settings.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.

Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers under the following links:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Google Chrome: https://support.google.com/accounts/answer/61416?hl=de

Opera: http://www.opera.com/de/help

Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

Contact Information

When contacting us (e.g. via contact form or e-mail), you provide personal data. Which data is collected in the case of a contact form can be seen from the respective contact form. The data you enter will be stored for the purpose of personalised communication with you. This serves to allocate the enquiry and subsequently answer it. The provision of further data is optional.

This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting you and the associated technical administration.

The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR).

By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b GDPR).

We delete the data collected in this context or restrict the processing if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

If there is a contractual relationship, we are subject to the statutory retention periods in accordance with the German Commercial Code (HGB) and delete your data after these periods have expired.

The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with your name, email address and the reason for the enquiry.

On this website, we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

This function is primarily used to differentiate whether an entry is made by a natural person or abusively by machine and automated processing. The service includes the sending of the IP address and any other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining individual responsibility on the Internet and avoiding misuse and spam.

As part of the use of Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. in the USA. Further information on Google reCAPTCHA and Google’s privacy policy can be found at:https://www.google.com/intl/de/policies/privacy/

Data processing when opening a customer account and for contract processing


We collect data when you provide it to us for the fulfilment of a contract or when opening a customer account.

Which data is collected can be seen from the respective input forms. The data you enter is stored for the purpose of personalised communication with you. This serves to allocate the enquiry and subsequently answer it. The provision of further data is optional.

The legal basis for the processing of this data is our legitimate interest in responding to your enquiry in accordance with Art. 6 para. 1 lit. f GDPR or if your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. We store and use the data provided by you to fulfil the contract.

After completion of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by us.

The provision of your personal data is voluntary. However, we can only process your enquiry if you provide us with your name, e-mail address and the reason for the enquiry.

Data processing for order processing


In order to process your order, we work together with the following service provider(s), who support us in whole or in part in the fulfilment of concluded contracts. Certain personal data such as names, postal addresses or e-mail addresses are transmitted to these service providers in accordance with the following information:

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods.

We pass on your payment data to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you of this explicitly below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

For the purpose of credit checks, we transmit personal data collected within the scope of this contractual relationship regarding the application, execution and termination of this business relationship as well as data on non-contractual behaviour or fraudulent behaviour to commissioned credit agencies (CRIFBÜRGEL, Creditreform).

Transfer of personal data to shipping service providers

If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn) or a forwarding agent commissioned for the order, we will pass on your e-mail address in accordance with Art. 6 para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The information will only be passed on if this is necessary for the delivery of goods. In this case, prior coordination of the delivery date is not possible.

Consent can be withdrawn at any time with effect for the future from the controller named above or from the transport service provider.

Transfer of personal data to payment service providers (payment services)

Depending on the selected payment method, we pass on your payment data as follows as part of payment processing; the transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent that this is necessary for payment processing.

Some payment services reserve the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in determining your solvency. The result of the credit check in relation to the statistical probability of non-payment is used by the payment services for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.

Further data protection information, including information on the credit agencies used, can be found in the respective data protection declarations:

https://www.billie.io/datenschutz
https://www.mollie.com/de/privacy
https://www.grenke.de/datenschutz-grenke-ag/
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to the payment service provider. However, the payment service providers may still be authorised to process your personal data if this is necessary for contractual payment processing.

Disclosure of personal data for credit checks


For the purpose of credit checks, we transmit the personal data collected on the application, execution and termination of the business relationship as well as data on non-contractual behaviour or fraudulent behaviour to commissioned credit agencies (CRIFBÜRGEL, Creditreform). The legal basis for these transfers is Article 6(1)(b) and Article 6(1)(f) of the GDPR.

Transfers on the basis of Article 6(1)(f) GDPR may only take place insofar as this is necessary to safeguard the legitimate interests of our company or third parties and does not outweigh the interests or fundamental rights and freedoms of the data subject that require the protection of personal data.

The exchange of data with the commissioned credit agencies and partner companies commissioned by the credit agencies also serves to fulfil legal obligations to carry out creditworthiness checks on buyers (Sections 505a and 506 of the German Civil Code). The commissioned credit agencies process the data received and may also use it for the purpose of profiling (scoring) in order to provide their contractual partners in the European Economic Area and Switzerland and, if applicable, other third countries (provided that an adequacy decision of the European Commission exists for these) with information, among other things, to assess the creditworthiness of natural persons.

Heyflow

We have integrated forms from HeyFlow on this website. The provider is Heyflow GmbH, Jungfernstieg 49, 20354 Hamburg (hereinafter referred to as HeyFlow). HeyFlow provides a technology for the creation of online interaction tools (click funnels), with the help of which (potential) customers, applicants or other third parties (hereinafter “enquirers”) can contact us. For this purpose, enquirers enter their enquiry and the other requested data (e.g. name, contact details, etc.) in the form and submit it. You may have the option of uploading your own files, for which the following explanations also apply.

All enquiries are processed in HeyFlow’s systems on our behalf. We have concluded an order processing contract with HeyFlow. This contract ensures that HeyFlow processes the data in compliance with the GDPR and exclusively on the basis of our instructions. Further details can be found in HeyFlow’s privacy policy at https://heyflow.app/de/datenschutz

The processing of this data with the help of HeyFlow is based on our legitimate interest in the most interactive and user-friendly communication possible with enquirers (Art. 6 para. 1 lit. f GDPR).

The enquiry data itself is processed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In the case of an application, the processing of your data is based on Section 26 (1) BDSG.

In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time with effect for the future.

The data you have entered will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Livechat

Our website offers the optional use of Tawk.to (a live chat software from Tawk.to ltd). The chat is integrated into the source code of the website via a plugin. By using the chat, you automatically use the services of Tawk.to. The data collected includes Chat history, IP address at the time of the chat and country of origin. This data is not passed on to third parties and is only used for protection and internal statistics. By using the chat, you agree that you consent to this. The data collected using Tawk.to technologies is not used to personally identify visitors to this website. It is not stored and is deleted after the chat. The purpose and scope of the data collection and the further processing and use of the data by Tawk.to as well as your rights in this regard and setting options for protecting your privacy can be found in Tawk.to’s data protection information: https://www.tawk.to/privacy-policy/

Use of your data for direct advertising: Registration for our e-mail newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. Subscribers may also be informed via email about circumstances relevant to the service or registration (e.g., changes to the newsletter offer or technical issues). Your data will be used exclusively to send you the subscribed newsletter via email and will not be shared with third parties.

Recipients of the data may include data processors.

Our email newsletters are currently sent via Brevo. Brevo is a service provided by Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, to whom we transmit the data required for sending newsletters (e.g., email address). These data are stored on Brevo’s servers.

Brevo uses this information to send and statistically evaluate the newsletters on our behalf. For the evaluation, the sent emails contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine whether a newsletter message was opened and which links were clicked, if any. Using conversion tracking, we can also analyze whether a predefined action (e.g., the purchase of a product on our website) occurred after clicking the link in the newsletter. Additionally, technical information is collected (e.g., time of retrieval, IP address, browser type, and operating system). The data are collected exclusively in a pseudonymized manner and are not linked to your other personal data, excluding direct personal identification. These data are used solely for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients. If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

We have concluded a data processing agreement with Brevo in which we oblige Brevo to protect our customers’ data and not to disclose it to third parties.

Further information on Brevo’s data protection can be found in Brevo’s privacy policy: https://www.brevo.com/de/legal/privacypolicy/

Based on your consent (Art. 6 (1) lit. a GDPR), we will regularly send you our newsletter or comparable information via email to your specified email address. This transfer to Brevo is made in accordance with Art. 6 (1) lit. f GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system.

The data will only be processed in this context as long as the corresponding consent is in place. Thereafter, they will be deleted.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with future effect. A corresponding link can be found in each newsletter. You can also unsubscribe directly on this website at any time or notify us of your revocation using the contact details provided at the end of this privacy notice.

Sending the e-mail newsletter to existing customers

The provision of your personal data is voluntary. However, further information such as your name or email address is required for order processing.

If you have provided us with your email address for offers or when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services from our range via email, based on the items you have already inquired about or purchased.

Recipients of the data may include data processors.

Our email newsletters are currently sent via Brevo. Brevo is a service provided by Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, to whom we transmit the data required for sending newsletters (e.g., email address). These data are stored on Brevo’s servers.

In order to send email newsletters to existing customers, we are not required to obtain a separate consent from you according to Section 7 (3) UWG. The data processing is solely based on our legitimate interest in personalized direct advertising according to Art. 6 (1) lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails.

The data will only be processed in this context as long as no objection has been raised.

You are entitled to object to the use of your email address for the aforementioned advertising purposes at any time with effect for the future by notifying the responsible party mentioned at the beginning. Upon receipt of your objection, the use of your email address for advertising purposes will be immediately discontinued.

Advertising by letter post

On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information from you as part of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 para. 1 lit. f GDPR and to use them to send you interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the controller.

Social media: Embedded YouTube videos

On some of our websites, we use the YouTube embedding function to display and play videos from the provider “YouTube”.

The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter “YouTube”), which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behaviour to you personally. You can prevent this by logging out of your YouTube account beforehand.

If a YouTube video is started, the provider uses cookies that collect information about user behaviour.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider’s privacy policy, where you will also find further information on your rights in this regard and setting options to protect your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

Accessing YouTube automatically triggers a connection to Google.

If you have deactivated the storage of cookies for the Google Ad programme, you will not have to expect any such cookies when watching YouTube videos. However, YouTube also stores non-personalised usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser.

Further information on data protection at “YouTube” can be found in the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

Further presences in social networks

We maintain online presences within social networks in order to communicate with the users active there or to offer information about us there. Services used and service providers:

Instagram : Social network; service provider: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Privacy Policy: http://instagram.com/about/legal/privacy.

Facebook: Social network; Service provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Privacy Shield (Safeguarding the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active; Opt-Out: Settings for adverts: https://www.facebook.com/settings?tab=ads; Additional information on data protection: Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum, Data protection information for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.

LinkedIn: Social network; Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://www.linkedin.com; Privacy Policy: https://www.linkedin.com/legal/privacy-policy; Privacy Shield (Safeguarding the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active; Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Xing: Social network; Service provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany; Website: https://www.xing.de; Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.

Pinterest: Social network; Service provider: Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA); Website: https://www.pinterest.de; Privacy Policy: https://about.pinterest.com/de/privacy-policy.

We would like to point out that user data may be processed outside the European Union. This may result in risks for users because, for example, it could make it more difficult to enforce users’ rights. With regard to US providers that are certified under the Privacy Shield or offer comparable guarantees of a secure level of data protection, we would like to point out that they thereby undertake to comply with the data protection standards of the EU.

Furthermore, user data is generally processed within social networks for market research and advertising purposes. For example, user profiles can be created based on user behaviour and the resulting interests of users. The user profiles can in turn be used, for example, to place adverts within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the user’s computer, in which the user’s usage behaviour and interests are stored. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

For a detailed description of the respective forms of processing and the opt-out options, please refer to the data protection declarations and information provided by the operators of the respective networks.

In the case of requests for information and the assertion of data subject rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users’ data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

Data may be collected and processed within social networks for contact requests and communication, tracking (e.g. interest/behavioural profiling, use of cookies), remarketing, reach measurement (e.g. access statistics, recognition of returning visitors). This is done in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest.

The types of data processed include inventory data (e.g. names, addresses), contact data (e.g. email, telephone numbers), content data (e.g. text entries, photographs, videos), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).

Data subjects are users (e.g. website visitors, users of online services).

Online map services: Use of Google Maps

We use the Google Maps service on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

You can find more information about data processing by Google in the Google data protection information. You can also change your personal data protection settings there in the data protection centre: http://www.google.com/privacypolicy.html

Detailed instructions on managing your own data in connection with Google products can be found here: http://www.dataliberation.org/

The legal basis for the integration of Google Maps and the associated data transfer to Google is Art. 6 para. 1 lit. f GDPR.

When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account.

If you do not wish to be associated with your Google profile, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or customised design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

We do not collect any personal data through the integration of Google Maps.

Google processes your data in the USA and has submitted to the EU_US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website, or only to a limited extent.

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

Open Street Map

We use the OpenStreetMap (OSM) map service. The provider is the Open-Street-Map Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

When you visit a website on which OpenStreetMap is integrated, your IP address and other information about your behaviour on this website is forwarded to the OSMF. OpenStreetMap may store cookies in your browser or use comparable recognition technologies for this purpose.

Your location may also be recorded if you have allowed this in your device settings, e.g. on your mobile phone. The provider of this site has no influence on this data transmission. For details, please refer to the OpenStreetMap privacy policy at the following link https://wiki.osmfoundation.org/wiki/Privacy_Policy.

The use of OpenStreetMap is in the interest of an appealing presentation of our online offers and an easy findability of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Snazzy Maps

Maps from Snazzy Maps are integrated on the website. We use Snazzy Maps to embed maps from Google Maps in our website with a customised design. The provider is Atmist, 10940 – 166A St Unit 201, T5P 3V5 Edmonton, Canada. When the map is displayed, the user’s IP address is transmitted both to the web service snazzymaps.com and to Google Maps, as it is not technically possible to provide the maps without this transmission. The transmission takes place in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Google LLC or Snazzy Maps is responsible for further data processing. Further information on how Google handles your data can be found at: www.policies.google.com/privacy. For more information about Snazzy Maps, please visit: https://snazzymaps.com.

Mouseflow

This website uses Mouseflow, a web analysis tool from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark. The purpose of data processing is to analyse this website and its visitors. For this purpose, data is collected and stored for marketing and optimisation purposes. This data can be used to create user profiles under a pseudonym. Cookies can be used for this purpose. The web analysis tool Mouseflow records randomly selected individual visits (only with anonymised IP addresses). This creates a log of mouse movements and clicks with the intention of randomly analysing individual website visits and deriving potential improvements for the website.

Web analysis service: Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The purpose of the data processing is to analyse the use of the website and to compile reports on activities on the website. Based on the use of the website and the Internet, further associated services are then to be provided.

The data is processed on the basis of the user’s consent (Art. 6 para. 1 lit. a GDPR).

The recipient of the data is Google as the processor. We have concluded the corresponding data processing agreement with Google for this purpose.

The data will be deleted as soon as it is no longer required for our recording purposes.

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to deactivate Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=de.

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this link. This will install an opt-out cookie on your device. This will prevent the collection by Google Analytics for this website and for this browser in the future as long as the cookie remains installed in your browser.

With the help of the Google Analytics tracking tool, the behaviour of visitors to the website can be evaluated and their interests analysed. We create a pseudonymised user profile for this purpose.

Online script libraries: Use of Google Webfonts

In order to display our content correctly and graphically appealing across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) to display fonts on this website.

The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

The legal basis for the integration of Google Web Fonts and the associated data transfer to Google is Art. 6 para. 1 lit. f GDPR.

Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – but currently also unclear whether and, if so, for what purposes – that the operator collects Google data in this case.

We do not collect any personal data through the integration of Google web fonts.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

The provision of personal data is neither legally nor contractually required. However, it may not be possible to display the content correctly using standard fonts.

The JavaScript programming language is regularly used to display the content. You can therefore object to data processing by deactivating the execution of JavaScript in your browser or installing a JavaScript blocker. Please note that this may result in functional restrictions on the website.

 

Online advertising programmes Use of Google Ads

Our website uses Google Ads conversion tracking. The company operating the Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via an advert placed by Google, Google AdWords will set a cookie on your computer. The cookie for conversion tracking is set when a user clicks on an advert placed by Google.

If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user has clicked on the ad and has been redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked via the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are told the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

Each time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may share this personal data collected via the technical process with third parties.

Our company does not contain any information from Google that could be used to identify the data subject.

These cookies lose their validity after 30 days and are not used for personal identification.

Google processes your data in the USA and has submitted to the EU_US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework

If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this – for example, by using a browser setting that generally deactivates the automatic setting of cookies or by setting your browser to block cookies from the domain “googleleadservices.com”.

Please note that you may not delete the opt-out cookies as long as you do not wish measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.

 

Google Remarketing

This website uses the remarketing function of Google Inc. The operating company of the Google Remarketing services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).

The function is used to present interest-based adverts to website visitors within the Google advertising network. A so-called “cookie” is stored in the website visitor’s browser, which makes it possible to recognise the visitor when he or she visits websites that belong to the Google advertising network. On these pages, the visitor may be presented with adverts that relate to content that the visitor has previously accessed on websites that use Google’s remarketing function.

The legal basis for the integration of Google Remarketing and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

Each time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may share this personal data collected via the technical process with third parties.

Our company does not contain any information from Google that could be used to identify the data subject.

According to its own information, Google does not collect any personal data during this process. However, if you do not wish to use Google’s remarketing function, you can generally deactivate it by making the appropriate settings at https://support.google.com/adwordspolicy/answer/143465. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

CDN (CONTENT DELIVERY NETWORK): Use of Cloudflare

To integrate scripts and libraries on this website, we use a so-called Content Delivery Network (CDN) from Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich Germany (Cloudflare) to increase the security and delivery speed of our website. This corresponds to our legitimate interest (Art. 6 para. 1 lit. f GDPR). A CDN is a network of [globally] distributed servers that is able to deliver optimised content to the website user. For this purpose, personal data may be processed in Cloudflare’s server log files.

Cloudflare is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR not to operate a content delivery network ourselves.

You have the right to object to the processing. Whether the objection is successful must be determined as part of a balancing of interests.

The processing of the data specified in this section is not required by law or contract. The functionality of the website is not guaranteed without the processing.

Your personal data will be stored by Cloudflare for as long as is necessary for the purposes described.

Further information on objection and removal options vis-à-vis Cloudflare can be found at: Cloudflare DPA

Cloudflare has implemented compliance measures for international data transfers. These apply to all global activities where Cloudflare processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). Further information can be found at: https://www.cloudflare.com/cloudflare_customer_SCCs-German.pdf