Data protection
Thank you for visiting our website. Compliance with data protection regulations is of particular importance to us. The aim of this data protection declaration is to inform you as a user of the website about the nature, scope and purpose of the processing of personal data and the rights that exist for you, insofar as you are considered a data subject within the meaning of Article 4 No. 1 of the General Data Protection Regulation.
1. Responsible authority
This website and the range of services are operated by:
Lehmann&Voss&Co KG.
Alsterufer 19
20354 Hamburg
Telephone: +49 (0)40 44197-0
Fax: +49 (0)40 44197-219
E-mail: info@lehvoss.de
2. General information
We have designed the website to collect as little data from you as possible. In principle, it is possible to visit our website without providing any personal data. Only if you decide to use certain services (e.g. use of the contact form), the processing of personal data becomes necessary. In doing so, we always ensure that your personal data is only processed in accordance with a legal basis or with your consent. We comply with the regulations of the General Data Protection Regulation (DSGVO), which has been in force since 25.5.2018, and the respective applicable national regulations, such as the Federal Data Protection Act, the Telemedia Act or other more specific laws on data protection.
3. Purpose and legal basis of the processing of personal data.
We always process your personal data for a specific purpose. In summary, we process your personal data for the following purposes:
- a) In order to be able to process your request with you in case of contact inquiries (e.g. e-mail address, first name, last name);
- b) To be able to send you an offer following your request for an offer (offer form).
- c) For the technical realization of our website and to be able to provide you with our information on this website (e.g. IP address, cookies, browser information).
- d) To be able to receive and process an application from you for one of our job offers.
The specific purposes are described for the processing operations presented here (e.g. contact form, web analysis, ordering process, etc.).
Regarding the legal basis for the processing of your personal data applies:
We process personal data that is required for the justification, implementation or processing of our range of services (contract processing) on the legal basis of Art. 6 (1) lit. b DSGVO. Insofar as we obtain consent from you for the processing of your personal data, the consent forms the legal basis for data processing in accordance with Art. 6 (1) lit. a DSGVO. Data processing is also permissible if we process your data to protect our legitimate interests and your interests or fundamental rights and freedoms with regard to the processing of personal data are not overridden. Insofar as we use external service providers within the framework of commissioned data processing, the processing is carried out on the legal basis of Art. 28 DSGVO.
4. Collected and processed personal data
Within the scope of our web offer, we collect and process certain personal data from you. You can see which data is specifically processed on the one hand by the data you have to provide when filling out forms on the website (e.g. contact form or order form) and on the other hand we inform you about the processed data for the processing operations described here in each case.
In summary, we collect and process the following data from you via our website:
Inquiry form
– Salutation
– title
– First name*
– Last name*
– Company*
– Function*
– Street address
– ZIP CODE
– City
– Country* Phone
– Phone number
– fax
– e-mail*
We will only collect and process your data for the purposes stated in this data protection declaration. Any use beyond the purposes listed requires your express consent. The same applies to the transfer and transmission of your data to third parties.
5. Collection of personal data when visiting our website
When using the website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– Amount of data transferred in each case
– Website from which the request comes
– browser
– Operating system and its interface
– Language and version of the browser software.
In addition to the previously mentioned data, cookies are stored on your computer when you use our website. You can find more information on this under the item “Cookies” in this privacy policy.
6. Integration of services of other providers
Our website uses content, services and services of other providers. These are, for example, services for statistical analysis on the use and visit of our website. In order for this data to be called up and displayed in the user’s browser, the transmission of the user’s IP address to this third-party provider is mandatory. Even though we strive to use only third-party providers that only require the IP address to deliver content or even work with anonymized IP addresses, we have no influence on whether the IP address may be stored. Information on the third-party providers used can be found below in this privacy policy.
7 . Cookies
Cookies are small text files that are stored on your data carrier and store certain settings and data for exchange with our system via your browser. A cookie typically contains the name of the domain from which the cookie data was sent, information about the age of the cookie, and an alphanumeric identifier.
Cookies enable our systems to recognize the user’s device and make any preferences immediately available. As soon as a user accesses the platform, a cookie is transferred to the hard drive of the respective user’s computer. Cookies help us to improve our website and provide you with a better and more customized service. They allow us to recognize your computer, or your (mobile) device, when you return to our website and thereby:
Store information about your preferred activities on the website and thus tailor our website to your individual interests.
To speed up the processing of your requests.
We work with third party services that help us make the internet experience and website more interesting for you. Therefore, when you visit the website, cookies from these partner companies (third-party providers) are also stored on your hard drive. These are cookies that are automatically deleted after the specified time.
For more information on the individual third-party providers, please refer to the Cookie Consent Tool and the privacy notices stored therein.
We have integrated Borlabs cookies on our website. Borlabs Cookies is a consent solution from Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany, with which consent to store cookies can be obtained and documented. Borlabs Cookies uses cookies or other web technologies to recognize users and store consent given or revoked.
The use of the service is based on obtaining the legally required consent to use cookies according to Art. 6 para. 1 lit. c. DSGVO.
The concrete storage period of the processed data cannot be influenced by us, but is determined by Borlabs GmbH. Further information can be found in the privacy policy for Borlabs: https://de.borlabs.io/datenschutz/.
If you do not want browser cookies to be used, you can set your browser to not accept the storage of cookies. Please note that in this case you may only be able to use our website to a limited extent or not at all. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can select the setting in your browser “Block third-party cookies”. We assume no responsibility for the use of third-party cookies.
8. Contacting (contact forms, offer forms etc.)
You can contact us by e-mail or via our contact form (offer form for business customers). In this case, we store the personal data you provide in order to process your request and to contact you to handle your request. If we request information via our contact form, we have marked the mandatory fields required for contacting us accordingly (asterisk). The voluntary information is used to specify your request and to improve the processing of your request. The requested data is transmitted to us by you on a purely voluntary basis.
Depending on the type of request, the legal basis for this processing is Art. 6 para. 1 lit. b DSGVO for requests that you yourself make as part of a pre-contractual measure or Art. 6 para. 1 sentence 1 lit. f DSGVO if your request is of a different nature. The legitimate interest follows from the purposes mentioned under point 3 a.). If personal data is requested that we do not need for the fulfillment of a contract or for the protection of legitimate interests, the transfer to us is based on your consent pursuant to Art. 6 para. 1 lit. a DSGVO.
9. Use of Google Analytics
Type and scope of processing
We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of times our online offer is called up, sub-pages visited and the length of time visitors stay. Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users. This information is used, among other things, to compile reports on website activity.
Purpose and legal basis
We process data using Google Analytics for the purpose of optimizing our website and for marketing purposes on the basis of your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.
Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.
10. Use of Google Tag Manager
Type and scope of processing
We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through one interface and allows us to control the exact integration of services on our website. This allows us to flexibly integrate additional services to evaluate user access to our website.
Purpose and legal basis
The use of Google Tag Manager is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.
Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.
11. Use of Google Fonts
Type and scope of processing
We use the YouTube video functionality. YouTube uses Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for their online offering. To obtain these fonts, you connect to servers of Google Ireland Limited, whereby your IP address is transmitted.
Purpose and legal basis
The use of Google Fonts is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.
Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.
12. General information about our presence in social networks
In order to be able to present our company in the best possible way and to communicate with you as a user, customer or interested party and to inform you about our offered services, we make use of our presence in social networks.
You can find us on the following platforms or social networks
– LinkedIn
– XING
When using social networks, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection to that which exists in the EU cannot be guaranteed in all countries outside the EU.
In this context, it may lead to risks for you as a user if the transferred data is processed in so-called third countries with a non-adequate level of data protection.
This makes it more difficult to enforce known user rights. In addition, your data may not be processed in your interest by the provider in the third country.
The processing purposes pursued by the social networks usually differ from ours. Thus, it usually happens that the data collected from you in social networks are processed for purposes of market research, advertising and creation of user profiles for personalized advertising.
To realize this, cookies are used, which record user behavior and enable profiling of the user.
A concrete list of the processing purposes of the user data can be found in the data protection notices of the respective providers. By making the appropriate settings in your user account, you can limit the profiling, at least to a certain extent. For the exact procedure, please read the corresponding privacy notices of the respective provider.
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) – Privacy policy: www.linkedin.com/legal/privacy-policy
Opt-out: www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) – Privacy Policy/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.
13. Rights of the data subject
You have the right:
– In accordance with Art. 15 DSGVO, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
– pursuant to Art. 16 DSGVO, to request the correction of incorrect or incomplete personal data stored by us without undue delay;
– pursuant to Art. 17 DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
– pursuant to Art. 18 DSGVO, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 DSGVO;
– pursuant to Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller (data portability);
– in accordance with Art. 7 (3) DSGVO, to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing, which was based on this consent, for the future; and
– complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.
Right of objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.
If you would like to exercise your right of revocation or objection, an e-mail to datenschutz@lehvoss.de is sufficient.
14. Passing on of your personal data
The transfer of your personal data takes place as described below.
The website is hosted by an external service provider in Germany. In doing so, we ensure that data processing takes place solely in Germany. This is necessary for the operation of the website, as well as for the establishment, implementation and processing of the existing user contract and is also possible without your consent.
Data is also passed on if we are entitled or obliged to pass on data due to legal provisions and/or official or court orders. In particular, this may involve the disclosure of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.
Insofar as your data is passed on to service providers to the extent necessary, they will only have access to your personal data to the extent that this is necessary for the fulfillment of their tasks. These service providers are obliged to treat your personal data in accordance with the applicable data protection laws, in particular the DSGVO.
Beyond the aforementioned circumstances, we generally do not transfer your data to third parties without your consent. In particular, we do not pass on any personal data to a body in a third country or to an international organization.
15. Data security
Unfortunately, the transmission of information via the Internet is never 100% secure, which is why we cannot guarantee the security of data transmitted to our website via the Internet.
However, we secure our website by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons.
In particular, we transmit your personal data in encrypted form. We use the SSL/TLS (Secure Sockets Layer/ Transport Layer Security) coding system for this purpose. Our security measures are continuously improved in line with technological developments.
16. Storage period for personal data
With regard to the storage period, we delete personal data as soon as their storage is no longer necessary for the fulfillment of the original purpose and there are no longer any legal retention periods. The statutory retention periods form the criterion for the final duration of the storage of personal data. After expiry of the period, the corresponding data is routinely deleted. In the case of the existence of retention periods, a restriction of processing is carried out in the form of blocking the data.
17. References and links
When calling up Internet pages that are referred to within the framework of our website, information such as name, address, e-mail address, browser properties, etc. may be requested again. This privacy policy does not regulate the collection, disclosure or handling of personal data by third parties.
Third party service providers may have different and their own regulations regarding the collection, processing and use of personal data. It is therefore advisable to visit the websites of third parties before entering personal data to find out about their practices for handling personal data.
18. Modification of the privacy policy
We are constantly developing our website in order to provide you with an increasingly better service. We will always keep this privacy policy up to date and adapt it accordingly if and when this should become necessary.
We will of course inform you in good time of any changes to this data protection declaration. We will do this, for example, by means of an e-mail to the e-mail address you have provided to us. If, in addition, further consent from you to our handling of your data should become necessary, we will of course obtain this from you before the corresponding changes become effective.
19. Data protection officer
We have appointed a data protection officer.
Philipp Herold
www.mein-datenschutzbeauftragter.de
Hafenstrasse 1a
23568 Lübeck
E-Mail: datenschutz@lehvoss.de
Data protection
Thank you for visiting our website. Complying with the provisions of data protection law is very important to us. The aim of this data protection statement is to inform you, as a user, about the scope and purpose of processing of personal data and your rights as a data subject under Art. 4(1) of the General Data Protection Regulation.
1. Responsible authority
This website and range of services is operated by:
Lehmann&Voss&Co. KG
Alsterufer 19
20354 Hamburg
Tel: +49 (0)40 44197-0
Fax: +49 (0)40 44197-219
E-mail: info@lehvoss.de
2. General provisions
When developing the website, we designed it in a way that means as little data is collected from you as possible. In principle, it is possible to visit our website without entering any personal data. The processing of personal data will only be necessary if you decide to make use of specific services (e.g. using the contact form). We shall always make sure to only process your personal data in accordance with a legal basis or the consent you have given us. We shall comply with the rules set out in the General Data Protection Regulation (GDPR), which has been in effect since 25.5.2018, as well as any applicable provisions of national law.
3. Purpose of use and legal basis for processing personal data
When we process your personal data, it is always linked to a specific purpose.
In summary, we process your personal data for the following purposes:
a) To be able to process your request when you contact us (e.g. e-mail addresses, first name, surname);
b) to be able to send you an offer after receiving a quotation enquiry you (quotation form).
c) To be able to implement the technical aspects of our website and to provide our information to you via the website (e.g. IP addresses, cookies, browser information).
d) To be able to receive and process your application for one of our job offers.
The specific purposes shall be set out in relation to the types of processing described here (e.g. contact forms, web analysis, ordering process).
The following provisions shall provide the legal basis for processing your data:
We shall process personal data that is required for establishing, implementing or processing our range of services (processing of contracts) under the legal basis provided by point b of Art. 6(1) of the GDPR. If we request your consent for the processing of your personal data, this consent shall constitute a legal basis for data processing under Art. 6(1)(a) of the GDPR. Data processing shall also be permitted if we process your data for the purpose of safeguarding our legitimate interests, provided that these are not outweighed by your interests or fundamental rights and freedoms in relation to the processing of personal data. Whenever we use third-party service providers to process data on our behalf, the data processing shall be carried out on the legal basis of Art. 28 of the GDPR.
4. Collected and processed personal data
As part of our online services, we shall collect and process some of your personal data. Firstly, you can find out what data is actually processed by us is by referring to what you are required to submit when filling out forms on the website (e.g. contact forms or order forms). Secondly, we shall inform you of the data processed as part of each of the processing operations described here.
In summary, we shall collect the following data from you and process it via our website:
Query form
- Form of address
- Title
- First name*
- Surname*
- Company*
- Role*
- Street
- Postcode
- Town/city
- Country*
- Phone number
- Fax
- E-mail*
Online application:
- Title
- First name and surname
- Street, house number
- Postal Code
- Town/city
- Country
- Phone number
- E-mail adress
- Message
- Application documents
We will only collect and process your data for the purposes set out in this data protection statement. Any use of your data that goes beyond the stated purpose will require your express consent. The same principle shall apply to the transfer or transmission of data to third-parties.
5. The collection of personal data when visiting our website
When using the website for solely informational purposes, i.e. if you do not register or transmit information to us in any other way, we shall only collect the personal data that your browser transmits to our server. If you want to view our website, we will collect the following data, which are necessary for us due to technical reasons, so that our website can be displayed to you and to ensure stability and security (the relevant legal basis is point f of Art 6(1)(1) of the GDPR):
• the IP address
• the time and date of the query
• the time zone difference relative to Greenwich Mean Time (GMT)
• the content of the request (the specific page)
• the access status/HTTP status code
• the volume of data transmitted
• the website the request has come from
• the browser
• the operating system and its interface
• the language settings and version of the browser software.
In addition to the data specified above, cookies will be stored on your computer when using our website. You can find further information on this under the heading of “cookies” within this data protection statement.
6. Integration of services from other service providers
Our website uses content and services from other service providers. These include, for example, statistical analysis services as well as services for using and visiting our website. The user’s IP address is transmitted to these third-party service providers so that this data can be accessed and displayed in the user’s browser.
Even though we strive to solely use third-party service providers which only require IP addresses to supply content or which even work solely with anonymised IP addresses, we have no say in how the IP addresses may potentially be saved. You can find information on the third-party service providers in the following sections of this data protection statement.
7. Cookies
Information is collected and saved on our website using so-called “browser cookies”. Cookies are small text files which are saved on your data storage medium and which save specific settings and data so it can be exchanged with our system via your browser. Generally speaking, a cookie contains the name of the domain the cookie files were sent from as well as information on the age of the cookie and an alphanumerical identifier.
Cookies allow our systems to recognise the user’s device and to make any default settings available immediately. As soon as a user accesses the platform, a cookie will be saved on their computer’s hard drive. Cookies help us to improve our website and allow us to offer you a service that is even more tailored to your needs. You allow us to recognise your computer or (mobile) terminal device again when you return to our website. In turn, this allows us to:
save information on your preferred activities on the website and in so doing, to orient our website towards your individual interests.
speed up the processing of your query.
We work together with third-party services, which help us to make our online services and website more interesting. As a result, cookies from these partner companies (third-party service providers) will also be saved on your hard drive when you visit our website. These cookies are automatically deleted after a given time.
You can find a list of the cookies we use in the following table:
_ga | lehvoss.de | Is used to identify the user | Two years |
_gat | lehvoss.de | Throttles the request rate on websit | Session |
_gid | lehvoss.de | Is used to distinguish between users | One day |
If you do not wish to use browser cookies, you can adjust your browser settings to reject the storage of cookies. Please note that if you choose to do this, you may only be able to make limited use of our website, if you are able to use it at all. If you only wish to accept our cookies, but not those of our service providers and partners, you can choose the “block third party cookies” option in your browser. We do not accept any liability for the use of third-party cookies.
8. Contacting us (contact forms, quotation forms etc.)
You can contact us via e-mail or using our contact form (or quotation form in the case of commercial clients). If you choose to do this, we shall save all of the personal data you have transferred so that we can process your request and get in contact with you for the purpose of dealing with your request. When we request information through our contact form, the compulsory fields that are necessary for getting in touch are marked accordingly (with asterisks). The optional fields help us to refine your query and process your request more effectively. The data requested shall be transferred by you to us on a purely voluntary basis.
The legal basis for this processing shall depend on the type of query. For queries which are submitted by you as part of a pre-contractual measure, the basis shall be Art. 6(1)(b) of the GDPR. For other types of request, point f of Art. 6(1)(1) shall provide the legal basis. The legitimate interest shall stem from one of the purposes set out under point no. 3 a.). If personal data is requested that is not necessary for fulfilling the terms of a contract or for safeguarding legitimate interests, the transfer to us shall be carried out on the basis of consent provided by you under point a of Art. 6(1) of the GDPR.
9. Use of Google Analytics
Our website uses functions of the web analytics service “Google Analytics”. The provider of this web analytics service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses “cookies”. Cookies are small text files that our website saves on your terminal device and which make it possible to perform an analysis of website use. Information generated by cookies regarding your usage of our website shall be transferred to a server belonging to Google and saved there. As a general rule, these servers are located in the USA.
The use of Google Analytics cookies shall take place on the basis of point f of Art. 6(1) of the GDPR. As the operator of this website, we have a legitimate interest in the analysis of user behaviour so that we can optimise our online services and, where applicable, our advertising as well.
We shall apply Google Analytics in conjunction with the IP anonymisation function. This ensures that Google compresses your IP address within the Member States of the European Union or the States party to the Agreement on the European Union before transmitting them to the USA. There may be exceptional circumstances under which Google transfers full IP addresses to a server in the USA and compresses them there. Google will use this information to analyse the use of our website on our behalf, allowing it to create reports on website activities and to provide us with other associated services relating to website use and Internet use. There will not be any collation of the IP addresses transmitted by Google Analytics with other data from Google.
It is possible to prevent cookies being used on your web browser. However, this may limit some of the functions of our website. You can also prevent the collection of data in relation to your website usage including your IP address together with subsequent processing by Google. This can be done by downloading and installing the browser plugin available under the following link: tools.google.com/dlpage/gaoptout.
You can find detailed information on how Google Analytics handles your user data in Google’s data protection statement: support.google.com/analytics/answer/6004245.
We have concluded a contract with Google regarding processing on our behalf to fully comply with the legal provisions on data protection.
Our website uses the “demographics” function of Google Analytics. This allows for reports containing statements on your age, gender and interests to be generated. This data comes from targeted advertising from Google as well as visitor data from third-party service providers. It is not possible to attribute the data to a specific person. You can deactivate this function at any time. You can do this through the display settings in your Google account or by rejecting cookies in general to stop the collection of data through Google Analytics, as set out in the point “rejecting data collection”.
Alternatively, you can prevent Google Analytics from collecting data by using so-called “opt-out cookies” (see below). If you erase the cookies in your browser, you must click this link again afterwards.
You can find Google’s data protection statement under the following link: policies.google.com/privacy/partners
10. Use of Google Tag Manager
Our website uses Google Tag Manager. This service allows for website tags to be managed via an interface. The Google Tool Manager only uses tags. This means that: no cookies will be used and no personal data will be collected. Google Tool Manager triggers other tags, which, in turn, collect data if necessary. However, Google Tag Manger does not access this information. If the deactivation has taken place at a domain or cookie level, it shall continue to apply to all tracking tags as long as they have been implemented using Google Tag Manager. Deactivation at a domain or cookie level shall continue to apply to all tracking tags that are implemented using Google Tag Manager. You can find Google’s data protection statement under the following link: policies.google.com/privacy/partners
Google, as a company, is certified under the US-EU “Privacy Shield” data protection agreement. This data protection agreement should ensure that level of data security applicable in the EU is complied with.
11. Use of Google Maps
Our website uses the mapping service “Google Maps” to integrate and display map content. The provider of this service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Your IP address will be collected when you access a page with an integrated map from Google Maps. As a general rule, this information will be transferred to a Google server in the USA and saved there. Google will find out your IP address even if you are not logged into a user account. If you are logged into a user account, Google can directly attribute your surfing patterns to your personal profile. You can prevent this by logging out beforehand. The provider of this website does not have any say in this transmission of data.
The use of Google Maps is in the interest of producing a corresponding representation of our online offers and making the locations stated on the website easy to find. This constitutes a legitimate interest in accordance with point f of Art. 6(1) of the GDPR.
You can find detailed information on how your user data is handled in Google’s data protection statement: www.google.de/intl/de/policies/privacy/.
12. General information on social media presence
We use our social media presence to present our company in the most effective way possible; communicate with you as a user, customer or interested party and inform you about the services we offer.
You can find us on the following platforms and social networks
• LinkedIn
• XING
The use of social networks involves data being processed outside the European Union (EU) and the European Economic Area (EEA). It is not possible to ensure a level of data protection equivalent to that which exists in the EU in every country.
In this regard, it may create risks for you as a user if the data that is transmitted is processed in so-called “third-countries” without an appropriate level of data protection.
This makes it difficult to implement recognised user rights. In addition, it may mean the third-country service provider may process your data in a way that is not in your interest.
If service providers from the USA are certified under the so-called “Privacy shield agreement” – an agreement between the USA and the EU regarding data protection, these service providers shall be obliged to comply with EU data protection standards.
As a general rule, the processing purposes of social networks differ from ours. This usually results in the data collected from you by social networks being processed for the purpose of market research, advertising and creation of user profiles for targeted advertising.
To achieve this aim, cookies are used which record user behaviour, making it possible to profile the user.
You can find a specific list of the purposes of processing user data in the data protection notice of the relevant service provider. By choosing certain settings for your user account, the profiling you are subject to can be reduced, at least to a certain extent. To find out about the exact approach taken, please read the data protection notice of the relevant service provider.
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) – Data protection statement: www.linkedin.com/legal/privacy-policy
Opt-out: www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Privacy Shield: www.privacyshield.gov/participant.
Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) – data protection statement/opt-out: https://privacy.xing.com/en/privacy-policy.
13. Rights of the data subject
You have the right:
- to obtain access to personal data belonging to you, which is being processed by us, in accordance with Art. 15 of the GDPR. In particular, you can obtain access to information regarding the purposes of the processing, the category of the personal data, the categories of recipients to whom your personal data was or is being disclosed, the envisaged length of time the data will be stored, the existence of a right to request rectification, erasure, the limitation of the processing or to object to it, the source of your data (if it has not been collected by us), as well as the existence of automatic decision-making, including profiling and, meaningful information about the details of this, where applicable;
- to obtain the rectification of inaccurate personal data belonging to you which, we have saved, under Art. 16 of the GDPR, without undue delay;
- to obtain the erasure of the personal data belonging to you, which we have saved, under Art. 17 of the GDPR, provided that processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- to obtain the restriction of processing of your personal data under Art. 18 of the GDPR, if you are contesting the accuracy of the data, if the processing is unlawful, you do not wish for it to be erased and we no longer require it, but you need it for the establishment, exercise or defence of legal claims, or if you have objected to the processing in accordance with Art. 21 of the GDPR;
- to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request that such data be transmitted to another data controller (data portability), in accordance with Art. 20 of the GDPR;
- to withdraw the consent you previously gave us, at any time, under Art. 7(3) of the GDPR. This will mean that we are no longer able to continue data processing that was based on this consent and lodge a complaint with a supervisory authority under Art. 77 of the GDPR. As a general rule, you can contact our supervisory authority at your usual place of residence, your workplace or our registered office for this purpose.
Right to object
If your personal data is processed on the basis of a legitimate interest under point f of Art. 6(1)(1) of the GDPR, you have the right to object to the processing of your personal data under Art. 21 of the GDPR, provided there are reasons that arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you will have a general right to object, which will be implemented by us without specifying a particular situation.
If you want to exercise your right of withdrawal or right to object, simply send an e-mail to datenschutz@lehvoss.de
14. Disclosure of your personal data
The disclosure of your personal data shall take place as described below.
The website is hosted by a third-party service provider in Germany. In this way, we ensure that data processing only takes place in Germany. This is necessary for operating the website, as well as the establishment, implementation and processing of the existing licence agreement, which can also be done without your consent.
This means that there may also be disclosure if we are entitled or obliged to disclose data under statutory provisions and/or administrative or judicial orders. In particular, this may relate to the exchange of information for the purpose of law enforcement, safeguarding against threats or the protection of intellectual property rights.
If the your data is passed on to the service provider in accordance with the appropriate amount, the service provider shall only have access to your personal data to the extent that this is necessary to fulfil its duties. Such service providers shall be obliged to process your personal data in accordance with the applicable data protection laws, and the GPDR in particular.
Generally speaking, we will not transfer your data to third parties outside of the aforementioned circumstances without your consent. In particular, we will not pass any of your data on to any body in a third country or international organisation.
15. Data security
Unfortunately, the transmission of information via the Internet is never 100% secure, meaning that we cannot ensure the security of the information transmitted to our website via the Internet.
However, we make use of technical and organisational measures to prevent your data from being lost, destroyed, accessed, modified or disseminated by unauthorised persons.
In particular, on our website, your personal data shall be encrypted when being transmitted. We use the SSL/TLS (Secure Sockets Layer/Transport Layer Security) for this purpose. Our security measures are subject to continuous improvements in accordance with technological developments.
16. Storage period for personal data
When it comes to the storage period, we erase personal data as soon as it is no longer necessary to store it in order to fulfil the original purpose and there are no longer any existing statutory retention periods in effect. Ultimately, statutory retention periods determine the final duration of the storage period for personal data. After this period has come to an end, the corresponding data is routinely erased. If there are applicable retention periods, processing is restricted by blocking the data.
17. References and links
When accessing websites that our website refers you to, you may be asked for information such as your name, address, e-mail address, browser features, etc. This data protection statement does not cover the collection, disclosure or handling of personal data by third-parties.
Third-party service providers may have differing provisions or provisions of their own in relation to the collection and use of personal data. It is therefore recommended that you inform yourself about the practices of third-party websites in relation to the handling of personal data before entering such personal data.
18. Amendment of the data protection statement
We are continuously developing our website so we can provide you with a service that is constantly improving. We will always keep this data protection notice up to date and adapt it accordingly if and when necessary.
We will of course inform you of any potential amendments to this data protection notice in a timely manner. For example, we may do this by sending an e-mail to the e-mail address you provided us with. If it so happens that we require further consent from you in order to handle your data, we will naturally seek this consent from you before the corresponding amendments come into effect.
19. Data protection officer
We have appointed a data protection officer.
Philipp Herold
www.mein-datenschutzbeauftragter.de
Rudolf-Diesel-Str. 10
23617 Stockelsdorf
Email: datenschutz[at]lehvoss.de
Google Analytics
You can refuse the use of Google Analytics by clicking on the following link. An opt-out cookie will be set on the computer, which prevents the future collection of your data when visiting this website: Disable Google Analytics