Thank you for taking interest in our website. The protection of your privacy is very important to us. Below we provide detailed information regarding the scope and purpose of the collection, use and processing of your personal data. To protect your data, we have taken technical, organisational, and contractual measures to ensure that the data protection regulations are respected by us and by our cooperation partners and service providers. Due to the constant evolvement of technology as well as frequent legislative changes regarding data protection, we encourage you to come back to this statement every now and again. If significant alterations to our declaration are necessary, we will inform you well in time.
For a better understanding, please read these important definitions per Art. 4 of the General Data Protection Regulation (GDPR):
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person can be identified, directly or indirectly, in particular, by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes information such as name, e-mail address, postal address, or telephone number, i.e., information directly associated with your identity.
“Processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
“Pseudonymisation” means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.
“Controller” means a natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data, where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.
“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
“Third-party” means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor, and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.
“Consent” of the data subject means any freely given specific, informed and unambiguous indication of their wishes in the form of a statement or other unambiguous, affirmative act by which the data subject signifies their agreement to the processing of personal data relating to them.
The person responsible for the processing of your personal data within the meaning of the GDPR and other German data protection regulations, as well as relevant regulations of the EU member states, is:
Löwenstark Online-Marketing GmbH
Managing Director: Hartmut Deiwick
Telephone: 0531/213605500
E-mail: kontakt@loewenstark.com
Contact details of the data protection officer:
Mr Axel Vogelsang
Kämmer Consulting GmbH
Nordstrasse 11
38106 Brunswick
0531-702249-49
dsb-team@kaemmer-consulting.de
Our website uses SSL encryption when transmitting confidential or personal content of our users. This encryption is activated, for example, when processing payment transactions and when you send us enquiries via our website. Please make sure that SSL encryption is activated on your side for corresponding activities. The use of encryption is easy to recognise: The display in your browser line changes from “HTTP://” to “HTTPS://”. Third parties cannot read data encrypted via SSL. Only transmit your confidential information when SSL encryption is activated, and contact us in case of doubt.
Insofar as we obtain your consent for processing personal data, the legal basis for this is per Art. 6 para. 1 lit. a GDPR. The legal basis for processing personal data required for the performance of a contract concluded between us and for the implementation of pre-contractual measures as per Art. 6 (1) lit. b GDPR. If the processing of your personal data is necessary for compliance with a legal obligation to which we are subject, the legal basis is per Art. 6 para. 1 lit. c GDPR. If processing is necessary to protect a legitimate interest of ours or of a third party, the legal basis for processing – unless your interests, fundamental rights, and freedoms requiring the protection of personal data override this is per Art. 6 (1) lit. f GDPR.
We process the data you provide (first name, surname, telephone number, and e-mail address) as well as stored customer data, if applicable, to send you useful specialist information and offers via various direct marketing channels (post, e-mail, telephone) from time to time. This data is processed in a central database, which is operated jointly with other companies of the Löwenstark Group (Löwenstark Online-Marketing GmbH, Löwenstark Digital Solutions GmbH, Klickhelden GmbH, neo.says.miau GmbH, and Löwenstark Consulting GmbH).
To tailor the direct marketing approach to your needs in the best possible way, we carry out a limited selection based on your stored customer data beforehand.
The storage period is within the legally permissible retention periods. Your personal data will only be stored for as long as the respective purpose lasts. You do not revoke the respective consent as long as legal retention obligations do not require longer storage.
Insofar as we commission third parties to process personal data, this is done based on an authorised data processing agreement per Art. 28 GDPR, which ensures that the commissioned data processor following our instructions is subject to the same security standards as we are.
With each visit on our website, data and information of the used device are automatically collected and stored in the server’s log files. The following data may be collected:
o the IP address (internet protocol address)
o the internet service provider of the accessing system
o the date and time of access to the website
o the type and version of browser used
o the operating system used by the accessing system
o the website from which an accessing system arrives at our website
o sub-websites visited on our website
o other similar data and information are required to defend against attacks on our online systems. To analyse attacks, if necessary, the aforementioned data is stored for seven days and – insofar as it is not further required for evidentiary purposes in legal prosecution – deleted or anonymised. The legal basis for the processing is Art. 6 (1) lit. f GDPR, as we have a legitimate interest in the uncompromised functioning of our website.
Your IP address is required during the connection to transmit the contents of our website to your browser. The legal basis for the processing and storing of the IP address is a legitimate interest per Art. 6 (1) lit. f GDPR, as our website content, cannot be displayed without the transmission of your IP address. The legitimate interest in temporarily storing the IP address is our security interest.
We store information on user behaviour to design and optimise our website for you as a user and create statistical models. To exclude automated access (so-called bots attacks), we store your IP address in pseudonymised form, i.e., in such a way that no reference to your person can be made from the statistical model alone. The legal basis for this is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to ensure the functionality of the statistical model to optimise our offers.
Your data will only be passed on to third parties per the legal requirements, i.e., only if you have given your consent to this per Art. 6 Para. 1 lit. a GDPR, if the transfer is per Art. 6 Para. 1 lit. b GDPR is necessary for the establishment, implementation or amendment of the contractual relationship or based on our legitimate interest in the economical and effective operation of our business operations per Art. 6 Para. 1 lit. f GDPR. The use of services and the transfer of data to third parties and third-party providers not based in the European Union or the European Economic Area will only occur if an appropriate level of data protection, legal permission or your consent as per Art. 6 Para. 1 lit. a GDPR exists. By order of the competent authorities, we may provide information on inventory data in individual cases insofar as this is necessary for a criminal prosecution, to avert danger by the competent and authorised federal and state authorities or to enforce intellectual property rights. The legal basis in these cases is Art. 6 para. 1 lit. c GDPR.
We store information on user behaviour to design and optimise our website for you as a user and create statistical models. To exclude automated access (so-called bots attacks), we store your IP address in pseudonymised form, i.e., in such a way that no reference to your person can be made from the statistical model alone. The legal basis for this is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to ensure the functionality of the statistical model to optimise our offers.
To make visiting our website attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and enable our partner companies or us to recognise your browser on your next visit (persistent cookies). The legal basis for the use of cookies that are not required is your consent, according to Art. 6 para. 1 lit. a GDPR, Art. 6 para. 1 lit. b GDPR if the processing is necessary for the performance of the contract or Art. 6 para. 1 lit. f GDPR due to our legitimate interests in our website’s optimisation and user-friendly design.
Our website provides a contact form that can be used for electronic contact. If you utilise this option, the data entered in the input mask will be transmitted to us and processed. This data is:
Your name (optional), e-mail address, and address (optional).
At the time of sending the message, the following data will also be stored:
Your IP address, date and time of sending the form.
You will be referred to this privacy policy before sending your contact request. Alternatively, it is possible to contact us via the e-mail address provided. The user’s personal data transmitted with the e-mail will be processed. The legal basis for processing the data is Art. 6 para. 1 lit. a GDPR.
In this context, the data is not passed on to third parties. The data is used exclusively for processing the contact request. Once your enquiry is processed, the input mask’s personal data will be deleted immediately. Any additional personal data collected during the contact process will be deleted after seven days. Upon your request, we will delete your personal data immediately. However, if you request the deletion of the personal data processed during your enquiry (via contact form or e-mail), it may no longer be possible to process your request.
If you subscribe to our newsletter, we will use the data provided by you per Art. 6 Para. 1 lit. a GDPR to send you the newsletter following your consent for our own advertising and information purposes. It is sufficient to provide your e-mail address. After your registration, we will send you a confirmation e-mail with a link that you must click to confirm your registration. This so-called “double opt-in” procedure serves to prevent abusive registrations. For evidence purposes, your e-mail address, IP address, and the time of the registration are stored based on Art. 6 Para. 1 lit. f GDPR. You can unsubscribe from the newsletter at any time via the unsubscribe link at the end of each newsletter or by e-mail.
You have the right to receive information free of charge at any time about the origin, recipient, and purpose of your stored personal data. You also have the right to demand the correction, restriction of processing, deletion or – insofar as the deletion is contrary to statutory retention obligations – blocking of this data, as well as to revoke the consent you have given with effect for the future. You also have the right to have data that we process automatically based on your consent or in fulfilment of a contract handed over to you or a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically possible. If you have any further questions, contact our data protection officer at any time using the address below. Furthermore, you have the right to complain to the competent supervisory authority. The competent supervisory authority for data protection issues is:
The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hanover
Phone: +49 511 120 – 45 00
E-mail: poststelle@lfd.niedersachsen.de
You have the right at any time to revoke the consent you have given us regarding processing your personal data and sending advertising with effect for the future.
To fulfil our legal obligation according to Art. 7(1) GDPR, we use the Usercentrics Consent Management Platform of Usercentrics GmbH, Rosental 4, 80331 Munich. The platform processes log file data, user agent (device, browser type, browser language, browser version, resolution) and consent data (consent yes/no, timestamp, data scope, data attributes, controller ID, processor ID, consent ID) via JavaScript. This JavaScript enables Usercentrics to inform you about certain tags and web technologies we use and to obtain, manage, and document your consent. The legal basis for processing the data is Art. 6 (1) lit. c GDPR. You can permanently prevent the execution of JavaScript at any time by adjusting the respective settings in your browser, which would also prevent Usercentrics from executing the JavaScript. You can find more information about data protection at Usercentrics at usercentrics.com/en/privacy-policy. You can change your settings selected in the Usercentrics Consent Layer at any time by clicking on the fingerprint icon in the bottom left-hand corner of the website.
We use the “Google Tag Manager” on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland. This service allows website tags to be managed via an interface. The Google Tag Manager does not set any cookies but only tags and does not collect personal data. The service triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. Further information on data protection can be found at https://policies.google.com/privacy?hl=de&gl=de.
We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses “cookies”, text files placed on your computer, to help the website analyse how users navigate the site. Google Analytics cookies are stored on your consent, according to Art. 6 para. 1 lit. a GDPR. Google will use this information to evaluate your website use, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties when required by law or if such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. Google Analytics is used on this website with the extension “_anonymizeIp()”; therefore, IP addresses are only processed in abbreviated form to exclude direct personal references. However, you can also set your browser to generally reject cookies, or so that you must confirm the acceptance of cookies each time. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de). If you decide against cookies, you may not be able to use certain functions on our website. The help function in the menu bar of most web browsers explains how to prevent your browser from accepting new cookies, how to have your browser notify you when you receive a new cookie, or even how to turn off all cookies you receive. You can also revoke your consent to use Google Analytics at any time in our consent layer. For more information on how Google Analytics handles user data, please visit:
o https://www.google.com/intl/de/policies/privacy/partners
o http://www.google.com/policies/technologies/ads
o http://www.google.de/settings/ads
o http://www.google.com/analytics/terms/de.html
o http://www.google.com/intl/de/analytics/learn/privacy.html
We use the online advertising programme Microsoft Advertising (formerly Bing Ads) of Microsoft Corporation, One Microsoft Way, Redmond WA 94043, USA (“Microsoft”) on our website on the legal basis of your consent, according to Art. 6 para. 1 lit.a GDPR. Within the framework of Microsoft Advertising, we use so-called conversion tracking. When you click on a Microsoft Advertising ad, a cookie is set for conversion tracking. Cookies are small text files that the Internet browser stores on the user’s computer. These cookies lose their validity after 30 days and are not used to identify the user personally. If the user visits certain pages of this website and the cookie has not yet expired, Microsoft and we can recognise that the user clicked on the advertisement and was redirected to this page.
Each Microsoft Advertising customer receives a different cookie. The cookies cannot be tracked across Microsoft Advertising customers’ websites. The information collected using the conversion cookie is used to generate conversion statistics for Microsoft Advertising customers who have opted-in to conversion tracking. Clients will learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. You can withdraw consent to using Microsoft Advertising at any time in our consent layer. For more information, please visit https://privacy.microsoft.com/en-us/PrivacyStatement
We use Leadlabs, the counting pixel technology of wiredminds GmbH, Lindenspürstraße 32, 70176 Stuttgart (www.wiredminds.de), to analyse visitor behaviour on our website on the legal basis of your consent according to Art. 6 (1) lit. a GDPR. In the process, data may be collected, processed and stored, from which usage profiles are created under a pseudonym. Where possible and reasonable, these usage profiles are completely anonymised. Cookies may be used for this purpose. The data collected, including personal data, is transmitted to wiredminds or collected directly by wiredminds. Wiredminds may use information left behind by website visits to create anonymised user profiles. The data obtained in this manner will not be used to personally identify the visitor to this website without the separately granted consent of the person concerned. They will not be merged with personal data about the bearer of the pseudonym. Insofar as IP addresses are collected, they are immediately anonymised by deleting the last number block. You can revoke your consent to using LeadLabs at any time in our consent layer.
On our website, you will find links to the social networks Facebook, Instagram, Twitter, Pinterest, Xing, and YouTube. The links are recognisable by the respective logo of the provider. When calling the respective networks and platforms, the operator’s terms and conditions and data processing guidelines apply. Personal data is not collected when you access our website but only when you are forwarded to our account with the respective social media provider. Details of the provisions applicable there and information on the use of personal data can be found in the data protection declarations of the respective provider:
Facebook: https://www.facebook.com/privacy/explanation
Facebook’s responsible bodies for data processing are Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour. Dublin 2 (Ireland), contact: https://www.facebook.com/help/contact/540977946302970 and Löwenstark Online Marketing GmbH (contact details see above). According to Art. 4 No. 7 of the GDPR, the controller of the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of personal processing data. According to Art. 26 GDPR with Facebook, the joint responsibility can be viewed here: https://www.facebook.com/legal/terms/page_controller_addendum.
Instagram: https://help.instagram.com/155833707900388
Twitter: https://twitter.com/de/privacy
Pinterest: https://policy.pinterest.com/de/privacy-policy
Xing: https://www.xing.com/privacy
We use Facebook Website Custom Audiences on our website, a marketing service provided by Facebook Inc (1601 South California Avenue, Palo Alto, CA 94304, USA). This enables us to display advertisements on Facebook to certain groups of pseudonymised visitors to our website who also use Facebook, which is tailored to their individual interests. For this purpose, a Facebook Custom Audience pixel is integrated into our website, a JavaScript code that stores non-personal data about the use of the website, such as IP address, browser used, origin and target page. This information is transferred to Facebook servers in the USA. There, it is automatically checked whether you have saved a Facebook cookie on your end device and whether you belong to a target group that is relevant to us. If this is the case, you will be shown corresponding advertisements placed by us on Facebook – without you being personally identified by the data comparison. The legal basis for the use of this service is Art. 6 para. 1 sentence 1 lit. a GDPR. More information on data protection at Facebook and revoking consent can be found at https://www.facebook.com/about/privacy/.
We use the YouTube.com platform operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to post our own videos and make them publicly accessible. If you follow a link on YouTube, we would like to point out that YouTube processes the personal data of its users per its own data usage guidelines and uses it for business purposes. YouTube’s privacy policy is available at https://policies.google.com/privacy?hl=de&gl=de.
In this context, we would also like to point out that the transfer of personal data to the USA is possible when using social media and that the European Court of Justice (ECJ) has declared the so-called “EU-US Privacy Shield” invalid in its ruling of 16 July 2020, case no. C-311/18, due to the considerable powers of intervention of the US security services and the lack of legal protection options for EU citizens, against this background, has also cast doubt on the viability of the so-called EU standard contractual clauses as a legal basis.
