Data Privacy Statement

 

We welcome you to our website and are happy that you are interested in our company. So that we can reassure you with regard to the handling of your personal data, in this policy we offer you full disclosure concerning what happens to the data gathered and which security measures we take. Personal data are all data that can be related to you personally, e.g. your name, e-mail address or user behaviour.

We also offer you information on your statutory rights in connection with the processing of these data.

1. Data Controller and Data Protection Officer

The “Controller” for data processing purposes within the meaning of Art. 13 GDPR is:

Hans Lutz Maschinenfabrik GmbH,

Gutenbergstraße 19

D-21465 Reinbek/Hamburg

Telephone: 040-72769-0

E-mail address: info@ lutz-aufzuege.de

 

Our Data Protection Officer, FIDES IT Consultants GmbH, can be reached at the e-mail address datenschutz@lutz-aufzuege.de.

2. Information on the collection of personal data

Visiting the website

If you use the website for purely informational purposes, i.e. if you only visit our website and do not provide us with any information, we will only collect the data that your browser transmits to the web server. The following information will automatically be recorded:

(1)        Information about the browser type and version used

(2)        The user's operating system

(3)        The user’s Internet service provider

(4)        The user’s IP address

(5)        Date and time of access

(6)        Websites from which the user's system accesses our website 

(7)        Websites accessed by the user’s system via our website

(8)       Status-code-based notification of whether the access was successful

(9)       Volume of data transferred

The legal basis for the processing of the data is Art. 6 (1) (1) (f) GDPR (legitimate interest). For our part, we have a legitimate interest in being able to guarantee the sustainable operation of the website. The technical use of the data on the web server is limited in time to the duration of the use of the website.

Contact form/contacting us by e-mail, telephone or fax

If you contact us via the contact forms or directly by e-mail, telephone or fax, the data/information you provide (title, first and last name, e-mail address, telephone, company, reason for contact and content of the message) will be transmitted to and processed by us.

The data will be processed exclusively for the purpose of answering your questions or processing your request.

The legal basis for the processing of the data is Art. 6 (1) (1) (f) GDPR (legitimate interest). We have a legitimate interest in processing and answering the data subjects’ enquiries arising from the establishment of contact in line with their specific purpose. For the targeted processing of the requests, the information transmitted can be forwarded to the responsible offices and specialist departments within our company.

Any further use or disclosure of your data will be based on the requirement to fulfil statutory obligations pursuant to Art. 6 (1) (1) (c) GDPR (legal obligation). Any contact is expressly made on a voluntary basis. Failure to provide data will have no consequences for you. We will only store your personal data for as long as is necessary for the intended purpose of processing your enquiry or for compliance with legal retention periods.

3. External service providers/data recipients

On the basis of Art. 28 GDPR (contract data processing), we use external service providers to support internal administrative and IT processes, e.g. for hosting, administration and maintenance of IT systems.

The service providers have been carefully selected by us, are obliged to maintain confidentiality and may only use your personal data strictly for a specific purpose as part of the performance of the contract concluded between you and us. 

4. Cookies/technical tools

Cookies

Cookies are occasionally used on our website. Cookies are small text files which, provided that the storage of cookies is activated in your browser, are placed on your computer and stored by your browser. Cookies cannot be directly assigned to specific persons and do not contain any personal data. Cookies do not cause any damage to your computer and do not contain viruses. You can configure your browser settings as you wish, for instance, if you do not want cookies to be stored on your computer, to refuse the acceptance of cookies, in whole or in part. Previously stored cookies can also be deleted by making changes to your browser’s system settings. We would point out that the deactivation or deletion of cookies may mean that you will not be able to use all the functions of this website.

4.1 Use of the Usercentrics consent tool

For the purpose of obtaining effective consent from website visitors, we use the consent tool/the consent management service of Usercentrics GmbH.

Further information on the use and purpose of the consent tool can be accessed directly via the consent tool, which is made accessible to you when you first call up the website and can then be accessed at any time via the fingerprint icon displayed on the website.

The legal basis for the data processing carried out in the context of the use of the consent tool is Art. 6 (1) (1) (f) GDPR (legitimate interest). The processing serves our legitimate interest in displaying our site in a legally compliant manner and is therefore necessary for the operation of the website.

4.2 Use of Google Analytics

If you have opted for “Accept everything” in the consent tool’s privacy settings or given your consent via the individual settings of the consent tool in the “Statistics” category, we will use Google Analytics to optimally tailor the content of the website to the needs of our visitors. The legal basis for the processing of the data is Art. 6 (1) (1) (a) GDPR (consent).

You can revoke your consent to the use of the consent tool at any time with effect for the future. The consent tool can be accessed at any time via the fingerprint icon displayed on the website.

Google Analytics is a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses the above-mentioned cookies, which are stored on your computer and enable an analysis of your use of the website. The information generated by the cookies about your use of this website will usually be transferred to a Google server in the USA and stored there.

However, by activating IP anonymisation on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. In order to implement the anonymisation of IP addresses (IP masking) via our website, the code “gaTracker(‘set’, ‘anonymizeIp’, true)” has been added to Google Analytics. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

The data processing will essentially be carried out by Google. The information transmitted will be used by Google to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. Google will continue to use the data collected for profiling purposes and combine it with other data about the user, such as search history, personal accounts, usage data from other devices and any other data Google may hold on that user.

We cannot rule out the possibility that data may be passed on to Google contract partners or transferred to Google servers in the USA.

In the case of processing in the USA, there is a risk that an adequate level of protection for the processing of personal data which meets the EU standards of the GDPR cannot be consistently ensured. Furthermore, it cannot be ruled out that personal data processed by the service provider may also be accessed by US government agencies due to laws applicable in the USA.

The data transferred to Google are automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

In the use of Google Analytics, the following cookies and comparable technical tools are used:

Name; Provider, Purpose, Storage, Type 
_ga; Google;This is used to distinguish users; 2 Jahre; Cookie
_gid; Google; This is used to distinguish users; 1 day; Cookie
_gat; Google; Used to throttle request rate; 1 Minute; Cookie
_dc_gtm_xxx; Google; This is used to distinguish users; 1 Minute; Cookie
_gat_gtag_xxx; Google; This is used to distinguish users; 1 Minute; Cookie
_gac_xxx; Google; This contains information about which ad was clicked; 2 months, 4 weeks, 1 day, 3 hours; Cookie
IDE; Google; Using this ID, Google can recognize the user across different websites and domains and display personalized advertising; 1 Jahr; Cookie

Third-party information:

Google Analytics Terms of Use: marketingplatform.google.com/about/analytics/terms/us

Google Privacy Policy: https://policies.google.com/privacy

4.3 Use of Google Tag Manager

For reasons of transparency, we would point out that we use Google Tag Manager on our website. Google Tag Manager is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

Google Tag Manager is a solution with which operators of websites can integrate and manage website tags via a uniform interface. Tags are small sections of code that, for example, record the activities of visitors on our website (tracking) and can originate both from Google internal services, such as Google Analytics, and from comparable services of other companies. Google Tag Manager itself, which implements the website tags, does not place any cookies or collect or process personal data.

Even if Google Tag Manager is used, the processing of website tags of the tracking services implemented on our website only takes place if the user has consented to the processing.

Third-party information:

Additional Terms of Use for the Google Tag Manager: https://www.google.com/intl/de/tagmanager/use-policy.html

Google Tag Manager Help: https://support.google.com/tagmanager/?hl=en#topic=3441530

Google Privacy Policy: https://policies.google.com/privacy

4.4 Use of Leadinfo

If you have opted to “Accept everything” in the privacy settings of the consent tool or have declared your consent via the individual settings of the consent tool in the “Marketing” category, we will use the lead generation service from Leadinfo. This recognizes visits to our website based on IP addresses and shows us publicly available information about the IP addresses, such as company names, telephone numbers or addresses of companies, via the Leadinfo dashboard available to us.

The legal basis for the processing of the data is Art. 6 (1) (1) (a) GDPR (consent).
You can revoke your consent to the use of the consent tool at any time with effect for the future. The consent tool can be accessed at any time via the fingerprint icon displayed on the website.

Leadinfo’s lead generation service is a service provided by Leadinfo B.V., based in the Netherlands. In addition to the recognition of the IP addresses of visitors to the website, first-party cookies are used to generate additional transparency for us about how visitors use our website. These cookies are not linked to other information.

The data processing is mainly carried out by the provider of the services, Leadinfo B.V.. Immediately after the Leadinfo systems have received an IP address, matching company data are requested and displayed in the Leadinfo dashboard. The IP addresses themselves are not displayed or stored in the Leadinfo dashboard available to us. 

If you should decide that your data are no longer to be collected via Leadinfo’s lead generation service, you can send an e-mail to info@leadinfo.com to remove your IP address from the Leadinfo database.

When the lead generation service from Leadinfo is used, the following cookies and comparable technical tools are used:

Name, Provider/access, Purpos, Storage period, Type

_li_id.xxxx, Leadinfo BV, A first party cookie to determine if the visitor is a new visitor or a returning visitor, Current session, Cookie

_li_ses.xxxx, Leadinfo BV, A first party cookie to determine which pages have been visited during their session, 2 years, Cookie

Third-party information:

Information on data processing under data protection law: help.leadinfo.com/en/gdpr

Leadinfo Privacy Statement: www.leadinfo.com/en/privacy/

5. Notes on external links

Our website contains external links to the services of the following providers: 

XING - New Work SE, Dammtorstrasse 30, 20354 Hamburg, Germany
LinkedIn - LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, United States
Facebook and Instagram - Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

The links are static links that take you directly from our website to the website of the service provider. You can easily track this via the address line of your browser, whose content will be displayed in a new window or tab after the link has been established. When opening the shortcuts using a device on which a service app has been installed, it may also be possible to access the desired service directly via the app.

The service provider in question is always responsible for the operation of the linked services. With the exception of the information provided by us about the services, we have no influence on the current and future design and content of the linked services. We could identify no illegal content at the time the links were placed. If we become aware of content-relevant violations of the law in the future, we will remove the corresponding link from our website.

If you have a user account with one of the services mentioned above and are logged in to the service at the time of linking, information about the use of the service can be assigned to your user account. If you do not want the service providers to collect data about you in this way, you must log out of the service concerned before visiting our website. 

Further information on the services can be found in the providers’ privacy policies:

XING - https://privacy.xing.com/en/privacy-policy
LinkedIn - https://www.linkedin.com/legal/privacy-policy
Facebook - https://www.facebook.com/about/privacy/

Instagram - https://help.instagram.com/519522125107875/?maybe_redirect_pol=0

6. Security

In order to protect the personal data stored by us from accidental or intentional manipulation, loss, destruction or access by unauthorised persons, we have taken appropriate technical and organisational measures. The adequacy of the protective measures is constantly reviewed and adapted to new safety standards.

On our website we use the secure online transmission method known as Transport Layer Security (TLS) transmission. You can recognize this by the fact that an “s” is appended to the address component http:// (“https://”) or a closed lock symbol is displayed. By clicking on the icon, you will receive information about the certificate used. The way the symbol is displayed depends on the browser version you are using. TLS encryption ensures the confidential transmission of your data.

Your rights

You have the right to receive information on the processing of personal data concerning your person as well as the information listed in detail in Art. 15 GDPR. If the personal data concerned are incorrect or incomplete, you can request the correction or completion thereof (Art. 16 GDPR). If one of the reasons listed in Art. 17 GDPR should apply, you will have the right to request the immediate deletion of your personal data. Under the conditions of Art. 18 GDPR, you can request the restriction of processing and, in accordance with Art. 20 GDPR, data portability.

Under the conditions of Art. 21 GDPR, you have the right to object to the processing of your personal data.

If you believe that the processing of your personal data violates the provisions of the GDPR, you can lodge a complaint with a supervisory authority, e.g. by submitting it to the independent Schleswig-Holstein Data Protection Authority (Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein) in Kiel as the competent supervisory authority (Art. 77 GDPR).