Source: https://www.lindalgroup.com/privacy-cookies
Timestamp: 2019-04-24 19:49:34+00:00

Document:
We, the Lindal Group Holding GmbH (hereinafter also referred to as “we” or “us”), are glad that you are interested in using our website. The protection of personal data is our first priority. Below you find information about the processing of your personal data (hereinafter also referred to as “data”) and your rights within the use of our website.
Personal data is any information that relates to an identified or identifiable person, such as your name, address and email address.
We process personal data in accordance with statutory provisions, in particular the EU General Data Protection Regulation (“GDPR“) and the Federal Data protection Act (“BDSG”).
Access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us.
Rectification (Art. 16 GDPR): You can obtain the rectification of inaccurate personal data concerning you. Furthermore you can obtain the completion of incomplete personal data.
Erasure (Art. 17 GDPR): In specific cases you can obtain the erasure of your personal data.
Restriction of processing (Art. 18 GDPR): In specific cases you can obtain restriction of processing of your personal data.
Data portability (Art. 20 GDPR): If you provided data to us based on a contract or your consent you can demand that you receive the provided data in a structured, commonly used and machine-readable format or that we transmit the data directly to another controller.
Withdrawal of consent: If you gave your consent to the processing of your personal data you can withdraw your consent at any time with future effect. The lawfulness of the processing of your personal data until your withdrawal will not be affected.
Right of appeal: You have the right to lodge a complaint with a data protection supervisory authority, if you consider that the processing of personal data concerning you infringes regulations (Art. 77 GDPR). The address of our competent supervisory authority is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str 22, 20459 Hamburg.
Individual right to object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6 (1) (e) or (f) GDPR, including profiling based on those provisions. We will then no longer process the personal data for those purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.Right to object to processing for direct marketing purposes: In some cases we process your data for direct marketing. You have the right to object to the processing of your personal data for those purposes at any time. This applies to profiling as far as it is associated with such direct marketing. If you object to the processing for direct marketing purposes, your personal data will not be processed for those purposes any longer.
Enforcements of your rights: To exercise the aforementioned rights please contact our data protection officer to the address stated under section 1.2. When doing so please make sure an unambiguous identification of yourself is possible.
We sometimes use external service providers to process your data. Those service providers have been carefully selected and appointed by us, are bound by our instructions, and are supervised periodically.
In some cases we use external service providers to process personal data. These are carefully selected and contracted by us, are bound to our instructions, and are regularly checked.
Service providers such as collection agencies, credit reporting agencies, IT service providers, banking services, communications services, services in the area of our financial administration and the destruction of data storage media, couriers, forwarding agents and freight carriers, print shops, letter shops, envelope service providers, advertising agencies, for example.
Insofar as it is desired by you, it is for the processing of a mandate, or it is for the performance of another contract, we transfer your personal data to countries outside of the European Union.
Due to collaborations such as those with IT service providers, especially regarding services which involve the maintenance, repair or securing of IT systems, your personal data might become known to employees of a service provider in a country outside the European Union. If no level of data protection exists in this country which is comparable to that in the European Union, and, accordingly, no “adequacy decision” of the European Commission exists regarding this country, we will protect your interests under data privacy law by concluding EU standard data privacy clauses, which were issued by the European commission and agreed with the recipient, or in other suitable ways. You can request a copy of the EU standard data privacy clauses (or other guarantees, as the case may be), under the contact data indicated under section 1.1.
There is no intention for any further transfer of your personal data to other countries outside of the European Union but this is not excluded either, provided that it is lawful.
We shall erase your personal data as soon as the reason for their storage no longer applies.
We may also store data if provided for by the European or national legislator in EU regulations, national laws, or other provisions by which we are governed. Exceptions to the principle of erasure after achievement of purpose can arise, for example, from the provisions of the GDPR and of federal German law, especially the BDSG. For example, no erasure will occur as long as retention obligations exist under commercial or tax law.
In individual cases, a longer storage can be required due to the assertion or possible assertion of claims against us which relate to a contract or pre-contractual measures.
You are not legally or contractually obligated to transmit personal data to us. But you will need to do so if you wish to conclude a contract with us. If you do not transmit personal data to us in individual cases, you will be unable to conclude a contract with us.
The type and scope of the processing of your personal data is distinguished by whether you visit our website only to retrieve information, or to use the site to write us an email.
If you are using the website only for information, and thus will not be registering or otherwise transmitting information to us, we will collect the following data and store them in our systems log files.
The browser, language and version of the browser software.
The legal basis for processing the personal data (IP address) is Art. 6 (1) (f) GDPR. Processing personal data helps us show you our website and guarantee its stability and security. This also constitutes our legitimate interest in processing those data.
The anonymous data of the log files are stored separately from all the personal data you have provided.
These anonymously collected data and information are evaluated for statistical purposes and to increase data protection and data security, so we can ensure an optimal level of protection for the personal data we process.
We erase this data 7 days after creation.
The contact form provided on our website can be used to contact us electronically. If you take advantage of this option, the data you enter into the form will be transmitted to and stored by us. Those data are your first and last name, postal address, phone number as well as your email address. When the message is sent, your IP address and the date and time will also be stored.
You can also contact us via the email address provided. In this case, the personal data you transmit to us in the email will be stored.
The legal basis for processing the data if the contact form is used and you give your consent is Art. 6 (1) (a) GDPR. If you contact us to enter into a contract, the processing of your data is also based on Article 6 (1) (b) GDPR. Furthermore, the legal basis for processing is Art. 6 (1) (f) GDPR (legitimate interest).
The data will be transmitted to our hosting provider, internal departments and government agencies on demand. We transmit the data to India due to the collaboration with our hosting provider who is situated in India. We protect your interests under data privacy law by concluding EU standard data privacy clauses, which were issued by the European commission and agreed with the recipient our hosting provider. You can request a copy of the EU standard data privacy clauses in accordance with section 1.5.
The legal basis for processing data transmitted by email is Art. 6 (1) (f) GDPR. If the email contact aims to conclude a contract, the processing is also based on Article 6 (1) (b) GDPR.
Personal data entered into the contact form, and possibly your email, are processed only to execute the contract. If you contact us by email or the contact form, this also gives rise to the legitimate interest in a processing of the data. Any other personal data processed while sending the form are used to prevent a fraudulent use of the contact form and to protect the safety of our IT systems.
We erase you data in accordance with section 1.6. after handling your request.
The documentation download form provided on our website can be used to download documents on our website. If you take advantage of this option, the data you enter into the form will be transmitted to and stored by us. Those data are your first and last name, your email address and the company name.
The legal basis for processing the data is Art. 6 (1) (b) GDPR. Furthermore, the legal basis for processing is Art. 6 (1) (f) GDPR (legitimate interest).
With your consent we will sent you our newsletter.
We use what is known as the double opt-in procedure for registration to our newsletter. This means that after your registration we send an email to the specified email address in which we ask for confirmation that you wish to receive the newsletter. If you do not confirm your registration within 48 hours then your information will be blocked and automatically erased after one month. In addition, we will store the IP address you are using and the times of the registration and confirmation. The purpose of this data processing is to substantiate your registration and to be able to resolve any potential misuse of your data.
Your title, your first and last name, and your email address must be provided for the sending of the newsletter.
If you are our client or an employee of one of our clients, even without your explicit consent we will have our newsletter sent to you if the contact of these newsletter is comparable to our services which are the subject of the contract and thereby sensibly complement or expand these services. In addition, we will send you Christmas cards and similar messages following the usual business practice. For this we will store and process your title, your first and last name, and your email address.
You can withdraw your consent at any time as well as object to the use of your personal data for the purpose of sending you our newsletter at any time without incurring any costs other than the basic transmission costs. You can send a letter or email with the withdrawal of your consent or with your objection to our address specified above in Section 1.1. You can also make use of the option set up in our newsletter email to click a button to not receive any further emails.
The legal basis for the processing is Article 6 section 1 a) GDPR because you have given your consent.
The legal basis is furthermore Article 6 section 1 f) GDPR if you are our client or an employee of one of our clients. Our legitimate interest lies in sending you publications coordinated to your need for advice as well as messages following the usual business practice such as Christmas cards and to thereby promote our business relationship with you.
If the data processing is carried out on the basis of your consent then we will store your data until you withdraw your consent. We will then erase your data. The same applies if you object to the further use of your personal data in order to send you our newsletter.
You can send your withdrawal of consent or your objection to the address specified in Section 1.1. at any time without incurring any costs other than the basic transmission costs. You can communicate your withdrawal of consent or objection to us by telephone, mail, fax, or email. You can also make use of the option set up in the email sent to you to click a button to not receive any further emails.
The information set forth in section 1.6 also applies.
We use so-called “session cookies” which are automatically deleted upon the completion of your browser session.
We sometimes embed YouTube videos in our online services. Those videos are stored on http://www.YouTube.com and can be played directly from our website. These are all embedded in “expanded data privacy mode”, meaning that no data about you as a user will be transmitted to YouTube unless you play the videos. Only when you play the videos data will be transmitted to YouTube. We have no influence on this data transmission.
When you visit our website, YouTube is informed that you have accessed the respective subpages of our website. Moreover, the data specified in section 2.1 of this privacy notice will be transmitted as well. This is independent on whether YouTube provides an user account into which you are logged, or whether no such account exists. If you are logged into Google, your data will be assigned directly to your account. If you do not want that data to be assigned to your YouTube profile, you must log out before activating the button. YouTube stores your data as an user profile and uses them for advertising or market research purposes, to customize the design of its website, or both. The data is particularly analyzed (including for users that are not logged in) to display interest-based advertising and inform other users of the social network about your activities on our website You may object to the creation of these user profiles, but you will have to ask YouTube to do so.
You can find further information about the purpose and scope of the data collection, and how YouTube processes the data, in YouTube’s data privacy statement. There, you will also find further information about your rights and available settings that allow you to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-USFramework.
We have concluded a contract with Google for contract data processing and we have activated the “IP anonymization” feature on this website. This means that Google will truncate your IP address within member states of the European Union or other Contracting States to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to Google servers in the United States and truncated there. Google uses this information on our behalf to analyze your use of this website, compile reports on the activity on our website, and to provide other services relating to website activity and Internet use.
Google may also pass this information on to third parties in so far as this is required by law or if third parties process the data on Google’s behalf. Google will in no case ever associate your IP address with any other data held by Google.
You can prevent cookies from being stored whenever you want to after your consent by changing the relevant browser settings. Please note that if you do this, however, some features of this website may no longer function properly. Furthermore, you can prevent the collection of data generated by the cookie about your use of the website (including your IP address) and its processing by Google by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en.
We use Google Analytics to analyze and constantly improve the use of our website. Because of the statistics gained we are able to improve our offer and make it more interesting for you as a user. Regarding the exceptional cases, where personal data is transmitted to the United States, Google has submitted to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework. Legal basis for using Google Analytics is point (a) of Article 6 (1) of the GDPR and The legal basis for the processing of your data is Article 6 section 1 f) GDPR as well as Article 6 section 1 a) if you have given your consent.
This website uses the map service Google Maps, which allows the display of interactive maps and the use of the map feature directly on our website. The Google Maps service uses persistent cookies. When visiting the page on our website that uses Google Maps, Google will receive a notification that you have accessed the page. In addition, the information listed under section 2.1 will be transmitted to Google. This takes place regardless of whether you are logged in to a Google user account. If you are logged in to Google, your data will be assigned to your user account. If you do not want the data to be assigned to your account, you will need to log out before accessing the map feature. Google stores your data as an user profile and utilizes it for advertising, market research and/or to provide personalized services on their website. More specifically, such analysis is carried out (even for users who are not logged in) to provide targeted advertising and to provide other social network users with information about your activities on this website. You have the right to object to the creation of these user profiles. This right can be exercised directly with Google.
This website uses the online advertising service Google AdSense, through which advertising tailored to your interests can be presented to you. We use it to track your interest in displaying advertisements that may be of interest to you in order to make our website more interesting to you. For this purpose, statistical information about you is collected which is processed by our advertising partners.
Advertisements are recognizable by the reference “Google advertisements” in the respective advertisement. When visiting our website, Google will receive a notification that you have accessed our website. Google uses a web beacon to set a cookie on your computer. In addition, the information listed under section 2.1 will be transmitted to Google. We have no influence on the data collected, nor are we aware of the full extent of the data collection and the storage period. Your data will be transferred to the USA and evaluated there.
This takes place regardless of whether you are logged in to a Google user account. If you are logged in to Google, your data will be assigned to your user account. If you do not want the data to be assigned to your account, you must log out. It is possible that this data may be passed on to third parties and authorities by Google’s contractual partners. The legal basis for the processing of your data is Article 6 section 1 f) GDPR. This website does not serve third-party ads through Google AdSense.
d) by permanently deactivating your cookies in your browser Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin.
Please bear in mind that the functionality and the range und functions could be restricted by that.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6