Source: https://www.lampert.info/en/privacy
Timestamp: 2019-04-20 12:59:11+00:00

Document:
As the office responsible for data processing, we would therefore like to explain in detail about the use of your data when you visit our website.
Personal data is all information relating to an identified or identifiable natural person (hereinafter referred to as the "Affected Person"). A natural person is considered to be identifiable, who can be identified as such either directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an Online ID or to one or several specific characteristics, the expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
An affected person is any identified or identifiable natural person whose personal data is processed by the controller.
Processing is any operation executed with or without the help of automated procedures or any such set in connection with personal data, such as the collection or capture, the organization, the grading, storage, adaptation or alteration, reading, the queries, the application, the disclosure by transmission, dissemination or any other form of deployment, the adjustment or the link to the restriction, deletion or destruction.
Limitation of processing is the marking of stored personal data with the aim of limiting their processing in future.
Profiling is any kind of automated processing of personal data, which exists in the fact that this personal data will be used to determine personal aspects that relate to a natural person, to assess, in particular to analyse or predict aspects related to job performance, economic situation, health, personal preferences, interests, reliability, behaviour, residence or change of location of this natural person.
Pseudonymisation is the processing of personal data in a way in which the personal data without involving additional information can no longer be assigned to a specific person concerned, provided that such additional information should be kept separately and is subject to technical and organizational measures to ensure that personal data will not be assigned to an identified or identifiable natural person.
Responsible person or person responsible for the processing is the natural or legal person, public authority, agency or other body which alone or jointly with others decides on the purposes and means of the processing of personal data. Where the purposes and means of processing are prescribed by the Union law or the law of the Member States, the responsible person or the certain criteria can prescribe his appointment in accordance with Union law or the law of the Member States.
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the person responsible.
Recipient is a natural or legal person, public authority, agency or other agency, to whom personal data is disclosed, regardless of whether it is a third party or not. Authorities may potentially receive personal data within the context of a specific investigation order in accordance with Union law or the law of the Member States, are however not considered to be recipients.
The third party is a natural or legal person, public authority, agency or other authority in addition to the affected person, the person responsible, the processor and the persons who, under the direct responsibility of the controller or the processor, are authorized to process the personal data.
Consent is optional for each affected person for the specific case in an informed manner and unequivocally provided declaration of intent in the form of a declaration or any other clearly affirmative action by means of which the affected person makes it clear that he is in agreement with the processing of personal data.
other related data and information that serve the emergency response in the event of attacks on our information technology systems.
to provide law enforcement authorities in the event of a cyber attack with the information required for law enforcement.
This data and information collected anonymously will be on the one hand statistically evaluated and on the other hand with the aim of increasing the level of data protection and data security in our company. Our goal is to create an optimal level of protection for personal data processed by us. The anonymous data of the server log files are saved separately from all personal data specified by an affected person. The duration of the retention is calculated on the basis of whether or not the storage for one of the above-mentioned purposes is still necessary. If this is not the case, the IP address is anonymized or deleted.
We draw your attention to the fact that the provision of personal data is partly required by law (for example, tax regulations) or may result from contractual arrangements (e.g. information on the contract partner). Under certain circumstances, it may be necessary for the conclusion of a contract that an affected person provides us with personal data that must be processed by us, such as the implementation of a contractual relationship. A non-provision of personal data would result in the contract not being able to be concluded with the affected person. You can contact our Data Protection Officer, who will inform you on a case-by-case basis whether the provision of personal data is legally or contractually required for the conclusion of the contract, whether an obligation exists to provide personal data, and what the consequences of not providing the personal information in your individual case would be.
Our website contains information on the basis of statutory provisions, which allow a fast electronic contact with our company as well as a direct communication with us, which also includes a general address of the so-called electronic mail (E-mail address). If an affected person contacts the person responsible for the processing via a contact form, personal data provided by the person concerned will be saved automatically. Such data provided on a voluntary basis by an affected person to the person responsible for the processing of personal data will be used for the purposes of processing or contacting the person concerned. The legal basis for this is the consent issued at the end of the form and therefore art. 6 para. 1 lit. a. GDPR. There is no transfer of personal data to third parties. We delete the data collected in this context after the storage is no longer necessary, or restrict the processing if there are statutory retention obligations.
For security reasons, we strongly advise you to transfer encrypted e-mails only. In the transmission of unencrypted messages there are considerable risks. Please send us therefore no sensitive data via unencrypted e-mail. For an encrypted communication, please use our contact form.
In addition to the previously specified data, Cookies are stored on your computer when you use our website. Cookies are small text files that are saved on your hard drive allocated to the browser you are using, to which the position that the Cookie sets, certain information flows. They are used to make the Internet on the whole more user-friendly and effective.
– Persistent Cookies (on this b.).
a. Transient cookies are deleted automatically when you close the browser. These include in particular the session cookies. These save a so-called session ID, which can be used to allocate various requests of your browser to the joint session. This can allow your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close your browser.
b. Persistent cookies are deleted automatically after a specified period which can vary depending on the cookie. You can delete the cookies in your browser's security settings at any time.
c. You can configure your browser settings according to your wishes and refuse the adoption of third-party cookies or all cookies. So-called "Third Party Cookies" are cookies not placed by a third party and therefore not by the actual website you are currently located. We would like to point out that not all functions of this website may be available if you deactivate Cookies.
You can subscribe to our Newsletter with your consent, by means of which we will inform you about current suggestions or examples for correct operation with the PUK.
For the registration for our newsletter, we use a so-called double opt-in procedure. This means that we can, after you have registered, send an e-mail to the specified e-mail address, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be locked and automatically deleted after one month. In addition, we store the IP addresses and their dates of registration and confirmation. The purpose of this procedure is to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
Your consent to the sending of the newsletter can be revoked and the Newsletter unsubscribed from at any time. In order to issue your revocation, you must simply click the link provided in each newsletter e-mail, complete this form on the website, send an e-mail to mail@lampert.info or a message to the specified contact data in the Imprint.
We draw your attention to the fact that we evaluate your user behaviour on the dispatch of newsletters. To do this, every hyperlink on the mailings is transformed into a so-called tracking link. If you click on a link within the newsletter mailing, this is sent via the Newsletter server and evaluated by us. For the evaluations referred to in paragraph 2, we combine the data with your E-mail address. The evaluations are stored for a period of six months. The processing of your data is based on the consent issued when ordering the newsletter and therefore on art. 6 para. 1 lit. f. GDPR.
In addition to the purely informative use of our website, we offer various services that you can use if you are interested. To do this, you must generally provide more personal data that we use for the provision of the relevant service and for which the above principles on data processing apply.
Sometimes we use external service providers to process your data. These have been carefully selected and commissioned by us, are tied to our instructions and are regularly inspected.
Furthermore, we may pass on your personal data to third parties if campaign participations, competitions, contracts or similar services are provided by us together with partners. More information on this can be obtained by entering your personal data or below in the description of the offer.
As far as our service providers or partners are located in a country outside of the European Economic Area (EEA), we will inform you about the consequences of this fact in the description of the offer.
Our website is directed at adults. Persons under 18 years of age should not transmit any personal data without the consent of their parents or guardians.
At any time, you have the possibility to check personal data provided to us, to modify it or delete it, by sending an E-Mail to datenschutz@lampert.info.
You also have the right, to revoke consent issued with effect for the future at any time.
The stored personal data will be deleted if you revoke your consent to the storage. The controller processes and stores personal data of the person concerned only for the period of time that is required to achieve the purpose of the storage, or if prescribed by the European Regulation legislator or another legislator in laws or regulations to which the controller is subject.
If the storage purpose becomes obsolete or retention period prescribed by the European regulation legislator or another competent legislator elapses, the personal data is routinely blocked or deleted according to the legislation.
Each person has the right granted by the European legislature to request from the controller a confirmation of whether personal data is processed. If a person would like to make use of this right of confirmation, he can at any time contact our data protection officer or another employee of the controller.
Each person affected by the processing of personal data has the right granted by the European legislature to receive information free of charge at any time from the controller about your stored personal data and to receive a copy of this information.
Furthermore, the affected person has a right to information as to whether or not personal data was transferred to a third country or an international organization. If this is the case, the person concerned in the rest has the right to information about the appropriate guarantees in relation to the transmission. If a person would like to make use of this right of information, he can at any time contact our data protection officer or another employee of the controller.
Each person affected by the processing of personal data has the right granted by the European legislature to request the immediate correction of incorrect personal data relating to him/her. In addition, the person concerned shall have the right to request, taking account of the purposes of the processing, the completion of incomplete personal data by means of a supplementary declaration.
If a person would like to make use of this right of correction, he can at any time contact our data protection officer or another employee of the controller.
The personal data has been collected and processed in any other manner for such purposes for which it is no longer necessary.
The affected person revokes his consent to the processing according to art. 6 para. 1 lit. a GDPR or art. 9 para. 2 lit. a GDPR, and there is a lack of any legal basis for the processing.
The person concerned shall, in accordance with art. 21, para. 1 of the GDPR, object to the processing and there are no higher-priority legitimate reasons for the processing, or the affected person submits according to art. 21 para. 2 GDPR an objection to the processing.
The deletion of personal data is required to fulfil a legal obligation, in accordance with Union law or the law of the Member States to which the controller is subject.
The personal data is recorded in relation to the services offered by the information companies according to art. 8, para. 1 GDPR.
If one of the above-mentioned reasons applies and an affected person requests the erasure of personal data stored by us, you can contact our data protection officer or another employee of the controller at any time. Our data protection officer or another staff member will arrange for the deletion request without delay.
If the personal data was made public by us and our company is obligated as the person responsible according to art. 17 para. 1 GDPR to delete personal data, we are obligated, taking into account the available technology and the cost of implementation of appropriate measures, including technical, to inform other bodies responsible for data processing personal data, which process the published persona data, that the affected person has requested the deletion of all links to this personal data from other persons responsible for the data processing as well as copies or replicas of this personal data, to the extent that the processing is not required. Our data protection officer or another employee will arrange on a case-by-case whatever needs to be done.
The accuracy of the personal data is denied by the person concerned for a period that allows IT managers to verify the accuracy of the personal data.
The processing is unlawful, the affected person rejects the deletion of personal data and requires instead the restriction of the use of personal data.
The person concerned has objected to the processing according to art. 21, para. 1 of the GDPR and it is still not clear whether the legitimate interests of the person responsible for the processing outweigh those of the persons concerned.
If one of the above conditions exist and an affected person requests the restriction of personal data stored by us, he or she can contact our data protection officer or another employee of the controller at any time. Our data protection officer or another employee will arrange the restriction of the processing.
Each person affected by the processing of personal data has the right granted by the European legislature to receive the personal data concerning them, which was provided by the affected person to a person responsible for processing in a structured, common and machine-readable format (right to data portability). In addition, he has the right to send this data to any other responsible without interference from the officers to whom the personal data was provided, provided that the processing on the consent pursuant to art. 6 para. 1 lit. a GDPR or art. 9 para. 2 lit. a GDPR or is based on a contract according to art. 6 para. 1 lit. b GDPR and the processing is carried out with the help of automated procedures, provided that the processing is not necessary for the performance of a task in the public interest or in the exercise of public authority, which has been transferred to the person in charge.
In addition, the person concerned in the exercise of their right to data portability according to art. 20 para. 1 GDPR has the right to ensure that the personal data is transferred directly from a responsible to another, in so far as this is technically feasible and if this does not affect the rights and freedoms of others.
For the assertion of the right to data portability, the affected person can contact our data protection officer at any time or another member of staff.
Each person affected by the processing of personal data has the right granted by the European legislature, for reasons resulting from their specific situation, at any time to object to the processing of personal data relating to him/her, because of art. 6 para. 1 lit. e or f GDPR. This also applies for profiling based on these provisions.
We no longer process the personal data in the event of a conflict, unless we can evidence compelling reasons worthy of protection that outweigh the interests, rights and freedoms of the person concerned, or the processing serves to assert, exercise or defend legal claims.
If we process personal data in order to advertise directly, the person concerned has the right at any time to object to the processing of personal data for the purposes of such advertising. This also applies to the Profiling, in so far as it is in conjunction with such direct advertising. The affected person contradicts us vis-à-vis the processing for purposes of direct marketing, we will no longer process personal data for these purposes.
In addition, the person concerned has the right for reasons related to their specific situation, to object to the processing of his personal data that takes place for scientific or historical research purposes or for statistical purposes in accordance with art. 89 para. 1 of the GDPR, except where such processing is necessary for the performance of a task in the public interest.
is made with the express consent of the person concerned.
we take reasonable measures to ensure the rights and freedoms as well as the legitimate interests of the persons concerned, including the right to obtain the intervention of a person on the part of the responsible, upon presentation of one's own position and to challenge the decision.
If the affected person wants to assert rights with regard to automated decisions, he can at any time contact our data protection officer or another employee of the controller.
Each person affected by the processing of personal data has the right granted by the European legislature to revoke his consent to the processing of personal data at any time.
If the affected person wants to assert his right to revoke a consent, he can contact our data protection officer at any time or another staff member of the controller.
art. 6 para. 1 lit. a GDPR serves our company as a legal basis for processing operations, in which we obtain consent for a specific processing purpose.
If processing of personal data for the fulfilment of a contract to which the contractual party is the affected person is required, like for instance in the case of processing operations required for delivery of goods or the provision of any other service or performance, it is based on the processing art. 6 para. 1 lit. b GDPR. The same applies for such processing operations that are necessary for the implementation of pre-contractual measures, such as in cases of inquiries about our products or services.
If our company is subject to a legal obligation, through which a processing of personal data is required, such as fulfilment of tax obligations, the processing is based on art. 6 para. 1 lit. c GDPR. In rare cases, the processing of personal data is required in order to protect the vital interests of the data affected person or another natural person. This would be the case, for example, if a visitor in our company would be hurt and then his name, his age, his health insurance information, or other vital information would have to be passed onto a doctor, hospital or other third parties. Then the processing would rest on art. 6 para. 1 lit d GDPR.
Ultimately, processing operations could rest on art. 6, para. 1, lit. f GDPR. Processing operations are based on this legal basis, that are not recorded by any of the above-mentioned legal bases, if the processing is required to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the person concerned do not predominate. Such processing operations are therefore permitted in particular because they have been specifically mentioned by the European legislators. In so far as he took the view that a legitimate interest could be assumed, if the affected person is a customer of the person responsible (recital 47 sentence 2 GDPR). We base the processing of your personal data in accordance with the use of Google Analytics, Google Web fonts and Google Maps on a legitimate interest. Our legitimate interest within the meaning of the art. 6 para. 1 lit. f GDPR is to provide you with the most customer-friendly use of our site and to be able to inform you about our products according to your needs. This is an important part of our business for the benefit of our employees and shareholders.

References: art. 6
 art. 6
 art. 6
 art. 9
 art. 21
 art. 21
 art. 8
 art. 17
 art. 21
 art. 6
 art. 9
 art. 6
 art. 20
 art. 6
 art. 89

art. 6
 art. 6
 art. 6
 art. 6
 art. 6
 art. 6