Privacy

Privacy Policy

Introduction

Thank you for your interest in our website. The protection of your personal data is important to us. Below you will find information about how we handle your data that is collected through your use of our website. Your data will be processed in accordance with the legal data protection regulations.

Controller within the meaning of data protection law

H. Lorberg Baumschulerzeugnisse GmbH & Co KG

Zachower Strasse 4

14669 Ketzin OT Tremmen

lorberg@delete-me.lorberg.com

033233840

Data Protection Officer

Proliance GmbH / www.datenschutzexperte.de

Datenschutzbeauftragter

Leopoldstr. 21

80802 Munich

datenschutzbeauftragter@delete-me.datenschutzexperte.de

 

Definitions

Our privacy policy should be simple and understandable for everyone. For this reason, our privacy policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 GDPR.

Server- Logfiles

Once you visit our website, it is technically necessary that data is transmitted to our web server via your internet browser. The following data is recorded during an active connection for communication between your internet browser and our web server

    • Date and time of the request
    • Name of the requested file
    • Page from which the file was requested
    • Access status
    • Web browser used and operating system used
    • (Full) IP address of the requesting computer
    • Transmitted amount of data

We collect the listed data in order to guarantee a frictionless connection establishment and to enable a comfortable use of our website by the users. The log file also serves for evaluating system security and stability as well as administrative purposes. The legal basis for the temporary storage of data or log files is Art. 6 para. 1 lit. f GDPR.

For reasons of technical security, in particular to prevent attempts to attack our web server, we may temporarily store this data. It is not possible for us to draw conclusions about individual persons on the basis of this data. After 28 days at the latest, the data is made anonymous by shortening the IP address at domain level, so that it is no longer possible to establish a reference to the individual user. This data is not evaluated in anonymous form except for statistical purposes. This data is not combined with data from other data sources.

Cookies

Our website uses cookies which are stored on your device by the browser and contain certain settings for the use of the website (e.g. the current session). Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted after the browser is closed. Other cookies remain stored on your terminal device until you delete them, or the storage period expires.

These cookies enable us to recognize your browser on your next visit. In some cases, cookies are used to simplify website processes by saving settings (e.g. settings that have already been made during previous visits). If personal data are also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either to fulfil the contract, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

In order to accept or refuse all or certain cookies, you can set up your browser to inform you when cookies are set. You can also activate the automatic deletion of cookies when closing the browser. The cookie settings for the respective browsers can be customised under the following links:

Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: http://help.opera.com/Windows/10.20/de/cookies.html

You can also individually manage the cookies of many companies and functions that are used for advertising purposes. Details about the user tools are available at www.aboutads.infochoices/ or http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a "do-not-track- feature" This feature allows you to indicate that you do not want to be "tracked" by websites. When the function is activated, the browser will tell ad networks, websites and applications that you do not want to be tracked for the purpose of behaviour-based advertising and such like. For information and instructions on how to use this feature, see the links below:

Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/

Internet Explorer: support.microsoft.com/en-gb/help/17288/windows-internet-explorer-11-use-do-not-track

Google Chrome: support.google.com/chrome/answer/2790761

Safari: https://support.apple.com/de-de/guide/safari/sfri40732/mac

Opera: http://help.opera.com/Windows/12.10/de/notrack.html

In addition, you can prevent the loading of scripts by default. NoScript allows you to run JavaScripts, Java and other plug-ins only on trusted domains of your choice. Information and instructions on how to use this function can be obtained from your browser's provider (e.g. for Mozilla Firefox at: addons.mozilla.org/en-GB/firefox/addon/noscript/). Please note that deactivating cookies may limit the functionality of this website.

 

Contact form and contact by email

If you send us requests via contact form or email, your details from the enquiry form or email, including the contact data you have provided there, will be stored for the purpose of processing the request and in the event of follow-up questions. You are required to provide an email address and your name to contact us. Your telephone number and address is optional. Under no circumstances will we pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR, provided that your request is aimed at concluding a contract. Your data will be deleted after final processing of your request, provided that there are no legal storage obligations to the contrary. You can object to the processing of your personal data at any time in the case of Art. 6 para. 1 lit. f GDPR.

 

Shop

To access our online shop, we offer the option to register for the creation of a customer account by entering personal data. The data will be entered into an input mask, transmitted to us and stored. The data will not be passed on to third parties. Within the scope of the registration for a customer account we store your data necessary for the conclusion and fulfilment of the contract:

- First name

- Last name

- Address

- E-mail address

- Phone number

- Fax number

- Mobile number

A registration of the user is necessary to fulfil the contract or to carry out pre-contractual measures or to provide the desired services. The legal basis for the processing of data is Art. 6 para. 1 lit. b GDPR. The data will be deleted when it is no longer required for the execution of the contract. Even after conclusion of the contract, it may be necessary to store personal data of our contractual partners in order to fulfil contractual or legal obligations. As a user you have the possibility to cancel the registration at any time. Premature deletion of data is only possible if there are no contractual or legal obligations to the contrary.

 

Job Application

If you apply for a job at our company via contact form or by email, we collect personal data. This includes, in particular, your contact details (such as first and last name, telephone number and email address of the user) as well as other data provided by you regarding your background (e.g. CV, qualifications, degrees and work experience) and your person (e.g. cover letter, personal interests). This may also include special categories of personal data (e.g. information on a severe disability). Your personal data ordinarily is collected directly from you during the application process and is encrypted during electronic transmission. The primary legal basis for this is Art. 6 para. 1 b GDPR in conjunction with § 26 para. 1 BDSG. In addition, consent in accordance with Art. 6 Para. 1 lit. a, 7 GDPR in conjunction with § 26 Para. 2 BDSG can be used as a data protection permission regulation. If the processing of your data is based on consent, you have the right to revoke your consent at any time with effect for the future.

Within our company, only those persons and positions (e.g. human resources) have access to your personal data which absolutely need to carry out the application procedure or to fulfil our legal obligations. Your applications will be forwarded to the responsible person for examination. Under no circumstances will your personal data be passed on to third parties without authorisation.

Your data for an application for a specific job advertisement will be stored and processed by us during the ongoing application process. Once the application process has been completed (e.g. in the form of an acceptance or rejection), the application process including all personal data will be deleted from the system no later than six months after the application process has been completed. The data of selected applicants will be stored securely for up to 2 years, provided that the applicants have given their consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. For this purpose, an informal e-mail to the contact details of the person responsible listed above is sufficient. In the case of consent, we reserve the right to keep your application for a longer period of time, provided that the date of entry is more than six months in the future.

 

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our website. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

The purpose of reCAPTCHA is to check whether the data input on our website (e.g. in a contact form) is made by a human being or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis reCAPTCHA evaluates different information, e.g.

- IP address

- Duration of the website visitor's stay on the website

- Mouse movements made by the user

- The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place. The data processing is based on Art. 6 para. 1 lit. f GDPR.

We have a legitimate interest in protecting our website from improper automated spying and from unwanted automated transmissions (spam).

Google LLC, with its registered office in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the level of data protection applicable in the EU.

We do not store any personal data from the use of reCAPTCHA. In general, personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage no longer applies.

Further information about Google reCAPTCHA and Google's privacy policy can be found at the following links:

https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/v3beta.html

 

Google Analytics

Our website uses Google Analytics, an internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. "("Google"). Google Analytics uses so-called "cookies" and web beacons. The information generated in relation to the use of this website is transferred by default to a Google server in the USA and stored there. We use Google Analytics only with IP anonymization enabled.

This means that Google will reduce the IP address of users within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area, which may exclude any personal relationship. Google Inc., based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.

Processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your given consent.

On behalf of the operator of this website, Google will use this information to analyse your use of the website and to generate reports on website activity. Google also uses this information to provide other services related to the use of the website and the internet to the website operator. The IP address sent by your browser as part of Google Analytics is not combined with other Google data. The terms of use of Google Analytics and information on data protection can be accessed via the following links:

http://www.google.com/analytics/terms/de.html

https://www.google.de/intl/de/policies/ 

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. User and event-level data associated with cookies, user IDs (e.g., User ID) and advertising IDs (e.g., DoubleClick cookies, Android Advertising ID, IDFA) will be deleted no later than 26 months after collection.


You can prevent cookies from being saved by adjusting the settings of your browser software accordingly. However, we must point out that in this case you will not be able to use all functions of this website without restrictions. You can also prevent Google from collecting the data generated by the cookie and analysing your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at http://tools.google.com/dlpage/gaoptout?hl=en.

 

Google Maps

Our homepage uses the online map service provider Google Maps via an interface. Provider of the map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To use the functionalities of Google Maps it is necessary to save your IP address. This information is transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. If you have given your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, the processing on this website is for the purpose of using the functionalities of Google Maps.
Google is certified under the Privacy-Shield-Agreement and thus offers a guarantee to comply with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Further information on the handling of user data can be found in Google's privacy policy:


https://www.google.de/intl/de/policies/privacy/


Opt-out: https://www.google.com/settings/ads/

Privacy policy for the use of eXTReMe Tracking

Our website uses the analysis service eXTReMe Tracking. The provider is eXTReMe Digital, Herengracht 155, 1015 BH Amsterdam, Netherlands.

The following data can be collected and transmitted to eXTReMe Tracking:

- IP address

- Entered search terms

- Frequency of page views

- Country of origin of the page view

If you have given us your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, user profiles can be created from this data under a pseudonym. Cookies can be used for this purpose. The data collected with the eXTReMe tracking technologies will not be used to personally identify visitors to our website without the separately granted consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym.

Further information on the analysis service can be found here: extremetracking.com

YouTube (Advanced privacy mode)


We embed YouTube content on our website. YouTube is a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“YouTube”).

We use the enhanced privacy mode, which, according to the provider, does not initiate the storage of user information until the video is played. If the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behavior. According to "YouTube", the purpose of these cookies is to collect video statistics, improve the user experience and prevent abusive behaviour. If you are logged in to Google, your information is associated directly with your account when you click on a video.

If you are logged in to Google, your information is associated directly with your account when you click on a video. If you do not want your profile to be associated with YouTube, you must log out before activating the button. Google stores this data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its websites. Such an evaluation is carried out in particular (also for users who are not logged in) for the purpose of presenting need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly.

Third party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.
For more information about Google's privacy practices and data usage, please visit the following Google website: https://policies.google.com/privacy?hl=de&gl=de

 

Social Media

Below you will find information on how we process data that is collected through your use of our social media appearances on social networks and platforms. Your data will be processed in accordance with the legal regulations.

    1. Providers
        1.1. Facebook fan page
            1.1.1. Controller

In case you provide us with data, which is also or exclusively processed by Facebook, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is the controller for data processing, in accordance with the GDPR, in addition to or instead of us. For this purpose, we have concluded an agreement with Facebook pursuant to Art. 26 GDPR on joint controllership for data processing (Controller Addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook fan page. See the following link to consult this agreement:

https://www.facebook.com/legal/terms/page_controller_addendum

If you, as a visitor to the site, wish to exercise your rights (access, rectification, erasure, restriction, data portability, complaint with a supervisory authority, objection or withdrawal), you can contact both, Facebook and us. 

For further details, please see Facebook’s privacy policy: https://www.facebook.com/about/privacy/

          1.1.2. Facebook’s data protection officer

You can use Facebook’s online form to contact Facebook’s data protection officer. To access it, please use of the following link: https://www.facebook.com/help/contact/540977946302970.

            1.1.3. Data processing for statistical purposes using Page Insights

Facebook provides Page Insights Data for our Facebook fan page: https://www.facebook.com/business/a/page/page-insights. This aggregated data gives us an insight into how people interact with our page. Page Insights data may be based on personal data gathered from visits and interactions on, or with our page, and from connections with provided content. Please consider which personal data you share with us via Facebook. Your data may be processed for market research and promotional purposes, even if you are not logged into Facebook or do not have a Facebook account. User profiles can be created on the basis of user behaviour and the resulting interests of users. User profiles may be used for targeted advertisements within or outside the platform. Data recording is done using cookies, which are stored on your terminal device. In addition, user profiles may contain data, that is gathered from memberships on other platforms. Legal basis of the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the optimised presentation of our proposition, the effective information and communication with customers and interested parties as well as in the targeted placement of advertisements. Please note that we have no influence on the data gathering and further processing by Facebook. As a result, we cannot provide any access about where, for how long and to which extent Facebook retains the data. Furthermore, we cannot make any statements about the extent to which Facebook complies with existing erasure deadlines, what evaluations and translations are made and to whom the data is transferred by Facebook. If you want to prevent your personal data being processed by Facebook, please contact us by other means.

        1.2. Other social media providers
            1.2.1. Controller

If your personal data is processed by one of the providers listed below, this provider is responsible for data processing within the meaning of the GDPR. For the assertion of your rights, please contact the respective provider. Only they have access to the data collected from you. However, if you need any assistance, please contact us any time.


We are present on social media platforms of the following providers:

    • Instagram Inc., Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

   • YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

            1.2.2. Data protection officer

Information on how to contact the data protection officer of the respective social media providers can be found here:

    • Instagram Inc.: https://www.facebook.com/help/contact/540977946302970

To contact the YouTube data protection officer, please approach Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

    2. General information on social media platforms

        2.1. Controller

Responsible for data processing within the meaning of the GDPR is the office named at the beginning of this privacy policy, insofar as data transmitted by you via one of the social media platforms is processed by us.

        2.2. Our data protection officer

If you have any concerns regarding data processing that is carried out by us as the responsible party, you can reach our data protection officer via the contact details given at the beginning of this privacy policy.

    3. General data processing on social media platforms

        3.1. Data processing for market research and advertising

Organisations generally process data for market research and promotional purposes. Therefore, website providers use cookies, which load on to your browser and detect your return to the same URL.  The recorded data is used to create user profiles. User profiles may be used for targeted advertisements within or outside the platform. In addition, user profiles may contain data, that is gathered from memberships on other platforms.

        3.2. Data processing through making contact

We collect data when you contact us, for example via contact form or messenger services such as Facebook Messenger. The data collected depends on the details you provide and the contact details you specify. It will be stored for the purpose of processing the inquiry and in the event of follow-up questions. Under no circumstances we will pass on the data to third parties without your consent. The legal basis for the data processing is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your request aimed at the conclusion of a contract. Unless there are compelling reasons, your data will be erased after final processing. We assume the processing is finalized, when the regarding circumstances are clarified.

        3.3. Data processing for the purpose of contract handling

If your request via social media or other platforms is aimed at the conclusion of a contract, regarding the delivery of goods or the provision of services, we process your data in order to perform the contract and the requested services, or pre-contractual measures. In this case, the legal basis for the processing of your data is Art. 6 para. 1 lit. b GDPR. Your data will be erased if they are no longer necessary for the fulfilment of the contract or if it is certain, that pre-contractual measures will not lead to the conclusion of a contract corresponding to the purpose of establishing the contact. Please take into account, that it may be necessary to store personal data of our contractual partners in order to comply with contractual or legal obligations even after the conclusion of contract.

        3.4. Data processing by virtue of consent

If the respective platform providers request you to consent to the processing for a particular purpose, the legal basis for the processing is Art. 6 para. 1 lit. a, Art. 7 GDPR. You have the right to withdraw such consent with effect for the future at any time.

    4. Data transfer and recipient

Please note, that by using social media platforms, data processing may take place outside the EU and the European Economic Area, wherefore European levels of data protection cannot be guaranteed. The US based social media providers mentioned above are certified by “Privacy Shield “. “Privacy Shield” is an US-European-data protection convention, warranting the compliance with EU data protection levels. We have no influence on the processing and handling of your personal data by the respective providers as well as we have no information on this matter. Please consider the privacy policy of the providers for further information:

    • Instagram privacy policy:/Opt-out: instagram.com/about/legal/privacy/
    • YouTube/Google privacy policy: https://policies.google.com/privacy?hl=de&gl=de, Opt-out: https://adssettings.google.com/authenticated , Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

External links

On our website Social Media is solely embedded as a link to the respective service. After clicking on the embedded text/image-link you will be directed to the website of the respective provider. User information will be only transferred after the redirection to the respective provider. Information regarding the use of your personal data through the use of the website can be found in the privacy policies of the visited websites.

Data Transfer and Recipients

Your personal data is not transferred to third parties, unless

    • we have explicitly pointed this out in the description of the respective data processing.

    • you have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,

    • the transfer pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and our legitimate interests are not overridden by your fundamental rights and freedoms.

    • there is a legal obligation to transfer data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and

    • required by Art. 6 para. 1 sentence 1 lit. b GDPR for the execution of contractual relationships with you.

In addition, we use external service providers for the processing of our services, whom we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. Required data processing agreements pursuant to Art. 28 GDPR are concluded before the commission. In particular, these contracts concern web hosting services, the dispatch of emails and IT updates and maintenance. Your personal data will not be transferred to third parties by our service providers.

Storage period

The period for which the personal data will be stored is determined by the relevant statutory storage periods (e.g. from commercial law and tax law). The corresponding data is deleted routinely upon expiry of the respective period. If data is required for the fulfilment of a contract or contract initiation, or if we have a legitimate interest in further storage, the data will be deleted if they are no longer required for these purposes or if you make use of your right of withdrawal or objection.

Your Rights

In the following, you will find information about your data subject rights, which the current data protection law grants you against the controller concerning the processing of personal data:

The right, pursuant to Art. 15GDPR, to obtain information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to request from the controller rectification or erasure or personal data or restriction of processing of personal data concerning you or to object such processing, the existence of a right to lodge a complaint with a supervisory authority, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved, as well as the significance and the envisaged consequences.

The right to obtain without undue delay the rectification of inaccurate personal data concerning you. in accordance with Art. 16 GDPR.

The right to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right of freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

The right, pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful, but you oppose the erasure and we no longer need the data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims or you have filed an objection against the processing pursuant to Art. 21 GDPR.

The right, in accordance with Art. 20 GDPR, to receive the personal data concerning you, which you have provided to us in in a commonly used and machine-readable format and the right to transmit those data to another controller.

The right to withdraw your given consent pursuant to Art. 7 para. 3 GDPR with effect in the future at any time.

The right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR, in particular in the Member State of your habitual residence, place of work.

The right to withdraw your given consent pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw your given consent concerning the processing of your personal data with effect for the future at any time. In the event of withdrawal, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal

Right to object

If your personal data is processed by us based on legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object at any time to the processing of your personal data on grounds relating to your particular situation. If the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement of stating a particular situation.

If you wish to exercise your right of withdrawal, objection or any of your other rights, simply send an e-mail to: lorberg@delete-me.lorberg.com

Subject to change

We reserve the right to adapt or update this privacy policy, if necessary, in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take account of changes to our services, e.g. the introduction of new services. The most current version applies to your visit.

Status of this privacy policy: 15.05.2020