Privacy

Data Protection Information

This privacy statement relates to the processing of your personal data within the LEMKEN group of companies. The Group includes all companies trading under the LEMKEN name:

LEMKEN GmbH & Co. KG
LEMKEN France sarl
LEMKEN UK Ltd.
LEMKEN USA Inc.
LEMKEN CANADA INC
LEMKEN HUNGÁRIA KFT.
LEMKEN Polska Sp.z o.o.
LEMKEN CZECH, S.R.O.
LEMKEN Australia & New Zealand PTY LTD
LEMKEN South Africa pty. Ltd.
LEMKEN-RUS

For easier reading of this privacy statement, these companies are collectively referred to as “LEMKEN” in the following.

Data controller and contact in case of questions

LEMKEN GmbH & Co. KG
Weseler Strasse 546519 Alpen
Telephone +49 2802 81-0
Facsimile +49 2802 81-220
Email: info@lemken.com
Internet: https://www.lemken.com

Contact details of the data protection officer
datenschutz@lemken.com

Types of personal data processed by us:

We process the following categories of personal data, depending on the respective customer relationship:

Contact data (e.g. name, address, email address, telephone number)
Contract data within the framework of the customer relationship (customer number, sales, products)
Payment and settlement data (e.g. bank account details)

Purposes and legal grounds of data processing

The personal data relating to you is processed for the following purposes and on the basis of the following legislation:

Performance of the customer relationship (Art. 6(1)(b) GDPR)
Performance of the (sales) contract and pre-contractual measures (Art. 6(1)(b) GDPR)
Data processing based on your consent (Art. 6(1)(a) GDPR)
Data processing for the purposes of legitimate interests (Art. 6(1)(f) GDPR)

Processing for the purposes of LEMKEN’s legitimate interests comprises the use and analysis of your personal data for the following:

Product information, product improvements and services
Measures for improving and developing products and services to enable us to provide you with customised product and service offerings
Market and opinion research
Transparency and quality of our products, services and communications

LEMKEN additionally processes personal data in order to comply with legal obligations (e.g. under commercial or fiscal law) in accordance with Art. 6(1)(c) GDPR.

Source of your personal data

LEMKEN collects your personal data directly from you, e.g. through the contact form, via the online store or when you register for a newsletter.

Disclosure of personal data to third parties (recipients)

Your personal data may be disclosed or transferred for the purposes set out above. Recipients of personal data may include the following:

Marketing agencies
Market research institutes
Service and cooperation partners
Authorised sales partners
Printing and dispatch service providers

Any transfer of data generally takes place as part of a data processing request. Our service providers are contractually obliged to process data securely, confidentially and correctly in this regard.

Personal data is primarily processed within the territory of the European Union (EU) to the extent that LEMKEN operates within these countries. Data is only transferred outside the EU (to third countries) or to international organisations if the special requirements set out in Art. 44ff. GDPR are met.

Data retention periods

Personal data is stored for the above-mentioned purposes for the period of time required for meeting these purposes, if there are no further statutory retention requirements (under the Commercial Code or Fiscal Code) or legal reasons for storing the data. As a result, LEMKEN deletes your personal data at the end of the statutory retention period at the latest, which is generally 10 years after the end of the contract period.

Your rights regarding the processing of your personal data

In your relationship with us, you have the following rights in particular regarding your personal data:

Right of access to your personal data stored by us (Art. 15 GDPR);
Right to rectification if your stored personal data contains errors or is obsolete or inaccurate (Art. 16 GDPR);
Right to erasure, if the data storage is not permitted, if the purpose for which the data was processed has been met and data storage is consequently no longer necessary, or if you have withdrawn your consent to the processing of certain personal data (Art. 17 GDPR);
Right to restriction of processing if one of the circumstances provided for in Art. 18(1)(a) to (d) GDPR applies (Art. 18 GDPR);
Right to portability of the personal data provided by you and concerning you (Art. 20 GDPR);
Right to withdraw consent granted, although the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal (Art. 7(3) GDPR) and
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR). Our competent supervisory authority is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen [State Data Protection and Freedom of Information Commissioner of North Rhine-Westphalia], PO Box 20 04 44, 40102 Düsseldorf, Tel. 0211 384 24-0, Fax 0211 38424-10, email poststelle@ldi.nrw.de (www.ldi.nrw.de).

Right to object

You may object to the processing of your personal data for direct marketing and/or market research purposes at any time without stating reasons.

Once we have received an objection, we will no longer process your personal data for direct marketing and/or market research purposes and will delete the data if processing is not required for other purposes (e.g. in order to perform the contract).

You may also object to other forms of processing for the purposes of our legitimate interests within the meaning of Art. 6(1)(f) GDPR for reasons resulting from your particular situation at any time by stating these reasons. Following receipt of a reasoned objection, we will, as a matter of principle, no longer process the personal data for the relevant purposes and delete the data, unless we are able to produce compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves to establish, exercise or defend legal claims.

Please submit any objections to the above-mentioned address.

Data protection information for other uses

The above information also applies to the special uses described below, unless otherwise agreed.

Provision of the website and creation of log files

Every time our website is accessed, our system automatically collects data and information from the accessing computer system.

The following data is collected in the process:

Information about the browser type and version used
User’s operating system
User’s internet service provider
User’s IP address
Date and time of access
Websites from which the user’s system reaches our website
Websites accessed by the user’s system from our website

This data is also stored in log files within our system. This data is not stored together with any other of the user’s personal data.

The legal basis for the temporary storage of this data and the system log files is Art. 6(1)(f) GDPR.

The data is stored in system log files in order to ensure the functionality of our website. The data additionally serves to optimise our website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.

The data is deleted as soon as it is no longer needed for the purposes for which it was collected. Where data is stored in system log files, it is deleted after seven days at the latest. Data may be stored for longer periods, though. In this case, users’ IP addresses are deleted or altered such that they can no longer be attributed to the calling client.

Job applications

You may use this website to apply online in response to our job ads. As part of the application process, we process not only your contact data, but also your CV and qualifications data and photos. This data is processed by People XS or Talentsoft Headquarters, 8 rue Heyrault, 92100, Boulogne-Billancourt, France. We have made a processing agreement with People XS and Talentsoft respectively for this purpose. Data is used exclusively for the application process and deleted after six months. Only core data is deleted after 24 months in order to enable comparisons with earlier applications.

The legal basis for the processing of application data is Art. 6(1)(a) GDPR, if the user has consented to their data being processed.

We collect and process users’ personal data for the purposes of managing the application process, which may be done electronically. This is the case, above all, if applicants submit relevant application documents electronically, e.g. via email or an online form on our website. If an employment contract is subsequently made with an applicant, their transmitted data is stored for the purposes of managing the employment in compliance with statutory regulations. If no employment contract is made between the data controller and the applicant, application documents are automatically deleted three months after the applicant has been notified of their rejection, unless the data may be retained based on the data controller’s legitimate interests. Such legitimate interests include a burden of proof in proceedings under the German General Anti-discrimination Act (AGG), for example.

Cookies

Cookies are small data files transmitted from a website onto your computer’s hard disc. We use cookies if you use our website to browse or shop, request or customise information or register for certain services. By accepting the cookies from our site, you do not grant us access to your personal information, but cookies allow us to identify your computer. On a general level, cookies can be differentiated into “session” and “permanent” cookies.

“Session” cookies are not retained on your computer once you leave our website or close your browser. The information collated from cookies enables us to analyse website use patterns and structures, which allows us to optimise our website by improving its contents or personalisation and simplifying its use.

“Permanent” cookies are stored on your computer. These are used to simplify shopping, personalisation and registration services. Cookies can, for example, store your purchase selections while you continue shopping. Also, they ensure that you only need to enter your password once on websites requiring registration. “Permanent” cookies can be manually removed by users.

Most browsers are set to accept cookies as default. However, you can change these settings to reject cookies as default, or to accept certain cookies selectively by modifying your browser settings accordingly. If you deactivate cookies, you may not be able to access certain features on our website, and some websites may not display properly.

Facebook

We use the “Custom Audiences” remarketing function of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), which allows user behaviour to be tracked if users are redirected to a supplier website after clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and can contribute to optimising future advertising measures. The collected data is anonymous for us as a matter of principle and therefore does not allow us to draw any conclusions regarding the user’s identity. However, the data is stored and processed by Facebook, which permits it to be linked to the relevant user profile and allows Facebook to use the data for its own advertising purposes in accordance with Facebook’s privacy guidelines (https://www.facebook.com/about/privacy/). A cookie may also be stored on your computer for this purpose. If you do not want Facebook to link the collected information directly to your Facebook user account, you can deactivate the “Custom Audiences” remarketing function here: https://www.facebook.com/settings/?tab=ads. You need to be logged on to Facebook to do so.

For current information on the General Data Protection Regulation (GDPR) please visit:
https://www.facebook.com/business/gdpr#Wichtige-Rechtsgrundlagen.

Google Analytics

We use Google Analytics, a web analytics service of Google LLC (“Google”). Google Analytics uses so-called cookies, i.e. text files that are stored on your computer to allow your use of the website to be analysed. Relevant information about your use of this website as generated by the cookie is generally transmitted to and stored on a Google server in the USA. However, if IP anonymisation is active on this website, your IP address is first truncated by Google within member states of the European Union and other states that are signatories to the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and truncated there in exceptional cases.

Google uses this information upon the website operator’s request to evaluate your use of the website, generate reports about website activities and provide additional services associated with the use of the website and the internet in general to the website operator. Our legitimate interests in processing the data also extend to these purposes. The legal basis for using Google Analytics is S. 15(3) German Telemedia Act and Art. 6(1)(f) GDPR.

Users’ personal data is deleted or anonymised after 14 months. Data whose retention period has expired is deleted automatically once per month.

The IP address transmitted by your browser as part of Google Analytics will not be aggregated with other Google data. You can block cookies from being stored by adjusting the relevant settings in your browser software. Note, however, that you may not be able to use all functionalities offered by this website fully if you change these settings. You can additionally prevent Google from collecting and processing data generated by the cookie regarding your use of the website (including your IP address) by downloading and installing the browser plug-in available from the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Opt-out cookies prevent the future capture of your data when you visit this website. If you wish to prevent any capture of data by Google Analytics on a range of devices, you need to complete the opt-out process on all systems you use. Click here to set the opt-out cookie: Deactivate Google Analytics.

For further information on the terms of use and privacy please visit www.google.com/analytics/terms/de.html and www.google.com/intl/de/analytics/privacyoverview.html. We have added the “anonymizeIp()” function to the Google Analytics code on this website in order to anonymise the capture of IP addresses.

Google AdWords Conversion Tracking

If you access our website via a Google ad, a Google AdWords cookie is set, which expires after a period of 30 days and allows us to generate conversion rate statistics. This means that we obtain information on how many users visit our website and then buy a product via our websites within 30 days. The cookie does not allow any conclusions to be drawn regarding you personally.

Information and objection:

If you do not wish to participate in the tracking process, you can deactivate conversion cookies by modifying your browser settings to block cookies from the relevant domain:

Google Adwords: googleadservices.com

For current information on the General Data Protection Regulation (GDPR) and on how Google specifically protects and processes your data, please visit https://privacy.google.com/businesses/ and https://privacy.google.com/businesses/adsservices/.

Google Maps

We use the Google Maps component on our website. Google Maps is a service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (“Google”).

Google sets a cookie every time this component is accessed in order to process user settings and data when the website on which the Google Maps component is integrated is displayed. This cookie is generally not deleted when the browser is closed, but expires after a set period, unless you delete it manually before.

If you do not agree to your data being processed in this manner, you can deactivate the Google Maps service to prevent data from being transmitted to Google in this manner. You need to deactivate the JavaScript function in your browser to do so. However, please note that you may only be able to use Google Maps to a limited extent or not at all as a result.

The use of Google Maps and the information collected via Google Maps is subject to the Google terms of use:

www.google.de/intl/de/policies/terms/regional.html

and the additional terms and conditions for Google Maps:

www.google.com/intl/de_de/help/terms_maps.html

If you are logged on to your personal account at the time you access the Google Maps page, Google may link the information collected as well as your IP address and other browser-related information and link it to your account.

If you wish to prevent this data about you and your online behaviour on our website from being transmitted to and stored by Google, you need to log out from the relevant providers before visiting our website.

Hotjar

This website uses Hotjar, i.e. analytics software of Hotjar Ltd. (“Hotjar”), (http://www.hotjar.com, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta, Europe). Hotjar allows user behaviour (clicks, mouse movements, scroll distances etc.) on our website to be measured and evaluated. The relevant information, which is generated by a tracking code and cookie as you visit our website, is transmitted to and stored on the Hotjar servers in Ireland. The tracking code collects device-dependent data.

The following information can be collected via your device and browser:

Your device’s IP address (which is collected and stored in anonymised form)
Your email address, including your first name and surname, if you have provided this information via our website
Your device’s screen size
Your device type and browser information
Your geographical location (country only)
Your preferred language for displaying our website
User interactions
Mouse events (movements, position and clicks)
Keyboard inputs

The following data is generated automatically by our servers whenever Hotjar is used:

Referring domain
Visited sites
Your geographical location (country only)
Your preferred language for displaying our website
Date and time of website access

Hotjar uses this information to evaluate your use of our website, to prepare usage reports and to provide additional services relating to the website use and internet evaluation. Hotjar also uses third-party services to deliver its services, including Google Analytics and Optimizely services. These third companies may store information transmitted by your browser as part of your visit to the website, such as cookies or IP requests. For more information about how Google Analytics and Optimizely store and use data, please read their respective privacy statements.

By continuing to use this website, you consent to the above-mentioned processing of relevant data by Hotjar and its third-party service providers subject to their privacy statements.

The cookies used by Hotjar have various expiry periods; some remain valid for 365 days, while others are deleted at the end of the current visit.

You can prevent data from being collected by Hotjar by clicking on the following link and following the instructions provided on this site: https://www.hotjar.com/legal/compliance/opt-out.

Instagram

We have integrated components of the Instagram service in our websites. The Instagram service constitutes an audiovisual platform. It allows users to share photos and videos and to disseminate such data to other social networks.

Instagram services are provided by Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.

Every time one of the individual pages of this website, which is operated by the controller responsible for processing the data and which features an Instagram component (Insta button), is called up, the relevant Instagram component automatically causes the web browser on the respective user’s information technology system to download a representation of the relevant Instagram component. As part of this technical process, Instagram becomes aware of the specific sub-page of our website visited by the respective person.

If this person is logged on to Instagram at the same time, Instagram recognises the specific sub-page visited by the person every time the person visits our website and throughout the entire period the person spends on our website. This information is collected by the Instagram component and linked to the respective person’s Instagram account by Instagram. If this person clicks on one of the Instagram buttons integrated in our website, the data and information transmitted as a result is linked to the person’s personal Instagram user account and stored and processed by Instagram.

The Instagram component always notifies Instagram that the respective person has visited our website if the person is logged on to Instagram at the time they access our website. This is the case regardless of whether the person clicks on the Instagram component or not. If the person does not wish to have this information transmitted to Instagram, they can prevent the transmission by logging out of their Instagram account before accessing our website.

For additional information and Instagram’s current privacy guidelines please visit help.instagram.com and www.instagram.com/about/legal/privacy/.

Contact form

Our website contains a contact form which you can use to contact us electronically. When using this form, the data entered via the input screen, the date and time of registration and your IP address are stored. You are requested to consent to the processing of your data. Alternatively, you can contact us via the email address provided, in which case the personal data you submit by email is stored.

The personal data collected via the input screen or the email is only processed for the purposes of responding to your contact and maintaining a conversation with you. This also constitutes our legitimate interests in processing the data. The other processed personal data serve to prevent any misuse of the contact form and to ensure the security of our information technology systems.

Social media

We maintain online presences on the social networks Facebook, YouTube, Twitter and Instagram. These online presences serve to communicate with the users active on these networks and to inform them about our products and services.

Your access to our social network profiles is subject to the terms and conditions and data processing guidelines of the respective network operators. Unless provided for otherwise in our privacy statement, we process the data of users who communicate with us on social networks and platforms, e.g. users who write contributions to our online presences or send us messages. The submission of personal data on these platforms is always voluntary. Users can delete the personal data relating to public communications or communications visible to us at any time.

WEB BEACONS

Some LEMKEN websites and email newsletters published in HTML format use web beacons combined with cookies to generate overall statistics on website use. Web beacons are invisible electronic images; they are sometimes also referred to as single-pixel GIFs or clear GIFs. Web beacons detect certain types of information on visitors’ computers, e.g. a visitor’s cookie number, the time and date a page is accessed, or a description of the page on which the web beacon is located. You can deactivate some web beacons by rejecting the cookies associated with them.

YouTube

We have integrated videos published on the YouTube platform of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy statement: https://www.google.com/policies/privacy/, Opt-out: https://adssettings.google.com/authenticated.

Please feel free to contact any of the above addresses if you have any questions regarding data protection and privacy.

Data protection information in accordance with Art. 13 GDPR, dated 12 December 2018.