Privacy policy

LEMKEN GmbH & Co. KG considers the protection of the data of all its customers and web site visitors as extremely important. In this data privacy statement we inform you how we deal with your personal data when you use all our web sites. This statement also applies to our online shops. In particular the data privacy statement explains to you to what extent, in what way and for what purpose we process your personal data. Due regard is taken of the applicable provisions of data protection law when we process your data.

We refer you to Article 4 GDPR with respect to the definitions used in the data privacy statement.

In order to facilitate the comprehensibility of this privacy policy the company is referred to as LEMKEN in the following.

DATA PROCESSING CONTROLLER AND CONTACT FOR ENQUIRIES

LEMKEN GmbH & Co. KG

Weseler Straße 546519 Alpen

Telephone +49 2802 81-0

Fax +49 2802 81-220

e-mail: info@lemken.com

CONTACT DETAILS FOR THE DATA PROTECTION OFFICER

datenschutz@lemken.com

PROVISION OF THE WEBSITE AND GENERATION OF LOG FILES

Every time our Internet site is accessed our system collects automated data and information from the computer system of the accessing computer.

The following data are collected:

information on the browser type and the version used
the user's operating system
the user's Internet service provider
the user's IP address
date and time of access
websites, from which the user's system has accessed our Internet site
websites, which are accessed by the user by means of our website.

These data are also stored in the log files in our system. These data are not stored together with other personal data of the user.

The legal base for the temporary storage of the data and the system log files is Article 6 (1) point (f) GDPR. The data are stored in system log files in order to ensure the correct operation of our website. In addition, we use the data to improve the website and to ensure the security of our computer systems. In this regard we do not analyse the data for marketing purposes.

The data are erased as soon as they are no longer required for the achievement of the purpose, for which they were collected. Where data are stored in system log files, they are erased after seven days at the latest, but they may be stored for a longer period. In this case the user's IP address is erased or alienated, so that it is not possible to allocate it to the accessing client.

PURPOSES AND LEGAL BASES FOR THE PROCESSING

The personal data pertaining to you are processed for the following purposes and on the basis of the following legal bases:

compliance with the customer relationship (Article 6 (1) point (b) GDPR)
performance of a (sales) contract and steps prior to entering into a contract (Article 6 (1) point (b) GDPR)
data processing on the basis of your consent (Article 6 (1) point (a) GDPR)
data processing for the purposes of our legitimate interests (Article 6 (1) point (f) GDPR)

Processing on the basis of the legitimate interests of LEMKEN encompasses the use and analysis of your personal data for:

product information, product improvement and the provision of services
measures for the improvement and development of services and products, in order to be able to offer you an individual response with suitable offers and products.
the purpose of conducting marketing and opinion research
the creation of transparency and quality for our products, services and communication channels.

In addition, LEMKEN processes your personal data to comply with our legal obligations (e.g. by virtue of provisions of commercial or tax law) on the basis of Article 6 (1) point (c) GDPR.

DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES (RECIPIENTS)

Your personal data are disclosed and/or transferred in accordance with the aforementioned purposes. Examples of possible recipients of personal data are:

marketing agencies
market research institutes
service and cooperation partners
authorised distributors
printers and shipping providers.

If data are transferred, this occurs as a rule as part of the order processing procedure. For this purpose our service providers are bound by contract to secure, confidential, correct data processing.

Personal data are processed predominantly within the territory of the European Union (EU) insofar as LEMKEN is active in these countries. Data are transferred outside the EU (to third countries) or to international organisations only if the special conditions in Article 44 et seq. GDPR are satisfied.

STORAGE PERIOD

We erase or block the data collected by us pursuant to Articles 17 and 18 GDPR.

Personal data are stored for the period required to fulfil the purpose and provided that no other statutory duties of retention (German Commercial Code, Tax Code) or statutory grounds for storage exist.

In this case the data are stored for other purposes.

As soon as the purpose of storage ceases to apply or a storage period prescribed by the aforesaid provisions expires, the personal data are blocked or erased as a matter of routine. This means that LEMKEN erases your personal data at the latest on the expiry of the legal duties of retention, which is usually 10 years from contract end.

YOUR RIGHTS WITH RESPECT TO PERSONAL DATA

In particular you have the following rights against us with respect to your personal data:

right to access to your stored personal data (Article 15 GDPR),
right to rectification if the data stored concerning you are incomplete, out of date or incorrect (Article 16 GDPR),
Right to erasure, if the storage is unlawful, the purpose, for which they were collected, is satisfied and storage is therefore no longer necessary or you have withdrawn your consent on which the processing of certain personal data is based (Article 17 GDPR),
right to restriction of processing, if one of the conditions cited in Article 18 (1) points (a) to (d) GDPR exists (Article 18 GDPR),
right to data portability of the personal data provided by you and concerning you (Article 20 GDPR),
right to lodge a complaint with a supervisory authority (Article 77 GDPR). The supervisory authority with competence for us is the

State Commissioner for Data Protection and Freedom of Information, North-Rhine Westphalia, PO Box 20 04 44, 40102 Düsseldorf, Tel. 0211 384 24-0, Fax: 0211 38424-10; e-mail: poststelle@ldi.nrw.de (www.ldi.nrw.de).

RIGHT OF WITHDRAWAL

You have a right to withdrawal of consent granted; the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal (Article 7 (3) GDPR).

Please send your withdrawal statement to the address provided at the start of this document.

RIGHT OF WITHDRAWAL

You may at any time withdraw your consent for the processing of your personal data for purposes of direct advertising and/or market research without giving reasons.

On receipt of the withdrawal statement we shall cease processing the personal data for the purposes of direct advertising and/or market research and shall erase the data unless processing is necessary for other purposes (for example to fulfil the contract).

You may also object to us concerning other processing procedures, which we base on our legit-imate interest within the meaning of Article 6 (1) point (f) GDPR, on grounds arising from your particular situation, in each case stating these reasons. If the withdrawal is justified we shall as a matter of principle cease to process the personal data for the purposes in question and shall erase the data unless we can prove compelling reasons for the processing, which override your interests or fundamental rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.

Please send your withdrawal statement to the address provided at the start of this document.

CONTACT FORM

A contact form is provided on our Internet site, which you may use to contact us by electronic means. In this process data entered in the input screen and the date and time of the registration, together with your IP address are stored. Your consent is obtained for the processing of the data. Alternatively, it is possible to contact us via the e-mail address provided. In this process we store personal data communicated in your e-mail.

The processing of the personal data from the input screen or the e-mail serves us only to process the contact procedure or conversation with you. The necessary legitimate interest in the processing of the data applies here also. The other processed data serve to prevent abuse of the contact form and to ensure the security of our computer system.

OTHER WAYS TO CONTACT US

You may also contact us and our members of staff in other ways, e.g. by e-mail.

In addition, you can book factory tours via our website. Registration for factory tours is through the registration form, which we provide on our website.

For suppliers, supplier self-assessments can also be submitted through our website.

Personal data are processed in order to transact these enquiries pursuant to Article 6 (1) point (b) GDPR.

The forms make it clear which data are collected when you use the communication channels and/or data are collected depending on your message. These data are stored and used solely for the purpose of responding to your request or to make contact with you and the associated technical administration.

Once your query has been finally processed, your data are erased insofar as you desire this and provided that there are no conflicting legal duties of retention.

REGISTRATION

We collect data to comply with our contractual obligations and services in accordance with Article 6 (1) points (a) and (b) GDPR.

As part of the registration process personal data, such as name, e-mail address and your postal address data, are collected. The user accounts are not public. The data collected therefrom are used solely for the necessary fulfilment and processing of the service offered. You data are collected and processed on the basis of your consent in accordance with Article 6 (1) point (a) GDPR.

Any customer account may be erased at any time by de-registering or sending us a message. In this case your data shall be erased from the user account. Your data are stored for a longer period only if this is necessary on legal grounds in accordance with Article 6 (1) point (c) GDPR.

NEWSLETTER

You can subscribe to the newsletter offered on our website.

If you would like to receive the newsletter, we require an e-mail from you and your name. These can be entered on the input screen on our website. By entering these data you are giving your consent to the receipt of the newsletter.

The registration is conducted by what is known as a double opt-in procedure. Once you have registered you shall receive an e-mail, in which you must confirm your registration. In this way we can check that you are the de facto owner of the address. In order to be able to provide evidence of your registration in accordance with the legal provisions, we record the order for the newsletter, the despatch of a confirmation e-mail and the receipt of the response thereby required. No other data are collected.

The newsletter contains information and advertising.

If you have given your consent to the receipt of the newsletter, it is despatched on the basis of Article 6 (1) point (a) and Article 7 GDPR. The data provided by you (name and e-mail address) are processed solely for the purpose of delivery of the newsletter.

APPLICATION PROCEDURES

On the LEMKEN home page you can apply online to our job vacancies. In the course of the application as well as your contact data we process the following data provided by you: your curriculum vitae, qualifications and photos. The data are used solely for the application process and are erased six months subsequent to the decision on appointment. The only data to be erased after 24 months are master data required for the purposes of alignment with earlier applications.

The legal basis for the data processing of job applicants' data is Article 6 (1) sentence 1 point (b) GDPR and Section 26 (1) German Federal Data Protection Act (new). The legal basis for the processing of application data when consent has been granted by the user is Article 6 (1) point (a) GDPR. The legal basis for the in-house transfer to implement the application process is Article 6 (1) point (b) GDPR.

We collect and process the personal data of applicants for the purpose of transacting the application process, which may also be conducted electronically. This is the case in particular if an applicant has transferred the relevant application documents to us through an electronic channel, for example by e-mail or on a web form located on the website. If we conclude an employment contract with the applicant, we store the data transferred for the purpose of processing the employment relationship in compliance with the statutory provisions. If the data controller does not conclude an employment contract with the applicant, the application documents are automatically erased three months after notification of the decision not to appoint, unless other legitimate interests for the data controller conflict. Another legitimate interest within the same meaning is for example the burden of proof in proceedings under the German General Act on Equal Treatment.

When you subscribe to our job vacancy notices we also collect personal data when you register, in particular your e-mail address. The appropriate registration form makes it clear which data are collected when you register. These data are stored and used solely for sending job offers and the associated technical administration.

Withdrawal of consent

You can cancel your subscription to the newsletter at any time through the link provided in the newsletter e-mail or by sending us an appropriate message and thereby withdrawing your consent. On your cancellation of receipt of the newsletter your e-mail address is immediately erased from our newsletter distribution list.

COOKIES

A cookie is a small data file, which is transferred from a website on to the hard disk of your computer. We use cookies when you surf on our site, buy something, request or personalise information or register for certain services. If you accept cookies on our site we have no access to your personal information, but with the help of cookies we can identify your computer.

Cookies are generally divided into two categories: session and permanent cookies.

Session cookies do not remain on your computer when you leave our website or close your browser. By means of the collated information we can analyse the patterns and structures of use of our website. This allows us to optimise our website by improving the content and making it easier to use.

Persistent cookies are cookies, which remain on your computer. They are used to simplify shopping, personalisation and registration services. For instance, cookies can record what articles you selected for purchase while you continue to shop. In addition you need enter your password only once on websites, which require registration. Permanent cookies can be manually removed by the user.

We use four categories of cookies within the framework of our Internet offer: cookies, which are essential for the functionality of the website (necessary cookies), cookies, which increase the comfort of a website visit by, for example, saving your language settings (preference cookies), Cookies, which collect anonymous data for statistics and analyses in order to improve our offer and our website for users (statistical cookies) and cookies, which create anonymous user profiles in order to be able to display personalised content to users according to their respective interests (marketing cookies).

Due to our legitimate interest (Article 6 (1) point (f) GDPR), we use the necessary cookies to ensure the entire functionality of our website and to enable user-friendly services. Cookies that are not necessary are only set if the user has given his consent (Article 6 (1) point (a) GDPR). Consent is given via the so-called cookie banner, which must be clicked actively. The settings can be changed at any time. You can also exclude general access to cookies by changing your browser settings accordingly.

GOOGLE ANALYTICS

We use Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). Google Analytics uses text files, known as cookies, which are stored on your computer and allow the use of the website to be analysed. The information generated by the cookie about your use of this website is normally transmitted to a Google server in the USA and stored there. Because we operate IP anonymisation on this website, your IP address is, however, abbreviated by Google within the Member States of the European Union or in other States which are contractual parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the USA and truncated there. The cookie is only set with your consent, which is obtained via the cookie banner on our website. The legal base is therefore Article 6 (1) point (a) GDPR.

Google uses this information on behalf of the operator of this website, in order to evaluate your use of the website, to compile reports on website activity and to perform other services connected to use of the website and of the Internet for the website operator.

The user's personal data are erased or anonymised after 14 months. Data, which have reached the end of their retention period, are automatically erased once per month.

The IP address transmitted by Google Analytics from your browser shall not be merged with other Google data.

Google has committed itself to the EU-US Privacy Shield, whereby it undertakes to comply with the European law on data protection. More detailed information on this can be found here: https://www.privacyshield.gov/EU-US-Framework.

You can find more detailed information on conditions of use and data protection on www.google.com/analytics/terms/gb.html or on www.google.com/intl/de/analytics/privacyoverview.html. On this website we have expanded the Google Analytics' code by the anonymizeIp() function, which anonymises the compilation of IP addresses.

GOOGLE ADWORDS CONVERSION TRACKING

We use the online advertising program, Google AdWords or henceforth Google Ads and as part of Google AdWords we use conversion tracking, a web service offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). The service is only used with your consent, which also represents the legal base (Article 6 (1) point (a) GDPR. Consent is given via the so-called cookie banner, which has to be clicked actively.

If you arrive at a Google advertisement on our website, statistics on our conversion rate can be generated by means of a cookie from Google AdWords, which expires at the end of 30 days. This means that we learn how many users visit our website and purchase a product within 30 days via our website. This process does not make possible any inference as to your identity.

Current information on the General Data Protection Regulation (GDPR), on how Google specifically protects and processes your data can be found on https://policies.google.com/privacy?hl=en and privacy.google.com/businesses/adsservices/.

GOOGLE TAG MANAGER

We use Google Tag Manager to administer website tags across an interface. Only tags are im-plemented by this service, so that no personal data are collected. Furthermore, Google Tag Manager does not install cookies.

More information on Google Tag Manager can be found here: https://marketingplatform.google.com/intl/en_uk/about/tag-manager/.

GOOGLE DOUBLECLICK

We use the Google DoubleClick (Google Marketing Platform) online advertising tool, a web service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). DoubleClick uses cookies, with which Google and its partner websites can switch advertisements based on users' visits to this website or other websites on the Internet. Cookies are only set if you have consented (Article 6 (1) point (a) GDPR). Consent is given via the so-called cookie banner, which has to be clicked actively.

More information on Google data protection provisions can be found here: https://policies.google.com/privacy?hl=en.

GA AUDIENCES

We use the web analysis service, GA Audiences from the service provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

GA Audiences collects and stores anonymous data, through which user profiles are generated by means of pseudonyms. The service installs cookies on the user's computer, which make it possible to analyse user behaviour on our website. This facilitates target-oriented advertising on other websites as well. Cookies are only set if you have consented (Article 6 (1) point (a) GDPR). Consent is given via the so-called cookie banner, which has to be clicked actively.

More information on Google data protection provisions can be found here: https://policies.google.com/privacy?hl=en.

HOTJAR

This website uses Hotjar, analysis software from Hotjar Ltd. (Hotjar) (www.hotjar.com, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta, Europe).

The legal base for this is your consent (Article 6 (1) point (a) GDPR). Cookies are only set if you have consented. Consent is given via the so-called cookie banner, which has to be clicked actively.

With Hotjar it is possible to measure and analyse utilisation behaviour (clicks, movements of the mouse, scrolling heights, etc.) on our website. The information thus generated by the tracking code and cookies when you visit our website is transferred to the Hotjar server in Ireland and stored there. The tracking code compiles device-dependent data.

The following information may be recorded by your device and your browser:

the IP address of your device (captured and saved in an anonymised format)
our e-mail address including your first name and surname, if you have provided these via our website
screen size of your device
type of device and browser information
geographical location (only the country)
the preferred language for the display of our website
user interactions
mouse events (movements, position and clicks)
keyboard inputs

The following data are automatically generated by our server whenever Hotjar is used:

relevant domain
sites visited
geographical location (only the country)
the preferred language for the display of our website
date and time of access to our website

Hotjar uses this information to analyse your use of our website, to generate reports and other services, which concern use of the website and Internet analysis of the website. To provide its services Hotjar also uses services from third-party companies, such as Google Analytics and Optimizely. These third-party companies may store information, which your browser transmits during your visit to our website, such as cookies or IP enquiries. For more detailed information on how Google Analytics and Optimizely store and use data, please consult their relevant data privacy statements.

If you continue to use this website, you are giving your consent to the processing specified above of the data there by Hotjar and their third-party service providers in the context of their data privacy statements.

The cookies used by Hotjar have variable durability; many remain in force up to 365 days, many remain valid only during the current visit.

FACEBOOK CUSTOM AUDIENCES

We use the Custom Audiences re-marketing function from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (Facebook).

The service allows us to retrace the behaviour of a user, who accesses our website by activating a Facebook advertisement. These data are used to analyse and optimise the efficacy of the Facebook advertisements and are collected anonymously. However Facebook is capable of making inferences from the user profile, so that Facebook could use these data for its own advertising purposes. Moreover Facebook may install a cookie on your computer. The legal base for this is your consent (Article 6 (1) point (a) GDPR). Cookies are only set if you have consented. Consent is given via the so-called cookie banner, which has to be clicked actively.

Further information on Facebook's data protection policy can be found here: http://www.facebook.com/policy.php

SOCIAL MEDIA AND PLUG-INS

On the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR we use the services of third parties to analyse and optimise our sites. We also provide links to various social media.

Our website offers so-called plugins for youtube and links for the social network Facebook, the microblogging services Twitter and Instagram as well as the services youtube and Xing. If you click on a link, no data will be processed by us; however, processing may be carried out by the website operator on whose page you are forwarded by the link.

YouTube

YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (YouTube). Further information on YouTube can be found here: https://www.youtube.com/about/

The purpose and scope of data collection and the further processing and use of the data by the access provider as well as your rights in this regard and possible browser settings to protect your personal privacy can be found in the access provider's data protection instructions on https://policies.google.com/privacy?hl=en.

If you access one of the pages on our website, which contains such a plug-in, your browser makes a direct connection to the access provider's servers. The content of the plug-ins is transferred by the respective provider directly onto your browser and integrated into the site. By integrating the plug-ins the providers receive the information that your browser has visited the relevant page of our website, even if you do not have a profile or are currently not logged on. This information (including your IP address) is transferred directly from your browser to an access provider's server in the USA and stored there.

If you are logged on to one of these services the access provider can directly allocate your visit to our website to your profile with them. If you interact with the plug-ins, the relevant information is similarly transferred directly to one of the access provider's servers and stored there. Moreover, the information is published on the respective access provider's website and displayed to your contacts there.

If you do not want an access provider to allocate the information collected on our website directly to your profile in the respective service, you must log out of the respective service prior to visiting our website. You can also prevent plug-ins uploading any data by using add-ons on your computer, e.g. by using the NoScript script blocker (http://noscript.net/).

ONLINE PRESENCE ON FACEBOOK

We operate an online presence on the Facebook network in order to communicate with interested users and to inform you about the LEMKEN consortium.

Facebook provides us as the operators of the site with what are known as Facebook Insights. When you visit our site cookies, by means of which anonymised statistical data are collected, are installed. In this process the cookies are installed by Facebook and this is a non-negotiable component of the usage relationship between us and Facebook.

The personal data are processed on the basis of our legitimate interest in accordance with Article 6 (1) point (f) GDPR in the most effective communication possible and information on interested users. Our legitimate interest lies in the development and optimisation of our offer on the basis of user behaviour.

We and Facebook are jointly responsible for the processing of the data in accordance with Article 26 GDPR, but Facebook has the primary responsibility. As operators of the site we take no decisions with respect to the processing of the data and any further information arising from Article 13 GDPR.

Data subjects may assert their rights with us or with Facebook. We should, however, like to point out that assertion of your rights against Facebook is the most effective, for Facebook has access to the processed data and can take the appropriate measures directly and provide access.

With respect to further information on the processing of the data, the agreement on joint responsibility and the possibilities of lodging an objection we draw your attention to Facebook's data protection information:

Data Privacy Statement: https://www.facebook.com/about/privacy/
Agreement on joint processing of personal data: https://www.facebook.com/legal/terms/page_controller_addendum
Possibility of lodging an objection: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
Facebook Insights: https://www.facebook.com/business/a/page/page-insights

ONLINE PRESENCE IN OTHER SOCIAL MEDIA

We maintain online presences within social networks and platforms, in order to communicate with active customers, potential customers and users and to be able to inform them about our services. When you access the respective networks and platforms the Terms and Conditions of Business and the data processing guidelines of the respective access provider apply. In particular with respect to the detailed presentation of the respective processing procedures and the possibilities of objecting (opt-out), we draw your attention to the following linked information from the service providers. In addition, with respect to the assertion of the rights of data subjects we advise you that these can best be asserted with the respective access provider, since only the access provider has your data.

Unless otherwise stated in our data privacy statement, we process the users' data provided that the users communicate with us within the social networks and platforms, e.g. write contributions to our online presences or send us news.

YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Further information on data protection: https://policies.google.com/privacy

Instagram, Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA

Further information on data protection: https://help.instagram.com/519522125107875

Xing, New Work SE, Dammtorstraße 29-32, 20354 Hamburg, Germany

Further information on data protection: https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn, LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Further information on data protection: https://www.linkedin.com/legal/privacy-policy

INTEGRATION OF THIRD-PARTY SERVICES

On the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR we use the services of third parties to analyse and optimise our sites. In these cases the third party suppliers may use the IP address of the users of third party contents or this may be necessary for the performance of the offers from the third party suppliers. The third party suppliers used may also evaluate information on visitor traffic from pixel tags and may use this information for statistical or marketing purposes. In addition this information may be stored in cookies and deposited on the terminals of the users. These cookies can then contain technical information on the browser and operating system used, the time of the visit and other details of the use of our website and may be linked with this information from other sources.

We integrate into our site videos from the YouTube platforms. We also integrate the issuu service into our website to display announcements.

YouTube

YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (YouTube). Further information on YouTube can be found here: https://www.youtube.com/yt/about/de/.

issuu

Issuu is operated by Issuu Inc, 131 Lytton Ave, Palo Alto, CA 94301 United States. Further information on issuu can be found here: https://issuu.com/

In addition to the data collection referred to above issuu also accesses Google Analytics. We have no access to this use, since the tracking is controlled by issuu. You can prevent the tracking by adjusting the settings of your browser software accordingly. Moreover, you can prevent the collection of the data generated by the cookie and by your use of the website (including your IP address) by Google and the processing of this data by Google, by downloading and installing the browser plug-in available from the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB.

The legal base for the use of these services and the setting of cookies is your consent (Article 6 (1) point (a) DSGVO). Cookies are only set if you have given your consent. Consent is given via the so-called cookie banner, which has to be clicked actively.

MERCHANDISING SHOP

We also collect personal data from our users during the activities of our merchandising shops. Since the shop is a subpage of the lemken.com website all the information provided to you in this data privacy statement applies. In addition to the general regulations in this statement there are however the following additional features:

PROCESSING OF PERSONAL DATA IN THE CONTEXT OF CONTRACTUAL AND PERSONAL SERVICES

We collect data to fulfil our contractual obligations and services in accordance with Article 6 (1) points (a) and (b) GDPR.

Registration

Personal data, such as your name, your address and your e-mail address, are collected during the registration procedure. Subsequently a customer account is set up for you. The user accounts are not public. The data collected there are used solely to perform and process as necessary the service offered. Your data are collected and processed on the basis of your consent in accordance with Article 6 (1) point (a) GDPR.

A user account may be erased at any time by notifying us. In this case your user account data are erased. They are stored for a further period only if this is necessary on legal grounds in accordance with Article 6 (1) point (c).

Login

Once you have registered, we collect your personal data whenever you log on. In this process we collect the e-mail address, which your entered when you registered. The data collected there are used solely for the purpose of the necessary compliance with and processing of the service offered. Your data are collected and processed on the basis of your consent in accordance with Article 6 (1) point (a) GDPR.

Guest order

You also have the possibility of placing an order simply as a guest, without registering. In this case no user account is set up for you. As part of the guest ordering procedure also we collect personal data on you, such as your name, your address and your e-mail address. The data collected there are used solely for the purpose of the necessary performance and processing of the service offered and to implement the order procedure. When the services have been performed in full, your data are blocked from further use and are erased on the expiry of the retention periods required under tax and commercial law, unless you have expressly granted your consent to their further use or another legal justification exists.

Use of our services

When you book any of our services the personal data, such as IP address, name, address, contact details (e-mail) and payment details, which you entered, are collected in order that we are able to fulfil our contractual obligations. The input screen makes it clear exactly which data have been collected. The data provided are stored by us and used to process the desired legal transaction. We use the data you have provided to us with your separate consent solely for the necessary fulfilment and processing of the services offered, for the purpose of complying with our contractual obligations and services.

When the services have been performed in full, your data are blocked from further use and are erased on the expiry of the retention periods required under tax and commercial law, unless you have expressly granted your consent to their further use or another legal justification exists.

DATA PROCESSING FOR WITHDRAWAL

You can revoke a specified purchase within the statutory revocation period by sending us an e-mail, from which we collect personal data, such as your e-mail address. The personal data collected by us depend on which personal data you send to us. Your personal data are processed for the purpose of dealing with your request to your satisfaction. When the services have been performed in full, your data are blocked from further use and are erased on the expiry of the retention periods required under tax and commercial law, unless you have expressly granted your consent to their further use or another legal justification exists.

DATA PROCESSING IN A RETURN OF GOODS PROCEDURE

You have the option of requesting the return of goods via our returns form. In this process we collect personal data, such as your customer number and e-mail address. The form makes it clear which data are collected. The data are processed to fulfil your request. When the services have been performed in full, your data are blocked from further use and are erased on the expiry of the retention periods required under tax and commercial law, unless you have expressly granted your consent to their further use or another legal justification exists.

DATA PROCESSING FOR REPORTING A DEFECTIVE PRODUCT

If you have received a defective product, you can notify us by using the Retunrn form. In this process we collect personal data, such as your account number and e-mail address. The form makes it clear which data are collected. The data are processed to fulfil your request. When the services have been performed in full, your data are blocked from further use and are erased on the expiry of the retention periods required under tax and commercial law, unless you have expressly granted your consent to their further use or another legal justification exists.

DATA PROCESSING FOR THE PARTNER FORM

If you wish to become our partner, you can make this request by using the Partner Form. In this process we collect personal data, such as your account number and e-mail address. The form makes it clear which data are collected. The data are processed to fulfil your request. When the services have been performed in full, your data are blocked from further use and are erased on the expiry of the retention periods required under tax and commercial law, unless you have expressly granted your consent to their further use or another legal justification exists.

INTEGRATION OF PAYMENT SERVICE PROVIDERS

On the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR we use the services of third parties to analyse and optimise our sites. In these cases the third party suppliers may use the IP address of the user of third party contents or this may be necessary for the performance of the offers from the third party suppliers. The third party suppliers used may also evaluate information on visitor traffic from pixel tags and may use this information for statistical or marketing purposes. In addition this information may be stored in cookies and deposited on the terminals of the users. These cookies can then contain technical information on the browser and operating system used, the time of the visit and other details of the use of our website and may be linked with this information from other sources.

Currently we use the following payment services providers and draw your attention to their data protection information and to further notices on their data processing and user rights.

If you use the payment services of third parties (Visa, Mastercard, PayPal) the respective Terms and Conditions of Business of these payment services providers also apply.

Payments to us are generally processed by the Commerzbank Krefeld bank. The bank uses your respective data to process the payment.

To process payment via credit card and direct debit via PayPal we forward your payment details, together with information on your order to the company tasked with the payment, Pay-Pal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Your data are disclosed solely for the purpose of settlement of the payment with the payment regulator. PayPal serves the right to the payment methods of credit card via PayPal and direct debit via PayPal and the conduct of a credit check. PayPal uses the result of the credit check with respect to the statistical probability of default of payment for the purpose of deciding which of the respective payment methods it shall provide. The credit check may contain probability scores (known as score values). If score values are incorporated in the credit check, these have their basis in a scientifically acknowledged mathematical-statistical method. The calculation of the score values incorporates inter alia address details. For further information on data protection law, inter alia on the enquiry agencies used, please consult PayPal's data privacy statement https://www.paypal.com/uk/webapps/mpp/ua/privacy-full

IQBLUE SHOP

We also collect personal data from our users during the activities of our merchandising shops. Since the shop is a sub-page of the lemken.com website all the information provided to you in this data privacy statement applies. In addition to the general regulations in this statement there are however the following additional features:

PROCESSING OF PERSONAL DATA IN THE CONTEXT OF CONTRACTUAL AND PERSONAL SERVICES

We collect data to comply with our contractual obligations and services in accordance with Article 6 (1) points (a) and (b) GDPR.

Registration

Personal data, such as your name, your address and your e-mail address, are collected during the registration procedure. Subsequently a customer account is set up for you. The user accounts are not public. The data collected there are used solely for to complete and process as necessary the service offered. Your data are collected and processed on the basis of your consent in accordance with Article 6 (1) point (a) GDPR.

Notification

Once you have registered we collect your personal data whenever you log on. In this process we collect the e-mail address, which you entered when you registered. The data collected there are used solely for the purpose of the necessary performance and processing of the service offered. Your data are collected and processed on the basis of your consent in accordance with Article 6 (1) point (a) GDPR.

Use of our services

DATA PROCESSING FOR WITHDRAWAL

INTEGRATION OF PAYMENT SERVICE PROVIDERS

On the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR we use the services of third parties to analyse and optimise our sites. In these cases the third party suppliers may use the IP address of the user of third party contents or this may be necessary for the performance of the offers from the third party suppliers. The third party suppliers used may also evaluate information on visitor traffic from pixel tags and may use this information for statistical or marketing purposes. In addition this information may be stored in cookies and deposited on the terminals of the users. These cookies can then contain technical information on the browser and operating system used, the time of the visit and other details of the use of our website and may be linked with this information from other sources.

Currently we use the following payment services providers and draw your attention to their data protection information and to further notices on their data processing and user rights.

We work with the “mollie” payment service. In addition to information about your order, we share your payment data (account number, sort code, credit card number (if applicable), invoice amount, currency and transaction number), name and address with our designated payment processor, Mollie B.V., Keizersgacht 13, 1016 EE Amsterdam, Netherlands, to process payments via credit card and direct debit. Your data is shared for the sole purpose of settling the payment with the payer. Further privacy-related information about the “mollie” payment service provider can be found in the company's Privacy Statement: https://www.mollie.com/en/privacy

DATA COLLECTION IN THE CASE OF USE OF OUR PRODUCTS

Personal data are also collected in the case of use of our smart products. The data are collected on the basis of consent in accordance with Article 6 (1) point (a) GDPR, to comply with our contractual duties in accordance with Article 6 (1) point (b) GDPR or by virtue of legitimate interest in accordance with Article 6 (1) point (f) GDPR.

NEXT Machine Management

Use of the NEXT Machine Management offer is facilitated by software and an app. With respect to data processing your attention is drawn to the relevant data privacy statements for these options for use.

iQblue Clara

In the case of use of the iQblue Clara during the registration procedure we collect personal data, such as your e-mail address. These data are processed on the basis of your consent in accordance with Article 6 (1) point (a) GDPR. With respect to data processing your attention is drawn to the relevant data privacy statements for the app.

agrirouter

We do not collect personal data with respect to the agrirouter offer. The data is collected solely by the agrirouter access provider. We therefore refer you to the access provider's data privacy statement for the use of the product, e.g. information on the app.

USE OF FACEBOOK PIXEL

We use Facebook Pixel provided by Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA or Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland in scope of our website. If you are domiciled within the European Union, Facebook Ireland Ltd. should be regarded as the operator. The legal base for the use of these services and the setting of cookies is your consent (Article 6 (1) point (a) DSGVO). Cookies are only set if you have given your consent. Consent is given via the so-called cookie banner, which has to be clicked actively. You may also opt out Facebook pixel collection and the use of your personal data to display Facebook advertisements on https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Facebook Pixel allows Facebook to identify the visitors to the online offer as a target group for the display of advertisements. By accessing this pixel from your browser Facebook is consequently able to identify whether a Facebook advertisement was successful, in other words, for instance whether it led to the conclusion of an online purchase. For this purpose we receive data from Facebook, which is completely anonymous and without reference to any specific person.

Facebook Pixel makes it possible to trace the efficacy of Facebook advertisements for statistical and market research purposes, such as whether a user has been directed to our online offer after clicking on an advertisement. If you possess a Facebook account and are logged on, your visit to this website is allocated to your Facebook user account.

Further information from Facebook on Facebook Pixel can be found on www.facebook.com/business/help/651294705016616.

More information on Facebook's data guidelines can be found on https://www.facebook.com/policy.php.

LEGAL DUTY TO PROCESS

Like every organisation, which is involved in economic affairs and business, we are subject to a plethora of legal obligations. These are primarily statutory requirements (e.g. trade and tax laws), but where applicable we are also subject to provisions of regulatory law and governmental regulations. Where applicable, the purposes of the processing are subject to compliance with monitoring and reporting duties and the archiving of data for the purposes of data protection and data security and audit by tax and other authorities In addition, it may be necessary to disclose personal data in response to governmental and/or judicial procedures for the purpose of gathering evidence, criminal prosecution or the enforcement of claims under civil law.

DATA SECURITY

In order to prevent unauthorised access or unauthorised disclosure, to guarantee the accuracy of the data and to ensure the authorised use of the data, in accordance with Article 32 GDPR we have implemented technical and organisational procedures, in order to secure and protect the data, which we request online. We secure our website and other systems against manipulation, loss and destruction of, access to, amendment and dissemination of your data by unau-thorised persons.

QUESTIONS AND NOTICES

The version of the data privacy statement accessible online at the date of your visit to our website shall always apply to the use of our website. We reserve the right to amend or update this data privacy statement by reason of further development of the website or amendments to statutory and governmental provisions.

We request our users to make themselves familiar on a regular basis with the content of our data privacy statement.

If you have any further questions on the topic of data protection with respect to our website, please do not hesitate to contact us at the contact details stated above. We shall then endeavour to answer your questions and to clear up any concerns you may have.

Status: May 2020