Privacy Policy

1. General

We are very delighted about your interest in our company. Data protection is of a particularly high priority for the management of Lehnhoff Hartstahl GmbH.

The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to Lehnhoff Hartstahl GmbH. By means of this Privacy Policy, we would like to inform about the nature, scope, and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed, by means of this Privacy Policy, of the rights to which they are entitled.

Please also note our Cookie Policy.

As the controller the Lehnhoff Hartstahl GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, internet-based data transmissions may in principle have security gaps, so absolute protection may not be guaranteed. For this reason, every data subject is free to transfer personal data to us via alternative ways, e.g. by telephone.

 

2. Definition of terms

The Privacy Policy of Lehnhoff Hartstahl GmbH is based on the terms used by the European Legislator for the adoption of the GDPR. Our Privacy Policy or the use of our website should be legible and understandable for the general public, as well as our customers and business partners. To ensure this, we would like to first explain the terminology used.

In this Privacy Policy, we use, inter alia, the following terms:

a) Personal data
Personal data means any information relating to an identified or identifiable natural person (subsequently called as “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject
Data subject is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.

c) Processing
Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.

e) Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

f) Pseudonymisation
Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

g) Controller or controller responsible for the processing
The controller is the natural or legal person, public authority, institution or other body which alone or jointly with others decides on the purposes and means of processing personal data.

h) Processor
Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

i) Recipient
Recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not.

j) Third party
Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

k) Consent
Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

 

3. Name and address of the controller

Controller for the purposes of the GDPR, other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:

Lehnhoff Hartstahl GmbH
Rungsstrasse 10-15
76534 Baden-Baden
Germany
Phone: +49 7223 966 0
E-mail: info@lehnhoff.de
Website: https://www.lehnhoff.de

 

4. Name and address of the Data Protection Officer

The Data Protection Officer of the controller is:

DLC Dr. Leutsch Consulting
Lyzeumstr. 19
76437 Rastatt
Germany
E-mail: dsb@lehnhoff.de

Any data subject may, at any time, contact our Data Protection Officer directly with all questions and suggestions concerning data protection.

 

5. Scope of application

This Privacy Policy regulates the processing of your personal data on our website https://www.lehnhoff.de and our social networks (e.g. Facebook, Instagram, Twitter, Youtube, LinkedIn) and your communication with us e.g. via email or phone.

In the context of this Privacy Policy, we also provide information about the video surveillance of our company ground.

This Privacy Policy does not apply to the websites of other service providers to which the Lehnhoff Hartstahl GmbH website merely refers by means of a link.

 

6. Processing of your personal data

Lehnhoff Hartstahl GmbH processes personal data exclusively for the following purposes and legal bases.

a) Contact via our website for the implementation of pre-contractual measures according to art. 6 para. 1 lit. b) GDPR

The website of Lehnhoff Hartstahl GmbH contains (also due to legal regulations) information that enables a quick electronic contact to our company. Corresponding messages can be sent via the given general e-mail address or also via the contact form. The personal data transmitted (see input mask of the website) will be processed for the purpose of implementing pre-contractual measures.

Lehnhoff Hartstahl GmbH commissions IT service providers to support the operation and maintenance of the website, which subsequently have access to personal data.

b) Registration in the dealer area of our website for the fulfilment of a contract according to art. 6 para. 1 lit. b) GDPR

Our customers have the option to register for the dealer area of the website of Lehnhoff Hartstahl GmbH by entering personal data, such as company, name, address, telephone number or e-mail (see also input mask). This provides access to various information (price list, technical descriptions, operating instructions, etc.), a tech blog and a used equipment shop.

The personal data entered by the data subject will be collected and stored exclusively for internal use and for own purposes.

Lehnhoff Hartstahl GmbH commissions IT service providers to support the operation and maintenance of the website, which subsequently have access to the above mentioned personal data.

Furthermore, it is possible that, for example, in the case of delivery of used equipment, the name and address will be passed on to the shipment provider.

c) Usage of Sofortüberweisung as a payment method according to art. 6 para. 1 lit. b) GDPR

Lehnhoff Hartstahl GmbH has integrated Sofortübeweisung components on this website. Sofortüberweisung is a payment service that enables cashless payment for products and services on the Internet. Sofortüberweisung represents a technical procedure by which the online retailer immediately receives a payment confirmation. This enables a merchant to deliver goods, services or downloads to the customer immediately after ordering.

The operating company of Sofortüberweisung is the SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany.

If the data subject selects "Sofortüberweisung" as payment method during the order process in our online shop, data of the affected person will be automatically transferred to Sofortüberweisung. By selecting this payment method, the data subject consents to the transfer of personal data required for payment processing.

During the purchase via Sofortüberweisung the buyer transmits the PIN and the TAN to the Sofort GmbH. Immediate transfer then makes a transfer to the online retailer after technical verification of the account balance and retrieval of further data to check the account coverage. The execution of the financial transaction is then communicated to the online retailer automatically.

The personal data exchanged with Sofortüberweisung is first name, last name, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing. The purpose of the transmission of the data is payment processing and fraud prevention. Lehnhoff Hartstahl GmbH will provide Sofortüberweisung with other personal information even if there is a legitimate interest in the transfer. The personal data exchanged between Sofortüberweisung and us may be transferred by Sofortüberweisung to credit bureaux agencies. This transmission aims at the identity and credit check.

Sofortüberweisung may transfer the personal data to affiliated companies and service providers or subcontractors, as far as this is necessary to fulfill the contractual obligations or the data is to be processed in the order.

The data subject has the option to revoke the consent to the handling of personal data at any time in relation to Sofortüberweisung. A revocation has no effect on personal data that must be processed, used or transmitted for (contractual) payment processing.

The current Privacy Policy of Sofortüberweisung can be found at https://www.klarna.com/sofort/.

d) Subscription to our newsletter for advertising purposes according to § 7 para. 2 lit. 3 and para. 3 UWG

On the website of Lehnhoff Hartstahl GmbH, users are given the opportunity to subscribe to our company's newsletter. Lehnhoff Hartstahl GmbH informs its customers and business partners at regular intervals by means of a newsletter about offers of the company. The personal data transmitted to Lehnhoff Hartstahl GmbH when ordering the newsletter is determined by the input mask used for this purpose.

For legal reasons, a confirmation e-mail in the double opt-in procedure is sent to the e-mail address registered by the data subject for the first time for sending the newsletter. This confirmation e-mail serves to check whether the owner of the e-mail address has authorized the receipt of the newsletter as the data subject.

The personal data collected when registering for the newsletter will be used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter may be informed by e-mail if this is necessary for the operation of the newsletter service or for registration, as could be the case in the event of changes to the newsletter offer or changes in the technical conditions.

The data subject has the possibility to register on the website of the controller with the indication of personal data. Which personal data are transmitted to the controller is determined by the respective input mask used for the registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller, and for his own purposes. The controller may request transfer to one or more processors (e.g. a parcel service) that also uses personal data for an internal purpose which is attributable to the controller.

You can revoke your consent to subscribe to the newsletter at any time with effect for the future without incurring any costs other than the transmission costs according to the basic rates. For the purpose of revoking your consent, you will find a corresponding unsubscribe link in every newsletter.

If we have received your e-mail address within the scope of the contractual relationship, we can also use it to advertise our own and similar products. In this case, we have explicitly informed you of this data collection and use.

You can also object to the promotional use of your e-mail address from the contractual relationship at any time with effect for the future without incurring any costs other than the transmission costs according to the basic rates. You will find a corresponding unsubscribe link in every newsletter. Or send an appropriate e-mail to unsubscribe@lehnhoff.de.

The newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in e-mails sent in HTML format to enable log file recording and analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. The embedded pixel-code enables Lehnhoff Hartstahl GmbH to recognize whether and when an e-mail was opened by an affected person and which links in the e-mail were called by the affected person. Such personal data collected via the tracking pixels contained in the newsletters is stored and evaluated by Lehnhoff Hartstahl GmbH in order to optimize newsletter dispatch and to adapt the content of future newsletters even better to the interests of readers. This personal data will not be passed on to third parties. If you unsubscribe from the newsletter, this personal data will be deleted by us.

Lehnhoff Hartstahl GmbH commissions IT service providers with the dispatch of the newsletter, which subsequently have access to the personal data.

e) Usage of social buttons for advertising purposes in accordance with art. 6. para. 1 lit. f) GDPR

This website uses social buttons from social networks and platforms. In order to increase the protection of your data when you visit our website, these buttons are not integrated into the page as plug-ins, but simply using an HTML link. This integration ensures that when a page on our website that contains such buttons is called up, no connection is established with the servers of the provider of the respective social network.

If you click on one of the buttons, a new window of your browser opens and calls up the page of the respective service provider on which you can (if necessary after entering your login data) e.g. press the Like or Share button.

We currently use the following social buttons:
Facebook social button
Instagram social button
Twitter social button
Youtube social button

Information on further processing of your data in social networks and platforms can be found in the section below.

f) Usage of online presences on social networks and platforms for advertising purposes according to art. 6. para. 1 lit. a) and f) GDPR

Our presence on social networks and platforms serves for better, active communication with our customers and interested parties. There we provide information about our products and current special promotions.

When you visit our online presence on social media, your data can be automatically collected and saved for market research and advertising purposes. Using pseudonyms, so-called usage profiles are created from this data. These can be used to e.g. To place advertisements inside and outside the platforms that presumably correspond to your interests.

We currently have online presences on the following social networks and platforms:
Facebook
Instagram
Twitter
Youtube
Linkedin

For detailed information on the processing and use of the data, your setting options, your related rights to protect your privacy and a contact option, please refer to:
Facebook: https://www.facebook.com/about/privacy
Instagram: https://help.instagram.com/519522125107875
Twitter: https://twitter.com/de/privacy
Youtube: https://policies.google.com/privacy
Linkedin: https://privacy.linkedin.com

Data processing with the social networks and platforms can take place on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR.

If you need further help in this regard, you can contact us.

g) Automatic processing of your access data for purposes of data security, stability and operational security of our website according to art. 6 para. 1 lit. c) and f) GDPR

We have a legal obligation to comply with the data security of our website as well as a legitimate interest in the elimination of disruptions, ensuring system security and the detection and tracking of unauthorized access attempts or accesses. For this reason, every time you visit our website, we automatically collect information about which IP address is assigned to your computer, which browser and which operating system you are using and which websites you have viewed. This data is stored in so-called log files on the web server of our web space provider. The IP address alone represents personal information. To protect against misuse of our computer systems, it is necessary to save the IP address of each visitor for a temporary period

We commission IT service providers, if necessary, with their sub-service providers to ensure the functionality of our website and thus the processing of your access data.

h) Automatic processing of your cookie data

Further information about cookies and their use on our website can be found in our Cookie Policy.

You can set your cookies for us in our Consent Management Platform.

Please activate Javascript to see the list of all declared cookies and similar technologies.

i) Video surveillance of our company ground at Rungsstrasse 10-15, 76534 Baden-Baden in the legitimate interest according to art. 6 para. 1 lit. f) GDPR

Lehnhoff Hartstahl GmbH monitors its ground with the help of video cameras.

Information about the fact of installing video cameras and recording images can be found on the appropriate signs located near the cameras. We have a legitimate interest in video surveillance, which lies in the protection of our domiciliary rights and the prevention and detection of damage and other criminal offences.

There is no wide-ranging surveillance of the company ground and in particular of the publicly accessible area. We only monitor the entrance areas of our company ground. The video data are only evaluated and stored for a specific occasion, as long as they are needed for evidence purposes. Otherwise the video data will be irrevocably deleted after 48 hours.

Lehnhoff Hartstahl GmbH commissions IT service providers to support the operation and maintenance of video cameras, which subsequently have access to personal data.

In the event of a specific cause, e.g. damage, we inform public authorities on the basis of legal regulations, e.g. social insurance carriers, tax authorities, police, public prosecutor's office or supervisory authorities, so that they also have access to the personal data.

 

7. Transmission of personal data to third parties

A transfer, sale or other transfer of personal data to third parties outside of the purposes and legal bases listed under No. 6 does not take place.

In the case of data processing from countries where there is no adequate level of data protection (so-called "third countries"), special measures are required under the GDPR.

Before a service provider or their sub-service provider based in a third country has the technical possibility of accessing your personal data, Lehnhoff Hartstahl GmbH takes measures to ensure data protection, for example by concluding EU Modal Clauses.

 

8. Deletion and blocking of personal data

Lehnhoff Hartstahl GmbH stores personal data of the data subject only for the period necessary to achieve the purpose of the processing or insofar as this was provided by the European Directive and Ordinance Giver or another legislator in laws or regulations to which Lehnhoff Hartstahl GmbH is subject.

If the purpose of the processing no longer applies or if a storage period prescribed by the European Directive and Regulation Giver or another competent legislator expires, the personal data is routinely blocked or deleted in accordance with the statutory provisions.

 

9. Rights of the data subject

a) Right of information according to art. 15 GDPR

You are entitled at any time to request information free of charge within the scope of the statutory provisions about your data processed by us, the purposes of processing, the storage period or the criteria for determining the storage period and the recipients of the data. You are also entitled to receive a copy of your data.

b) Right of correction, cancellation and restriction of processing according to art. 16-19 GDPR

Should your data processed by us be incorrect, incomplete or their processing inadmissible, you can request us to correct or supplement your data, to restrict the processing or to delete the data to the legally permissible extent. Furthermore, you as a user have the possibility to delete your data automatically in the application at any time.

c) Right of data portability according to art. 20 GDPR

If you have provided us with your data on the basis of your consent or within an existing contractual relationship with us, we will make this data available to you in a standard format upon your request or - insofar as this is technically possible - transmit it to a third party of your choice.

d) Right of revoking the consent according to art. 7 para. 3 GDPR

You have the right at any time to revoke your consent given to us and based on art. 6 para. 1 lit. a) GDPR with effect for the future. The revocation of a consent leads to the fact that the data processing based on this consent no longer takes place.

The relevant data processings are listed under No. 5.

e) Right of objection according to art. 22 GDPR You have the right to object at any time to the processing of personal data concerning you on the basis of  art.  6 para 1 lit. e) or f) GDPR for reasons arising from your particular situation. In this case we will no longer process your personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If we process your personal data for advertising purposes, you have the right to object at any time. This also applies to profiling insofar as it is associated with such advertising. In the event of your objection, we will no longer process your personal data for these purposes. The relevant data processings are listed under No. 6.

 

f) Right of appeal according art. 57 GDPR

If you have any questions, suggestions or criticism, please do not hesitate to contact us.

You may also send a complaint to a supervisory authority. You have the choice of approaching the supervisory authority that is locally responsible for you or for us. The contact details of the supervisory authority responsible for our respective company are available under the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/addresses_links-node.html

 

10. Automated decision making including profiling

Lehnhoff Hartstahl GmbH does not carry out automated decision making including profiling (automated analysis of personal circumstances).

 

11. Security measures

Lehnhoff Hartstahl GmbH takes technical and organizational security measures to protect your personal data from loss or misuse. Your data is stored in a secure operating environment that is not accessible to the public. Should you wish to contact Lehnhoff Hartstahl GmbH by e-mail, we would like to point out that the confidentiality of the information transmitted cannot be guaranteed. The content of e-mails can - similar to postcards - be viewed by third parties. We therefore recommend that you send us confidential information by post only.

 

12. Amendment of this Privacy Policy

The rapid technological development of the internet and the changes in law and regulations in the area of data protection make it necessary for us to adapt our Privacy Policy to the new requirements from time to time. Please therefore observe the current Privacy Policy. This Privacy Policy has the status as of 1st of December, 2021.