Privacy Policy

 

1. General

We are very pleased about your interest in our company. Data protection is a particularly high priority for Lehnhoff Hartstahl GmbH.

The processing of personal data, such as your name, address, e-mail address or telephone number, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations that apply to us.

By means of this Privacy Policy, we would like to inform you about the type, scope and purpose of the personal data collected, used and processed by us. We also want to inform you about the rights to which they are entitled.

Please also note our Cookie Policy.

As the controller, Lehnhoff Hartstahl GmbH has implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed via this website. Nevertheless, Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us by alternative means, for example by telephone.

2. Definitions

The data protection information of Lehnhoff Hartstahl GmbH is based on the terms used by the European legislator for the adoption of the GDPR. Our Privacy Policy for the use of our website is intended to be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

We use the following terms in this Privacy Policy, among others:

a) Personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject or data subject

Data subject is any identified or identifiable natural person whose personal data is processed by the controller.

c) Processing

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d) Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.

e) Profiling

Profiling is any type of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to that natural person's work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

f) Pseudonymization

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person become.

g) Controller or controller

The controller or controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

h) Processors

Processor means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

i) Recipient

The recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether or not it is a third party.

j) Third parties

Third party means a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorised to process the personal data.

k) Consent

Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes, in the form of a statement or other clear affirmative action, by which the data subject signifies that he or she agrees to the processing of personal data concerning him or her.

3. Contact details of the controller

The controller in the sense of data protection law is:

Lehnhoff Hartstahl GmbH
Rungsstrasse 10-15
76534 Baden-Baden
Germany
Phone: +49 7223 966 0
E-mail: info@lehnhoff.de
Website: https://www.lehnhoff.de

Exceptions are explained in this Privacy Policy.

4. Contact details of the data protection officer

If you have any questions about this Privacy Policy or the processing of your data by us in general, please contact our data protection officer:

E-Mail: dsb@lehnhoff.de

Our data protection officer can also be reached at our company address in section 3.

5. Scope

This Privacy Policy applies to the processing of your personal data on our website https://www.lehnhoff.de as well as our social networks (e.g. Facebook, Instagram, Twitter, Youtube, LinkedIn) and your communication with us, e.g. via e-mail or telephone. 

As part of this Privacy Policy, we also provide information about the video surveillance of our company premises.

This data protection information does not apply to the websites of other service providers, to which the Lehnhoff Hartstahl GmbH website merely refers by means of a link.

The data protection information of the Lehnhoff Compliance Hotline can be found at: https://www.lehnhoff.de/de/leitbild-werte

6. Processing of personal data

We process your personal data for the following purposes and on the basis of the legal bases mentioned. In the event that the data processing is based on the legal basis of legitimate interest, we will also explain to you our legitimate interest that we pursue with the processing.

a) Possibility of contact via our website for the implementation of pre-contractual measures in accordance with Art. 6 (1) (b) GDPR

The website of Lehnhoff Hartstahl GmbH contains information (also due to legal regulations) that enables quick electronic contact with our company. Corresponding messages can be sent using the general e-mail address provided or via the contact form. The personal data transmitted in this process (see input mask on the website) will be processed for the purpose of carrying out pre-contractual measures.

Lehnhoff Hartstahl GmbH commissions IT service providers to support the operation and maintenance of the website, who subsequently have access to the personal data.

If you send us your message via e-mail, our e-mail service provider will receive your personal data. Only with the use of the e-mail service provider are we able to receive and respond to your report.

b) Registration in the dealer area of our website for the performance of a contract in accordance with Art. 6 para. 1 lit. b) GDPR

Our customers have the option of registering in the dealer area of the website of Lehnhoff Hartstahl GmbH by providing personal data, such as company, name, address, telephone number or e-mail, (see also input mask). This gives access to various information (price list, technical descriptions, operating instructions, etc.), a tech blog and a used equipment shop.

The personal data entered by the data subject is collected and stored exclusively for internal use and for its own purposes.

Lehnhoff Hartstahl GmbH commissions IT service providers to support the operation and maintenance of the website, who subsequently have access to the above personal data.

If you send us your message via e-mail, our e-mail service provider will receive your personal data. Only with the use of the e-mail service provider are we able to receive and respond to your report.

Furthermore, there is the possibility that, for example, in the case of delivery of the used equipment, name and address will be passed on to the transport service providers.

c) Use of the instant bank transfer payment method in accordance with Art. 6 para. 1 lit. a), b) and f) GDPR

Lehnhoff Hartstahl GmbH has integrated components of Sofortüberweisung on this website. Sofortüberweisung is a payment service that enables cashless payment of products and services on the Internet. Sofortüberweisung is a technical procedure through which the online retailer immediately receives a confirmation of payment. This enables a retailer to deliver goods, services or downloads to the customer immediately after the order has been placed.

The operating company of Sofortüberweisung is SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, part of Klarna Bank AB, (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

If the data subject selects "Sofortüberweisung" as the payment option during the ordering process in our online shop, data of the data subject will be automatically transmitted to Sofortüberweisung. By selecting this payment option, the data subject consents to the transfer of personal data necessary for payment processing.

When making a purchase via Sofortüberweisung, the buyer transmits the PIN and TAN to SOFORT GmbH. Sofortüberweisung then carries out a transfer to the online retailer after a technical check of the account balance and retrieval of further data to check the account balance. The online trader is then automatically notified of the execution of the financial transaction.

The personal data exchanged with Sofortüberweisung is first name, last name, address, e-mail address, IP address, telephone number, mobile phone number or other data necessary for payment processing. The transmission of the data is intended for payment processing and fraud prevention. Lehnhoff Hartstahl GmbH will also transmit other personal data to Sofortüberweisung if there is a legitimate interest in the transfer. The personal data exchanged between Sofortüberweisung and us may be transmitted by Sofortüberweisung to credit agencies. The purpose of this transfer is to check identity and creditworthiness.

Sofortüberweisung may pass on the personal data to affiliated companies and service providers or subcontractors, insofar as this is necessary for the fulfilment of contractual obligations or the data is to be processed on behalf of the company.

The data subject has the option of revoking the consent to the handling of personal data at any time vis-à-vis Sofortüberweisung. A revocation does not affect personal data that must be processed, used or transmitted for the purpose of (contractually compliant) payment processing.

The applicable data protection information of Sofortüberweisung can be accessed under: https://www.klarna.com/sofort/

d) Subscription to our newsletter for advertising purposes in accordance with § 7 para. 2 lit. 2 and para. 3 UWG

On the website of Lehnhoff Hartstahl GmbH, users are given the opportunity to subscribe to our company's newsletter. Lehnhoff Hartstahl GmbH informs its customers and business partners at regular intervals by means of a newsletter about the company's offers. The personal data that is transmitted to Lehnhoff Hartstahl GmbH when subscribing to the newsletter can be found in the input mask used for this purpose.

For legal reasons, a confirmation email will be sent to the e-mail address entered by a data subject for the first time for the newsletter dispatch in the double opt-in procedure. This confirmation e-mail serves to check whether the owner of the e-mail address has authorised the receipt of the newsletter as a data subject.

The personal data collected in the context of registering for the newsletter will be used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or a corresponding registration, as could be the case in the event of changes to the newsletter offer or changes in the technical conditions.

You can revoke your consent to subscribe to the newsletter at any time with effect for the future without incurring any costs other than the transmission costs according to the basic rates. For the purpose of revoking consent, there is a corresponding unsubscribe link in each newsletter.

If we have received your e-mail address as part of the contractual relationship, we can also use it to advertise our own and similar products. In this case, we have explicitly pointed out this data collection and use to you.

You can also object to the advertising use of your e-mail address from the contractual relationship at any time with effect for the future, without incurring any costs other than the transmission costs according to the basic rates. For this purpose, there is a corresponding unsubscribe link in each newsletter. Or you can send a corresponding e-mail to Lehnhoff Hartstahl GmbH.

The newsletters contain so-called tracking pixels. A web beacon is a thumbnail graphic that is embedded in such e-mails, which are sent in HTML format, to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. Based on the embedded tracking pixel, Lehnhoff Hartstahl GmbH can see whether and when an e-mail was opened by a data subject and which links in the e-mail were accessed by the data subject. Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by Lehnhoff Hartstahl GmbH in order to optimise the sending of the newsletter and to adapt the content of future newsletters even better to the interests of the readers. This personal data will not be passed on to third parties. In the event of unsubscribing from the newsletter, this personal data will be deleted by us.

Lehnhoff Hartstahl GmbH commissions IT service providers to send the newsletter, which subsequently have access to the personal data.

e) Use of social buttons for advertising purposes in accordance with Art. 6 para. 1 lit. f) GDPR

The website of Lehnhoff Hartstahl GmbH uses social buttons from social networks and platforms. In order to increase the protection of your data when visiting our website, these buttons are not integrated into the page as plugins, but only using an HTML link. This integration ensures that when a page of our website containing such buttons is accessed, no connection is established with the servers of the provider of the respective social network.

If you click on one of the buttons, a new window of your browser opens and calls up the page of the respective service provider, where you can (if necessary after entering your login data) press the Like or Share button, for example.

Currently we use the following social buttons:
Facebook
Instagram
LinkedIn
Youtube

Information on further processing of your data in social networks and platforms can be found in the section below.

f) Use of online presences on social networks and platforms for advertising purposes in accordance with Art. 6 para. 1. lit. a) and f) GDPR

The presence of Lehnhoff Hartstahl GmbH on social networks and platforms serves to improve active communication with our customers and interested parties. We will provide information about our products and ongoing special promotions there.

When you visit our online presence in social media, your data may be automatically collected and stored for market research and advertising purposes. This data is used to create so-called usage profiles using pseudonyms. These can be used, for example, to place advertisements on and off the platforms that are presumed to be of interest to you.

We currently have online presences on the following social networks and platforms:
Facebook
Instagram
LinkedIn
Youtube
X (formerly Twitter)

Detailed information on the processing and use of the data, your setting options for this, your rights in this regard to protect your privacy and a contact option can be found here:

Facebook: https://www.facebook.com/about/privacy
Instagram: https://help.instagram.com/519522125107875
LinkedIn: https://privacy.linkedin.com
Youtube: https://policies.google.com/privacy
X (formerly Twitter): https://twitter.com/de/privacy

Data processing with social networks and platforms may be carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR.

If you need further help in this regard, you can contact us.

g) Automatic processing of your access data for the purposes of data security, stability and operational security of our website in accordance with Art. 6 para. 1 lit. c) and f) GDPR

We have a legal obligation to comply with the data security of our website as well as a legitimate interest in eliminating faults, ensuring system security and detecting and tracking unauthorized access attempts or accesses. For this reason, each time you visit our website, we automatically collect information about which IP address is assigned to your computer, which browser and operating system you use and which websites you have viewed. This data is stored in so-called log files on the web server of our web space provider. The IP address alone constitutes personal information. To protect against misuse of our computer systems, it is necessary to store the IP address of each visitor for a temporary period of time.

We commission IT service providers and, if necessary, their subcontractors to ensure the functionality of our website and thus the processing of your access data.

h) Automatic processing of your cookie data

For more information about cookies and their use on our websites, please see our Cookie Policy.

You can set your cookies to us in our Consent Management Platform.

Link to CMP.

Please enable Javascript to see the list of all declared cookies and similar techniques.

i) Video surveillance of our company premises with our legitimate interest in accordance with Art. 6 (1) (f) GDPR

Lehnhoff Hartstahl GmbH monitors its company premises with the help of video cameras.

There is no large-scale surveillance of the company premises and in particular of the publicly accessible area. We only monitor the entrance, exit and border areas of our company premises.

Information about the fact of the installation of video cameras and the recording of images can be found on the appropriate signs, which are placed near the cameras.

We pursue the following purposes with video surveillance:

• Monitoring of access to the company premises.
• Preservation of domiciliary rights.
• Improved prevention and prosecution of burglaries, vandalism or other crimes.

We have the following legitimate interest in video surveillance:

• Protection of property and assets.
• Protection of employees, customers and visitors.

The recording data (action-driven video sequences) is stored for a maximum of 72 hours. A longer storage period is only granted if this is necessary for the enforcement of legal claims or for the prosecution of criminal offences in the specific individual case. The recording data is only evaluated for a specific occasion.

Lehnhoff Hartstahl GmbH commissions service providers (e.g. security service, IT support, etc.) to support the operation and maintenance of the video cameras, which may subsequently have access to the recording data.

In the event of a specific occasion, e.g. a burglary, we inform public authorities on the basis of legal provisions, e.g. the police, public prosecutor's office, social security institutions, tax authorities or supervisory authorities, so that they can also have access to the recording data.

j) Video surveillance of barrier locking systems

Lehnhoff Hartstahl GmbH monitors the installed barrier locking systems at the entrance and exit of the company premises with the help of video cameras.

There is no large-scale surveillance of the company premises and in particular of the publicly accessible area. The video cameras only capture the fronts of the vehicles in order to capture their license plates. In the case of vehicles authorised to enter, an automated barrier opening is carried out on the basis of the recognised number plate.

Information about the fact of installing video cameras and recording images can be found on the appropriate signs, which are placed near the cameras.

The legal bases for the processing by video surveillance of barrier locking systems are:

• With automated barrier opening:
  The consent of our employees with access authorization (and possibly other persons) in accordance with Art. 88 para. 1 GDPR in conjunction with § 26 para. 2 BDSG.
• Without automated barrier opening:
  Our following legitimate interest in the event of access to the company premises by (external) persons in accordance with Art. 6 (1) (f) GDPR:
  • Protection of property and assets.
  • Protection of employees, customers and visitors.

We pursue the following purposes with video surveillance:

• Recognition of authorized persons with their vehicles based on the license plate and control of the automatic barrier locking system.
• Monitoring of access to the company premises.
• Preservation of domiciliary rights.
• Improved prevention and prosecution of burglaries, vandalism or other crimes.

The pictures of license plates are stored for a maximum of 72 hours. A longer storage period is only granted if this is necessary for the enforcement of legal claims or for the prosecution of criminal offences in the specific individual case. The recording data is only evaluated for a specific occasion.

Lehnhoff Hartstahl GmbH commissions service providers (e.g. security service, IT support, etc.) to support the operation and maintenance of the video cameras, which may subsequently have access to the recording data.

In the event of a specific occasion, e.g. a burglary, we inform public authorities on the basis of legal provisions, e.g. the police, public prosecutor's office, social security institutions, tax authorities or supervisory authorities, so that they can also have access to the recording data (pictures of license plates).

7. Disclosure of personal data to service providers

Lehnhoff Hartstahl GmbH reserves the right to use service providers for the collection or processing of your data. Service providers only receive the personal data from us that they need for their specific activity.

For example, your e-mail address may be passed on to a service provider so that they can deliver an ordered newsletter to you. Service providers can also be commissioned to provide server capacities.

Service providers are usually involved as so-called processors, who are only allowed to process your personal data in accordance with our instructions.

Details on the disclosure of your personal third parties to service providers can also be found in Section 6.

8. Transfer of personal data to third parties

As a matter of principle, Lehnhoff Hartstahl GmbH will only pass on your personal data to third parties if:

• insofar as this is necessary for the fulfilment of
  • of a contract or
  • a legal obligation is required,
• we or the third party have a legitimate interest in passing it on, or
• Your consent for this has been obtained.

We may disclose your personal data to a third party in particular in the following cases:

• If we are obliged to do so on the basis of legal requirements or by enforceable official or court order in individual cases.
• In connection with legal disputes before courts or our lawyers.
• In connection with tax audits against auditors.
• In connection with possible criminal acts vis-à-vis the competent investigating authorities.
• In the event of a sale of the business to the acquirer.

In the case of a transfer on the basis of consent, the explanation can also be provided when consent is obtained.

Details of the transfer of your personal third parties to third parties can also be found in Section 6.

9. Transfer of personal data to third countries

In a few cases, Lehnhoff Hartstahl GmbH also passes on your personal data to third parties or processors based in non-EEA countries. In these cases, we ensure that the recipient either has an adequate level of data protection before the transfer (e.g. due to an adequacy decision of the European Commission for the respective country in accordance with Art. 45 GDPR or the agreement of so-called EU standard contractual clauses of the European Commission with the recipient in accordance with Art. 46 GDPR by carrying out so-called transfer impact assessments and, if necessary,  implementation of additional protective measures) or Your explicit consent has been given.

This is currently only Google Inc. in the USA. We have concluded our contract with Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. However, it is possible that your personal data may also be transmitted to Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

For the USA, the European Commission has concluded that there is an adequate level of data protection there, provided that the data recipient participates in the Data Privacy Framework (DPF) and has a current certification for it. To the extent that the recipients of your personal data are based in the USA and participate in the DPF, we therefore rely on this adequacy decision (Art. 45 GDPR).

You can get an overview of the importers in third countries and a copy of the specifically agreed regulations to ensure the appropriate level of data protection. Please use the information in section 3 for this purpose.

10. Obligation to provide data

In principle, you are not obliged to provide us with your personal data. However, the use of certain services on this website may require the provision of personal data, e.g. registration in the dealer area or registration for our newsletter. If this is the case, we will let you know. Mandatory information is regularly marked with a *. If you do not wish to provide us with the data required for this purpose, you will unfortunately not be able to use the relevant services.

11. Deletion and blocking of personal data

Lehnhoff Hartstahl GmbH stores personal data of the data subject only for the period necessary to achieve the purpose of the processing or if this has been provided for by the European legislator or another legislator in laws or regulations to which Lehnhoff Hartstahl GmbH is subject.

If the purpose of the processing ceases to apply or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

Lehnhoff Hartstahl GmbH stores your data for as long as is necessary for the provision of our website and the associated services or we have a legitimate interest in further storage.

In all other cases, we delete your personal data with the exception of data that we are required to retain in order to comply with statutory (e.g. tax or commercial law) retention periods (e.g. invoices). We block data that is subject to a retention period until the expiry of the period.

If you have any further questions about the retention periods of your personal data, please contact us using the contact details set out in section 3.

12. Rights of the data subject

To assert your rights, please use the contact details in section 3. Please make sure that we are able to uniquely identify you.

You can adjust your settings for cookies and the data processing based on them at any time in our CMP. Please note our Cookie Policy.

a) Right of access pursuant to Art. 15 GDPR

You can request that we confirm whether we are processing personal data about you. And you are entitled at any time, within the framework of the statutory provisions, to request information free of charge about your personal data processed by us, the purposes of the processing, the storage period or the criteria for determining the storage period and the recipients of the data. You are also entitled to receive a copy of your data.

b) Right to rectification pursuant to Art. 16 GDPR

If your personal data processed by us is incorrect or incomplete, you can ask us to correct or supplement your personal data. In the event that we have disclosed your personal data to third parties, we will inform them of the correction to the extent required by law. 

c) Right to erasure pursuant to Art. 17 GDPR

If the legal requirements are met, you can demand that we delete your personal data immediately in the following cases:

• Your personal data is no longer needed for the purposes for which it was collected.
• The legal basis for the processing is solely your consent and you have withdrawn it.
• You have objected to the processing for advertising purposes ("advertising objection").
• You have objected to processing on the basis of the legal basis of legitimate interest on personal grounds and we cannot demonstrate that there are overriding legitimate grounds for processing.
• Your personal data will be processed unlawfully.
• Your personal data must be deleted in order to comply with legal requirements.

If we have shared your personal information with third parties, we will notify them of the deletion where required by law.

Please note that your right to erasure is subject to certain restrictions. For example, we are not allowed to delete data that we have to keep due to statutory retention periods. Data that we need to assert, protect, exercise and defend our legal claims is also excluded from your right to erasure.

d) Right to restriction of processing pursuant to Art. 18 GDPR

If the legal requirements are met, you can request that we restrict the processing of your personal data in the following cases:

• From the time you contest the accuracy of your personal data and then until we have the opportunity to verify its accuracy.
• The processing is not lawful and you request restriction of processing instead of erasure (see previous section).
• We no longer need your personal data for the purposes of the processing, but you do need it to establish, protect, exercise and defend your legal claims.
• From the moment you object to the processing for personal reasons and then until it is clear whether your interests prevail.

Where there is a right to restriction of processing, we will mark the personal data concerned to ensure that it is processed only within the narrow limits that apply to such restricted personal data (namely, in particular, to defend legal claims or with your consent).

e) Right to data portability pursuant to Art. 20 GDPR

If you have provided us with your data on the basis of your consent in accordance with Art. 6 (1) (a) GDPR or within the framework of an existing contractual relationship with us in accordance with Art. 6 (1) (b) GDPR, we will make this data available to you in a common format at your request or – as far as this is technically possible – transmit it to a third party designated by you.

 

f) Right to object on personal grounds pursuant to Art. 21 GDPR You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is necessary in the performance of a task carried out in the public interest or in the exercise of official authority pursuant to Art. 6 (1) (e) GDPR or with our legitimate interest pursuant to Art. 6 (1) (f) GDPR,  to file an objection. In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of our legal claims. g) Right to object to direct marketing pursuant to Art. 21 GDPR You can also object to the processing of your personal data for advertising purposes at any time ("advertising objection"). Please note that for organisational reasons, there may be an overlap between your objection and the use of your data in the context of an ongoing campaign.

 

h) Right to withdraw consent pursuant to Art. 7 (3) GDPR

You have the right at any time to revoke your consents to us based on Art. 6 (1) (a) GDPR with effect for the future. The revocation of consent means that the data processing based on this consent no longer takes place.

i) Right of appeal pursuant to Art. 57 GDPR

If you have any questions, suggestions or criticism, please feel free to contact us. You can also file a complaint with a supervisory authority. You have the choice of approaching the supervisory authority that is locally responsible for you or for us. The contact details of the supervisory authority responsible for our company can be found at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

13. Automated decision-making including profiling

Lehnhoff Hartstahl GmbH does not carry out automated decision-making including profiling (automated analysis of personal circumstances).

14. Safety measures

Lehnhoff Hartstahl GmbH takes technical and organisational security measures to protect your personal data from loss or misuse. This means that your data is stored in a secure operating environment that is not accessible to the public.

If you wish to contact Lehnhoff Hartstahl GmbH by e-mail, we would like to point out that the confidentiality of the information transmitted is not guaranteed. The content of e-mails can be viewed by third parties – similar to postcards. We therefore recommend that you send us confidential information only by post.

15. Changes to this Privacy Policy

The rapid technological development of the Internet and the changes in the law in the area of data protection make it necessary for us to adapt our Privacy Policy from time to time to the new requirements. Therefore, please note the current data protection information. This data protection information is as of 20.10.2025.