Privacy
Lehmann&Voss&Co. KG is pleased that you are visiting our careers page and that you are interested in our company. We take the protection of your private data very seriously and want you to feel comfortable when visiting our website. The protection of your privacy when processing personal data is an important concern for us, which we take into account in our business processes. We process data collected when you visit our site in accordance with the GDPR. If you have any further questions about the handling of your personal data, please feel free to contact our data protection officer.
1. Responsible body
The responsible body for the collection, processing and use of your personal data is
Lehmann&Voss&Co. KG
Alsterufer 19
20354 Hamburg
If you have any questions about data protection, please do not hesitate to contact our external data protection officer:
Personal/confidential to the data protection officer
Mein-Datenschutzbeauftragter.de
Philipp Herold
Hafenstraße 1a
23568 Lübeck
Phone: +49 (0)451 160852-13
Email: philipp.herold(at)hub24.de
Web: www.mein-datenschutzbeauftragter.de
2. Provision of the website
a) If you use the website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security.
When accessing the website, the following will be logged.
The legal basis for the storage of data/log files is Art. 6 para. 1 f) GDPR.
c) Purpose of data processing
The storage in log files ensures the proper functioning of the website and also serves to improve and secure our systems. In this context, this data is not evaluated beyond that (e.g. for marketing purposes).
d) Duration of storage
The data stored by Lehmann&Voss&Co. KG will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case after six weeks at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or altered so that it is no longer possible to assign the calling client.
e) Possibility of objection and deletion
The collection of the aforementioned data is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
f) Hosting
This website is hosted by an external service provider. The personal data collected on this website is stored on the hoster's servers. We use the following hoster:
noris network AG
Thomas-Mann-Straße 16-20
90471 Nuremberg
We have concluded a data processing agreement (DPA) with the aforementioned provider. This is a contract required by data protection law that ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
3. Cookies
This website uses so-called "cookies", which serve to make the website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer system and save certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data was sent as well as information about the age of the cookie and an alphanumeric identifier.
Cookies enable our systems to recognize the user's device and make any default settings immediately available. As soon as a user accesses the platform, a cookie is transferred to the hard disk of the user's computer.
We would like to point out that some of these cookies are transferred from our server to your computer system, most of which are so-called "session cookies" (sid). "Session cookies" are characterized by the fact that they are automatically deleted from your hard drive at the end of the browser session. They are stored for a maximum of one hour and are the prerequisite for a functioning job portal.
Other cookies remain on your computer system and enable us to recognize your computer system on your next visit (so-called "persistent cookies" / cookieconsent_status). When accessing the website, the user is informed about the use of cookies and their consent to the processing of the personal data used is obtained. No personal data is stored in the cookies used. They are stored for one year. We only receive anonymized information on the basis of the cookies.
We work together with third-party services that help us to make the Internet offer and the website more interesting for you. Cookies from these partner companies (third-party providers) are therefore also stored on your hard disk when you visit the website. These are cookies that are automatically deleted after the specified time.
Of course, you can reject cookies at any time, provided your browser allows this. Please note that you may not be able to use certain functions of this website, or only to a limited extent, if your browser is set so that no cookies (from our website) are accepted. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can select the "Block third-party cookies" setting in your browser. We accept no responsibility for the use of third-party cookies.
A list of the cookies we use can be found in the table below:
4. Job newsletter
a) Description and scope of data processing
You have the option of subscribing to our job newsletter on the website. When subscribing to the newsletter, the data requested from the input mask will be transmitted to Lehmann&Voss&Co. KG. In addition, the following data will be collected during registration:
b) Legal basis for data processing
The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 a) GDPR if the user has given his consent.
c) Purpose of data processing
The collection of the user's e-mail address serves to deliver the job newsletter. The purpose of data processing is to send you suitable job offers.
d) Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active.
e) Possibility of objection and removal
The subscription to the newsletter can be terminated by the user concerned at any time. For this purpose, a corresponding link can be found in each newsletter.
5. Contact form Online application and e-mail
a) Description and scope of data processing
We provide you with a contact form on our website for easy contact. The data entered in the input mask will be transmitted to Lehmann&Voss&Co. KG and stored. In addition, the user's IP address, as well as the date and time of transmission, are stored at the time of sending. The following data will be stored in the contact form for the online application:
b) Legal basis for data processing
The legal basis for the processing of the data is Art. 6 (1) (a) GDPR if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) (f) GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
The legal basis for the processing of your personal data in the context of the application process is Section 26 (1) in conjunction with (2) of the Federal Data Protection Act (GDPR).
c) Purpose of data processing
The purpose of the processing of personal data is to process the contact and to carry out the application process. In the case of contact by e-mail, this is also the necessary legitimate interest in the processing of the data.
d) Duration of storageThe data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
In the event of a cancellation, we will delete your data as soon as a retention period of 6 months has expired. The deadline begins when the rejection is sent. If you have expressly consented to the further use of your data for a later approach regarding positions that may be of interest to you, we will continue to store your data in accordance with your consent.
If an employment relationship is established following the application process, the data will initially continue to be stored as far as necessary and permissible and then transferred to the personnel file.
e) Possibility of objection and removal
The user has the possibility to revoke his consent to the processing of personal data at any time. To this end, the User may contact the Data Controller via the contact options provided on the Website. If the user contacts Lehmann&Voss&Co. KG by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot continue.
6. Disclosure of personal data/recipients
Your data will only be passed on to affiliated companies and service partners if they work on our behalf and support Lehmann&Voss&Co. KG in the provision of their services. Your personal data is processed by commissioned service providers in the context of order processing in accordance with Art. 28 GDPR. The aforementioned service providers will only have access to such personal information as is necessary for the performance of the respective activity. These service providers are prohibited from sharing your personal information or using it for any other purpose, including but not limited to their own promotional purposes.
To the extent that external service providers come into contact with your personal data, we have taken legal, technical and organisational measures as well as regular checks to ensure that they also comply with the applicable data protection regulations.
7. Integration of third-party services
7.1 YouTube
a) Description and scope of processing
We have integrated YouTube video on our website. YouTube Video is a component of YouTube, LLC's video platform, where users can upload content, share it over the Internet, and get detailed statistics. YouTube Video allows us to integrate content from the platform into our website. YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to compile reports. If a user is registered with YouTube, LLC, YouTube Video can assign the videos played to the profile. When you access this content, you connect to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, whereby your IP address and, if applicable, browser data such as your user-agent are transmitted.
b) Purpose and legal basis
The use of the service is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
c) Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. For more information, please refer to the privacy policy for YouTube Video: https://policies.google.com/privacy.
7.2 Google Double Click
a) Type and scope of processing
We have integrated components of Google DoubleClick on our website. DoubleClick is a trademark of Google, under which special online marketing solutions are mainly marketed to advertising agencies and publishers. DoubleClick by Google transfers data to the DoubleClick server with each impression, clicks or other activity. Each of these data transfers triggers a cookie request to the data subject's browser. If the browser accepts this request, DoubleClick will place a cookie in your browser. DoubleClick uses a cookie ID, which is necessary to carry out the technical procedure. For example, the cookie ID is required to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplication. The cookie ID also allows DoubleClick to track conversions. Conversions are recorded, for example, if a user has previously been shown a DoubleClick ad and subsequently makes a purchase on the advertiser's website using the same internet browser.
A DoubleClick cookie does not contain any personally identifiable information, but may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns that you have been in contact with on other websites. As part of this service, Google becomes aware of data that is also used by Google to create commission statements. Among other things, Google can understand that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For more information and the applicable privacy policy of DoubleClick by Google, please visit https://policies.google.com/privacy.
b) Purpose and legal basis
We process your data with the help of the DoubleClick cookie for the purpose of optimising and displaying advertising on the basis of your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. The cookie is used, among other things, to serve and display user-relevant advertisements and to report on or improve advertising campaigns. Furthermore, the cookie is used to avoid multiple insertions of the same advertisement. Each time you visit one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and the billing of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, it is possible to visit our website without restriction, but not all functions may be fully available.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
c) Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, please refer to the privacy policy for Google DoubleClick: https://policies.google.com/privacy.
7.3 Google ReCAPTCHA
a) Type and scope of processing
We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service provided by Google Ireland Limited and allows us to distinguish whether a contact request originates from a natural person or is automated by means of a program. When you access this content, you connect to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the user's dwell time and mouse movements in order to distinguish automated queries from human ones. This data will be processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google reCAPTCHA.
b) Purpose and legal basis
The use of Google reCAPTCHA is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
c) Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, please refer to the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.
7.4 Google Fonts
a) Type and scope of processing
We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, you connect to Google Ireland Limited servers, whereby your IP address is transmitted.
b) Purpose and legal basis
The use of Google Fonts is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
c) Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.
7.5 Google CDN
a) Type and scope of processing
We use Google CDN to properly deliver the content on our website. Google CDN is a service provided by Google Ireland Limited, which acts as a content delivery network (CDN) on our website. A CDN helps to make content from our online offering, especially files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you connect to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data will be processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google CDN.
b) Purpose and legal basis
The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimisation of our online offer in accordance with Art. 6 (1) (f) GDPR. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
c) Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, please refer to the privacy policy for Google CDN: https://policies.google.com/privacy.
7.6 Matomo
a) Type and scope of processing
On this website, data is collected and stored for marketing and optimisation purposes using the web analysis service software Matomo (www.matomo.org). This data is used to create user profiles under a pseudonym, for which cookies (a. _pk_id.zufall & b. _pk_ses.zufall) are used. Cookies are small text files that are stored locally in the cache of the website visitor's internet browser. The cookies make it possible to recognise the internet browser.
b) Purpose and legal basis of data processing
We process your data with the help of the Matomo analysis software for the purpose of evaluating the use of individual components and content of our website on the basis of your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG.
c) Storage period
The data collected with the Matomo technology (including your anonymized IP address) will be transmitted to our server and stored for usage analysis purposes for a period of one year (_pk_id.coincidence) or one day (_pk_ses.coincidence), which serves to optimize our website. The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not combined with personal data about the bearer of the pseudonym. You can prevent the use of cookies and thus participation in tracking by selecting the appropriate settings in your browser software, but in this case you may not be able to use all the functions of this website to their full extent.
8. Information on data subject rights
Every data subject has the right to information pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to object pursuant to Art. 21 GDPR and the right to data portability pursuant to Art. 20 GDPR. With regard to the right to information and the right to erasure, the restrictions according to §§ 34 and 35 BDSG apply.
a) Information on the possibility to appeal
You also have the right to lodge a complaint with the competent data protection supervisory authority about the processing of your personal data by Lehmann&Voss&Co. KG.
b) Information on the obligation to provide personal data
There is no obligation to provide your personal data. The provision of your personal data is voluntary and, in particular, has no impact on your application process.
c) Instruction on automated decision-making and profiling
Automated decision-making, in particular an automated decision on your application, or profiling does not take place.
d) Instructions on revocation in the event of consent
You can revoke your consent to the processing of personal data at any time vis-à-vis Lehmann&Voss&Co. KG. This also applies to the revocation of declarations of consent that were given to Lehmann&Voss&Co. KG before the General Data Protection Regulation came into force, i.e. before 25 May 2018. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected by this.
e) Right in the case of data processing for the purpose of direct marketing
In accordance with Art. 21 (2) GDPR, you have the right to object to the processing of your personal data at any time. In the event that you object to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes. Please note that the objection is only effective for the future. Processing that took place before the objection is not affected.
f) Notice of the right to object in the case of a balancing of interests
Insofar as we base the processing of your personal data on a balancing of interests, you can object to the processing. If you wish to object, we will ask you to explain the reasons why we should not process your personal data as described by us. In the event of your well-founded objection, we will review the situation and will either discontinue or adapt the data processing or explain to you our compelling legitimate reasons.
9. Changes to the privacy policy
We reserve the right to amend or adapt this policy at any time in strict compliance with the applicable data protection laws and regulations.
The current status is: 20 September 2023
1. Responsible body
The responsible body for the collection, processing and use of your personal data is
Lehmann&Voss&Co. KG
Alsterufer 19
20354 Hamburg
If you have any questions about data protection, please do not hesitate to contact our external data protection officer:
Personal/confidential to the data protection officer
Mein-Datenschutzbeauftragter.de
Philipp Herold
Hafenstraße 1a
23568 Lübeck
Phone: +49 (0)451 160852-13
Email: philipp.herold(at)hub24.de
Web: www.mein-datenschutzbeauftragter.de
2. Provision of the website
a) If you use the website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security.
When accessing the website, the following will be logged.
- Browser type/version
- Operating system used
- IP address
- Date and time of the server request
The legal basis for the storage of data/log files is Art. 6 para. 1 f) GDPR.
c) Purpose of data processing
The storage in log files ensures the proper functioning of the website and also serves to improve and secure our systems. In this context, this data is not evaluated beyond that (e.g. for marketing purposes).
d) Duration of storage
The data stored by Lehmann&Voss&Co. KG will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case after six weeks at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or altered so that it is no longer possible to assign the calling client.
e) Possibility of objection and deletion
The collection of the aforementioned data is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
f) Hosting
This website is hosted by an external service provider. The personal data collected on this website is stored on the hoster's servers. We use the following hoster:
noris network AG
Thomas-Mann-Straße 16-20
90471 Nuremberg
We have concluded a data processing agreement (DPA) with the aforementioned provider. This is a contract required by data protection law that ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
3. Cookies
This website uses so-called "cookies", which serve to make the website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer system and save certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data was sent as well as information about the age of the cookie and an alphanumeric identifier.
Cookies enable our systems to recognize the user's device and make any default settings immediately available. As soon as a user accesses the platform, a cookie is transferred to the hard disk of the user's computer.
We would like to point out that some of these cookies are transferred from our server to your computer system, most of which are so-called "session cookies" (sid). "Session cookies" are characterized by the fact that they are automatically deleted from your hard drive at the end of the browser session. They are stored for a maximum of one hour and are the prerequisite for a functioning job portal.
Other cookies remain on your computer system and enable us to recognize your computer system on your next visit (so-called "persistent cookies" / cookieconsent_status). When accessing the website, the user is informed about the use of cookies and their consent to the processing of the personal data used is obtained. No personal data is stored in the cookies used. They are stored for one year. We only receive anonymized information on the basis of the cookies.
We work together with third-party services that help us to make the Internet offer and the website more interesting for you. Cookies from these partner companies (third-party providers) are therefore also stored on your hard disk when you visit the website. These are cookies that are automatically deleted after the specified time.
Of course, you can reject cookies at any time, provided your browser allows this. Please note that you may not be able to use certain functions of this website, or only to a limited extent, if your browser is set so that no cookies (from our website) are accepted. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can select the "Block third-party cookies" setting in your browser. We accept no responsibility for the use of third-party cookies.
A list of the cookies we use can be found in the table below:
4. Job newsletter
a) Description and scope of data processing
You have the option of subscribing to our job newsletter on the website. When subscribing to the newsletter, the data requested from the input mask will be transmitted to Lehmann&Voss&Co. KG. In addition, the following data will be collected during registration:
- IP address of the registrant's computer
- Date and time of registration
- Name of the website where you subscribed to our newsletter
b) Legal basis for data processing
The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 a) GDPR if the user has given his consent.
c) Purpose of data processing
The collection of the user's e-mail address serves to deliver the job newsletter. The purpose of data processing is to send you suitable job offers.
d) Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active.
e) Possibility of objection and removal
The subscription to the newsletter can be terminated by the user concerned at any time. For this purpose, a corresponding link can be found in each newsletter.
5. Contact form Online application and e-mail
a) Description and scope of data processing
We provide you with a contact form on our website for easy contact. The data entered in the input mask will be transmitted to Lehmann&Voss&Co. KG and stored. In addition, the user's IP address, as well as the date and time of transmission, are stored at the time of sending. The following data will be stored in the contact form for the online application:
- Title
- Name and surname
- Street, house number
- Zip code
- Place
- Land
- E-mail address
- Telephone number
- Date of birth
- Message
- Application
b) Legal basis for data processing
The legal basis for the processing of the data is Art. 6 (1) (a) GDPR if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) (f) GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
The legal basis for the processing of your personal data in the context of the application process is Section 26 (1) in conjunction with (2) of the Federal Data Protection Act (GDPR).
c) Purpose of data processing
The purpose of the processing of personal data is to process the contact and to carry out the application process. In the case of contact by e-mail, this is also the necessary legitimate interest in the processing of the data.
d) Duration of storageThe data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively clarified.
In the event of a cancellation, we will delete your data as soon as a retention period of 6 months has expired. The deadline begins when the rejection is sent. If you have expressly consented to the further use of your data for a later approach regarding positions that may be of interest to you, we will continue to store your data in accordance with your consent.
If an employment relationship is established following the application process, the data will initially continue to be stored as far as necessary and permissible and then transferred to the personnel file.
e) Possibility of objection and removal
The user has the possibility to revoke his consent to the processing of personal data at any time. To this end, the User may contact the Data Controller via the contact options provided on the Website. If the user contacts Lehmann&Voss&Co. KG by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot continue.
6. Disclosure of personal data/recipients
Your data will only be passed on to affiliated companies and service partners if they work on our behalf and support Lehmann&Voss&Co. KG in the provision of their services. Your personal data is processed by commissioned service providers in the context of order processing in accordance with Art. 28 GDPR. The aforementioned service providers will only have access to such personal information as is necessary for the performance of the respective activity. These service providers are prohibited from sharing your personal information or using it for any other purpose, including but not limited to their own promotional purposes.
To the extent that external service providers come into contact with your personal data, we have taken legal, technical and organisational measures as well as regular checks to ensure that they also comply with the applicable data protection regulations.
7. Integration of third-party services
7.1 YouTube
a) Description and scope of processing
We have integrated YouTube video on our website. YouTube Video is a component of YouTube, LLC's video platform, where users can upload content, share it over the Internet, and get detailed statistics. YouTube Video allows us to integrate content from the platform into our website. YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to compile reports. If a user is registered with YouTube, LLC, YouTube Video can assign the videos played to the profile. When you access this content, you connect to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, whereby your IP address and, if applicable, browser data such as your user-agent are transmitted.
b) Purpose and legal basis
The use of the service is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
c) Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. For more information, please refer to the privacy policy for YouTube Video: https://policies.google.com/privacy.
7.2 Google Double Click
a) Type and scope of processing
We have integrated components of Google DoubleClick on our website. DoubleClick is a trademark of Google, under which special online marketing solutions are mainly marketed to advertising agencies and publishers. DoubleClick by Google transfers data to the DoubleClick server with each impression, clicks or other activity. Each of these data transfers triggers a cookie request to the data subject's browser. If the browser accepts this request, DoubleClick will place a cookie in your browser. DoubleClick uses a cookie ID, which is necessary to carry out the technical procedure. For example, the cookie ID is required to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplication. The cookie ID also allows DoubleClick to track conversions. Conversions are recorded, for example, if a user has previously been shown a DoubleClick ad and subsequently makes a purchase on the advertiser's website using the same internet browser.
A DoubleClick cookie does not contain any personally identifiable information, but may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns that you have been in contact with on other websites. As part of this service, Google becomes aware of data that is also used by Google to create commission statements. Among other things, Google can understand that you have clicked on certain links on our website. In this case, your data will be passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For more information and the applicable privacy policy of DoubleClick by Google, please visit https://policies.google.com/privacy.
b) Purpose and legal basis
We process your data with the help of the DoubleClick cookie for the purpose of optimising and displaying advertising on the basis of your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. The cookie is used, among other things, to serve and display user-relevant advertisements and to report on or improve advertising campaigns. Furthermore, the cookie is used to avoid multiple insertions of the same advertisement. Each time you visit one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and the billing of commissions. There is no legal or contractual obligation to provide your data. If you do not give us your consent, it is possible to visit our website without restriction, but not all functions may be fully available.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
c) Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, please refer to the privacy policy for Google DoubleClick: https://policies.google.com/privacy.
7.3 Google ReCAPTCHA
a) Type and scope of processing
We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service provided by Google Ireland Limited and allows us to distinguish whether a contact request originates from a natural person or is automated by means of a program. When you access this content, you connect to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the user's dwell time and mouse movements in order to distinguish automated queries from human ones. This data will be processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google reCAPTCHA.
b) Purpose and legal basis
The use of Google reCAPTCHA is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
c) Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, please refer to the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.
7.4 Google Fonts
a) Type and scope of processing
We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To obtain these fonts, you connect to Google Ireland Limited servers, whereby your IP address is transmitted.
b) Purpose and legal basis
The use of Google Fonts is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
c) Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy.
7.5 Google CDN
a) Type and scope of processing
We use Google CDN to properly deliver the content on our website. Google CDN is a service provided by Google Ireland Limited, which acts as a content delivery network (CDN) on our website. A CDN helps to make content from our online offering, especially files such as graphics or scripts, available more quickly with the help of regionally or internationally distributed servers. When you access this content, you connect to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data will be processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google CDN.
b) Purpose and legal basis
The use of the Content Delivery Network is based on our legitimate interests, i.e. interest in a secure and efficient provision as well as the optimisation of our online offer in accordance with Art. 6 (1) (f) GDPR. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer of data to the USA is carried out in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The participating U.S. companies and/or their U.S. subcontractors are certified according to the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
c) Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. For more information, please refer to the privacy policy for Google CDN: https://policies.google.com/privacy.
7.6 Matomo
a) Type and scope of processing
On this website, data is collected and stored for marketing and optimisation purposes using the web analysis service software Matomo (www.matomo.org). This data is used to create user profiles under a pseudonym, for which cookies (a. _pk_id.zufall & b. _pk_ses.zufall) are used. Cookies are small text files that are stored locally in the cache of the website visitor's internet browser. The cookies make it possible to recognise the internet browser.
b) Purpose and legal basis of data processing
We process your data with the help of the Matomo analysis software for the purpose of evaluating the use of individual components and content of our website on the basis of your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TTDSG.
c) Storage period
The data collected with the Matomo technology (including your anonymized IP address) will be transmitted to our server and stored for usage analysis purposes for a period of one year (_pk_id.coincidence) or one day (_pk_ses.coincidence), which serves to optimize our website. The information generated by the cookie in the pseudonymous user profile is not used to personally identify the visitor to this website and is not combined with personal data about the bearer of the pseudonym. You can prevent the use of cookies and thus participation in tracking by selecting the appropriate settings in your browser software, but in this case you may not be able to use all the functions of this website to their full extent.
8. Information on data subject rights
Every data subject has the right to information pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to object pursuant to Art. 21 GDPR and the right to data portability pursuant to Art. 20 GDPR. With regard to the right to information and the right to erasure, the restrictions according to §§ 34 and 35 BDSG apply.
a) Information on the possibility to appeal
You also have the right to lodge a complaint with the competent data protection supervisory authority about the processing of your personal data by Lehmann&Voss&Co. KG.
b) Information on the obligation to provide personal data
There is no obligation to provide your personal data. The provision of your personal data is voluntary and, in particular, has no impact on your application process.
c) Instruction on automated decision-making and profiling
Automated decision-making, in particular an automated decision on your application, or profiling does not take place.
d) Instructions on revocation in the event of consent
You can revoke your consent to the processing of personal data at any time vis-à-vis Lehmann&Voss&Co. KG. This also applies to the revocation of declarations of consent that were given to Lehmann&Voss&Co. KG before the General Data Protection Regulation came into force, i.e. before 25 May 2018. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected by this.
e) Right in the case of data processing for the purpose of direct marketing
In accordance with Art. 21 (2) GDPR, you have the right to object to the processing of your personal data at any time. In the event that you object to processing for the purpose of direct marketing, we will no longer process your personal data for these purposes. Please note that the objection is only effective for the future. Processing that took place before the objection is not affected.
f) Notice of the right to object in the case of a balancing of interests
Insofar as we base the processing of your personal data on a balancing of interests, you can object to the processing. If you wish to object, we will ask you to explain the reasons why we should not process your personal data as described by us. In the event of your well-founded objection, we will review the situation and will either discontinue or adapt the data processing or explain to you our compelling legitimate reasons.
9. Changes to the privacy policy
We reserve the right to amend or adapt this policy at any time in strict compliance with the applicable data protection laws and regulations.
The current status is: 20 September 2023