Privacy
This privacy policy contains information concerning the scope of the processing of your personal data (hereinafter only “data”).
1. Controller
2. Data processing
3. Integration of external content
4. Duration of data storage
5. Modifications of this privacy policy
6. Information obligations
1. Controller
Confiserie Burg Lauenstein GmbHThomas Luger/ Maximilian Kaub Managing Directors
Lauensteiner Strasse 41
96337 Ludwigsstadt
Phone: 09263 / 945 - 0
Fax: 09263 / 945 – 45
E-Mail: info@lauensteiner.de
2. Data processing
Click here to edit your cookie settingsWe process data as part of the operation of our website. The processing of data also includes disclosure by transfer. An adequacy decision issued by the EU Commission, the EU-US Privacy Shield, governs data transfers to the USA. In this decision, the Commission certifies that the safeguards for transfers of data to the USA based on the EU-US Privacy Shield are equivalent to data protection standards in the EU. Whenever we transfer data to the USA, we have indicated our service providers’ participation in the EU-US Privacy Shield. Details of the concerned data in each case, processing purposes, legal grounds, recipients and transfers to third countries are shown below:
a) Log file
We record your visit to our websites and process the following data at this time: Name of the accessed website, date and time of access, the amount of data transferred, the browser type and release together with the operating system you are using, the referrer URL (the previously visited website), your IP address and the requesting provider. These data are necessary to ensure the security of the website.We process the data in pursuit of our legitimate interests in accordance with point (f) of Art. 6(1) GDPR. The log file is erased after seven days unless it is needed to clarify or prove specific legal violations that have become known within the retention period.
b) Hosting
All data that are processed during operation of this website are saved as part of the hosting function. The operation of the website would otherwise not be possible. We process the data in pursuit of our legitimate interests in accordance with point (f) of Art. 6(1) GDPR. We use the services of web hosting providers to whom we transfer the above-mentioned data for the provision of our online site.c) Contact information
If and when you contact us, your data (name, any contact details that you provide) and your message will be processed solely and exclusively for the purpose of processing and responding to your query. We process these data in accordance with point (b) or point (f) of Art. 6(1) GDPR for the purpose of responding to your query.Use of data when you subscribe to the email newsletter
We offer you the opportunity to subscribe to our newsletter on our websites/in our applications. To ensure that no mistakes were made when you entered your email address, we use the so-called double opt-in procedure (DOI procedure). After you have entered your email address in the registration form and given your consent to the receipt of our newsletter, we will send a confirmation link to the address you have provided. Your email address will not be added to our distribution list for our newsletter until you click on this confirmation link. The legal grounds for this data processing are found in point (a) of Article 6(1) GDPR.Right to withdraw consent
You may withdraw your consent at any time by clicking on the unsubscribe option at the end of every newsletter.
d)Job applications
If you contact us because you wish to submit a job application (e.g. by email or using a contact form), your data (e.g. name, email address, any desired place of employment you have specified), your message and the submitted application documents will be processed solely and exclusively for the purpose of processing and responding to your application query. The legal grounds for this data processing are found in section 26 Federal Data Protection Act (reform) [Bundesdatenschutzgesetz (neu); BDSG] and point (b) of Art. 6(1) GDPR. The application data will be erased two months after conclusion of the application period, but no later than six months after receipt of the application. If an employment relationship is established, the data are transferred to the personnel file. The legal grounds for this are also found in point (b) of Art. 6(1) GDPR.e) Customer account
When you open a customer account, you consent to the storage of your master data (name, address, email address, bank account information) and your user data (user name, password). This information allows us to identify you as our customer and authorises you to manage your orders. Your data is processed on the basis of your consent pursuant to point (a) of Art. 6(1) GDPR.f) Purchase processing
We process your order data for the performance of the purchase contract. The data are processed pursuant to point (b) of Art. 6(1) GDPR. We transfer your address data to the company engaged to perform the shipment. Insofar as necessary for the performance of the contract, we will also transfer your email address or your telephone number to the company engaged to perform the shipment so that it can contact you and coordinate the delivery date (notification). We transfer your transaction data (name, date of order, payment method, shipment and/or receipt date, amount and payment recipient, bank account information or credit card details as appropriate) to the payment service provider engaged to process the payment.g) Creditworthiness check
We will send your name and address to a credit agency, which will check this information against its own database to verify your creditworthiness. The credit agency then transfers the related creditworthiness information to us. If a purchase is made against invoice, we process this data on the basis of our legitimate interests pursuant to point (f) of Art. 6(1) GDPR because we make advance payments for the shipment of products and bear the risk of default. In all other cases, your data is processed solely and exclusively because you have given your consent pursuant to point (a) of Art. 6(1) GDPR.h) Website analysis and marketing
We use so-called cookies so that the use of certain functions is possible. Cookies are small data packets that are stored on your device and exchanged with other providers. Some of the cookies we use are erased immediately when you close your browser (so-called session cookies). Other cookies remain on your device so that we or our partner companies recognise your browser when you come back for another visit (persistent cookies). You can erase all cookies stored on your device and set the commonly used browsers to prevent cookies from being stored. In this case, you may have to restore certain settings every time you visit this website and accept the possible impairment of some functions. We use cookies for the performance of the following functionalities:Google Tag Manager
This website uses Google Tag Manager. The Tag Manager does not collect any personal data. The tool triggers other tags that may in turn collect data. Google Tag Manager does not access these data. If settings have been deactivated at the domain or cookie level, they remain effective for all tracking tags implemented with Google Tag Manager. You can find Google's privacy policy for this tool here: https://www.google.de/tagmanager/use-policy.htmlGoogle Analytics
We use Google Analytics, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google uses certain cookies for this service. The information about your use of the website generated by the cookie (including your IP address) is transferred to a Google server in the USA and stored there. We use the stored information to evaluate your activities on the website, to compile reports about these website activities for the website operator and to perform further services related to the use of the website. We process the data thus obtained pursuant to our legitimate interest in the optimal marketing of our online offering in accordance with point (f) of Art. 6(1) GDPR. Under no circumstances will Google associate your IP address with other Google data. We would like to point out that this website uses Google Analytics with the extension “anonymizeIp()”, which causes IP addresses to be truncated before they are transferred to a server in the USA. A direct personal attribution of the stored data is generally precluded. The complete IP address is transferred to a Google server in the USA and truncated there solely in exceptional cases. You can object to the collection of data at any time with effect for the future by using the Google Analytics browser deactivation add-on at https://tools.google.com/dlpage/gaoptout?hl=de.Please also note the information on Google’s use of data in the Google Partner Network at: https://www.google.com/intl/de/policies/privacy/partners/
Google is certified at:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further information on data protection can be found at:
https://policies.google.com/privacy?hl=de&gl=de
Use of Google Invisible ReCAPTCHA
We use the Invisible reCAPTCHA service of Google Inc. (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.This serves to distinguish input by a human being from that by an automated machine process. In the background, Google collects and analyses use data that are used by Invisible reCAPTCHA to distinguish regular users from bots. Your input is transferred to Google and used there for the service. In addition, the IP address and any other data required by Google for the Invisible reCAPTCHA service are transferred to Google. These data are processed by Google within the European Union and, under certain circumstances, in the USA. Google has obtained certification in accordance with the US-EU data protection agreement “Privacy Shield” and has committed to comply with European data protection rules. The processing is based on point (f) of Art. 6(1) GDPR and derived from our legitimate interest in protecting our website from automated spying, abuse and spam. You can find more information about Google reCAPTCHA and the associated privacy policy https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy
Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing, which we use to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). For this purpose, Google places a cookie in the browser of your device that automatically enables interest-based advertising based on the sites you visit by using a pseudonym cookie ID. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with point (f) of Art. 6(1) GDPR. Any more extensive data processing takes place solely insofar as you have given to Google your consent for Google to link your internet and app browser history to your Google account and to use information from your Google account to personalise advertisements that you view on the web. If you are logged in to Google while visiting the pages of our website, Google uses your data in combination with Google Analytics data to create and define target group lists for remarketing across various devices. At this time, Google temporarily links your personal data with Google Analytics data to create target groups. You can permanently deactivate the placement of cookies for advertising preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/Alternatively, you will find information about the placement of cookies and settings at the internet address www.aboutads.info of the Digital Advertising Alliance. Finally, you can make the appropriate settings in your browser so that you will be notified whenever cookies are placed on the device and decide on a case-by-case basis whether to accept them, to accept them for specific cases or to preclude their placement as a general rule. If cookies are not accepted, the functionality of our website may be restricted. Google LLC, domiciled in the USA, is certified in accordance with the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.
Further information and the data protection regulations regarding advertising and Google can be viewed here:
http://www.google.com/policies/technologies/ads/
Use of Facebook Remarketing
We use the "Custom Audiences" remarketing function of Facebook, Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA; “Facebook”) on our website. The purpose of this function is to provide to website visitors interest-based advertising on the social network Facebook.This is why the Facebook Remarketing Tag has been implemented on the website. This tag creates a direct connection to the Facebook servers during visits to the website. Information about the sites you have visited is transferred via this connection to the Facebook servers. Facebook attributes this information to your personal Facebook user account. When you visit the social network Facebook, you will be shown personalised, interest-based Facebook ads. The data are processed pursuant to point (f) of Art. 6(1) GDPR in pursuit of the legitimate interest in the above-mentioned purpose.
You have the right to object to this processing of your personal data based on point (f) of Art. 6(1) GDPR at any time for reasons concerning your individual situation.
You can do so by deactivating the “Custom Audiences” remarketing function here. For more information on the collection and use of data by Facebook, your rights in this regard and your options for the protection of your privacy, please refer to Facebook’s privacy policy at https://www.facebook.com/about/privacy/.
Bing Universal Event Tracking (UET)
Data are collected and stored on our website using Bing Ads technologies and used for the creation of profiles using pseudonyms. This is a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052–6399, USA. This service allows us to track users’ activity on our website when they have been directed to our website via ads from Bing Ads. If you access our website from such an advertisement, a cookie is placed on your computer. A Bing UET tag has been integrated on our website. This is a code that, in conjunction with the cookie, stores some non-personal data about the use of the website. The data include, among other things, the length of time spent on the website, what areas of the website were accessed and the advertisement from which the users were directed to the website. Information about your identity is not collected. The collected information is transferred to Microsoft servers in the USA and stored there for a maximum of 180 days. You can prevent the collection of the data related to the use of the website that are generated by the cookie and the processing of any such data by disabling the placement of cookies. This may restrict the functionality of the website under certain circumstances. Furthermore, Microsoft may be able to track your use patterns across multiple electronic devices by means of cross-device tracking, which enables Microsoft to display personalised advertising on or within Microsoft websites and apps. You can disable this function at http://choice.microsoft.com/de-de/opt-out . For more information about Bing’s analytics services, please visit the Bing Ads website (https://help.bingads.microsoft.com/#apex/3/de/53056/2).You will find more information about privacy at Microsoft and Bing in Microsoft’s privacy statement (https://privacy.microsoft.com/de-de/privacystatement)
Awin
Confiserie Lauenstein processes your personal data for the conduct of an affiliate marketing campaign. It enables us to track any third-party website, app or other technologies that have referred potential customers to our websites and apps (“referrers”) so that we can pay them a commission in return for those referrals. We do so in pursuit of our legitimate interest in conducting an online advertising campaign that is remunerated according to performance. We cooperate with AWIN AG (Awin), which is helping us to realise this affiliate marketing campaign. You will find the Awin privacy policy here. The site contains information about data processing by Awin and your rights in this regard.In some cases, Awin may maintain a restricted profile that is attributed to you. However, the profile does not reveal your identity, your online activities or other personal characteristics. The sole purpose of this profile is to track whether an action was started on one device and subsequently transferred to another device for completion.
In some cases, Awin and the referrer of the potential customer may receive and process your personal data for the conduct of our joint affiliate marketing campaign.
Likewise, we receive personal data of potential customers from Awin and the referrers, which can be classified in the following categories: cookie data, data relating to the website, app or technology from which a potential customer was referred to us and technical information about the device you are using or an ID specifically assigned to your transaction that Awin can attribute to the aforementioned data in its system.
3. Integration of external content
We use external dynamic content to optimise the presentation and offering of our website. When you visit the website, a request is automatically submitted to the server of the pertinent content provider by an API, at which time certain log data (e.g. the user’s IP address) are transferred. The dynamic content is then transferred to our website and displayed there. We use external content during performance of the following functionalities.Seal of approval
The Trusted Shops Trustbadge has been integrated on this website so that our Trusted Shops seal of approval and the Trusted Shops products can be displayed to buyers after they have placed an order. The Trustbadge and the services advertised using it are a service of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. When you view the Trustbadge, your IP address, the date and time of the view, the volume of data transferred and the requesting provider (access data) are transferred to the Trusted Shops servers. These access data are not analysed and are automatically overwritten no later than seven days after the end of your visit to the site. The data are transferred in pursuit of our legitimate interest in the best possible marketing of our offering in accordance with point (f) of Art. 6(1) GDPR.No other personal data will be transferred to Trusted Shops unless you decide to use Trusted Shops products after completing an order or have already registered to use them. These cases are governed by the contractual agreement between you and Trusted Shops. We use certain cookies that store your IP address for the analysis of user behaviour on our websites and the optimisation of our online offering, but also for the personalisation of content and advertisements.
4. Duration of data storage
We store personal data solely for as long as necessary to achieve the purposes for which they are processed or until you have withdrawn any consent you have previously given. Insofar as statutory retention obligations must be observed, the archiving period for certain data can be as long as ten years irrespective of the processing purposes.Your rights as a data subject
a) Access
Upon request, you will receive free of charge and at any time information about all personal data we have stored about you.b) Rectification, erasure, restriction of processing (blocking), objection
If you no longer agree to the storage of your personal data or if these data have become incorrect, we will instruct the erasure or blocking of your data or their rectification as necessary (insofar as this is possible under the applicable law) according to your instructions. The above provision applies if you wish our future processing of the data to be restricted.c) Data portability
Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another controller if you wish.d) Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority (https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html).e) Right to withdraw consent with effect for the future
You may withdraw your consent, effective for the future, at any time. Your withdrawal of consent is without prejudice to the lawfulness of the processing prior to the time of withdrawal.f) Restrictions
Data for which we are unable to identify the data subject (e.g. if it has been anonymised for analysis purposes) are not covered by the above rights. Access, erasure, blocking, rectification or transfer to another company of these data may be possible if you provide us with additional information that enables us to identify you.g) Exercise of your rights as a data subject
If you have any questions regarding the processing of your personal data, if you wish to obtain information, rectify, block, object to or erase data or if you wish to have your data transferred to another company, please contact info@lauensteiner.de.5. Modifications of this privacy policy
We reserve the right to modify our privacy policy if necessary because of new technologies. Please be sure you have the latest version. If fundamental changes are made to this privacy policy, we will announce them on our website.All interested parties and visitors to our website can contact us concerning data protection issues at:
Mr. Gerald Lill
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Phone.: 0941 2986930
Fax: 0941 29869316
E-Mail: info@lauensteiner.de
Internet: www.projekt29.de
If our data protection officer is unable to respond to your request to your satisfaction, you have the right in all cases to lodge a complaint with the data protection supervisory authority competent for your federal state.
6. Information obligations pursuant to Art. 13 GDPR
We place a high priority on the protection of your personal data.Privacy policy as accessible text file: IT DSGVO Verpflichtungserklaerung Artikel 13 P
Privacy policy as a PDF file: IT DSGVO Verpflichtungserklaerung Artikel 13 P
Update
Status: 06.09.2021