Privacy Policy

DOWNLOAD PDF

I. General information

The following declaration is intended to inform you about what kind of personal data is collected by us as the data controller and for what purpose, and to what extent this data is made accessible to third parties.

1. Data controller and data protection officer

Gebrüder Lödige Maschinenbau GmbH
Elsener Straße 7 - 9
33102 Paderborn, Germany
Phone: +49 (52 51) 309-0
Fax: +49 (52 51) 309-123
Email: info(at)loedige.de

Managing director: Maximilian Hoyer
Commercial register: HRB 29
District Court Paderborn
 

Data protection officer
Carola Sieling
Technologiewerft GmbH c/o Kanzlei Sieling
Gurlittstraße 24
20099 Hamburg, Germany
Phone: +49 (40) 41923921
Email: info(at)kanzlei-sieling.de

 

2. Legal basis for processing your personal data

The processing of personal data requires a legal basis, which we would like to present to you below.

Point (a) of Art. 6(1) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data for which we obtain the consent of the data subject.

If we process personal data for the purpose of executing a contract of which the affected person is a party, point (b) of Art. 6(1) GDPR serves as the legal basis. This also applies to processing required for pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, point (c) of Art. 6(1) GDPR serves as the legal basis.

If processing is required to maintain a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the affected person do not override the aforementioned interest, point (f) of Art. 6(1) GDPR serves as the legal basis for processing. The legitimate interest of our company lies in the execution of our business activities and in analysing, optimising and maintaining the security of our web presence.

3. Rights of the data subject

You have the right to request information about the personal data we have saved related to your person. In particular, you can request information about the purposes of processing, the category of personal data, the category of recipients to which the data has been or is being disclosed, the planned storage period, the origin of the data, provided it was not collected by us, and the existence of automated decision-making including profiling, as well as meaningful information about the details thereof, if applicable.

In accordance with the statutory provisions, you also have the right to rectification of incorrect data, restriction of processing, data portability and erasure of your personal data. Should you wish to make use of these rights, please send us an e-mail with the subject "Data protection". 

You also have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that the processing of your personal data violates the statutory provisions.

You can object at any time to the processing of personal data concerning you by us for reasons arising from your particular situation if processing is carried out on the basis of point (e) or (f) of Art. 6(1); this also applies to any profiling based on these provisions (Art. 21 GDPR). If the legal requirements are met, we will then no longer process your personal data.

In the context of direct marketing, you have the right to object at any time to processing of your personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
Your objection means that your personal data will no longer be processed for these purposes. 

If you have given your consent, you have the right to withdraw your consent at any time. This does not affect the legitimacy of data processing performed up to that point based on your consent. 

We do not currently make use of automated decision-making, including profiling.

If you make use of one of the aforementioned rights as a data subject, we will process the personal data collected about you in this context to respond to your request. Your personal data is processed to comply with a legal obligation.

Should you object to processing, we will not continue to process your personal data, unless we can prove compelling legitimate grounds for processing this data that override your interests, rights and freedoms, or your personal data is intended to establish, exercise or defend legal claims.

4. Storage duration for personal data

Unless we have provided storage information for a specific section, the following applies: We store personal data for the duration of the respective statutory retention period or as long as the purpose of data collection exists. 

After the retention period has expired, the data is routinely deleted unless it is required for the initiation or fulfilment of a contract.

If the user's data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted as far as possible.

Accordingly, the data will be blocked where possible and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons.

II. Contractual processing

When you enter into a contractual relationship with us, we generally collect the following data: Title, first and last name, e-mail address, address, phone/mobile phone number, information necessary for the execution of the contract.

We require this data so that we can identify you as a contractual partner, fulfil the contract, contact you and for invoicing purposes. Data processing is carried out in response to your / our enquiry or order and is necessary for the purposes mentioned for the mutual fulfilment and obligation arising from the contractual relationship.

We may also process data on the basis of a legitimate interest, e.g. in the assertion of or defence against claims arising from the contractual relationship. The personal data collected will be stored until the end of the contractual relationship and then deleted, unless we are obligated to store it for a longer period of time in accordance with legal obligations due to tax and commercial law retention and documentation obligations (based on German commercial code HGB, criminal code StGB or fiscal code AO).

III. Job application data

You can apply to us electronically, e.g. by e-mail, among other options. We process the data that you have sent us in connection with your application in order to check your suitability for the position and to carry out the application process. Please note that your data will be accessible to our HR department and the relevant departments for the position to be filled. We would like to consider all applications on the basis of qualifications only, regardless of race, ethnic origin, sex or gender, religion or ideology, disability, age or sexual identity. We would therefore like to ask you to refrain from including such information in your application if possible. The legal basis for the processing of your personal data in application processes is § 26 BDSG (German data protection regulation) or point (b) of Art. 6(1) GDPR. According to these, processing of data is permitted if it is required to decide whether to establish an employment relationship. Should the data be required for legal action after completion of the application process, data processing may be carried out on the basis of the requirements of point (f) of Art. 6(1) GDPR, to safeguard legitimate interests. Our interest in that case lies in the assertion or defence of claims. 

In the event of rejection, applicant data will be deleted after 6 months at the latest. In the event that you have consented to further storage of your personal data, we will transfer your data to our applicant pool. The data will be deleted from there after two years. If you have been accepted for a position as part of the application process, the data will be stored permanently for the purpose of establishing the employment relationship. You can change or delete your application at any time and revoke any consent you may have given at any time.
 

IV. Data processing in the context of the website

1. Log files, hosting

In the server statistics, data transmitted to us by your browser is automatically stored as part of our legitimate interest of analysis and for security reasons (this data is referred to as "log files").

In detail, this includes the following data:

As a rule, we cannot link this data to specific individuals. This data is not collated with other data sources. Moreover, the data is deleted within 7 days after a statistical analysis. Data whose further retention is required as evidence is excluded from deletion until the relevant incident has been fully settled.

We make use of hosting services. These serve to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services in order to maintain the operation of this web presence. 

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this website on the basis of our legitimate interests in the efficient and secure provision of this web presence.

2. Getting in contact

When you contact us by e-mail or via a contact form, your details will be stored by us in order to answer your questions.

Your data will not be passed on to third parties unless applicable data protection regulations justify a transfer or we are legally obligated to do so. 

You are free to revoke your granted consent at any time with respect to future activity.

Should you revoke your consent, your data will be deleted immediately, unless there is a legal exception for further processing. 

Otherwise your data will be deleted once we have processed your enquiry or the purpose of storage no longer applies, provided there are no other legal exceptions to the contrary. 

3. Cookies

Cookies are small text files that are stored on your computer and through which certain information is provided to the party that sets the cookie. They are used to make the website more user-friendly and effective and/or to make it easier for you to navigate our website. 

We only set cookies with your consent, unless they are absolutely necessary. You can revoke this consent at any time for future activities. 

Consent is voluntary and you can also use our website without accepting cookies. You can also configure your browser settings according to your wishes and, for example, refuse to accept third party cookies or all cookies or delete cookies that have already been saved. If you do not accept cookies, please note that our website may not function correctly. Unless we provide additional information on the individual topics mentioned in this privacy policy or in the cookie banner, the lifetime of cookies is 24 months.

You can find out which function on our website sets cookies in the individual function descriptions in our privacy policy and in the cookie banner.
 

V. Newsletter and information for interested parties

1. Newsletter

If you wish to receive the newsletter offered on our website, we require a valid e-mail address from you, permitting us to verify whether or not you are the owner of the e-mail address given and that the owner agrees to receive the newsletter. 

After you have entered your e-mail address, we will send you a confirmation e-mail to the address provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm this within 24 hours, your data relating to receiving the newsletter will be deleted automatically.

If you confirm your wish to receive the newsletter, we will store your e-mail address until you unsubscribe from the newsletter. 

The newsletter is sent via Hubspot (Hubspot Inc. 25 First Street, Cambridge, MA 02141 USA). You can view their privacy policy here: https://legal.hubspot.com/de/privacy-policy

(for Hubspot, see also the "Transfer of data" section). 

Your personal data will not otherwise be transferred to third parties.

You can revoke your consent to the storage of data and your e-mail address, and to their use for mailing the newsletter at any time. You will find a link to unsubscribe from the newsletter at the bottom of each newsletter. If a user has only registered for the newsletter and then unsubscribes, their personal data will be deleted.

2. Information for existing customers

If you, as our contractual partner, have concluded a contract for our services, we will offer you further information about our own similar services via the e-mail address provided when the contract was concluded (§ 7 III UWG - German Law Against Unfair Competition). 

You can object to these e-mails at any time. These e-mails are sent on the basis of our legitimate interest in advertising.

VI. Transfer of data: General information and contractual purpose

We pass on data to third parties if this is necessary for the fulfilment of the contract and / or if we are legally obligated and / or authorised to do so in individual cases. The data is typically passed on to contracted providers of services, including hosting, operation, maintenance and support of IT systems, communication systems and disposal under certain circumstances. In addition, your data may also be transmitted to postal or delivery services, our main bank, tax consultants/auditors and lawyers.

VII. Transfer of data: Tools for operation of the website and online services

In some cases, we use external service providers within the scope of your consent or our legitimate interests for analysis, optimisation and cost-effective operation of our website. 

If you have given your consent for tools that are not necessary for the operation of the website, you can have these settings changed again at any time. Our service providers are listed below.

If your data is to be used for different purposes, we will inform you in advance and only use the data if you have expressly given your consent to this in advance. 

1. Google

With your consent, we use services for which Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") is responsible to optimize our website and make its operation more cost-effective.

Google LLC is certified under the Data Privacy Framework, indicating that all possible measures have been taken to ensure compliance with European data protection law.

a. Google Analytics

Based on your consent, thiswebsite uses Google Analytics as a web analytics service. Google Analytics uses "cookies", which are text files saved on your computer that permit analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. 

We would like to point out that this website uses Google Analytics with IP anonymisation and therefore IP addresses are shortened by Google in member states within the European Union or in other contracting states of the Agreement on the European Economic Area before transmission in order to make it impossible to link these to a specific person. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. On behalf of the website operator, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. To the best of our knowledge, Google will not associate your IP address with any other data held by Google. 

You can revoke your consent at any time with effect for the future by accessing the cookie settings on our website and changing your selection there. This does not affect the legitimacy of data processing performed up to that point based on your consent.

You may refuse the use of cookies beforehand by selecting the appropriate settings in your browser, however please note that if you do this you may not be able to use the full functionality of this website. 

You can also object to the collection and storage of data by Google for the respective device at any time with effect for the future by using the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Google Analytics 4 has defined a maximum retention period of 14 months for data storage. 

The purpose and scope of the data collection and information on further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google's data privacy policy at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.
 

b. Youtube

We use the provider YouTube, a Google service, to embed videos. 

These videos are stored on www.youtube.com/ and can be played directly from our website. YouTube uses cookies for data collection and statistical data analysis. YouTube uses cookies to collect reliable video statistics, to prevent fraud and to improve user-friendliness, among other things. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Youtube on servers in the United States. Your IP address cannot be linked to you unless you have logged into YouTube or another Google service before accessing the page or are permanently logged in. If you would like to avoid this, log out of your YouTube account and your other Google accounts first.

YouTube cookies provide us with statistical values for the retrieval of individual videos embedded in the website without any reference to the specific user.

The embedded YouTube videos are used by YouTube within the scope of the permitted use that has to be accepted by all users. If you see any copyright infringement, please report this directly to YouTube. We use embedded YouTube videos in extended data protection mode. This means that YouTube does not store cookies for a user who views a website with an embedded YouTube video player but does not click on the video to start playing it. If you click on the YouTube video player, YouTube may store cookies on your computer. We would like to note that we as the provider of these sites are not notified of the content of the transmitted data or its usage by YouTube. For more information on YouTube's official privacy policy, please visit https://www.google.de/intl/de/policies/privacy/ and https://support.google.com/youtube/answer/171780?hl=de.

2. Hubspot

We use HubSpot for our online marketing activities on this website. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500. Hubspot is certified under the Data Privacy Framework, indicating that all possible measures have been taken to ensure compliance with European data protection law.

It is an integrated software solution which we use for various aspects of our online marketing. This includes: E-mail marketing (newsletters and automated mail, e.g. to provide downloads), contact management (e.g. user segmentation & CRM), landing pages and contact forms.

More information about HubSpot's privacy policy: https://legal.hubspot.com/privacy-policy

More information from HubSpot regarding EU data protection regulations: https://legal.hubspot.com/data-privacy

You can find more information about the cookies used by HubSpot here: https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser

https://knowledge.hubspot.com/account/hubspot-cookie-security-and-privacy
 

3. LinkedIn

We use the retargeting tool and conversion tracking of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn"). For this purpose, the LinkedIn Insight Tag is integrated on our website, which enables LinkedIn to collect statistical, pseudonymised data about your visit and use of our website and to provide us with corresponding aggregated statistics on this basis. The following data, among others, is usually recorded:

• LinkedIn User ID (Cookie ID) 

• IP address 

• Metadata of the website visit, such as browser type, website visited In addition, this information is used to show you interest-specific and relevant offers and recommendations after you have looked up certain services, information and offers on the website. The relevant information is stored in a cookie. If you wish to prevent this tracking, you can do so via the data protection settings in our cookie banner. In addition, this information is used to send you customised messages (InMail) via LinkedIn. If you do not wish to receive advertising via LinkedIn, you can change and revoke your consent at any time in your LinkedIn settings: https://www.linkedin.com/help/linkedin/answer/87150/linkedin-marketing-solutions-und-die-datenschutz-grundverordnung-dsgvo-?lang=de

4. CookieFirst

Our website uses the cookie consent technology of Big DatanSolutions B.V. (CookieFirst), Plantage Middenlaan 42a, 1018DH, Amsterdam, Netherlands, to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this in accordance with data protection regulations. The legal basis for this is point (c) of Art. 6(1) sentence 1 GDPR. When you enter our website, the following personal data is transmitted to Cookiefirst: Your consent(s) or the revocation of your consent(s), your IP address, information about your browser, information about your end device, time of your visit to the website.

Cookiefirst also stores a cookie in your browser in order to be able to link the consents you have given or revoked to you. The data collected in this way will be stored until you ask us to delete it, delete the Cookiefirst cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.

5. Friendly Captcha

To protect against misuse, we use the "Friendly Captcha" identification service on our website. This service is provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany. The query by Friendly Captcha is used to detect whether the entries in the website form are made by a human or the form is being abused using automated machine processing. You can avoid the corresponding data collection by not using the function. Please note that you cannot submit enquiries without using this function.

For the purpose described above, we have integrated a program code from Friendly Captcha into our website, for example for contact forms, so that the visitor's end device can establish a connection to Friendly Captcha's European servers in order for Friendly Captcha to verify that the input was made by a human. Depending on the result, we can assign security rules to requests made via our website and, for example, process or reject them. The data is used exclusively to protect against spam and bots as described above. Friendly Captcha does not set or read any cookies on the visitor's end device. IP addresses are only stored in hashed, i.e. one-way encrypted form and do not allow us or Friendly Captcha to draw any conclusions about an individual person.

VIII. Data storage outside the EU/EEA

Where indicated in the individual tool descriptions, we use tools from US third-party providers. If this is necessary for the purposes communicated, your IP address may be processed outside the European Economic Area, where a level of data protection corresponding to the European standard is not always consistently guaranteed and confirmed (e.g. by an appropriate guarantee within the meaning of Art. 46 GDPR or an adequacy decision of the European Commission). In particular, it cannot be ruled out that security authorities in a third country may gain access to your IP address without you being able to take legally effective action against this.

The IP address is transmitted to these third-party providers in accordance with point (a) of Art. 49(1) GDPR on the basis of your express consent given in the consent banner. This consent is voluntary. You are free to revoke it at any time with respect to future activity. You will not suffer any disadvantages as a result. 

In the opinion of some US third-party providers, a level of protection corresponding to the European standard is already guaranteed due to the inclusion of “standard contractual clauses” and additional measures taken in accordance with the Schrems II judgement. However, as the suitability of such measures to guarantee an adequate level of data protection is disputed, we have decided to transmit your IP address exclusively with your consent.

The certification of some companies under the Data Privacy Framework (DPF) serves to ensure an adequate level of protection and can be checked here for each company: https://www.dataprivacyframework.gov/s/. This certification is sufficient as a measure for ensuring an adequate level of data protection. 

IX. Our presence on social media

You can find us on a variety of social networks and platforms. We would like to use these websites to communicate with our customers, interested parties and users who are active there and to inform them about our services and our company in this way. 

The processing of personal data of users active on these sites is based on our legitimate interests in communication with and provision of information to users. If users have given their consent to data processing within the framework of the respective social platform, the processing is carried out on the basis of this consent. 

If you visit one of our social media sites, we are jointly responsible with the operator of the social platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, rectification, erasure, restriction of processing, data portability and complaint, see the following point "Rights of the data subject") both against us and against the operator of the respective social platform.

We would like to point out that, despite the joint responsibility, we do not have full control over the data processing operations of the social platform and will, if necessary, forward the rights request to the respective operator for better processing. Our options generally depend on the company policy of the respective provider.

You will find our information about data storage below. We have no influence on the storage period of your data that is stored by the operator of the social platform for its own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Depending on the social platform listed, user data processing may also take place outside the European Union. EU standard contractual clauses have been agreed with the US companies or they are certified under the Data Privacy Framework (DPF), indicating that we have taken every possible measure to ensure compliance with European data protection law.

As a rule, user data is processed by the platforms for market research and advertising purposes. For example, user profiles can be created from user behaviour and the user interests this behaviour shows. The usage profiles may in turn be used, for example, to show advertisements within and outside of the platforms that correspond to the users’ presumed interests. For these purposes, cookies are usually stored on the users' computers. These save the users’ usage behaviour and interests. Data can also be stored in the user profiles independently of the devices used by the users. This occurs in particular if the users are members of the respective platforms and are logged into their accounts.

For a detailed description of the respective processing and the possibilities of objection, we refer to the following linked information from the providers.

- Facebook (Meta)
(Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland)
The basis is an agreement on joint processing of personal data: https://www.facebook.com/legal/terms/page_controller_addendum
Privacy policy: https://www.facebook.com/about/privacy/
Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

- Google/ YouTube
(Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irleand)
Privacy Policy:  https://policies.google.com/privacy
Opt-out: https://adssettings.google.com/authenticated

- Instagram (Meta)
(Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland)
Privacy policy / opt-out: http://instagram.com/about/legal/privacy/

- LinkedIn
(LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out