Privacy policy

The protection and security of your personal data are very important to us. We therefore take appropriate technical and organizational measures to protect personal data to which we have access.

As the controller (hereinafter also referred to as the “controller”, “we”, “us” or “our”), we would like to inform you about the nature and scope of the processing of personal data when you visit or use our website.

This notice also contains information about your data protection rights, including a right to object to the processing of certain data by Landbell. Further information about your rights and how to exercise them can be found in the section “Your Rights”.

1. Controller (responsible legal entity)

If you have any questions about data protection, would like to exercise any of your rights (see item no. 5 below), or wish to lodge a complaint, our Data Protection Officer (DPO) will be happy to assist you at any time: datenschutz@landbell.de

2. Data Collected and Processed by Us via This Website; Purposes and Legal Bases of Processing

Only when using our website

Your visit to our website is logged. The following automatic log data transmitted to us by your browser are essentially recorded:

• the IP address currently used by your PC or router
• date and time of the request (including time zone difference to Greenwich Mean Time (GMT))
• type, version and language of the browser
• operating system of your PC
• the pages you access
• access status/HTTP status code
• name and size of the requested file(s)
• and, if applicable, the URL of the referring website

This data is collected exclusively for reasons of data security, to improve our website and for error analysis. Since, in processing your personal data for these purposes, we pursue our legitimate business interests, we may rely on Art. 6(1)(f) GDPR as the legal basis.

If you use our contact form or are registered in our contact list

Personal data (e.g., name, address or contact details) that you voluntarily provide to us, for example in the course of an inquiry by email to the contacts listed on our homepage, or that are made available to us in another way and for which you have confirmed that we may process them for specific purposes, are stored by us and processed only for correspondence with you and only for the purpose for which you provided these data.

We therefore may use your data to provide products and services you may request (pursuant to Art. 6(1)(b) GDPR). We may also process your data to respond to comments or complaints you send to us, or to send you information about products and services from us, our affiliated companies and carefully selected partners. As this is necessary for our business activities and to pursue our legitimate interests, such processing is carried out on the basis of Art. 6(1)(f) GDPR. With regard to the sending of marketing communications, you have the right to object to this processing. Further information about this right can be found below in the section “Your Rights”.

If you have given us your consent, we may process your data on the basis of Art. 6(1)(a) GDPR for direct marketing by email or telephone in connection with our relevant products and services or other products and services offered by us or our affiliated companies.

If you register on our website

You can register on our website to use additional functions on the site (e.g., to use our web portal as described above). We use the data you enter only for the purpose of using the offer or service for which you have registered. Mandatory fields in the registration form are marked with an asterisk and must be completed in full. Otherwise, we will reject the registration.

To inform you about important changes, such as the scope of the offer or technical changes, we use the email address you provided during registration. The processing of the data entered during registration is based on Art. 6(1)(f) GDPR, as the processing is necessary to pursue our legitimate business interests in providing additional services for our registered users.

Google Analytics

We use Google Analytics on our website. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Through certification under the EU–US Privacy Shield, Google guarantees that EU data protection requirements are also complied with when data are processed in the USA.

The Google Analytics service is used to analyze user behavior on our website. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.

Usage- and user-related information, such as IP address, location, time or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. This function shortens the IP address already within the EU or the EEA.

Google states that it does not associate your IP address with other data and provides further information as well as opt-out options (e.g., a browser add-on for deactivation).

Google Fonts

We use Google Fonts on our website to display external fonts. This is a service provided by Google Ireland Limited (“Google”). To display certain fonts, a connection to Google servers in the USA is established when our website is accessed.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website. Google may process, among other things, the IP address and the referrer URL of the request. Google provides information on data protection and opt-out options.

Google reCAPTCHA

We use Google reCAPTCHA on our website to verify and prevent interactions on our website by automated access (bots). The service provider is Google Ireland Limited (“Google”).

Based on your use, Google can determine from which website a request is sent and from which IP address the reCAPTCHA input box is used. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security of our website and the prevention of automated access.

Google AdWords with Conversion Tracking

We use Google AdWords with conversion tracking. If you click on a Google ad, a conversion cookie is stored on your device (valid for 30 days). This allows Google and us to evaluate that you reached our website via an ad.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website. You can prevent or delete cookies in your browser; Google provides further information and opt-out options.

Google Remarketing / “Similar Audiences”

We use Google’s remarketing or “similar audiences” function to display interest-based, personalized advertising on third-party websites within the Google advertising network. For this purpose, Google stores a cookie containing a numerical sequence on your device that records your visit in anonymized form.

The legal basis is Art. 6(1)(f) GDPR. You can permanently deactivate the function via a browser plugin or opt-out pages. Google may use cross-device marketing if you have enabled this in your Google account.

3. Cookies

We use so-called cookies on our website. Cookies are small text files stored by the browser on your computer. Their use makes the website more user-friendly (e.g., recognition during a session). Cookies do not cause any damage and are generally deleted at the end of the session unless they are permanent cookies.

Further information on the cookies used, legal bases and deactivation options can be found in our Cookie Policy.

4. Recipients of Personal Data

Your personal data are exchanged with other companies within the Landbell Group insofar as this is necessary to answer your inquiry or to provide the service you requested. In addition, data are transferred to third parties only if this is necessary to perform a contract and/or its technical processing (e.g., hosting, website maintenance, newsletter distribution).

In the case of subcontracting, we ensure that your data are handled in accordance with the GDPR. This also applies to transfers to countries outside the EU, provided that appropriate safeguards exist (standard contractual clauses, Privacy Shield certification or binding internal data protection rules).

5. Your Rights

In accordance with Articles 15–21 GDPR, you may assert the following rights if the legal requirements are met:

5.1 Right of Access (Art. 15 GDPR)

You have the right to obtain information about the personal data processed by us and to receive a copy of your personal data stored by us.

5.2 Right to Rectification (Art. 16 GDPR)

You may request the rectification of incorrect personal data or the completion of incomplete personal data.

5.3 Right to Erasure (Art. 17 GDPR)

You may request the erasure of your personal data, in particular if:

• the data are no longer necessary for the purposes,
• you withdraw your consent,
• you object and there are no overriding grounds,
• the data have been processed unlawfully.

The right to erasure does not apply if processing is necessary for the establishment, exercise or defense of legal claims or if statutory retention obligations prevent deletion.

5.4 Right to Restriction of Processing (Art. 18 GDPR)

You may request restriction of processing, for example if:

• you contest the accuracy of the data,
• processing is unlawful and you request restriction instead of erasure,
• we no longer need the data but you require them for legal claims,
• you have objected and the balancing of interests is still pending.

5.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive data you have provided to us in a structured, commonly used and machine-readable format, or to have them transmitted to another controller, provided that processing is based on consent or a contract and is carried out by automated means.

5.6 Right to Object (Art. 21 GDPR)

For reasons arising from your particular situation, you may object at any time to processing based on Art. 6(1)(e) or (f) GDPR. If processing is carried out for direct marketing on the basis of legitimate interests, you may object at any time without giving reasons; your data will then no longer be processed for this purpose.

5.7 Right to Withdraw Consent (Art. 7(3) GDPR)

You may withdraw any consent you have given at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. Further processing may, where applicable, be based on another legal basis.

5.8 Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

If you receive no response or an unsatisfactory response, or if you suspect a GDPR violation, you may lodge a complaint with a supervisory authority.

Please direct questions regarding data protection and the exercise of your rights to: dataprivacy@landbellgroup.com

6. Standard Periods for Data Deletion

6.1 General Deletion

Unless statutory retention requirements apply, data are deleted or destroyed once they are no longer required for the purposes of processing. Retention periods may arise from tax, commercial or limitation regulations.

6.2 Registration Data

Registration data are stored for as long as you remain registered and are deleted 3 years after the end of the respective calendar year.

6.3 Marketing and Consent Data

Data for marketing purposes or processed on the basis of consent are processed until you withdraw your consent, plus a short follow-up period. Objections are documented so they can be observed in the future.

6.4 Security Data

Personal data processed to ensure website security are retained for 12 months.

Personal data processed in connection with the fulfillment of a contract are retained in accordance with the statutory retention periods.

7. Changes to This Privacy Policy

We reserve the right to amend this privacy policy from time to time in order to adapt it to the applicable circumstances. Please review this notice regularly to stay up to date. Where required by law, we will inform you of material changes.

This privacy policy was last updated on 20 August 2020.