With the following privacy policy, we would like to inform you about how we process your personal data in accordance with the European Data Protection Regulation (GDPR). This privacy policy applies to all processing of personal data carried out by us, in the context of the provision of our websites such as our social media profiles (hereinafter collectively referred to as "online offer".
The following data protection provisions apply exclusively to the Internet pages of the website: http://www.lautvonleise.de.
The controller within the meaning of the General Data Protection Regulation and other national data protection laws as well as other data protection regulations is the:
laut von leise GmbH
Brunnstraße 7
80331 München
Deutschland
Tel.: +49 89 125 010 60
Email: hello@lautvonleise.de
Website: http://www.lautvonleise.de
You can reach our data protection officers as follows:
secjur GmbH
Steinhöft 9
20459 Hamburg
Telefon:+49 40 228 599 520
E-Mail: dsb@secjur.com
You can contact our data protection officer directly at any time with all questions and suggestions regarding data protection and the exercise of your rights.
This privacy policy is based on the terminology of the GDPR. For your convenience, we would like to explain some important terms in this context in more detail:
Personal Data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Data subject is any identified or identifiable natural person whose personal data are processed by the controller.
Processing: means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
Third Party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
If you use this website for purely informational purposes without otherwise transmitting data to us (e.g., by registering or using the contact form), we collect via server log files technically necessary data that are automatically transmitted to our server, including:
Date and time of access
IP address
Host name of the accessing computer
Website from which the website was accessed; websites accessed via the website
Visited page on our website; Amount of data transferred
Information about the browser type and version used
Operating system
Access status (e.g., whether the web page could be accessed without problems or whether you received an error message)
Use of website functions
Entered search terms
Access frequency of the individual web page
Data volume transferred
Other websites that you visit starting from this website, either by clicking on a link on this website or by directly entering the domain in the input bar in the same window of your browser
The temporary storage of data is necessary for the course of a website visit in order to display our website to you. This processing is technically necessary to ensure the functionality of the website and the security of the information technology systems. The legal basis of the processing is thus Art. 6 para. 1 p. 1 lit. f GDPR, in order to guarantee the provision, security and stability of our website.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the provision of the website, this is the case when the respective session has ended. The log files are stored maximum up to 24 hours directly and exclusively accessible to administrators. After that, they are only indirectly available via the reconstruction of backup tapes and are finally deleted after maximum four weeks.
To provide our online services, we use the service provider Webflow Inc, 398 11th St Ste 2, San Francisco, CA 94103, which rents or otherwise uses the services of the server provider Amazon Web Services, Inc. 410 Terry Avenue North, Seattle, WA 98109-5210 (web host). The personal data is transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45 (3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the USA that are certified accordingly are permitted. Both Webflow Inc. and Amazon Web Services Inc. are certified under the EU-U.S. Data Privacy Framework. For more information and a copy of the security, please contact our Data Protection Officer.
When you visit our website or a sub-website for the first time and it contains cookies, you will be shown a "cookie banner". There you will be informed about the individual cookies that we use. You can find out about each individual cookie with regard to the name, the provider, the purpose of the processing and the storage period.
With our cookie banner, we informyou about the cookies we specifically use. In addition, we give you the opportunity to decide whether you want to consent to the setting of cookies that are not necessary. Processed are:
Usage data (e.g., web pages visited, time of access)
Meta and communication data (e.g., IP address)
The legal basis for the use of the cookie banner is Art. 6(1) s. 1 lit. f GDPR. We have an overriding legitimate interest in using the cookie banner, which allows us to obtain the legally required consent for the use of cookies that are not necessary and to comply with our duty to provide information regarding cookies.
The cookie banner stores the preferences until you reset or customize them.
The cookie banner is provided via the provider CookieYes. The personal data is thereby transferred to the UK.There is an adequacy decision of theCommission pursuant to Art. 45(3) GDPR.
We use Google Analytics to analyze the use of our website and to optimize them and our advertising measures. Google provides us Google Analytics and processes the data on our behalf. Google has contractually agreed to guarantee the security and confidentiality of the data.
The following data is recorded during your visit to the website
Pages viewed
Orders, including sales and products ordered
The achievement of "website goals" (e.g. contact requests and newsletter registrations)
Your behavior on the pages (e.g. length of stay, clicks, scrolling behavior)
Your approximate location (country and city)
Your IP address (in abbreviated form, so that no clear assignment is possible)
Technical information such as browser, internet provider, end device and screen resolution
Source of origin of your visit (i.e. via which website or advertising medium you came to us)
Personal data such as name, address or contact details are not transmitted to Google Analytics.
Google Analytics stores cookies in your web browser for two years since your last visit.These cookies contain a randomly generated user ID to recognize you on future visits to the website.The data collected is stored together with the randomly generated user ID in order to create pseudonymous user profiles.
This user data is automatically deleted after 14 months. Other data remains stored in aggregated form indefinitely.
If you wish to prevent the collection of your data, you can install the browser add-on to deactivate Google Analytics or reject the cookies via our cookie settings dialog.
The personal data will also be transferred to the U.S.. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations located in the U.S. that are certified accordingly are permitted. Google is certified under the EU-U.S. Data Privacy Framework.
We use Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and enables us to control the precise integration of services on our website.
This allows us to flexibly integrate additional services to evaluate user access to our website.
The use of Google Tag Manager is based on our legitimate interest, i.e. interest in the optimization of our services in accordance with Art. 6(1) s. 1 lit. f. GDPR.
The specific storage period of the processed data cannot be influenced by us but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: Google| Privacy Policy
The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the USA that are certified accordingly are permitted. Google is certified under the EU-U.S. Data Privacy Framework.
We use Google Fonts on our website to display external fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis is your consent in accordance with Art. 6(1) s. 1 lit. a GDPR.
To enable the displayof certain fonts on our website, a connection to the Google server is established when our website is accessed. This allows Google to determine from which website your request has been sent and to which IP address the display ofthe font is to be transmitted. Further information can be found in Google'sprivacy policy: Google| Privacy Policy
The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45 (3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the USA that are certified accordingly are permitted. Google is certified under the EU-U.S. Data Privacy Framework.
We embed videos on our website in order to play them directly on our website. For this purpose, we use plugins of the video platform provider Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, New York 10001, USA (Vimeo).
Vimeo sets cookies on websites that collect your personal data and analyze your user behavior. The data is passed directly to Vimeo via the cookies. Vimeo automatically collects certain types of data in the process, regardless of whether you have an account. This data includes your IP address, technical information about your device (e.g., browser type, operating system, basic device information), the website you visited or search query you entered before arriving at our website, and your activities.
The legal basis for this use is, according to Art. 6(1) s.1 lit. a GDPR, the voluntary and revocable consent given by you. You can revoke your consent at any time with effect for the future by making the appropriate changes or adjustments in your cookie settings.
The personal data is transferred to the US. An adequacy decision of the Commission pursuant to Art. 45(3) GDPR is not available. To ensure an adequate level of data protection at the recipient of your personal data, we have concluded standard contractual clauses (SCCs) of the European Commission with this for the protection of personal data in accordance with Art. 46(1), (2) lit. c GDPR.
We maintain publicly accessible profiles on various social networks. Your visit to these profiles initiates a variety of data processing activities. In the following, we provide you with an overview of which of your personal data is collected, used and stored by us when you visit our profiles.
When you visit our profiles, your personal data is collected, used and stored not only by us, but also by the operators of the respective social network. This happens even if you do not have a profile in the respective social network. The individual data processing operations and their scope differ depending on the operator of the respective social network and they are not necessarily traceable for us. For details about the collection and storage of your personal data and about the type, scope and purpose of their use by the operator of the respective social network, please refer to the following statements.
When you visit our Facebook/ Instagram profile, certain information about you is processed. We can only view the information stored in your public Facebook/Instagram profile (such as your profile picture or information you share on a Facebook profile or on a public Instagram profile), and only if you have such a profile and are logged into it while visiting our Facebook/Instagram page.
In addition, the operator of the platform, Meta Platforms Ireland Limited, Serpentine Avenue, Block J, Dublin 4 Ireland (Meta), provides us with anonymized statistics and insights for our Facebook/Instagram page, which help us gain insights into the types of actions people take on our page (Page Insights). These Page Insights are created based on certain information about people who have visited our page.
The processing of your personal data in connection with the operation of our Facebook/Instagram profile is carried out on the basis of a balance of interests pursuant to Art. 6(1), s. 1 lit. f GDPR in order to offer you a timely and supportive information and interaction option with and about us. Furthermore, the processing serves our legitimate interest to evaluate the types of actions taken on our Facebook/Instagram profile and to improve our profile based on these findings. The legal basis for this processing is therefore Art. 6(1) s. 1 lit. f GDPR. If the contact aims at the conclusion of a contract, the legal basis for the processing is Art. 6(1) s. lit. b GDPR.
Processing of Page Insights is carried out by Meta and us as joint controllers. We cannot attribute the information obtained via Page Insights to individual Facebook/Instagram profiles that interact with our Facebook/Instagram profile. We have entered into a joint controller agreement with Meta, which sets out the allocation of data protection obligations between us and Meta. Details about the processing of personal data to create Page Insights and the agreement entered into between us and Meta are available here. In relation to this data processing, you have the option of asserting your data subject rights (see "Your rights as a data subject") against Meta as well. Further information on this can be found in Meta's Privacy Policy. Meta offers the possibility to object to data processing; you can find information on this and opt-out options here in your account.
Please note that according to the meta data protection regulations, user data is also processed in the U.S. or other third countries. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations located in the U.S. that are certified accordingly are permitted. Meta is certified under the EU-U.S. Data Privacy Framework.
When you visit our LinkedIn company profile, certain information about you is processed. In the case of direct messages to us or comments on our LinkedIn company profile or under our posts, we receive the message, the comments and your username.
In addition, the operator of the platform, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (LinkedIn), processes personal data when you visit our LinkedIn company profile, follow this page or engage with the page, to provide us with statistics and insights in anonymized form. This provides us with insights into the types of actions that people take on our site (Page Insights). For this purpose, LinkedIn processes in particular such data that you have already provided to LinkedIn via the information in your profile, such as data on function, country, industry, seniority, company size and employment status. In addition, LinkedIn will process information about how you interact with our LinkedIn company profile, such as whether you are a follower of our LinkedIn company profile. With the page insights, LinkedIn does not provide us with any personal data about you. We only have access to the aggregated Page Insights. It is also not possible for us to draw conclusions about individual members using the information in the Page Insights.
The processing of your personal data in connection with the operation of our LinkedIn company profile is carried out on the basis of a balancing of interests pursuant to Art. 6(1) s. 1 lit. f GDPR in order to offer you an up-to-date and supportive information and interaction option with and about us. The processing serves our legitimate interest to evaluate the types of actions taken on our LinkedIn company profile and to improve our company profile based on these findings.
This processing of personal data in the context of Page Insights is carried out by LinkedIn and us as joint controllers. We have reached an agreement with LinkedIn on processing as joint controllers, which specifies the distribution of data protection obligations between us and LinkedIn. The agreement is available here. Accordingly, the following applies:
LinkedIn and we have agreed that LinkedIn is responsible for exercising your rights under the GDPR. You can contact LinkedIn to do so online via the following link (https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de) or reach LinkedIn via the contact details in the Privacy Policy. You can contact the Data Protection Officer at LinkedIn via the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO. You may also contact us at our provided contact details to exercise your rights in connection with the processing of personal data in the context of the Page Insights. In such a case, we will forward your request to LinkedIn.
LinkedIn and we have agreed that the Irish Data Protection Commission is the lead supervisory authority overseeing processing for Page Insights. You always have the right to lodge a complaint with the Irish Data Protection Commission (see at www.dataprotection.ie) or any other supervisory authority.
In addition, LinkedIn processes your data as a user for the provision of services, communication, further development of services and research as well as for purposes of advertising, customer support, analysis and security. LinkedIn is the sole controller for the processing of personal data when visiting our LinkedIn company profile. The categories of personal data that LinkedIn processes in this context are described in LinkedIn's data policy. Further information about the processing of personal data by LinkedIn can be found here .
Please note that in accordance with the LinkedIn Privacy Policy, personal data may also be processed by LinkedIn in the U.S. or other third countries.
In the course of our processing of personal data, personal data may be transferred to or disclosed to other recipients. Recipients of this personal data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements that serve to protect your personal data with the recipients of your personal data.
The personal data processed by us will be deleted in accordance with the legal requirements as soon as your consents permitted for processing are revoked or other permissions cease to apply (e.g., if the purpose of processing this data has ceased to apply or it is not required for the purpose). If the personal data are not deleted because they are required for other and legally permissible purposes, their processing will be limited to these purposes. That is, the personal data is blocked and not processed for other purposes. This applies, for example, to personal data that must be retained for reasons of commercial or tax law or whose storage is necessary for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person.
As far as our privacy policy contains further information on the retention and deletion of personal data, thse have priority for the respective processing activities.
As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Art. 15 to 21 GDPR. If you wish to exercise any of your rights, please contact us via the contact addresses provided above or our data protection officer.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)lit. e or lit. f GDPR; this also applies to profiling based on these provisions. If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
You have the right to request confirmation as to whether personal data in question is being processed and to information about this personal data, as well as further information and a copy of the personal data in accordance with the legal requirements.
In accordance with the legal requirements, you have the right to request that the personal concerning you be completed or that incorrect personal data concerning you be corrected.
You have the right to demand that personal data concerning you be deleted immediately if one of the reasons provided for by law applies and insofar as the processing or storage is not necessary.
You have the right to demand that we restrict processing if one of the legal requirements is met.
You have the right to receive personal data concerning you, which you have provided to us, in a structured, common and machine-readable format in accordance with the legal requirements, or to request that it be transferred to another controller.
You have the right to revoke anyconsent you have given at any time.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the requirements of the GDPR.
We adapt the privacy policy as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g., consent) or other individual notification.
If we continue to develop our website and our offerings or if legal or regulatory requirements change, it may be necessary to amend this privacy policy. You can access the current privacy policy at any time here.
Status: 01/2024