Data protection

We at LMT GmbH are very pleased about your interest in our website and our services. The protection of personal data is a particularly high priority for us. At the same time, the Internet is another way for us to address potential customers and to inspire them with enthusiasm for our products in line with our business model.

We are aware of our responsibility in handling sensitive data and would like to inform you on this page about the collection of personal data that may be associated with the use of our website and about the rights of affected persons in this context. You will find a definition of the terms used in part below.

We process your personal data only for the purposes stated in this privacy policy. Your personal data will not be transferred to third parties for purposes other than those mentioned. We will only pass on your personal data to third parties if:

• you have given your express consent,
• the processing is necessary for the execution of a contract with you,
• the processing is necessary for the fulfilment of a legal obligation,

the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.

I Name and address of the controller

The person responsible for the information provided in connection with the use of our website, www.lmtgmbh.de, its sub-pages and the social media appearances linked to it in the sense of the DSGVO, other data protection laws applicable to us as well as other regulations of a data protection nature:

Leuchten + Metall Technik GmbH
Dieselstraße 5
91161 Hilpoltstein
Phone: 09174 47 97 0
Managing partners: Michael Otterpohl
Register court Nuremberg HRB 6709

II Collection and storage of personal data in connection with visits to our website, type and purpose of use

1 General information

LMT GmbH collects, stores or processes data only for the exercise of its own business purposes.

In principle, our website is available to all users without the collection of personal data. However, selected areas and/or information require registration on our website.

Personal data is only requested, processed and used to the extent necessary to provide the services requested by you or to make content available.

2 Security

We only deal with personal data as far as this is possible in accordance with data protection regulations. We also take all necessary technical and organizational security measures to protect your personal data adequately from unauthorized access and misuse at all times.

If personal data is transmitted to us via our website, we use numerous secure technologies, in particular the so-called “Transport Layer Security” transmission (TSL) or the “Secure Socket Layer” transmission (SSL). All information and data transmitted using these secure methods is encrypted before it is sent to us.

3 Collection of general data and information

Our website collects a number of general data and information with every visit. This general data and information is stored in the log files of the server. The following can be recorded

• used browser types and versions,
• the operating system,
• the domain name of your Internet Service Provider
• other similar data and information which serve to avert danger in the event of attacks on our information technology systems.

When using this general data and information, we do not draw any conclusions about the person concerned. Rather, this information is required to

(1) to deliver the contents of our website correctly
(2) to optimise the contents of our website and the advertising for it,
(3) to ensure the permanent functionality of our information technology systems and the technology of our website and
(4) to provide law enforcement authorities with information necessary for law enforcement purposes in the event of a cyber attack.

This is exclusively information which does not allow any conclusions to be drawn about your person. Furthermore, this data is also generated when accessing any other website on the Internet. It is therefore not a special function of LMT GmbH or these websites. The information collected in this way is evaluated with the aim of increasing data protection and data security in our company, in order to ultimately ensure an optimum level of protection for the personal data processed by us.

4 Registration on our website

Leuchten + Metall Technik GmbH directs its offer primarily to business customers (B2B).

In principle, however, all main and sub-pages of www.lmtgmbh.de are freely accessible to users. However, some areas on the product pages are only visible to registered and logged in users. This serves primarily to protect business secrets.

Please understand that we therefore only allow selected users access to all our information. Selected users include persons who are already customers of LMT GmbH or who potentially support the business purposes of LMT GmbH.

For this reason, every registration is first checked and then confirmed by a responsible administrator. If a responsible administrator decides not to grant the user access to sensitive data, the personal data will be deleted. The user will then receive an automatic e-mail informing him/her of the decision. LMT GmbH will not contact the user again on its own initiative after this.

Affected persons have the possibility to register on our website product.lmtgmbh.de by providing personal data. The following information is required for the registration process:

General information

• Username
• First name
• Last name

Company specific information

• the name of the company for which the person concerned works
• Address of the company for which the person concerned works
• Postcode of the company for which the person concerned works
• City in which the company has its headquarters
• Country in which the company has its registered office
• E-mail (business)
• Phone (business)

When registering on our website, the IP address assigned by the Internet service provider (ISP) of the system used by the person concerned, the date and time of registration are also stored. This data is stored in order to prevent the misuse of our services and, if necessary, to enable us to investigate criminal offences that have been committed. To this extent, the storage of this data is necessary to protect the person responsible for processing. The registration of the data subject under voluntary disclosure of personal data serves the purpose of offering the data subject content or services which, due to the nature of the matter, can only be offered to registered users.

5 Cookies

Our Internet pages use cookies. Cookies are text files which are filed and stored on a computer system via an Internet browser.

Numerous internet pages and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identification of the cookie. It consists of a string of characters which can be used to assign Internet pages and servers to the specific Internet browser in which the cookie was stored. This enables the Internet pages and servers visited to distinguish the individual browser of the person concerned from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified by means of the unique cookie ID.

By using cookies, LMT GmbH can provide users of this website with more user-friendly services that would not be possible without the setting of cookies.

By means of a cookie, the information and offers on our website can be optimised in the interest of the user. As already mentioned, cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website, e.g. to load the website more quickly.

The person concerned can prevent the setting of cookies by our website at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If the person concerned deactivates the setting of cookies in the Internet browser used, it is possible that not all functions of our website can be used to their full extent.

6 Subscription to a newsletter

On our website, users are given the opportunity to subscribe to the LMT GmbH newsletter. The following data is collected:

• e-mail address
• First name
• Last name

We collect this data in order to send interested parties interesting information via newsletter at regular intervals. These newsletters can only be received by the person concerned if

• the person concerned has a valid e-mail address, and
• the person concerned has registered to receive the newsletter

For legal reasons, a confirmation e-mail is sent to the e-mail address first entered by a person concerned for the newsletter. This confirmation mail is used to check whether the owner of the e-mail address has authorized the receipt of the newsletter as the person concerned.

The personal data collected during registration for the newsletter is used exclusively for sending the newsletter. Furthermore, subscribers to the newsletter can be informed by e-mail if this is necessary for the operation of the newsletter service or for registration, as might be the case if there are changes to the newsletter offer or if technical conditions change.

LMT GmbH uses an e-mail service provider based in Germany for sending the newsletter. This service provider undertakes, within the framework of the legal provisions, to act as a processor on behalf of the customer, but not to process the data in any way whatsoever and not to pass them on to third parties.

The subscription to the newsletter can be cancelled by the person concerned at any time. The consent to the storage of personal data, which the person concerned has given us (exclusively) for the purpose of sending the newsletter, can be revoked at any time. For the purpose of revoking the consent, a corresponding link is included in every newsletter. It is also possible to unsubscribe at any time by sending an e-mail to info(at)lmtgmbh(dot)de.

7 Newsletter Tracking

The newsletters of LMT GmbH, which are sent via the above-mentioned order processor, contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. The embedded pixel-code enables LMT GmbH to recognise whether and when an e-mail was opened by a person concerned and which links in the e-mail were called up by the person concerned.

Such personal data collected via the pixel-code contained in the newsletters is stored by the processor on its platform, so that LMT GmbH can subsequently evaluate it in its account in order to optimise newsletter dispatch and to adapt the content of future newsletters even better to the interests of the person concerned. Affected persons are entitled to revoke the separate declaration of consent to the newsletter issued via the double opt-in procedure at any time. LMT GmbH automatically interprets a cancellation of receipt of the newsletter as a revocation.

The data of the opening and clicking recipients shown in the reports are presented anonymously, i.e. the collection and processing of complete IP addresses is additionally prevented.

Contact possibility via the Internet site

Our internet pages contain forms which enable a quick contact to us. The following personal data are necessary to contact us:

• Name
• E-mail address
• Company / Publisher
• Street
• City
• Postcode

The transmitted data and message will be forwarded as e-mail to the person responsible for processing and stored for the purpose of processing.

8 Supplementary data protection provisions on the use and application of Google Analytics (with anonymisation function)

The Google Analytics component (with anonymisation function) is integrated on our website. Google Analytics is a web analysis service. Web analysis is the collection, collection and evaluation of data on the behaviour of visitors to websites. Among other things, a web analysis service collects data on which website a person concerned came to a website from (so-called referrers), which sub-pages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used to optimize an internet page and for cost-benefit analysis of internet advertising.

The operating company of the Google Analytics component is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

We use the addition “_gat._anonymizeIp” for web analysis via Google Analytics. By means of this addition, the IP address of the Google system used by the person concerned is shortened and made anonymous if access to our Internet pages is from a member state of the European Union or from another state that is a signatory to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is the analysis of visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website in order to compile online reports for us which show the activities on our website and to provide further services in connection with the use of our website.

Google Analytics places a cookie on the information technology system of the person concerned. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyse the use of our website. Each time you access one of the individual pages of our website, which is operated by us and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. In the course of this technical process, Google obtains knowledge of personal data, such as the IP address of the system used by the person concerned, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission settlements.

By means of the cookie, personal information such as the access time, the location from which an access originated and the frequency of visits to our website by the person concerned is stored. Each time our website is visited, this personal data, including the IP address of the system used by the person concerned, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

The person concerned can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the person concerned. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the opportunity to object to and prevent the collection of data generated by Google Analytics and relating to the use of this website and the processing of such data by Google. For this purpose, the person concerned must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google to be an objection. If the data subject’s information technology system is deleted, formatted or reinstalled at a later date, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or another person within his or her sphere of control, the browser add-on may be reinstalled or reactivated.

Further information and Google’s applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/ and www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link https://www.google.com/intl/de_de/analytics/.

9 Data regulations on the use and application of YouTube

We have integrated components from YouTube on our website. YouTube is an Internet video portal that allows video publishers to post video clips for free and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television broadcasts, but also music videos, trailers or videos created by users themselves can be accessed via the Internet portal.

YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time the data controller calls up one of the individual pages of our website, which is operated by the data controller and on which a YouTube component (YouTube video) has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective YouTube component to download a display of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google are informed which specific subpage of our website is visited by the data subject.

If the person concerned is logged in at the same time on YouTube, YouTube recognizes which specific subpage of our website the person concerned is visiting by calling up a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned.

YouTube and Google receive information through the YouTube component that the data subject has visited our website whenever the data subject is logged on to YouTube at the same time as he or she visits our website, regardless of whether or not the data subject clicks on a YouTube video. If the data subject does not want this information to be sent to YouTube and Google, he or she can prevent it from being sent by logging out of his or her YouTube account before visiting our website.

The privacy policy published by YouTube, which is available at https://www.google.de/intl/de/policies/privacy/, provides information about the collection, processing and use of personal data by YouTube and Google.

10 Using script libraries (Google Web Fonts)

In order to display our content correctly and graphically appealing across browsers, we use script libraries and font libraries such as Google Web Fonts (https://www.google.com/webfonts/) on this website. Google Web fonts are cached in your browser to prevent multiple downloads. If your browser does not support Google Web Fonts or prevents access, content will be displayed in a default font.

Calling up script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible – although it is currently unclear whether and for what purposes – that the operators of such libraries collect data.

The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

11 Google AdWords

Our website uses Google Conversion Tracking. If you have reached our website via an advertisement placed by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad served by Google. These cookies expire after 30 days and are not personally identifiable. If the user visits certain pages on our site and the cookie hasn’t expired, we and Google can tell that the user clicked the ad and was redirected to that page. Each Google AdWords customer receives a different cookie. As a result, cookies cannot be tracked across the websites of AdWords customers. The information collected through the conversion cookie is used to compile conversion statistics for advertisers who have opted in to conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you do not wish to participate in tracking, you can refuse to accept cookies by changing your browser settings to disable automatic placement of cookies or to set your browser to block cookies from the domain “googleleadservices.com”.

Please note that you may not delete the opt-out cookies unless you wish to record measurement data. If you have deleted all your cookies in your browser, you have to set the respective opt-out cookie again.

12 Use of Google Remarketing and Double Click

This website uses the remarketing feature of Google Inc. to deliver interest-based ads to website visitors within the Google advertising network. A so-called “cookie” is stored in the visitor’s browser, which makes it possible to recognize the visitor when he or she visits websites that belong to the Google advertising network. On these pages the visitor may be presented with advertisements relating to content that the visitor has previously viewed on websites that use Google’s remarketing function.

For this purpose, Google uses the so-called “DoubleClick” cookie, among other things. This is the same cookie that is used on websites on which advertising programs of the Google subsidiary DoubleClick are running. No advertising from third parties is placed on our pages. The DoubleClick cookie is only used here for remarketing purposes.

According to its own statements, Google does not collect any personal data during this process. If you still do not wish to use Google’s remarketing function, you can deactivate it by making the appropriate settings at http://www.google.com/settings/ads. Alternatively, you can disable the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.

13 Using the Facebook pixel

We use the Facebook tracking pixel on our websites to provide users with the best possible experience when using the website. This is a service of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland as part of the social network Facebook. When using the pixel we send the following data to the USA: IP address.
If you do not wish the Facebook Pixel to accompany your activities, you can generally prevent the use of cookies in any of your browsers, as we describe in paragraph 5, Cookies.

III Collection and processing of personal data during the application process

We collect and process the personal data of applicants for the purpose of processing the application procedure. The processing can also take place electronically. This is particularly the case if an applicant submits the relevant application documents to the data controller electronically, for example by e-mail or via a web form on the website. If the data controller concludes an employment contract with an applicant, the transmitted data is stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents are automatically deleted after notification of the rejection decision, unless deletion is contrary to any other legitimate interests of the controller. Other legitimate interests in this sense are, for example, the preservation of the possibility of providing evidence in a possible legal dispute under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, AGG).

1 Duration for which the personal data are stored

The criterion for the duration of storage of personal data is the respective legal retention period. After expiry of the period, the corresponding data is routinely deleted if and to the extent that it is no longer required for the fulfilment or initiation of a contract, or if legitimate interests of the person responsible outweigh the interest of the data subject in deletion. If this legitimate interest ceases to exist at a later point in time, these data are also routinely deleted.

2 Rights of data subjects

Affected persons have the right:

• to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, they may request information on the purposes of the processing, the category of personal data, the categories of recipients to whom their data have been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restriction of processing or opposition, the existence of a right of appeal, the origin of their data, if not collected from them, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on their request for details (we would like to point out at this point that we do not carry out profiling);
• in accordance with Art. 16 DSGVO to immediately request the correction of incorrect or incomplete personal data stored by us;
• pursuant to Art. 17 DSGVO to demand the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or even potentially defend legal claims
• pursuant to Art. 18 DSGVO, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing pursuant to Art. 21 DSGVO
• in accordance with Art. 20 DSGVO, to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party
• in accordance with Art. 7 Para. 3 DSGVO, to revoke their consent, once granted, at any time vis-à-vis us. As a result, we may no longer continue to process data based on this consent in the future and
• complain to a supervisory authority pursuant to Art. 77 DSGVO. As a rule, the supervisory authority of your usual place of residence or workplace or of our registered office is available for this purpose. In the latter case, this is the supervisory authority/ies: State Commissioner for Data Protection and Freedom of Information Bavaria, Wagmüllerstrasse 18, 80538 Munich.

3 Right of objection

If personal data are processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 letter f) DPA, the data subject has the right to object to the processing of his/her personal data in accordance with Art. 21 DPA, if there are reasons for doing so arising from his/her particular situation or if the objection is directed against direct marketing. In the latter case, the data subject has a general right of objection, which is implemented by us without indicating a specific situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to info(at)lmtgmbh(dot)de.

III Contact details of the Data Protection Officer

Leuchten + Metall Technik GmbH
Data protection officer
Dieselstraße 5
91161 Hilpoltstein
Phone: 09174 / 47 97 0
email: info(at)lmtgmbh(dot).de

IV Up-to-dateness and amendment of this privacy policy

This data protection declaration is currently valid and has the status of May 2018. Due to the further development of our website and offers above or due to changed legal or official requirements, it may become necessary to change this data protection declaration. The respective current data protection declaration can be called up and printed out at any time on the website at https://lmtgmbh.de/privacy/ and https://lmtgmbh.de/privacy.

Definitions

The data protection declaration of LMT GmbH is based on the terms used by the European legislator for directives and regulations when the basic data protection regulation (DSGVO) was issued. Our data protection declaration should be easy to read and understand for the public as well as for customers and business partners. To ensure this, we would like to explain some of the terms used in it on the basis of the legal definitions.

We use the following terms, among others, in this data protection declaration:

(a) personal data

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as ‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

(b) the person concerned

Data subject means any identified or identifiable natural person whose personal data are processed by the controller.

(c) Processing

Processing is any operation or set of operations, performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

(d) Restriction on processing

Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.

(e) Profiling

Profiling is any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, conduct, location or change of location.

f) Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without additional information, provided that this additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data is not attributed to an identified or identifiable natural person.

(g) Controller or data controller

Controller or data controller shall mean the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or by the law of the Member States, provision may be made for the controller or for the specific criteria for his or her designation in accordance with Union law or the law of the Member States.

(h) processors

Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

(h) processors

Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

(i) Recipient

The recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not it is a third party. However, authorities which may receive personal data in the course of a specific investigation, in accordance with Union or national law, shall not be considered as recipients.

(k) Consent

Consent shall mean any freely given specific and informed expression of the data subject’s will in an informed and unequivocal manner, in the form of a declaration or other unequivocal affirmative act by which the data subject signifies his or her consent to the processing of personal data relating to him or her.