In the following we would like to explain for you which data we collect about you and what we do with this data. We also inform you about your data protection rights and explain to whom you can turn with questions to the protection of your data.
Who we are
The body responsible for processing your data:
Lekkerland SE
Europaallee 57
50226 Frechen
Germany
Phone +49 2234 1821-0
E-Mail info(at)lekkerland.com
Executive board: Patrick Steppe (CEO) / Hilmar Hübers
If you have any questions about this data protection declaration, the processing of your data, your rights or other concerns in the area of data protection, please feel free to contact our data protection officer.
Contact details of the data protection officer:
Lekkerland SE
Data protection officer
Europaallee 57
50226 Frechen
Germany
E-mail: datenschutz@lekkerland.com
Scope
This privacy policy applies to the lekkerland.com website and its subdomains. It is aimed at visitors to our website.
On our pages, further links are offered which lead to the Internet pages of other operators to whom this data protection declaration does not apply.
The responsibility for the insertion of advertising banners, text advertisements or advertising films before or during embedded videos lies with the respective operator.
Do I have to provide my data?
When you visit our website, user data is automatically stored. Some of the data collected is necessary for the use of a website. In addition, we also process your data to protect our legitimate interests after a weighing of interests. This enables us to constantly improve the services we offer you. On the following pages you will find out the background of our interests and whether or how you can object to the use of your data or deactivate it yourself.
In order to use one of our offers or to send an inquiry, you will be asked to enter your personal data. You can decide for yourself whether you wish to make use of these offers and provide your data for this purpose. Of course, we process your data only for the purpose for which you have made your data available to us. We also offer services for which we only process your data if you have given us your consent. The granting of consent is always voluntary. Once you have given your consent, you can revoke it at any time.
Please note that if you provide information about other persons, you must have obtained their consent in advance and informed them about the purposes of the transfer – as set out in this data protection declaration.
We also ask you to share this information with those who involve you in the use of our services, such as family members or agents.
What data is processed?
I. Your visit to our website
When you visit our website, different personal data will be stored and used.
- Processed data and processing purposes:
- Service provision: In order to visit and use our website, the data provided must be collected.
- Data security: Every access to our website is stored in a log file. We collect and use this data only for data security purposes.
- Optimization of the Internet offer incl. profiling: We constantly improve our web pages, in order to offer you an optimal experience. For this purpose, our service providers collect, store and process the data about your visit within the framework of order processing. Neither we nor the commissioned service providers link your visit data with your name or any other personal information you have given us. The IP number is anonymised before it is used to generate statistics.
- Display of videos: In order to be able to use the videos included in our website, the data provided must be collected.
| Data | Service Provision | Data Security | Optimization of the Internet Service incl. Profiling | Display of Videos |
| IP number | x | x | x | |
| Name of the file retrieved | x | x | x | |
| Transferred data volume | x | x | ||
| Website viewed | x | x | ||
| Referrer URL (the previously visited website) | x | x | x | |
| User agent sent by your browser (only for mobile version or automatic voice control) | x | x | x | x |
| Session Cookie | x | x | ||
| Date and time of retrieval | x | x | ||
| IDs for identifying the advertising partner, ad, and ad medium | x | |||
| Marketing channel | x | |||
| Current time | x | |||
| Time of click | x | |||
| ID of the keyword (external search term) | x | |||
| ID of the visitor without personal reference | x | |||
| browser type
browser version Browser resolution (inner window size) browser language screen format Screen resolution incl. colour depth |
x | |||
| Cookie on/off | x | |||
| Java-Script on/off | x |
In addition, the above-mentioned data will be used for the following purposes within the scope of balancing interests (Art. 6 para. 1 lit. f DS-GVO). The interests are named below:
- Should a security incident occur in our company in which your data is affected, we are obliged to report the case to the data protection supervisory authority responsible for us (Art. 33 DS-GVO). Since it is our legitimate interest to comply with this legal obligation to report as quickly as possible, it may happen that data concerning your person is processed in the course of clarifying the corresponding security incident. The reports of these security incidents to data protection supervisory authorities do not contain any of your personal data.
- Since it is in our interest to guarantee the security of our systems, we regularly carry out security and effectiveness tests in the context of which your above-mentioned data can be processed.
- It is in our interest to retain evidence in the event of legal disputes until all relevant statutory limitation periods have expired in accordance with §§ 195ff. BGB have expired. For this purpose, we keep the corresponding data about your person in accordance with these limitation periods.
- In addition, it is in our interest to investigate suspicious cases and, in the event of a concrete criminal suspicion, to pass on relevant information to the prosecution authorities.
- Information on automated individual decisions
There are no automated individual decisions.
- Legal basis(s) for the use of your data
a) We process the data you provide for the provision of services and display of videos for the fulfilment of a contractual relationship with you, so that you can access and use our service, i.e. our website (Art. 6 para. 1 lit. b) DS-GVO).
b) In addition, we process your data in order to protect our legitimate interests (Art. 6 para. 1 lit. f) DS-GVO):
It is in our interest to be able to guarantee data security. For this purpose, the data of each visit is stored and evaluated in a log file.
It is our legitimate interest to optimise our Internet offer. For this purpose, service providers are used within the scope of order processing, cookies are set and visit data is transferred to a server of a service provider (here Google) in the USA.
- Deletion periods (or storage period)
The session cookie is automatically deleted when the browser is closed.
Technically, we need your IP number to deliver the measuring pixel. It is not used for statistical purposes and is then immediately deleted/anonymised by our service provider (see 6. Data recipient).
The data used to optimise our website including profiling will be deleted after 26 months.
We use cookies in order to distinguish your renewed visit from your first visit to our website. You can delete the cookie manually; otherwise it will be automatically deleted 26 months after your last visit to our website and then set again with a new ID on your next visit.
- Origin of the data
No data is collected from third parties.
- Cookies and other technologies (website analysis/tracking)
We use cookies in some areas of our website, e.g. to identify the preferences of visitors and to be able to design the website accordingly. This makes navigation easier and provides a high degree of user-friendliness. Cookies also help us identify especially popular areas on our website.
Cookies are small text files that are stored on the hard drive of your device. They make it possible to store information for a certain period of time and to identify your device. We use permanent cookies for better user guidance and individual performance presentation. We also use so-called session cookies, which are automatically deleted when you close your browser. You can configure your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you. Important: If you completely turn off the use of cookies, you may not be able to use certain functions of our website.
6.1. Necessary technologies
These services, technologies and cookies are necessary to ensure central functions of the portal.
6.1.1. Tag Management System
Processing in this category controls the presentation of services, technologies and cookies without storing the data collected in the context of these services. No data is collected or stored by the Tag Management System itself. The system is used for the technical implementation of your choice of privacy settings.
The following technologies and service providers are used:
- e.g. Google Tag Manager (https://policies.google.com/privacy?hl=de) and (https://support.google.com/tagmanager/answer/6102821?hl=de)
6.1.2 Technically required website technologies
Processing in this category is being used to ensure the fluent use of the website and its functions. Without them it is impossible to use functions as e.g. the compilation of products in the shopping cart.
The following technologies and service providers are used:
- our own website cookies
6.1.3 Consent Management Platform (CMP)
Processing in this category enables the user to individually control their data transfer. The Consent Management Platform is used to ask for the user’s decision, document it and transfer it to other systems.
The following technologies and service providers are used:
- e.g. Usercentrics (https://usercentrics.com/privacy-policy/)
6.2 Statistical technologies
These services, technologies and cookies are needed to understand the use of our portal by our visitors, to detect errors and to continuously improve the portal. They are used on the legal basis of Article 6(1) Sentence 1 Letter f) GDPR (the overriding legitimate interests to prevent fraud, monitor errors in website functions and to present out website content). You can object to data processing at any time with effect for the future (see No. 10.5 and 10.6 of this Privacy Policy and in the privacy settings at the bottom of the footer). The withdrawal of consent does not affect the lawfulness of the data processing carried out prior to the withdrawal of consent.
6.2.2 Website statistics and analysis
Processing in this category is used to measure the reach of our website, to understand visit paths on the website and to identify potential for optimisation.
The following technologies and service providers are used:
- e.g. Google Analytics
(http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/policies/)
You can prevent the data collection by Google Analytics by adjusting your privacy settings accordingly.
II. Contacting and other services
- Processed data and processing purposes
In the following we would like to explain the purposes for which your data will be processed if you have a request or use our services.
- Processing of enquiries: We process the data you give us when you have a question or a request. This also includes the data you enter in the contact form or send us by e-mail, for example.
- ReCAPTCHA: We use a ReCAPTCHA on our forms to ensure that a natural person uses them. The data provided will be processed.
- Map service: To help you find our office and plan your journey, we offer you a map of the Google Maps service. When used, the data provided will be processed.
| Data | Processing of enquiries | ReCAPTCHA | Map service |
| Salutation | x | ||
| Name | x | ||
| E-mail address | x | ||
| Topic | x | ||
| Message | x | ||
| Telephone number, mobile number | x | ||
| City | x | ||
| Address | x | ||
| ZIP Code | x | ||
| IP number | x | x | |
In addition, the above-mentioned data will be used for the following purposes within the scope of balancing interests (Art. 6 para. 1 lit. f DS-GVO). The interests are named below:
- Should a security incident occur in our company in which your data is affected, we are obliged to report the case to the data protection supervisory authority responsible for us (Art. 33 DS-GVO). Since it is our legitimate interest to comply with this legal obligation to report as quickly as possible, it may happen that data relating to your person is processed within the scope of clarifying the corresponding security incident. The reports of these security incidents to data protection supervisory authorities do not contain any of your personal data.
- Since it is in our interest to guarantee the security of our systems, we regularly carry out security and effectiveness tests in the context of which your above-mentioned data can be processed.
- It is in our interest to retain evidence in the event of legal disputes until all relevant statutory limitation periods have expired in accordance with §§ 195ff. BGB have expired. For this purpose, we keep the corresponding data about your person in accordance with these limitation periods.
- In addition, it is in our interest to investigate suspicious cases and, in the event of a concrete criminal suspicion, to pass on relevant information to the prosecution authorities.
- Information on automated individual decisions
There are no automated individual decisions.
- Legal bases for the use of your data
We process the data you provide under “Processing of enquiries”, “ReCAPTCHA” and “Map service” in order to fulfil the contractual relationship with you so that you can use the respective service (Art. 6 para. 1 lit. b) DS-GVO).
- Deletion periods (or storage period)
- We delete the data for processing enquiries 1 year after completion of the process.
- In order to preserve evidence, we retain data within the framework of the statutory limitation period pursuant to §§ 195ff. of the German Civil Code (BGB). BGB. The storage period of your data may exceed the duration stated above. The statutory limitation periods can be up to 30 years. The regular limitation period is 3 years.
- Origin of the data
No data is collected from third parties.
Which organisations receive your data?
The following table shows which organisations (“data recipients”) receive your data and in which cases. You can read about the specific data in the relevant chapters of this declaration. Your data will partly be passed on due to legal reporting obligations. In other cases, we use selected vicarious agents and service providers who act for us as contract processors (in accordance with Art. 28 DS-GVO) and can access your data to the extent necessary in each case. Order processors are subject to numerous contractual obligations and may in particular process your personal data only on our instructions and exclusively for the fulfilment of the orders received from us.
| Data receiver | Explanation |
| Service provider for the optimization of our internet presence | We are constantly improving our websites in order to offer you an optimal experience. For this purpose, our service providers process the data provided about your visit on our behalf. |
| Service providers for the destruction of data carriers | We use service providers for the destruction and disposal of data carriers as part of order processing. |
| IT service providers | As part of the operation of our IT infrastructure and our website, the relevant service providers may gain access to your data. We oblige our service providers to always limit the processing of your data to what is necessary for the purpose. |
| Lawyers, law enforcement agencies, public prosecutors | It is in our interest to investigate suspicious cases and, in the event of a concrete suspicion of a criminal offence against a customer, to hand over all necessary data to law enforcement agencies. |
Data recipients in non-EU countries
- On this website we use the following services of Google LLC: Google Analytics, Google Tag Manager, Google Maps and Google ReCAPTCHA. The data collected about your use of this website for the following purposes:
- Google Maps: Map service
- Google Analytics about Google Tag Manager: Optimization of the Internet offer incl. profiling. IP anonymisation has been activated on this website so that your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
- Google ReCAPTCHA: Differentiation between computers and people on forms
are usually transferred to a Google server in the USA and stored there.
- Videos from Youtube and Vimeo are embedded on this website. The above data is passed on to Youtube and Vimeo respectively when you watch one of the videos. For more information on how Youtube and Vimeo treat personal data, please refer to the privacy statements of Youtube LLC and Vimeo, LLC, respectively.
The EU Commission determines which non-EU countries have an appropriate level of data protection. The EU Commission recognizes companies in the United States that participate in the EU-US Privacy Shield as data recipients with an appropriate level of data protection. This agreement between the U.S. and the EU ensures that the data protection regulations for processing data by companies in the U.S. that are obliged to use the EU-US Privacy Shield correspond to the data protection level of the European Union. Google LLC, YouTube LLC and Vimeo, LLC have joined the EU-US Privacy Shield according to their own statements. Information about the appropriate or reasonable warranties and the possibility of obtaining a copy of them or where they are available can be obtained upon request using the contact information provided above.
Your Rights
You have the statutory right to
- Information on personal data stored about you (Art. 15 DS-GVO)
- Data transferability (Art. 20 DS-GVO)
- Correction and completion of your data available to us (Art. 16 DS-GVO)
- Cancellation (Art. 17 DS-GVO)
- Restriction of processing (Art. 18 DS-GVO)
Objection to the processing of your data to safeguard our legitimate interests or the legitimate interests of third parties (Art. 21 GDPR) – you have the right to object to such processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions in the sense of Art. 4 para. 4 GDPR.
In order to exercise these rights, you can contact us in particular at info@lekkerland.com .
If you do not want your data to be collected when you visit our website, you can read under “Cookies and Web Tracking” how to deactivate the collection.
You also have the legal right to complain to a data protection supervisory authority.