{"id":7212,"date":"2021-09-05T20:51:20","date_gmt":"2021-09-05T18:51:20","guid":{"rendered":"https:\/\/www.lubeca-marzipan.de\/privacy-policy\/"},"modified":"2023-08-20T11:21:18","modified_gmt":"2023-08-20T09:21:18","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.lubeca-marzipan.de\/en\/privacy-policy\/","title":{"rendered":"Data Protection"},"content":{"rendered":"

[vc_row row_content_width=”grid” css=”.vc_custom_1622988791780{margin-bottom: 40px !important;}”][vc_column][vc_column_text]<\/p>\n

Data Protection<\/h1>\n

[\/vc_column_text][\/vc_column][\/vc_row][vc_row row_content_width=”grid” css=”.vc_custom_1622988718321{margin-top: 30px !important;margin-bottom: 30px !important;}”][vc_column][vc_column_text]We are very pleased at your interest in our company. Data protection is of a particularly high priority for the management of L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG. It is possible to use the website of L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG without submitting any personal data. However, if a data subject wants to use our company \u2019s special services via our website, personal data processing could become necessary. If personal data processing is necessary and no legal basis for such processing exists, we will generally obtain the data subject\u2019s consent.<\/p>\n

The processing of personal data such as a data subject \u2019s name, address, e-mail address, or telephone number will always be in line with the country-specific data protection regulations applicable to L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG. By means of this privacy policy, we as a company wish to inform the public of the type, scope and purpose of the personal data we collect, use and process. Data subjects are also informed of their rights here.<\/p>\n

As the controller, L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG has implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed through this website.<\/p>\n

Nevertheless, Internet-based data transmissions may always be subject to security vulnerabilities. Thus, absolute protection cannot be guaranteed. Every data subject is therefore free to transmit personal data to us by alternative means, for example by telephone.<\/p>\n

1. Definition of terms<\/p>\n

The L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG privacy policy is based on the terms used by the European regulator when issuing the General Data Protection Regulation (GDPR).<\/p>\n

Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we wish to explain the terms used in advance.<\/p>\n

We use the following terms, among others, in this privacy policy:
\na) Personal data
\nPersonal data means any information relating to an identified or identifiable natural person
\n(referred to below as \u201cdata subject\u201d). An identifiable natural person is one who can be
\nidentified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, online identifier or to one or more factors specific to that natural person \u2019s physical, physiological, genetic, mental, economic, cultural or social identity. b) Data subject
\nData subject means any identified or identifiable natural person whose personal data is
\nprocessed by the controller. c) Processing
\nProcessing means any operation or set of operations which is carried out on personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction .<\/p>\n

d) Restriction of processing
\nRestriction of processing is the marking of stored personal data with the aim of limiting its
\nfuture processing. e) Profiling
\nProfiling is any automated personal data processing which consists in using such personal
\ndata to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to that natural person\u2019s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or change of residence . f) Pseudonymisation
\nPseudonymisation is the processing of personal data in such a way that it can no longer be
\nattributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data is not attributed to an identified or identifiable natural person .
\ng) Controller means the natural or legal person, public authority, agency or other office which
\ndetermines \u2014 alone or jointly with others \u2014 the purposes and means of the personal data processing. If the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.
\nh) Processor
\nProcessor means a natural or legal person, public authority, agency or other office which processes personal data on the controller \u2019s behalf.
\ni) Recipient
\nRecipient means a natural or legal person, public authority, agency or other office to whom personal data is disclosed, whether or not it is a third party. However, public authorities which may receive personal data in the context of a specific investigative task under Union or Member State law will not be considered recipients .
\nj) Third party
\nThird party means a natural or legal person, public authority, agency or other office other than the data subject, controller, processor and the individuals authorised to process the personal data under the controller\u2019s or the processor \u2019s direct responsibility .
\nk) Consent
\nConsent will mean any freely given specific and informed indication of the data subjects\u2019
\nwishes, in the form of a statement or other unambiguous affirmative act, by which the data subject signifies his or her agreement to the personal data processing relating to him or her.<\/p>\n

2. Controller\u2019s name and address<\/p>\n

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:<\/p>\n

L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG Albert-Einstein-Str. 64
\n23617 Stockelsdorf
\nGermany
\nPhone: +49 451 49848 0
\nE-mail: zentrale (at) lubeca-marzipan.de
\nWebsite: www.lubeca-marzipan.de<\/p>\n

3. Cookies
\nThe website of L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG uses
\ncookies. Cookies are text files which are stored on a computer system via an Internet browser. Numerous websites and servers use cookies. Many cookies contain a cookie ID. A cookie ID
\nis a unique identifier of the cookie. It consists of a string of characters by which Internet pages
\nand servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the data subject\u2019s individual browser to be distinguished from other Internet browsers that contain other cookies by the Internet pages and servers visited. A specific Internet browser may be recognised and identified via the unique cookie ID.
\nThe use of cookies allows L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG
\nto provide the users of this website with more user-friendly services that would not be possible otherwise.
\nA cookie allows the information and offerings on our website to be optimised for the user. As already mentioned, cookies enable us to recognise the users of our website. The purpose of this recognition is to facilitate use of our website by those who use it. For example, the user of a website that uses cookies does not have to re-enter his or her access data each time he or she visits the website, because this is done by the website and the cookie stored on the user\u2019s computer system. Another example is the cookie of a shopping basket in an online shop. The online shop remembers the items that a customer has placed in the virtual shopping basket by means of a cookie.
\nThe data subject can prevent the setting of cookies by our website at any time using an appropriate setting of the Internet browser he or she is using and thus object to the setting of cookies on a permanent basis. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programmes. This can be done on all
\ncommon Internet browsers. If the data subject deactivates the setting of cookies in the Internet
\nbrowser used, not all functions of our website may be fully usable.<\/p>\n

4. Collection of general data and information<\/p>\n

The website of L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG collects a series of general data and pieces of information each time a data subject or automated system accesses the website. This general data and information is stored in the server \u2019s log files. The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (referrer), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of the website being accessed, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.
\nL\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG does not draw any conclusions on the data subject when using this general data and information. Rather, this information is needed to (1) deliver the contents of our website correctly, (2) optimise the contents of our website and the advertising for these, (3) ensure the long-term operability of our information technology systems and the technology of our website, and (4) provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. Therefore, L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG analyzes anonymously collected data and information on one hand for statistical purposes and on the other hand for the purpose of increasing the data protection and data security of our company, so that we can ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files is stored separately from any personal
\ndata provided by a data subject.<\/p>\n

5. Registration on our website<\/p>\n

The data subject can register on the controller \u2019s website by providing personal data. The personal data that is transmitted to the controller in this process is stipulated on the respective input screen used for the registration. The personal data entered by the data subject is collected and stored exclusively for internal use by the controller and for its own purposes. The controller may arrange for the data to be transferred to one or more processors, for example a parcel service provider, who will also use the personal data exclusively for an internal use that is attributable to the controller.
\nBy registering on the controller \u2019s website, the IP address assigned by the data subject\u2019s
\nInternet service provider (ISP), the date as well as the time of registration are also stored. The context in which this data storage takes place is that it is the only way to prevent the misuse of our services and, if necessary, this data allows for the clarification of criminal offences committed. In this respect, the storage of this data is necessary for the data controller\u2019s protection. This data is not transferred to third parties unless there is a legal obligation to do
\nso, or doing so serves the purpose of criminal prosecution.
\nThe data subject\u2019s registration through the voluntary provision of personal data allows the controller to offer the data subject content or services which, due to their nature, can only be
\noffered to registered users. Registered users are free to modify the personal data provided during registration at any time or to have it completely erased from the controller \u2019s database. The controller will provide any data subject with information on what personal data about the data subject is stored. This information will be provided at any time upon request. Furthermore, the controller will correct or erase personal data at the data subject \u2019s request or indication, provided that this does not conflict with any statutory retention obligations. All of the controller\u2019s workforce will be available to the data subject as contact persons in this context.<\/p>\n

6. Subscription to our newsletter
\nOn the website of L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG, users
\nare given the opportunity to subscribe to our company newsletter. The personal data transmitted to the controller during subscription to the newsletter is specified on the input screen used for this purpose.
\nL\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG informs its customers and business partners of company offerings at regular intervals by means of a newsletter. Our company newsletter can only be received by the data subject if the data subject (1) has a valid e-mail address and (2) registers for newsletter distribution. For legal reasons, a confirmation
\ne-mail is sent to the e-mail address registered by a data subject for newsletter distribution for
\nthe first time using the double opt-in procedure. The purpose of this confirmation e-mail is to verify whether the owner of the e-mail address as the data subject has authorised the receipt of the newsletter. On registration for the newsletter, we also store the IP address of the computer system used by the data subject at the time of registration as assigned by the Internet service provider (ISP), as well as the date and time of registration. This data must be collected in
\norder to trace the (possible) misuse of a data subject\u2019s e-mail address at a later point in time and therefore serves as a legal safeguard for the controller. The personal data collected in the context of registration for the newsletter is used exclusively for our newsletter distribution. Furthermore, subscribers to the newsletter may be informed via e-mail if this is necessary for the operation of the newsletter service or a related registration, as could be the case in the event of changes to the newsletter offering or changes in the technical circumstances. No personal data collected as part of the newsletter service will be passed on to third parties. The data subject may cancel his or her subscription to our newsletter at any time. The consent to
\nthe storage of personal data, which the data subject granted for newsletter distribution, may be<\/p>\n

withdrawn at any time. A link for withdrawing consent is provided in each newsletter. Furthermore, the data subject may unsubscribe from newsletter distribution directly on the controller \u2019s website or inform the controller of this in another way at any time.<\/p>\n

7. Newsletter tracking
\nThe newsletters of L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG contain tracking pixels. A tracking pixel is a miniature graphic that is embedded in e-mails that are
\nsent in HTML format to enable log file recording and log file analysis. This enables a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG can see if and when an e-mail was opened and which links in the e-mail were accessed by the data subject.
\nSuch personal data collected via the tracking pixels contained in the newsletters is stored and analysed by the controller in order to optimise newsletter distribution and to better adapt the content of future newsletters to the data subject \u2019s interests. This personal data will not be disclosed to third parties. Data subjects are entitled to withdraw the separate declaration of consent given in this regard at any time using the double opt-in procedure. This personal data will be erased by the data controller following a withdrawal. Unsubscribing from the newsletter mailing list is automatically regarded as a withdrawal by L\u00fcbecker Marzipan- Fabrik v. Minden & Bruhns GmbH & Co. KG.<\/p>\n

8. Contact option via the website<\/p>\n

Based on statutory provisions, the website of L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG contains data that enables users to contact our company quickly using electronic means, as well as direct communication with us, which also includes a general electronic mail (e-mail) address. If a data subject contacts the controller via e-mail or using a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted by a data subject to the controller on a voluntary basis will be stored for processing purposes or for contacting the data subject. This personal data will not be disclosed to third parties.<\/p>\n

9. Subscription to comments on website blog
\nThe comments made on the blog of L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG can be subscribed to by third parties. In particular, a commentator may subscribe to the comments following his or her comment on a specific blog post.
\nIf a data subject decided in favour of the option to subscribe to comments, the controller will send an automatic confirmation e-mail in order to verify that the owner of the specified e-mail address has indeed decided in favour of this option in a double opt-in procedure. The option to subscribe to comments can be terminated at any time.<\/p>\n

10. Routine erasure and blocking of personal data
\nThe controller will only process and store the data subject \u2019s personal data for the period that is necessary to achieve the purpose of the storage or insofar as this has been provided for by the European regulator or other legislator in laws or regulations that are applicable to the subject.
\nIf the storage purpose ceases to apply or if a storage period prescribed by the European regulator or another competent legislator expires, the personal data will be routinely blocked or erased in accordance with the statutory provisions.<\/p>\n

11. Rights of the data subject<\/p>\n

(a) Right to be informed
\nEvery data subject will have the right, granted by the European regulator, to be informed by
\nthe controller as to whether personal data concerning him or her is being processed. If a data subject wishes to exercise this right to be informed, he or she may contact any employee of the controller at any time.<\/p>\n

(b) Right to access
\nAny individual affected by the personal data processing will have the right, granted by the European regulator, to obtain from the controller access to, and a copy of, personal data relating to him or her which has been stored, at any time, free of charge. Furthermore, the European regulator has granted the data subject access to the following information:
\nthe processing purposes
\nthe categories of personal data processed
\nthe recipients or categories of recipients to whom the personal data has been or will be
\ndisclosed, particularly in the case of recipients in third countries or international organisations if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this period
\nthe existence of a right to rectify or erase the personal data concerning him or her or to have the processing restricted by the controller or to object to such processing
\nthe existence of a right of appeal to a supervisory authority if the personal data is not collected from the data subject:
\nany available information on the origin of the data, the existence of automated decision-
\nmaking, including profiling, pursuant to Article 22(1) and (4) GDPR and, at least in these cases, concrete information on the logic involved and the scope and intended effects of such processing for the data subject
\nFurthermore, the data subject will have a right to access information on whether personal data has been transferred to a third country or to an international organisation.
\nIn this case, the data subject will also have the right to access information on the appropriate safeguards in relation to the transfer.
\nIf a data subject wishes to exercise this right of access, he or she may contact an employee of the controller at any time.<\/p>\n

c) Right to rectification
\nAny individual affected by the personal data processing will have the right, granted by the
\nEuropean regulator, to obtain the rectification of inaccurate personal data relating to him or her without delay. Furthermore, the data subject has the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking the purposes of the processing into account.
\nIf a data subject wishes to exercise this right of rectification, he or she may contact any
\nemployee of the controller at any time.<\/p>\n

(d) Right to erasure (right to be forgotten)
\nAny individual affected by the personal data processing has the right, granted by the European
\nregulator, to obtain from the controller the erasure of personal data concerning him or her without delay, insofar as one of the following grounds applies and processing is no longer necessary:
\nThe personal data was collected or otherwise processed for purposes for which it is no longer necessary.
\nThe data subject withdraws the consent on which the processing was based pursuant to Art.<\/p>\n

6(1)(a) or Art. 9(2)(a) GDPR and no other legal basis for the processing exists.
\nThe data subject objects to the processing pursuant to Article 21(1) GDPR and no overriding
\nlegitimate grounds for the processing exist, or the data subject objects to the processing pursuant to Article 21(2) GDPR.
\nThe personal data has been processed unlawfully.
\nThe erasure of the personal data is necessary for compliance with a legal obligation under
\nUnion or Member State law which is applicable to the controller.
\nThe personal data was collected in relation to information society services offered pursuant to
\nArticle 8(1) GDPR.
\nIf one of the aforementioned reasons applies, and a data subject wishes to arrange for the
\nerasure of personal data stored by L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG, he or she may contact any employee of the controller at any time. The employee of L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG will arrange for the erasure request to be complied with immediately.
\nIf the personal data has been made public by L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns
\nGmbH & Co. KG and if our company, as the controller, is obligated to erase the personal data pursuant to Art. 17(1) GDPR, L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG will implement appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers processing the published personal data that the data subject has requested the erasure of all links to the personal data or to copies or replications of the personal data from those other data controllers, unless the processing is necessary. The employee of L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG will arrange what is necessary in individual cases.<\/p>\n

(e) Right to restrict processing
\nAny individual affected by the personal data processing has the right, granted by the European regulator, to obtain the restriction of processing from the controller if one of the following
\nconditions is met:
\nthe accuracy of the personal data is contested by the data subject for a period which enables
\nthe controller to verify the accuracy of the personal data.
\nThe processing is unlawful, the data subject objects to the erasure of the personal data and instead requests the restriction of the use of the personal data.
\nThe controller no longer requires the personal data for the purposes of the processing, but the data subject needs it for the assertion, exercising or defence of legal claims.
\nThe data subject has objected to the processing pursuant to Article 21(1) GDPR and it is not yet clear whether the controller\u2019s legitimate grounds override those of the data subject.
\nIf one of the aforementioned conditions is met, and a data subject wishes to request the
\nrestriction of personal data stored by L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH
\n& Co. KG, he or she may contact any employee of the controller at any time. The employee
\nof L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG will arrange the restriction of the processing.<\/p>\n

f) Right to data portability
\nAny data subject who is affected by the personal data processing will have the right, granted
\nby the European regulator, to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format . The data subject will also have the right to transmit such data to another controller without hindrance from the controller to whom the personal data has been provided, insofar as the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task that is carried out in<\/p>\n

the public interest or as part of the exercising of official authority vested in the controller. Furthermore, when exercising the right to data portability pursuant to Article 20(1) GDPR, the data subject will have the right to obtain the direct transfer of personal data from one
\ncontroller to another controller where technically feasible and provided that this does not adversely affect other individuals \u2019 rights and freedoms.
\nThe data subject may contact any employee of L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG in order to assert the right to data portability at any time.<\/p>\n

g) Right to object
\nAny individual affected by the personal data processing will have the right, granted by the European regulator, to object to the personal data processing concerning him or her which is carried out based on Article 6(1)(e) or (f) GDPR on grounds relating to his or her particular situation at any time. This also applies to profiling based on these provisions.
\nIn the event of an objection, L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co.
\nKG will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing which override the data subjects\u2019 interests, rights and freedoms, or the processing serves the purpose of the assertion, exercising or defence of legal claims.
\nIf L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG processes personal data for direct marketing purposes, the data subject will have the right to object to the processing of personal data for such marketing at any time.
\nThis also applies to profiling, insofar as it is related to such direct marketing. If the data subject informs L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG of its
\nobjection to the processing for direct marketing purposes, L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG will no longer process the personal data for these purposes.
\nIn addition, the data subject has the right to object, on grounds relating to his or her particular situation, to the personal data processing concerning him or her which is carried out by
\nL\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
\nIn order to exercise the right to object, the data subject may contact any employee of
\nL\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG or another employee
\ndirectly. The data subject is also free to exercise his or her right to object by means of automated procedures using technical specifications in connection with the use of information society services, notwithstanding Directive 2002\/58\/EC.<\/p>\n

(h) Automated decisions on a case-by-case basis, including profiling
\nEvery data subject affected by the personal data processing will have the right, granted by the
\nEuropean regulator, not to be subject to a decision based solely on automated processing,
\nincluding profiling, which produces legal effects concerning him or her or significantly affects him or her in a similar way, provided that the decision is (1) not necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) permissible under Union or Member State law applicable to the controller and such law stipulates appropriate measures to safeguard the data subject\u2019s rights and freedoms and legitimate interests, or (3) made with the data subject\u2019s explicit consent.
\nIf the decision is (1) necessary for the entry into or the performance of a contract between the
\ndata subject and the data controller, or (2) made with the data subject\u2019s explicit consent, L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG will implement suitable measures to safeguard the data subject\u2019s rights and freedoms and legitimate interests, which include at least the controller\u2019s right to obtain the intervention of an individual, to express his or her point of view and to contest the decision.<\/p>\n

If the data subject wishes to exercise the rights concerning automated decisions, he or she may contact any employee of the controller at any time.<\/p>\n

i) Right to withdraw consent under data protection law
\nAny individual affected by the personal data processing has the right, granted by the European regulator, to withdraw consent to the personal data processing at any time.
\nIf the data subject wishes to exercise the right to withdraw consent, he or she may contact any
\nemployee of the controller at any time.<\/p>\n

12. Data protection for applications and in the application procedure<\/p>\n

The controller collects and processes the personal data of applicants for the purpose of handling the application procedure. The processing may also be carried out by electronic means. This is the case, in particular, when an applicant submits relevant application documents to the controller by electronic means, for example via e-mail or via an online application form located on the website. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of handling the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents are
\nautomatically erased two months after the notification of the rejection decision, provided that such erasure does not conflict with any other legitimate interests of the controller. Another legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).<\/p>\n

13. Data protection provisions on the use and application of Facebook<\/p>\n

The controller has integrated components of Facebook into this website. Facebook is a social network.
\nA social network is a social meeting point operated on the Internet, an online community that usually allows users to communicate and interact with each other in virtual space. A social network can serve as a platform for exchanging opinions and experiences or enables the Internet community to provide personal or company-related information. Facebook allows its users to create private profiles, upload photos and network via friend requests, among other things.
\nFacebook \u2019s operating company is Facebook, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the personal data controller is
\nFacebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
\nEach time one of the individual pages of this website, which is operated by the data controller
\nand comprises an integrated Facebook component (Facebook plug-in), is accessed, the Internet browser on the data subject\u2019s device is automatically triggered by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins is accessible via https:\/\/developers.facebook.com\/docs\/plugins\/?locale=en_US . Within the scope of this technical procedure, Facebook receives information on which specific sub-page of our
\nwebsite the data subject is visiting.
\nIf the data subject is logged in to Facebook at the same time, Facebook recognises which
\nspecific sub-page of our website he or she is visiting each time he or she accesses our website and for the entire duration of his or her stay on our website. This information is collected by the Facebook component and assigned by Facebook to the data subject\u2019s respective Facebook account. If the data subject activates one of the Facebook buttons integrated into our website, for example the \u201cLike\u201d button, or posts a comment, Facebook assigns this information to the<\/p>\n

data subject\u2019s personal Facebook user account and stores this personal data.
\nFacebook is always notified via the Facebook component that the data subject has visited our
\nwebsite if he or she is logged into Facebook at the same time\u037e this takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject does no want this information to be transmitted to Facebook, he or she may prevent its transmission
\nby logging out of his or her Facebook account before accessing our website. The data policy published by Facebook, which can be accessed at https:\/\/www.facebook.com\/privacy\/policy\/?entry_point=data_policy_redirect&entry=0 , provides information on the collection, processing and use of personal data by Facebook. It also explains which setting options Facebook offers to protect the data subject\u2019s privacy. In addition, various applications are available that allow the transmission of data to Facebook to be suppressed. Such applications can be used by the data subject to suppress data transmission to Facebook.<\/p>\n

14. Data protection provisions on the use and application of Google Analytics (with anonymisation function)<\/p>\n

The controller has integrated the Google Analytics component (with anonymisation function) into this website. Google Analytics is a web analysis service. Web analysis is the collection, compilation and evaluation of data on the behaviour of visitors to websites. Among other things, a web analysis service collects data on the website from which a data subject accessed a website (referrers), which sub-pages of the website were accessed or how often and for how long a sub-page was viewed. A web analysis is mainly used to optimise a website and to analyse the costs and benefits of Internet advertising.
\nThe operating company of the Google Analytics component is Google Inc, 1600
\nAmphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
\nThe controller uses addition \u201cgat._anonymizeIp\u201d for web analysis via Google Analytics. This addition allows the IP address of the data subject \u2019s Internet connection to be shortened and anonymised by Google if he or she is accessing our Internet pages from a member state of the European Union or from another contracting member state in the Agreement on the European Economic Area.
\nThe purpose of the Google Analytics component is to analyse the volume of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website in order to compile online reports showing the activities on our website and to provide other services in connection with the use of our website.
\nGoogle Analytics sets a cookie on the data subject\u2019s device. The meaning of cookies has
\nalready been outlined above. Setting the cookie allows Google to analyse the use of our website. Each time one of the individual pages of this website, operated by the data controller, which comprises an integrated Google Analytics component, is accessed, the Internet browser on the data subject\u2019s device is automatically triggered by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as the data subject\u2019s IP address, which Google uses to track the origin of visitors and clicks, among other things, and subsequently to enable commission calculations.
\nThe cookie is used to store personal information such as the time of access, the location from which access originated and the frequency of the data subject\u2019s visits to our website.
\nEach time the data subject visits our website, this personal data, including the IP address of the Internet connection the data subject is using, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Under certain circumstances, Google may share this personal data collected via the technical process with third parties.<\/p>\n

As explained above, the data subject can prevent the setting of cookies by our website at any time using an appropriate setting of the Internet browser he or she is using and thus object to the setting of cookies on a permanent basis. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the data subject\u2019s device. In addition, a cookie already set by Google Analytics may be deleted at any time via the Internet browser or other software programmes.
\nFurthermore, the data subject has the option to object to the collection of data generated by
\nGoogle Analytics and related to the use of this website as well as to the processing of this data by Google and to prevent such processing. The data subject must download and install a browser add-on via the link https:\/\/tools.google.com\/dlpage\/gaoptout?hl=en for this purpose. This browser add-on informs Google Analytics via JavaScript that no data or information on visits to Internet pages may be transmitted to Google Analytics. When the browser add-on has been installed, this is regarded by Google as an objection. If the data subject\u2019s device is
\ndeleted, formatted or reinstalled at a later date, the data subject must reinstall the browser add- on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated
\nby the data subject or another person within his or her control, it can be reinstalled or reactivated.<\/p>\n

Further information and the applicable privacy policy of Google is accessible via https:\/\/policies.google.com\/privacy?hl=en-UK and https:\/\/marketingplatform.google.com\/about\/analytics\/terms\/gb\/ . Google Analytics is explained in further detail at https:\/\/www.google.com\/intl\/de_de\/analytics\/.<\/p>\n

15. Matomo (formerly: PIWIK)<\/p>\n

We use Matomo (formerly: \u201cPIWIK\u201d) on our website. This is a piece of open-source software that allows us to analyse the use of our website. Your IP address, our company website that you visit, the website from which you linked to our website (referrer URL), the length of time you spend on our website and the frequency with which you access it are processed.
\nTo collect this data, Matomo stores a cookie on your terminal device via your Internet
\nbrowser. This cookie is valid for one week.
\nThe legal basis is Art. 6(1) lit. f) GDPR. Our legitimate interest lies in the analysis and optimisation of our website.
\nHowever, we use Matomo with the \u201cAutomatically Anonymize Visitor IPs\u201d anonymisation function. This anonymisation function reduces your IP address by two bytes making assignment to you or to the Internet connection you are using impossible.
\nIf you do not agree to this processing, you have the option of preventing the cookie from being stored by means of a setting in your Internet browser. More information on this is
\naccessible above via \u201cCookies \u201d.
\nIn addition, you have the option of suspending the analysis of your usage behaviour by means
\nof the opt-out. By confirming the link, a cookie will be saved on your terminal device via your Internet browser, which prevents further analysis. However, please note that if you delete the cookies stored on your terminal device, you will have to click on the link again.<\/p>\n

(Text on Matomo: Sample Privacy Policy of Wei\u00df & Partner law firm )<\/p>\n

16. Privacy policy on the use and application of Google+<\/p>\n

The controller has integrated the Google+ button as a component of this website. Google+ is a social network. A social network is a social meeting point operated on the Internet, an online community that usually allows users to communicate and interact with each other in virtual space. A social network can serve as a platform for exchanging opinions and experiences or enables the Internet community to provide personal or company-related information. Google+ allows its users to create private profiles, upload photos and network via friend requests, among other things.
\nThe operating company of Google+ is Google Inc., 1600 Amphitheatre Pkwy, Mountain
\nView, CA 94043-1351, USA.
\nEach time one of the individual pages of this website, which is operated by the data controller and comprises an integrated Google+ button, is accessed, the Internet browser on the data subject\u2019s device is automatically triggered by the respective Google+ button to download a representation of the corresponding Google+ button from Google. Within the scope of this technical procedure, Google receives information on which specific sub-page of our website the data subject is visiting. More detailed information on Google+ is available at https:\/\/developers.google.com\/+\/.
\nIf the data subject is logged in to Google+ at the same time, Google recognises which specific sub-page of our website the data subject is accessing each time he or she accesses our website and for the entire duration of his or her stay on our website. This information is collected by the Google+ button and assigned by Google to the data subject\u2019s respective Google+ account. If the data subject activates one of the Google+ buttons integrated into our website, thereby submitting a Google+ recommendation, Google assigns this information to the data subject \u2019s personal Google+ user account and stores this personal data. Google stores the data subject\u2019s Google+ recommendation and makes it publicly available in accordance with the terms and conditions accepted by the data subject in this regard. A Google+ recommendation made by the data subject on this website will subsequently be stored and processed together with other personal data, such as the name of the Google+ account used by the data subject and the phot stored in this account in other Google services, for example the search engine results of the Google search engine, the data subject\u2019s Google account or in other places, for example on websites or in connection with advertisements. Furthermore, Google is able to link the visit to this website with other personal data stored by Google. Google also records this personal information for the purpose of improving or optimising Google \u2019s various services.
\nGoogle is always notified via the Google+ button that the data subject has accessed our website if he or she is logged into Google+ at the same time\u037e this takes place regardless of
\nwhether he or she clicks on the Google+ button or not.
\nIf the data subject does not want personal data to be transmitted to Google, he or she may
\nprevent its transmission by logging out of his or her Google+ account before accessing our website.
\nFurther information as well as the applicable data protection provisions of Google is
\naccessible via https:\/\/policies.google.com\/privacy?hl=en-UK . Further information from Google on the Google+ button is accessible via https:\/\/developers.google.com\/+\/web\/buttons- policy.<\/p>\n

17. Data protection provisions on the use and application of Google AdWords<\/p>\n

The controller has integrated Google AdWords into this website. Google AdWords is an Internet advertising service that allows advertisers to place ads in both Google\u2019s search engine results and the Google advertising network. Google AdWords allows an advertiser to specify certain keywords in advance, through which an ad is displayed in Google\u2019s search engine results exclusively when the user retrieves a keyword-relevant search result using the search engine. In the Google advertising network, the ads are distributed on topic-relevant websites by means of an automatic algorithm and in compliance with the previously defined keywords. The operating company of the services of Google AdWords is Google Inc., 1600
\nAmphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
\nThe purpose of Google AdWords is to advertise our website by displaying interest-relevant
\nadvertising on the websites of third-party companies and in the search engine results of the
\nGoogle search engine and to display third-party advertising on our website.
\nIf a data subject accesses our website via a Google advertisement, a conversion cookie will be stored on the data subject \u2019s device by Google. The meaning of cookies has already been outlined above. A conversion cookie loses its validity after thirty days and cannot be used to identify the data subject. Provided the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages, for example the shopping basket of an online shop system, have been accessed on our website. The conversion cookie enables both us and Google to track whether a data subject who has accessed our website via an AdWords advertisement has generated a sale, i.e. has completed or cancelled a purchase of goods.
\nThe data and information collected through the use of the conversion cookie are used by Google to compile visit statistics regarding our website. We in turn use these visit statistics to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords advertisement and to optimise our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google through which the data subject could be identified.
\nPersonal information, such as the websites visited by the data subject, is stored by means of the conversion cookie. Each time the data subject visits our website, personal data, including
\nthe IP address of the Internet connection the data subject is using, is then transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Under certain circumstances, Google may share this personal data collected via the technical process with third parties.
\nAs explained above, the data subject can prevent the setting of cookies by our website at any
\ntime using an appropriate setting of the Internet browser he or she is using and thus object to the setting of cookies on a permanent basis. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the data subject \u2019s device. In
\naddition, a cookie already set by Google AdWords may be deleted at any time via the Internet browser or other software programmes.
\nFurthermore, the data subject has the option to object to interest-based advertising by Google. To do this, the data subject must access the link www.google.de\/settings\/ads from any of the Internet browsers he or she uses and make the desired settings there.
\nFurther information and the applicable data protection provisions of Google is accessible via https:\/\/policies.google.com\/privacy?hl=en-UK .<\/p>\n

18. Privacy policy on the use and application of Instagram<\/p>\n

The controller has integrated components of Instagram into this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also to redistribute such data in other social networks.
\nThe operating company of Instagram services is Instagram LLC, 1 Hacker Way, Building 14
\nFirst Floor, Menlo Park, CA, USA.<\/p>\n

Each time one of the individual pages of this website, which is operated by the data controller and comprises an integrated Instagram component (Insta-Button), is accessed, the Internet browser on the data subject\u2019s device is automatically triggered by the respective Instagram component to download a representation of the corresponding Instagram component. Within the scope of this technical procedure, Instagram receives information on which specific sub- page of our website the data subject is visiting.
\nIf the data subject is logged in to Instagram at the same time, Instagram recognises which
\nspecific sub-page he or she is visiting each time he or she accesses our website and for the entire duration of his or her stay on our website. This information is collected by the Instagram component and assigned by Instagram to the data subject\u2019s respective Instagram
\naccount. If the data subject activates one of the Instagram buttons integrated into our website, the data and information thus transmitted will be assigned to the data subject\u2019s personal Instagram user account and stored and processed by Instagram.
\nInstagram is always notified via the Instagram component that the data subject has visited our website if he or she is logged into Instagram at the same time\u037e this takes place regardless of
\nwhether he or she clicks on the Instagram component or not. If the data subject does not want this information to be transmitted to Instagram, he or she may prevent its transmission by logging out of his or her Instagram account before accessing our website.
\nFurther information and the applicable data protection provisions of Instagram are accessible via https:\/\/help.instagram.com\/155833707900388 and https:\/\/www.instagram.com\/about\/legal\/privacy\/.<\/p>\n

19. Data protection provisions on the use and application of LinkedIn<\/p>\n

The controller has integrated components of the LinkedIn Corporation into this website. LinkedIn is an Internet-based social network that allows users to connect with existing business contacts and to make new business contacts. LinkedIn has over 400 million registered users in more than 200 countries. This makes LinkedIn currently the largest platform for business contacts and one of the most visited websites in the world.
\nThe operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland is responsible for data protection issues outside the USA.
\nEach time our website, which is equipped with an integrated LinkedIn component (LinkedIn plug-in), is accessed, this component causes the browser the data subject is using to download
\na representation of the corresponding LinkedIn component. Further information on LinkedIn plug-ins is accessible via https:\/\/developer.linkedin.com\/plugins. Within the scope of this technical procedure, LinkedIn receives information on which specific sub-page of our website the data subject is visiting.
\nIf the data subject is logged in to LinkedIn at the same time, LinkedIn recognises which
\nspecific sub-page of our website he or she is visiting each time he or she accesses our website and for the entire duration of his or her stay on our website. This information is collected by the LinkedIn component and assigned by LinkedIn to the data subject \u2019s respective LinkedIn account. If the data subject activates a LinkedIn button integrated into our website, LinkedIn assigns this information to the data subject\u2019s personal LinkedIn user account and stores this personal data.
\nLinkedIn is always notified via the LinkedIn component that the data subject has visited our
\nwebsite if he or she is logged into LinkedIn at the same time\u037e this takes place regardless of whether he or she clicks on the LinkedIn component or not. If the data subject does not want this information to be transmitted to LinkedIn, he or she can prevent the transmission by logging out of his or her LinkedIn account before accessing our website.
\nLinkedIn offers the possibility to unsubscribe from e-mail messages, SMS messages and<\/p>\n

targeted ads as well as manage advertisement settings at https:\/\/www.linkedin.com\/psettings\/guest-controls. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame, which may set cookies. Such cookies can be rejected at
\nhttps:\/\/www.linkedin.com\/legal\/cookie-policy. LinkedIn \u2019s applicable privacy policy is
\naccessible via https:\/\/www.linkedin.com\/legal\/privacy-policy. LinkedIn \u2019s cookie policy is accessible via https:\/\/www.linkedin.com\/legal\/cookie-policy.<\/p>\n

20. Data protection provisions on the use and application of Pinterest<\/p>\n

The controller has integrated components of Pinterest Inc. into this website. Pinterest is a social network. A social network is a social meeting point operated on the Internet, an online community that usually allows users to communicate and interact with each other in virtual space. A social network can serve as a platform for exchanging opinions and experiences or enables the Internet community to provide personal or company-related information. Pinterest enables its users to publish image collections and individual images as well as descriptions on virtual pinboards (pinning), which can then, in turn, be shared by other users ( repinning) or commented on.
\nThe operating company of Pinterest is Pinterest Inc., 808 Brannan Street, San Francisco, CA
\n94103, USA.
\nEach time one of the individual pages of this website, which is operated by the data controller
\nand comprises an integrated Pinterest component (Pinterest plug-in), is accessed, the Internet browser on the data subject\u2019s device is automatically triggered by the respective Pinterest component to download a representation of the corresponding Pinterest component from Pinterest. More information on Pinterest is available at https:\/\/pinterest.com\/. Within the scope of this technical procedure, Pinterest receives information on which specific sub-page of our website the data subject is visiting.
\nIf the data subject is logged into Pinterest at the same time, Pinterest recognises which specific sub-page of our website he or she is visiting each time he or she accesses our website
\nand for the entire duration of the respective stay on our website. This information is collected by the Pinterest component and assigned by Pinterest to the data subject\u2019s respective Pinterest account. If the data subject activates a Pinterest button which has been integrated into our website, Pinterest assigns this information to the data subject\u2019s personal Pinterest user account and stores this personal data.
\nPinterest is always notified via the Pinterest component that the data subject has visited our website if he or she is logged into Pinterest at the same time when accessing our website\u037e this takes place regardless of whether he or she clicks on the Pinterest component or not. If the data subject does not want this information to be transmitted to Pinterest, he or she can prevent the transmission by logging out of his or her Pinterest account before accessing our website.
\nThe privacy policy published by Pinterest, which can be accessed at
\nhttps:\/\/about.pinterest.com\/privacy-policy, provides information on the collection, processing and use of personal data by Pinterest.<\/p>\n

21. Data protection provisions on the use and application of Twitter<\/p>\n

The controller has integrated Twitter components into this website. Twitter is a multilingual, publicly-accessible microblogging service on which users can publish and disseminate tweets, i.e. short messages limited to 140 characters. These short messages can be accessed by anyone, including people who are not registered Twitter users. However, the tweets are also displayed to the respective users\u2019 followers. Followers are other Twitter users who follow a<\/p>\n

particular user \u2019s tweets. Furthermore, Twitter allows users to address a broad audience via hashtags, links or retweets.
\nThe operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San
\nFrancisco, CA 94103, USA.
\nEach time one of the individual pages of this website, which is operated by the data controller
\nand comprises an integrated Twitter component (Twitter-Button), is accessed, the Internet browser on the data subject\u2019s device is automatically triggered by the respective Twitter component to download a representation of the corresponding Twitter component. Further information on the Twitter buttons is accessible via https:\/\/about.twitter.com\/de\/resources\/buttons. Within the scope of this technical procedure, Twitter receives information on which specific sub-page of our website is visited by the data subject. The purpose of integrating the Twitter component is to enable our users to
\ndisseminate the content of this website, to make this website known in the digital world and to increase our visitor numbers.
\nIf the data subject is logged into Twitter at the same time, Twitter recognises which specific
\nsub-page of our website he or she is visiting each time he or she accesses our website and for the entire duration of the respective stay on our website. This information is collected by the Twitter component and assigned by Twitter to the data subject\u2019s respective Twitter account. If the data subject activates one of the Twitter buttons integrated into our website, the data and information thus transmitted are assigned to the data subject\u2019s personal Twitter user account and stored and processed by Twitter.
\nTwitter is always notified via the Twitter component that the data subject has visited our website if he or she is logged into Twitter at the same time when accessing our website\u037e this
\ntakes place regardless of whether he or she clicks on the Twitter component or not. If the data subject does not want this information to be transmitted to Twitter, he or she can prevent the transmission by logging out of his or her Twitter account before accessing our website.
\nThe applicable data protection provisions of Twitter are accessible via https:\/\/twitter.com\/privacy?lang=de.<\/p>\n

22. Data protection provisions on the use and application of Xing<\/p>\n

The controller has integrated components of Xing into this website. Xing is an Internet-based social network that allows users to connect with existing business contacts and to make new business contacts. Individual users can create personal profiles of themselves on Xing. Companies can, for example, create company profiles or publish job offers on Xing.
\nThe operating company of Xing is XING SE, Dammtorstra\u00dfe 30, 20354 Hamburg, Germany.
\nEach time one of the individual pages of this website, operated by the controller, is accessed and on which a Xing component (Xing plug-in) has been integrated, the Internet browser on the data subject\u2019s device is automatically prompted by the respective Xing component to download a representation of the corresponding Xing component from Xing. Further information on the Xing plug-ins is accessible via https:\/\/dev.xing.com\/plugins. Within the scope of this technical procedure, Xing receives information on which specific sub-page of our website is visited by the data subject.
\nIf the data subject is logged into Xing at the same time, Xing recognises which specific sub-
\npage of our website he or she is visiting each time he or she accesses our website and for the entire duration of his or her respective stay on our website. This information is collected by the Xing component and assigned by Xing to the data subject\u2019s respective Xing account. If the data subject activates a Pinterest button integrated into our website, for example the
\n\u201cShare\u201d button, Xing assigns this information to the data subject\u2019s personal Xing user account
\nand stores this personal data.
\nXing is always notified via the Xing component that the data subject has visited our website if<\/p>\n

he or she is logged into Xing at the same time when accessing our website\u037e this takes place regardless of whether he or she clicks on the Xing component or not. If the data subject does not want this information to be transmitted to Xing, he or she can prevent the transmission by logging out of his or her Xing account before accessing our website.
\nThe data protection provisions published by Xing, which are accessible via
\nhttps:\/\/www.xing.com\/privacy, provide information on the collection, processing and use of personal data by Xing. Furthermore, Xing has published data protection information for the XING Share button at https:\/\/www.xing.com\/app\/share?op=data_protection.<\/p>\n

23. Data protection provisions on the use and application of YouTube<\/p>\n

The controller has integrated components of Xing into this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all kinds of videos, which is why full-length film and television programmes as well as music videos, trailers or videos made by users themselves can be accessed here.
\nThe operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA
\n94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
\nEach time one of the individual pages of this website, which is operated by the data controller and comprises an integrated YouTube component (YouTube video), is accessed, the Internet browser on the data subject\u2019s device is automatically triggered by the respective YouTube component to download a representation of the corresponding YouTube component. Further information on YouTube is accessible via https:\/\/www.youtube.com\/yt\/about\/de\/. Within the scope of this technical procedure, YouTube and Google receive information on which specific sub-page of our website the data subject is visiting.
\nIf the data subject is logged into YouTube at the same time, YouTube recognises which specific sub-page of our website he or she is visiting when a sub-page containing a YouTube video is accessed. This information is collected by YouTube and Google and assigned to the data subject\u2019s respective YouTube account.
\nYouTube and Google are always notified via the YouTube component that the data subject
\nhas visited our website if he or she is logged into YouTube at the same time when accessing our website\u037e this takes place regardless of whether he or she clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, he or she can prevent the transmission by logging out of his or her YouTube account before accessing our website.
\nThe data protection provisions published by YouTube, which are accessible via https:\/\/policies.google.com\/privacy?hl=en-UK , provide information on the collection, processing and use of personal data by YouTube and Google.<\/p>\n

24. Legal basis of the processing<\/p>\n

Article 6 I lit. a GDPR serves as our company \u2019s legal basis for processing operations in which we obtain consent for a specific processing purpose. If the personal data processing is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Article 6 I lit. b GDPR. The same applies to processing operations that are necessary for the implementation of pre-contractual measures, for example in the case of enquiries about our products or services. If our company is subject to a legal obligation by which the personal data processing becomes necessary, such as for the fulfilment of tax obligations, the processing is based on<\/p>\n

Art. 6 I lit. c GDPR. In rare cases, the personal data processing may become necessary in order to protect the vital interests of the data subject or those of another natural person. This would be the case, for example, if a visitor were to be injured on our premises and his or her name, age, health insurance details or other piece of vital information had to be passed on to a doctor, hospital or other third party as a result. In this case, the processing would be based on Art. 6 I lit. d GDPR. Finally, processing operations could be based on Art. 6 I lit. f GDPR. This legal basis applies to processing operations which are not covered by any of the aforementioned legal bases if the processing is necessary to protect a legitimate interest of our company or a third party, provided that the data subjects\u2019 interests, fundamental rights and freedoms are not overridden. Such processing operations are permitted to us, in particular, because they were specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, sentence 2 GDPR).<\/p>\n

25. Legitimate interests in the processing pursued by the controller or a third party<\/p>\n

If the personal data processing is based on Article 6 I lit. f GDPR, our legitimate interest is the performance of our business activities for the well-being of all our employees and our shareholders.<\/p>\n

26. Duration for which the personal data is stored<\/p>\n

The criterion for the duration of the storage of personal data will be the respective statutory retention period. After this period has expired, the corresponding data is routinely erased if it is no longer required for the fulfilment or initiation of the contract.<\/p>\n

27. Legal or contractual requirements to provide the personal data\u037e necessity for the conclusion of the contract\u037e data subject\u2019s obligation to provide the personal data\u037e possible consequences of not providing the personal data<\/p>\n

We would like to inform you that the provision of personal data is sometimes required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). Concluding a contract may sometimes require that a data subject provide us with personal data that must subsequently be processed by us. For example, the data
\nsubject is obligated to provide us with personal data if our company concludes a contract with him or her. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. The data subject must contact one of our employees before providing personal data. Our employee will inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for
\nthe conclusion of the contract, whether an obligation to provide the personal data exists and what the consequences of not providing the personal data would be<\/p>\n

28. Existence of automated decision-making
\nAs a responsible company, we do not use automated decision-making or profiling. This privacy policy was created by the privacy policy generator of the external Data
\nProtection Authority (DSB) Aachen in cooperation with RC GmbH, which recycles used notebooks and the file sharing lawyers of WBS-LAW.<\/p>\n

Wordfence Security Plugin<\/p>\n

This site uses the Wordfence WordPress security plugin to protect the website from hacker attacks etc. The provider is DEFIANT, 800 5th Ave Ste 4100, Seattle, WA 98104.<\/p>\n

Wordfence currently uses three cookies. We explain below what each cookie does, who set it and why it helps protect the site.<\/p>\n

Cookie: wfwaf-authcookie – (Hash)
\nWhat it does: This cookie is used by the WORDFENCE firewall to perform a capability check on the current user before WordPress loads.
\nWho receives this cookie: This cookie is only set for users who can log into WordPress. How this cookie helps: This cookie enables the Wordfence firewall to recognise logged-in users and allows them increased access. Wordfence can also detect users who are not logged in and restrict their access to secure areas. The cookie tells the firewall what level of access a visitor has to help the firewall make smart decisions about who to allow and who to block.<\/p>\n

Cookie: wf_loginalerted _ (Hash)
\nWhat it does: This cookie is used to notify the Wordfence administrator when an administrator logs in from a new device or location.
\nWho receives this cookie: This cookie is set for administrators only.
\nHow this cookie helps: This cookie helps site operators know if an admin login from a new device or location has occurred.<\/p>\n

Cookie: wfCBLBypass
\nWhat it does: Wordfence offers a site visitor the possibility to bypass country blocking by accessing a hidden URL. This cookie can be used to track who is allowed to bypass country
\nblocking.
\nWho receives this cookie: When a hidden URL defined by the site administrator is accessed,
\nthis cookie is used to check whether the user can access the site from a country restricted by country blocking. This is set for anyone who knows the URL that allows the default country blocking to be bypassed. This cookie is not set for anyone who does not know the hidden URL to bypass country blocking.<\/p>\n

How this cookie helps: This cookie allows website owners to allow certain users from blocked countries even though their country has been blocked.<\/p>\n

More information on the handling of user data is provided in DEFIANT\u2019s privacy policy:
\nwordfence.com\/privacy-policy<\/p>\n

Borlabs Cookie
\nThis website uses Borlabs Cookie, which sets a technically necessary cookie ( borlabs -cookie)
\nto store your cookie consents.
\nBorlabs cookie does not process any personal data.<\/p>\n

The borlabs -cookie stores the consent you gave when you entered the website. If you wish to withdraw these consents, simply delete the cookie in your browser. If you re-enter\/reload the website, you will be asked for your consent to the cookie again.<\/p>\n

Use of SalesViewer\u00ae technology
\nOn this website, data is collected and stored for marketing, market research and optimisation
\npurposes using the SalesViewer\u00ae technology of SalesViewer\u00ae GmbH based on the website operators\u2019 legitimate interests (Art. 6(1) lit.f GDPR).<\/p>\n

For this purpose, a javascript-based code is used to collect company-related data and the corresponding usage. The data collected with this technology is encrypted via a non-reversible one-way function (hashing). The data is immediately pseudonymised and not used to personally identify the visitor to this website.<\/p>\n

The data stored within the framework of Salesviewer will be erased as soon as it is no longer required for its intended purpose and if the erasure does not conflict with any statutory retention obligations.<\/p>\n

You may object to the collection and storage of data at any time with effect for the future by clicking on this link. This will prevent the collection of data by SalesViewer\u00ae on this website from that point on. This will place an opt-out cookie for this website on your device. If you delete your cookies in this browser, you must click this link again.[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

[vc_row row_content_width=”grid” css=”.vc_custom_1622988791780{margin-bottom: 40px !important;}”][vc_column][vc_column_text] Data Protection [\/vc_column_text][\/vc_column][\/vc_row][vc_row row_content_width=”grid” css=”.vc_custom_1622988718321{margin-top: 30px !important;margin-bottom: 30px !important;}”][vc_column][vc_column_text]We are very pleased at your interest in our company. Data protection is of a particularly high priority for the management of L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG. It is possible to use the website of L\u00fcbecker Marzipan-Fabrik v. Minden & Bruhns GmbH & Co. KG without submitting any personal data. However, if a data subject wants to use our company \u2019s special services via our website, personal […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"full-width.php","meta":{"footnotes":""},"class_list":["post-7212","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.lubeca-marzipan.de\/en\/wp-json\/wp\/v2\/pages\/7212","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lubeca-marzipan.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.lubeca-marzipan.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.lubeca-marzipan.de\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lubeca-marzipan.de\/en\/wp-json\/wp\/v2\/comments?post=7212"}],"version-history":[{"count":4,"href":"https:\/\/www.lubeca-marzipan.de\/en\/wp-json\/wp\/v2\/pages\/7212\/revisions"}],"predecessor-version":[{"id":7273,"href":"https:\/\/www.lubeca-marzipan.de\/en\/wp-json\/wp\/v2\/pages\/7212\/revisions\/7273"}],"wp:attachment":[{"href":"https:\/\/www.lubeca-marzipan.de\/en\/wp-json\/wp\/v2\/media?parent=7212"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}