Data protection

Lippische Eisenindustrie GmbH (hereinafter “Lippische Eisenindustrie”) is pleased that you are visiting our website. Data protection and data security are very important to us when using our website. We would therefore like to inform you about which of your personal data we collect when you visit our website and for what purposes it is used.

Since changes to the law or changes to our internal company processes may require an adjustment to this data protection declaration, we ask you to read this data protection declaration regularly.

 

1. Scope

This data protection declaration applies to the Lippische Eisenindustrie website, which can be accessed under the domain www.lippische-eisen.de.

 

2. Data protection officer

The responsible body and service provider is Lippische Eisenindustrie GmbH, Alter Weg 57, 32760 Detmold, Germany (hereinafter referred to as “Lippische Eisenindustrie”).
You can reach our data protection officer by email at privacy@​lippische-eisen.de or at our postal address (Lippische Eisenindustrie GmbH, PO Box 92 40, 32739 Detmold) with the note “Data Protection Officer”.

 

3. Data processing in general

We generally only collect and use personal data on our homepage to the extent that this is necessary to provide a functional website.

3.1. Personal Data

According to Article 4 No. 1 GDPR, personal data is all information that relates to an identified or identifiable natural person (hereinafter “data subject”). A natural person is considered to be identifiable if he or she can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more special characteristics that express the physical, physiological, genetic, economic, cultural or social identity of that natural person.

3.2. Processing of personal data

According to Article 4 No. 2 GDPR, processing is any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data, such as collection, recording, organization, structuring, storage, adaptation or modification, reading , querying, using, disclosing by transmission, dissemination or otherwise making available, aligning or combining, restricting, deleting or destroying.
Personal data is collected via this website if you provide it to us, e.g. by filling out forms or uploading your application documents. We use this data for the purposes specified or resulting from the request. Data will only be transferred to third parties if the law expressly permits this or you have consented to the transfer. Furthermore, you can use the general information on www.lippische-eisen.de without disclosing your personal data.

3.3 Legal basis for processing personal data

Article 6 I lit. a GDPR serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Article 6 I lit. b GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as to fulfill tax obligations, the processing is based on Article 6 I lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance details or other vital information would then have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Article 6 I lit. d GDPR. Ultimately, processing operations could be based on Article 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not outweigh these. We are particularly permitted to carry out such processing operations because they are specifically mentioned by the European legislator. In this respect, he was of the opinion that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47 Sentence 2 GDPR).

3.4 Retention period

Your personal data will be deleted as soon as the respective purpose of processing has been fulfilled or no longer applies, unless there are other legal obligations for processing.
Personal data is also stored if it is necessary to assert, exercise or defend legal claims.

3.5 Disclosure of your personal data to third parties

Your personal data will generally not be transmitted to third parties. Your personal data will only be passed on or otherwise transmitted to third parties if

  • you have previously consented
  • we are entitled to do so, e.g. because this is necessary to prosecute criminal offenses or to exercise and enforce our rights or,
  • we are legally obliged to do so due to an official or court order.

 

4. Informational use of our website

You can visit our website without providing any personal information. If you only use our website for informational purposes, we do not process any personal data, with the exception of the data that your browser transmits to enable you to visit the website. This general data and information is stored in the server's log files. What can be recorded are the (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrers), (4) the sub-websites which are accessible via an accessing system on our website is controlled, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that serves to protect against threats in the event of attacks on our information technology systems.

When using this general data and information, the Lippische Eisenindustrie does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website and the advertising for it, (3) ensure the long-term functionality of our information technology systems and the technology of our website and ( 4) to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack. These anonymously collected data and information are therefore evaluated by Lippische Eisenindustrie both statistically and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data in the server log files is stored separately from all personal data provided by a data subject.

 

5. Active use of our website

In addition to using our website for purely informational purposes, you can also actively use our website, for example to contact us. In this case, in addition to the aforementioned processing, we also process the following personal data from you:

5.1 Contact form

If you take advantage of the opportunity to send us inquiries using our contact form, we will process your email address. You can also voluntarily provide your first and last name. You can also enter your individual message for us in the message field.

It is your free decision whether to provide us with this data. However, without this information we cannot fulfill your contact request. Providing your email address helps us to classify and respond to your request. When you use the contact form, your personal data will not be passed on to third parties.

The data processing described above for the purpose of establishing contact is carried out in accordance with Article 6 Paragraph 1 Letters b) and f) GDPR.

5.2 Applicant management

If you would like to apply to us via our website, in order to process this application we need your email address and your application documents, which you can upload as an email attachment. Providing this data is voluntary, but without this information we may not be able to consider your application. The data will not be passed on to third parties. The collection of this data serves the sole purpose of processing your application documents for the application process. We will keep your data for 6 months after the end of the application process (acceptance or rejection).

The data processing described above for the purpose of processing the application is carried out in accordance with Article 6 Paragraph 1 Letter a), Article 9 Paragraph 2 Letter a) GDPR.

 

6. Security measures to protect the data we store

We are committed to protecting your privacy and keeping your personal information confidential. In order to avoid loss or misuse of the data we store, we take extensive technical and organizational security precautions that are regularly checked and adapted to technological progress. However, we would like to point out that due to the structure of the Internet it is possible that the data protection rules and the above-mentioned security measures are ignored by other people or organizations that are not under our control. In particular, unencrypted data - e.g. when transmitted by email - can be read by third parties. We have no technical influence on this. It is the user's responsibility to protect the data they provide from misuse through encryption or in any other way.

 

7. Rights of data subjects

7.1. Right of providing information

You have the right to request information from us at any time about the data we have stored about you, as well as its origin, recipients or categories of recipients to whom this data is passed on and the purpose of storage.

7.2. Right to rectification

You can request the correction of incorrect data or the completion of your data stored by us.

7.3. Right to data portability

If you request the personal data you have provided to us, we will release or transmit the data to you or, if requested, to another person responsible in a structured, common and machine-readable format. The latter, however, only if this is technically possible.

7.4. Right of withdrawal

If you have given your consent to the use of data, you can revoke it at any time without giving reasons with future effect. To do this, send an email to privacy@lippische-eisen.de or a written notification to Lippische Eisenindustrie GmbH, Data Protection Officer, Alter Weg 57, D-32760 Detmold.

7.5. Right to object

You have the right to object to the processing of personal data concerning you at any time for reasons arising from your particular situation within the framework of the requirements of Art. 21 GDPR, provided that the data processing is not based on our legitimate interests in accordance with Art. 6 Para. 1 lit. f) GDPR takes place.

7.6. Right to deletion and blocking

You have the right to block and delete the personal data we have stored about you. Your personal data will usually be deleted within two working days of exercising this right as a data subject. If deletion contradicts statutory retention requirements or other legally enshrined reasons, your data can only be blocked instead of deleted. Once your data has been deleted, information can no longer be provided.

7.7 Contact to assert the rights of data subjects

When you contact us by email to privacy@lippische-eisen.de or by post to Lippische Eisenindustrie GmbH, Alter Weg 57, D-32760 Detmold, the data you provide (your email address, if applicable your name and your telephone number) are stored by us in order to answer your questions or respond to your concerns. We delete the data arising in this context after storage is no longer necessary or restrict processing if there are statutory retention requirements.

 

8. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with the responsible supervisory authority against the processing of your personal data if you feel that your rights under the GDPR have been violated.

 

9. Automated decision making/profiling

We do not use automated decision-making or profiling (an automated analysis of your personal circumstances).

 

As of: September 23, 2023