Privacy Policy of ASSxLHMT, Am Zeller Pfad 1, D-75242 Neuhausen

ASSxLHMT, Am Zeller Pfad 1, D-75242 Neuhausen takes the protection of your personal data seriously and complies with the statutory rules on data protection. Personal data are collected on this website only to the extent technically necessary. Under no circumstances will the collected data be sold or otherwise disclosed to third parties.

The following statement gives you an overview of how we ensure this protection and what type of data are collected for which purpose.

§ 1 Name and contact details of the controller and the company data protection officer

The controller within the meaning of Art. 4(7) of the EU General Data Protection Regulation (GDPR) is:
ASSxLHMT, Am Zeller Pfad 1, D-75242 Neuhausen,
Phone: +49 (0) 72 34 – 9470 – 0, Fax: +49 (0) 72 34 – 9470 – 20,
E-mail: info@lhmt.de.

§ 2 Information on the collection of personal data

1. Below we inform you about the collection of personal data when you use our website. “Personal data” are all data that relate to you personally, e.g. name, address, e-mail addresses, user behaviour.

2. When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, and if applicable your name and telephone number) will be stored by us in order to answer your questions. We delete the data arising in this context once storage is no longer necessary, or restrict processing if statutory retention obligations apply.

3. If we use commissioned service providers for individual functions of our offering or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes. We will also specify the criteria for the storage period.

§ 3 Your rights

You have the following rights vis-à-vis us with regard to your personal data:

• pursuant to Art. 15 GDPR, to obtain information about your personal data processed by us. In particular, you can obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data if they were not collected by us, as well as the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the details thereof;

• pursuant to Art. 16 GDPR, to obtain the immediate rectification of inaccurate personal data concerning you or the completion of incomplete data stored by us;

• pursuant to Art. 17 GDPR, to obtain the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;

• pursuant to Art. 18 GDPR, to obtain restriction of processing where the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure and we no longer need the data, yet you require them for the establishment, exercise or defence of legal claims, or you have objected to processing pursuant to Art. 21 GDPR;

• pursuant to Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request transmission to another controller;

• pursuant to Art. 7(3) GDPR, to withdraw your consent at any time. This means that we will no longer be permitted to continue any data processing that was based on this consent in the future; and

• pursuant to Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual residence or place of work, or of our registered office.

§ 4 Collection of personal data when visiting our website

1. When you merely use the website for informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data which are technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6(1) sentence 1 lit. f GDPR):

• IP address

• Date and time of the request

• Time zone difference to Greenwich Mean Time (GMT)

• Content of the request (specific page)

• Access status/HTTP status code

• Amount of data transferred in each case

• Website from which the request comes

• Browser

• Operating system and its interface

• Language and version of the browser software.

2. The aforementioned data are processed by us for the following purposes:

• Ensuring a smooth connection to the website,

• Ensuring comfortable use of our website,

• Evaluation of system security and stability, and

• for further administrative purposes.

Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

3. In addition to the data mentioned above, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you use; they provide certain information to the entity that sets the cookie (in this case, us). Cookies cannot execute programs or transmit viruses to your computer. They serve to make the internet offering more user-friendly and effective overall.

Use of cookies:

a) This website uses the following types of cookies or comparable software, the scope and functionality of which are explained below:
— Transient cookies (see b)
— Persistent cookies (see c)
— Flash cookies (see f)
— HTML5 storage objects (see f)

b) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. They store a so-called session ID with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.

c) Persistent cookies are deleted automatically after a specified period, which may differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

d) You can configure your browser settings according to your wishes and, for example, refuse to accept third-party cookies or all cookies. Please note that you may then not be able to use all functions of this website.

e) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.

f) The Flash cookies used are not captured by your browser, but by your Flash plug-in. We also use HTML5 storage objects that are stored on your device. These objects store the required data independently of the browser you use and do not have an automatic expiry date. If you do not wish Flash cookies to be processed, you must install an appropriate add-on, e.g. “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using your browser’s private mode. We also recommend that you regularly delete your cookies and browser history manually.

4. Furthermore, we use analytics services when you visit our website. Further explanations are provided below.

§ 5 Additional functions and offers on our website

1. In addition to purely informational use of our website, we offer various services (e.g. a newsletter) that you can use if you are interested. To do so, you will generally need to provide additional personal data which we use to provide the respective service and to which the aforementioned principles of data processing apply.

2. In some cases, we use external service providers to process your data. These providers have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

3. We may also pass on your personal data to third parties if we offer contract conclusions or similar services together with partners. You will receive more detailed information when you provide your personal data or below in the description of the offering.

4. If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you about the consequences of this circumstance in the description of the offering.

§ 6 Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only disclose your personal data to third parties if:

• you have given your explicit consent pursuant to Art. 6(1) sentence 1 lit. a GDPR;

• the disclosure is necessary for the establishment, exercise or defence of legal claims pursuant to Art. 6(1) sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in not having your data disclosed;

• there is a legal obligation for disclosure pursuant to Art. 6(1) sentence 1 lit. c GDPR; and

• this is legally permissible and necessary for the performance of a contract with you pursuant to Art. 6(1) sentence 1 lit. b GDPR.

§ 7 Newsletter

1. With your consent you can subscribe to our newsletter, with which we inform you about our current interesting offers. The goods and services advertised are specified in the declaration of consent.

2. We use the so-called double opt-in procedure for newsletter registration. This means that after you register, we send an e-mail to the address provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. We also store the IP addresses you used and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, investigate possible misuse of your personal data.

3. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data, marked separately, is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6(1) sentence 1 lit. a GDPR.

4. You can withdraw your consent to receive the newsletter and unsubscribe at any time. You can declare your withdrawal by clicking on the link provided in every newsletter e-mail, by e-mail to info@lhmt.de, or by a message to the contact details provided in the imprint.

5. We do not analyse your user behaviour when sending the newsletter. We do not create a user profile based on this, and we do not use web beacons or tracking pixels.

6. We use Google’s reCAPTCHA service to determine whether a human or a computer is making a specific entry in our contact or newsletter form. Google checks the following data to determine whether you are a human or a computer: IP address of the end device used, the page on our website that you visit and on which the captcha is embedded, the date and duration of the visit, the identification data of the browser and operating system type used, Google account (if you are logged into Google), mouse movements on the reCAPTCHA areas, as well as tasks where you must identify images. The legal basis for the data processing described is Art. 6(1)(f) GDPR. We have a legitimate interest in this data processing to ensure the security of our website and to protect ourselves against automated entries (attacks).

§ 8 Objection to or withdrawal of consent to the processing of your data

1. If you have given consent to the processing of your data, you may withdraw it at any time. Such a withdrawal affects the lawfulness of the processing of your personal data after you have expressed it to us.

2. Where we base the processing of your personal data on a balancing of interests, you may object to the processing. This is the case if the processing is not required, in particular, for the performance of a contract with you, which we set out in the following description of the functions. When you exercise such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either stop or adapt the data processing, or demonstrate to you our compelling legitimate grounds on the basis of which we will continue the processing.

3. You may, of course, object to the processing of your personal data for advertising purposes at any time.

4. You can inform us of your objection using the following contact details:
   ASSxLHMT, Am Zeller Pfad 1, D-75242 Neuhausen,
   Phone: +49 (0) 72 34 – 9470 – 0, Fax: +49 (0) 72 34 – 9470 – 20,
   E-mail: info@lhmt.de.

§ 9 Data security

1. During your website visit, we use the widely adopted SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we resort to 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock icon in the lower status bar of your browser.

2. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction, or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

Yours,
ASSxLHMT