Data privacy
Contact

LOBA GmbH & Co. KG Privacy Statement

The provisions of the EU General Data Protection Regulation (hereinafter referred to as "GDPR") apply throughout Europe. We would like to inform you about how our company processes personal data in accordance with this regulation (see Articles 13 and 14 GDPR). If you have questions or comments about this privacy statement, you can send them at any time to the e-mail address provided in Section 1.2 or 1.3.

Table of contents:

1. Overview

1.1 Scope

1.2 Data controller

1.3 Data protection officer

2. Data processing in detail

2.1 General information about data processing

2.2 Accessing the website

2.3 Tracking to analyse and optimise our services and their use

2.4 Application(s)

2.5 Customer support

2.6 Means of contact

2.7 Competitions

2.8 Reference projects

2.9 Online surveys

3. Data subject rights

3.1 Right to object

3.2 Right to be informed

3.3 Right to rectification

3.4 Right to erasure ("right to be forgotten")

3.5 Right to restrict processing

3.6 Right to data portability

3.7 Right to withdraw consent

3.8 Right to appeal

 

1. Overview

This section of the Privacy Statement contains information about the scope, the data controller, and the data protection officer.
 

1.1 Scope
This page provides information about the type, scope, and purpose of the personal data collected by our company, which is processed both when you visit this website and in the context of other processing for which we are responsible and which is not related to this website.
 

1.2 Data controller
The data controller, i.e. the person who determines the purpose of the personal data and the means of processing it within the framework of its processing, is

LOBA GmbH & Co. KG
Leonbergerstr. 56–62
71254 Ditzingen, Germany

Phone +49 (0) 7156-357 0
Fax +49 (0) 7156-357 211
service@loba.de
 

General partner: LOBA-Beteiligungsges.mbH, 71254 Ditzingen, District Court HRB 203642
Managing partners: Alfred Melka, Mario Probst
Place of jurisdiction: Registry court Stuttgart HRA 201336
VAT ID: DE146020279
 

1.3 Data protection officer
Our data protection officer can be reached as follows:

Contact form:

https://www.dsextern.de/anfragen

DS EXTERN GmbH
Dipl.-Kfm. Marc Althaus
Frapanweg 22 
22589 Hamburg, Germany

 

2. Data processing in detail

This section of the Privacy Statement provides detailed information about the processing of personal data. For better clarity, we have structured this information according to specific functions.
 

2.1 General information about data processing
Unless otherwise stated, the following applies to all processing described below:
 

2.1.1 No obligation to provide data
There is neither a contractual nor a legal obligation to provide personal data. You are not obliged to provide data.
 

2.1.2 Consequences of the non-provision of data
In the case of required data (data that is marked as mandatory), failure to provide this data means that the service in question cannot be provided. Otherwise, failure to provide the data may mean that our services cannot be provided in the same form and quality.
 

2.1.3 Transfer to government authorities
We transfer personal data to government authorities (including law enforcement agencies) only if this is necessary to fulfil a legal obligation to which we are subject (legal basis: Art. 6 para. 1 c) GDPR) or if it is necessary for the assertion, exercise, or defence against legal claims (legal basis: Art. 6 para. 1 f) GDPR).
 

2.1.4 Storage period
We do not store your data any longer than needed for our respective processing purposes. When the data is no longer needed, it is deleted regularly, unless its temporary retention is still necessary. Reasons for this may be, for example, the following:

  • the fulfilment of retention obligations under commercial and tax law
  • the preservation of evidence for legal disputes within the framework of statutory limitation provisions


2.1.5 Categories of recipients
In addition to the categories of recipients explicitly listed below, personal data is also transferred to the following categories of recipients: shipping service providers, telephone and fax providers.
 

2.1.6 Data categories

  • Personal master data: title, form of address/gender, first name, last name, date of birth
  • Address data: street, house number and if necessary, supplements to the address, postal code, city, country
  • Contact data: telephone number(s), fax number(s), e-mail address(es)
  • Access data: date and time of the visit to our service; the page from which the accessing system arrived on our site; pages accessed during use; data for session identification (session ID); in addition, the following information of the accessing computer system: Internet Protocol address (IP address) used, browser type and version, device type, operating system, and similar technical information.
  • Application data: resume, references, supporting documents, work samples, certificates, pictures
  • Company personal data: company name, e.g. for sole proprietors or one-person limited liability companies, if the company name is identical to the name of the natural person standing behind it.
  • Survey data: personal opinions, preferences, ratings

 

2.2 Accessing the website
This section describes how we process your personal data when you access the website.

Data category: access data

Purpose:  to establish a connection, display the contents of the service, detect attacks on our site based on unusual activity, troubleshoot

Legal basis: to preserve legitimate interests (Art. 6 para. 1f GDPR)

Legitimate interest, if applicable: proper functioning of the services, security of data and business processes, prevention of misuse, prevention of damage due to tampering with information systems.

Storage period: 7 days 

Recipient(s):

a. IT security service provider, hosting service provider, consent tool provider
b. provider of embedded content, YouTube, Google Maps and Google Fonts.

Relevant data: all of the above data

Transfer to third countries:
a. No
b. Yes

Recipient in third country: Google LLC (USA)

Guarantee according to Art. 44 ff. GDPR: standard contractual clauses
 

2.3 Tracking to analyse and optimise our services and their use
The following describes how your personal data is processed using tracking technologies to analyse and optimise our services and for advertising purposes.

The description of the tracking methods also includes information about how you can prevent or object to the processing of your data. Please note that what is known as "opt-out", i.e. the refusal of processing, is usually stored via cookies. If you use our services on a new terminal device or in a different browser, or if you have deleted the cookies set by your browser, you will have to declare the opt-out again.

Purposes of processing
The analysis of user behaviour by means of tracking helps us to verify the effectiveness of our services, to optimise them, and adapt them to the needs of users, as well as to troubleshoot.
Tracking to measure the success of advertising campaigns is used to optimise our future ads.

Legal basis for data processing
Consent according to Art. 6 para. 1 lit. a GDPR.

Information on the tracking methods used can be found in the consent tool.
 

2.4 Application(s)
If an application process is ongoing, we process your personal data in the following ways:

Data category:
a. personal master data
b. address data, contact data
c. application data

Purpose:
a. identification, means of contact, age verification
b. identification, means of contact, communication of contract initiation
c. applicant selection

Legal basis:
a. + b. + c. Section 26 German Federal Data Protection Act (BDSG) (new) in conjunction with Art. 88 GDPR

Legitimate interest, if applicable: -

Storage period: 6 months after the end of the application process 

Recipient(s): if applicable, other departments within our company, hosting service provider (applicant management software)

Relevant data: all of the above data

Transfer to third countries: No
 

2.5 Technical service
Information about how we process your personal data when you contact our Technical Service can be found here:

Data category:
a. personal master data, contact data
b. content of the requests

Purpose:
a. + b.processing of requests

Legal basis:
a. contract (Art. 6 para. 1b GDPR)
b. preservation of legitimate interests (Art. 6 para. 1f GDPR)

Legitimate interest, if applicable:
a. –
b. customer loyalty, service improvements

Storage period: processing the request

Recipient(s): if applicable, other departments within our company, hosting service provider for e-mail

Relevant data: all of the above data

Transfer to third countries: No
 

2.6 Means of contact
Information about how we process your personal data when you contact us by phone, in writing, or by e-mail:

Data category: personal master data, contact data, content of requests

Purpose: processing of requests

Legal basis: to preserve legitimate interests (Art. 6 para. 1f GDPR)

Legitimate interest, if applicable: communication, processing of requests

Storage period: processing the request

Recipient(s): if applicable, other departments within our company, hosting service provider for e-mail

Relevant data: all of the above data

Transfer to third countries: No
 

2.7 Competitions
We hold competitions from time to time. Information about how we process your personal data when you participate in our competitions can be found here. The respective terms of participation apply.

Data category: personal master data, address data

Purpose: execution of the competition, notification of successful participants, sending of the prizes

Legal basis: contract (Art. 6 para. 1 1b GDPR)

Legitimate interest, if applicable: -

Storage period: max. 6 months after the end of the competition

Recipient(s): personal data is only passed on internally

Relevant data: all of the above data

Transfer to third countries: No
 

2.8 Reference projects
Our website gives you the option of providing us with photos and videos as reference projects for publication. In doing so, we process personal data from you as described below. Please note: photos and videos in which persons are depicted will not be published.

Data category:
a. personal master data, address data
b. company personal data

Purpose:
a. personalization of consent granted via the web form to prove that consent was given
b. publication of the processor data

Legal basis:
a. contract (Art. 6 para. 1 1f GDPR)
b. consent (Art. 6 para. 1a GDPR)

Legitimate interest, if applicable:
a. see Purpose
b. -

Storage period:
a. unlimited to meet accountability requirements
b. until consent is withdrawn

Recipient(s): hosting service provider, advertising agency

Relevant data: all of the above data

Transfer to third countries: No
 

2.9 Online surveys
We conduct online surveys from time to time. In these surveys, the data is usually pseudonymised, i.e. the identity of an individual person cannot be directly inferred from the survey data. However, in connection with a competition (see above Section 2.7), a direct reference to a person may arise. In this case, disclosure of the personal data described therein as part of the online survey is the trade-off for participation in the competition.

Data category: access data, survey data

Purpose: to conduct the online surveys to gather customer information that is meaningful to the company

Legal basis:
a. for pseudonymous surveys (no direct identification of participants): to preserve legitimate interests (Art. 6 para. 1f GDPR)
b. in connection with the competition and direct identification of participants): contract (Art. 6 para. 1b GDPR)

Legitimate interest, if applicable:
a. to conduct the online surveys to gather customer information that is meaningful to the company while preserving the pseudonymity of the participants
b. -

Storage period:  after evaluating the responses and compiling the survey results

Recipient(s): hosting service provider for survey application

Relevant data: all of the above data

Transfer to third countries: No

 

3. Data subject rights

3.1 Right to object
You have the right to object at any time with future effect to the processing of personal data relating to you that is carried out pursuant to Article 6 para. 1 e) or f) GDPR on grounds that arise from your particular situation.

You can exercise the right to object free of charge.
 

3.2 Right to be informed
You have the right to be informed as to whether personal data concerning you is processed by us, which personal data this is, if any, and to receive further information in accordance with Art. 15 GDPR.
 

3.3 Right to rectification
You have the right to request that we correct any inaccurate personal data relating to you without undue delay (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, also by means of a supplementary declaration.
 

3.4 Right to erasure ("right to be forgotten")
You have the right to demand that personal data concerning you is deleted without undue delay, provided that one of the reasons named in Article 17 para. 1 GDPR applies and the processing is not necessary for one of the purposes regulated in Article 17 para. 3 GDPR.
 

3.5 Right to restrict processing
You are entitled to request a restriction in the processing of your personal data if one of the conditions regulated in Art. 18 para. 1 a) to d) GDPR applies.
 

3.6 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, conventional, and machine-readable format. Furthermore, you have the right to transfer this data to another responsible party without hindrance by us or to effect that a direct transfer is made by us, if this is technically possible. This shall always apply if the basis for the data processing is consent or a contract and the data is processed automatically. Accordingly, this does not apply to data available only in paper form.
 

3.7 Right to withdraw consent
You have the right to withdraw your consent at any time insofar as the processing is based on your consent. The legality of the processing carried out on the basis of the consent until withdrawal is not affected by this.
 

3.8 Right to appeal
You have the right to appeal to a supervisory authority.

 

Last revised: 20/04/2023

Logo LobaSorry, this browser is not supported.

Please use an alternative browser or update the existing software.

> ECMAScript 6 required