LOBA GmbH & Co. KG Privacy Statement
The provisions of the EU General Data Protection Regulation (hereinafter referred to as "GDPR") apply. We would like to inform you about how our company processes personal data in accordance with this regulation (see Articles 13 and 14 GDPR). If you have questions or comments about this privacy statement, you can send them at any time to the email address provided in Section 1.2 or 1.3.
Table of contents:
1. Overview
1.1 Scope
1.2 Data controller
1.3 Data protection officer
2. Data processing in detail
2.1 General information about data processing
2.2 Accessing the website
2.3 Tracking to analyze and optimize our services and their use
2.4 Application(s)
2.5 Customer support
2.6 Means of contact
2.7 Competitions
2.8 Reference projects
2.9 Online surveys
3. Data subject rights
3.1 Right to object
3.2 Right to be informed
3.3 Right to rectification
3.4 Right to erasure ("right to be forgotten")
3.5 Right to restrict processing
3.6 Right to data portability
3.7 Right to withdraw consent
3.8 Right to appeal
1. Overview
This section of the Privacy Statement contains information about the scope, the data controller, and the data protection officer.
1.1 Scope
This page provides information about the type, scope, and purpose of the personal data collected by our company, which is processed both when you visit this website and in the context of other processing for which we are responsible and which is not related to this website.
1.2 Data controller
The data controller, i.e. the person who determines the purpose of the personal data and the means of processing it within the framework of its processing, is
LOBA GmbH & Co. KG
Leonbergerstr. 56–62
71254 Ditzingen, Germany
Phone +49 (0) 7156-357 0
Fax +49 (0) 7156-357 211
service@loba.de
General partner: LOBA-Beteiligungsges.mbH, 71254 Ditzingen, District Court HRB 203642
Managing partners: Michael Fischer, Alfred Melka, Mario Probst
Place of jurisdiction: Registry court Stuttgart HRA 201336
VAT ID: DE146020279
1.3 Data protection officer
Our data protection officer can be reached as follows:
Contact form:
https://www.dsextern.de/anfragen
DS EXTERN GmbH
Dipl.-Kfm. Marc Althaus
Frapanweg 22
22589 Hamburg, Germany
2. Data processing in detail
This section of the Privacy Statement provides detailed information about the processing of personal data. For better clarity, we have structured this information according to specific functions.
2.1 General information about data processing
Unless otherwise stated, the following applies to all processing described below:
2.1.1 No obligation to provide data
There is neither a contractual nor a legal obligation to provide personal data. You are not obliged to provide data.
2.1.2 Consequences of the non-provision of data
In the case of required data (data that is marked as mandatory), failure to provide this data means that the service in question cannot be provided. Otherwise, failure to provide the data may mean that our services cannot be provided in the same form and quality.
2.1.3 Transfer to government authorities
We transfer personal data to government authorities (including law enforcement agencies) only if this is necessary to fulfill a legal obligation to which we are subject (legal basis: Art. 6 para. 1 c) GDPR) or if it is necessary for the assertion, exercise, or defense against legal claims (legal basis: Art. 6 para. 1 f) GDPR).
2.1.4 Storage period
We do not store your data any longer than needed for our respective processing purposes. When the data is no longer needed, it is deleted regularly, unless its temporary retention is still necessary. Reasons for this may be, for example, the following:
- the fulfillment of retention obligations under commercial and tax law
- the preservation of evidence for legal disputes within the framework of statutory limitation provisions
2.1.5 Categories of recipients
In addition to the categories of recipients explicitly listed below, personal data is also transferred to the following categories of recipients: shipping service providers, telephone and fax providers.
2.1.6 Data categories
- Personal master data: title, form of address/gender, first name, last name, date of birth
- Address data: street, house number and if necessary, supplements to the address, postal code, city, country
- Contact data: telephone number(s), fax number(s), email address(es)
- Access data: date and time of the visit to our service; the page from which the accessing system arrived on our site; pages accessed during use; data for session identification (session ID); in addition, the following information of the accessing computer system: Internet Protocol address (IP address) used, browser type and version, device type, operating system, and similar technical information.
- Application data: resume, references, supporting documents, work samples, certificates, pictures
- Company personal data: company name, e.g. for sole proprietors or one-person limited liability companies, if the company name is identical to the name of the natural person standing behind it.
- Survey data: personal opinions, preferences, ratings
2.2 Accessing the website
This section describes how we process your personal data when you access the website.
Data category: access data
Purpose: to establish a connection, display the contents of the service, detect attacks on our site based on unusual activity, troubleshoot
Legal basis: to preserve legitimate interests (Art. 6 para. 1f GDPR)
Legitimate interest, if applicable: proper functioning of the services, security of data and business processes, prevention of misuse, prevention of damage due to tampering with information systems.
Storage period: 7 days
Recipient(s):
a. IT security service provider, hosting service provider, consent tool provider
b. provider of embedded content, YouTube, Google Maps and Google Fonts.
Relevant data: all of the above data
Transfer to third countries:
a. No
b. Yes
Recipient in third country: Google LLC (USA)
Guarantee according to Art. 44 et seq. GDPR: standard contractual clauses
2.3 Tracking to analyze and optimize our services and their use
The following describes how your personal data is processed using tracking technologies to analyze and optimize our services and for advertising purposes.
The description of the tracking methods also includes information about how you can prevent or object to the processing of your data. Please note that what is known as "opt-out", i.e. the refusal of processing, is usually stored via cookies. If you use our services on a new terminal device or in a different browser, or if you have deleted the cookies set by your browser, you will have to declare the opt-out again.
Purposes of processing
The analysis of user behavior by means of tracking helps us to verify the effectiveness of our services, to optimize them, and adapt them to the needs of users, as well as to troubleshoot.
Tracking to measure the success of advertising campaigns is used to optimize our future ads.
Legal basis for data processing
Consent according to Art. 6 para. 1 lit. a GDPR.
Information on the tracking methods used can be found in the consent tool.
2.4 Application(s)
If an application process is ongoing, we process your personal data in the following ways:
Data category:
a. personal master data
b. address data, contact data
c. application data
Purpose:
a. identification, means of contact, age verification
b. identification, means of contact, communication of contract initiation
c. applicant selection
Legal basis:
a. + b. + c. Section 26 German Federal Data Protection Act (BDSG) (new) in conjunction with Art. 88 GDPR
Legitimate interest, if applicable: -
Storage period: 6 months after the end of the application process
Recipient(s): if applicable, other departments within our company, hosting service provider (applicant management software)
Relevant data: all of the above data
Transfer to third countries: No
2.5 Technical service
Information about how we process your personal data when you contact our Technical Service can be found here:
Data category:
a. personal master data, contact data
b. content of the requests
Purpose:
a. + b.processing of requests
Legal basis:
a. contract (Art. 6 para. 1b GDPR)
b. preservation of legitimate interests (Art. 6 para. 1f GDPR)
Legitimate interest, if applicable:
a. –
b. customer loyalty, service improvements
Storage period: processing the request
Recipient(s): if applicable, other departments within our company, hosting service provider for email
Relevant data: all of the above data
Transfer to third countries: No
2.6 Means of contact
Information about how we process your personal data when you contact us by phone, in writing, or by email:
Data category: personal master data, contact data, content of requests
Purpose: processing of requests
Legal basis: to preserve legitimate interests (Art. 6 para. 1f GDPR)
Legitimate interest, if applicable: communication, processing of requests
Storage period: processing the request
Recipient(s): if applicable, other departments within our company, hosting service provider for email
Relevant data: all of the above data
Transfer to third countries: No
2.7 Competitions
We hold competitions from time to time. Information about how we process your personal data when you participate in our competitions can be found here. The respective terms of participation apply.
Data category: personal master data, address data
Purpose: execution of the competition, notification of successful participants, sending of the prizes
Legal basis: contract (Art. 6 para. 1 1b GDPR)
Legitimate interest, if applicable: -
Storage period: max. 6 months after the end of the competition
Recipient(s): personal data is only passed on internally
Relevant data: all of the above data
Transfer to third countries: No
2.8 Reference projects
Our website gives you the option of providing us with photos and videos as reference projects for publication. In doing so, we process personal data from you as described below. Please note: photos and videos in which persons are depicted will not be published.
Data category:
a. personal master data, address data
b. company personal data
Purpose:
a. personalization of consent granted via the web form to prove that consent was given
b. publication of the processor data
Legal basis:
a. contract (Art. 6 para. 1 1f GDPR)
b. consent (Art. 6 para. 1a GDPR)
Legitimate interest, if applicable:
a. see Purpose
b. -
Storage period:
a. unlimited to meet accountability requirements
b. until consent is withdrawn
Recipient(s): hosting provider, advertising agency
Relevant data: all of the above data
Transfer to third countries: No
2.9 Online surveys
We conduct online surveys from time to time. In these surveys, the data is usually pseudonymized, i.e. the identity of an individual person cannot be directly inferred from the survey data. However, in connection with a competition (see above Section 2.7), a direct reference to a person may arise. In this case, disclosure of the personal data described therein as part of the online survey is the trade-off for participation in the competition.
Data category: access data, survey data
Purpose: to conduct the online surveys to gather customer information that is meaningful to the company
Legal basis:
a. for pseudonymous surveys (no direct identification of participants): to preserve legitimate interests (Art. 6 para. 1f GDPR)
b. in connection with the competition and direct identification of participants): contract (Art. 6 para. 1b GDPR)
Legitimate interest, if applicable:
a. to conduct the online surveys to gather customer information that is meaningful to the company while preserving the pseudonymity of the participants
b. -
Storage period: after evaluating the responses and compiling the survey results
Recipient(s): hosting provider for survey application
Relevant data: all of the above data
Transfer to third countries: No
3. Data subject rights
3.1 Right to object
You have the right to object at any time with future effect to the processing of personal data relating to you that is carried out pursuant to Article 6 para. 1 e) or f) GDPR on grounds that arise from your particular situation.
You can exercise the right to object free of charge.
3.2 Right to be informed
You have the right to be informed as to whether personal data concerning you is processed by us, which personal data this is, if any, and to receive further information in accordance with Art. 15 GDPR.
3.3 Right to rectification
You have the right to request that we correct any inaccurate personal data relating to you without undue delay (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, also by means of a supplementary declaration.
3.4 Right to erasure ("right to be forgotten")
You have the right to demand that personal data concerning you is deleted without undue delay, provided that one of the reasons named in Article 17 para. 1 GDPR applies and the processing is not necessary for one of the purposes regulated in Article 17 para. 3 GDPR.
3.5 Right to restrict processing
You are entitled to request a restriction in the processing of your personal data if one of the conditions regulated in Art. 18 para. 1 a) to d) GDPR applies.
3.6 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, conventional, and machine-readable format. Furthermore, you have the right to transfer this data to another responsible party without hindrance by us or to effect that a direct transfer is made by us, if this is technically possible. This shall always apply if the basis for the data processing is consent or a contract and the data is processed automatically. Accordingly, this does not apply to data available only in paper form.
3.7 Right to withdraw consent
You have the right to withdraw your consent at any time insofar as the processing is based on your consent. The legality of the processing carried out on the basis of the consent until withdrawal is not affected by this.
3.8 Right to appeal
You have the right to appeal to a supervisory authority.
Last revised: 4/20/2023
