TERMS OF PRIVACY

Privacy Notice – van Laack GmbH
 
(Version 1.0; last updated 25 May 2018)

The provisions of the EU’s General Data Protection Regulation (hereinafter referred to as GDPR) enter into force across Europe on 25 May 2018. In the following, we would like to inform you about how van Laack GmbH processes personal data in accordance with this new Regulation (see Article 13 GDPR). Please read our Privacy Notice carefully. If you have any questions or comments about this Privacy Notice, please do not hesitate to write to the email address provided in Figure 2 below at any time.

Contents

1. Overview
2. Name and contact details of the controller responsible for processing the data and of the company’s data protection officer 
3. Purposes of the data processing, legal bases, legitimate interests which are being pursued by van Laack GmbH or a third party, and categories of recipients
3.1 Visiting our website
3.2 Conclusion, execution or termination of a contract
3.3 Data processing for marketing purposes
3.4 Online presence and website optimisation
3.5 Customer accounts
4. Data transfers to recipients outside the EU
5. Your rights 

1. Overview

The following Privacy Notice informs you about how and the extent to which van Laack GmbH processes personal data. Personal data refers to information which is or can be directly or indirectly attributed to you as an individual. 

Data processing at van Laack GmbH can essentially be divided into three categories:

- All the data needed to execute a contract with van Laack GmbH is processed for the purposes of performing the contract. If external service providers (e.g. logistics companies or payment service providers) are also involved in executing the contract, your data will be passed to these service providers to the necessary extent.

- When you visit the van Laack GmbH website, various pieces of information are exchanged between your end device and our server. This information may include personal data. The information collected in this way is used, for example, to optimise our website or to display advertising on the browser of your end device.
  
- Besides using it to execute the contract, we occasionally use the data collected from you during the performance of a contract to inform you of new offers or promotions being run by van Laack.
In accordance with the provisions of the GDPR, you have various rights which you are entitled to exercise against us. These include the right to object to your data being processed in certain ways, in particular for marketing purposes. The right to object is highlighted clearly.

If you have any questions about our Privacy Notice, please do not hesitate to contact our company’s data protection officer at any time. You can find the contact details below.

2. Name and contact details of the controller responsible for processing the data and of the company’s data protection officer
 
This Privacy Notice applies to the data processing activities of van Laack GmbH, Hennes-Weisweiler-Allee 35, 41179 Mönchengladbach, Germany, and to the following websites: www.vanlaack.de and www.vanlaack.com. The data protection officer appointed by van Laack GmbH can be contacted by writing to the Data Protection Department at the above address or by emailing [email protected] 

3. Purposes of the data processing, legal bases, legitimate interests which are being pursued by van Laack GmbH or a third party, and categories of recipients

3.1 Visiting our website

When you visit our website, the browser you are using on your end device will automatically send information to our website’s server. This information will be temporarily stored in a log file. We have no influence over this. This following information will, without any action on your part, be collected and stored until it is automatically deleted:
 
• The IP address of the internet-enabled device sending the request 
• The date and time of access

• The name and URL of the requested file

• The website from which our website was accessed (referrer URL)

• The browser you are using and, if applicable, the operating system of your internet-enabled device and the name of your access provider


The legal basis for the processing of your IP address is Article 6, Paragraph 1, Letter f) GDPR. Our legitimate interest is based on the purposes of data collection listed below. We would like to take this opportunity to point out that we are not able to and will not make any attempts to use the data we collect in this way to directly identify you.

We use the IP address of your end device and the other data listed above for the following purposes:

• To ensure that a connection can be established smoothly
• To ensure that our website is user-friendly 
• To evaluate the security and stability of our system
 
The data is stored for a period of 30 days before being automatically deleted. We also use cookies, tracking tools, targeting processes and social media plug-ins on our website. See Figure 3.4 below for more detailed information on these activities and how your data is used during these processes.
If you have consented to the use of geolocation services in your browser, operating system or other settings on your end device, we will use this feature to offer you customised services relating to your current location (e.g. the location of your nearest branch). We will only process location data provided in this way for this purpose. The data will be deleted as soon as you stop using our website.

3.2 Conclusion, execution or termination of a contract

3.2.1 Data processing during the conclusion of a contract

Contracts with van Laack can be concluded either electronically or by telephone. When you enter into a contract with us, we process the data necessary to conclude, execute or terminate the contract with you. This data includes:

First name, last name
Billing and delivery address
Email address 
Invoicing and payment details 
Date of birth (if applicable)
Telephone number (if applicable)

The legal basis for this is Article 6 (1) b) GDPR, i.e. you provide us with the data on the basis of the contractual relationship you have with us. We are also obliged to process your email address on the basis of a provision in the German Civil Code (BGB) which states that we must send you an electronic order confirmation (Article 6 (1) c) GDPR). Provided that we are not processing your contact details for marketing purposes (see 3.3 below), we will store the data collected for the purpose of executing the contract until the expiry of the statutory or, if applicable, contractual warranty and guarantee rights. After these periods have expired, we will store the information which relates to the contractual relationship and is required under commercial and tax law in a way which restricts access for the periods of time stipulated by law. During these periods of time (usually six or ten years after the end of the year in which the contract was concluded), the data will only be processed again if it needs to be checked by the tax authorities.

During the execution of purchase agreements, data also needs to be processed in the following ways:

If you choose to pay by a method other than prepayment or cash on delivery, we will forward the required payment data to a payment service provider commissioned by us. For the purposes of executing the purchase agreement, we will forward your delivery address details to a logistics company commissioned by us. With your consent, we will forward your email address and, if applicable, your telephone number to the logistics company commissioned by us to ensure that the goods are delivered in accordance with your wishes. You may withdraw your consent at any time with effect for the future.

3.2.2 Identity, credit check and transfer of data to credit agencies

If you choose a payment method which poses a credit risk to van Laack (payment on invoice, direct debit), we will conduct a credit check on the basis of Article 6 (1) f) GDPR. For this purpose, your data (including your address details) will be transferred to the necessary extent to heidelpay GmbH (Vangerowstraße 18, 69115 Heidelberg, Germany) and creditPass GmbH (Mehlbeerenstr. 2, 82024 Taufkirchen, Germany). These companies will check the data on van Laack’s behalf. On the basis of the results of this check, we will decide whether we can offer you your chosen payment method or, where appropriate, whether to ask you to select an alternative payment method. Companies which generally offer their customers potentially risky payment methods have a recognised legitimate interest in protecting themselves against defaults in payment and in appointing service providers to assist them with this.
 
3.3 Data processing for marketing purposes

The following information relates to the processing of personal data for marketing purposes. The GDPR states that such data processing is generally possible and constitutes a legitimate interest on the basis of Article 6 (1) f). There are no fixed principles determining the length of time for which data may be stored for marketing purposes. Instead, companies must consider whether the data needs to be stored for marketing purposes. 

3.3.1 Use of data for marketing purposes by van Laack GmbH

Once you have concluded a contract with us, you will be treated as an existing customer. In such cases, we will process your postal address without the need for you to specifically provide us with consent to send you information by post about new products. We will process your email address without the need for you to specifically provide us with consent to send you information by email about our own, similar products.

3.3.2 Personalised advertising
To help us to only send you marketing information which matches your supposed interests, we will categorise your customer profile and supplement it with additional information. We will do this using both statistical and personal information (e.g. the basic data in your customer profile). The objective is to only send you marketing information which relates to your actual or supposed needs so that we do not bother you with unnecessary advertising. 

3.3.3 Right to object
You may object at any time and free of charge to your data being processed for the aforementioned purposes with effect for the future. If you wish, you can object to the use of one of the communication channels or both. To do so, it is enough to send us an email or letter to the contact details specified in Figure 2 above.

As soon as we receive your notice of objection, we will block the contact details concerned from being processed for marketing purposes in the future. Please note that in exceptional cases you may temporarily continue to be sent promotional materials after we receive your notice of objection. This is due to technical reasons relating to the necessary lead times for advertising and does not mean that we have failed to follow up on your notice of objection. Thank you for your understanding.
 
3.3.4 Newsletter
 
Our website provides you with the opportunity to subscribe to our newsletter. To ensure that no mistakes are made when email addresses are entered, we use a double opt-in process. This means that we will send you a confirmation link after you enter your email address into the registration field. Your email address will only be added to our mailing list once you have clicked on this confirmation link. The processing of your electronic contact details in this way takes place solely on the basis of your consent (Article 6 (1) a) GDPR). You may withdraw this consent at any time with effect for the future. To do so, it is sufficient to send a short email to this effect to the email address provided in Figure 2 above. Alternatively, you can click on the “Unsubscribe” button at the end of each newsletter. 

3.4 Online presence and website optimisation

3.4.1 Cookies – general information


We use cookies on our website. If these cookies contain personal data, they are used on the basis of Article 6 (1) f) GDPR. Our interests in optimising our website are legitimate interests within the meaning of the aforementioned provision. Cookies are small files which are automatically created by your browser and are stored on your end device (laptop, tablet, smartphone etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. The cookie stores information relating to the specific end device in use. This does not, however, mean that we can use this information to identify you directly. On the one hand, we use cookies to improve your user experience when you access our services. To this end, we use session cookies to identify that you have already visited certain pages on our website or to identify that you have already logged into your customer account. These cookies are deleted automatically as soon as you leave our website. To make our website more user-friendly, we also use temporary cookies which are stored on your end device for a specifically defined period of time. If you revisit our website to make use of our services, these cookies will automatically detect that you have already accessed our site and will identify which details you have already inputted and settings you have already defined so that you do not need to enter this information again.
 
If you have a customer account with van Laack GmbH and are logged in or have activated the “Keep me logged in” feature, the information stored in cookies will be saved to your customer account.

On the other hand, we use cookies to collect statistical data about how our website is used. This enables us to analyse how we can optimise our website for you and allows us to display information specifically tailored to you. When you revisit our website, these cookies enable us to automatically detect that you have already accessed our site. These cookies are automatically deleted after a specifically defined period of time. Most browsers accept cookies automatically. You can nevertheless adjust your browser settings so that no cookies are stored on your computer or so that a warning sign always appears before a new cookie is created. Completely disabling cookies may, however, mean that you are not able to use all the features offered by our website. The length of time for which cookies are stored depends on what they are being used for and may vary from cookie to cookie.
 
3.4.2 Google Analytics
 
To help us to design our website in line with our users’ needs and to continuously optimise our pages, we use Google Analytics, a web analytics service provided by Google Inc. (“Google”). The legal basis for this is Article 6 (1) f) GDPR. The use of Google Analytics involves the creation of pseudonymous usage profiles and cookies. The information generated by the cookie on your use of this website includes the following:
 
• Browser type/version
• Operating system used
• Referrer URL (the page you were visiting before you accessed our website)
• Hostname of the device you are using to access our website (IP address) 
• Time of the server request
 
This information is transferred to and stored on a Google server in the USA. The information is used to evaluate how our website is used, to compile reports on website activity and to provide other services relating to the use of the website and internet for the purposes of market research and to allow us to design this website in line with our users’ needs. This information may, in some cases, be transferred to third parties if doing so is required by law or if third parties have been commissioned to process this data. Your IP address will not, under any circumstances, be connected with other data held by Google. To prevent them from being connected to other data, IP addresses are anonymised using a process called IP masking.
 
You can stop cookies from being installed by selecting the relevant setting in your browser software; please note, however, that in such cases you may not be able to make full use of all the features available on this website. You can also prevent Google from collecting and processing the data generated by the cookie about your use of the website (including your IP address) by downloading and installing this browser add-on. Alternatively, and particularly when using a browser on a mobile device, you can also prevent Google Analytics from capturing data by clicking on this link.

this link. (Tracking already disabled!)

This results in an opt-out cookie being set, preventing your data from being captured when you visit this website in the future. The opt-out cookie only applies to this one browser and for our website and is stored on your device. You must set the opt-out cookie again if you delete the cookies in this browser. More information about data protection during the use of Google Analytics can be found on the Google Analytics website

3.4.3 Targeting
 
The targeting procedures described in this section are performed on the basis of Article 6 (1) f) GDPR. We use these targeting procedures to ensure that only advertising which matches your actual or supposed interests is displayed on your end devices. Making sure that we do not bother you with advertising which is of no interest to you is in both your and our interests.
 
3.4.3.1 Onsite targeting
 
We use cookies on our website to collect and evaluate information to help us to optimise the display of adverts. The information collected includes details about which of our products you have shown an interest in. The data is only collected and evaluated pseudonymously and does not allow us to identify you. In particular, the information is not linked with any personal data concerning you. We use the information to display offers to you on our website which are specially tailored to your interests as identified by how you have used our website to date. The cookie is automatically deleted after 30 days. 

3.4.3.2 Re-targeting
 
We also use retargeting technology provided by Google Inc. and Facebook Inc. This enables us to tailor our online content more precisely to your interests. We do this by setting a cookie which collects pseudonymous data about your interests. This information is used to place adverts on our partners’ websites relating to our offers which match your interests. No directly personal data is stored and no usage profiles are merged with your personal data. The cookie is stored for a period of 30 days before being automatically deleted. 

Google Inc. – remarketing
We have integrated a program code provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA into some of the pages on the van Laack online shop. This program code transfers a code to Google which Google had previously stored in a cookie in your browser. This allows Google to identify that you have accessed some of our webpages before (e.g. at the start of an order process). If you subsequently enter search terms into Google or view advertising from the Google network on other websites, we have the opportunity to display targeted adverts for our products here. This is known as remarketing. If you have a Google account, Google may link this data with your Google account. Information about data protection at Google and about how remarketing works can be found in Google’s privacy policy and in the explanatory notes on Google Remarketing. You can object to the use of remarketing by adjusting your browser settings so that cookies are disabled. This may, however, restrict your use of our website.

You can also disable the use of personalised advertising by Google by visiting Google’s Ads Settings.

Facebook Inc. – Website Custom Audiences (Facebook Pixel)
Our website uses the Facebook Pixel provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). This pixel allows us to track users’ behaviour after they have viewed or clicked on a Facebook ad. This enables us to collect information on the effectiveness of Facebook ads for statistical and market research purposes. We are unable to link the data collected in this way with any individual users. However, the data collected is also stored and processed by Facebook and we would like to inform you about this to the best of our knowledge. Facebook is able to link this data with your Facebook account and can use it for its own advertising purposes in accordance with the Facebook Data Policy.

Please note that you can allow Facebook and its partners to place ads on and outside of Facebook by visiting the Data Policy. A cookie may also be stored on your device for these purposes. Consent may only be provided by users who are over 13 years of age. If you are younger than this, please ask your legal parent or guardian for advice. 

3.4.3.3 Affiliates

We work with advertising partners to tailor the contents of our website even more closely to you. This means that when you visit our website cookies are also placed on your device by our advertising partners. These cookies are known as third-party cookies and are used to store pseudonymous information about your behaviour and interests when you visit our website. In some cases, information relating to other sites you accessed before visiting our site is also collected. This information is used to display personalised ads from our advertising partners. No personal data is stored and no usage profiles are merged with your personal data. The cookie is stored for a period of 30 days before being automatically deleted. You can prevent personalised ads from being displayed by our advertising partners by adjusting the relevant cookie setting in your browser (see 3.4.1). 

3.4.3.4 Right to object/opt out

In addition to the deactivation methods described above, you can also generally prevent the use of the aforementioned targeting technologies by adjusting the relevant cookie setting in your browser (see 3.4.1). You can also disable personalised advertising by using the preference manager available here.

3.4.4 Social media plug-ins 

We use social plug-ins from the social networks Facebook, Instagram and Pinterest on our website so that we can promote our company on these platforms. The legal basis for this is Article 6 (1) f) GDPR. The underlying promotional purpose of this can be regarded as a legitimate interest within the meaning of the GDPR. The respective providers of the social plug-ins are responsible for ensuring that they are operated in accordance with data protection legislation. To ensure that we can offer visitors to our website the best possible level of protection, we have integrated these plug-ins using the two-click method

3.4.4.1 Facebook

Our website uses plug-ins from the social network Facebook. This is a service provided by Facebook Inc. You can recognise the Facebook plug-ins from the Facebook logo or the “Like” or “Share” buttons. The following link provides on overview of the Facebook plug-ins and what they look like. When you activate a Facebook plug-in (first click), your browser will create a direct connection to Facebook’s servers. Facebook will then transfer the contents of the plug-in directly to your browser and will integrate them into the webpage. This connection tells Facebook that your browser has called up this particular page on our website. This information is communicated to Facebook even if you do not have a Facebook profile or are not logged into Facebook at the time. Your browser will directly transfer this information (including your IP address) to a Facebook server in the USA, where it will be stored. If you are logged into Facebook, Facebook will be able to directly link your visit to our website with your Facebook profile. If you interact with the plug-ins, for example by clicking on the “Like” button, this information will also be directly transferred to and stored on a Facebook server. The information will also be posted to your Facebook profile and displayed to your Facebook friends. 

Please consult Facebook’s Data Policy for information on the purpose and scope of Facebook’s data collection activities, on how Facebook processes and uses the data as well as on your rights regarding this collection of data and how you can change your settings to protect your privacy. If you do not want Facebook to directly link the data it collects about your visit to our website with your Facebook profile, you must log out of Facebook before visiting our website. 

3.4.4.2 Instagram

Features from the service Instagram are integrated into our website. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the contents of our website with your Instagram profile by clicking on the Instagram button. This allows Instagram to link your visit to our website to your user account. Please note that, as the website provider, we do not have any knowledge about the contents of the transferred data and about how this data is used by Instagram.

Please consult Instagram’s Data Policy for information on the purpose and scope of Instagram’s data collection activities, on how Instagram processes and uses the data as well as on your rights regarding this collection of data and how you can change your settings to protect your privacy.

3.4.4.3 Pinterest

Our website uses social plug-ins from the social network Pinterest. This is a service operated by Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA (“Pinterest”). When you visit a page containing such a plug-in, your browser will create a direct connection to Pinterest’s servers. In doing so, the plug-in will transfer log data to Pinterest’s server in the USA. This log data may include your IP address, the addresses of the websites you have visited which also include Pinterest features, your browser type and settings, the date and time of the request, how you use Pinterest and cookies.

Please consult Pinterest’s Privacy Policy for information on the purpose and scope of Pinterest’s data collection activities, on how Pinterest processes and uses the data as well as on your rights regarding this collection of data and how you can change your settings to protect your privacy.

3.4.5 Plugins and tools

YouTube
Our website uses plugins from YouTube, which is operated by Google. The website operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When you visit one of our sites which uses a YouTube plugin, a connection to YouTube’s servers is opened. This lets YouTube’s server know which of our sites you visited.

If you are logged into your YouTube account, you enable YouTube to match information about your Internet usage directly to your personal profile. To prevent this, log out of your YouTube account.

YouTube is used in order to present our online content in an attractive way. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1(f) GDPR.

You can find more information about user data handling in YouTube/Google’s privacy policy: https://www.google.de/intl/de/policies/privacy.

Google web fonts
To present fonts uniformly, this website uses web fonts provided by Google. When opening a site, your browser loads the necessary web fonts in its browser cache so it can display text and fonts correctly.

A connection between your browser and Google’s servers is necessary for this service. The connection lets Google know that our website is being opened by your IP address. Google web fonts are used in order to present our online content in an attractive way. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1(f) GDPR.

If your browser does not support web fonts, these will be substituted by your computer’s standard font.

You can find more information about Google web fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

Google Maps
This site uses the Google Maps service via an API. The service provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Your IP address must be stored in order to use the features of Google Maps. This information is usually transferred to and stored on a Google server in the USA. The provider of this site has no influence on the transfer of this data.

Google Maps is used in order to present our online content in an attractive way and make it easy to find the locations featured on our website. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1(f) GDPR.

You can find more information about user data handling in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

EHI seal of quality
On our website, we use the seal of quality “EHI Geprüfter Online-Shop” (“EHI Verified Online Shop”), a widget provided by EHI Retail Institute GmbH, Spichernstrasse 55, D-50672 Cologne (“EHI”). When you visit our website, dynamic content (current shop rating, certificate etc.) is loaded into the widget from EHI’s servers. This includes transferring information about your IP address, the previous website you visited, the date and time of the request, the amount of data transferred, your browser type and build, your operating system and the provider making the request (referrer data) to EHI’s servers. The data is processed on the basis of our overriding legitimate interest in improving our content in accordance with Art. 6 Para. 1(f) GDPR.
 
You can find more information about data protection at EHI here: www.ehi-siegel.de/datenschutz

3.5. Customer accounts

To ensure that our online shop is as user-friendly as possible, we give you the opportunity to permanently store your personal data in a password-protected customer account. The creation of a customer account takes place on a voluntary basis and on the basis of your consent within the meaning of Article 6 (1) a) GDPR. Once you have created your customer account, there is no need for you to re-enter any data. Moreover, you can view and amend the data stored about you in your customer account at any time.
In addition to the data you are asked to provide when placing an order, you are required to choose and enter a password in order to set up your customer account. You can then use your email address and this password to log into your customer account. Please keep your personal login data secret and, in particular, do not disclose it to any unauthorised third parties. We cannot accept any liability for misused passwords unless we are responsible for the misuse. Please note that on leaving our website you will automatically remain logged into your account unless you actively log out. You may delete your customer account at any time. Please note, however, that this will not result in the data visible in your customer account being deleted at the same time.

 3.6 Contact form and contact by telephone

We offer visitors to our website the opportunity to get in touch with us by telephone or via a contact form. We use the information you provide when making contact with us (required information is indicated with an asterisk) exclusively for the purpose of dealing with your enquiry. If you contact us by telephone to ask questions about your order, we will also need your customer number and the order number to process your enquiry. The legal basis for processing the data mentioned above is your consent pursuant to Article 6 (1) a) GDPR as well as Article 6 (1) f) GDPR. The proper processing of your enquiry can be regarded as a legitimate interest within the meaning of the GDPR. If you contact us with regard to a contractual relationship between you and us, Article 6 (1) b) GDPR, i.e. this contractual relationship, also forms the legal basis for processing data. You may withdraw your consent to the use of data as explained above at any time and free of charge with effect for the future. You can do this by sending a short message to the contact details given in section 1. This will not affect the legality of the processing of data based on your consent up to the time of your withdrawal. However, please note that it will no longer be possible to process your enquiry once any withdrawal has been made. Unless a withdrawal has been made, your data relating to the enquiry in question will be deleted once the enquiry has been dealt with.

4. Recipients outside the EU

With the exception of the data processing activities described under sections 3.4.2 and 3.4.4 above, we do not transfer your data to any recipients based outside of the European Union or the European Economic Area. The processing activities described under sections 3.4.2 and 3.4.4 result in data being transferred to the servers of the providers of tracking and/or targeting technologies commissioned by us. These servers are located in the USA. The data is transferred in accordance with the principles of the Privacy Shield and on the basis of standard contractual clauses approved by the European Commission.       

5. Your rights 


5.1. Overview

In addition to the right to withdraw any consent you have given us, you also have the following rights, provided that the relevant legal requirements are met.
 
• Right of access to the personal data we have stored about you in accordance with Article 15 GDPR; in particular, you have the right to be informed about the purposes of the processing, the categories of personal data concerned, the categories of recipient to whom your data has been or will be disclosed, the envisaged storage period and the source of the data if the personal data was not collected from you directly.

• The right to have inaccurate data rectified or to have accurate data completed in accordance with Article 16 GDPR.

• The right to have the data which we store about you erased in accordance with Article 17 GDPR, provided there are no statutory or contractual retention periods or other statutory obligations or rights relating to the continued storage of the data.


• The right to restrict the processing of your data in accordance with Article 18 GDPR, provided that the accuracy of the data is contested by you, the processing is unlawful but you are opposed to the erasure of your personal data, the controller no longer needs the personal data but you still require it in order to establish, exercise or defend legal claims, or you have objected to processing pursuant to Article 21 GDPR.

• The right to data portability in accordance with Article 20 GDPR, in other words, the right to receive in a commonly used and machine-readable format selected data which we have stored about you or the right to request that the data be transmitted to another controller.

• The right to lodge a complaint with a supervisory authority. In general, you can do this by contacting the supervisory authority in your habitual place of residence or place of work or in our place of business.

5.2. Right to object

Under the conditions laid down in Article 21 (1) GDPR, the data subject has the right to object, on grounds relating to their particular situation, to the processing of their data.

This general right to object applies to all the purposes of processing described in this Privacy Notice which are based on Article 6 (1) f) GDPR. With the exception of the special right to object to data being processed for marketing purposes (see 3.3.3 above), under the GDPR we are only obliged to implement such general objections if you cite reasons of overriding importance when raising such an objection (e.g. possible risk to human life or health). You can also contact the supervisory authority responsible for van Laack GmbH, the data protection officer of North Rhine-Westphalia (NRW), at any time.

Vorsicht! Sie nutzen einen alten Browser!
Bitte aktualisieren Sie Ihren Browser um diese Seite anzuzeigen.