Privacy Policy

Data privacy statement of Lohmann & Rauscher GmbH & Co. KG under Articles 13, 14 and 21 GDPR

I. General

1. Controller

We, Lohmann & Rauscher GmbH & Co. KG, take the protection of your personal data and the related statutory obligations very seriously. The statutory requirements demand full transparency in relation to the processing of your personal data. Only when processing is transparent for you as the data subject are you adequately informed about the significance, purpose and scope of the processing. Our privacy statement therefore provides you with a detailed explanation of what personal data are processed by us when you use our website https://www.lohmann-rauscher.com/ and any subpages linked to it (II.), as well as in relation to our other online presence on social networks (III.) and within the framework of a business relationship or when you visit our premises (IV.).

You can find our data protection advice on the production of photographs and videos at events here.

The controller within the meaning of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (FDPA) and other provisions of data protection law is

Lohmann & Rauscher GmbH & Co. KG
Irlicher Strasse 55,
56567 Neuwied,
Tel.: +49 2634 99-0,
Fax: +49 2634 99-6467,
info@de.LRMed.com,

further referred to as the “Controller” or “we”.
The data protection officer can be contacted via

Lohmann & Rauscher GmbH & Co. KG
– Data Protection Officer –
Irlicher Strasse 55,
56567 Neuwied,
Tel.: +49 2634 99-7077,
Fax: +49 2634 99-7877,
datenschutz@lrmed.com.

Please note that you may be directed to other web pages via links on our website, which are not operated by us but by third parties. These links are either clearly marked by us or are recognisable from a change in the address line of your browser. We are not responsible for compliance with the provisions of data protection law on these pages or for the safe handling of your personal data on these web pages operated by third parties.

2. Definitions

2.1. From the GDPR

This privacy statement uses the terms from the legislative text of the GDPR. You can view the definitions (Article 4, GDPR), for example, at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679.

2.2. Cookies

Cookies are text files, which a website stores on your user device or reads from it. They contain letter and number combinations designed to recognise the user and their settings, for example, upon a repeat visit to the website that inserted the cookie, to enable the user to remain logged into a customer account or to statistically analyse specific usage behaviour.

2.3. Data categories

In this privacy statement, where we refer to categories of processed data, these relate in particular to the following data: Master data (e.g., names, addresses, dates of birth), contact data (e.g., e-mail addresses, telephone numbers, messenger services), content data (e.g., text input, photographs, videos, content of documents/files), contractual data (e.g., subject matter of the contract, terms, customer category), payment data (e.g., bank details, payment history, use of other payment services providers), usage data (e.g., pathway to our website, use of particular content, access times), and connection data (e.g., device information, IP addresses, URL referrers).

3. Information on data processing

We process our data only to the extent this is permitted by law. Personal data is only shared in the cases described below. Appropriate technical and organisational measures are used to protect the personal data (e.g., pseudonymisation, encryption). ?Where we are not legally obligated to store or transfer data to third parties (particularly law enforcement agencies), the decision as to which personal data we process, for how long and to what extent we disclose them depends on the purpose for which the particular processing occurs or which function of the website you are using in the particular case.

4. Storage term

The personal data shall be erased as soon as the purpose for the processing ceases to apply or a set storage period expires unless there is a need for the personal data to continue to be stored for entry into or performance of a contract. If we use cookies, which are not essential to provide you with the service you require, we shall inform you of the period for which these cookies operate at the end of this privacy statement.

5. Automated individual decision-making, including profiling

There is no automated decision-making in particular cases, including profiling, to bring about such a decision under Article 22(1), (4), GDPR.

6. Rights of data subjects

As a data subject you have a right of access under Article 15, GDPR, a right to rectification under Article 16, GDPR, a right to erasure under Article 17, GDPR, a right to restriction of processing under Article 18, GDPR, and a right to data portability under Article 20, GDPR. In the case of the right to access and the right to erasure, the restrictions under Sections 34, 35, Federal Data Protection Act, apply. You have the right to lodge a complaint with a supervisory authority (Article 77, GDPR, in conjunction with Section 19, Federal Data Protection Act). The supervisory authority responsible for us is: The commissioner for data protection and freedom of information for Rhineland-Palatinate [Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz], Hintere Bleiche 34, 55116 Mainz. However, you have the option of lodging a complaint with a different supervisory authority.

7. The Controller’s notification obligation

We notify all recipients to whom your personal data has been disclosed of each rectification or erasure of your personal data or restriction of processing under Articles 16, 17(1) and 18, GDPR, unless notification is impossible or associated with disproportionate expense. We tell you who the recipients are if you request this.

8. Obligation to provide personal data

Unless illustrated otherwise in the information on the legal grounds provided below, you are not obligated to provide personal data. In the cases of Article 6(1)(b), GDPR, the personal data is, however, necessary for performance of, or entry into, a contract. Performance of, or entry into, the contract is not possible unless you provide the relevant personal data. Apart from that, failure to provide data may mean that you are unable to use our website or parts of it, a business relationship with us is not possible or you are unable to enter our premises (video surveillance).

9. Right of objection and withdrawal of consent

You have the right to object at any time to the processing of personal data concerning you that occurs based on Article 6(1)(f), GDPR, on grounds arising from your particular situation. Where your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing.??Under the first sentence of Article 7(3) GDPR you also have the right at any time to withdraw any consent given to us with future effect. This does not prejudice the lawfulness of the processing that occurred prior to such withdrawal of consent. Withdrawal may be sent by post or e-mail and is not required to be in a set format. Should you lodge an objection, we will no longer process your personal data unless this is permitted on other (statutory) grounds. However, where an objection occurs and no other facts exist to support consent then, under Article 17(1)(b), the personal data are immediately erased.

?The objection and withdrawals are not required to be in a set format and should be sent to:?Lohmann & Rauscher GmbH & Co. KG?Irlicher Strasse 55?56567 Neuwied?Tel.: +49 2634 99-0?Fax: +49 2634 99-6467?info@de.LRMed.com.

II. Data processing in connection with the use of the website

Use of the website and its functions often requires the processing of certain personal data.

1. Google Tag Manager

In order to include content from third-party providers (e.g. Google Analytics, Cookiebot) we use Google Tag Manager. This is a technical solution which does not itself store or read any cookies for which consent is required but merely governs the circumstances in which the other programs utilised on our website and described below are activated.

2. Use of the website for information purposes

Processing purpose: If you view our website and use it purely for information purposes, meaning without using any additional functions such as the contact form or social media plug-ins, we automatically collect personal data for functionality purposes and optimisation of the website and to ensure our IT systems are secure.

Legal basis: Article 6(1)(f), GDPR
Data categories: Usage data, connection data
Recipient of the data: IT service providers
Intended third-country transmission: None
Do we store information on your end device based on your consent or do we read such information? No

3. Cookiebot

Processing purpose: If you access our website certain information will be stored or read on your end device where this is essential for the operation of our website. This includes information which the “Cookiebot” service processes to ensure that only those cookies are stored or read as are technically essential for the operation of our website or which you have consented to. When you download the Cookiebot code, your IP address will be sent to the (“Cybot”) operator where it will be anonymised and stored. We have chosen the operator based on data protection and technical criteria.

Legal basis: Article 6(1)(c), (f), GDPR
Data categories: Usage data, connection data.
Recipient of the data: Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark
Intended third-country transmission: None.
Do we store personal data on your end device based on your consent or do we read such data? No

4. Google Fonts

Processing purpose: Greater personalisation of our website through fonts downloaded from Google servers.
Legal basis: Article 6(1)(f), GDPR
Data categories: Usage data, connection data
Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Intended third-country transmission: In specific cases, the USA (under Decision (EU) 2016/1250 – “EU-U.S. Privacy Shield”).
Do we store personal data on your end device based on your consent or do we read such data? No

5. Google Maps

Processing purpose: Incorporation of interactive maps and map function of Google Maps
Legal basis: Article 6(1)(f), GDPR
Data categories: Usage data, connection data, location data
Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Intended third-country transmission: In specific cases, the USA (under Decision (EU) 2016/1250 – “EU-U.S. Privacy Shield”)
Do we store personal data on your end device based on your consent or do we read such data? No

6. YouTube

Processing purpose: Incorporation of videos via the YouTube video plug-in for the personalisation of our website.
Legal basis: Article 6(1)(f), GDPR
Data categories: Usage data, connection data
Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Intended third-country transmission: In specific cases, the USA (under Decision (EU) 2016/1250 – “EU-U.S. Privacy Shield”)
Do we store information on your end device based on your consent or do we read such information? Yes, see overview at the end of this privacy statement

7. Facebook Custom Audiences (“Facebook Pixel”)

Processing purpose: Playing of personalised pop-ups in the Facebook Ads network based on your pseudonymised recorded surfing behaviour.
Legal basis: Article 6(1)(a), GDPR
Data categories: Usage data, connection data
Recipient of the data: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Intended third-country transmission: In specific cases, the USA (under Decision (EU) 2016/1250 – “EU-U.S. Privacy Shield”)
Do we store information on your end device based on your consent or do we read such information? Yes, see overview at the end of this privacy statement.

8. Google Analytics

Processing purpose: Statistical analysis of website use. Your IP address is collected by us before being anonymised by being abbreviated by Google before long-term storage on its servers.
Legal basis: Article 6(1)(a), GDPR
Data categories: Usage data, connection data
Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Intended third-country transmission: In specific cases, the USA (under Decision (EU) 2016/1250 – “EU-U.S. Privacy Shield”)
Do we store information on your end device based on your consent or do we read such information? Yes, see overview at the end of this privacy statement.

9. Google Ads Conversion Tracking

Processing purpose: Tracking of the success of our Google Ads advertising campaigns.
Legal basis: Article 6(1)(a), GDPR
Data categories: Usage data, connection data
Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Intended third-country transmission: In specific cases, the USA (under Decision (EU) 2016/1250 – “EU-U.S. Privacy Shield”).
Do we store personal data on your end device based on your consent or do we read such data? Yes, see overview at the end of this privacy statement.

10. Google Ads Remarketing

Processing purpose: Playing of personalised pop-ups in the Google Ads network based on your pseudonymised recorded surfing behaviour.
Legal basis: Article 6(1)(a), GDPR
Data categories: Usage data, connection data
Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Intended third-country transmission: In specific cases, the USA (under Decision (EU) 2016/1250 – “EU-U.S. Privacy Shield”).
Do we store personal data on your end device based on your consent or do we read such data? Yes, see overview at the end of this privacy statement.

11. Hotjar

Processing purpose: Analysis of your surfing and clicking behaviour on our website, creation of “heatmaps” based on this analysis, optimisation and needs-based design of the website and obtaining of feedback based on voluntary surveys.
Legal basis: Article 6(1)(a), GDPR
Data categories: Usage data, connection data.
Recipient of the data: Hotjar Ltd., Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta
Intended third-country transmission: None
Do we store personal data on your end device based on your consent or do we read such data? Yes, see overview at the end of this privacy statement.

12. LinkedIn Conversion Tracking – LinkedIn Insight Tag

Processing purpose: Tracking of the effect of our ads and playing of advertising tailored to your interests.
Legal basis: Article 6(1)(a), GDPR
Data categories: Usage data, connection data.
Recipient of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Intended third-country transmission: In specific cases, the USA (under Decision (EU) 2016/1250 – “EU-U.S. Privacy Shield”).
Do we store personal data on your end device based on your consent or do we read such data? Yes, see overview at the end of this privacy statement.

13. Request for advertising materials or offers

Processing purpose: Sending of advertising materials requested by you and creation and delivery of the offers requested by you.
Legal basis: Article 6(1)(f), GDPR; Article 6(1)(b), GDPR (should your request relate to entry into a contract or an existing contract)
Data categories: Master data, contact data, connection data, contractual data where relevant
Recipient of the data: In specific cases, affiliates within the Lohmann & Rauscher group of enterprises as well as external (esp. IT) service provider.
Intended third-country transmission: In specific cases, affiliates of Lohmann & Rauscher GmbH & Co. KG as well as external (esp. IT) service provider in third countries may receive your personal data. Should no adequacy decision by the EU Commission exist for these countries, data protection will be effected on the basis of appropriate guarantees under Art. 46, 47 DSGVO, in particular EU standard data protection clauses (according to document no. 2004/915 EC) or binding internal data protection regulations under Art. 47 DSGVO. We will provide you with a copy of these clauses upon request.
Do we store information on your end device based on your consent or do we read such information? No

14. Registration for training sessions/seminars and other events

Processing purpose: Registration for training sessions, seminars or other events via our website, proof of your registration, ensuring our IT systems are secure
Legal basis: Article 6(1)(b), (f), GDPR
Data categories: Master data, contact data, usage data, connection data, contractual data, payment data where relevant
Recipient of the data: Cooperating partner (e.g., conference hotel, courier services)
Intended third-country transmission: None
Do we store personal data on your end device based on your consent or do we read such data? No

15. Contacting us (e-mail, telephone, contact form)

Processing purpose: Response to your request via a contact form on our website, your email or your call-back request and the forwarding of your request to the responsible institutions within the Lohmann & Rauscher group of enterprises should this relate to medical matters.
Legal basis: Article 6(1)(a), GDPR; Article 6(1)(b), GDPR (should your request relate to entry into a contract or an existing contract); Article 9(2)(a), GDPR (should your request contain health data); Article 88(1), GDPR, in conjunction with Article 26(1), FDPA (should you send us documents in support of a job application)
Data categories: Master data, contact data, content data, usage data where relevant, connection data, contractual data where relevant
Recipient of the data: In specific cases, affiliates within the Lohmann & Rauscher group of enterprises as well as external (esp. IT) service provider
Intended third-country transmission: In specific cases, affiliates of Lohmann & Rauscher GmbH & Co. KG as well as external (esp. IT) service provider in third countries may receive your personal data. Should no adequacy decision by the EU Commission exist for these countries, data protection will be effected on the basis of appropriate guarantees under Art. 46, 47 DSGVO, in particular EU standard data protection clauses (according to document no. 2004/915 EC) or binding internal data protection regulations under Art. 47 DSGVO. We will provide you with a copy of these clauses upon request
Do we store information on your end device based on your consent or do we read such information? No

16. User account

Processing purpose: Creation and use of a customer account (also a precondition to orders in our online shop), ensuring our IT systems are secure.
Legal basis: Article 6(1)(a), (b), (f), GDPR
Data categories: Master data, contact data, usage data, connection data, contractual data, payment data
Recipient of the data: None
Intended third-country transmission: None
Do we store personal data on your end device based on your consent or do we read such data? No

17. Newsletter

Processing purpose: The sending of our newsletter and measurement of the clicking and opening behaviour in relation to our newsletter.
Legal basis: Consent according to Article 6(1)(a), GDPR. You can revoke your consent at any time. For example, you are provided with an uncomplicated option to withdraw your consent via the unsubscribe link in every newsletter.
Data categories: master data where relevant, contact data, usage data, connection data.
Recipients of the data: Processors who support us when sending the newsletter and are contractually subject to our instructions, e.g. the software provider Microsoft and the associated enterprises within the Lohmann & Rauscher group of enterprises which support us when implementing and using the software.
Possible third-country transmission: The data is principally stored in the EU. In special cases, e.g. support cases, specific data may be transmitted by Microsoft to third-countries, e.g. to the Microsoft Corporation in the USA. The European Commission has decided that the USA guarantees an adequate protection level for personal data transmitted from the EU to the companies which participate in the EU-U.S Data Privacy Framework. The Microsoft Corporation is included on the EU-U.S. Data Privacy Framework List.
Do we store personal data on your end device based on your consent or do we read such data? Yes, see overview at the end of this Privacy Statement.

18. Online application form

Processing purpose: Processing of your application and conduct of a recruitment process, at your request also the inclusion of your application in future recruitment processes for us or our subsidiaries, ensuring our IT systems are secure. Postal applications are forwarded to the HR department and digitalised there.
Legal basis: Article 88(1), GDPR, in conjunction with the first sentence of Article 26(1), FDPA; for applications to subsidiaries and for storage for future recruitment processes Article 6(1)(a), GDPR, in conjunction with Article 7, GDPR, Article 26(2), FDPA; Article 6(1)(f), GDPR
Data categories: Master data, contact data, content data, usage data (not in the case of applications by post), connection data (not in the case of applications by post), contractual data?Recipients of the data: rexx systems GmbH, Süderstrasse 77, 20097 Hamburg; our subsidiaries (only with your express consent)
Intended third-country transmission: None
Do we store personal data on your end device based on your consent or do we read such data? No

III. Advice in relation to external web pages of the Lohmann & Rauscher Group

1. Facebook pages

Processing purpose: Under https://www.facebook.com/LohmannRauscherDE/ and https://www.facebook.com/LohmannRauscherGroup/ we operate pages about our company and under https://www.facebook.com/pg/hip.hygieneDE and https://www.facebook.com/hip.hygieneEN/ pages on the general improvement of everyday hygiene, particularly in the medical area, which our company maintains (“Facebook pages”). When you visit and use our Facebook page, Facebook can evaluate your usage behaviour and share with us the information thereby obtained (“insights”). The page insights are used for the purposes of maximising the economic benefit of our internet presence and ensuring it is designed in line with demand.
Legal basis: Article 6(1)(f), GDPR
Data categories: master data where relevant, contact data where relevant, content data, usage data, connection data
Recipient of the data: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as joint Controller – the material terms of the agreement are available for download from https://www.facebook.com/legal/terms/page_controller_addendum)
Intended third-country transmission: None
Do we store information on your end device based on your consent or do we read such information? No
Data subjects’ rights: Facebook is responsible for implementing your rights as a data subject. Facebook provides information on your rights as a data subject at https://www.facebook.com/legal/terms/information_about_page_insights_data. You can assert your rights against us; we then immediately forward your request to Facebook.

2. LinkedIn website

Processing purpose: We operate a LinkedIn page about our company at https://www.linkedin.com/company/lohmann-&-rauscher/. When you visit and use our LinkedIn page, LinkedIn can evaluate your usage behaviour and share with us the information thereby obtained. This information is used for the purposes of maximising the economic benefit of our internet presence and ensuring it is designed in line with demand.
Legal basis: Article 6(1)(f), GDPR
Data categories: master data where relevant, contact data where relevant, content data, usage data, connection data
Recipient of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (as joint Controller – the material terms of the agreement are available for download from https://legal.linkedin.com/pages-joint-controller-addendum)
Intended third-country transmission: None
Do we store information on your end device based on your consent or do we read such information? No
Data subjects’ rights: LinkedIn is responsible for implementing your rights as a data subject. LinkedIn provides information on your rights as a data subject at www.linkedin.com/legal/privacy-policy. You can assert your rights against us; we then immediately forward your request to LinkedIn.

3. Kununu profile

Processing purpose: We operate a Kununu profile about our company at https://www.kununu.com/de/lohmann-rauscher. When you visit and use our Kununu profile, Kununu can evaluate your usage behaviour and share with us the information thereby obtained. This information is used for the purposes of maximising the economic benefit of our internet presence and ensuring it is designed in line with demand.
Legal basis: Article 6(1)(f), GDPR
Data categories: master data where relevant, contact data where relevant, content data, usage data, connection data
Recipient of the data: New Work SE, Dammtorstrasse 30, 20354 Hamburg
Intended third-country transmission: None
Do we store information on your end device based on your consent or do we read such information? No

4. Twitter account

Processing purpose: We operate a Twitter account at https://twitter.com/hip_hygiene, which is maintained by our company and promotes general improvement in everyday hygiene, particularly in the medical area. When you visit and use our Twitter account, Twitter can evaluate your usage behaviour and share with us the information thereby obtained. This information is used for the purposes of maximising the economic benefit of our internet presence and ensuring it is designed in line with demand.
Legal basis: Article 6(1)(f), GDPR
Data categories: master data where relevant, contact data where relevant, content data, usage data, connection data
Recipient of the data: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland
Intended third-country transmission: None
Do we store information on your end device based on your consent or do we read such information? No

5. Xing page

Processing purpose: We operate a Xing page about our company at https://www.xing.com/companies/lohmann%26rauscher. When you visit and use our Xing page, New Work SE (“Xing”) can evaluate your usage behaviour and share with us the information thereby obtained. This information is used for the purposes of maximising the economic benefit of our internet presence and ensuring it is designed in line with demand.
Legal basis: Article 6(1)(f), GDPR
Data categories: Master data, contact data, content data, usage data, connection data
Recipient of the data: New Work SE, Dammtorstrasse 30, 20354 Hamburg
Intended third-country transmission: None
Do we store information on your end device based on your consent or do we read such information? No

6. YouTube channel

Processing purpose: We operate a page about our company at https://www.youtube.com/user/lrcorporategroup (“YouTube channel”). When you visit and use our YouTube channel, Google can evaluate your usage behaviour and share with us the information thereby obtained. This information is used for the purposes of maximising the economic benefit of our internet presence and ensuring it is designed in line with demand.
Legal basis: Article 6(1)(f), GDPR
Data categories: Master data where relevant, contact data where relevant, content data where relevant, usage data, connection data
Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Intended third-country transmission: None
Do we store information on your end device based on your consent or do we read such information? No

7. Instagram

Processing purpose: Under www.instagram.com/materna_moments/ we operate a page, an offer from Facebook Ireland Ltd. (“Facebook”), a page with information for expectant mothers which is maintained by our company (“Instagram Page”). When you visit and use our Instagram page, Facebook can evaluate your usage behaviour and share with us the information thereby obtained (“insights”). The page insights are used for the purposes of maximising the economic benefit of our internet presence and ensuring it is designed in line with demand.
Legal basis: Article 6(1)(f), GDPR
Data categories: master data where relevant, contact data where relevant, content data, usage data, connection data
Recipient of the data: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as joint Controller – the material terms of the agreement are available for download from https://www.facebook.com/legal/terms/page_controller_addendum)
Intended third-country transmission: None
Do we store information on your end device based on your consent or do we read such information? No
Data subjects’ rights: Facebook is responsible for implementing your rights as a data subject. Facebook provides information on your rights as a data subject at https://www.facebook.com/legal/terms/information_about_page_insights_data. You can assert your rights against us; we then immediately forward your request to Facebook.

IV. Data processing for business contacts and video surveillance

1. Commercial partners (and their employees)

Processing purpose: The processing occurs for the protection of our legitimate interests in the presentation of our company, in the provision of information about our products and services, and in the promotion of sales and for invitations to participate in an exchange on potential future commercial relationships in connection with our goods and services.?Legal basis: Article 6(1)(f) GDPR (provided you have given us consent: Article 6(1)(a) GDPR)
Data categories: Master data, contact data, content data (particularly project descriptions, public reporting)
Source of the data where not collected from you: Commercial partners (e.g., project developers, architects), public sources
Recipient of the data: In specific cases, affiliates within the Lohmann & Rauscher group of enterprises as well as external (esp. IT) service provider.
Intended third-country transmission: In specific cases, affiliates of Lohmann & Rauscher GmbH & Co. KG as well as external (esp. IT) service provider in third countries may receive your personal data. Should no adequacy decision by the EU Commission exist for these countries, data protection will be effected on the basis of appropriate guarantees under Art. 46, 47 DSGVO, in particular EU standard data protection clauses (according to document no. 2004/915 EC) or binding internal data protection regulations under Art. 47 DSGVO. We will provide you with a copy of these clauses upon request.

2. Customers or suppliers (and their employees)

Processing purpose: Processing occurs primarily for the purpose of implementing pre-contractual steps or performance of a pre-existing contract between you and us. Where we have not entered into the contract with you but with your employer or principal, we process your data (e.g., as a contact) for the purpose of implementing pre-contractual steps or performance of a pre-existing contract between us and our customer. In addition, we process your personal data in order to perform our statutory obligations, e.g., under the German Commercial and Fiscal Codes and for the protection of our legitimate interests such as, for example, the determination of commercial risks (payment defaults) or, where relevant, to pursue existing legal claims against you or our customer.
Legal basis: Article 6(1)(b), (c), (f), GDPR
Data categories: Master data, contact data, contractual data, payment data
Source of the data where not collected from you: Your company
Recipient of the data: In specific cases, affiliates within the Lohmann & Rauscher group of enterprises as well as external (esp. IT) service provider.
Intended third-country transmission: In specific cases, affiliates of Lohmann & Rauscher GmbH & Co. KG as well as external (esp. IT) service provider in third countries may receive your personal data. Should no adequacy decision by the EU Commission exist for these countries, data protection will be effected on the basis of appropriate guarantees under Art. 46, 47 DSGVO, in particular EU standard data protection clauses (according to document no. 2004/915 EC) or binding internal data protection regulations under Art. 47 DSGVO. We will provide you with a copy of these clauses upon request.

3. Video surveillance

Processing purpose: Some of our buildings are equipped with live video surveillance or video intercoms. The surveillance relates only to the area around the entrance to our buildings and is for the purpose of visitor recognition by our reception and to control access to our buildings.
Storage term: No video recordings are stored.
Legal basis: Article 6(1)(f), GDPR
Data categories: Content data
Recipient of the data: None
Intended third-country transmission: None