privacy
1. General information and principles of data processing
We are pleased that you are visiting our website. The protection of your privacy and the protection of your personal data, the so-called personal data, when using our website is important to us.
According to Art. 4 No. 1 DS-GVO, personal data is all information that relates to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your e-mail address, but also your IP address.
Data that cannot be related to your person, for example through anonymization, is not personal data. The processing (e.g. collection, storage, reading, querying, use, transmission, deletion or destruction) according to Art. 4 No. 2 DS-GVO always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any statutory retention requirements.
Here you will find information about how we handle your personal data when you visit our website. In order to provide the functions and services of our website, it is necessary for us to collect personal data about you.
We also explain to you the type and scope of the respective data processing, the purpose and the corresponding legal basis and the respective storage period.
This privacy policy only applies to this website. It does not apply to other websites to which we merely refer via a hyperlink. We cannot assume any responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please refer to these websites directly for information on how these companies handle your personal data.
2. Responsible body
Responsible for the processing of personal data on this website is (see imprint):
l & ichti Astroh
Owner Freya Lichti
Castle courtyard 2
67281 Kirchheim
Email: info@lichtiundastroh.de
Telephone: +49 (0)176 – 61917161
The company data protection officer at lichti & asroh can be reached at the above address, for the attention of Ms. Freya Lichti, or at info@lichtiundastroh.de.
3. Provision and use of the website/ server log files
a) Type and scope of data processing
If you use this website without otherwise transmitting data to us (e.g. by registering or using the contact form), we collect technically necessary data via server log files, which are automatically transmitted to our server, including:
IP address
Date and time of the request
Name and URL of the retrieved file
Website from which access is made (referrer URL)
Access Status/HTTP Status Code
browser type
Browser software language and version
operating system
b) Purpose and Legal Basis
This processing is technically necessary in order to be able to display our website to you. We also use the data to ensure the security and stability of our website.
The legal basis for this processing is Article 6 (1) (f) GDPR. The processing of the data mentioned is necessary for the provision of a website and thus serves to protect a legitimate interest of our company.
c) storage period
As soon as the personal data mentioned are no longer required to display the website, they will be deleted. The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user with regard to this aspect. Further storage can take place in individual cases if this is required by law.
4. Use of Cookies
a) Type, scope and purpose of data processing
We use cookies. Cookies are small files that are sent to the browser of your end device and stored there when you visit our website.
Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to carry out various analyses. Some cookies can recognize the browser you are using when you visit our website again and transmit various information to us. We use cookies to facilitate and improve the use of our website. For example, we can use cookies to make our website more user-friendly and effective for you, for example by understanding how you use our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. However, cookies do not cause any damage to your end device. They cannot run programs and do not contain viruses. Various types of cookies are used on our website, the type and function of which are explained below.
Temporary cookies/ session cookies
So-called temporary cookies or session cookies are used on our website, which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. This allows various requests from your browser to be assigned to a common session and it is possible to recognize your end device when you visit the website later.
Persistent cookies
So-called permanent cookies are used on our website. Persistent cookies are cookies that are stored in your browser for a longer period of time and can transmit information. The respective storage period differs depending on the cookie. You can delete permanent cookies yourself via your browser settings.
Third Party Cookies
We use analytical cookies to monitor anonymous user behavior on our website.
We also use advertising cookies. With These cookies can be used to track user behavior for advertising and targeted marketing purposes.
Social media cookies make it possible to connect to your social networks and share content from our website within your networks.
Configuration of browser settings
Most web browsers are preset to automatically accept cookies. However, you can configure your browser in such a way that it only accepts certain cookies or no cookies at all. However, we would like to point out that you may then no longer be able to use all the functions of our website.
You can also use your browser settings to delete cookies that have already been saved in your browser. It is also possible to set your browser so that it notifies you before cookies are saved. Since the various browsers can differ in their respective functions, we ask you to use the respective help menu of your browser for the corresponding configuration options.
Disabling the use of cookies may require a permanent cookie to be stored on your computer. If you subsequently delete this cookie, you must deactivate it again.
b) Legal basis
Due to the purposes described, the legal basis for the processing of personal data using cookies is Art. 6 (1) (f) GDPR. If you have given us your consent to the use of cookies on the basis of a notice (“cookie banner”) provided by us on the website, the legal basis is also Article 6 (1) (a) GDPR.
c) storage period
As soon as the data transmitted to us via the cookies is no longer required for the purposes described above, this information will be deleted. Further storage can take place in individual cases if this is required by law.
5. Data collection to carry out pre-contractual measures and to fulfill the contract
a) Type and scope of data processing
In the pre-contractual area and upon conclusion of the contract, we collect personal data about you. This concerns, for example, first and last name, address, e-mail address, telephone number or bank details.
b) Purpose and legal basis of data processing
We collect and process this data exclusively for the purpose of executing the contract or fulfilling pre-contractual obligations.
The legal basis for this is Art. 6 Para. 1 lit b) GDPR. If you also give your consent, the additional legal basis is Article 6 (1) (a) GDPR.
c) storage period
The data will be deleted as soon as they are no longer required for the purpose of their processing.
There may also be statutory retention requirements, such as commercial or tax retention requirements under the German Commercial Code (HGB) or the Fiscal Code (AO). If such storage obligations exist, we will block or delete your data at the end of these storage obligations.
6. Order Form
There is an order form on our website which can be used for electronic pre-orders.
a) Type and scope of data processing
Our data collection is limited to the following data:
First and Last Name
phone number
e-mail address
account details
name of the product
b) Purpose and Legal Basis
The purpose of data processing is to be able to process your order properly.
The legal basis for this is Article 6 Paragraph 1 Letter b) GDPR. The processing of the data serves to fulfill a contract or is necessary for the implementation of a pre-contractual measure that was carried out at the request of the person concerned.
c) storage period
The data will be deleted as soon as they are no longer required to achieve the purpose of processing.
There may also be statutory retention requirements, such as commercial or tax retention requirements under the German Commercial Code (HGB) or the Fiscal Code (AO). If such storage obligations exist, we will block or delete your data at the end of these storage obligations.
7. Registration Opportunity
a) Type and scope of data processing
You can register on our website. When you register, we collect and store the data that you enter in the input mask (e.g. last name, first name, e-mail address). A disclosure to third parties does not occur.
b) Purpose and legal basis of data processing
Your registration is necessary for the use of certain content and services on our website or for the fulfillment of a contract or for the implementation of pre-contractual measures. After registration, you are free to change the personal data provided during registration at any time or to have it completely deleted from the database of the person responsible for processing.
In the case of consent, the legal basis for processing is Article 6 (1) (a).
GDPR. If your registration serves to prepare for the conclusion of a contract, Art. 6 (1) b) GDPR is an additional legal basis.
c) storage period
The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.
8. Data Transfer
We only pass on your personal data to third parties if:
a) You have given your express consent to this in accordance with Article 6 (1) (a) GDPR.
b) this is permitted by law and required to fulfill a contractual relationship with you or to carry out pre-contractual measures in accordance with Article 6 Paragraph 1 Letter b) GDPR.
c) pursuant to Article 6 Paragraph 1 Letter c) GDPR there is a legal obligation for the transfer.
We are legally obliged to transmit data to state authorities, e.g. tax authorities, social security institutions, health insurance companies, supervisory authorities and law enforcement authorities.
d) disclosure pursuant to Art. 6 (1) (f) GDPR is necessary to protect legitimate corporate interests and to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in non-disclosure of your data.
e) according to Art. 28 DS-GVO, we use external service providers, so-called contract processors, who are obliged to handle your data with care.
We use such service providers in the areas of:
IT
logistics
telecommunications
In the case of transmission to external bodies in third countries, ie outside the EU or the EEA, we ensure that these bodies treat your personal data with the same care as within the EU or the EEA. We only transfer personal data to third countries for which the EU Commission has confirmed an adequate level of protection or if we ensure careful handling of personal data through contractual agreements or other suitable guarantees.
9. Opportunity to apply
a) Type and scope of data processing
You can apply on our website or by email. If you apply, we collect and store the data that you enter in the input mask or that you send to us by email.
b) Purpose and Legal Basis
We only process your data for the purpose of processing your application.
A disclosure to third parties does not occur. The legal basis for processing is Art. 88 (1) GDPR in conjunction with Section 26 BDSG and additionally Art. 6 (1) b) GDPR.
If you give us your consent to be included in our pool of applicants, the legal basis is Article 6 (1) (a) GDPR.
c) storage period
If we cannot offer you a position, we will store your data for a maximum of six months after the end of the application process, taking into account Section 61b (1) ArbGG in conjunction with Section 15 AGG. The start of the period is the receipt of the rejection letter.
If you have given us your consent to be included in our pool of applicants, we will store your data for a maximum of two years.
d) Data Sharing
Only the departments involved in the decision (responsible HR or specialist departments, management, works council) receive your data.
In addition, we are obliged to transmit your data to public bodies and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office, social security institutions, etc.).
Other data recipients may be those bodies for which you have given us your consent to data transmission.
10. Comment function
a) Type and scope of data processing
You can comment on articles on our website. If you comment on a post, we collect and store the data that you enter in the input mask. In addition to the comments you have left, information about the time you entered the comment and any user names (pseudonyms) you have chosen will also be stored and published. The IP address assigned to the person concerned by the Internet Service Provider (ISP) is also stored. A disclosure to third parties does not occur.
b) Purpose and Legal Basis
The data you transmit (e.g. the IP address) is for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content by submitting a comment.
This collected personal data will not be passed on to third parties unless such a transfer is required by law or serves the legal defense of the person responsible for processing.
The legal basis for the processing of personal data transmitted when using the comment function is, if and to the extent that you have given your consent, Article 6 (1) (a) GDPR. You can revoke this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
Another legal basis is Article 6 (1) (f) GDPR.
We have a legitimate interest in processing if the rights of third parties are violated or illegal content is posted. This is for security in case someone writes illegal content (insults, forbidden political propaganda, etc.) in comments and posts.
c) storage period
The comments and the associated data (e.g. IP address) are saved and remain on our website until the commented content has been completely deleted or the comments have to be deleted for legal reasons.
11. Contact options via email
You can contact us by email on our website.
a) Type and scope of data processing
You can contact us by email. Our data collection is limited to the e-mail address of the e-mail account you used to contact us and to any personal data you provided when contacting us.
b) Purpose and Legal Basis
The purpose of data processing is to be able to answer your request properly. The legal basis for this is Article 6 Paragraph 1 Letter f) GDPR. There is a legitimate interest in the processing of the above personal data in order to be able to process your request properly.
c) storage period
The duration of the storage of the above data depends on the background of your contact. Your personal data will be deleted regularly if the intended purpose of the communication no longer applies and storage is no longer necessary. This can result, for example, from the processing of your request.
12. Newsletters
a) Type and scope of data processing
On our website you have the option of subscribing to a free regular e-mail newsletter. In order to be able to send you the newsletter regularly, we need your e-mail address.
We use the so-called double opt-in procedure to send the newsletter.
This means that we will only send you an e-mail newsletter if you have expressly confirmed to us that you consent to the sending of the newsletter. We will then send you a confirmation email asking you to click on a link to confirm that you wish to receive future newsletters from us.
This is to ensure that only you as the owner of the email address provided can register for the newsletter. Your confirmation must be made promptly after receipt of the confirmation e-mail, otherwise your newsletter registration will be automatically deleted from our database.
If you subscribe to the newsletter, we collect and store the data that you enter in the input mask (e.g. last name, first name, e-mail address).
When registering for the newsletter, we also save your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later point in time. In the confirmation email sent for control purposes (double opt in the
e-mail) we also save the date and time of the click on the confirmation link and the IP address entered by the internet service provider (ISP).
b) Purpose and Legal Basis
The data collected by us when registering for the newsletter is used exclusively for advertising purposes by way of the newsletter.
The processing of your e-mail address for sending the newsletter is based on Article 6 Paragraph 1 Letter a) GDPR and Section 7 Paragraph 2 No. 3 UWG on the voluntarily submitted by you below and which can be revoked at any time for the future declaration of consent.
In addition, the processing is based on Art. 6 Para. 1 lit f) DS-GVO due to our legitimate interests in documenting the proof of the required consent.
c) storage period
Your e-mail address will be saved as long as you have subscribed to the newsletter. After you unsubscribe from the newsletter, your e-mail address will be deleted unless you have expressly consented to further use of your data.
d) Google reCAPTCHA
We use the Google reCaptcha service to determine whether a person or a computer makes a specific entry in our contact or newsletter form. Google uses the following data to check whether you are a human or a computer: IP address of the device used, the website that you are visiting and on which the Captcha is integrated, the date and duration of the visit, the identification data of the device used Browser and operating system type, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks that require you to identify images. The legal basis for the data processing described is Article 6 Paragraph 1 Letter f of the General Data Protection Regulation. There is a legitimate interest on our part in this data processing, to ensure the security of our website and to protect us from automated input (attacks).
13. Tracking and Analysis Tools
An exact overview of the web analysis and social media tools we use can be found here.
14. Data security and safeguards
We are committed to protecting your privacy and treating your personal information confidentially. To this end, we take extensive technical and organizational security precautions, which are regularly checked and adapted to technological progress.
This includes, among other things, the use of recognized encryption methods (SSL or TLS). However, data disclosed in unencrypted form, for example if this is done via an unencrypted e-mail, can possibly be read by third parties. We have no influence on that. It is the responsibility of the respective user to protect the data they have provided against misuse by encryption or in some other way.
15. Changes to the Privacy Policy
We reserve the right to update this statement as necessary at any time.
16. Your Rights
Here you will find your rights in relation to your personal data. Details can be found in Articles 7, 15-22 and 77 GDPR. You can contact the responsible office in this regard (section 2).
Right to revoke your data protection consent in accordance with Art. 7 Para. 3 S. 1 DS-GVO
You can revoke your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the lawfulness of the processing that took place up until the revocation.
a) Right to information according to Art. 15 DS-GVO
You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to information about this personal data and to further information, e.g. the processing purposes, the categories of processed personal data, the recipient and the planned duration of storage or the criteria for determining the duration.
b) Right to correction and completion according to Art. 16 DS-GVO
You have the right to request the correction of incorrect data without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.
c) Right to erasure ("right to be forgotten") according to Art. 17 GDPR
You have the right to erasure if processing is not necessary.
This is the case, for example, if your data is no longer necessary for the original purpose, you have revoked your declaration of consent under data protection law, or the data was processed unlawfully.
d) Right to restriction of processing according to Art. 18 DS-GVO
You have the right to restrict processing, for example if you believe that the personal data is incorrect.
e) Right to data portability according to Art. 20 GDPR
You have the right to receive the personal data concerning you in a structured, common and machine-readable format.
f) Right of objection according to Art. 21 DS-GVO
You have the right to object to the processing of certain personal data relating to you at any time for reasons arising from your particular situation.
In the case of direct advertising, you as the data subject have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
g) Automated decision-making in individual cases including profiling according to Art. 22 GDPR
You have the right not to be subject to a decision based solely on automated processing - including profiling - except for the exceptional circumstances mentioned in Art. 22 DS-GVO.
A decision-making based solely on automated processing - including profiling - does not take place.
h) Complaint to a data protection supervisory authority according to Art. 77 DS-GVO
You can also lodge a complaint with a data protection supervisory authority at any time, for example if you believe that data processing is not in accordance with data protection regulations.