Data protection
We take the protection of your personal data very seriously and want you to feel comfortable on our website. We therefore treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. In the following we would like to inform you about the processing of personal data in the context of the use of our website.
1. Responsible
The person responsible for the processing of personal data on this website within the meaning of the GDPR is:
​
Lottmann GbR
At Wehrhahn 100
40211 Düsseldorf
​
Managing partners:
Anja Lottmann
Thomas J. Hartmann
​
Email: mail (at) lottmann-communications.de
Phone: +49 (0) 211 498 488 11
Fax: +49 (0) 211 498 488 19
​
2. General
a) Terminology
With regard to the terms used in this data protection declaration, we refer to the definitions in Art. 4 GDPR.
When you visit our website, personal data such as inventory data, contact data, content data, contract data, usage data and meta and communication data from customers, interested parties and visitors to this online offer are processed.
b) Legal basis
The legal basis for the processing of the data can be found in Art. 6 Para. 1 GDPR. Insofar as the processing of the data takes place on the basis of our legitimate interest, the legal basis is Art. 6 Paragraph 1 lit. If we process your data on the basis of your consent, the legal basis is Art. 6 Para. 1 lit. a and Art. 7 GDPR. If we process your data in order to fulfill our own obligations, Article 6 (1) (c) GDPR is the legal basis for this. If the vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR is the legal basis for the processing.
c) SSL encryption
Communication with our website takes place exclusively using SSL encryption. This means that all data transmitted for the use of our website are transmitted in encrypted form.
d) External service providers
We use external service providers to operate our website. In doing so, it may happen that they gain knowledge of your personal data.
​
The cooperation within the scope of an order processing relationship with external service providers takes place exclusively on the basis of an order processing contract (Art. 28 GDPR), as well as on the basis of our legitimate interests in an efficient and secure provision of this online offer on the basis of your consent or on the basis of legal permission ( e.g. if the transmission is necessary for the performance of a contract).
​
Each service provider is checked before working together. In particular, we take a critical look at the technical and organizational measures taken by him for data protection and data security. Cooperation will only take place if it is ensured that the statutory contractual provisions for the protection of your personal data are complied with.
​
3. Collection of access data and log files
When you visit our website, certain data are processed by us or our hosting service provider on the basis of our legitimate interest within the meaning of Art. 6 Para. 1 lit f GDPR. This includes the IP address, date, time, accessed file / page / resource and browser information. Statistics are created from the access log in order to continuously optimize our website and its functionality.
The IP address is completely anonymized before it is saved in the log file. After 7 days, the log files are deleted from all systems associated with the use of this website; until then, storage is required for security reasons. The remaining data is stored for a longer period of time, but a personal reference can no longer be established after the IP address has been deleted.
In exceptional cases, the data will also be stored longer, namely if the storage is necessary for evidence purposes. A deletion will then take place after the incident has been clarified.
4. Establishing contact
If you contact us, for example by email, personal data will be collected. Which data is collected in addition to the sender's e-mail address results from the content of the respective e-mail and the data transmitted with it (depending on your settings). The data collected is stored solely for the purpose of answering your request or being able to contact you to answer your request and is used for the associated technical administration. It will not be passed on to third parties. The legal basis for processing this data is Article 6 (1) (f) GDPR, whereby our legitimate interest is answering your request.
​
You have the right to object to the processing of your data with future effect at any time. In this case your personal data will be deleted immediately.
Your personal data will also be deleted without your objection once we have processed your request. This also happens if the storage is not permitted for other legal reasons.
5. Cookies
We use cookies to make your visit to our website as attractive as possible and to enable you to use certain functions. Cookies are small text files that are stored on your device via your browser. A distinction is made here between session cookies, which are automatically deleted by your browser when you end your visit to our website, and cookies that enable your browser to be recognized the next time you visit our website (persistent cookies). We use this type of cookie in particular so that we can remember your selection or wish lists.
Insofar as the cookies we use process personal data, the processing takes place in accordance with Art. 6 Paragraph 1 lit. Use of our website.
​
We also work with third parties to improve the usability of our website. Here it happens that third-party cookies are also stored on your hard drive when you visit our website. In this case, we will inform you separately and in detail about the use of third-party cookies and the scope of the information collected in this data protection declaration.
If you want to restrict the use of cookies, you can make the appropriate settings in your browser. You can be informed about the setting of cookies, decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. How to make or change the settings can be found under the following links:
Internet Explorer: https://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: https://help.opera.com/Windows/10.20/de/cookies.html
6. Other integrated content and third-party services
a) External service providers
Hosting
We use a hosting service provider to provide our online offer. This serves to provide, among other things, computing capacity, storage space, security services, i.e. services that are necessary for the operation of this website. This also represents our legitimate interest within the meaning of Art. 6 Para. 1 lif. F GDPR.
Our service provider is René Münnich, trading at ALL-INKL.com - Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf.
The data protection information from ALL-INK.COM can be found at https://all-inkl.com/info/datenschutzinformationen/?session_id=8342e61cc89635f3b38edd0a8919a7bd.
WordPress
We use the free WordPress web application from Automattic Inc., 60 29th Street, 343, San Francisco, California 94110, the functions of which we expand using various plugins for the design and management of the content of our website. In order to ensure the optimal function of the website, WordPress stores various cookies on your computer.
We use the following plugins in connection with WordPress:
Cherry Data Importer, Cherry Plugin Wizard, Cherry Projects, Cherry Services List, Cherry Sidebars, Cherry Testimonials, Power Builder Integrator, Power Builder UPD, Duplicate Post, TM Mega Menu, UpdraftPlus - Backup / Restore, WordPress Importer, WP Maintenance Mode.
The legal basis for the data collected in connection with the use of WordPress and the plugins used for WordPress is our legitimate interest in the design and optimal functioning of our websites.
Automattic Inc. is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
Further information on how WordPress works can be found at https://de.wordpress.com/ . Information on data protection at Automattic Inc. can be found at https://automattic.com/privacy/ .
b) Tools and miscellaneous
We use content and services from third parties on our website. We use this on the basis of our legitimate interest in optimizing and operating our website economically (Art. 6 Para. 1 lif. F GDPR). For example, we show you the location of our offices using street maps to make your journey easier.
In order for the content on our website to be displayed by the third party, it is necessary that your IP address is recognized by the third party. Only then is it able to send the content to your browser.
Google Maps
We use Google Maps (API) from Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”) on our website. Google Maps is a service that enables maps to be displayed on the website.
When you call up a subpage that contains such a map, information such as your IP address is transmitted to the Google server in the USA and stored there.
If you have a Google account and are logged in, the data will also be assigned directly to your account.
If you are a member of Google and do not want Google to link the data collected about you to your Google account, you can prevent this by logging out of our website and deleting your cookies.
Even if you are not a member or not logged in, Google stores the data as a user profile and evaluates it on the basis of legitimate interests in displaying personalized advertising, market research and the needs-based design of its website (Art. 6 Para. 1 lit. f GDPR) the end.
You have the right to object to this creation of usage profiles. To exercise this right of objection, you must contact Google.
If you would like to prevent the transmission of your data to Google by using Google Maps in the future, you have the option of deactivating the Google Maps service by switching off the JavaScript application in your browser.
You can find Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html .
The additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html .
You can find detailed information on data protection in connection with the use of Google Maps on the Google website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/
At https://adssettings.google.com/authenticated you can make further settings regarding the use of your data for personalized advertising.
Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU.
Google Fonts
In addition to the maps from Google Maps, we also integrate fonts (Google Fonts) from the provider Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. The use of Google Web Fonts enables us to guarantee a uniform presentation of our online offer and thus represents a legitimate interest within the meaning of Art. 6 Para. 1 lit.f GDPR.
For this it is necessary that your browser establishes a connection with the Google servers. In turn, Google learns about your IP address. Your browser then loads the web fonts into your browser cache.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's data protection declaration: https://www.google.com/policies/privacy/ .
Google LLC, based in the USA, is certified for the US-European "Privacy Shield", which is a data protection agreement. This ensures compliance with the data protection level applicable in the EU.
7. Rights of data subjects
The applicable data protection law grants you comprehensive rights of data subjects. You have legal claims to information, correction, deletion, restriction of processing and objection to processing as well as a right to data portability. You can also revoke any consent you may have given to processing at any time and complain to a supervisory authority.
a) Right of objection or revocation of consent
Insofar as we process your data on the basis of our overriding legitimate interest, you have the right at any time to object to this processing for reasons that arise from your particular situation with effect for the future.
We will then no longer process this data unless there are compelling legitimate reasons for the processing that outweigh your interests or the processing is necessary for the establishment, exercise or defense of legal claims. We will then restrict the processing as much as possible.
If we process your data on the basis of your consent, you have the right to object to this processing at any time. If you make use of this right, we will stop processing
To exercise your right of objection or to revoke your consent, please contact:
Stefanie Lottmann
sl@lottmann-communications.de
b) Complaint to the supervisory authority
If you are of the opinion that the processing of your personal data does not comply with the legal requirements, you have the opportunity to complain to a supervisory authority. You can do this, for example, with the supervisory authority responsible for us.
The supervisory authority responsible for us is:
State Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Tel .: 0211 / 38424-0
Fax: 0211 / 38424-10
Email: poststelle@ldi.nrw.de
​
c) Assertion of other data subject rights
In the event of a request for information about the data stored regarding your person or the assertion of other data subject rights, please contact our data protection officer at the following contact option:
Stefanie Lottmann
sl@lottmann-communications.de
8. Duration of storage of personal data
In principle, we only store your data for as long as processing is necessary for the purpose for which the data was originally collected. We store your personal data for a maximum of as long as the respective statutory retention periods stipulate. We therefore store your data for 6 years in accordance with Section 257 (1) HGB and for 10 years in accordance with Section 147 (1) AO, provided that your data is covered by these statutory retention requirements.
After the deadlines have expired, your data will be routinely deleted unless they are required to fulfill or initiate a contract and we have no legitimate interest in further processing.
9. Data protection provisions on the application and use of Google Analytics (with anonymization function)
The person responsible for processing has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analysis service. Web analysis is the collection, collection and evaluation of data on the behavior of visitors to Internet pages. A web analysis service collects, among other things, data on the website from which a person concerned came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analysis is mainly used to optimize a website and for a cost-benefit analysis of internet advertising.
The operating company of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The person responsible for processing uses the "Google Analytics for WordPress by MonsterInsights" plug-in for web analysis via Google Analytics. The IP address of the data subject's internet connection is anonymized.
The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website, and to provide other services related to the use of our website.
Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy / and under http://www.google.com/analytics/terms/de.html can be retrieved. Google Analytics is available at this link https://www.google.com/intl/de_de/analytics/ explained in more detail.
10. Scope of application and changes to the data protection regulations
This data protection declaration generally only applies to this website. It is no longer valid if you leave the website via a link or in any other way and go to another website.
You can also find us on our online presence. This serves to be able to get in contact with the customers or interested parties active there and to be able to inform them about our services there too.
If you visit us on one of these online presences, the respective terms and conditions and data protection guidelines of the operator apply.
We process data that we receive within this online presence when users write us messages or otherwise communicate with us within these social networks in accordance with the respective data protection declaration.
We reserve the right to change our security and data protection measures as far as this becomes necessary due to technical developments and when we introduce new products and / or services to our website. In these cases, we will also adapt our information on data protection accordingly. Please therefore note the current version of our data protection declaration.