Privacy policy
laOlaWeb GmbH, Grassistraße 20, 04107 Leipzig
0. preliminary remark
The fundamental rights to informational self-determination and to the protection of personal data are, in our view, elementary building blocks of a free society, to which we are emphatically committed. The protection of your personal data is therefore an important concern for us, which we strive to achieve, not least with this data protection notice. It should be noted that the rights to the protection of personal data must be weighed against other fundamental rights in accordance with the principle of proportionality. In this respect, we have also taken the liberty of including applications and plug-ins on our websites, such as Google Analytics, which go beyond what is necessary in terms of the scope of data processing. However, we firmly believe that all data processing on our website does not disproportionately restrict your rights. If you do not share this assessment, please send us your constructive criticism at:
info@laolaweb.com
Our legal obligations as operators of this website include providing you with comprehensive information on what data is collected when you visit our website, how we or our service providers process your data, the legal basis on which this happens and what your legal rights are. This legal requirement from
Art. 13 of the General Data Protection Regulation (GDPR) We would like to comply with this request in the following. We have taken great care to find a comprehensible and transparent form of presentation (Art. 12 DSGVO). However, if you have any difficulties in understanding the following data protection information, please do not hesitate to contact us at any time.
I. Conceptuality
In the following text, legal terms such as "controller", "data processing", "processor", etc. are used. These legal terms are legally defined in Art. 4 No. 1 - 26 DSGVO. In our view, these legal definitions are generally comprehensible when read carefully. We will therefore rely on the legal terminology in the following. Below you will find the most important legal definitions according to Art. 4 DSGVO (excerpt of legal text):
Personal data: any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
processing: any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
controller: the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law;
recipient: a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, authorities which may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients; the processing of such data by those authorities shall be carried out in accordance with the applicable data protection rules, in accordance with the purposes of the processing;
Data subject consent: any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to personal data relating to him or her being processed;
II. responsibility for data processing
The data controller (Art. 4 No. 7 DSGVO) is:
Name: laOlaWeb GmbH
Managing Director: Tobias Ebert Address: Grassistraße 20, 04107 Leipzig Phone: 0341 / 52 98 34 74 E-mail: info@laolaweb.com
tobias.ebert@laolaweb.com
We have not appointed a data protection officer in our company, as the legal requirements according to Art. 37 DSGVO,
§ Section 38 Federal Data Protection Act (BDSG) are not fulfilled. If you have any questions in connection with the processing of your personal data, please contact us using the contact details provided.
III. Overview of the data processing procedures on our websites
Processing Purpose Legal basis
1. web presence own presentation Art. 6 para. 1 lit. f) DSGVO
2. Google WebFonts own presentation Art. 6 para. 1 lit. f) DSGVO
3. Google Maps own presentation Art. 6 para. 1 lit. f) DSGVO
4. e-mail contact Art. 6 para. 1 lit. a) DSGVO
5. contact form contact Art. 6 para. 1 lit. a) DSGVO
6. reCAPTCHA security Art. 6 para. 1 lit. f) DSGVO
Google Analytics Marketing Art. 6 para. 1 lit. f) DSGVO
8. you tube/vimeo marketing Art. 6 para. 1 lit. f) DSGVO
IV. The data processing procedures in detail
In the following, you will find a detailed description of the data processing procedures summarised under III.
1. web presence
We operate our website under the URL https://laolaweb.com/ for the purpose of our own presentation. Your personal data will be processed as follows:
Each time you call up our website, the browser installed on your end device sends a so-called http request to our web server Host Europe, Host Europe GmbH, Hansestrasse 111, 51149 Cologne, Germany. Our web server then automatically transmits certain data to the browser of your end device. This data processing is necessary in order to be able to display an Internet page at all. In addition to your IP address, the data processed as standard when displaying websites includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, your operating system, referrer URL (the previously visited page) and the requesting provider.
The legal basis for the explained data processing process is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in data processing is to ensure the integrity, confidentiality and availability of the data processed via these internet pages. You have the right to object to the processing of your personal data at any time on grounds relating to a particular situation in relation to the aforementioned processing operation (Art. 21 DSGVO).
2. Google WebFonts
We use Google WebFonts on our websites for better display. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: Google). WebFonts enable an optimal display of the contents of this website on different browser types (especially fonts). When the web fonts are called up, the IP addresses of the website visitors are transmitted to Google, together with the information that these IP addresses are on our website.
The legal basis for the explained data processing process is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in the use of Google WebFonts is a uniform and appealing presentation of our online offers. You have the right to object to the processing of your personal data at any time for reasons arising from a particular situation in relation to the aforementioned processing operation (Art. 21 DSGVO).
For more information, please visit:
https://developers.google.com/fonts/faq
https://www.google.de/intl/de/policies/privacy/
3. google maps
We use Google Maps on our website for our own presentation. By using Google Maps, map content is called up from Google servers in the USA. It is possible that Google logs and further processes this server request. It is therefore possible that your IP address will be stored by Google. Incidentally, the same also applies to JavaScript elements that may be loaded from Google servers for the purposes of browser compatibility.
The legal basis for the explained data processing process is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in the data processing is the self-presentation for a better findability of our business premises. You have the right to object to the processing of your personal data at any time for reasons arising from a specific situation in relation to the aforementioned processing operation (Art. 21 DSGVO).
For more information, please visit:
https://www.google.de/intl/de/policies/privacy/
4. e-mail
If you send us an e-mail, your e-mail address and the text of the e-mail will be stored by us. We ensure that the data is protected against unauthorised access by third parties in accordance with the state of the art. However, please note that unencrypted e-mails sent via the Internet are not sufficiently protected against unauthorised access by third parties.
The legal basis for data processing is your consent associated with sending an e-mail, or the unambiguous expression of will associated with sending, by which you make us understand that you agree to the processing of the personal data relating to you, Art. 6 para. 1 lit. a) DSGVO. You can revoke your consent at any time with effect for the future. The best way to do this is to send an email to:
info@laolaweb.com
The legality of the data processing until your revocation remains unaffected.
5. contact form
Our website contains the option of contacting us electronically via a contact form. If you contact us via the form, your name, your e-mail address and the actual enquiry will be transmitted and stored by us.
The legal basis for the data processing is your consent associated with the use of the contact form, or the unambiguous expression of will associated with the use, with which you give us to understand that you agree to the processing of the personal data concerning you, Art. 6 para. 1 lit. a) DSGVO. You can revoke your consent associated with the use of the contact form at any time with effect for the future. To do this, it is best to write an email to:
info@laolaweb.com
The legality of the data processing until your revocation remains unaffected.
6. reCAPTCHA
We use the Google reCAPTCHA service to protect contact form requests. This application makes it possible to distinguish whether the input is made by a human being or improperly, by automated machine processing. During the query, your IP address and possibly other data are transmitted to Google and further used. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The legal basis for the data processing is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in implementing reCAPTCHA is to maintain the functionality of the website by preventing abusive access. You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation (Art. 21 DSGVO).
Further information can be found at:
https://developers.google.com/recaptcha/
https://policies.google.com/privacy?hl=de
7. google analytics
Diese Website benutzt Google Analytics, einen Webanalysedienst von Google. Google Analytics verwendet sog. „Cookies", Textdateien, die auf Ihrem Computer gespeichert werden und die eine Analyse der Benutzung der Website durch Sie ermöglichen. Die durch den Cookie erzeugten Informationen über Ihre Benutzung dieser Website werden in der Regel an einen Server von Google in den USA übertragen und dort gespeichert. Die Auswertung Ihrer Daten erfolgt anonym. Der Tracking-Code von Google wurde auf unseren Webseiten so ergänzt, dass Ihre IP-Adresse durch Google um die letzten Stellen gekürzt wird, bevor die Analyse erfolgt. Eine Rückverfolgung auf Ihre Person sowie eine Zusammenführung dieser Daten mit den bereits bei Google von Ihnen bekannten Daten ist damit grundsätzlich nicht mehr möglich.
Nur in Ausnahmefällen wird die volle IP-Adresse an einen Server von Google in den USA übertragen und dort gekürzt. Im Auftrag des Betreibers dieser Website wird Google diese Informationen benutzen, um Ihre Nutzung der Website auszuwerten, um Reports über die Websiteaktivitäten zusammenzustellen und um weitere mit der Websitenutzung und der Internetnutzung verbundene Dienstleistungen gegenüber dem Websitebetreiber zu erbringen. Die im Rahmen von Google Analytics von Ihrem Browser übermittelte IP-Adresse wird nicht mit anderen Daten von Google zusammengeführt. Sie können die Speicherung der Cookies durch eine entsprechende Einstellung Ihrer Browser-Software verhindern; wir weisen Sie jedoch darauf hin, dass Sie in diesem Fall gegebenenfalls nicht sämtliche Funktionen dieser Website vollumfänglich werden nutzen können. Sie können darüber hinaus die Erfassung der durch das Cookie erzeugten und auf Ihre Nutzung der Website bezogenen Daten (inkl. Ihrer IP-Adresse) an Google sowie die Verarbeitung dieser Daten durch Google verhindern, indem sie das unter dem folgenden link verfügbare Browser-Plugin herunterladen und installieren:
https://tools.google.com/dlpage/gaoptout?hl=de%22%3Ehttp://tools.google.com/dlpage/gaoptout?hl=de
Die Rechtsgrundlage für den Datenverarbeitungsprozess ist Art. 6 Abs. 1 lit. f) DSGVO. Unser berechtigtes Interesse an der Nutzung von Google Analytics ist es, die Webseite durch Analyse des Nutzungsverhaltens stetig zu verbessern. Sie haben das Recht, aus Gründen, die sich aus Ihrer besonderen Situation ergeben, jederzeit gegen die Verarbeitung Ihrer personenbezogenen Daten Widerspruch einzulegen (Art. 21 DSGVO).
Weitere Informationen finden Sie unter:
https://www.google.de/intl/de/policies/privacy/
Opt-Out für Tracking
[borlabs-cookie type="btn-switch-consent" id="google-analytics"/]
8. YouTube/Vimeo
We use videos from YouTube and Vimeo on our websites to clearly present our agency and our services. The providers are YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066 USA - a subsidiary of Google - and Vimeo, Inc., 555 West 18th Street, New York 10011, USA.
Each time you call up the individual pages of our website on which a video has been integrated, your browser is automatically caused to download a representation of the corresponding component from YouTube or Vimeo. If you are logged in to YouTube or Vimeo at the same time, YouTube or Vimeo recognises which specific sub-page of our website you are visiting when you call up a sub-page that contains a video. This takes place regardless of whether the data subject clicks on a video or not. If you do not want this information to be transmitted to YouTube or Vimeo, you can prevent this transmission by logging out of your YouTube or Vimeo account before accessing our website.
The legal basis for this data processing is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in using YouTube or Vimeo is to present our services and our company to visitors to our websites. You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation (Art. 21 DSGVO).
You can find more information at:
https://www.youtube.com/yt/about/de/
https://www.google.de/intl/de/policies/privacy/
https://vimeo.com/privacy
V. Cookies
We use cookies on our websites. Cookies are small text files that are stored in the browser of your end device and represent it from then on. The browser can therefore be clearly identified when the cookie is later "read out".
We currently use the following cookies:
- Name: _ga; Purpose:Website analysis; Storage period: 2 years
- Name: _gat; Purpose:Website Analysis; Storage Time: 1 minute
- Name: _gid; Purpose: Website analysis; Storage duration: 24 hours
- Name: viewed_cookie_policy; Purpose: Cookie notice; Storage duration: 1 year
Link [borlabs-cookie type="btn-cookie-preference" title="View legal cookies" element="link"/]
VI. Categories of recipients
Your IP address is transmitted to the web service provider (IV., 1.). Due to the integration of analysis tools, applications and plugins (IV., 2. - 3., 6. - 8.), your IP address is transmitted to the respective providers. The exact description of the analysis and marketing tools, applications and plugins can be found under IV. There you can also see who the providers are in detail and where you can find further information.
VII. third country reference
As a matter of principle, your personal data will not be transferred to countries outside the European Union. This does not apply to IP addresses that are transmitted to providers in the USA in connection with the analysis and marketing tools, applications and plugins (IV., 2. - 3., 6. - 8.).
In this case, too, data protection is formally guaranteed. All providers used by us (Google, YouTube/Google, Vimeo) with headquarters in the USA are listed in the so-called "Privacy Shield". The Privacy Shield is an agreement between the USA and the EU that is intended to ensure compliance with European data protection standards. You can find the respective entries
here.
VIII. storage period
Your IP address and the so-called log files, which are stored when the web server is called up, are subject to log rotation, i.e. a storage period of 4 days (IV., 1.).
The storage period of the IP address through our use of the analysis and marketing tools, applications and plugins (IV., 2. - 3., 6. - 8.) can be found in the data protection notices of the respective providers.
We store the data entered in the contact form or transmitted by e-mail (IV., 4. - 5.) for as long as it is necessary to answer the enquiry or for the performance of the corresponding contractual relationship.
Otherwise, the statutory storage periods according to the German Commercial Code and the German Fiscal Code apply. After expiry of the aforementioned storage periods, the data will be deleted in accordance with the law.
IX. Data subject rights
You have various rights under the GDPR, which we would like to explain to you below:
You have the right to request information about your data processed by us free of charge at any time (Art. 15 GDPR).
You have the right to request the correction of incorrect data concerning you (Art. 16 GDPR).
You have the right to have data concerning you deleted (Art. 17 GDPR). This right is not unconditional. It is necessary that one of the following reasons applies (excerpt from the legal text):
The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
the data subject withdraws the consent on which the processing was based pursuant to Article 6(1)(a) (...) and there is no other legal basis for the processing;
the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2);
the personal data have been processed unlawfully;
erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject;
the personal data have been collected in relation to information society services offered in accordance with Article 8(1).
You have the right to request the restriction of processing in accordance with Article 18 of the GDPR.
You have the right to data portability in accordance with Art. 20 DSGVO.
X. Right of appeal
You have the right to complain to a supervisory authority (Art. 77 DSGVO), e.g. the supervisory authority responsible for the controller.
This is:
The
Saxon Data Protection Commissioner
(currently Mr. Andreas Schurig)
Devrientstr. 1
01067 Dresden
XI. Profiling
There is no profiling within the meaning of Art. 22 of the GDPR. The Google Analytics processing described under IV., 7. does not lead to a legally binding decision vis-à-vis the data subjects, as required by Art. 22 DSGVO.
Status: 18 December 2018
Data protection declaration created by
Data guardian.de
