Privacy Policy

Andreas J. Ostermeier, Orlandostraße 3, 80331 Munich, Germany, (hereinafter referred to as »LexLynk« or »We«) is the responsible party within the meaning of the EU General Data Protection Regulation (»GDPR«) for the processing of your personal data.
LexLynk attaches particular importance to compliance with the requirements of data protection law. The secure handling of your data is a central concern for us.
Below we inform you about the nature, scope and purpose of the collection, processing and use of personal data.

Table of Contents open
1. Types of Data we process
  • Usage data (access times, web pages visited, etc.)
  • Inventory data (name, address, etc.)
  • Contact data (telephone number, e-mail, fax, etc.)
  • Payment data (bank data, account data, payment history, etc.)
  • Contract data (subject of the contract, term, etc.)
  • Content data (text entries, videos, photos, etc.)
  • Communication data (IP address, etc.)
2. Purposes of the Processing according to Art. 13(1) lit. c GDPR
  • Settlement of contracts
  • Evidence purposes/preservation of evidence
  • Technical and economic optimization of the website
  • Enabling easy access to the website
  • Fulfillment of contractual obligations
  • Contacting in case of legal complaints by third parties
  • Fulfillment of legal storage obligations
  • Optimization and statistical evaluation of our services
  • Supporting the commercial use of the website
  • Improvement of the user experience
  • User-friendly design of the website
  • Economic operation of advertising and website
  • Marketing/sales/advertising
  • Creation of statistics
  • Determination of the copy probability of texts
  • Prevention of SPAM and abuse
  • Handling of an applicant procedure
  • Customer service and customer care
  • Handling of contact requests
  • Provision of web pages with functions and content
  • Security measures
  • Uninterrupted, secure operation of the website
3. Categories of Data Subjects according to Art. 13(1)(e) GDPR

Affected persons are

  •  Visitors/users of the website
  • customers
  • prospective customers
  • applicants
  • Employees
  • Employees of customers or suppliers

The persons concerned are collectively referred to as »users«.

4. Legal Bases of the Processing of Personal Data

Below we inform you about the legal basis for the processing of personal data:

a) If we have obtained your consent for the processing of personal data, Art. 6 (1) sentence 1 lit. a GDPR is the legal basis.

b) If the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, which are carried out at your request, Art. 6 (1) sentence 1 lit. b GDPR is the legal basis.

c) If the processing is necessary for the fulfillment of a legal obligation to which we are subject (e.g. legal retention obligations), Art. 6 (1) sentence 1 lit. c GDPR is the legal basis.

d) If processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6 (1) sentence 1 lit. d GDPR is the legal basis.

e) If the processing is necessary to protect our legitimate interests or the legitimate interests of a third party and your interests or fundamental rights and freedoms are not overridden in this respect, Art. 6 (1) sentence 1 lit. f GDPR is the legal basis.

5. Disclosure of Personal Data to third Parties and Processors

As a matter of principle, we do not pass on any data to third parties without your consent. Should this nevertheless be the case, then the disclosure is made on the basis of the aforementioned legal grounds, e.g. in the case of the disclosure of data to online payment providers for the fulfillment of the contract or due to a court order or because of a legal obligation to hand over the data for the purpose of law enforcement, to avert danger or to enforce intellectual property rights.
We also use processors (external service providers, e.g. for web hosting of our website and databases) to process your data. Processors process your personal data on our behalf in accordance with instructions. We have concluded order processing contracts with our order processors, which fulfill the requirements of Art. 28 GDPR. We select our processors carefully and monitor them regularly. In addition, the processors must have taken appropriate technical and organizational measures and comply with the data protection provisions of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) and the GDPR.

6. Data Transfer to Third Countries

If we transfer personal data to a third country (i.e. outside the European Union/European Economic Area), this will only be done in accordance with legal requirements. Subject to express consent or contractually or legally required transfer, we only transfer personal data if an adequacy decision of the European Commission, a safeguard via so-called standard contractual clauses of the European Commission, certifications or binding internal data protection regulations exist for the country of the recipient, with which an adequate level of data protection is ensured. Insofar as we obtain your express consent to the transfer of data pursuant to Art. 49 (1) sentence 1 lit. a GDPR, we will point out the risk in this regard.

7. Deletion of Data and Storage Period

Unless expressly stated in this data protection declaration, your personal data will be deleted or blocked as soon as you revoke the consent given for processing or the purpose for storing the data no longer applies or the data is no longer required for the purpose, unless its continued storage is necessary for evidence purposes or statutory retention obligations conflict with this. This includes, for example, retention obligations under commercial law for business letters in accordance with Section 257 (1) of the German Commercial Code (Handelsgesetzbuch, HGB) (six years) and retention obligations under tax law for documents in accordance with Section 147 (1) of the German Fiscal Code (Abgabenordnung, AO) (ten years). If the prescribed retention period expires, your data will be blocked or deleted, unless the storage is still necessary for the conclusion or fulfillment of a contract.

8. Existence of Automated Decision Making

LexLynk does not use automated decision making or profiling.

9. Provision of our Website and Creation of Log Files

a) If you use the LexLynk website for informational purposes only (no registration and no other transmission of information), we collect only the personal data that your Internet browser sends to our server. If you choose to view our website, we collect the following data:

  • IP address
  • Internet service provider of the user
  • Date and time of the request
  • Internet browser type
  • Language and Internet browser version
  • Content of the retrieval
  • Time zone
  • Access status/HTTP status code
  • amount of data
  • Web pages from which the request came
  • operating system

This data is not stored together with other personal data of yours.

b) This data serves the purpose of user-friendly, functional and secure delivery of our website to you with functions and content as well as its optimization and statistical evaluation.

c) The legal basis for this is our legitimate interest in data processing in accordance with Art. 6 (1) Sentence 1 lit. f GDPR, which also lies in the above purposes.

d) For security reasons, we store this data in server log files for a storage period of 90 days. After this period, they are automatically deleted, unless we need to store them for evidence purposes in the event of attacks on the server infrastructure or other legal violations.

10. Cookies

a) We use so-called cookies when you visit our website. Cookies are small text files that your Internet browser places and stores on your computer. When you visit our website again, these cookies provide information to automatically recognize you. Cookies also include the so-called »user IDs«, where user information is stored by means of pseudonymized profiles. The use of cookies is in accordance with the legal requirements. When you access our website, we obtain your consent before using them, unless this is not required by law. Consent is not required if the storage and reading of the information is absolutely necessary in order to provide you with a telemedia service (our online offering) that you have expressly requested. You can revoke your consent at any time with effect for the future.

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the associated consents, we use the consent tool »Real Cookie Banner«. Details on how »Real Cookie Banner« works can be found at https://devowl.io/rcb/data-processing.

The legal basis for the processing of personal data in this context is Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the management of the cookies and similar technologies used and the associated consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

b) The following types of cookies are distinguished:

  • Necessary, essential cookies
    Essential cookies are cookies that are absolutely necessary for the operation of the website in order to store certain functions of the website such as logins, shopping cart or user input, e.g. regarding the language of the website.
  • Session cookies
    Session cookies are required to recognize multiple use of an offer by the same user (e.g. if you have logged in to determine your login status). When you visit our site again, these cookies provide information to automatically recognize you. The information thus obtained is used to optimize our offers and to provide you with easier access to our website. When you close the Internet browser or you log out, the session cookies are deleted.
  • Persistent cookies

These cookies remain stored even after you close the Internet browser. They are used for login storage, range measurement and marketing purposes. Persistent cookies are deleted automatically after a specified period of time, which may differ depending on the cookie. You can delete the cookies at any time in the security settings of your Internet browser.

c) Data categories

  • user data
  • cookies
  • User ID (inb. pages visited, device information, access times and IP addresses)

d) Purposes of processing
The information thus obtained serves the purpose of technically and economically optimizing our web offers and providing you with easier and safer access to our website.

e) Legal basis
If we process your personal data using cookies based on your consent (»opt-in«), then Art. 6 (1) sentence 1 lit. a GDPR is the legal basis. Otherwise, we have a legitimate interest in the effective functionality and in the improvement and economic operation of the website, so that in that case Art. 6 (1) sentence 1 lit. f GDPR is the legal basis. The legal basis is also Art. 6 (1) sentence 1 lit. b GDPR if the cookies are set to initiate a contract, e.g. for orders.

f) Storage period/deletion
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
Cookies are otherwise stored on your computer and transmitted from it to our website. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of our website.

Here you can find information on deleting cookies for various Internet browsers:

11. Consent Manager Provider

a) We have integrated the Consent Manager Provider (CMP) (service provider: consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website: https://www.consentmanager.de) as a consent management service on our website.

b) Data categories and description of data processing
Cookies, date and time of visit, device information, internet browser information, anonymized IP address, opt-in and opt-out data. Through this service, we can obtain your consent to store cookies and also document it. In addition, a cookie is stored in your Internet browser for this purpose, in order to be able to assign the consent given to you or its revocation. Below you will find more information in the privacy policy of the data processor CMP: https://www.consentmanager.de/privacy.php.

c) Purposes of data processing
Compliance with legal obligations, consent storage.

d) Legal basis
The legal basis for the processing of personal data is our legitimate interest in the above purposes pursuant to Art. 6(1) sentence 1 lit. f GDPR and compliance with legal obligations pursuant to Art. 6(1) sentence 1 lit. c GDPR.

e) Storage period
Storage of the data until you delete the CMP cookie in your internet browser yourself or the purpose for the data storage no longer applies. The revocation document of a previously granted consent is stored for a period of three years. The retention is based in particular on our accountability according to Art. 5(2) GDPR.

f) Data transfer/recipient category
CMP providers in Europe. We have therefore concluded a contract for commissioned processing pursuant to Art. 28 GDPR with the data processor.

12. Settlement of Contracts

a) We process inventory data (e.g. company, title/academic degree, names and addresses as well as contact data of users, e-mail), contract data (e.g. services used, names of contact persons) and payment data (e.g. bank details, payment history) for the purpose of fulfilling our contractual obligations (knowledge of who is the contracting party; justification, content and execution of the contract; checking the plausibility of the data) and services (e.g. contacting customer service) pursuant to Art. 6 (1) sentence 1 lit b GDPR. The entries marked as mandatory in online forms are required for the conclusion of the contract.

b) In principle, this data is not passed on to third parties, unless it is necessary for the pursuit of our claims (e.g. transfer to lawyers for debt collection) or for the fulfillment of the contract (e.g. transfer of data to payment providers) or there is a legal obligation to do so pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR.

c) We may also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information. You have the right to object to the use of your data for advertising purposes, Art. 21(2) GDPR. We will inform you of this right whenever you contact us for this purpose.

d) The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case for inventory and contract data when the data is no longer required for the performance of the contract and claims can no longer be asserted under the contract because they are time-barred (warranty: two years/regular limitation period three years). We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we restrict processing after three years if the contract is terminated, i.e. your data is only used to comply with legal obligations. Details in the user account remain until it is deleted.

13. Contact via Contact Form/E-mail/Fax/Mail

a) When contacting us via contact form, fax, mail or e-mail, your information will be processed for the purpose of handling the contact request.

b) The legal basis for the processing of the data is, if you have given your consent, Art. 6 (1) sentence 1 lit. a GDPR. The legal basis for the processing of data transmitted in the course of a contact request or e-mail, letter or fax is Art. 6 (1) sentence 1 lit. f GDPR. The responsible party has a legitimate interest in processing and storing the data in order to be able to respond to user inquiries, to preserve evidence for liability reasons and, if necessary, to be able to comply with its statutory retention obligations for business letters. If the contact aims at the conclusion of a contract, the legal basis for the processing is Art. 6 (1) sentence 1 lit. b GDPR.

c) We may store your information and contact request in our customer relationship management system (»CRM system«) or a comparable system.

d) The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified. We store inquiries from users who have an account or contract with us until two years after termination of the contract. In the case of legal archiving obligations, the deletion takes place after their expiry: end of commercial law (six years) and tax law (ten years) retention obligation.

e) If the processing is based on your consent, you have the right to revoke this consent at any time with effect for the future.

14. Contact by Phone

a) When contacting us by telephone, your telephone number will be processed and temporarily stored or displayed in the RAM/cache of the telephone device/display for the purpose of handling the contact request and its processing. The storage takes place for liability and security reasons, in order to be able to lead the proof of the call as well as for economic reasons, in order to make a recall possible. In the event of unauthorized advertising calls, we block the phone number.

b) The legal basis for the processing of the telephone number is Art. 6 (1) sentence 1 lit. f GDPR. If the contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR.

c) The device cache stores calls for 30 days and successively overwrites or deletes old data; when the device is disposed of, all data is deleted and the memory destroyed if necessary. Blocked phone numbers are checked annually for the necessity of blocking.

d) You can prevent the phone number from being displayed by calling with suppressed phone number.

15. Newsletter

a) You can subscribe to our newsletter with your voluntary consent by entering your e-mail address. Only this is mandatory. The provision of further data is voluntary and serves only the purpose of a personal address. We use the so-called »double opt-in procedure« for registration. After your registration with your e-mail, you will receive an e-mail from us with a confirmation link to confirm your registration. If you click on this confirmation link, your e-mail will be added to the newsletter distribution list and stored for the purpose of sending e-mails. If you do not click on the confirmation link within 24 hours, your registration data will be blocked and automatically deleted after 30 days.

b) In addition, we log your IP address used during registration as well as the date and time of the double opt-in (registration and confirmation). The purpose of this storage is the fulfillment of legal requirements regarding the proof of your registration as well as the prevention of abuse regarding your e-mail.

c) Within the scope of your declaration of consent, the contents/topics (e.g. advertised products/services, offers, advertising) of the newsletter are described in concrete terms.

d) We use the following shipping service provider to send e-mails: Shipping service provider [to come], whose privacy policy can be found at [https://]. We have concluded an order processing agreement with the shipping service provider in accordance with Art. 28 GDPR.

e) When sending the newsletter, we evaluate your user behavior. For this purpose, the newsletters contain so-called »web beacons« or »tracking pixels«, which are called up when the newsletter is opened. For the analyses, we link the web beacons with your e-mail address and an individual ID. Links contained in the newsletter also contain this ID. The data is collected exclusively pseudonymously, the IDs are not linked with your other personal data, a direct personal reference is excluded. With this data, we can determine whether and when you have opened the newsletter and which links in the newsletter have been clicked. This serves the purpose of optimizing and statistically evaluating our newsletter.

f) We create a user profile with the above data in order to identify the reading habits and interests of our users and thus to individualize the newsletter. If you have also taken further actions on our website, we also link this data with it in order to adapt our newsletter content to your interests.

g) The legal basis for sending the newsletter, measuring its success and storing the e-mail is your consent pursuant to Art. 6 (1) Sentence 1 lit. a GDPR in conjunction with Section 7 (2) No. 3 UWG and for logging the consent Art. 6 (1) Sentence 1 lit. f GDPR, as this serves our legitimate interest of legal provability.

h) You can object to the tracking at any time by clicking the unsubscribe link at the end of the newsletter. In that case, however, the newsletter receipt will also be terminated. If you deactivate the display of images in your e-mail software, tracking is also not possible. However, this may have restrictions with regard to the functions of the newsletter and included images will then not be displayed.

i) You can revoke your consent to the sending of the newsletter at any time. You can exercise the revocation by pressing the unsubscribe link at the bottom of the newsletter, an email or message to our contact details above. We store your data as long as you have subscribed to the newsletter. After unsubscribing, your data will only be stored anonymously for statistical purposes.

16. Google AdWords with Conversion Tracking

a) We use the Google Analytics Remarketing/»Similar Audiences« application (service provider: Google Ireland Limited, Reg. No.: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) to draw attention to our website on third-party websites and other internet offers by means of advertisements. There is a joint responsibility regarding the use of the data between Google and us according to Art. 26 DSGVO. We have agreed with Google that the primary responsibility under the GDPR for the processing of the data is ours and that we fulfill all obligations under the GDPR with regard to the processing of the data (including Articles 12, 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).

b) Data categories
Usage data/communication data

c) Description of the data processing
With the remarketing or »similar target groups« function in Ads, we can reach you where you have already visited our website and address you in each case with a suitable message per ad. With remarketing, we can bring our previous visitors back to our website by click. If you then visit other websites or Internet offers, we and Google can use the cookie to evaluate whether you have already visited our website and display our advertising there as well. Google creates statistics about this. We do not know the full extent of the data processing. The data is also transferred to the USA and analyzed there. According to Google, the data collected through remarketing is not merged with any personal data you may have stored with Google, but is processed using a pseudonym.

d) Purpose of the processing
This remarketing serves the purpose of analyzing, optimizing and economically operating our advertising and website.

e) Legal basis
If you have given your consent for processing of your personal data (»Opt-In«), then Art. 6 (1) sentence 1 lit. a GDPR is the legal basis. Otherwise, the legal basis for processing your data is our legitimate interest in the analysis, optimization and efficient economic operation of our advertising and website in accordance with Art. 6 (1) sentence 1 lit. f GDPR.

f) Data transfer/recipient category
Google Ireland

g) Storage period
When you visit certain pages of ours, a cookie is stored in your internet browser, which is valid for 30 days.

h) Options for objection and removal (»Opt-Out«)
You can object to or prevent the installation of cookies by Google in various ways:

  • You can disable cookies in your internet browser by selecting the »do not accept cookies« setting, which also includes third-party cookies.
  • You can deactivate the personalized ads directly at Google via the link https://adssettings.google.com, whereby this setting only lasts until you delete your cookies.
  • You may opt-out of personalized ads from third-party advertisers participating in the About Ads advertising self-regulatory initiative by visiting https://optout.aboutads.info for U.S. sites or http://www.youronlinechoices.com/de/praferenzmanagement/ for EU sites, and this setting will remain in effect only until you delete all your cookies.
  • You can permanently disable cookies by using a browser plug-in for Chrome, Firefox or Internet Explorer at the link https://support.google.com/ads/answer/7395996. This deactivation may result in you no longer being able to fully use all the functions of our website.

i) For more information, please see Google’s privacy policy at https://policies.google.com/privacy?hl=de&gl=de.

17. Google Analytics Remarketing/»Similar Target Groups«

a) We use the Google Analytics Remarketing/»Similar Audiences« application (service provider: Google Ireland Limited, Reg. No.: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) to draw attention to our website on third-party websites and other internet offers by means of advertisements. There is a joint responsibility regarding the use of the data between Google and us according to Art. 26 GDPR. We have agreed with Google that the primary responsibility under the GDPR for the processing of the data is assumed by us and that we fulfill all obligations under the GDPR with regard to the processing of the data (including Art. 12, 13 GDPR, Art. 15 to 22 GDPR and Art. 32 to 34 GDPR).

b) Data categories
Usage data/communication data

c) Description of data processing
With the remarketing or »similar target groups« function in Ads, we can reach you where you have already visited our website and address you in each case with a suitable message per ad. With remarketing, we can bring our previous visitors back to our website by click. If you then visit other websites or Internet offers, we and Google can use the cookie to evaluate whether you have already visited our website and display our advertising there as well. Google creates statistics about this. We do not know the full extent of the data processing. The data is also transferred to the USA and analyzed there. According to Google, the data collected by remarketing is not merged with your personal data stored by Google, if any, but is processed by pseudonym.

d) Purpose of the processing
This remarketing serves the purpose of analysis, optimization and economic operation of our advertising and website.

e) Legal basis
If you have given your consent for processing of your personal data (»Opt-In«), then Art. 6 (1) sentence 1 lit. a DSGVO is the legal basis. Otherwise, the legal basis for processing your data is our legitimate interest in the analysis, optimization and efficient economic operation of our advertising and website in accordance with Art. 6 (1) sentence 1 lit. f DSGVO.

f) Data transfer/recipient category
Google Ireland

g) Storage period
When you visit certain pages of ours, a cookie is stored in your internet browser, which is valid for 30 days.

h) Options for objection and removal (»Opt-Out«)
You can object to or prevent the installation of cookies by Google in various ways:

  • You can disable cookies in your internet browser by selecting the »do not accept cookies« setting, which also includes third-party cookies.
  • You can deactivate the personalized ads directly at Google via the link https://adssettings.google.com, whereby this setting only lasts until you delete your cookies.
  • You may opt-out of personalized ads from third-party advertisers participating in the About Ads advertising self-regulatory initiative by visiting https://optout.aboutads.info for U.S. sites or http://www.youronlinechoices.com/de/praferenzmanagement/ for EU sites, and this setting will remain in effect only until you delete all your cookies.
  • You can permanently disable cookies by using a browser plug-in for Chrome, Firefox or Internet Explorer at the link https://support.google.com/ads/answer/7395996. This deactivation may result in you no longer being able to fully use all the functions of our website.

i) For more information, please see Google’s privacy policy at https://policies.google.com/privacy?hl=de&gl=de.

18. Google Analytics

a) We have integrated the website analysis tool »Google Analytics« (service provider: Google Ireland Limited, Reg. No.: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) integrated on our website. There is a joint responsibility regarding the use of the data between Google and us according to Art. 26 GDPR. We have agreed with Google that the primary responsibility under the GDPR for the processing of the data is ours and that we fulfill all obligations under the GDPR with regard to the processing of the data (including Art. 12, 13 GDPR, Art. 15 to 22 GDPR and Art. 32 to 34 GDPR).

b) Data categories
User ID, IP address (anonymized)

c) Description of data processing
When you visit our website, Google places a cookie on your computer in order to analyze your use of our website. We have activated the IP anonymization »anonymizeIP«, which means that the IP addresses are only processed in a shortened form. On this website, your IP address is therefore shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the responsible party.

We have also activated the cross-device analysis of website visitors, which is carried out via a so-called user ID. The IP address transmitted by your internet browser as part of Google Analytics is not merged with other data from Google. You can find more information on data use by Google Analytics here at https://www.google.com/analytics/terms/de.html (Terms of use of Analytics) and at https://support.google.com/analytics/answer/6004245?hl=de  (Privacy notices for Analytics) as well as in Google’s privacy policy https://policies.google.com/privacy.

d) Purpose of the processing
The use of Google Analytics serves the purpose of analyzing, optimizing and improving our website.

e) Legal basis
If you have given your consent (»Opt-In«) for processing of your personal data, then Art. 6 (1) sentence 1 lit. a GDPR is the legal basis. In addition, the legal basis is our legitimate interest (the analysis, optimization and improvement of our website) in the data processing pursuant to Art. 6 (1) sentence 1 lit. f GDPR, which lies in the above purposes. In the case of services provided in connection with a contract, the tracking and analysis of user behavior is carried out in accordance with Art. 6 (1) sentence 1 lit. b GDPR in order to be able to offer optimized services for the fulfillment of the purpose of the contract with the information thus obtained.

f) Storage period
The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 12 months. Data whose retention period has been reached is automatically deleted once a month.

g) Data transfer/recipient category
Google, Ireland and USA. We have also concluded an order processing agreement with Google in accordance with Art. 28 GDPR and standard contractual clauses to ensure an adequate level of data protection.

h) Options for objection and removal (»Opt-Out«)

  • You can generally prevent cookies from being stored on your hard drive by selecting »do not accept cookies« in your Internet browser settings. However, this may result in a functional restriction of our offers. You can also prevent the collection of data generated by the cookie and related to your use of the website to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at http://tools.google.com/dlpage/gaoptout?hl=de.
  • As an alternative to the above browser plugin, you can prevent the collection by Google Analytics by clicking [https://]. The click will set an »opt-out« cookie that will prevent the collection of your data when visiting this website in the future. This cookie is only valid for our website and your current internet browser and will only last until you delete your cookies. In that case, you would have to set the cookie again.
  • You can deactivate the cross-device user analysis in your Google account under »My data > personal data«.
19. Social Media Presence

a) We maintain profiles in social media. When you use and call up our profile in the respective network, the respective data protection information and terms of use of the respective network apply.

b) Data categories
Usage data, contact data, content data, inventory data.

c) Description of data processing
User data within social networks is usually processed for market research and advertising purposes. For example, usage profiles can be created based on the usage behavior and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers, in which the usage behavior and interests of the users are stored. Furthermore, data independent of the devices used by the users may also be stored in the usage profiles (especially if the users are members of the respective platforms and are logged in to them). For a detailed presentation of the respective forms of processing and the options to object (»Opt-Out«), we refer to the privacy statements and information provided by the operators of the respective networks. In the case of requests for information and the assertion of data subject rights, we also point out that these can be asserted most effectively with the providers. Only the providers have access to the users’ data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

d) Purpose of the processing
Communication with users connected and registered on the social networks; information and advertising for our products, offers and services; external presentation and image cultivation; evaluation and analysis of the users and content of our presences in the social media.

e) Legal basis
The legal basis for the processing of personal data is our legitimate interest in the above purposes pursuant to Art. 6 (1) sentence 1 lit. f GDPR. Insofar as you have given us or the responsible party of the social network consent to the processing of your personal data, the legal basis is Art. 6 (1) sentence 1 lit. a in conjunction with Art. 7 GDPR.

f) Data transfer/recipient category
Social network
Here you will find data protection notices, information options and objection options (»Opt-Out«) of the respective networks/service providers:

20. Rights of the Data Subject

a) Objection or revocation against the processing of your data.
Insofar as the processing is based on your consent pursuant to Art. 6(1) sentence 1 lit. a, Art. 7 GDPR, you have the right to revoke your consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

b) Insofar as we base the processing of your personal data on the balance of interests pursuant to Art. 6(1) sentence 1 lit. f GDPR, you may object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is presented by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the merits of the case and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
You may object to the processing of your personal data for purposes of advertising and data analysis at any time. You can exercise the right to object free of charge. You can inform us of your advertising objection using the following contact details:

Andreas J. Ostermeier
LexLynk
Orlandostr. 3
80331 München
Germany
E-mail address: hello@lexlynk.com

c) Right to information
You have a right to information about your personal data stored by us in accordance with Art. 15 GDPR. This includes, in particular, information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data if it has not been collected directly from you.

d) Right to rectification
You have the right to have incorrect data corrected or correct data completed in accordance with Art. 16 GDPR.

e) Right to deletion
You have a right to have your data stored by us deleted in accordance with Art. 17 GDPR, unless legal or contractual retention periods or other legal obligations or rights to further storage conflict with this.

f) Right to restriction
You have the right to request a restriction in the processing of your personal data if one of the conditions in Article 18(1)(a) to (d) of the GDPR is met:

  • If you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
  • the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
  • the controller no longer needs the personal data for the purposes of processing, but you need them for the establishment, exercise or defense of legal claims; or
  • if you have objected to the processing pursuant to Article 21(1) GDPR and it has not yet been determined whether the controller’s legitimate grounds override your grounds.

g) Right to data portability
You have a right to data portability under Article 20 GDPR, which means that you can obtain the personal data we hold about you in a structured, commonly used and machine-readable format or request that it be transferred to another controller.

h) Right to complain
You have a right to complain to a supervisory authority. As a rule, you can contact the supervisory authority for this purpose, in particular in the Member State of your residence, your place of work or the place of the alleged infringement.

21. Data Security

In order to protect all personal data transmitted to us and to ensure that the data protection regulations are complied with by us, but also by our external service providers, we have taken appropriate technical and organizational security measures. Therefore, among other things, all data between your internet browser and our server is transmitted encrypted via a secure SSL connection.

 

As of: September 20, 2023