Skip to main content Skip to page footer
Rekord Premium Fuels Rekord Premium Fuels
DE
|
EN

Privacy Policy / Information for Users

1) Data Controller

The responsible body for the collection, processing and use of your personal data within the meaning of the Federal Data Protection Act and the General Data Protection Regulation is

  • Lausitz Energie Bergbau AG, Leagplatz 1, 03050 Cottbus
  • LEAG Pellets GmbH, Leagplatz 1, 03050 Cottbus

For questions regarding data protection, please contact our company data protection officer at:

Lausitz Energie Bergbau AG
Datenschutzbeauftragter
Leagplatz 1
03050 Cottbus
E-Mail: datenschutz(at)leag.de

2) Collection and processing of personal data

We value the protection of your personal data and comply with the applicable legal provisions on data protection and data security.

When you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser automatically transmits to our server (so-called ‘server log files’). We have no influence on this. The following information is collected without your intervention and stored until it is automatically deleted:

  • The website you visited
  • The date and time of your visit
  • Amount of data sent in bytes
  • Source/reference from which you accessed the site
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymised form)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used for any other purpose. At this point, we would like to point out that we cannot draw any direct conclusions about your identity from the data collected, nor do we do so.

However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

When you visit our website, we store access data. In this case, we only collect information that is used for statistical purposes, whereby you as a visitor remain anonymous. Such information includes, for example, the time and duration of your visit to our website and the pages you have clicked on. When you visit rekord-pellets.co.uk, so-called ‘cookies’ are used (see below).

3) SSL encryption

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line.

With SSL encryption activated, the data you transmit to us cannot be read by third parties.

4) Cookies

We use cookies for our web analysis, which serves to make our website more user-friendly and effective in accordance with Art. 6 (1) f) GDPR. Cookies are text files that are stored on your device. These are mostly so-called ‘session cookies’. These are automatically deleted from your hard drive at the end of your browser session. Other cookies remain on your device and enable us to recognise it on your next visit (so-called permanent cookies). You can prevent the use of cookies by adjusting the settings in your browser software. In this case, you may not be able to use all the functions of this website to their full extent.

Instructions for deleting cookies in the most common browsers can be found here:

5) Contacting us

When you contact us (e.g. via the contact form or email), personal data is collected. The data collected in the case of a contact form can be seen on the respective contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or for contacting you and for the associated technical administration. The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your enquiry has been processed, which is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no legal obligations to retain data.

6) Data processing when opening a customer account and for contract processing

In accordance with Art. 6 (1) (b) GDPR, personal data will continue to be collected and processed if you provide it to us for the purpose of executing a contract or opening a customer account. The data that is collected can be seen in the respective input forms. Your customer account can be deleted at any time by sending a message to the above address of the controller. We store and use the data you provide for contract processing. After complete execution of the contract or deletion of your customer account, your data will be blocked in accordance with tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use your data in accordance with the law, about which we will inform you accordingly below.

7) Comment function

When you use the comment function on this website, your comment, the time at which it was posted and the commenter name you have chosen will be stored and published on the website. Your IP address will also be logged and stored. Your IP address is stored for security reasons and in case the person concerned violates the rights of third parties or posts illegal content in a comment. We require your email address in order to contact you in the event that a third party objects to your published content as unlawful. The legal basis for the storage of your data is Art. 6 (1) (b) and (f) GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.

8) Nutzung Ihrer Daten zur Direktwerbung

8.1 Registration for our email newsletter

If you register for our email newsletter, we will send you regular information about our offers. The only mandatory information required to send you the newsletter is your email address. The provision of any further data is voluntary and will be used to address you personally. We use the double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you agree to receive the newsletter. We will then send you a confirmation email asking you to confirm that you wish to receive the newsletter in future by clicking on a corresponding link. As part of the newsletter registration process, your email address will be forwarded to Cleverreach (CleverReach GmbH & Co. KG, //CRASH Building, Schafjückenweg 2, 26180 Rastede, Germany) for the purpose of processing and sending the newsletter: www.cleverreach.com/de-de/datenschutz-und-sicherheit/. A data processing agreement (DPA) has been concluded with external service providers, who are obliged to treat the data confidentially and securely and may only use the email address to the extent necessary for processing and sending our newsletter.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR. When you register for the newsletter, we store your IP address as entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you subscribe to the newsletter will be used exclusively for the purpose of advertising via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter, directly via our newsletter page under Settings, or by sending a message to the controller mentioned above. After you have unsubscribed, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this statement.

8.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. In accordance with Section 7 (3) of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. Data processing in this respect is based solely on our legitimate interest in personalised direct advertising in accordance with Art. 6 (1) lit. f GDPR. For this purpose, your email address will be forwarded to CleverReach (CleverReach GmbH & Co. KG, //CRASH Building, Schafjückenweg 2, 26180 Rastede, Germany) for the processing and dispatch of the newsletter: https://www.cleverreach.com/de-de/datenschutz-und-sicherheit/ The external service provider is obliged to treat the data confidentially and securely and may only use the email address to the extent necessary for processing and sending our newsletter. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purposes at any time with future effect by notifying the person responsible named at the beginning. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately. This also applies if you use the linked unsubscribe function at the bottom of the newsletter.

8.3 Advertising by post

Based on our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information from you within the framework of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business designation in accordance with Art. 6 (1) (f) GDPR and use it to send you interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time by sending a message to the controller.

9) Data processing for order processing

9.1 To process your order, we work with the following service providers, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information. The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment details to the commissioned credit institution within the scope of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 (1) (b) GDPR.9.2 Weitergabe personenbezogener Daten an Versanddienstleister

  • DHL: If the goods are delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will pass on your email address to DHL in accordance with Art. 6 (1) (a) GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or notifying you of delivery, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR, we will only pass on the name of the recipient and the delivery address to DHL. The data will only be passed on if this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with DHL in advance or to notify you of the delivery. Consent can be revoked at any time with future effect by contacting the above-mentioned controller or the transport service provider DHL.
  • TSS: If the goods are delivered via the transport service provider TSS (Transport- und Speditionsgesellschaft Schwarze Pumpe mbH, An der Heide, Industriepark Schwarze Pumpe, 03130 Spremberg) or by companies commissioned by TSS, we will pass on your email address and telephone number to TSS in accordance with Art. 6 (1) (a) GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or notifying you of delivery, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 (1) lit. b GDPR, we will only pass on the name of the recipient and the delivery address to TSS. The data will only be passed on if this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date in advance with TSS and the companies commissioned by TSS or to notify you of the delivery. Consent can be revoked at any time with future effect by contacting the above-mentioned controller or the transport service provider TSS.

9.3 Use of payment service providers

  • Unzer GmbH: When paying by credit card, SEPA direct debit, PayPal, secure invoice purchase or prepayment via Unzer GmbH, payment processing is carried out by the payment service provider Unzer GmbH, Vangerowstraße 18, 69115 Heidelberg (hereinafter ‘Unzer’), to whom we pass on the data you provided during the ordering process exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR. The data will only be passed on if it is actually necessary for payment processing. If you select the payment method ‘purchase on account’, your personal data (first and last name, street, house number, postcode, town, gender, email address, telephone number and IP address) and data relating to the order (e.g. invoice amount, items, delivery method) will be passed on to Unzer for the purpose of identity and credit checks, provided that you have expressly consented to this in accordance with Art. 6 (1) (a) GDPR during the ordering process. Unzer or debt collection agencies may obtain information and creditworthiness data from credit agencies based on mathematical-statistical methods using address data in order to assess your creditworthiness. Specifically, this may involve the following service providers, which are listed as examples but are not exhaustive: Schufa Holding AG, Bürgel Wirtschaftsinformationen GmbH & Co. KG, Arvato Infoscore GmbH, Deltavista GmbH, Universum Business GmbH, Bisnode International Group, Regis24 GmbH, Creditreform AG. You may object to this processing of your data at any time by sending a message to the data controller or to Unzer. However, Unzer may still be entitled to process your personal data if this is necessary for contractual payment processing.
  • Paypal: When paying via PayPal, we will pass on your payment details to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter ‘PayPal’) for the purpose of processing the payment. The transfer is carried out in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for payment processing. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

10) Contacting you to remind you to leave a review

Our own review reminder (not sent by a customer review system)

We use your email address to send you a one-time reminder to submit a review of your order for the review system we use, provided that you have given us your express consent to do so during or after your order in accordance with Art. 6 (1) (a) GDPR.

You can revoke your consent at any time by sending a message to the data controller.

11) Use of social media plugins

Social media plugins are applications that enable content to be accessed or shared via various service providers.

On pages that contain such plugins, your browser establishes a direct connection to the server of the respective network as soon as you click on them. By clicking on the button, you agree that the respective providers may process your data in accordance with their currently valid privacy policy. This provides the network with information about the use of this page. If you are logged into the respective network at this point, your visit to our website and all interactions in connection with the social media plugins (e.g. clicking the ‘Like’ button, creating a comment, etc.) can be assigned to your profile and stored by the network. Even if you do not have your own profile, it cannot be ruled out that data will be stored. We would like to point out that, as the provider of our pages, we do not receive/have any knowledge of the content of the data transmitted or its use by the social media providers. To minimise data collection by social media providers, please log out of the networks before visiting our website.

Our website at www.rekord-pellets.de incorporates features from YouTube, Instagram, Flickr and LinkedIn.

You can find the privacy policies of the respective providers here: 

12) Data processing in relation to our social media offerings

We maintain publicly accessible profiles on the social networks Facebook, Instagram, YouTube, LinkedIn and Xing. We use these offerings to ensure that we provide a wide range of information on the internet. This is a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.

Social networks can usually analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners).

If you are logged into a social media network with your account and visit our social media page, the network operator can associate this visit with your user account. Your data may also be collected even if you are not logged in and/or do not have an account with the respective network. This data collection then occurs via cookies stored on your device or by recording your IP address. We have no control over this. Please refer to the respective privacy policies of the individual networks for further information. You will find this information below.

Facebook-Accounts

LEAG currently operates the Facebook page LEAG Conference Center @LEAGKCL and the closed Facebook group LEAG Training. Joint controllers for the operation of these pages, as defined by the GDPR, are: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, and LEAG. We are present on Facebook to promote our services and products and to connect with you as a visitor and user of these Facebook pages and our website. As operators of the Facebook pages, we have no interest in collecting or further processing your individual personal data for analysis or marketing purposes. The operation of the Facebook page, including the processing of users' personal data, is based on our legitimate interests in providing a modern and supportive platform for information and interaction with our users and visitors, pursuant to Art. 6 para. 1 lit. f GDPR. In its ruling of June 5, 2018, the European Court of Justice (ECJ) decided that the operator of a Facebook page is jointly responsible with Meta Platforms for the processing of personal data. You can find the key details of this joint processing of your data here: https://www.facebook.com/legal/controller_addendum.

We are aware that Facebook processes user data for the following purposes:

  • Advertising (analysis, creation of personalized advertising)
  • Creation of user profiles
  • Market research.

Meta Platforms uses cookies—small text files stored on users' various devices—to store and further process this information. If the user has a Facebook profile and is logged in, the storage and analysis also occur across devices. The privacy policy of Meta Platforms Ireland Limited contains further information on data processing: de-de.facebook.com/about/privacy

We, as the operators of this website, cannot rule out the transfer and further processing of users' personal data to third countries, such as the USA, and the associated potential risks for users.

Statistical data from various categories is available to us via the so-called "Insights" feature of our Facebook page. These statistics are generated and provided by Meta Platforms Ireland Limited. As the page operator, we have no influence on their generation or presentation. We cannot disable this function or prevent the generation and processing of the data. For a selectable period and for each of the categories of fans, subscribers, people reached, and people interacting, Meta Platforms Ireland Limited provides us with the following data relating to our Facebook page: total number of page views, "likes," page activity, post interactions, reach, video views, post reach, comments, shares, replies, gender distribution, origin by country and city, language, shop views and clicks, clicks on directions, and clicks on phone numbers.

Data relating to Facebook groups linked to our Facebook page is also provided in this way. Due to the ongoing development of Facebook, the availability and presentation of this data is subject to change, so for further details we refer you to the aforementioned privacy policy of Meta Platforms Ireland Limited.

We use this aggregated data to make our posts and activities on our Facebook pages more appealing to users. For example, we use age and gender demographics for targeted messaging and users' preferred visiting times to optimize the timing of our posts. Information about the types of devices visitors use helps us to adapt the visual design of our posts accordingly. In accordance with the Meta Platforms Ireland Limited Terms of Service, which every user agrees to when creating a Facebook profile, we can identify the page's subscribers and fans and view their profiles and other information they have shared.

Since only Meta Platforms Ireland Limited has full access to user data, we recommend that you contact Meta Platforms Ireland Limited directly if you have any requests for information or other questions regarding your rights as a user (e.g., the right to erasure). Should you require assistance or have any other questions, please feel free to contact us at datenschutz@leag.de. If you no longer wish for your data to be processed as described here, please disconnect your user profile from our page by using the "Unlike this page" and/or "Unfollow this page" functions.

Instagram-Accounts

LEAG currently operates the Instagram pages LEAG Ausbildung and Lusatia Sativa. Joint controllers for the operation of these pages within the meaning of the GDPR are: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, and LEAG.

We are present on Instagram to promote our services and products and to connect with you as a visitor and user of these Instagram pages and our website. As the operators of the Instagram pages, we have no interest in collecting or further processing your individual personal data for analysis or marketing purposes.

The operation of the Instagram pages, including the processing of users' personal data, is based on our legitimate interests in providing a modern and supportive platform for information and interaction with our users and visitors, in accordance with Article 6(1)(f) of the GDPR.

Instagram is a product of Meta Platforms Ireland Limited. In its ruling of June 5, 2018, the European Court of Justice (ECJ) decided that the operator of an Instagram page is jointly responsible with the provider, Meta Platforms Ireland Limited, for the processing of personal data. You can find the essential details of this joint processing of your data here:https://www.facebook.com/legal/controller_addendum.

We are aware that Facebook processes user data for the following purposes:

  • Advertising (analysis, creation of personalized advertising)
  • Creation of user profiles
  • Market research.

Meta Platforms uses cookies—small text files stored on users' various devices—to store and further process this information. If the user has an Instagram profile and is logged in, the storage and analysis also occur across multiple devices.

Facebook's privacy policy contains further information on data processing on Instagram: https://help.instagram.com/519522125107875

The transfer and further processing of users' personal data to third countries, such as the USA, and the associated potential risks for users cannot be ruled out by us as the operators of this page.

We can access statistical data of various categories via the so-called "Insights" of Instagram pages. These statistics are generated and provided by Meta Platforms. As the operators of this page, we have no influence on their generation and presentation. We cannot disable this function or prevent the generation and processing of the data. For a selectable period and for each of the categories of fans, followers, people reached, and people interacting, Meta Platforms provides us with the following data relating to our Instagram pages: total number of page views, "likes," page activity, post interactions, reach, video views, post reach, comments, shares, replies, gender distribution, origin by country and city, language, shop views and clicks, clicks on route planners, and clicks on phone numbers. 

Due to the constant development of meta platforms, the availability and processing of data is changing, so for further details we refer to the aforementioned privacy policy of Instagram/Facebook.

We use this aggregated data to make our posts and activities on our Instagram pages more appealing to users. For example, we use age and gender demographics for targeted messaging and users' preferred visiting times to optimize the timing of our posts. Information about the types of devices visitors use helps us to adapt the visual design of our posts accordingly. In accordance with Instagram's Terms of Service, which every user agrees to when creating an Instagram profile, we can identify the page's subscribers and fans and view their profiles and other information they have shared.

Since only Meta Platforms has full access to user data, we recommend contacting Facebook directly if you have information requests or other questions regarding your rights as a user (e.g., the right to erasure). Should you require assistance or have any other questions, please feel free to contact us at datenschutz@leag.de. If you no longer wish for your data to be processed as described here, please disconnect your user profile from our page by using the "Unlike" and/or "Unfollow" functions.

YouTube-Angebot

LEAG uploads videos to YouTube under the username leag_de . This channel is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details regarding their handling of personal data can be found in YouTube's privacy policy: https://policies.google.com/?hl=de.

LEAG auf LinkedIn

LEAG is represented on LinkedIn with a company profile under LEAG and several brand profiles  (LEAG energy cubes and MCR engineering Lausitz).

LinkedIn Ireland Unlimited Company (Ireland/EU – “LinkedIn”) is solely responsible for the processing of personal data when you visit our LinkedIn profiles. Further information about LinkedIn's processing of personal data can be found at https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.

We have entered into an agreement with LinkedIn that defines the distribution of data protection responsibilities between us and LinkedIn. The agreement can be accessed at: https://legal.linkedin.com/pages-joint-controller-addendum.

We advertise on LinkedIn. Targeted advertising is a legitimate interest of our company. Our website uses the "LinkedIn Insight Tag" conversion tool from LinkedIn Ireland Unlimited Company. LinkedIn Insight is a JavaScript code embedded on our website. This code tracks visits to our website by LinkedIn members. LinkedIn then receives information that you have visited our website and links this information to your LinkedIn profile data to display targeted ads for our company on LinkedIn. This allows us to measure the performance of our ads.

If you consent to the use of this service (see section 4 (2)), a so-called cookie will be stored on your device, which enables the collection of data including: IP address, device and browser characteristics, and page events (e.g., page views). If you subsequently log in to LinkedIn, or if you are logged in to LinkedIn when visiting our website, your visit will be recorded in your LinkedIn profile. The data collected about you in this way is anonymous to us. It does not allow us to draw any conclusions about you. However, we would like to point out that this data is also stored and processed by LinkedIn, and thus a connection to the respective user profile is possible. LinkedIn may use this information for its own market research and advertising purposes. If you wish to prevent the collected information from being associated with your user account, you must log out of the social network before clicking on the graphic.

LinkedIn's data processing policy applies: https://de.linkedin.com/legal/privacy-policy. Further information about LinkedIn Insight and how it works can be found at https://business.linkedin.com/de-de/marketing-solutions/insight-tag.

13) Online Marketing

Use of Google AdWords Conversion Tracking

This website uses the online advertising program "Google AdWords" and, within the framework of Google AdWords, the conversion tracking service of Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). We use Google AdWords to draw attention to our attractive offers on external websites using advertising materials (so-called Google AdWords). Based on the data from the advertising campaigns, we can determine the success of individual advertising measures. Our aim is to show you advertising that is relevant to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.

 The conversion tracking cookie is set when a user clicks on an AdWords ad served by Google. Cookies are small text files that are stored on your computer system. These cookies typically expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of different AdWords customers. The information obtained using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. These customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can personally identify users. If you do not wish to participate in tracking, you can block this by disabling the Google Conversion Tracking cookie in your browser's user settings. You will then not be included in the conversion tracking statistics. We use Google AdWords based on our legitimate interest in targeted advertising pursuant to Art. 6 para. 1 lit. f GDPR.

Google Ireland Limited, based in Ireland, is certified under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

You can find further information about Google's privacy policy at the following web address: https://www.google.de/policies/privacy/

You can permanently disable cookies for ad preferences by preventing them through a corresponding setting in your browser software or by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=de

Please note that certain features of this website may not be available or may be limited if you have disabled the use of cookies.

14) Analytics Services

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your truncated IP address) will generally be transmitted to and stored by Google on servers in the United States.

This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by truncation and prevents direct identification of individuals. With this extension, your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case you may not be able to fully utilize all the functions of this website. Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link:https://tools.google.com/dlpage/gaoptout?hl=de

Another way to prevent tracking by Google Analytics is to set an opt-out cookie. Google Analytics deaktivieren.

Google LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

15) Data Subject Rights

15.1 Data Protection Law

The applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) with regard to the processing of your personal data by the controller, which we inform you about below:

  • Right of access pursuant to Article 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if they were not collected from you by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the significance and the envisaged consequences of such processing for you, as well as your right to be informed of the safeguards pursuant to Article 46 GDPR relating to the transfer of your data to third countries;
  • Right to rectification pursuant to Art. 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or completion of your incomplete data stored with us;
  • Right to erasure pursuant to Article 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Article 17(1) GDPR are met. However, this right does not exist, in particular, if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
  • Right to restriction of processing pursuant to Article 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you have contested, is being verified; if you object to the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data; if you need your data for the establishment, exercise or defence of legal claims after we no longer need this data for the purposes for which it was collected; or if you have objected to processing on grounds relating to your particular situation, pending the verification whether our legitimate grounds override yours;
  • Right to information pursuant to Article 19 GDPR: If you have asserted your right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate this rectification, erasure, or restriction of processing to all recipients to whom your personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
  • Right to data portability pursuant to Article 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request its transmission to another controller, insofar as this is technically feasible;
  • Right to withdraw consent pursuant to Article 7(3) GDPR: You have the right to withdraw your consent to the processing of your data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without undue delay, unless further processing is permitted by another legal basis that does not require consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;
  • Right to lodge a complaint pursuant to Article 77 GDPR: If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy. 

15.2 Right to Object

If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.

If you exercise your right to object, we will cease processing the data in question. However, further processing remains reserved if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. You can exercise your right to object as described above.

If you exercise your right to object, we will cease processing the data in question for direct marketing purposes.

16) Disclaimer for Links

Our website contains links to external websites of third parties, over whose content we have no influence. Therefore, we cannot assume any liability for this external content. The respective provider or operator of the linked pages is always responsible for their content. The linked pages were checked for possible legal violations at the time the links were created. Illegal content was not identified at the time the links were created. However, continuous monitoring of the content of linked pages is not reasonable without concrete evidence of a legal violation. Upon notification of legal violations, we will remove such links immediately.

17) Information Security

Our website and associated IT systems are protected against unauthorized access, modification, or distribution of your data, as well as against loss and destruction, by technical and organizational measures.

You should always keep your login details confidential and close the browser window when you have finished visiting our website.

We place the highest priority on the security of our platform and address security issues intensively during the development process. With your help, we can make our platform even more secure.

Should you nevertheless encounter potential security vulnerabilities, please inform us as soon as possible! Send us a detailed description of the vulnerability (including the URL) and a description of how the vulnerability was discovered (with screenshots, etc.) to informationssicherheit(at)leag.de.

18) Data Retention Period

We process and store your personal data to the extent necessary for the duration of our business relationship, which includes, for example, the initiation and execution of a contract.

Furthermore, we are subject to various retention and documentation obligations arising, among other things, from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention periods specified therein range from six to ten years. During this time, data processing is restricted. The retention period begins at the end of the calendar year in which the offer was submitted or the contract was fulfilled. For example, accounting documents relevant under commercial and tax law are retained for ten years, and contract and tax-related documents are retained for at least six years.

IP addresses are generally stored temporarily for establishing a connection. If we also use them for website optimization or advertising purposes, they are immediately anonymized and processed only in anonymized form.

Your customer account, including any e-receipts stored within it, is valid for a maximum of two years in the event of inactivity. This means that if you do not use your customer account, it and all associated data will be deleted two years after the last use.

If you have given us your consent for a processing operation, the data associated with that consent will be stored for the duration of the processing operation and for a further three years after its completion, in accordance with the statute of limitations.

 

Last updated: March 1, 2025