lake people

Privacy Policy

as well as information on any consent you might have given

As controller in terms of the provisions on data protection, we inform you below about how we will process your personal data.

I. The term personal data and other important terms

Personal data means, in simple terms, all information relating to you personally as data subject. For provisions on what the term “personal data” means and on what other terms mean which are important for the below information on data protection, please refer to Article 4 of GDPR (General Data Protection Regulation).

II. Name and contact details of the controller, contact details of the Data Protection Officer

Controller means, in simple terms, the person who alone or jointly with others determines the purposes and means of the processing of personal data. For the name and contact details of the controller (and the contact details of the Data Protection Officer, if such person was appointed), please see our provider identification / imprint.

III. Purpose of the processing of your personal data; legal basis for the processing

We process your personal data in the context of our activity for the purposes mentioned below according to the legal bases specified in each case.

Your personal data will be processed on the basis of point (f) of Article 6(1) of GDPR for the purposes of safeguarding our legitimate interest in maintaining the proper operation of our internet presentation, in the provision of the most user-friendly functions possible and in the analysis of the use of our website.

Your personal data will be processed on the basis of point (b) of Article 6(1) of the GDPR for the purpose of taking steps at your request prior to entering into a contract.
Your personal data will be processed on the basis of point (f) of Article 6(1) of the GDPR for the purpose of safeguarding our legitimate interest in answering inquiries and in the performance of other measures that are taken based on an inquiry from you.
Your personal data will be processed on the basis of point (b) of Article 6(1) of the GDPR for the performance of a contract to which you are a party.
Your personal data will either be processed on the basis of a consent given by you pursuant to point (a) of Article 6(1) of GDPR or on the basis of point (f) of Article 6(1) of the GDPR for the performance of measures whose purpose is advertising.
Your personal data will be processed on the basis of point (c) of Article 6(1) of the GDPR for compliance with a legal obligation to which we are subject.
Your personal data will be processed on the basis of point (f) of Article 6(1) of GDPR to safeguard our legitimate interest in enforcing our rights and to defend ourselves against claims asserted against us.

Our systems are secured according to the state of the art by technical and organisational measures to protect your personal data against access, change or dissemination by unauthorised persons as well as against loss and destruction.

For information on the processing of your personal data for the individual purposes please see the further notes provided in this Privacy Policy.

IV. Transfer of your personal data to third parties; categories of recipients of your personal data

We will transmit your personal data to third parties in compliance with the legal provisions, insofar as that is necessary for fulfilling the purposes for which your personal data is being processed. Please refer to the detailed notices contained in this Privacy Policy for detailed information on the transmission of your personal data to third parties for the individual processing purposes. In cases in which your personal data will be transmitted to third parties, the scope of the transmitted data will be limited to a strict minimum.

V. Scope of processing of your personal data for the individual processing purposes

Below, we inform you, in detail, about the processing of your personal data for the different processing purposes.

1. Use of our internet presence for information purposes

When you visit our website without transmitting any information to us, we will only process your personal data that your browser transmits to our server. This is the following data which is technically necessary for us so that we are able to display our website and to ensure its stability and security:

the website you visited;
date and time of the request;
transmitted data volume;
source or reference from where you entered the page;
the browser used by you;
the operating system you use,
your IP address

Your personal data will be processed on the basis of point (f) of Article 6(1) of GDPR to safeguard our legitimate interest in maintaining the proper operation of our website, in the provision of the most user-friendly functions possible and in the analysis of the use of our website.

Your personal data will be erased after 6 months, unless such is still needed to assert rights or to enforce claims based on measures against the proper operation of our website. In this case, they will be erased immediately after the completion of the relevant proceedings.

You are not obliged to provide your personal data. However, if you fail to provide your personal data, you might not be able to display our website.

2. Handling of inquiries

If you contact us with an inquiry or an issue, we will process the personal data and information / documents which you transmitted to us. Regardless of the means by which you transmit your inquiry or issue, these might be:

date and time of contacting;
name data;
contact details;
data on the inquiry / issue;
transmitted information / documents;

Your personal data and the information / documents transmitted by you will be processed – depending on the contents of the your inquiry or your issue – on the basis of point (b) of Article 6(1) of GDPR in order to take steps prior to entering into a contract, or on the basis of point (b) of Article 6(1) of GDPR for the performance of a contract to which you are a party or on the basis of point (f) of Article 6(1) of GDPR to safeguard our legitimate interest in answering inquiries / issues and in the performance of other measures associated with the handling of inquiries / issues.

We will transmit your personal data to third parties in compliance with the legal provisions if that is necessary to handle your inquiry / issue. In cases in which your personal data will be transmitted to third parties, the scope of the transmitted data will be limited to a strict minimum.

Your personal data will be erased when your inquiry / issue was clarified, however not earlier than after the expiry of the retention periods under tax and commercial laws of 6 or 10 years, unless we may continue processing the data for another processing purpose pursuant to the legal provisions and the information contained herein.

You are not obliged to provide your personal data. However, if you fail to provide your personal data, we might not be able to handle your inquiry or your issue.

3. Performance of contracts

If you transmit to us personal data for the purpose of concluding a contract or in connection with a contract, we will process the data you transmitted for performing the contract. That will include your customer data (e.g. your name and address) and the contract data (e.g. information on the products forming the subject matter of the contract as well as payment and delivery information).

Your personal data will be processed on the basis of point (b) of Article 6(1) of GDPR for the performance of a contract to which you are a party.

We will transmit your personal data to third parties in compliance with the legal provisions, if that is necessary to perform the contract with you. This transmission will be made to the service providers involved in performing the contract. These are the providers of the handling tools we use, the companies engaged with transportation and the payment service providers engaged with payment matters.

Insofar as you use the payment service provider PayPal for handling payment transactions, we explicitly inform you that all PayPal transactions are governed by the PayPal Privacy Policy which is available at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE. In cases in which your personal data will be transmitted to third parties, the scope of the transmitted data will be limited to a strict minimum.

Your personal data will be erased after the expiry of the retention periods under tax and commercial laws of 6 or 10 years, unless we may continue processing the data for another processing purpose pursuant to the legal provisions and the information contained herein.

The provision of your personal data is necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, if you fail to provide your personal data, we may not conclude any contract with you.

4. Advertising in newsletters

If you subscribe to our newsletter, we will process the email address – and if you transmit other personal data, such as well – to send you information on our offers by email. Insofar, it is only obligatory to provide your email address. Insofar as you transmit other personal data on a voluntary basis, we might process such data to personally address you in the newsletter.

If you subscribe to our newsletter, you will give a consent with the following contents: “I agree to be informed about interesting offers by email and therefore give my consent to the processing of my email address and the other personal data I provided for the purpose of receiving the newsletter. I may withdraw this consent, at any time and without stating reasons, with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing before its withdrawal.“

You subscribe to our newsletter by using a so-called double-opt-in process. That means: After the subscription, you will initially receive an email, including a notification that you subscribed to the newsletter with the request to confirm such subscription. Your confirmation of the subscription is necessary to document the necessary consent to sending the newsletter and to be able to recognise subscriptions for external email addresses. Your IP address as well as date and time will be logged in connection with the subscription to the newsletter and the confirmations to be able to evidence, in case of need, that you have given your consent according to the legal provisions.

Your personal data will be processed on the basis of the consent you have given for that purpose pursuant to point (a) of Article 6(1) of GDPR.

You may withdraw your consent, at any time and without stating reasons, with effect for the future. It suffices to send a notification to the controller, whose contact details are available under the data on the controller. The withdrawal of consent shall not affect the lawfulness of processing before its withdrawal.

If you withdraw your consent or unsubscribe from our newsletter, your email address and any other data you might have transmitted will be erased immediately, unless we may continue processing the data for another processing purpose pursuant to the legal provisions and according to the information contained herein.

You must at least provide your email address to receive our newsletter. You are not obliged to provide your email address. However, if you fail to provide your email address, you will not be able to subscribe to our newsletter.

5. Advertising by mail

We might process the personal data such as first name and name as well as address transmitted by you for sending information on our offers by mail.

Your personal data will be processed, insofar, on the basis of point (f) of Article 6(1) of GDPR to safeguard our legitimate interest in performing advertising measures by mail.

You may object, at any time, to the processing of your personal data for the purpose of performing advertising measures by mail. It suffices to send a notification to the controller, whose contact details are available under the data on the controller.

If you object to the processing of your personal data for the purpose of performing advertising measures by mail, your personal data on first and last name and the address you transmitted will be erased immediately, unless we may continue processing the data for another processing purpose pursuant to the legal provisions and according to the information contained herein.

You are not obliged to provide your personal data for the performance of advertising measures by mail. However, if you fail to provide your personal data, we will not be able to send you advertising by mail.

6. Compliance with legal provisions that we are subject to

We process your personal data to comply with our legal obligations to which we are subject according to the relevant provisions.

Your personal data will be processed on the basis of point (c) of Article 6(1) of the GDPR for compliance with a legal obligation to which we are subject.

We will transmit your personal data to third parties in compliance with the legal provisions if that is necessary to comply with the legal obligations to which we are subject. In cases in which your personal data will be transmitted to third parties, the scope of the transmitted data will be limited to a strict minimum.

Your personal data will be erased, when such is no longer required for the compliance with legal obligations to which we are subject, unless we may continue processing the data for another processing purpose pursuant to the legal provisions and the information contained herein.

7. Enforcement of our rights and defence against claims asserted against us.

We might process your personal data to safeguard our legitimate interest in enforcing our rights and to defend against claims asserted against us.

In this case, your personal data will be processed on the basis of point (f) of Article 6(1) of GDPR.

We will transmit your personal data to third parties in compliance with the legal provisions, insofar as that is necessary to safeguard our legitimate interests. This transmission will be made to the providers of collection services or our lawyers who are involved.

In cases in which your personal data will be transmitted to third parties, the scope of the transmitted data will be limited to a strict minimum.

Your personal data will be erased after the completion of the proceedings, however not earlier than after the expiry of the retention periods under tax and commercial laws of 6 or 10 years, unless we may continue processing the data for another processing purpose pursuant to the legal provisions and the information contained herein.

VI. Period for which your personal data will be stored or criteria for determining this period

Your personal data will be erased when such is no longer required for the relevant processing purpose, unless we may still process the data for another processing purpose pursuant to the legal provisions and according to the information disclosed herein. Information on the period for which your personal data will be stored or on the criteria for determining this period is available in the information on processing of personal data for the individual processing purposes contained herein.

VII. Your Rights

1. Overview

In order to ensure a fair and transparent processing of personal data, you have the following rights as data subject according to the legal provisions on data protection:

the right of access pursuant to Article 15 of GDPR;

the right of rectification pursuant to Article 16 of GDPR;

the right to erasure pursuant to Article 17 of GDPR;

the right to restriction of processing pursuant to Article 18 of GDPR;

the right to data portability pursuant to Article 20 of GDPR;

the right to withdraw a consent given, at any time, pursuant to Article 7(3) of GDPR;

the right to object to the processing pursuant to Article 21 of GDPR about which we will inform you separately below; and

the right to lodge a complaint with the supervisory authority pursuant to Article 77 of the GDPR about which we will inform you separately below.

2. Your right to object to the processing

THE PROCESSING OF PERSONAL DATA IS LAWFUL IF THE PROCESSING IS MADE TO SAFEGUARD THE COMPELLING LEGITIMATE INTERESTS PURSUED BY THE CONTROLLER OR OF A THIRD PARTY, WHEN THOSE INTERESTS ARE NOT OVERRIDDEN BY THE INTERESTS OR RIGHTS AND FREEDOMS OF THE DATA SUBJECT WHICH REQUIRE THE PROTECTION OF PERSONAL DATA, IN PARTICULAR WHERE THE DATA SUBJECT IS A CHILD; POINT (F) OF ARTICLE 6(1) OF GDPR.

YOU AS DATA SUBJECT HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU WHICH IS BASED ON POINT (F) OF ARTICLE 6(1) OF GDPR; INCLUDING PROFILING BASED ON THOSE PROVISIONS.

IF YOU USE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE THE INTERESTS, RIGHTS AND FREEDOMS OF THE DATA SUBJECT OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSES OF DIRECT MARKETING, YOU AS DATA SUBJECT HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF THIS MARKETING AT ANY TIME, WHICH INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU AS DATA SUBJECT OBJECT TO THE PROCESSING FOR DIRECT MARKETING PURPOSES, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR SUCH PURPOSES.

3. Your right to lodge a complaint with the supervisory authority

You as data subject have, without prejudice to any other administrative or judicial remedy, the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

VIII. Information on the basis for the provision of your personal data and potential consequences of the non-provision

Insofar as that is necessary to ensure a fair and transparent processing, you will find information on the basis for the provision of your personal data and on potential consequences of a non-provision, in the information on the processing of your personal data regarding the individual processing purposes.