Data protection
General Information
The following information provides a simple overview of what happens to your personal data when you visit our website or our Facebook company page. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy listed below this text.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the legal notice (Impressum) of this website.
How do we collect your data?
Your data is collected firstly by you providing it to us. This could, for example, be data that you enter in a contact form.
Other data is collected automatically by our IT systems when you visit the website. These are mainly technical data (e.g. internet browser, operating system, or time of page access). The collection of this data happens automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure the error-free provision of the website. Other data can be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the rectification, blocking, or deletion of these data. For this as well as for further questions about data protection, you can contact us at any time at the address given in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.
When you use this website, various personal data will be collected. Personal data is data that can be used to personally identify you. This privacy statement explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. It is not possible to completely protect the data against access by third parties.
Note on the responsible party
The responsible party for data processing on this website is:
LockTec GmbH
D-96369 Weißenbrunn
Johann-Georg-Herzog-Straße 19
Phone: 09261 6075 90
Fax: 09261 6075 10
eMail info@locktec.com
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
Contact details of our external data protection officer
ITs Hein GmbH
Mr. Andreas Hein
Kulmbacher Straße 27b
95460 Bad Berneck
info@itshein.de
“We expressly point out that by using this e-mail address, the contents will not be taken note of exclusively by our data protection officer. If you wish to exchange confidential information, please first use this e-mail address to request direct contact with the data protection officer.”
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke consent given at any time. An informal e-mail to us suffices for this purpose. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.
Right to lodge a complaint with the competent supervisory authority
In the event of violations of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the data protection officer of the federal state in which our company has its registered office. A list of the data protection officers as well as their contact details can be found at the following link:
Right to data portability
You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent technically feasible.
SSL and TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
Access, blocking, deletion
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient, and the purpose of data processing, and, if applicable, a right to rectification, blocking, or deletion of this data. For this purpose and for further questions regarding personal data, you can contact us at any time at the address provided in the legal notice.
Objection to advertising e-mails
The use of contact data published within the scope of the legal notice obligation for sending unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.
Data Protection Officer
Statutory Data Protection Officer:
We have appointed a data protection officer for our company.
Phone: 09261 – 607590
E-Mail: datenschutz@locktec.com
Cookies
The internet pages partly use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offering more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Cookies that are necessary to carry out the electronic communication process or to provide certain functions you require (e.g. shopping cart function) are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g. cookies to analyze your surfing behavior) are stored, these are treated separately in this privacy policy.
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
• Browser type and version
• Operating system used
• Referrer URL
• Time of server request
• IP address
A combination of this data with other data sources is not carried out.
The basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the execution of a contract or pre-contractual measures.
Data protection information for contact – Principles of data processing at LockTec GmbH
You have reached this page via a link because you would like information about how we handle (your) personal data.
In order to fulfill our information obligations under Arts. 13 and 14 of the General Data Protection Regulation (GDPR), we are pleased to provide you below with information on data protection:
1) Data controller in accordance with the General Data Protection Regulation (GDPR)
The controller within the meaning of the General Data Protection Regulation is
LockTec GmbH, Johann-Georg-Herzog-Straße 19, 96369 Weißenbrunn, info@locktec.com, datenschutz@locktec.com
2) Data Protection Officer in accordance with the General Data Protection Regulation (GDPR)
We have appointed a data protection officer for our company.
ITs Hein GmbH
Andreas Hein
Kulmbacher Straße 27b
95460 Bad Berneck im Fichtelgebirge
If you have any questions about data protection, please contact:
E-Mail: datenschutz@locktec.com.
We expressly point out that by using this e-mail address, the contents will not be taken note of exclusively by our data protection officer.
If you wish to exchange confidential information, we kindly ask you to first contact us through this e-mail address to arrange direct contact with the data protection officer.
3) Which data from you do we process? And for what purposes?
When you contact us, we store and process your resulting personal data for the purpose of processing your request. Personal data resulting from this context may include: first name, last name, e-mail address, IP address.
If we have received data from you, we will generally process it only for the purposes for which we received or collected it.
Processing for other purposes will only be considered if the necessary legal requirements under Art. 6(4) GDPR are met. Any information obligations pursuant to Art. 13(3) GDPR and Art. 14(4) GDPR will be observed in such a case.
4) Legal bases for processing personal data
The legal basis for processing personal data is generally – unless specific legal provisions exist – Art. 6 GDPR. In particular, the following possibilities come into consideration:
The processing of your personal data is based on Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of contracts or is necessary for the performance of pre-contractual measures.
In other cases, processing is based on our legitimate interest according to Art. 6(1)(f) GDPR. We have an interest in effectively handling your inquiries addressed to us.
If we have obtained your consent for the processing of your personal data under Art. 6(1)(a) GDPR, we will store your data until the purpose for storage ceases to apply or you withdraw your consent. You may withdraw your consent at any time with effect for the future. The lawfulness of any processing carried out before the withdrawal remains unaffected.
5) Recipients of personal data
As part of your inquiry, your personal data will be forwarded within our company exclusively to the responsible employees and the persons responsible in the respective departments to process your request.
Disclosure of your personal data to third parties generally only occurs if this is necessary for the execution of the contract with you, permitted based on a balance of interests under Art. 6(1)(f) GDPR, required by law, or if you have given your consent.
6) Transfer of personal data to a third country
Your personal data is processed exclusively in data centers in Germany / the European Union.
7) Duration of storage of personal data
We process your data as long as this is necessary for the respective purpose.
As far as statutory retention obligations exist – e.g. under commercial or tax law – the relevant personal data is stored for the duration of the retention obligation. After expiry of the retention obligation, it is checked whether further necessity for processing exists. If there is no further necessity, the data will be deleted.
As a rule, we conduct a review of data at the end of a calendar year concerning the necessity for further processing. Due to the volume of data, this review takes place with regard to specific types of data or purposes of processing.
Of course, you can (see below) at any time request information about the data stored by us concerning you and, if there is no necessity, request the deletion of the data or the limitation of processing.
8) Your rights as a data subject
Regarding your personal data, you have the following rights vis-à-vis our company:
- According to Art. 15 GDPR, the right to access your processed data,
- According to Art. 16 GDPR, the right to rectification of your inaccurate data,
- According to Art. 17 GDPR, the right to erasure (“right to be forgotten”),
- According to Art. 18 GDPR, the right to restrict processing,
- According to Art. 20 GDPR, the right to data portability.
If reasons arise from your particular situation against the processing of your personal data, which was carried out pursuant to Art. 6(1)(f) GDPR to safeguard legitimate interests, you may object to the processing at any time by exercising your right to object under Art. 21 GDPR.
Furthermore, according to Art. 7(3) GDPR, you have the right to withdraw any consent given to our company. You may exercise your right of withdrawal at any time with effect for the future. This means that the processing of your personal data carried out by our company up to the exercise of the right of withdrawal remains lawful.
Furthermore, under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority in the member state of your place of residence, workplace, or place of the alleged infringement, if you believe that the processing of your personal data violates the provisions of the General Data Protection Regulation (GDPR).
9) Data provision
When processing your inquiries, the provision of personal data is neither legally nor contractually required. However, certain personal data are necessary to carry out pre-contractual measures or to process any contract that may result. Without providing certain personal data, it may not be possible to conclude a contract.
10) Automated decision-making
The decisions made for the purpose of contract initiation are not based on automated processing, so there is no automated decision-making within the meaning of Art. 22 GDPR in our company.
Contact Form
If you send us inquiries via the contact form, the information you provide in the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of the data entered in the contact form is thus based exclusively on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. An informal e-mail to us suffices. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.
The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal requirements – in particular retention periods – remain unaffected.
When you visit our pages, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thus receives the information that you have visited our site with your IP address. If you click the Facebook “Like button” while you are logged in to your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to assign the visit to our pages to your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. For more information, please see the Facebook privacy policy at https://de-de.facebook.com/policy.php
If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account.
Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies,” text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. In case IP anonymization is activated on this website, your IP address will, however, be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website and internet usage to the website operator. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website in full. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link (https://tools.google.com/dlpage/gaoptout?hl=de).
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent the collection of your data during future visits to this website:
Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html and at https://www.google.de/intl/de/policies/. We point out that on this website Google Analytics has been extended by the code “anonymizeIp” to ensure anonymized collection of IP addresses (so-called IP masking).
Our social media presence
This privacy policy applies to the following social media presences
Data Processing by Social Networks
We maintain publicly accessible profiles on social networks. The specific social networks we use are listed below.
Social networks such as Facebook, X, etc. can usually comprehensively analyze your user behavior when you visit their website or a website with integrated social media content (such as Like buttons or advertising banners). Visiting our social media presences triggers numerous data protection-relevant processing procedures. Specifically:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. This data collection can, for example, take place via cookies stored on your device or by capturing your IP address.
The operators of the social media portals can use the data collected in this way to create user profiles in which your preferences and interests are stored. This allows interest-based advertising to be shown to you both inside and outside of the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or have been logged in.
Please also note that we cannot track all processing activities on the social media portals. Depending on the provider, further processing operations may be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy statements of the respective social media portals.
Legal Basis
Our social media presences are intended to ensure the broadest possible presence on the internet. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. The analysis processes initiated by social networks may be based on different legal grounds that must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6(1)(a) GDPR).
Controller and Assertion of Rights
If you visit one of our social media presences (e.g. Facebook), we and the operator of the social media platform are jointly responsible for the data processing operations triggered during this visit. You can generally exercise your rights (information, rectification, erasure, restriction of processing, data portability, and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook).
Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the company policy of the respective provider.
Duration of Storage
The data collected directly by us via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions – particularly retention periods – remain unaffected.
We have no influence over the duration of storage of your data that is stored by the operators of the social networks for their own purposes. For details, please inform yourself directly from the operators of the social networks (e.g. in their privacy policy, see below).
Your Rights
You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to object, the right to data portability, and the right to lodge a complaint with the relevant supervisory authority. Furthermore, you may request the rectification, blocking, erasure, and under certain circumstances, restriction of the processing of your personal data.
Details on Individual Social Networks
We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter “Meta”). According to Meta, the collected data are also transferred to the USA and other third countries.
We have concluded a joint processing agreement (Controller Addendum) with Meta. This agreement specifies which data processing operations we or Meta are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can independently adjust your advertising settings in your user account. To do this, click the following link and log in: https://www.facebook.com/settings?tab=ads.
The data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For details, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US that is intended to ensure compliance with European data protection standards for data processing in the US. Any company certified under the DPF commits to complying with these data protection standards. For more information, refer to the provider at the following link: https://www.dataprivacyframework.gov/participant/4452
We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
The data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
For details on how they handle your personal data, please refer to the privacy policy of Instagram: https://privacycenter.instagram.com/policy/.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US that is intended to ensure compliance with European data protection standards for data processing in the US. Any company certified under the DPF commits to complying with these data protection standards. For more information, refer to the provider at the following link: https://www.dataprivacyframework.gov/participant/4452
We have a profile on XING. The provider is New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. For details on how they handle your personal data, please refer to the privacy policy of XING: https://privacy.xing.com/de/datenschutzerklaerung.
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you wish to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
The data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
For details on how they handle your personal data, please refer to the privacy policy of LinkedIn: https://www.linkedin.com/legal/privacy-policy.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US that is intended to ensure compliance with European data protection standards for data processing in the US. Any company certified under the DPF commits to complying with these data protection standards. For more information, refer to the provider at the following link: https://www.dataprivacyframework.gov/participant/5448
YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details on how they handle your personal data, please refer to the privacy policy of YouTube: https://policies.google.com/privacy?hl=de.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US that is intended to ensure compliance with European data protection standards for data processing in the US. Any company certified under the DPF commits to complying with these data protection standards. For more information, refer to the provider at the following link: https://www.dataprivacyframework.gov/participant/5780
TikTok
We have a profile on TikTok. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. For details on how they handle your personal data, please refer to the privacy policy of TikTok: https://www.tiktok.com/legal/privacy-policy?lang=de.
The data transfer to unsafe third countries is based on the EU Commission’s standard contractual clauses. Details can be found here: https://www.tiktok.com/legal/privacy-policy?lang=de.