Data Privacy Statement

Principle

LANZ GmbH, hereinafter referred to as the operator of this website, takes the protection of your personal data very seriously and treats your personal data confidentially in accordance with the statutory data protection regulations and this privacy policy. The following declaration gives you an overview of how the operator of this website guarantees this protection and what type of data is collected for what purpose.

1. definitions of terms

The data protection declaration is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). This privacy policy should be easy to read and understand for the public as well as for our visitors, customers and business partners. To ensure this, we would like to explain the terminology used in advance.

We use the following terms, among others, in this privacy policy:

1.1 Personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter ‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

1.2 Data subject

Data subject is any identified or identifiable natural person whose personal data is processed by the controller.

1.3 Processing

Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1.4 Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of restricting its future processing.

1.5 Profiling

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements

1.6 Pseudonymisation/anonymisation

Pseudonymisation - or anonymisation - is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

1.7 Controller

The ‘controller’ is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

1.8 Processor

The processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

1.9 Recipient

The ‘recipient’ is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not it is a third party. However, public authorities which may receive personal data in the framework of a particular enquiry in accordance with Union or Member State law shall not be regarded as recipients.

1.10 Third party

The term ‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or processor, are authorised to process the personal data.

1.11 Consent

Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. collection of data

The operator processes your personal data in compliance with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and all other relevant laws. Data processing is carried out in accordance with Art. 6 para. 1 b GDPR for the purposes listed therein, in this case for the appropriate processing of your legal relationship and also for the implementation of pre-contractual measures.

Personal data is all information about the personal and factual circumstances of an identified or identifiable natural person. This includes, for example, information such as your name, address, telephone number or e-mail address. Information that cannot be used to identify you is not personal data. This includes, for example, your age, gender or professional training.

3. Name and address of the controller

The controller within the meaning of the European General Data Protection Regulation (GDPR), other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is

LANZ GmbH
Managing Director: Daniel Lanz
Am Branderhof 6
D-51429 Bergisch Gladbach

Phone: +49-2207-9610-550
Email: info@lanz.ai

4. contact by email

If you send enquiries or messages to the operator of this website, e.g. by e-mail, your details, including the contact details you provide there, will be stored for the purpose of processing the enquiry and in the event of follow-up questions. This data will not be passed on without your consent. The data will be deleted after the statutory retention period. You can obtain information about the data stored about you at info@lanz.ai

5. data processing of the access data of this website

The web host of this website (IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany) automatically collects and stores so-called ‘log files’ on the server rented by LANZ GmbH, i.e. information that your web browser automatically transmits to us. This information is

• Browser type/version
• Operating system used
• Referrer URL (the previously visited page)
• Host name of the accessing computer (anonymised IP address)
• Amount of data transferred
• Message as to whether the access/retrieval was successful
• Time and frequency of the server request
• Name and url of the retrieved file
• Time zone difference to Greenwich Mean Time (GMT)
• Language and version of the browser software

This data cannot be assigned to a specific person by the website operator. This data is not merged with other data sources, and the data is deleted after a statistical analysis. The website operator has concluded a contract with (IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany) for commissioned data processing.

6. your rights

You have the following rights under the GDPR, which are described in detail. If you have any questions, you can contact LANZ GmbH at the following email address or using the contact details provided in the legal notice: info@lanz.ai

6.1 Recht auf Auskunft über folgende Informationen:

6.1 Right of access to the following information:

• the purposes of the processing;
• the categories of personal data that are processed or stored
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
• the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing
• the existence of a right of appeal to a supervisory authority; if the personal data is not collected from you, all available information about the origin of the data; the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for you.

If personal data is transferred to a third country (outside the European Union) or to an international organisation, you have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.

6.2 Right to rectification

You have the right to obtain from LANZ GmbH without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes, you have the right to request the completion of incomplete personal data (also by means of a supplementary declaration).

6.3 Right to erasure (‘right to be forgotten’)

You have the right to demand that LANZ GmbH erase your personal data without undue delay, provided that it is not subject to other statutory retention periods.

The deletion period is determined by the statutory regulations, such as the retention periods under tax law. LANZ GmbH is obliged to erase personal data without undue delay where one of the following grounds applies:

• The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
• You withdraw your consent on which the processing is based according to point (a) of Article 6(1) GDPR, or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
• You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
• The personal data have been processed unlawfully.
• The deletion of personal data is necessary to fulfil a legal obligation under Union law or the law of the member states to which we are subject.
• The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Where LANZ GmbH has made the personal data public and is obliged to erase the personal data, LANZ GmbH, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

6.4 Right to restriction of data processing

You have the right to request the restriction of data processing if one of the following conditions is met:

• If the accuracy of the personal data is contested by you, for a period enabling LANZ GmbH to verify the accuracy of the personal data, • If the processing of the personal data is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; • If the personal data are no longer required for the purposes of the processing, but you require the data for the establishment, exercise or defence of legal claims, or you have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of LANZ GmbH override yours.

6.5 Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from us, where

• the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and • the processing is carried out by automated means. • When exercising your right to data portability in accordance with paragraph 1, you have the right to obtain that the personal data be transferred directly by us to another controller, insofar as this is technically feasible and reasonable.

6.6 Right to object

In accordance with Article 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6(1)(e) or (f). The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

If you wish to exercise your right to object, simply send an email to info@lanz.ai

6.7 Right to lodge a complaint with the competent supervisory authority

In the event of breaches of data protection law, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority is the state data protection officer of the federal state in which our company is based. You can find the authority responsible for our federal state here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

6.8 Consent and revocation of consent

The legal basis for data processing under the EU General Data Protection Regulation for our data processing is Art. 6 GDPR. Depending on the situation, there may be different legal bases.

Insofar as your consent has been obtained for the processing of personal data, Article 6 I a GDPR is the legal basis for data processing. Consent that has been granted can be revoked at any time with effect for the future. If you wish to exercise your right of cancellation, simply send an email to info@lanz.ai.

7. SSL encryption

This site uses SSL (Secure Socket Layer) encryption for security reasons. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and a green lock symbol appears next to it. Data transmission by e-mail (e.g. by clicking on an e-mail link and sending an e-mail with your own e-mail programme) is excluded from this.

8. links to other websites

This website contains links to external websites of third parties (i.e. other providers) over whose content the operator of this website has no influence. For this reason, the operator of this website cannot accept any liability for the accuracy and topicality of the information provided. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Since a permanent (content-related) control of the linked pages would not be reasonable without concrete evidence of a violation of the law, we only remove the links from our offer when we become aware of them.

9. duration of storage

Your personal data will be deleted after expiry of the statutory retention periods and the purpose of processing, unless storage is necessary to safeguard the legitimate interests of the operator or a third party in accordance with Article 6 (1) f GDPR. If you have consented to further storage in accordance with Art. 6 para. 1 sentence 1 a GDPR, the data will be stored until you withdraw your consent.

10. We do not use cookies