1. General

1.1 What is personal data?

Personal data is any information that discloses or can disclose the identity of the user. We adhere to the principle of data avoidance. Personal data will not be collected as far as possible.

1.2 Dealing with personal data

Personal data is used solely for the purpose of concluding a contract, structuring its content, carrying out or processing the contractual relationship (Art. 6 (1) (b) GDPR).

In addition, personal data is only processed if we have received your consent to do so (Art. 6 (1) (a) GDPR) or if it the data's processing is necessary for our legitimate interests and if the assessment shows that there are no overriding interests, fundamental rights or fundamental liberties on your part (Art. 6 (1) (f) GDPR).

We can use contracted processors to process your personal data, but will not pass on your personal data to third parties.

The data will only be passed on to the shipping company commissioned with the delivery in order to fulfill the contract, insofar as this is necessary for the delivery of ordered goods. For the purpose of processing payments, the necessary payment data shall be forwarded to the bank commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.

The processing of your personal data takes place exclusively within the EU, unless otherwise stated below.

1.3 Usage data

General technical information is collected when you visit the website. This includes the IP address used, time of day, duration of the visit, browser type and, if applicable, the page of origin. This usage data is recorded in a log file for technical reasons and can be used and stored for the purpose of statistical evaluation of this website. There is no link between this usage data and your other personal data.

1.4 Registration data

Registration is required in order to make full use of the functions of our website. The registration data is collected through your corresponding inputs and used for the specific purpose stated, as per your consent (Art. 6 (1) (a) GDPR).

1.5 Duration of storage

We store your personal data after the termination of the purpose for which the data was collected, only as long as this is required by law (particularly tax regulations).

2. Your rights

2.1 Information

You may request information from us as to whether we are processing your personal data and regarding the extent to which this is the case. You have a right to information about this personal data and to the further information specified in Art. 15 of the General Data Protection Regulation (GDPR).

2.2 Right to rectification

You have the right to rectify any inaccurate personal data concerning you and may request the completion of incomplete personal data in accordance with Art. 16 of the General Data Protection Regulation (GDPR).

2.3 Right to erasure

You have the right to ask us to erase your personal data immediately. We are obliged to delete your data immediately, especially if one of the following reasons for doing so is applicable:

• Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
• You revoke your consent to the processing of your data and there is no other legal basis for the processing thereof.
• Your data has been processed in an unlawful manner.

The right to erasure does not exist if your personal data is necessary for the assertion, exercise or defense of our legal claims.

2.4 Right to limitation of processing

You have the right to request us to limit the processing of your personal data if

• you dispute the accuracy of the data (whereupon we will verify its accuracy),
• the processing is unlawful and you refuse to have it deleted and instead request a limitation of use,
• we no longer require the data, but you need it to assert, exercise or defend legal claims,
• you have lodged an objection against the processing of your data and it is not yet clear whether our justified reasons outweigh your reasons.

2.5 Right to data transferability

You have the right to receive the personal data relating to you that you have provided to us in a structured, common and machine-readable format and you have the right to communicate this data to another responsible person without our interference, provided that the processing is based on a consent or a contract and the processing is carried out by us using automated procedures.

2.6 Right of withdrawal

If the processing of your personal data is based on a consent, you have the right to revoke this consent at any time.

2.7 General information and right of appeal

The exercising of your aforementioned rights is fundamentally free of charge to you. If you have any complaints, you have the right to contact the supervisory authority responsible for us (the state data protection officer) directly.

3. Data integrity

3.1 Data integrity

All data on our website is protected by technical and organizational measures against loss, destruction, access, alteration and distribution.

3.2 Sessions and cookies

We may use cookies or sessions on the server in which data can be stored in order for the website to function properly. Cookies are files that are stored on your hard drive by a website in order to automatically recognize your computer the next time you visit the website and thus adapt the use of the website to you. Some of the cookies used are erased after the end of the browsing session. These are so-called session cookies. Other cookies are stored on your end device and allow the browser to be recognized when you visit our website later (persistent cookies). You can set your browser in such a way that you are informed about the setting of cookies and can decide on their acceptance individually or exclude the acceptance of cookies for certain cases or in general. Please note that you may not be able to use some functions of this website if cookies are disabled. We make sure that no personal data is transferred from sessions or through cookies and that cookies are only used if this is necessary for the website on a technical level. Thus, the assessment shows that there are no overriding interests on your part (Art. 6 (1) (f) GDPR).

4. Newsletter

If you subscribe to our newsletter, we will use the data required for this purpose or provided separately by you in order to send you our e-mail newsletter on a regular basis. You can unsubscribe from the newsletter at any time, either via the option in the client portal, by sending a message to us via the contact options given in the Imprint or by using the link provided in the newsletter.

5. Presence on social media platforms

We use the below social media platforms for corporate presentation and communication. The linked data protection declarations and opt-out options that accompany each platform listed are expressly referred to.

• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
  Privacy policy: https://www.facebook.com/about/privacy/
  Opt-Out: https://www.facebook.com/settings?tab=ads or
  http://www.youronlinechoices.com
  
• Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
  Privacy policy: https://twitter.com/de/privacy
  Opt-Out: https://twitter.com/personalization,
  
• LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
  Privacy policy https://www.linkedin.com/legal/privacy-policy
  Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
  
• Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany)
  Privacy policy and Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung

These social media platforms may be able to process personal data outside the EU. We refer to the aforementioned privacy statements of the social media platforms.

The respective social media platforms may, on the basis of your user behavior and resulting interests and actions, create user profiles on their part and store cookies on your computer, in which cookies your user behavior is stored. If you have an account on the respective social media platform and are logged in, your usage behavior can also be stored independent of your device. Your usage profile can be used, for example, to place advertisements that presumably correspond to your interests.

We process your personal data exclusively for communication with you via the social media platform selected by you and for the optimization of our online presence and make sure that no interests on your part are affected which outweigh this justified interest on our part (Art. 6 (1) (f) GDPR). If you have already given the respective operator of the social media platform effective consent to the corresponding data processing, your personal data will also be processed on the basis of this consent (Art. 6 (1) (a) GDPR).

6. Third party services

6.1 Google Analytics

This website uses Google Analytics, a web analysis service from Google, operated by Google LLC,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), and collects and stores data via this web analysis service from which user profiles are created using pseudonyms. The user profiles created in this way are used to evaluate visitor behavior in order to design and improve the services presented on this website in line with demands. Google Analytics uses so-called "cookies", small text files which are stored on your computer and which enable an analysis of the use of the website by you. The information generated by the cookie about your use of this website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is enabled on this website, Google will initially truncate your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area. The complete IP address is only transmitted to a Google server in the USA in exceptional cases and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. Even the user profiles under a pseudonym are not merged with the personal data of the user without the express and separately declared consent of the user. Thus, the assessment shows that there are no overriding interests on your part (Art. 6 (1) (f) GDPR). You may prohibit the storage of cookies by changing the settings of your browser software accordingly. We would like to point out, however, that you might not be able to use all the functions of this website to their full extent by doing so. You can also prohibit the collection and processing of data relating to your use of the website (including your IP address) by cookies and Google by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).

You can also prohibit the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent your information from being collected on future visits to this website: Disable Google Analytics. You can read Google's privacy policy at http://www.google.de/intl/de/policies/privacy/. More information on the terms of use and privacy policy can be found at http://www.google.com/analytics/terms/de.html or at https://policies.google.com/privacy?hl=en-US. We would like to point out that Google Analytics has been extended by the code 'anonymizeIp' on this website in order to guarantee an anonymous recording of IP addresses (so-called IP masking).

6.2 Social media links and social sharing

We have our own social media pages with the third-party providers that can be reached via links from this website. By using the links, you will reach the respective websites of the third party providers (e.g. Facebook, Twitter, LinkedIn, Xing) and can also share our content. No data transfer takes place when you access our website in this way. In order to avoid unnecessary data transfer, we recommend that you log out of the respective third-party provider yourself before using a corresponding link, so that usage profiles cannot be created by the third-party provider through the use of the link.

6.3 Use of Google Maps

This website uses Google Maps, a map service provided by Google and operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ('Google'). When Google Maps is used, data on the use of the Maps' functions by visitors to the website is also collected, processed and used. In this case, no interests of the users are affected which outweigh this technical necessity of the integration of the interactive map material (Art. 6 (1) (f) GDPR). You can read Google's privacy policy on http://www.google.de/intl/de/policies/privacy/. The additional usage instructions for Google Maps can be found at http://www.google.com/intl/de_de/help/terms_maps.html.

6.4 Use of Google reCAPTCHA

This website uses the reCAPTCHA service of the company Google LLC,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ('Google'). This function is used to differentiate whether the input is made by a human being or whether it is misused by automated, mechanical processing. The request includes sending the IP address to Google as well as any other data required by Google for the reCAPTCHA service to function. Your input will therefore be transmitted to Google and used there. However, your IP address will be shortened by Google in advance within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The complete IP address is only transmitted to a Google server in the USA in exceptional cases and shortened there. The IP address transmitted by your browser as part of reCAPTCHA is not merged with other data from Google. In this way, the processing serves to prevent misuse of this website and is ultimately carried out anonymously, which means that the assessment shows that no overriding interests on your part stand in the way of processing (Art. 6 (1) (f) GDPR). Google's privacy policy applies, which can be found at: https://policies.google.com/privacy?hl=en.

6.5 Google Ads Conversion Tracking

We also use Google Ads Conversation Tracking if we have received your explicit consent to do so. If you access our website via a Google advertisement, a cookie is stored on your computer (a 'conversion cookie'). These cookies do not contain any personal data and lose their validity after 30 days. If the cookie has not expired yet and you visit certain pages on our site, we and Google may recognize that someone clicked on the ad and was forwarded in this way. Each Ads customer receives a different cookie. Therefore, it is not possible to track cookies via our web pages as an Ads customer. With the help of the cookie and the information collected with it, we can compile statistics (e.g. total number of users who clicked on our ads and were then forwarded). If you do not wish to be tracked, you can, for example, deactivate the setting of cookies by changing the appropriate settings in your browser software. A deactivation is also possible by setting your browser to block cookies from the domain 'googleadservices.com'. Further information and Google's privacy policy can be found at:
http://www.google.de/policies/privacy/
http://www.google.com/policies/technologies/ads/

6.6 Google Tag Manager

This website also uses Google Tag Manager. This service allows website tags to be managed via an interface. This Google tool only deals with tags. No cookies are used and no personal data is collected. Google Tag Manager generates other tags which, in turn, may collect data. Google Tag Manager does not access this data, however. If deactivation has been performed at the domain or cookie level, it will persist for all tracking tags as long as they are implemented with Google Tag Manager.

6.7 Use of Bing Ads

We also use Bing Ads with your explicit consent. This service is operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. This service collects and stores data from which user profiles are created using pseudonyms. This service enables us to track the activities of users on our website when they arrive on our website via advertisements from Bing Ads. If you reach our website via such an advertisement, a cookie is placed on your computer.

Some non-personal data about the use of our website is stored in conjunction with the cookie by means of a code (Bing UET tag) (e.g. time spent on the website, which areas of the website were accessed and through which advertisement the users accessed the website). We do not record any information about your identity.

The recorded information is transmitted to Microsoft servers in the USA and stored there for a maximum of 180 days. You can prevent the collection of data generated by the cookie and related to your use of the website as well as the processing of this data by disabling cookies in your browser software's settings. This may restrict the functionality of our website.

In addition, Microsoft may use cross-device tracking to track your usage patterns across multiple electronic devices, enabling Microsoft to display personalized advertising on Microsoft websites and apps. You can disable this behavior at http://choice.microsoft.com/de-de/opt-out.

You can view Microsoft's privacy policy here:
https://privacy.microsoft.com/de-de/privacystatement

7. Contact information

If you would like to contact us regarding our privacy policy, please use the following contact options. Person responsible for matters related to the GDPR:

lean buy e2e GmbH
Barbarossastrasse 18
76855 Annweiler am Trifels

E-Mail: info@lean-buy.com
Telephone: +49 611 1675 1020