Data Protection

Data Privacy Policy for Website Visitors

Data Privacy Policy and Data Subject Information according to Art. 13, 14 EU-DSGVO

www.ludwig-schokolade.de

The protection of your personal data is an important concern for the Ludwig Schokolade GmbH & Co. KG. Therefore, our company collects and processes your personal data strictly in accordance with the data protection regulations. On this page, we inform you about the collection and processing of your personal data according to Art. 13, 14 GDPR.

Responsible for data processing is

Ludwig Schokolade GmbH & Co. KG
Senefelderstraße 44
51469 Bergisch Gladbach, Germany
T +49 2202 105-500
F +49 2202 105-501
verwaltung@ludwig-schokolade.de

Our data protection officer is

Dr. Philipp Wehler
Hoffmann Liebs Partnerschaft von Rechtsanwälten mbB
Goltsteinstraße 14
40211 Düsseldorf
legal@krueger.de

While visiting this website and using its various offers, we process your personal data as described in detail below.

For the operation of the website, we are working together with an external service provider who we have carefully selected and obligated in accordance with data protection law.

Table of Content

  1. Cookies
  2. Server-Logfiles
  3. Google WebFonts
  4. hCaptcha
  5. Google Analytics
  6. Google Tag Manager
  7. Matomo (previous Piwik)
  8. Contact and Customer Complaints: form and email function
  9. Data Security
  10. Data Subject´s Rights

1. Cookies

2. Server log files

Each time you visit our website, your browser automatically transmits to us your IP address, identifier (manufacturer, version, operating system) and language settings of your web browser, the time of your visit and visited subpages of our website, your referrer URL (i.e. the URL of the page from which you visit us), as well as the data volume accrued during your visit to our website (hereinafter “Access Data“). We process your Access Data to ensure system security (e.g. to ward off hacker attacks) and to compile usage statistics. This processing is carried out on the basis of our legitimate overriding interest (Art. 6 para. 1 p. 1 lit. f) EU-DSGVO). You are under no legal or contractual obligation to provide us with your access data, nor is this necessary for the conclusion of a contract. However, you must provide us with your access data so that you can call up our website and use the offers and services provided on it.

3. Google WebFonts

This website uses Google WebFonts, a service of Google Inc. This service enables us to provide you with our website in a uniformly visually appealing manner with the help of the font library referred to above.

A uniform and visually attractive design of our website is in our overriding legitimate interest (Art. 6 (1) f EU-DSGVO). There is neither a user analysis, nor is a user profile created.

We have installed the Google Web Fonts locally on our website. Thus, there is no connection to Google servers.

For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and see Google’s privacy policy: https://policies.google.com/privacy?hl=de.

4. hCaptcha

We use “hCaptcha” on our websites. The provider is Intuition Machines, Inc, 2211 Selig Drive, Los Angeles, CA 90026, USA (“Intuition Machines”).

The purpose of hCaptcha is to check whether the data entry on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, hCaptcha analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, hCaptcha evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Intuition Machines.

For this purpose, hCaptcha uses cookies, through which hCaptcha collects personal data of the users. However, it stores them separately from the captcha data and deletes them afterwards. hCaptcha keeps personal data only as long as it is necessary to fulfill the purposes for which they were collected. However, information collected with above cookies may be retained for a limited period of up to one year after the cookie expires, but usually in anonymized and aggregated form.

For analysis, hCaptcha evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Intuition Machines.

The data processing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. There are no overriding conflicting interests of the data subject.

Reference to the right of objection

You can object to the processing of your personal data by hCaptcha at any time free of charge. No further data processing for this purpose will then take place. The objection has no effect on data processing operations that took place before the objection was lodged. The objection can be made informally and should be addressed to Ludwig Schokolade GmbH & Co. KG, Marketing Department, Senefelderstraße 44, 51469 Bergisch Gladbach, e-mail: verwaltung@ludwig-schokolade.de; phone: +49 2202 105-500.For more information about hCaptcha and the privacy policy of Intuition Machines, please refer to the following links: hCaptcha – Privacy Policy and hCaptcha – Stop more bots. Start protecting privacy.

5. Google Analytics

a) Data categories concerned, recipients, processing purposes

This website uses Google Analytics, a web analytics service provided by Google, Inc (“Google”). As our processor, Google will process the data collected by means of Google Analytics in order to analyze your use of the websites, compile reports on corresponding activities and provide us with other services related to the use of our website. The statistics obtained in this way allow us to improve our offer and make it more interesting for you as a user. For this purpose, Google Analytics uses cookies, whereby the information generated by these cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

When using Google Analytics, usually no personal data is processed. Your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Insofar as personal data is transferred to the USA, an adequate level of data protection is ensured by means of suitable guarantees. For this purpose, EU standard contractual clauses have been concluded with the provider. Copies of these can be obtained from the person responsible or directly from the European Union at the following link: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

We would like to point out that on our websites Google Analytics has been extended by the plug-in “AnonymizeIP”; in order to ensure an anonymized collection of your IP address even in these exceptional cases, so that your data cannot be related to your person.

The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

b) Legal basis, storage period

The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. [a) / f)] EU-DSGVO. Sessions are regularly terminated after 30 minutes without activity and campaigns after six months; data on campaigns can be stored for a maximum of two years.

c) Possibility of objection

Insofar as Google Analytics processes your data in personal form, you can object to this at any time – in this case, this processing will be stopped immediately.

You can send your informal objection in particular to our data protection officer: legal@krueger.de.

You can also exercise your right to object in particular by preventing the storage of cookies used by Google Analytics by setting your browser software accordingly (further information on this can be found here); however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Please note that by doing so you will leave our websites.

d) Information from Google

Google Dublin, Google Ireland Ltd.
Gordon House, Barrow Street, Dublin 4, Ireland
Fax: +353 (1) 436 1001.

6. Google Tag Manager

a) This website uses the Google Tag Manager.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to embed tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. The Google Tag Manager records your IP address. Insofar as personal data is transferred to the USA, an adequate level of data protection is ensured by means of suitable guarantees. For this purpose, EU standard contractual clauses have been concluded with the provider. Copies of these can be obtained from the responsible party or directly from the European Union at the following link: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de .

The use of Google Tag Manager is based on Art. 6 (1) lit. f DSGVO. Ludwig Schokolade has a legitimate interest in a quick and uncomplicated integration and management of various tools on its website. Insofar as a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

b) Information from Google

Google Dublin, Google Ireland Ltd.
Gordon House, Barrow Street, Dublin 4, Ireland
Fax: +353 (1) 436 1001

7. Matomo (previous Piwik)

This website uses the open source web analysis service Matomo. Matomo uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. For this purpose, the information generated by the cookie about the use of this website is stored on our server.

This website uses Matomo with the extension “AnonymizeIP”. This shortens the processing of IP addresses and prevents direct personal contact. The IP address transmitted by your browser using Matomo will not be merged with other data collected on our website.

Matomo cookies remain on your device until you delete them.

Matomo cookies are stored in accordance with Art. 6 para. 1 sent. 1 lit. f GDPR. The website operator has a legitimate interest in anonymized analysis of user behavior in order to optimize his website and his advertising.

The information generated by the cookie about the use of this website will not be passed on to third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser. Pease note that if you do this you may not be able to use the full functionality of this website.

If you do not agree to the storage and use of your data, you can deactivate the storage and use here. In this case, an opt-out cookie is stored in your browser, which prevents Matomo from saving usage data. If you delete your cookies, the Matomo Opt-Out cookie will also be deleted. The opt-out must be reactivated the next time you visit our site.

8. Customer contact and customer complaints: contact form and e-mail function

You have the option of contacting us directly via a contact form stored on our website. If you do this, you must enter your name, e-mail address, title and address. We record this data, your message and your IP address as well as the time at which you send the form.

We also offer you the possibility to contact us directly via e-mail. If you click on the “E-mail” button on our website, your e-mail program will open and you can send us a message to our pre-entered e-mail address. We have no influence on the data processing by the e-mail program of your respective provider; we merely establish a link to the e-mail program.

We use the information you send us via the contact form or e-mail exclusively to process your request; we delete this information as soon as the communication has been completed, unless legal storage obligations require storage. We need your IP address and the time when you use the contact form for security reasons; this enables us to identify automated accesses and hacker attacks and to prevent them from happening again. This processing of the information you provide to us is in our legitimate interest (Art. 6 I 1 f EU-DSGVO).

9. Data Security

In order to protect your personal data in the best possible way, we use SSL encryption (https standard), technical and organizational security measures that are also adapted to the current state of the art in accordance with the risks involved.

10. Data Subject Rights

In the following, we would like to inform you about the further rights to which you are entitled in accordance with Articles 15-21 and Article 77 (1) EU GDPR. To assert these rights, you can contact our data protection officer in particular by e-mail legal@krueger.de.

a) Right to information:

In accordance with Art. 15 EU-DSGVO, you have the right to receive information about the data processing and a copy of the processed data. In this context, you also have the right to receive a copy of your personal data processed by us in accordance with Art. 15 (3-4) EU-DSGVO.

b) Right to rectification:

In accordance with Art. 16 EU-DSGVO, you have the right to request us to correct or complete your personal data.

c) Right to deletion:

In accordance with Art. 17 (1) EU-DSGVO, you have the right to demand that we delete your personal data. To the extent that we have published your personal data, you also have the right to request that we inform other data controllers of your request for the erasure of all links to and/or copies or replications of your personal data in accordance with Article 17(2) EU GDPR.

d) Right to restriction of processing:

In accordance with Art. 18 EU-DSGVO, you have the right to demand that we restrict the processing of your personal data.

e) Right to data portability:

Pursuant to Art. 20 EU GDPR, you have the right to receive the personal data about you that you have provided to us in a structured, commonly used and machine-readable format and to request that this data be transferred to another controller.

f) Revocation of your consent:

If you have given us consent to process your personal data, you may revoke this consent at any time, in whole or with respect to individual processing purposes, in each case without giving reasons.

Please note that any lawful processing of your personal data that has taken place up to the time of your revocation will not be rendered unlawful retroactively by such revocation.

You can revoke consents you have given us for the processing purposes listed above in particular by clicking on the hyperlinks provided there. You can also send your revocation by e-mail to legal@krueger.de.

In case of revocation of your consent given for a certain service, you can no longer use the corresponding service; beyond that, you will not suffer any disadvantages.

If you wish to revoke your consent only for certain processing and use purposes, we would like to ask you to make this clear in your revocation by naming the relevant purposes (e.g. as “Revocation of consent regarding the contact form” if you only wish to revoke your consent regarding the processing of your data for this purpose). If you do not specify your revocation in more detail or if you expressly declare it comprehensively, we will assume that you revoke your consent with regard to all collections, processing and uses explained in these data protection provisions.

g) Right of objection:

In accordance with Art. 21 EU-DSGVO, you have the right to object to the processing of your personal data by us, insofar as this is carried out for the purpose of direct advertising and/or on the basis of a “legitimate interest” within the meaning of Art. 6 para. 1 sentence 1 lit. f) EU-DSGVO.

h) Complaints to supervisory authorities:

In accordance with Art. 77 (1) EU-DSGVO, you have the right to lodge a complaint with a supervisory authority against the processing of your personal data by us, insofar as you are of the opinion that the processing of your personal data violates data protection provisions.

Responsible Contact for Data Protection and Freedom of Information in North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf

Tel.: 0211/38424-0
Fax: 0211/38424-10
E-mail: poststelle@ldi.nrw.de

In addition, you retain the right to pursue any other legal remedies to which you are entitled (e.g., in court or before the authorities).

© 2023 Ludwig Schokolade GmbH & Co. KG