IPMC Privacy Policy

Preamble

With the following data protection information we inform you about the processing of your personal data when using our website.

I. Responsible body

Responsible for the collection, processing and use of your personal data within the meaning of the General Data Protection Regulation (DSGVO) is the

lexTM GmbH Law Firm
Prof. Dr. Schmitt-Gaedke
Friedensstrasse 11
60311 Frankfurt

Phone: +69 240 07 32-0
Fax: +69 240 07 32-29
E-mail: team@lex.tm

II. SSL encryption

For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, this site uses SSL encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

III. Collection and storage of personal data and type and purpose of use

When you visit our website, your personal data will only be processed in accordance with the provisions of the applicable data protection law. The following notes inform you about the type, scope and purpose of the collection, processing and use of personal data.

  1. Personal data
    “Personal data” within the meaning of the GDPR means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  2. Collection and storage of data during informative use of our website
    When you call up and merely use the website for information purposes, i.e. if you do not contact us beyond the mere use of the website or otherwise transmit information to us, your browser automatically transmits information to the server of our website. In particular, this involves the following information, which is stored until it is automatically deleted: IP address of the requesting computer, date and time of the request, name and URL of the retrieved file, access status / HTTP status code, amount of data transferred, website from which the request came (referrer URL), browser used, operating system.
  3. Collection of data when using our contact form
    When you use our contact form, we collect – in addition to the information mentioned under point 2 – your e-mail address and the name of your company or your name.
    This personal data, which you provide to us as part of this contact request, is only required to respond to your request or contact and is used for the associated technical administration. It will not be passed on to third parties.
  4. Processing of data in the context of an enquiry by e-mail
    If you provide us with personal data in addition to the information mentioned in sections 2 and 3, we may also process the following data, among others: Inventory data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. text entries, photos, videos), usage data (e.g. sites visited, access times), communication / meta data (e.g. device information, IP addresses).
  5. Purpose
    We process the data mentioned in sections 2 to 4 for the following purposes: Providing the functions and content of our website, ensuring a smooth connection to our website and comfortable use, evaluating and ensuring system security and stability as well as general security measures, answering any contact enquiries or communicating with you, other administrative purposes.
  6. Legal basis
    Unless otherwise stated in our privacy policy, the following applies to the processing of your personal data:
    The legal basis for obtaining consent is Art. 6 (1) a, Art. 7 DSGVO. The legal basis for data processing for the fulfilment of our services and the implementation of (pre-)contractual measures as well as for the purpose of answering any enquiries is Art. 6 para. 1 lit. b DSGVO. For data processing for the fulfilment of legal obligations, Art. 6 para. 1 lit. c DSGVO is the legal basis. If vital interests of the data subject or another natural person make data processing necessary, the legal basis is Art. 6 (1) (d) DSGVO. Data processing to protect our legitimate interests is based on Art. 6 para. 1 lit. f DSGVO. Our legitimate interest follows from the above-mentioned purposes of data collection.

IV. Disclosure of personal data to third parties

  1. When processing your personal data, we will only disclose it to third parties if this is done exclusively on the basis of legal permission, if you have consented to it, if we are legally obliged to do so or on the basis of our legitimate interests. A legal permission exists in particular if the disclosure of the data is necessary for the fulfilment of contractual obligations (e.g. in the case of payment or shipping service providers). A legitimate interest may exist if we use data e.g. to prevent fraud or also if you are a client of ours. A legitimate interest may also exist, for example, when using web or email hosts, cloud providers or other service providers. Such service providers often act as so-called order processors on the basis of a corresponding contract. They are also obliged to comply with the data protection requirements and to ensure this contractually. The legal basis for such order processing relationships is Article 28 of the GDPR.
  2. We will only share your personal data with third parties if
    • you have given your express consent to this (Art. 6 para. 1 p. 1 lit. a DSGVO),
    • the disclosure is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data (Art. 6 para. 1 p. 1 lit. f DSGVO),
    • there is a legal obligation for the disclosure (Art. 6 para. 1 p. 1 lit. c DSGVO), or
    • this is legally permissible and necessary for the processing of contractual relationships with you (Art. 6 para. 1 p. 1 lit. b DSGVO).
  3. We regularly work together in particular with shipping service providers (e.g. Deutsche Post), e-mail and web hosts and credit institutions (e.g. our house bank). We always select external service providers carefully. In the case of order processing relationships (Art. 28 DSGVO), these companies are contractually bound to our instructions and are regularly monitored by us. In the case of joint responsibility (Art. 26 DSGVO), corresponding contractual bases exist. More detailed information on this can be found in the following descriptions of the individual services.
  4. There are no plans to transfer your personal data to third countries (i.e. outside the EU or EEA) or to an international organisation.

V. Use of web analytics tools

We use the web analytics tool Google Analytics of Google Ireland Ltd (“Google”), Google Building Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis for this is your consent within the meaning of Art. 6 para. 1 lit. a DSGVO.

Google Analytics uses so-called cookies, which are activated via the SiteKit plugin from Google only after your consent. Google Analytics is connected to Google Search Console and the Google PageSpeed Insights service.

Cookies are text files that are stored on your computer and allow us to analyze your website usage. The information generated by the cookie about your use of our website (including your IP address) is usually transmitted to and stored by Google on servers in the United States. To protect website users, we use an IP masking procedure (i.e., pseudonymization by shortening the IP address). In general, we do not store any clear user data (such as e-mail addresses or names) within the scope of web analysis, but pseudonyms. This means that we, as well as the providers of the software used, do not know the actual identity of the users, but only the information stored in their profiles for the purposes of the respective procedures.

On our behalf, Google will use this obtained information to perform an evaluation of your use of our website in order to create performance reports of our website usage. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

A deletion of the data collected for processing takes place after the purpose has been achieved, but at the latest after 14 months.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, Google offers an extension for web browsers (add-on) that can be used to prevent the collection of data by Google Analytics and the processing of this data by Google. The add-on can be downloaded and installed at https://tools.google.com/dlpage/gaoptout?hl=de at your own risk.

More information about Google Analytics is available at: https://marketingplatform.google.com/intl/de/about/analytics/ (website) https://policies.google.com/privacy (privacy policy) https://business.safety.google/adsprocessorterms (order processing agreement) https://business.safety.google/adsprocessorterms (standard contractual clauses) https://adssettings.google.com/authenticated (settings for the display of advertising) https://privacy.google.com/businesses/adsservices (types of processing and data processed).

VI. Server LogFiles

  1. The provider of the websites automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information includes browser type and version, operating system used, referrer URL, host name of the accessing computer and time of the server request.
  2. It is not possible to assign this data to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

VII. Your rights

  1. Right to information, Art. 15 DSGVO: You have the right to request information from us at any time about the data we have stored about you, as well as its origin, recipients or categories of recipients to whom this data is passed on and the purpose for which it is stored.
  2. Right to rectification, Art. 16 DSGVO: You have the right to demand that we correct any inaccurate personal data concerning you or restrict processing without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
  3. Right to revoke consent, Art. 7 (3) DSGVO: If you have given your consent to the use of data, you can revoke this at any time and without stating a reason for revocation.
  4. Right to erasure, Art. 17 DSGVO: You have the right to demand that we delete personal data concerning you without delay. Among other things, we are obliged to delete them if they are no longer necessary for the purposes for which they were collected or otherwise processed or if you have withdrawn your consent.
  5. Right to data portability, Art. 20 GDPR: You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance, provided that the processing is based on your consent or the processing was carried out with the help of automated procedures.
  6. Right to object, Art. 21 DSGVO: You have the right to object at any time to the creation of user profiles and to the processing of your personal data concerned, provided that the processing is based on Art. 6 (1) lit e or f DSGVO. Your personal data will no longer be processed unless compelling reasons worthy of protection override your interests, rights and freedoms. If your personal data is used for the purpose of direct advertising, you naturally have the right to object to such processing at any time.
  7. Right not to be subject to automated decision-making, Art. 22 GDPR: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
  8. Right of appeal, Art. 77 DSGVO: In the event of violations of data protection law, you have the right to lodge a complaint with the competent supervisory authority.