Go to homepage
Show all categories Data protection Back

Privacy policy

We would like to inform you as follows about the aspects relevant to data protection law when using the "leki.com" website and in cases where reference is made to this data protection declaration:

1. General section, data controller

  • Data controller for data protection: LEKI Lenhart GmbH (Karl-Arnold-Straße 30, 73230 Kirchheim unter Teck, phone: +49 (0) 7021 - 94 00 - 0, fax: +49 (0) 7021 - 94 00 - 99, e-mail: service@leki.de) (hereinafter referred to as "LEKI", "we" or "us").
  • Contact details of the data protection officer: Barton & Bluhm KG, Eschenallee 32, 14050 Berlin, phone: +49 (0) 305130115-33, e-mail: lars-holger.krause@bartonbluhm.de
  • You have the right to lodge a complaint with a data protection supervisory authority. You may have the choice between several data protection supervisory authorities. The data protection supervisory authority responsible for our registered office is "Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg" (the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg).
  • Unless otherwise or additionally stated in the following sections, the following applies:
    • There is a right to information (Art. 15 EU General Data Protection Regulation (GDPR)) and to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR). In the case of consent or if data processing is carried out to fulfil the contract, you also have a right to data portability (Art. 20 GDPR).
    • If we process personal data concerning you on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to the processing at any time for reasons arising from your particular situation (Art. 21 GDPR); this also applies to profiling based on these provisions. In case of doubt, an objection can be sent by e-mail to service@leki.de or via the contact details given above.
    • If you give your consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
    • We delete the processed personal data immediately after the end of processing, unless otherwise stated below. If you request the deletion beforehand, the data will be deleted immediately, unless there is another legal basis for the processing.
    • Unless otherwise stated below, the provision of personal data by you is neither legally nor contractually required or necessary for the conclusion of a contract. You and the data subject are not obliged to provide the data. A possible consequence if you do not provide the data is that you will not be able to utilise the services from the respective data processing or will not be able to utilise them in full and will have to choose an alternative.
    • There is no automated decision-making and no profiling within the meaning of Art. 22 GDPR.

2. Information on the occasion of the website visit, hosting

  • Every time you access our website, your web browser transmits data. These include your IP address and a description of the content to be retrieved (URL). Without collecting the IP address of the accessing computer and the URL, it is impossible to establish a connection and use websites. However, you can consider only accessing our website via third-party service providers, so that the IP address we receive when you access the page is not directly assigned to you for technical reasons. When you visit our website, your IP address is therefore used by us purely for the purpose of sending your enquiry and returning the page content, just like when you visit any other website. The processing described in this section is technically mandatory every time you interact with our website.

    In addition, your browser - depending on your configuration - may transmit further data (browser type, browser version, operating system used, if you have clicked on a hyperlink on a third-party site that refers to our website, the address of this third-party site ("referrer")). If you send us this data, we will not process it any further.

  • The processing is carried out for the purpose of displaying the contents of the website to you. The legal basis for the processing of the data is the protection of legitimate interests pursuant to Art. 6(1)(f) GDPR and the processing for the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR, insofar as you request this.
  • The aforementioned legitimate interest pursuant to Art. 6(1)(f) GDPR is that it is technically necessary to process certain data in order to be able to provide you with the telemedia you have requested.
  • We delete the data immediately after the conclusion of the contact with you, unless otherwise stated below. If you request the deletion beforehand, the data will be deleted immediately, unless there is another legal basis for the processing.
  • We integrate a hosting service provider for the website via order processing, namely INWX GmbH, Prinzessinnenstraße 30, 10969 Berlin, Germany. This hosting service provider acts on our behalf and is strictly bound by our instructions.
  • We host images and video via Cloudinary Inc. (3400 Central Expy Suite 110, Santa Clara, CA 95051, USA).

    We use Cloudinary via an agreement to process data on our behalf. Cloudinary is therefore strictly bound by our instructions. You can find more information on this under "Cloudinary Data Processing Addendum": https://cloudinary.com/gdpr/dpa

    Data, in particular the image or video retrieved and your IP address, are sent to Cloudinary. Personal data will therefore be sent to a third country, namely the USA. The transfer to the USA takes place on the basis of the EU-US Data Privacy Framework, for which the EU Commission has issued the adequacy decision "C(2023) 4745 final". The appropriateness of the data transfer for data transfers to Cloudinary in the USA is also guaranteed by EU standard data protection clauses.

    You can find more information about the data processed by Cloudinary in Cloudinary's privacy policy: https://cloudinary.com/privacy?tid=331690184217

  • There is a right of access (Art. 15 GDPR) as well as a right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) or a right to object to processing (Art. 21 GDPR) as well as a right to data portability (Art. 20 GDPR).

    The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on legitimate interests (Art. 6(1)(f) GDPR), ; this also applies to profiling based on these provisions. In case of doubt, an objection can be sent by e-mail to service@leki.de or via the contact details given above.

  • The provision of personal data by you is neither legally nor contractually required or necessary for the conclusion of a contract. You and the data subject are not obliged to provide the data. If you do not provide the data, you may not be able to access all or part of our website and therefore not be able to access the content.
  • There is no automated decision-making and no profiling in accordance with Art. 22 GDPR. The use of Google Analytics, on the basis of which, however, no decisions with legal effect are made against you and no similar impairments arise, is described below.

3. Storage and retrieval of information in or from your end device

  • Please note the additional information on cookies on our website, which we display directly in a "cookie banner" on our website.
  • Insofar as we ask for your consent in this "cookie banner", the legal basis for storing and retrieving information from your end device is your consent (Section 25 (1) TDDDG [German Telecommunications Digital Services Data Protection Act]). li>
  • The granting of consent is entirely voluntary. You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. For example, you can declare your cancellation directly in the "cookie banner". The "cookie banner" can be accessed via the "cookie settings" link at the bottom of every page.
  • In all other cases of storing and retrieving information from or in your terminal device, the legal basis is the necessity to be able to provide the telemedia services you have requested (Section 25 (2) (2) TDDDG).
  • We may process the data from cookies further. Insofar as personal data is concerned, please refer to the other sections of this document and the information in the "cookie banner" for further information.

4. Technically necessary cookies

  • We may store cookies on your end device. Cookies are small identifiers that our web server sends to your browser and that your end device stores with the appropriate settings and later transmits back to us.
  • We set and request one or more session cookies for the functionality of the website. A session cookie is automatically deleted the next time the browser is closed or restarted (i.e. after the "session"). Specifically, cookies with the name "csrf[frontend...]" and a unique identifier that identifies your browser session are set. This cookie is set for technical security and specifically serves to prevent "Cross Site Request Forgery" (CSRF).


    Please note that you can completely prevent the setting of cookies by selecting the appropriate settings in your browser.

  • Whether and which other technically necessary cookies are set is displayed in the "cookie banner", which is displayed directly when you start our website or can be accessed via the "cookie settings" link at the bottom of the screen on every website
  • The legal basis for the processing is the necessity to be able to provide the telemedia services requested by you or the protection of legitimate interests pursuant to Section 25 (2) (2) TDDDG, Art. 6(1)(f) GDPR. The aforementioned legitimate interest is to protect the website against attacks.
  • You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on legitimate interests (Art. 6(1)(f) GDPR) ; this also applies to profiling based on these provisions.
  • Sie haben das Recht, aus Gründen, die sich aus Ihrer besonderen Situation ergeben, jederzeit gegen die Verarbeitung Sie betreffender personenbezogener Daten, die aufgrund von berechtigten Interessen (Art. 6 Abs. 1 lit. f DSGVO) von uns verarbeitet werden, Widerspruch einzulegen; dies gilt auch für ein auf diese Bestimmungen gestütztes Profiling.

5. Optional cookies

  • We may ask you to consent to the storage and retrieval of technically unnecessary cookies. Please note the detailed information on this in our "cookie banner", which is displayed or can be accessed directly when you visit our website or via the "cookie settings" link at the bottom of the screen on every page
  •  
  • The legal basis for the processing is your consent pursuant to Section 25 (1) TDDDG, Art. 6(1)(a) GDPR.
  • The duration of storage results from the information in the "cookie banner".
  • The granting of consent is entirely voluntary. You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. For example, you can declare your cancellation directly in the "cookie banner". The "cookie banner" can be accessed via the "cookie settings" link at the bottom of every page.
  • The provision of personal data by you is neither legally nor contractually required or necessary for the conclusion of a contract. You are not obliged to provide the data. If you do not provide the data, we may not be able to provide some optional services or may not be able to provide them correctly.
  • Please also note the additional information in the other sections of this document.

6. Contact form

We offer a contact form that you can use to send us a message. We will inform you further as follows on the occasion of data collection:

  • The processing is carried out for the following purpose: You can contact us via the contact form (see imprint). This is an alternative to contacting us by e-mail, for example. We would like to answer you afterwards. This affects the data that you have entered in the contact form and also, for technical reasons: Your IP address, the date and time. The legal basis for the processing of the data results from the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR.
  • We delete the data immediately after the contact with you has been concluded. If you revoke your consent beforehand, the data will be deleted immediately, unless there is another legal basis for the processing.
  • There is a right of access (Art. 15 GDPR) and a right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) as well as a right to data portability (Art. 20 GDPR)
  • The provision of personal data by you is neither legally nor contractually required or necessary for the conclusion of a contract. You and the data subject are not obliged to provide the data. If you do not provide the data, you may have to contact us via another channel if you have any further questions or comments.
  • There is no automated decision-making and no profiling in accordance with Art. 22 GDPR.

7. E-Mail-Newsletter

Purpose: We offer you the opportunity to regularly receive an e-mail newsletter with promotional content about our products and general market information (advertising). You can register for this on the website by entering your e-mail address. We will ask for your consent at the same time. We would like to inform you as follows:

The granting of consent is entirely voluntary. You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. You can declare your cancellation, for example, by sending an e-mail to service@leki.de.

Data concerned: Your e-mail address and additionally for technical reasons: Your IP address, the date and time. If you have provided these, your first and last name and the information about how you heard about us are also included.

Content of the consent, which you will be asked for directly on the registration form:

  • You consent to us contacting you by e-mail for the aforementioned purpose and sending you e-mails with advertising content, as described above.
  • You agree that we may store your data for the aforementioned purposes, in particular add it to the newsletter distribution list and use it to regularly send you the newsletter .
  • You agree that we may personalise the e-mails sent to you and provide them with techniques, that allow us to recognise whether you have opened the e-mail and which hyperlinks you have clicked on in it (e.g. through integrated images that are loaded from our Internet server when you open it and hyperlinks with unique identifiers). You also agree that we may analyse this data in order to measure the reach of our newsletter and to better tailor future newsletters to – also – your interests.

Supplementary information on data protection on the occasion of data collection:

  • The processing is carried out for the purposes stated above under "Purpose". The legal basis for the processing of the data is your consent pursuant to Art. 6(1)(a) GDPR. The legal basis for the processing of the data also arises from the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR and from the protection of legitimate interests pursuant to Art. 6(1)(f) GDPR.
  • The aforementioned legitimate interest pursuant to Art. 6(1)(f) GDPR is to send you the advertising information you have requested.
  • In order to send you e-mail newsletters, we use CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter referred to as "CleverReach"). We have concluded an order processing agreement with CleverReach. CleverReach therefore handles the data strictly in accordance with instructions. You can find more information about CleverReach's data protection here: https://www.cleverreach.com/de-de/datenschutz/
  • We delete the data immediately after the end of the contact with you, e.g. if you unsubscribe from the newsletter. If you revoke your consent beforehand, the data will be deleted immediately, unless there is another legal basis for the processing.
  • There is a right of access (Art. 15 GDPR) as well as a right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) or a right to object to processing (Art. 21 GDPR) and also a right to data portability (Art. 20 GDPR). The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on legitimate interests (Art. 6(1)(f) GDPR), ; this also applies to profiling based on these provisions . In addition, the data subject has the right to object at any time to the processing of data concerning him or her for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing.
  • You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  • You have the right to lodge a complaint with a data protection supervisory authority. You may have the choice between several data protection supervisory authorities. The data protection supervisory authority responsible for our registered office is "Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg" (the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg.
  • The provision of personal data by you is neither legally nor contractually required or necessary for the conclusion of a contract. You and the data subject are not obliged to provide the data. If you do not provide the data, we may not be able to send you the newsletter.
  • There is no automated decision-making and no profiling in accordance with Art. 22 GDPR.

8. Google Analytics and Google Tag Manager

Purpose: We may use Google Analytics after obtaining consent. This provides us with data on how you use our website. The data concerned (see below) are transmitted with your partially anonymised IP address (removal of the last octet for IPv4 addresses and the last 80 bits for IPv6 addresses) to Google Ireland Limited (Google Building Gordon House, Barrow St, Dublin 4, Ireland) (referred to in this section as "Google "), which may use the services of Google LLC,1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (referred to in this section as "Google LLC"). Google will use this information to analyse your use of our website. This data is used for statistical analyses so that, for example, trends can be identified which we can use to improve the website accordingly. Google will also process this information for its own purposes and may transfer it to third parties.

In this context, we set cookies "_gat", "_ga", "_gid" with partially unique identifiers and a validity period of one day or two years. You can find more information about cookies here: https://policies.google.com/technologies/cookies?hl=de and in our "cookie banner" directly on our website.

Further information about Google's terms of use and data protection can be found at: https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/privacy as well as https://privacy.google.com/businesses/controllerterms/mccs/ and https://policies.google.com/privacy/frameworks?hl=de.

Google Analytics is integrated via the "Google Tag Manager" product, which is also offered by Google. Google Tag Manager is used exclusively for the use of Google Analytics.

Voluntariness and revocation:

  • The granting of consent is entirely voluntary. You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
  • You can revoke your consent directly on our website under the link "cookie settings"
  • You can also revoke your consent by deleting or deactivating cookies in your Internet browser.
  • You can also revoke your consent by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
  • You can also revoke your consent via the following link:a>Google Analytics deactivate. This sets a cookie with a long validity period until the end of 2099, which prevents the future collection of your data when you visit our website. If you would like to undo this and delete this cookie, you can do this via your browser settings, for example. However, the integration of Google Analytics in the form of loading certain code remains in place, even if Google Analytics is not otherwise active.

Data concerned: Frequency of visits to individual pages, click behaviour, functions used, time spent on individual web pages, click paths, technical events, respective times; see also the information in our "cookie banner" directly on our website

Content of the consent, which we will ask you for directly on our website with a short text and, if necessary, with further details:

You expressly agree that we may, in accordance with the detailed explanations in our privacy policy, transmit your data to Google for the aforementioned purposes in order to obtain information on the use of our website and the behaviour on it and thus ultimately to be able to improve it. The consent includes the authorisation to anonymise this data for the preparation of statistics. You also consent to Google using the data for the purposes of its own product improvement and sharing it with third parties.

Supplementary data protection information:

  • The legal basis for the processing of the data is your consent pursuant to Art. 6(1)(a) GDPR.
  • We send the data concerned to Google and, if necessary, to Google LLC. Personal data may thus be sent to a third country, namely the USA. The transfer to the USA takes place on the basis of the EU-US Data Privacy Framework, for which the EU Commission has issued the adequacy decision "C(2023) 4745 final". The appropriateness of the data transfer for data transfers to Google in the USA is also guaranteed by the EU standard data protection clauses we have agreed with Google.
  • We delete the personal data after the end of the contact with you, whereby the validity periods stated above or in the "cookie banner" apply with regard to cookies. If you revoke your consent beforehand, the data will be deleted immediately, unless there is another legal basis for the processing. Data that has been anonymised in the meantime is not subject to deletion.
  • There is a right of access (Art. 15 GDPR) as well as a right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) and also a right to data portability (Art. 20 GDPR).
  • You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  • The provision of personal data by you is neither legally nor contractually required or necessary for the conclusion of a contract. You and the data subject are not obliged to provide the data. A possible consequence if you do not provide the data is that we will not receive any data about your usage behaviour and any problems you may experience and will therefore not be able to improve the website.
  • There is no automated decision-making and no profiling within the meaning of Art. 22 GDPR.

9. Google Maps

In the "Dealer search" section, maps from Google Maps are displayed. The maps are provided by Google Ireland Limited (Google Building Gordon House, Barrow St, Dublin 4, Ireland) (referred to as "Google" in this section).

If you call up the "Dealer search" area, Google will receive information about your page view. If you do not wish to integrate Google Maps, please do not call up the "Dealer search" area.

Further information is as follows:

  • The legal basis for the processing of the data is the protection of legitimate interests in accordance with Art. 6(1)(f) GDPR.
  • The aforementioned legitimate interest pursuant to Art. 6(1)(f) GDPR is that we would like to integrate publicly accessible maps in a user-friendly and generally compatible manner for the offer of the homepage.
  • Data, in particular your IP address, is sent to Google, which may use the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (referred to in this section as "Google LLC"). Personal data can thus be sent to a third country, namely the USA. The transfer to the USA takes place on the basis of the EU-US Data Privacy Framework, for which the EU Commission has issued the adequacy decision "C(2023) 4745 final". The appropriateness of the data transfer for data transfers to Google in the USA is also guaranteed by EU standard data protection clauses.
  • There is a right of access (Art. 15 GDPR) and a right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) as well as a right to object to processing (Art. 21 GDPR).
  • The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on legitimate interests (Art. 6(1)(f) GDPR), ; this also applies to profiling based on these provisions.
  • The provision of personal data by you is neither legally nor contractually required or necessary for the conclusion of a contract. You and the data subject are not obliged to provide the data. A possible consequence if you do not provide the data is that no maps can be displayed to you.
  • Further information about Google's terms of use and data protection can be found at: https://www.google.com/intl/de_de/help/terms_maps/ and at https://policies.google.com/privacy.

10. Location enquiry for the dealer search

Purpose: When you call up the "Dealer search" area, we offer you to display your location on a map. For this purpose, we request your consent and technical authorisation to query your location.

Voluntariness and revocation: The granting of consent is entirely voluntary. You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. You can declare your cancellation, for example, by sending an e-mail to service@leki.de

Data concerned: Your location

Content of the consent, which you will be asked for directly on the registration form:

  • You consent to us requesting your location via your browser and displaying it on a map.

Granting consent: You can grant this consent directly in your browser by authorising our website to request your location.

Supplementary information on data protection on the occasion of data collection:

  • The processing is carried out for the purposes stated above under "Purpose". The legal basis for the processing of the data is your consent pursuant to Art. 6(1)(a) GDPR. The legal basis for the processing of the data also arises from the implementation of pre-contractual measures in accordance with Art. 6(1)(b) GDPR.
  • We delete the data immediately after you leave the website. If you revoke your consent beforehand, the data will be deleted immediately, unless there is another legal basis for the processing.
  • There is a right of access (Art. 15 GDPR) as well as a right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) and also a right to data portability (Art. 20 GDPR).
  • The provision of personal data by you is neither legally nor contractually required or necessary for the conclusion of a contract. You and the data subject are not obliged to provide the data. If you do not provide the data, you may have to manually select your location on the map.

11. Google reCaptcha

  • We offer you the option of contacting us using the contact form, registering a user account and logging in to your user account. See the corresponding sections "Contact form" and "User account". In order to prevent third parties from automatically sending spam via our systems or automatically carrying out unauthorised registration or login attempts, a query is made to ensure that it is a human input. For this purpose, we use the "Google reCaptcha" service offered by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (referred to as "Google" in this section).
  • The processing is carried out for the purpose of being able to offer you a practical contact form, registration and login, in which only human enquiries are processed. The legal basis for the processing of the data is the protection of legitimate interests in accordance with Art. 6(1)(f) GDPR as well as the processing for the implementation of pre-contractual measures in accordance with Art. 6(1)(b) GDPR, insofar as you request this.
  • Data, in particular your IP address, is sent to Google, which may use the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (referred to in this section as "Google LLC"). Personal data can thus be sent to a third country, namely the USA. The transfer to the USA takes place on the basis of the EU-US Data Privacy Framework, for which the EU Commission has issued the adequacy decision "C(2023) 4745 final". The appropriateness of the data transfer for data transfers to Google in the USA is also guaranteed by EU standard data protection clauses.
  • If you would like more information about reCaptcha, you can view it here: https://www.google.com/intl/de/policies/privacy/.
  • If you wish to avoid the integration of reCaptcha, which is only available on our site in the areas mentioned in the first indent of this section, please do not access this page.

12. YouTube-Videos

YouTube videos may be included in the FAQ and product care sections. The integration takes place via Google Ireland Limited (Google Building Gordon House, Barrow St, Dublin 4, Ireland) (referred to in this section as "Google" or "YouTube"). If you access the aforementioned areas, YouTube will receive information about your page view. If you do not wish YouTube to be integrated, please do not access these areas.

Further information is as follows:

  • The legal basis for the processing of the data is the protection of legitimate interests in accordance with Art. 6(1)(f) GDPR.
  • The aforementioned legitimate interest pursuant to Art. 6(1)(f) GDPR is that we would like to integrate publicly accessible videos into our website in a user-friendly and generally compatible manner.
  • Data, in particular your IP address, is sent to Google, which may use the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (referred to in this section as "Google LLC"). Personal data can thus be sent to a third country, namely the USA. The transfer to the USA takes place on the basis of the EU-US Data Privacy Framework, for which the EU Commission has issued the adequacy decision "C(2023) 4745 final". The appropriateness of the data transfer for data transfers to Google in the USA is also guaranteed by the EU standard data protection clauses we have agreed with Google.
  • There is a right of access (Art. 15 GDPR) and a right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) as well as a right to object to processing (Art. 21 GDPR).
  • The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on legitimate interests (Art. 6(1)(f) GDPR); this also applies to profiling based on these provisions.
  • The provision of personal data by you is neither legally nor contractually required or necessary for the conclusion of a contract. You and the data subject are not obliged to provide the data. A possible consequence if you do not provide the data is that no videos can be displayed to you.
  • For further data protection-related information, please refer to the explanations provided directly by YouTube: https://policies.google.com/privacy?hl=de&gl=de.

13. Real-time address validation during data entry

On our website, we offer you the option of checking certain entries in address forms in our web shop for input errors in real time. This is to avoid problems with the delivery of the products you have ordered due to incorrect information. Furthermore, we would like to ensure that your contact details are valid for sending information about your order or for any necessary queries.

  • We use the service provider Endereco (Balthasar-Neumann-Straße 4b, 97236 Randersacker, Germany) to provide these functions. We use this service provider on the basis of an agreement to process data on our behalf. It therefore processes the data strictly in accordance with our instructions.
  • The legal basis for the transmission, processing and temporary storage of the data by the service provider is Art. 6(1)(b) GDPR.
  • The underlying legitimate interest arises from the fact that we would like to offer you an always up-to-date and convenient way of entering or checking your address details, also in order to avoid incorrect mailings and delays due to typing errors or insufficient information.
  • The following data is affected::
    • Address (country, town, postcode, street, house number if applicable)
    • E-mail address
    • Telephone number
  • The data relating to the address check will be deleted as soon as the status of the data entered has been determined and storage in the web shop has been completed, but after 30 days at the latest

14. Name and contact details of the data controller

The data controller within the meaning of Art. 13(1)(a) GDPR is the

LEKI Lenhart GmbH

Address: Karl-Arnold-Straße 30, 73230 Kirchheim unter Teck 
Phone: +49 (0) 7021 / 94 00 - 0
E-Mail: service@leki.de

15. Name and contact details of the data protection officer

You can contact our data protection officer within the meaning of Art. 13(1)(b) GDPR as follows

Barton & Bluhm KG

Address: Eschenallee 32, 14050 Berlin
Phone: 030/5130115-33
E-Mail: lars-holger.krause@bartonbluhm.de

16. Purposes of processing, necessity of data collection

Your application data will be processed solely for the purpose of reviewing your application and assessing whether you have the aptitude, qualifications and professional requirements for the position for which you are applying.

The provision of personal data as part of the application process is neither legally nor contractually required. You are therefore not obliged to provide your personal data. However, your personal data and your application situation are required within the limits of the German General Equal Treatment Act (AGG) in order to review your application and to be able to carry out a neutral, equal opportunity procedure taking into account the other applications; in this respect, the provision of the data is necessary for the conclusion of a contract. Please note that without the provision of your personal data, we will unfortunately not be able to process your application or make a decision on the establishment of an employment relationship.

17. Legal basis of the processing

The legal basis for this data storage and processing is Art. 6(1)(1b) GDPR in conjunction with Section 26 (1) German Data Protection Act (BDSG) in conjunction with Section 26 BDSG and Art. 88 GDPR in conjunction with Section 26 (1) BDSG.

Furthermore, we may process your personal data if this is necessary for the fulfilment of legal obligations (Art. 6(1)(c) GDPR) or for the defence of legal claims asserted against us. The legal basis for this is Art. 6(1)(f) GDPR. The legitimate interest is, for example, a burden of proof in proceedings under AGG.

If you give us your express consent to process personal data for specific purposes, the lawfulness of this processing is given on the basis of your consent in accordance with Art. 6(1)(a) GDPR. Any consent given can be revoked at any time with effect for the future. If an employment relationship is established, we may, in accordance with Art. 88 GDPR in conjunction with Section 26 BDSG continue to process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of employees' interests arising from a law or a collective agreement, a works or service agreement (collective agreement).

18. Scope of the personal data

The data processed by us for the purpose of processing your application includes your master and contact data, your application documents and your data on your professional experience, knowledge and qualifications.

In the case of an online application, your online usage data will also be added.

19. Sources of the data

We only process personal data that we receive from you when you contact us or submit your application.

20. Recipients of the personal data

The recipients of the personal data contained in the application documents are the relevant HR managers in the company of the data controller.

21. Duration of storage

We store your personal data for as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted or returned a maximum of six months after the end of the application process (e.g. the announcement of the rejection decision), unless longer storage is legally required or permitted. We only store your personal data beyond this if this is required by law or in a specific case for the assertion, exercise or defence of legal claims for the duration of a legal dispute.

In the event that you have consented to your personal data being stored for a longer period of time, we will store it in accordance with your declaration of consent.

In the event that you withdraw your application, your personal data/application documents will be destroyed or returned immediately, unless longer storage is legally required or permitted.

In the event that your application is considered for a position, all data that is not required for the current employment relationship will be destroyed/returned. You will also receive separate information about the storage of your personal data in the context of the employment relationship.

22. Rights of data subjects

You have the right of access (Art. 15 GDPR) and the right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR) as well as the right to data portability (Art. 20 GDPR) at any time.

You have the right to lodge a complaint with a data protection supervisory authority. You may have the choice between several data protection supervisory authorities. The data protection supervisory authority responsible for our registered office is "Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg" (the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg.

If the processing of data is based on your consent, you are entitled under Art. 7 GDPR to withdraw your consent to the use of your personal data at any time. Please note that the cancellation is only effective for the future. Processing that took place before the cancellation is not affected by this. Please also note that we may have to retain certain data for a certain period of time in order to fulfil legal requirements.

23. Profiling

There is no automated decision-making and no profiling in accordance with Art. 22 GDPR.

24. Questions, comments, explanations

If you have any questions, comments or explanations regarding data protection, please contact us at the following e-mail address: service@leki.de

Status: February 2025

Loading...