Data controller

The data controller responsible for processing data on this website is the website operator. The operator's contact details can be found in the website's required legal notice.

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (names, email addresses, etc.).

External data protection officer

Systemhaus Liebchen GmbH
Zur Friedenslinde 19
86825 Bad Wörishofen

Theresa Liebchen
Phone: +49 (0) 8261 / 23285-60

Your rights

Revocation of your consent to the processing of your data

Many data processing operations are only possible with your express consent. You may revoke your consent at any time with effect for the future. An informal email stating this request is sufficient. Any data processed before we receive your request for revocation may still be legally processed.

Right to lodge a complaint with a supervisory authority

In the event of a breach of data protection legislation, the data subject may lodge a complaint with the competent supervisory authority. The competent supervisory authority for matters relating to data protection legislation is the data protection officer of the German state in which our company has its registered office. A list of data protection officers and their contact details is available at the following link:

Right to data portability

You have the right to request that data which we process based on your consent or to fulfil a contract be automatically delivered to you or to a third party in a standard, machine-readable format. If you request the direct transfer of data to another controller, this will only be carried out where technically feasible.

Information, blocking, erasure

As permitted by law, you have the right to obtain from the controller free of charge and at any time, information regarding the personal data stored by us, along with its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data rectified, blocked or erased. If you have further questions regarding personal data, please contact us at any time using the address provided in our legal notice.

Right to object

Within the framework of the applicable legal provisions, you have the right to object at any time to the processing of your personal data, which is based on Article 6 para 1 lit. e or f GDPR. This also applies to profiling based on these provisions. In particular, you can object to processing for direct marketing purposes at any time.

Data collection on our website

Some data is collected when you provide it to us. This could be, for example, the information you enter on a contact form.

Other data is collected automatically by our IT systems when you visit the website. This data is primarily technical data (e.g. Internet browser, operating system and time the website was accessed). This data is collected automatically as soon as you enter our website.


Cookies serve to make our services more user-friendly, effective and secure. Most of the cookies used by us are “session cookies”. which are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser the next time you visit our website. You can adjust your browser settings to notify you when cookies are placed and only allow cookies in individual cases, decline the acceptance of cookies in specific cases or in general and activate the automatic deletion of cookies when the browser is closed. Please note that, if cookies are disabled, the functionality of this website may be restricted. Cookies that are technically necessary are stored on the basis of Art. 6 para 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies to ensure the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies to analyse your browsing behaviour) are stored, these are detailed separately in this Privacy Policy.

Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data will not be merged with data from other sources.

The basis for data processing is Art. 6 para 1 lit. f GDPR, which permits the processing of data to fulfil a contract or for pre-contractual measures.

The recipient of the data is our server host and website supervisor infolox GmbH, Bregenzer Str. 101, 88131 Lindau, Germany, who are commissioned by us within the framework of an order processing contract in accordance with Art. 28 GDPR. The data is processed exclusively on servers in the EU in certified data centres

Contact requests

If you send us enquiries via the contact form or email, the data and information you submit will be stored by us to process the enquiry and in the event of follow-up questions. We do not share this information without your consent.

The processing of the data entered in the contact form takes place on the basis of our legitimate interests in accordance with Art. 6 para 1 lit. GDPR to enable us to effectively respond to enquiries received via the contact form or email. If you request information about the products or services we offer, the processing is carried out to fulfil a contract or to carry out pre-contractual measures on the legal basis of Art. 6 Paragraph 1 lit. b GDPR.

We will retain the data you enter in the contact form until you request the erasure of such, revoke your consent for storage, or the purpose of the storage no longer applies (e.g. after your request has been fulfilled). Any mandatory statutory provisions, in particular those regarding mandatory data retention periods, remain unaffected.

B2B contractual relationship

As part of our business activities, we process personal data from employees of business partners and contacts for communication and to process business transactions and activities. Only commercial data such as the name and address of the company, telephone numbers and email addresses and the respective content is processed.

The processing takes place on the basis of Art. 6 para 1 lit. f GDPR, our legitimate interest in the performance of business activities and the communication required to perform such activities.

In addition, we transmit data to affiliated companies of the Kiehl Group, insofar as this is necessary to prepare and/or implement business activities. The processing is carried out on the basis of Art. 6 para 1 lit. f GDPR. The legitimate interest is based on an efficient corporate structure.

Data retention is subject to the respective legal regulations. The data will be erased once the respective data retention periods have expired.

Registration for seminars

You can register for seminars on our website, and the data you enter on the respective form will be processed for this purpose. The minimum data will be your name, email address, telephone number and, where necessary, your company, street / number, post code / city, country, fax, any additional information, e.g. first and last name of all the seminar participants, the type of lunch menu and overnight stays. Your data will be transmitted to us in encrypted form and processed for the purpose of conducting the seminar. Where appropriate, the data will be sent to the respective seminar centre. The legal basis for data processing is Art. 6 para 1 lit. b GDPR and is to process the seminar you have booked. Your data will be deleted after the statutory retention periods have expired, unless such deletion is prevented on other legally permissible grounds.


The data you provide as part of the application will only be used to process the application. This is permitted pursuant to Art. 88 GDPR and § 26 BDSG (Federal Data Protection Act) as amended. No data is transmitted to third parties. Your data and the documents you send to us (e.g. cover letter, CV, certificates, qualifications, etc.) will be deleted immediately, but no later than 6 months after the end of the application process (regardless of whether you or another person is appointed), unless a longer retention is required by law or is permitted. If you have agreed to a longer retention period of your data, we will store it in accordance with your declaration of consent on the legal basis of Article 6 para 1 lit. a GDPR.

The areas within our company that are permitted to access the data you have provided are those that require access to the data to fulfil contractual and legal obligations and which are authorised to process such data.

External links

Our website contains links to external websites of third parties, e.g. organisers of trade fairs. If you follow an external link, we bear no liability or responsibility for the processing of your data on the linked page. Please consult the privacy/data protection guidelines of the respective website for more information. External links are marked with this icon: ►


The website uses Matomo, a web analysis service from the provider InnoCraft Ltd., 7 Waterloo Quay PO625, 6140 Wellington, New Zealand. We use Matomo to collect and analyse data about the use of our website by the visitor. The data is only stored locally on our website servers. No data is transmitted to third parties. For more details please visit

The legal basis for data processing is Art. 6 Para. 1 lit. f GDPR, our legitimate interest in analysing data on the use of the individual components of our website and on the browsing behaviour of users to enable us to continuously optimise the website and its user-friendliness. By making the IP address anonymous, we take account of the user's interest in the protection of personal data. The data is never used to identify the user personally and is not merged with other data. The data will be deleted when it is no longer required for our purposes.


Our website uses plugins provided by YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited.

If you're logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

You must consent to data processing by YouTube to allow you to use the content provided by YouTube on our website. The legal basis for processing is Art. 6 para 1 lit. a GDPR. You can revoke your consent at any time to prevent the storage of cookies by adjusting the appropriate settings in your Internet browser. See “Cookies” above for more details.

For more information on how YouTube handles user data, please consult the YouTube privacy policy at .

JW Player

Our website uses the video service JW Player. The provider is LongTail Ad Solutions, Inc., 8 W 38th St., Ste. 901, New York, NY 10018, USA.

A connection to the servers of JW Player in the USA is thereby established. JW Player automatically collects information every time a user's browser or device interacts with JW Player technology and stores it in log files. The log files include usage and tracking data such as browser type and version, the user's IP address, device data such as type, device ID, operating system and diagnostic data, times of use, duration of use and unique identifiers to identify users and video sessions.

This data is used to provide the video, to place advertisements if necessary, compile reports on the video activity on our website, to increase the quality of the recommended videos and to carry out further analysis to identify user trends and technical issues.

You must consent to data processing by JW Player to use the content provided by JW Player on our website. The legal basis for processing is Art. 6 para 1 lit. a GDPR. You can revoke your consent at any time to prevent the storage of cookies by adjusting the appropriate settings in your Internet browser. See “Cookies” above for more details.

For more information on how JW Player handles user data, please consult the privacy policy of JW Player at Data transfer to the USA is based on the standard contractual clauses of the EU Commission. The JW Player Data Processing Agreement is available at

Google Maps

Our website uses the Google Maps service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA to plan your journey and to show our location. In the process, user data, e.g. your IP address, any search terms entered and location data, start address entered (when using the route planner function) may also be processed by Google on servers in the USA.

You must consent to the data processing by Google to be able to use the content of Google Maps on our website. The legal basis for processing is Art. 6 para 1 lit. a GDPR. You can revoke your consent at any time to prevent the storage of cookies by adjusting the appropriate settings in your Internet browser. See “Cookies” above for more details.

For more information on how Google handles user data, please consult the Google privacy policy at .

If Google Maps is enabled, Google may use the Google Fonts to ensure a uniform display. When you call up Google Maps, your browser loads the required web fonts into your browser cache to display text and fonts correctly. When the map service is activated, data is exchanged with the following external addresses:,,,,,,

For detailed instructions on how to manage your own data in connection with Google products, see

Web fonts

This website uses web fonts to ensure the uniform display of fonts provided by Monotype GmbH ( When you call up a website, your browser loads the required web fonts into your browser cache to display text and fonts correctly. In so doing, the browser must connect to the servers of This notifies of the fact that your IP address has accessed our website. web fonts are used in the interest of a uniform and appealing presentation of our online products and services. This constitutes a legitimate interest pursuant to Art. 6 para 1 lit. f GDPR. If your browser does not support web fonts, your computer will use a standard font. For more information, please visit the privacy policy of and privacy policy:

Version: 07.03.2023 / Basic version 27.02.2023