The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (names, email addresses, etc.).
External data protection officer
Systemhaus Liebchen GmbH
Zur Friedenslinde 19
86825 Bad Wörishofen
Phone: +49 (0) 8261 / 23285-60
Revocation of your consent to the processing of your data
Many data processing operations are only possible with your express consent. You may revoke your consent at any time with effect for the future. An informal email stating this request is sufficient. Any data processed before we receive your request for revocation may still be legally processed.
Right to lodge a complaint with a supervisory authority
In the event of a breach of data protection legislation, the data subject may lodge a complaint with the competent supervisory authority. The competent supervisory authority for matters relating to data protection legislation is the data protection officer of the German state in which our company has its registered office. A list of data protection officers and their contact details is available at the following link: https://www.bfdi.bund.de/EN/Home/home_node.html
Right to data portability
You have the right to request that data which we process based on your consent or to fulfil a contract be automatically delivered to you or to a third party in a standard, machine-readable format. If you request the direct transfer of data to another controller, this will only be carried out where technically feasible.
Information, blocking, erasure
As permitted by law, you have the right to obtain from the controller free of charge and at any time, information regarding the personal data stored by us, along with its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data rectified, blocked or erased. If you have further questions regarding personal data, please contact us at any time using the address provided in our legal notice.
Right to object
Within the framework of the applicable legal provisions, you have the right to object at any time to the processing of your personal data, which is based on Article 6 para 1 lit. e or f GDPR. This also applies to profiling based on these provisions. In particular, you can object to processing for direct marketing purposes at any time.
Data collection on our website
Some data is collected when you provide it to us. This could be, for example, the information you enter on a contact form.
Other data is collected automatically by our IT systems when you visit the website. This data is primarily technical data (e.g. Internet browser, operating system and time the website was accessed). This data is collected automatically as soon as you enter our website.
Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data will not be merged with data from other sources.
The basis for data processing is Art. 6 para 1 lit. f GDPR, which permits the processing of data to fulfil a contract or for pre-contractual measures.
The recipient of the data is our server host and website supervisor infolox GmbH, Bregenzer Str. 101, 88131 Lindau, Germany, who are commissioned by us within the framework of an order processing contract in accordance with Art. 28 GDPR. The data is processed exclusively on servers in the EU in certified data centres
If you send us enquiries via the contact form or email, the data and information you submit will be stored by us to process the enquiry and in the event of follow-up questions. We do not share this information without your consent.
The processing of the data entered in the contact form takes place on the basis of our legitimate interests in accordance with Art. 6 para 1 lit. GDPR to enable us to effectively respond to enquiries received via the contact form or email. If you request information about the products or services we offer, the processing is carried out to fulfil a contract or to carry out pre-contractual measures on the legal basis of Art. 6 Paragraph 1 lit. b GDPR.
We will retain the data you enter in the contact form until you request the erasure of such, revoke your consent for storage, or the purpose of the storage no longer applies (e.g. after your request has been fulfilled). Any mandatory statutory provisions, in particular those regarding mandatory data retention periods, remain unaffected.
B2B contractual relationship
As part of our business activities, we process personal data from employees of business partners and contacts for communication and to process business transactions and activities. Only commercial data such as the name and address of the company, telephone numbers and email addresses and the respective content is processed.
The processing takes place on the basis of Art. 6 para 1 lit. f GDPR, our legitimate interest in the performance of business activities and the communication required to perform such activities.
In addition, we transmit data to affiliated companies of the Kiehl Group, insofar as this is necessary to prepare and/or implement business activities. The processing is carried out on the basis of Art. 6 para 1 lit. f GDPR. The legitimate interest is based on an efficient corporate structure.
Data retention is subject to the respective legal regulations. The data will be erased once the respective data retention periods have expired.
Registration for seminars
You can register for seminars on our website, and the data you enter on the respective form will be processed for this purpose. The minimum data will be your name, email address, telephone number and, where necessary, your company, street / number, post code / city, country, fax, any additional information, e.g. first and last name of all the seminar participants, the type of lunch menu and overnight stays. Your data will be transmitted to us in encrypted form and processed for the purpose of conducting the seminar. Where appropriate, the data will be sent to the respective seminar centre. The legal basis for data processing is Art. 6 para 1 lit. b GDPR and is to process the seminar you have booked. Your data will be deleted after the statutory retention periods have expired, unless such deletion is prevented on other legally permissible grounds.
The data you provide as part of the application will only be used to process the application. This is permitted pursuant to Art. 88 GDPR and § 26 BDSG (Federal Data Protection Act) as amended. No data is transmitted to third parties. Your data and the documents you send to us (e.g. cover letter, CV, certificates, qualifications, etc.) will be deleted immediately, but no later than 6 months after the end of the application process (regardless of whether you or another person is appointed), unless a longer retention is required by law or is permitted. If you have agreed to a longer retention period of your data, we will store it in accordance with your declaration of consent on the legal basis of Article 6 para 1 lit. a GDPR.
The areas within our company that are permitted to access the data you have provided are those that require access to the data to fulfil contractual and legal obligations and which are authorised to process such data.
Our website contains links to external websites of third parties, e.g. organisers of trade fairs. If you follow an external link, we bear no liability or responsibility for the processing of your data on the linked page. Please consult the privacy/data protection guidelines of the respective website for more information. External links are marked with this icon: ►
The website uses Matomo, a web analysis service from the provider InnoCraft Ltd., 7 Waterloo Quay PO625, 6140 Wellington, New Zealand. We use Matomo to collect and analyse data about the use of our website by the visitor. The data is only stored locally on our website servers. No data is transmitted to third parties. For more details please visit https://matomo.org/privacy-policy/.
The legal basis for data processing is Art. 6 Para. 1 lit. f GDPR, our legitimate interest in analysing data on the use of the individual components of our website and on the browsing behaviour of users to enable us to continuously optimise the website and its user-friendliness. By making the IP address anonymous, we take account of the user's interest in the protection of personal data. The data is never used to identify the user personally and is not merged with other data. The data will be deleted when it is no longer required for our purposes.
Our website uses plugins provided by YouTube, which is operated by Google. The operator of the pages is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited.
If you're logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
You must consent to data processing by YouTube to allow you to use the content provided by YouTube on our website. The legal basis for processing is Art. 6 para 1 lit. a GDPR. You can revoke your consent at any time to prevent the storage of cookies by adjusting the appropriate settings in your Internet browser. See “Cookies” above for more details.
Our website uses the video service JW Player. The provider is LongTail Ad Solutions, Inc., 8 W 38th St., Ste. 901, New York, NY 10018, USA.
A connection to the servers of JW Player in the USA is thereby established. JW Player automatically collects information every time a user's browser or device interacts with JW Player technology and stores it in log files. The log files include usage and tracking data such as browser type and version, the user's IP address, device data such as type, device ID, operating system and diagnostic data, times of use, duration of use and unique identifiers to identify users and video sessions.
This data is used to provide the video, to place advertisements if necessary, compile reports on the video activity on our website, to increase the quality of the recommended videos and to carry out further analysis to identify user trends and technical issues.
You must consent to data processing by JW Player to use the content provided by JW Player on our website. The legal basis for processing is Art. 6 para 1 lit. a GDPR. You can revoke your consent at any time to prevent the storage of cookies by adjusting the appropriate settings in your Internet browser. See “Cookies” above for more details.
Our website uses the Google Maps service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA to plan your journey and to show our location. In the process, user data, e.g. your IP address, any search terms entered and location data, start address entered (when using the route planner function) may also be processed by Google on servers in the USA.
You must consent to the data processing by Google to be able to use the content of Google Maps on our website. The legal basis for processing is Art. 6 para 1 lit. a GDPR. You can revoke your consent at any time to prevent the storage of cookies by adjusting the appropriate settings in your Internet browser. See “Cookies” above for more details.
If Google Maps is enabled, Google may use the Google Fonts to ensure a uniform display. When you call up Google Maps, your browser loads the required web fonts into your browser cache to display text and fonts correctly. When the map service is activated, data is exchanged with the following external addresses: fonts.googleapis.com, fonts.gstatic.com, maps.google.com, google.com, gstatic.com, maps.gstatic.com, maps.googleapis.com
For detailed instructions on how to manage your own data in connection with Google products, see https://support.google.com/accounts/answer/3024190.
Version: 07.03.2023 / Basic version 27.02.2023