PRIVACY POLICY

1. GENERAL INFORMATION

We, Lucas-Nülle GmbH, take the protection of your personal data and the legal obligations associated with this protection very seriously. Legal requirements mandate comprehensive transparency regarding the processing of personal data. Only when the processing is transparent to you, as the data subject, are you sufficiently informed about the meaning, purpose, and scope of the processing. Our Privacy Policy therefore explains in detail which so-called personal data we process when you use the website mallofeducation.com and all other websites linked to it.
The controller within the meaning of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and other data protection regulations is the

Lucas-Nülle GmbH
Siemensstraße 2
50170 Kerpen-Sindorf
Tel.: +49 (0) 2273-567 0
info@lucas-nuelle.com
www.lucas-nuelle.de

Hereinafter referred to as „Data Controller“ or „we.“.

The Data Protection Officer is:

Pierre Wasser
Lucas-Nülle GmbH
Siemensstraße 2
50170 Kerpen

Please note that links on our website may take you to other websites that are operated by third parties, not by us. We either clearly label such links or they can be identified by a change in your browser’s address bar. We are not responsible for compliance with data protection regulations or the secure handling of your personal data on these third-party websites.

2. DEFINITIONS

2.1. From the GDPR

This Privacy Policy uses the terms defined in the text of the GDPR. You can view the definitions (Art. 4 GDPR), for example, at https://dejure.org/gesetze/DSGVO/4.html.

2.2. Cookies

Cookies are text files that are stored on or read from your device by a website. They contain combinations of letters and numbers that are used, for example, to recognize the user and their settings when they reconnect to the website that set the cookie, to keep them logged into a customer account, or to statistically analyze specific usage patterns.

2.3. This website uses cookies

Our website uses technically necessary cookies to identify your user session with the server—so-called session cookies. Our session cookie is actively deleted when you log out of your profile or, more generally, when you close your browser. We do not use any other cookies.

3. GENERAL INFORMATION ON DATA PROCESSING

We process personal data only to the extent permitted by law. Personal data is disclosed exclusively in the cases described below (see 4. below).

Personal data will be deleted or protected through technical and organizational measures (e.g., pseudonymization, encryption) as soon as the purpose of the processing no longer applies. This also occurs when a required retention period expires, unless there is a need to continue storing the personal data for the conclusion or performance of a contract.

Unless we are legally required to store data for a longer period or to disclose it to third parties (in particular law enforcement agencies), the decision regarding which personal data we collect, how long it is stored, and to what extent you may be required to disclose it, on which features of the website you use in each individual case.

4. DATA PROCESSING IN CONNECTION WITH THE USE OF THE WEBSITE

Using the website and its features regularly requires the processing of certain personal data.

4.1. Informational Use of the Website

When you visit our website and use it for informational purposes only—that is, without using additional features such as the contact form or social media plugins—we automatically collect personal data. This includes the following information: the IP address of your device, as well as the date and time of your visit to the website. This information is transmitted by your browser unless you have configured it to prevent the transmission of this information.

This personal data is processed to ensure the functionality and optimization of the website, as well as to guarantee the security of our information technology systems. This also constitutes our legitimate interest, which is why the processing is permitted under Article 6(1)(f) of the GDPR.

Personal data is stored for a period of 2 to 4 weeks. We do not combine this personal data with other data sources. Data is only disclosed to third parties to the extent necessary for the operation of our website. For this purpose, personal data is transferred to Cekom GmbH (web design agency) and Amazon Web Services (hosting provider). We do not intend to transfer data to a third country or to an international organization.

4.2. Google Web Fonts

When you visit our website, so-called web fonts are downloaded to ensure consistent font display. This content is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). When you visit our website, your browser loads the necessary web fonts into your browser cache to display text and fonts correctly. To do this, the browser you are using must connect to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address.

We use Google Web Fonts to ensure a consistent and visually appealing presentation of our website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. Data is transferred to the United States in accordance with Implementing Decision (EU) 2016/1250 of the European Commission (EU-U.S. Privacy Shield). We collect your IP address to enable the transfer to Google. If your browser does not support Web Fonts or if you disable this feature, no data will be transferred.

For more information about Google Web Fonts, visit https://develo-pers.google.com/fonts/faq. Google's privacy policy can be found at https://www.google.com/policies/privacy/.

4.3. Google Maps

Parts of our website use Google Maps features to display map data. This content is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). When you visit our website, your browser loads the necessary code from Google. To do this, the browser you are using must establish a connection to Google’s servers. As a result, Google becomes aware that our website has been accessed via your IP address. At the same time, Google may store cookies on your device—unless you have disabled cookies in your browser—or read existing cookies. Location data may also be collected if you allow this in your browser.

We use Google Maps to ensure that our website is visually appealing and user-friendly, and to make it easier for users to find the locations listed on our website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. Data is transferred to the United States in accordance with Implementing Decision (EU) 2016/1250 of the European Commission (EU-U.S. Privacy Shield).

We collect your IP address to enable transmission to Google. You are not required to provide this personal data; however, use of the relevant sections of our website (pages: „Home,“ „Products,“ „Our Industries,“ „Projects,“ „News,“ „Seminars,“ „Downloads & Service,“ „Contact,“ „Company & Careers“); however, access to these sections is not possible without providing this information.

For more information, please see Google's Privacy Policy, which can be found at https://www.google.com/policies/privacy/.

4.4. Social Media
4.4.1. YouTube

Parts of our website use YouTube’s services to display video content. This is a service provided by Google Ireland Limited („Google“), a company incorporated and operating under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland („Google“). When you visit the relevant pages, your browser loads the code from YouTube required to display the video. To do this, the browser you are using must connect to YouTube’s servers. As a result, YouTube becomes aware that our website has been accessed via your IP address. At the same time, YouTube may store cookies on your device—provided you have not disabled cookies in your browser—or read existing cookies.

We use YouTube plugins to enhance the user experience on our website and to enable the display of video content. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. Data is transferred to the United States in accordance with Implementing Decision (EU) 2016/1250 of the European Commission (EU-U.S. Privacy Shield).

We collect your IP address to enable transmission to YouTube. You are not required to provide this personal data; however, use of the relevant sections of our website (pages: Media Library) is not possible without providing it.

If you do not want YouTube to associate the personal data collected through our website with your YouTube account, you must log out of YouTube before visiting our website. For more information about YouTube, visit https://www.youtube.com/intl/de/yt/about/ and the Terms of Service can be found at https://www.youtube.com/t/terms. YouTube’s Privacy Policy can be found as part of Google’s Privacy Policy at https://www.google.com/policies/privacy/. Google’s Privacy Policy and Terms of Service can be found at https://policies.google.com/privacy.

4.4.2. Privacy Policy for the Lucas-Nülle Facebook Page

This statement, as of October 12, 2018, applies to the information about Lucas-Nülle GmbH ("Lucas-Nülle") available on Facebook ("Facebook") at https://www.facebook.com/LN.global/ on Facebook („Lucas-Nülle Facebook Page“). The Lucas-Nülle Facebook page is operated by Lucas-Nülle on the platform of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 (“Facebook”). The following information explains, on the one hand, how Lucas-Nülle processes data on the Lucas-Nülle Facebook page and, on the other hand, indicates where you can find Facebook’s policy regarding the processing of personal data by Facebook.

Data Processing by Lucas-Nülle

If you have a Facebook account, you can send us a message using the „Message“ feature. These messages are not visible to other Facebook users. We process the content of your message solely for the purpose of replying to you. The legal basis for this is Article 6(1)(f) of the General Data Protection Regulation (GDPR). If you wish to initiate a contractual relationship with Lucas-Nülle through your message, the legal basis for this processing is Article 6(1)(b) of the GDPR. We regularly delete all messages from the inbox of the Lucas-Nülle Facebook page, unless there is another reason that requires us to retain the message.

We do not know to what extent messages sent to Lucas-Nülle are analyzed, evaluated, or otherwise processed by Facebook. In this regard, please refer to the information in the section „Data Processing by Facebook.“Lucas-Nülle uses the statistical information regarding the use of the Lucas-Nülle Facebook page, which is provided by Facebook via the „Facebook Insights“ feature. For more information about Facebook Insights, please see the section „Data Processing by Facebook.“.

Beyond the processing of personal data described in this section, Lucas-Nülle has no influence whatsoever on the processing of personal data in connection with your use of the Lucas-Nülle Facebook page. Please note that you use the Lucas-Nülle Facebook page and its features at your own risk. This applies in particular to the use of interactive features (e.g., commenting, sharing, rating). For more information, please see the following section, „Data Processing by Facebook.“.

Data Processing by Facebook

When you visit the Lucas-Nülle Facebook page, Facebook collects, among other things, your IP address and other information that is transmitted to Facebook via cookies on your device. This information is used, among other things, to provide Lucas-Nülle—as the operator of the Lucas-Nülle Facebook page—with statistical data regarding the use of the Lucas-Nülle Facebook page. Facebook provides more detailed information on this at the following link: https://www.facebook.com/help/268680253165747/?helpref=uf_share&cms_id=268680253165747. You can find Facebook’s Cookie Policy here: https://www.facebook.com/policies/cookies/.

The data collected about you in this context is processed by Facebook and may be transferred to countries outside the European Union. Facebook describes what information it receives and how it is used in its „Data Policy.“ The „Data Policy“ is available at the following link: https://www.facebook.com/privacy/explanation.

4.5. Google Analytics

When you visit our website, the Google Analytics service is loaded for the purpose of statistical analysis of website usage. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). By using the „anonymizeIp()“ extension, we ensure that Google Analytics transmits only a truncated version of your IP address to Google. Google Analytics uses cookies that are stored on your device, unless you have disabled cookies in your browser, and that enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is transmitted to Google in the United States and stored there.

We use Google Analytics to optimize our business operations and tailor our website to user needs. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. In addition, we have entered into a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities regarding the use of Google Analytics. Data is transferred to the United States in accordance with Implementing Decision (EU) 2016/1250 of the European Commission (EU-U.S. Privacy Shield).

We collect your IP address to enable it to be truncated and subsequently transmitted to Google. You are not required to provide this personal data; you may use our website without providing it. You can prevent the collection of this personal data by installing the add-on available at https://tools.google.com/dlpage/gaoptout?hl=de. For more information about Google Analytics, visit http://www.google.com/intl/de_ALL/analytics. Google’s privacy policy can be found at https://www.google.com/policies/privacy/.

4.6. Contact Form / Contacting Us via Email

If you use the contact form on our website or send us an email, we will process the personal data you provide there. This information is transmitted by your browser or email client and stored in our IT systems. The processing of this personal data is necessary to respond to your inquiry. In addition, the date and time of your contact request are stored when you send us an email.

The purpose of data processing is to prevent misuse of the contact form and to ensure the security of our information technology systems.

This processing is lawful because, by submitting the contact form, you are giving us your consent in accordance with Article 6(1)(a) of the GDPR, and responding to your inquiry constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.

Personal data will be stored for as long as necessary to respond to your inquiry. If your inquiry leads to the conclusion of a contract at a later date, the data will be stored for as long as necessary to carry out precontractual measures or to fulfill the contract. We do not combine this personal data with other data sources. Data will only be disclosed to third parties if you contact an employee of one of our subsidiaries (Lucas-Nuelle Inc., Lucas-Nülle FWOE, and Lucas-Nülle Middle East FZE) or one of the listed business partners directly. The email will then be sent directly to the named company. We do not intend to transfer data to a third country or to an international organization. You are not obligated to provide this personal data; however, you cannot use the contact form or send an email without providing it.

4.7. Subscribing to a Newsletter

You can subscribe to our newsletter on our website. If you do so, the personal data you provide during registration will be transmitted to us by your browser and stored in our IT systems. Your IP address and the time of registration will also be stored.

The processing of the personal data you provide is intended to personalize and send you the newsletter. This processing is lawful because you have given us your consent in accordance with Article 6(1)(a) of the GDPR. The storage of your IP address and the time of your login serves the purpose of ensuring the security of our IT systems. This also constitutes our legitimate interest, which is why the processing is permitted under Article 6(1)(f) of the GDPR.

The personal data you provide will be stored until your subscription with us is canceled. We do not combine this personal data with other data sources. We do not share this data with third parties. We do not intend to transfer this data to a third country or to an international organization. You are not required to provide this personal data; however, you cannot subscribe to our newsletter without providing it.

4.8. WEBOFFER, Customer Account

When you request personalized quotes for our products and services on our website, the personal data you provide is transmitted to us via your browser and processed in our IT systems. A customer account is created for you during this process. If you are already a customer of ours, simply providing your customer number and email address is sufficient; we will then use the personal data from your customer account for the rest. The time of the request is also stored.

The personal data you provide is processed for the purpose of preparing and sending you a personalized quote and maintaining the customer account required for our customer service.

The personal data you provide will be stored in your customer account until your account with us is closed. If a contract is concluded, the personal data will be stored for as long as necessary to fulfill the contract. We do not combine this personal data with data from third-party sources. As a rule, data is not transferred to third countries. We rely on self-hosted or internally operated solutions; if this is not possible, we use solutions from within the EU whenever possible, and in any case, we enter into data processing agreements with service providers. As part of the optimization of our IT systems, personal data may be transferred from the production system to test systems that are equally secure.

4.9. Registration for LN-ACADEMY Seminars

You can register for seminars we offer on our website. When you do so, the personal data you provide during the registration process is transmitted to us by your browser and stored in our IT systems. If you are already a customer of ours, simply provide your customer number and email address; we will then use the personal data from your customer account for the rest. Your IP address and the time of your request will also be stored.

The processing of the personal data you provide is necessary for the preparation and conduct of the seminar in which you wish to participate. This processing is lawful because it is necessary for the performance of the contract pursuant to Article 6(1)(b) of the GDPR. The storage of your IP address and the time of registration serves the purpose of ensuring the security of our information technology systems. This also constitutes our legitimate interest, which is why the processing is permitted under Article 6(1)(f) of the GDPR.

The personal data you provide will be stored until after the seminar has taken place. We do not combine this personal data with other data sources. Data will only be disclosed to the extent necessary for conducting the seminar (e.g., to a partner providing the venue, if participant lists are maintained there or registrations must be processed). We do not intend to transfer this data to a third country or to an international organization. You are not obligated to provide this personal data; however, without it, we cannot send you promotional materials or prepare a quote.

5. RIGHTS OF DATA SUBJECTS

As a data subject, you have the right of access under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, and the right to data portability under Article 20 of the GDPR. With regard to the right of access and the right to erasure, the restrictions set forth in Sections 34 and 35 of the Federal Data Protection Act (BDSG) apply. In addition, you have the right to lodge a complaint with a data protection supervisory authority (Article 77 of the GDPR in conjunction with Section 19 of the BDSG).

6. AUTOMATED DECISIONS IN INDIVIDUAL CASES, INCLUDING PROFILING

We do not make automated decisions on a case-by-case basis, including profiling.

7. DISCLOSURE OBLIGATIONS OF THE CONTROLLER

We will notify all recipients to whom your personal data has been disclosed of any rectification or erasure of your personal data or any restriction on processing pursuant to Art. 16, Article 17(1), and Article 18 of the GDPR, unless such notification is impossible or would involve a disproportionate effort.

We will inform you of the recipients if you request it.

8. RIGHT TO OBJECT

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(e) or (f) of the GDPR. If personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing.

9. RIGHT TO WITHDRAW CONSENT TO THE PROCESSING OF PERSONAL DATA

Pursuant to Article 7(3), sentence 4 of the GDPR, you have the right to withdraw your consent at any time. The lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal remains unaffected. Thus, the withdrawal applies only to processing planned after the withdrawal. Withdrawal may be made informally by mail or email. If you withdraw your consent, we will no longer process your personal data unless another (legal) basis permits such processing. However, if consent is withdrawn and no other legal basis for processing exists, the personal data must be erased without delay at your request, in accordance with Article 17(2)(b) of the GDPR.

The cancellation may be made in any form and should be addressed to:

Lucas-Nülle GmbH
Siemensstraße 2
50170 Kerpen
info@lucas-nuelle.com