Data privacy statement

We welcome your visit to our website and your interest in our business and our products. The protection of your privacy during the processing of personal data is an important issue for us, as is the security of all business data; we take these issues into account in our business processes. We process personal data obtained during your visit to our website both confidentially and always in accordance with statutory requirements. Data protection and information security form part of our corporate policy. Web pages under the domain lothmann.biz are a service of Lothmann Werkzeugtechnik GmbH & Co. KG, Ludwigsburg (hereinafter referred to as Lothmann or “we”). Lothmann web pages may contain links to websites run by other providers not covered by this data privacy statement.

Personal data are those items of data that make it possible to identify you. Here the issue is not whether it is possible to identify you based on a single piece of information. The more information and data that can be combined, the more accurately the person can be identified. Personal data include, e.g., the name, address, age, e-mail address and telephone number of a person.

1. Collection, processing and storage of personal data by Lothmann

Lothmann collects, processes and saves your personal data only if these actions are permitted by statutory regulations or you have given your consent. We obtain these data in two ways: either you provide the data to us or we collect the data during the utilisation of our services.

Providing your personal data to this website is neither legally or contractually required, nor is it necessary for the conclusion of a contract. However, you will not be able to use individual services of this website or our offer if you do not provide any data.

1.1. Data you provide to us

As a rule, you can use our website without the need to provide your personal information to us directly. For some services we will ask for your personal data to be able to process the related service quickly and in a user-friendly manner, or to be able to offer the service at all. In the section “Individual services” you will find detailed information on all services provided by Lothmann on this website (see below, point 3).

1.2. Data we obtain during your utilisation of our services

Some data are produced automatically and for technical reasons when you visit our website. The following information is acquired without any action on your part and saved until it is deleted automatically:

• IP address,
• Web browser used including language and version of browser software,
• Operating system used and its interface,
• Web page through which you accessed our website (referrer URL),
• Date and time of the access.

The data stated are processed by us for the following purposes:

• To ensure the smooth establishment of a connection to the website,
• To ensure our website is pleasant to use,
• To evaluate the system security and system stability,
• To evaluate statistics.

The legal basis for the processing of the data is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest stems from the purposes stated above for collecting the data. Under no circumstances do we use the data collected to identify you.

We also use cookies when you visit our website. You will find more detailed explanations in point 2 of this data privacy statement.

1.3. Disclosure of data

In principle, we do not disclose personal data to third parties. If in a specific case, data are provided to a third party, this is done on the basis of appropriate agreements.

In individual cases, it may be necessary – for example, in order to fulfil contracts – for us to transfer information to recipients in so-called third countries. Third countries are countries outside the European Union or the Agreement on the European Economic Area where a level of data protection comparable to that in the European Union cannot be readily assumed. If the transferred information also includes personal data, we will ensure that the required adequate level of data protection is guaranteed in the respective third country or at the recipient in the third country before the data transfer. In particular, this can result from a so-called adequacy decision of the European Commission, which establishes an adequate level of data protection for a specific third country as a whole. Alternatively, we can also base the data transfer on the so-called EU standard contractual clauses agreed upon with a recipient. We will be happy to provide you with further information on the appropriate and adequate safeguards for maintaining an adequate level of data protection upon request.

You can find more information (in English) on the so-called EU standard contractual clauses at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en and information (in English) on the adequacy decisions at https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en.

By means of corresponding measures and regular checks, we ensure the data we have collected cannot be viewed or accessed externally by third parties.

1.4. Consent with Cookiebot

Our website uses consent technology provided by Cookiebot to obtain your consent to data being stored on your terminal device or to the use of certain technologies and to document this consent in accordance with data protection law. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter referred to as “Cookiebot”).

When you use our website, a connection is made to Cookiebot’s servers for obtaining your consent and other declarations regarding memory use. Afterwards, Cookiebot stores the status of your consent in your browser in order to be able to assign the consent you have given or revoked. The data collected in this way is stored until you ask us to delete it, delete the Cookiebot cookie yourself or if the reason for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.

Cookiebot is used for obtaining the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c) GDPR.

2. Usage of cookies and browser memory

2.1. Explanation

Cookies and browser storage allow data to be stored on the respective terminal device (laptop, tablet, smartphone, etc.) and retrieved at a later time. Information related to the specific device used is saved there. This does not mean that we obtain direct knowledge of your identity by this means. The main purpose of using these methods is to make using our website more convenient for you. Here, it is possible to differentiate between the following types:

Necessary cookies and storage help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies and storage.

Preference cookies and storage allow a website to remember information that affects the way a website behaves or looks, such as your preferred language or region.

Statistics cookies and storage help website owners understand how visitors interact with websites by collecting and reporting anonymous information.

Marketing cookies and storage are used to follow visitors on websites. The intention is to show ads that are relevant and engaging to the individual user and therefore more valuable to publishers and third-party advertisers.

2.2. Usage at Lothmann

3. Individual services

3.1. Contact form

If you send us enquiries using the contact form, your details from the enquiry form, including the contact details you have provided there, will be stored by us for the purpose of processing the enquiry and in the case of follow-up enquiries. Data is only passed on to third parties to the extent necessary to process your individual enquiry. The processing of the data entered in the contact form is based on the legitimate interest of both parties (Art. 6 para. 1 lit. f) GDPR). You can object to further processing at any time. All you need to do is send us an informal message by email. The data you enter in the contact form will remain with us until you request us to delete it or the purpose for storing the data no longer applies (after we have completed processing your enquiry, for example). Mandatory legal provisions, retention periods in particular, remain unaffected.

3.2. Lothmann checklist

If you send us enquiries via the Lothmann checklist, your details from the checklist, including the contact details you have provided there, will be stored by us for the purpose of processing the enquiry and in the case of follow-up enquiries. We do not pass on this data without your consent.

The processing of the data entered in the contact form is based on the initiation of a contract (Art. 6 para. 1 lit. b) GDPR). The data you enter in the contact form will remain with us until you request us to delete it or the purpose for storing the data no longer applies (after we have completed processing your enquiry, for example). Mandatory legal provisions, retention periods in particular, remain unaffected.

3.3. Enquiry by email, telephone or fax

If you contact us by email, telephone or fax, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent. This data is processed on the basis of Art. 6 para. 1 lit. b) GDPR, insofar as your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a) GDPR) and/or on our legitimate interests (Art. 6 para. 1 lit. f) GDPR), as we have a legitimate interest in the effective processing of requests addressed to us. The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). Mandatory legal provisions, legal retention periods in particular, remain unaffected.

3.4. Email newsletter

If you register for the newsletter, you provide your express consent in accordance with Art. 6 para. 1 lit. a) GDPR. For this purpose we will need your email address. To personalise the newsletter, you can provide us with your name and a greeting preference.

Individual links in the newsletter are personalised so that we can recognise which content is particularly interesting for readers and so that we can improve our service based on this.

By means of a tracking pixel in the newsletter, we may also receive information on whether the newsletter has been opened. You can prevent this in your e-mail system by not allowing any external images.

Your data will be used only for the purpose of sending the newsletter as per Art. 6 para. 1 lit. a) GDPR. For this purpose we use a tool from a service provider; the service provider receives your data within the statutorily permitted, contractually regulated framework. You can view, change or delete your data at any time.

It is possible to unsubscribe at any time by clicking on the unsubscribe link in the newsletter to revoke your consent.

3.5. Applications

You are welcome to send us your application in the easiest and most convenient way for you. Keep in mind that an email is typically unencrypted and is similar to a postcard from a confidentiality perspective. If you would like to send us an email about this, please use the email address a.ott∂lothmann.biz.

Therefore, if possible, please refrain from sending us your application by email and instead use the MAPAL Group encrypted careers portal at https://jobs.mapal.com/.

The primary legal basis[ER2] for processing your application data is the General Data Protection Regulation (GDPR). According to Art. 6 para. 1 lit. b) GDPR, the processing of data is permissible if this is necessary for carrying out or terminating an employment relationship. We may also be required by law to process employee data. The legal basis for this processing is Art. 6 para. 1 lit. c) GDPR. Processing employee data may also be permissible on the basis of labour agreements or so-called collective agreements (e.g. company agreement). In this case, the legal basis is the labour agreement or collective agreement in conjunction with Article 88 of the GDPR. Finally, data processing can also take place on the basis of a so-called balancing of interests according to Art. 6 para. 1 lit. f) GDPR. In these cases, the interest is communicated separately in connection with the respective processing. If your application is stored over a long period for future vacancies or transferred within the group, this takes place based on your consent according to Art. 6 para. 1 lit. a) GDPR.

The company responsible for data processing is Lothmann Werkzeugtechnik GmbH & Co. KG, Ludwigsburg. With your consent or your explicit request, we will also check your application for suitability for other positions within the company or make your application documents available to other recruiters within the MAPAL Group. You can revoke this consent at any time with effect for the future.

If you do not provide the required personal data, you will not be able to participate in the application process.

As part of your application, we ensure that your data are deleted after the reason for which we received your data no longer applies. Data deletion after the reason for collection has ceased or after the underlying retention period has expired is provided for as follows:

• Application data for a specific position will be deleted six months after a rejection.
• If you have agreed to a cross-check with other positions within the company or in the MAPAL Group, we will delete your application after twelve months at the latest.
• Regardless of when we are required to delete your data, you always have the option of requesting deletion immediately.

3.6. Social media

We also offer you comprehensive personal support and the opportunity to contact or stay in touch with us via our social media pages (YouTube, LinkedIn, Instagram). These social media services may collect personal data themselves, e.g. via your profile saved there.

It cannot be excluded that data on every visitor to these pages will be collected by the companies listed above. For information on the purpose and scope of the collection of data and the further processing and utilisation of the data by these companies, as well as your related rights and the settings you can make to protect your privacy, please refer to the data privacy statements of the individual services or the data privacy statements on our respective social media profiles:

3.6.1. Instagram

A link to our Instagram page is embedded on this website. The pages offered on Instagram are provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Together, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook or Instagram. The processing by Facebook or Instagram that takes place after forwarding is not part of the joint responsibility. The obligations placed upon us jointly were set out in a joint processing agreement. You can find the content of the agreement at https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the data protection information when using the Facebook or Instagram tool and for implementing the tool on our website in a way that is considered secure from a data protection perspective. Facebook is responsible for the data security of Facebook and Instagram products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook or Instagram with Facebook directly. If you assert the data subject rights with us, we are obliged to forward them to Facebook.

The data transfer to the USA, which Meta Platforms Ireland Limited carries out, is based on the standard contractual clauses of the EU Commission. You can find details at https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.

You can find more information on this in Instagram’s data privacy statements at https://instagram.com/about/legal/privacy/.

3.6.2. LinkedIn

A link to our LinkedIn page is embedded on this website. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

You can find more information on this in LinkedIn’s data privacy statements at: https://www.linkedin.com/legal/privacy-policy.

3.7. Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Maps will only be activated on our pages after you have given your consent. Processing is then carried out on the basis of Art. 6 para. 1 lit. a) GDPR and Section 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time – to do so, use our consent management via Cookiebot (see above).

Saving your IP address is necessary for using the functions of Google Maps. This information is usually transferred to a Google server in the US and stored there. The provider of this site has no influence over this data transfer. If Google Maps is enabled, Google may use Google Fonts to provide a standardised font display. When you open Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

More information on how user data is handled can be found in Google’s data privacy statements: https://policies.google.com/privacy?hl=de.

3.8. YouTube

This website embeds videos from the website YouTube. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube will only be activated on our pages after you have given your consent. Processing is then carried out on the basis of Art. 6 para. 1 lit. a) GDPR and Section 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time – to do so, use our consent management via Cookiebot (see above).

When you visit one of our web pages on which YouTube is embedded, a connection to YouTube’s servers is established. This tells the YouTube server which of our pages you have visited.

In addition, YouTube may store various cookies on your terminal device or use comparable technologies for recognition (e.g. device fingerprinting). In this way, YouTube can gather information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience, and prevent fraud attempts.

If you are logged in to your YouTube account, you allow YouTube to assign your surfing behaviour directly to your personal profile. You can stop this by logging out of your YouTube account.

For more information on how user data is handled, please refer to YouTube’s data privacy statement at: https://policies.google.com/privacy?hl=de.

3.9. Statistics and lead generation

We have integrated LeadLab on this website. The provider is WiredMinds GmbH, Lindenspürstraße 32, 70176 Stuttgart (hereinafter referred to as “LeadLab”).

LeadLab allows us to track visits to our website by affiliates of other companies. For this purpose, the IP address of the website visitor is matched with the company IP addresses stored in LeadLab’s company database. If this is the IP address of a company, this visit as well as the user behaviour is recorded. This may also be the case if you visit our website on your business device for private reasons. IP addresses that are not found in LeadLab’s database are deleted immediately, so website visits by private individuals are generally ignored by LeadLab.

The use of LeadLab is based on Art. 6 para. 1 lit. f) GDPR. In this regard, we have a legitimate interest in recording company visits to our website as well as user behaviour. You can object to this processing at any time by clicking on the following button/link: Disable tracking. Please note that this may set a cookie or browser memory to store your decision. This storage is based on the legitimate interest on the basis of Art. 6 para. 1 lit. f) GDPR and § 25 para. 2 No. 2 TTDSG.

For further details, please refer to the provider’s data privacy statement at https://wiredminds.de/datenschutz/.

4. Your rights

Of course, you retain control over all the personal data you make available to us by visiting the website and using our services. The following rights are available to you; you can make use of these rights free of charge.

4.1. Right to access

You have the right to consult your personal data we have saved free of charge. This includes, among other things, information on how long and for what purpose we process the data, where it comes from and which recipients or categories of recipients we pass the data on to. We can also provide you with a copy of this data.

4.2. Right to revoke consent granted

You have the right to revoke consent you have granted to process personal data at any time with effect for the future. If you revoke your consent, we will delete the related data without delay, provided further processing cannot be allowed on a legal basis for processing. The revocation of your consent does not affect the legality of processing undertaken up until revocation.

4.3. Right to object

If we process your personal data in the context of a weighing of interests in our legitimate interest, you have at any time the right, for reasons based on your specific situation, to object to this processing with effect for the future.

If you exercise your right to object, we will stop processing the data in question. The right to continue processing is retained, however, if we can demonstrate compelling, legitimate reasons for the processing that outweigh your interests, fundamental rights and fundamental freedoms, or if processing is for the purpose of the assertion, exercise or defence of legal claims.

If your personal data is processed by us for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for this purpose.

4.4. Right to data portability

You have the right to apply for the transfer of your personal data from us to another body. Details and restrictions can be found in Art. 20 GDPR. Exercising this right does not affect your right to deletion.

4.5. Right to rectification, deletion or restriction of the processing4.6. Right to lodge a complaint

You have the right to correct, delete or restrict the processing of your personal data.

4.6. Right to lodge a complaint

You have the right to complain to a supervisory authority or our company if you should have a reason for complaint. To make use of rights in relation to our company, please contact the persons listed at the end of the data privacy statement.

5. Duration of storage

In principle, we store personal data as long as is necessary for the purpose of processing or if we have a legitimate interest in this storage and your interests in not continuing the storage do not outweigh this. This means that we generally only store your data for as long as is necessary to provide our website and the associated services or for as long as we are legally obligated to store your data. We also delete personal data without any action required from the data subject as soon as we no longer need it for processing or if the storage is otherwise legally prohibited.

Those personal data that we have to store to fulfil retention obligations are stored until the end of the respective retention obligation. Insofar as we store personal data exclusively for fulfilling retention obligations, processing in this regard is generally restricted so that it can only be accessed if this is necessary with regard to the purpose of the retention obligation.

6. Automatic decision-making

In connection with the processing of your personal data presented in this data privacy statement, we generally do not use automated decision-making (including profiling) within the meaning of Art. 22 GDPR. If we use these kinds of procedures in individual cases, we will of course inform you separately.

7. Responsible for data collection

The body responsible for data protection in relation to the processing of personal data (within the meaning of Art. 4 No. 7 GDPR) and therefore responsible for questions, requests for information, applications, complaints or criticism regarding our data protection shall be:

Lothmann Werkzeugtechnik GmbH & Co. KG
Robert-Mayer-Straße 26
71636 Ludwigsburg

Data protection officer

The correct implementation of data protection in our organisation is undertaken by a data protection officer. If you have issues in relation to the processing of your personal data, you can also contact this officer directly.

Data Protection Officer of
Lothmann Werkzeugtechnik GmbH & Co. KG
Robert-Mayer-Straße 26
71636 Ludwigsburg

s.zouaoui∂lothmann.biz