Privacy Policy

We are pleased to welcome you to our website. Below, we would like to inform you about how we handle your data in accordance with Article 13 of the General Data Protection Regulation (GDPR).

Controller

The entity responsible for the data processing described below is:

LMT Tool Systems GmbH & Co KG

Vogesenstr. 23

77933 Lahr

Telefon: +49 7821 943-0

E-Mail: info@lmt-tools.com

Usage Data

When you visit our websites, so-called usage data is temporarily logged on our web server for statistical purposes to help us improve the quality of our websites. This data record consists of

• the name and address of the requested content,

• the date and time of the request,

• the amount of data transferred,

• the access status (content transferred, content not found),

• a description of the web browser and operating system used,

• the referral link indicating which page you came from,

• the IP address of the requesting computer.

The legal basis for this is Article 6, paragraph 1, letter f of the GDPR. Processing is carried out in the legitimate interest of providing the website’s content and ensuring a display optimized for devices and browsers.

Data Processors

We share your data with service providers who assist us in operating our websites and related processes, in accordance with Article 28 of the GDPR. Our service providers are strictly bound by our instructions and are contractually obligated to comply.

Below is a list of the data processors with whom we collaborate, unless otherwise specified in the text of this Privacy Policy. If data may be processed outside the EU or the EEA in this context, we provide the following information below:

foryouandyourcustomers Munich GmbH Mommsenstr. 6 80805 Munich

Purpose: Website support and administration, hosting via the subprocessor Microsoft Ireland Operations Limited (servers in the Netherlands; for some services, data transfer to the U.S.)

Adequate level of data protection: For transfers to the U.S., an adequate level of data protection is ensured through the conclusion of EU Standard Data Protection Clauses.

Köhler + Partner GmbH Brauerstraße 42 21244 Buchholz i.d.N.

Purpose: Support for the operation of online tools on the website

Appropriate level of data protection: Processing exclusively within the EU / EEA k*: Website support and administration, hosting via the subprocessor Microsoft Ireland Operations Limited (servers in the Netherlands; for some services, data transfer to the U.S.)

Adequate level of data protection: For transfers to Switzerland, an adequate level of data protection is guaranteed based on the adequacy decision for Switzerland.

Contentful GmbH Max-Urich-Straße 3 13355 Berlin

Purpose: Content management platform (hosting via the sub-processor Amazon Web Services EMEA SARL Luxembourg (USA))

Adequate level of data protection: An adequate level of data protection is ensured for transfers to the USA based on the conclusion of EU Standard Data Protection Clauses.

Emporix AG Bundesplatz 16, 6300 Zug, Switzerland

Purpose: Provision of the e-commerce platform (hosting in the Netherlands, Germany, and Switzerland)

Adequate level of data protection: An adequate level of data protection is ensured for transfers to Switzerland based on the adequacy decision for Switzerland.

Algolia SAS 55 Rue d’Amsterdam 75008 Paris, France

Purpose: Provision of the search function (product search & filters)

Adequate level of data protection: Processing exclusively within the EU / EEA

d.vinci HR-Systems GmbH
Nagelsweg 37-39 20097 Hamburg

Purpose: Connection/embedding of the job portal

Adequate level of data protection: Processing exclusively within the EU / EEA

Data Security

We take technical and organizational measures to protect your data from unauthorized access as comprehensively as possible. We use an encryption method on our websites. Your data is transmitted from your computer to our server and vice versa via the Internet using TLS encryption. You can usually recognize this by the closed padlock icon in your browser’s status bar and the address bar beginning with https://.

Necessary Cookies / Web Storage

We use cookies on our websites that are necessary for their use. Cookies are small text files that are stored on your device and can be read. A distinction is made between session cookies, which are deleted as soon as you close your browser, and persistent cookies, which are stored beyond the individual session. In some cases, these cookies contain only information about specific settings and are not personally identifiable. They may also be necessary to enable user navigation, security, and the proper functioning of the site. You can delete cookies at any time via the corresponding browser settings and prevent new cookies from being set. Please note that our websites may then not be displayed optimally, and some functions may no longer be technically available.

We also use so-called web storage entries (local storage, session storage) on our websites. With local storage, data is stored locally in your browser’s cache; this data remains there even after you close the browser window and can be accessed unless you actively clear the cache. You can manage local storage content in your browser’s settings, depending on which browser you use. The function of session storage is essentially the same as that of local storage, except that the corresponding data is automatically removed from your browser’s cache immediately after closing the browser (“session”).

We use necessary cookies and web storage entries based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. For more information on the necessary cookies and web storage entries, the storage duration, and the purpose of processing, please see our consent banner (here: Cookie Settings) under the “Necessary” category.

Consent Banner

We use a consent management platform (consent banner) on our websites. The processing related to the use of the consent management platform and the logging of the settings you have made is based on Article 6(1)(f) of the GDPR, in our legitimate interest to display our content according to your preferences and to be able to verify the consent(s) you have given. Your settings, the consents you have granted, and parts of your usage data are stored in a cookie. This ensures that the cookie remains valid for subsequent page requests and that your consents can continue to be tracked. For more information, please refer to the section “Essential Cookies / Web Storage.”

The provider of the consent management platform—Usercentrics A/S (Havnegade 39, 1058 Copenhagen, Denmark)—acts on our behalf as a service provider strictly bound by our instructions (data processor). A data processing agreement in accordance with Art. 28 GDPR has been concluded.

Google Consent Mode

We use Google Consent Mode V2 (Basic Mode). This means that your IP address is transmitted to Google regardless of your settings in the banner. However, Google deletes this IP address immediately after collection and does not log it. The processing is carried out in our legitimate interest to better control and use certain functions of the Google services used on the website that require consent. The legal basis for the processing is Art. 6(1)(f) GDPR.

Visitor Tracking

We use web analytics tools to tailor our websites to user needs. These tools create usage profiles based on pseudonyms. To do this, persistent cookies are stored on your device and read by us. In addition, we may retrieve identifying characteristics for your browser or device (e.g., a so-called browser fingerprint or your unmasked IP address) . This enables us to recognize returning visitors and count them as such.

In addition, we use the following functions as part of visitor tracking:

• We enrich the pseudonymous data with additional data provided to us by third-party providers. This allows us to capture demographic characteristics of our visitors, such as information regarding age, gender, and place of residence.

• We use a tracking method that allows us to record our visitors’ mouse pointer movements and analyze them retrospectively.

• Using contextual data, including usage history on other sites that also have cookies enabled, we create exploratory click paths and browsing behavior analyses.

Data processing is based on your consent. If data is processed outside the EU or the EEA (particularly in the U.S.) for the purpose of visitor analytics, we provide the following information regarding the level of data protection.

Google (Google Analytics)

Maximum storage period: 13 months

Adequate level of data protection: For transfers to the U.S., an adequate level of data protection is ensured based on the provider’s certification under the Adequacy Decision (EU-U.S. Data Privacy Framework).

Withdrawal of consent: If you wish to withdraw your consent, please click Cookie Settings and select the appropriate setting via our banner.

Third-Party Tracking Technologies for Advertising Purposes

We use cross-device tracking technologies so that targeted advertisements can be displayed to you on other websites based on your visit to our websites, and so that we can determine how effective our advertising campaigns have been.

How does tracking work?

When you visit our websites, the third-party providers listed below may retrieve identifying characteristics for your browser or device (e.g., a so-called browser fingerprint), analyze your IP address, store or read identifying characteristics on your device (e.g., cookies), or gain access to individual tracking pixels. These individual identifiers can be used by third-party providers to recognize your device on other websites. We may commission these third-party providers to display advertisements tailored to the pages you have visited on our site.

What does cross-device tracking mean?

If you log in to a third-party provider using your own user data, the respective identifiers from different browsers and devices can be linked together. So, for example, if the third-party provider has created a unique identifier for each of the laptop, desktop PC, smartphone, or tablet you use, these individual identifiers can be matched to one another as soon as you use a third-party service with your login credentials. This allows the third-party provider to target our advertising campaigns across different devices.

Which third-party providers do we use in this context?

Data processing is based on your consent. Below, we list the third-party providers with whom we collaborate for advertising purposes. If data is processed outside the EU or the EEA (in particular in the U.S.) in this context, we provide the following information regarding the level of data protection.

Google (Google Ads)

Maximum storage period: 3 months

Withdrawal of consent: If you wish to withdraw your consent, please click Cookie Settings and make the appropriate selection via our banner.

Non-essential technical third-party content and features

We use the non-essential technical features and content from third-party providers listed below to display our websites. When you visit our pages, content from the third-party providers that supply these features and content is loaded. As a result, the third-party provider receives information that you have visited our site, as well as the usage data technically required for this purpose.

This embedding is based on your consent. Below, we list the third-party providers with whom we collaborate in this context. If data is processed outside the EU or the EEA (particularly in the U.S.) in this context, we provide information below regarding the level of data protection.

Google (Tap Manager)/Management of Tracking Tools

Adequate Level of Data Protection: For transfers to the U.S., an adequate level of data protection is ensured based on the provider’s certification under the Adequacy Decision (EU-U.S. Data Privacy Framework).

Withdrawal of consent: If you wish to withdraw your consent, please click Cookie Settings and make the appropriate selection via our banner.

Contact Form

You can contact us using our contact form. To use our contact form, we first need you to provide the information marked as required fields. We process this information on the basis of Article 6(1)(f) of the GDPR to respond to your inquiry. In addition, you may decide for yourself whether you wish to provide us with further information. This information is provided voluntarily and is not required to contact us. We process your voluntary information based on your consent. Your data will be processed solely for the purpose of responding to your inquiry. We will delete your data once it is no longer necessary and provided there are no legal retention obligations to the contrary.

To the extent that your data submitted via the contact form is processed on the basis of Article 6(1)(f) of the GDPR, you may object to the processing at any time. You may also withdraw your consent to the processing of the voluntary information at any time. To do so, please contact legal@lmt-tools.com.

Embedded Videos

We embed videos on our websites that are not stored on our servers. However, for data protection reasons, no content from the third-party provider is loaded when you visit our websites, and the provider does not receive any information. The third-party provider’s content is only loaded once you have given your consent. The third-party provider is thus informed that you have visited our site, along with the usage data technically necessary for this purpose, and data may be stored on your device. Additionally, the third-party provider is then able to implement tracking technologies. We have no influence over the further processing of data by the third-party provider. Your consent implies that the third-party provider’s content will be loaded.

The integration is based on your consent, provided that you have given your consent via our banner. If data is processed outside the EU or the EEA (in particular in the U.S.) in this context, we provide the following information regarding the level of data protection.

Google (YouTube)

Maximum storage period: Until the browser cache is cleared

Withdrawal of consent: If you wish to withdraw your consent, please click Cookie Settings and make the appropriate selection via our banner.

Newsletter Subscription and Distribution

You can subscribe to our newsletter on our website. Please note that we require certain information to process your subscription. The newsletter will only be sent if you have given us your express consent. If you subscribe to our newsletter, we will also track its delivery. To do this, we embed individual tracking pixels in our newsletters, which allow us to determine when the newsletter sent to you has been accessed or opened, and we customize the links in the newsletter to track which links you have clicked on. After you subscribe, you will receive a confirmation email at the email address you provided (known as a double opt-in). You can revoke your consent at any time. An easy way to do so is, for example, via the unsubscribe link included in every newsletter.

When you subscribe to our newsletter, we store additional data to the extent necessary to prove that you have subscribed to our newsletter. This may include storing your full IP address at the time of subscription or confirmation of the newsletter, as well as a copy of the confirmation email we sent. The corresponding data processing is carried out on the basis of Art. 6(1)(f) GDPR and in the legitimate interest of being able to account for the lawfulness of the newsletter distribution.
In connection with the distribution of the newsletter, we engage the service provider Sendinblue GmbH (Köpenicker Str. 126, 10179 Berlin) as a service provider strictly bound by our instructions (data processor). A data processing agreement in accordance with Article 28 of the GDPR has been concluded.

Direct Marketing

If we receive your email address in connection with the sale of a product or service, we will use that address for direct marketing of our own similar products or services, provided you have not objected to such processing. When collecting your email address and each time we use it, we clearly state that you may object to this use at any time without incurring any costs other than the standard transmission fees.

This use is based on Article 6(1)(f) of the GDPR and is in the interest of promoting the sale of our goods or services. You can easily object, for example, by clicking the unsubscribe link included in every email.

Restricted-Access Area (MyLMT Customer Account)

If you wish to use our restricted-access area, prior registration (customer account) with the provision of data is required. The processing of personal data, which must be provided, is based on Article 6(1)(f) of the GDPR in our legitimate interest to provide you with the services and information of the restricted-access area.

If we collect any additional personal data marked as optional, we process it based on your consent. You may revoke your consent at any time with future effect by contacting our customer service at info@lmt-tools.com.

Please note that the information you provide will be verified by our customer service team and linked to your company account. You will then receive an email. This email contains a link to a form that prompts you to create a personal password.
After successful registration and password creation, you can log in to the restricted-access area (customer account). This allows you to add products to your shopping cart and then place an order (on account). In addition, your personal information and contact details, company information, address information, and current orders will be displayed.
If you wish to permanently deactivate your account in our restricted-access area (customer account), please contact our customer service at info@lmt-tools.com.

Retention Period

Unless we have already provided specific information regarding the retention period, we will delete personal data when it is no longer necessary for the aforementioned processing purposes and no legitimate interests or other (legal) grounds for retention prevent such deletion.

Your rights as a data subject

When your personal data is processed, the GDPR grants you, as a data subject, certain rights:

Right of access (Art. 15 GDPR):

You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to access this personal data and to the information listed in detail in Art. 15 GDPR.

Right to rectification (Art. 16 GDPR):

You have the right to request the immediate rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete data.

Right to erasure (Art. 17 GDPR):

You have the right to request that personal data concerning you be erased without undue delay, provided that one of the grounds listed in detail in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR):

You have the right to request restriction of processing if any of the conditions listed in Art. 18 GDPR are met, e.g., if you have objected to the processing, for the duration of the controller’s review.

Right to data portability (Art. 20 GDPR):

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format, or to request that this data be transmitted to a third party.

Right to Withdraw Consent (Art. 7 GDPR):

If the processing of data is based on your consent, you are entitled under Art. 7(3) GDPR to withdraw your consent to the use of your personal data at any time. Please note that the withdrawal of consent takes effect only for the future. Processing that took place prior to the withdrawal is not affected.

Right to object (Art. 21 GDPR):

If data is collected on the basis of Art. 6(1)(f) GDPR (data processing to safeguard legitimate interests) or on the basis of Art. 6(1)(e) GDPR (data processing to safeguard the public interest or in the exercise of official authority), you have the right, for reasons arising from your particular situation, to object to the processing at any time. We will then no longer process the personal data unless there are demonstrable compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR):

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. In particular, you may exercise this right to lodge a complaint with a supervisory authority in the Member State of your habitual residence, your place of work, or the place where the alleged infringement occurred. Exercising Your Rights: Unless otherwise specified above, please contact legal@lmt-tools.com to exercise your data subject rights.

Contact Information for the Data Protection Officer

Our external Data Protection Officer is available to answer any questions you may have regarding data protection. Please use the following contact information:

datenschutz nord GmbH

Sechslingspforte 2 22087 Hamburg Phone: +49 5936160400 Email: office@datenschutz-nord.de When contacting our Data Protection Officer, please specify LMT Tool Systems GmbH & Co. KG as the responsible entity.

Privacy Policy

Controller

Usage Data

Data Processors

Data Security

Necessary Cookies / Web Storage

Consent Banner

Google Consent Mode

Other Necessary Technical Third-Party Content and Functions

Visitor Tracking

Third-Party Tracking Technologies for Advertising Purposes

Non-essential technical third-party content and features

Contact Form

Embedded Videos

Newsletter Subscription and Distribution

Direct Marketing

Restricted-Access Area (MyLMT Customer Account)

Retention Period

Your rights as a data subject

Right of access (Art. 15 GDPR):

Right to rectification (Art. 16 GDPR):

Right to erasure (Art. 17 GDPR):

Right to restriction of processing (Art. 18 GDPR):

Right to data portability (Art. 20 GDPR):

Right to Withdraw Consent (Art. 7 GDPR):

Right to object (Art. 21 GDPR):

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR):

Contact Information for the Data Protection Officer

datenschutz nord GmbH