Your cart is currently empty!
General information
With this privacy policy we would like to inform you about what happens to your personal data when you visit our website. In addition, we also generally process personal data within the scope of the market research division (Lünendonk® lists and rankings as well as surveys), for events (e.g. Lünendonk Day), online presentations and our business relationships. The protection of your data transmitted to us is of the utmost importance to us.
In some cases, Lünendonk & Hossenfelder GmbH carries out campaigns in cooperation with third parties. In our offers, the cooperation partners are identified as sponsors or partners. A transfer of your personal data to third parties for purposes other than those mentioned does not take place. You can find more detailed information on this in this privacy policy.
1. Name and contact details of the controller
This privacy policy applies to data processing by:
Responsible:
Lünendonk & Hossenfelder GmbH
Maximilianstraße 40
D-87719 Mindelheim
Tel: +49 8261 73140-0
Fax: +49 8261 73140-66
E-Mail: info@luenendonk.de
You can reach the data protection officer at the following contact details:
dhpg IT-Services GmbH
Bunsenstr. 10a
51647 Gummersbach
Dr. Christian Lenz
Tel: +49 2261 8195-0
E-Mail: datenschutz@dhpg.de
2. Rights of data subjects
You have the right:
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. If we process your data, you can request information in particular about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, in particular in the case of recipients in third countries, the planned storage period or the criteria for determining it, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal to a supervisory authority, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
- in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
- in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing is necessary in particular to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR and it is not yet clear whether our legitimate reasons outweigh your interests;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transmission to another controller, provided that the processing is based on your consent or a contract and the processing is carried out by automated means;
- in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given to us at any time. The consequence of this is that we may no longer continue the data processing based on this consent in the future and
- to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
3. Right of objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1)(1) e or f GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the former case, we will no longer process your data unless we can demonstrate compelling reasons that override your interests, freedoms and rights or our processing serves the assertion, exercise or defence of legal claims. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation. If you wish to exercise your right of revocation or objection, it is sufficient to send an e-mail to info@luenendonk.de.
4. Disclosure of data
We do not transfer your personal data to third parties for purposes other than those listed below. We will only disclose your personal data to third parties if:
- you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
- the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
- in the event that there is a legal obligation for disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, and
- this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.
In addition, our order processors receive your personal data for processing in accordance with our instructions, insofar as this is necessary for the fulfilment of the order. Our order processors do not have their own right to use your data.
5. Data security
Within the website visit, we use the common SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol or by the use of https in front of the address of our (sub)website. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
6. Third countries
Data will only be transferred to third countries in accordance with the legal regulations. The permissibility of data transfer to third countries is governed by Article 44 et seq. GDPR. If we transfer your data to a third country, you will be informed about this in the special data protection information on the respective processing process, stating the respective legal regulation.
Specific privacy information regarding the data processing operations on the website
1. When visiting the website
When you access our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which access is made (referrer URL),
- the browser used and, if applicable, the operating system of your computer and the name of your access provider.
We process the aforementioned data for the following purposes:
- Ensuring a smooth connection to the website,
- To ensure a comfortable use of our website,
- Evaluation of system security and stability and
- for other administrative purposes.
The legal basis for the data processing is Article 6 (1) (1) f GDPR. Our legitimate interest is the operation of our website and the associated presentation of our company. Your data will be deleted as soon as they are no longer required for the stated purposes, at the latest after 6 months.
2. When using our contact forms
If you have any questions, we offer you the opportunity to contact us using the forms provided on the website. Both a general contact form and a press contact form are available for this purpose. Both forms require you to provide a valid e-mail address as well as your salutation (personal), first name and last name so that we know who sent the request and can respond to it. Further information can be provided voluntarily.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after your request has been processed.
If your request is aimed at the conclusion of a contract, Art. 6 para. 1 sentence 1 lit. b) GDPR serves as the legal basis. In this case, we store your data for the duration of the statutory retention periods. For the contact form, we use forms from the WordPress plugin WPForms, which is hosted on our server. This plugin forwards the data to HubSpot, a service provided by HubSpot, Inc (25 First Street, Cambridge, MA 02141 USA, hereinafter “HubSpot”). HubSpot processes the data only in accordance with our instructions and has no right of use of its own. HubSpot is certified in accordance with the EU-US Privacy Framework and is therefore considered a secure recipient of personal data. Further information on HubSpot’s cookies and analysis functions can be found under point 7. b) (5) in this privacy policy.
3. When registering for our newsletter, inclusion in the press distribution list, advertising and market research
On our website, you have the opportunity to register for our newsletter or to receive surveys, market research results and self-promotion or to be added to our press mailing list.
To receive the newsletter, you must provide an e-mail address and your name so that we can send you the newsletter and address you personally in the newsletter. You must also indicate which B2B market you are particularly interested in so that we can tailor the content of the newsletter to your interests.
Press representatives also have the opportunity to be added to our press mailing list. To do so, you must provide details of your e-mail address, your editorial office, your first name and last name, your salutation, your telephone or mobile number and the B2B markets that are of particular interest to you. We use this data to send you up-to-date information tailored to you, to be able to address you personally and to be able to contact you quickly if necessary.
You can also register on our website to receive surveys, market research results and self-promotion. With your consent, we will then use your personal data such as your name, e-mail address and postal address for the mailing and your telephone number for queries regarding these mailings.
You can unsubscribe from the newsletter, the press distribution list and the sending of surveys, market research results and self-promotion at any time, for example via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time to info@luenendonk.de by e-mail.
The legal basis for the processing of your personal data in connection with the sending of newsletters, inclusion in the press distribution list and the sending of advertising and market research documents is always your expressly granted consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
We store your data until you withdraw your consent.
HubSpot
We use the service provider HubSpot, Inc, 25 First Street, Cambridge, MA 02141 USA to register for the newsletter and our press mailing list and to send and analyze our newsletter. HubSpot, Inc. processes the data only in accordance with our instructions and has no right of use of its own. HubSpot, Inc. is certified in accordance with the EU-US Privacy Framework and is therefore considered a secure recipient of personal data.
Analysis of the mailing
We use analysis tools in our emails with surveys, market research results and self-promotion as well as in the newsletter and the press distribution list, which allow us to see whether an email has been opened and which links in the mailing have been clicked on. This enables us to optimize the design of emails for the future. Further information can be found at https://www.hubspot.de/data-privacy/gdpr/hubspot-product-playbook. You can also find more information on HubSpot’s cookies and analysis functions under point 7. b) (5) in this privacy policy.
Tracking only takes place with your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, which you give us when registering for the newsletter/press distribution list/mailing. You can revoke this consent at any time, for example by unsubscribing via a link at the end of each email. Alternatively, you can also send your unsubscribe request at any time to info@luenendonk.de by email.
Your data will be deleted when you unsubscribe from the mailing.
4. For an application by e-mail or document upload
It is particularly important to us to ensure the highest possible level of protection for your personal data. All personal data collected and processed by us as part of an application, either by e-mail or by document upload, is protected against unauthorized access and manipulation by technical and organizational measures.
We need your personal data in the application documents in order to be able to consider you as an applicant in the application process and to check whether you are suitable as an employee of our company. If you provide information that goes beyond this required information, you provide it to us voluntarily and declare your consent to the processing.
The legal basis for the processing is therefore Art. 6 para. 1 sentence 1 lit. b GDPR and Section 26 para. 1 BDSG, insofar as the processing is necessary for the decision on the establishment of an employment relationship. If you also provide us with further personal data, the legal basis for this is your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, insofar as you have given us this, and otherwise Art. 6 para. 1 sentence 1 lit. f GDPR, as we have a legitimate interest in evaluating all data available to us as part of the application process. Consent can be withdrawn at any time. You can send your revocation at any time to info@luenendonk.de by e-mail.
After completion of the application process, we will store your documents for a further 4 months for evidence purposes.
For a possible conclusion of a contract, it is necessary that you provide us with your personal data in the application documents. Otherwise we will not be able to consider you in the application process.
If you provide your application documents and data via the document upload function on our website, we use forms and services of the service provider HubSpot, Inc (25 First Street, Cambridge, MA 02141 USA, hereinafter “HubSpot”) for this purpose. HubSpot only processes the data in accordance with our instructions and has no right to use it itself. HubSpot is certified in accordance with the EU-US Privacy Framework and is therefore considered a secure recipient of personal data. Further information on HubSpot’s cookies and analysis functions can be found under point 7. b) (5) in this privacy policy.
5. When ordering chargeable products
You have the option of ordering chargeable products on our website. As part of the purchasing process, we use the “WooCommerce” tool to display our web store. The tool also collects data on your purchasing behavior in order to manage and track orders. This includes information about your orders and your shopping cart. The tool is hosted on our own server, so no data is transmitted to the provider of the tool. However, we pass on your data collected via WooCommerce to HubSpot, Inc (25 First Street, Cambridge, MA 02141 USA, hereinafter “Hubspot”) via the WordPress plugin MWB HubSpot for WooCommerce in order to evaluate the use of our website. HubSpot processes the data only in accordance with our instructions and has no right of use of its own. HubSpot is certified in accordance with the EU-US Privacy Framework and is therefore considered a secure recipient of personal data. Further information on HubSpot’s cookies and analysis functions can be found under point 7. b) (5) in this privacy policy.
When ordering our chargeable products (e.g. surveys), various data is requested for the conclusion of the contract so that we can process your request and your order. This information is stored until the order is completed. To conclude the contract, it is necessary for you to provide us with the following data:
- Name
- Address
- Company and position
- Phone number
- E-mail address
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR, insofar as the processing is necessary for the implementation of pre-contractual measures or the fulfillment of a contract with you. In other cases, the legal basis for data processing in the context of the purchase process is Art. 6 para. 1 sentence 1 lit. a) GDPR, insofar as you have consented to the processing of your data. Otherwise, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) GDPR, as we have a legitimate interest in processing your orders as well as in the presentation and evaluation of the use of our web store and the processing of your data is necessary for these purposes.
We store your data for as long as this is necessary for the fulfillment of contractual obligations. We then store the data for the duration of the statutory retention periods.
We use forms and services of the WordPress plugin WPForms for the ordering process. This plugin is hosted on our own server; no data is transferred to third parties.
HubSpot
We use the service provider HubSpot, Inc, 25 First Street, Cambridge, MA 02141 USA to send our products that can be ordered for a fee. HubSpot, Inc. processes the data only in accordance with our instructions and has no right of use of its own. We have also concluded the standard contractual clauses with HubSpot, Inc.
6. Exclusive downloads
We offer you two types of “exclusive downloads”. On the one hand, you can receive “exclusive downloads” as a thank you for subscribing to our newsletter. We also offer you other “exclusive downloads” as a thank you for agreeing to the analysis of user behavior. For both types of “exclusive downloads”, we use forms and services from the service provider HubSpot, Inc, 25 First Street, Cambridge, MA 02141 USA. HubSpot, Inc. processes the data only in accordance with our instructions and has no right of use of its own. We have also concluded the standard contractual clauses with HubSpot, Inc. Further information on HubSpot’s cookies and analysis functions can be found under point 7. b) (5) in this privacy policy.
a) Download as a thank you for subscribing to the newsletter
You have the option of downloading “exclusive downloads” via our website as a thank you for subscribing to our newsletter. This requires that you enter your e-mail address, your name and the company or organization in the order form. You can voluntarily enter your telephone number so that we can contact you for further information about our products, events and surveys. You can also optionally state the reason for your interest. After submitting your data, you will receive an e-mail to the specified e-mail address in which you must confirm your order by clicking on a link. After this confirmation, we will promptly send you the “exclusive download” by e-mail.
We process your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your consent. You can unsubscribe from our newsletter at any time, for example via a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time by email to info@luenendonk.de.
We will store your data until you unsubscribe from our newsletter.
b) Download as a thank you for the analysis of user behavior
You have the option of downloading “exclusive downloads” via our website as a thank you for your consent to the analysis of your user behavior. This requires you to enter your e-mail address, your name and the company or organization in the order form. Before downloading, it is necessary to give Lünendonk & Hossenfelder your consent to record your future visits to our websites on a personal basis in order to be able to send you targeted and personalized information on specific topics (e.g. current studies, surveys). We use a cookie from our service provider HubSpot to record the individual Lünendonk websites and topics that a registered user views during their visits (see also point 7. b) (5) in this privacy policy). We process your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your consent. Once given, consent can be revoked by sending a message to info@luenendonk.de.
If you have not used our offers in any form for one year, you are considered not interested and will be automatically deleted from HubSpot.
7. Cookies, analysis tools, plugins and other third-party elements
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.). Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.
Analysis tools evaluate the user behaviour of website visitors and enable the operator to optimize the website and adapt marketing measures.
Plugins and other third-party elements are used to integrate content from these providers into a website.
a) Required first-party cookies
The use of our required first-party cookies serves on the one hand to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.
In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specified period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again.
This data is deleted after 6 months at the latest.
We process your data on the basis of our legitimate interest in the external presentation of our company via the website you have accessed and to promote user-friendliness. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR.
Most browsers accept these cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before such a cookie is created. However, completely deactivating cookies may result in the website not being displayed correctly or you not being able to use all the functions of our website.
Real Cookie Banner
We use the Real Cookie Banner cookie consent management system from the provider devowl.io GmbH, Tannet 12, 94539 Grafling, Germany, to inform you about the cookies we use and to obtain your consent for the use of cookies. Real Cookie Banner sets a required cookie that saves the settings you have selected so that you do not have to set them again each time you visit the website. You can delete the cookie via your browser’s cookie settings. In this case, you will be asked to select your settings again when you visit the website again.
b) Third-party cookies, analysis tools, plugins and other third-party elements
The third-party cookies, analysis tools, plugins and other third-party elements listed below and used by us are only used with your express consent and thus on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. Failure to grant or revoke consent may result in the website not being displayed correctly or you not being able to use all the functions of the website.
We use third-party cookies, analysis tools, plug-ins and other third-party elements to ensure that our website is designed to meet your needs and is continuously optimized. We also use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you.
The respective function descriptions, any recipients of the data, information on possible transfers to a third country and the storage period can be found in the following information on the individual processing processes provided with third-party cookies, analysis tools, plugins and other third-party elements.
This website uses cookies.
In addition to the necessary cookies, which we use due to our legitimate interest in the presentation of our website, we use the following service categories with your consent: Functional services for extended website features and payment functions (PayPal, Microsoft Power BI, Podigee), statistical services for the evaluation and optimization of our website (WooCommerce order allocation) and marketing services for personalized advertising and lead generation (HubSpot). The data is also transferred to these third-party providers for processing for their own purposes. In addition, we use Sucuri Firewall and CDN for the security and performance of our website. You can revoke your consent at any time by deleting your cookies in your browser or by accessing this cookie banner via the link in the privacy policy. There you will also find further information on data protection.
Cookies are small text files that are used by websites to make the user experience more efficient.
By law, we can store cookies on your device if they are strictly necessary for the operation of this site. We need your permission for all other types of cookies.
This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.
You can change or withdraw your consent at any time from the cookie declaration on our website.
Find out more about who we are, how you can contact us and how we process personal data in our privacy policy.
Please provide your consent ID and the date when you contact us regarding your consent.
Your consent applies to the following domains: www.luenendonk.de
Your current status: Reject.
Your consent ID: aDeMiTMZ8xJuwQhWEgN89WKhX0jzmVxObAAsQc+aoWdUk9hmSR+qTw==Consent date: Thursday, August 1, 2024 at 11:38:47 CEST
The cookie statement was last updated on 24.01.25 by Real Cookie Banner:
Necessary (7)
Necessary cookies help to make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
| Name | Provider | Purpose | Procedure | Type |
|---|---|---|---|---|
| real_cookie_banner* | www.luenendonk.de | Saves the user’s cookie consent and consent settings. Is required for GDPR-compliant documentation of consents. | 365 days | HTTP cookie |
| real_cookie_banner*-tcf | www.luenendonk.de | TCF consents in TC string format for TCF-compatible services. | 365 days | HTTP cookie |
| real_cookie_banner*-gcm | www.luenendonk.de | Google Consent Mode Consents for Google services. | 365 days | HTTP cookie |
| wp-wpml_current_language | www.luenendonk.de | Saves the current language setting for the multilingual website. | 1 day | HTTP cookie |
| wp_woocommerce_session_* | www.luenendonk.de | Saves shopping cart and session data for the store. | 2 days | HTTP cookie |
| woocommerce_cart_hash | www.luenendonk.de | Saves the hash of the shopping cart for synchronization. | Session | HTTP cookie |
| woocommerce_items_in_cart | www.luenendonk.de | Marks whether items are in the shopping cart. | Session | HTTP cookie |
Functional (4)
Functional cookies enable a website to save information that has already been entered and to offer the user improved, more personalized functions.
| Name | Provider | Purpose | Procedure | Type |
|---|---|---|---|---|
| enforce_policy | PayPal | PayPal security guidelines for secure transactions. | Session | HTTP cookie |
| ts_c | PayPal | PayPal Fraud Protection for fraud detection. | 3 years | HTTP cookie |
| x-pp-s | PayPal | PayPal Session Tracking for payment processing. | Session | HTTP cookie |
| LANG | PayPal | Language setting for PayPal interface. | Session | HTTP cookie |
| __paypal_storage__ | www.luenendonk.de | PayPal Checkout State for payment processing. | Resistant | HTML Local Storage |
| ai_session | content.powerapps.com | Microsoft Power BI user session for reports. | Session | HTTP cookie |
| ai_user | content.powerapps.com | Microsoft Power BI user recognition for analysis. | 1 year | HTTP cookie |
| ARRAffinity | Microsoft | Load balancer for Microsoft Power BI. | Session | HTTP cookie |
| PowerBICookie | content.powerapps.com | Microsoft Power BI session cookie. | Session | HTTP cookie |
Statistics (7)
Statistics cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.
| Name | Provider | Purpose | Procedure | Type |
|---|---|---|---|---|
| sbjs_session | www.luenendonk.de | WooCommerce order mapping – page views and page path of the session. | 30 minutes | HTTP cookie |
| sbjs_udata | www.luenendonk.de | WooCommerce order mapping – browser and device type of the visitor. | Session | HTTP cookie |
| sbjs_first | www.luenendonk.de | WooCommerce order mapping – origin of the first visit. | Session | HTTP cookie |
| sbjs_current | www.luenendonk.de | WooCommerce order mapping – origin of the current visit. | Session | HTTP cookie |
| sbjs_first_add | www.luenendonk.de | WooCommerce order mapping – timestamp and URL of the first visit. | Session | HTTP cookie |
| sbjs_current_add | www.luenendonk.de | WooCommerce order mapping – timestamp and URL of the current visit. | Session | HTTP cookie |
| sbjs_migrations | www.luenendonk.de | WooCommerce order mapping – Technical migration data. | Session | HTTP cookie |
Marketing (4)
Marketing cookies are used to follow visitors on websites. The intention is to show ads that are relevant and engaging to the individual user and therefore more valuable to publishers and third party advertisers.
| Name | Provider | Purpose | Procedure | Type |
|---|---|---|---|---|
| __hstc | www.luenendonk.de | HubSpot main tracking cookie for visitor identification and lead tracking. | 6 months | HTTP cookie |
| hubspotutk | www.luenendonk.de | HubSpot visitor tokens for forms and marketing automation. | 6 months | HTTP cookie |
| __hssc | www.luenendonk.de | HubSpot session tracking and page views for analytics. | 30 minutes | HTTP cookie |
| __hssrc | www.luenendonk.de | HubSpot browser restart detection for session management. | Session | HTTP cookie |
(1) PayPal Commerce Platform
We use the PayPal Commerce Platform, a service of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, for payment processing in our online store. The integration includes PayPal Express Checkout, PayPal Payments Standard and extended payment methods such as Bancontact, BLIK, EPS, iDEAL, MyBank, P24, Trustly and Multibanco.
PayPal uses cookies and similar technologies to enable secure payments, prevent fraud (FraudNet) and improve the user experience. The following data is processed:
- IP address and device information for fraud prevention
- Session data for payment processing
- Transaction data for order processing
The data processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and for the fulfillment of the contract in accordance with Art. 6 para. 1 lit. b GDPR. PayPal also uses the data collected for its own purposes to improve its services and prevent fraud.
Further information can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
(2) Microsoft Power BI
To display interactive reports and data visualizations, we use Microsoft Power BI, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. In the EU, the service is provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
Power BI enables the embedding of dashboards and reports that visualize business data. The following data is processed:
- IP address for the provision of content
- Session data for user interaction
- Technical data for optimizing the display
The integration only takes place with your consent in accordance with Art. 6 para. 1 lit. a GDPR. The data may be transferred to the USA. Microsoft has submitted to the standard contractual clauses and offers additional guarantees for data protection.
Further information: https://www.microsoft.com/de-de/privacy/privacystatement
(3) WooCommerce order allocation
To analyze our marketing effectiveness, we use WooCommerce Order Mapping. This function helps us to understand which marketing channels and campaigns lead to purchases in our store. The following data is collected using cookies:
- Referring source (referrer)
- UTM parameters of marketing campaigns
- Device type and browser information
- Page views during the session
The data will only be stored permanently in the event of an order and assigned to the order data. The processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and our legitimate interest in optimizing our marketing measures in accordance with Art. 6 para. 1 lit. f GDPR.
(4) HubSpot CRM & Forms
We use the service of the provider HubSpot, Inc, 25 First Street, 2nd Floor, Cambridge, MA 02141 USA to analyze the use of our website and to generate leads.
This involves the use of so-called “tracking cookies”, which are stored on your computer and enable us to analyze your use of the website. HubSpot evaluates the information collected (e.g. IP address, geographical location, type of browser, data entered in contact forms, duration of the visit and pages accessed) on behalf of Lünendonk & Hossenfelder in order to generate reports on the visit and the pages visited.
If, as described in section 3, the newsletter is subscribed to or exclusive downloads (section 6) are obtained, we can also use HubSpot to link a user’s visits to www.luenendonk.de with personal details (in particular name/email address) on the basis of consent given, thus recording them on a personal basis and informing users individually and in a targeted manner about preferred topics.
If you generally do not want HubSpot to collect data, you can prevent the storage of cookies at any time by changing your consent (see section 7b above).
The data will be transferred to the USA as a third country in accordance with Art. 49 para. 1 lit. a) GDPR with your consent if you have given us this consent after we have informed you about the possible lack of or limited legal protection options and the lower level of data protection in the USA in contrast to the EU.
Further information on how HubSpot works can be found in the HubSpot Inc. privacy policy: http://legal.hubspot.com/de/privacy-policy
(5) Podigee podcast hosting
We use the podcast hosting service Podigee from the provider Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany. The podcasts are loaded by Podigee or transmitted via Podigee. We integrate this plugin using the so-called two-click method in order to protect visitors to our website in the best possible way. This means that your personal data (in particular your IP address) is not transmitted to Podigee GmbH when you access the website. Instead, you must first activate the integrated podcast player by clicking on it. With this click, you give your consent for a connection to be established with the Podigee servers.
Podigee processes IP addresses and device information in order to enable podcast downloads/playbacks and to determine statistical data, such as call-up figures. This data is anonymized or pseudonymized before being stored in Podigee’s database, unless it is required for the provision of the podcasts.
Further information and objection options can be found in Podigee’s privacy policy: https://www.podigee.com/de/about/privacy/
c) Content Blocker
We use content blockers on our website that block external content and scripts until you give your consent. This applies to the following services:
- PayPal Commerce Platform: Blocks PayPal scripts until consent is given
- HubSpot: Blocks HubSpot tracking and forms until consent is given
- Podigee: Blocks podcast embeds until consent is given
- WooCommerce order attribution: Blocks attribution tracking until consent is given
The content blockers ensure that no personal data is transferred to third-party providers without your consent.
d) Sucuri Website Firewall and CDN
We use the services of Sucuri Website Application Firewall (WAF) and Content Delivery Network (CDN) of GoDaddy Media Temple, Inc. d/b/a Sucuri (2155 East GoDaddy Way, Tempe, AZ 85284, USA).
These services are used to protect our website from cyber attacks, malware and DDoS attacks, to optimize loading times and to ensure availability. For this purpose, a connection is established to the provider’s servers, which then becomes aware that our website has been accessed via your IP address.
We have concluded an agreement with Sucuri on order processing and the EU standard contractual clauses. The provider is DPF-certified and may therefore only process the data in accordance with our instructions and not for its own purposes.
We use the services on the basis of our legitimate interest in the optimization, secure provision and protection of our website against cyber attacks. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR.
Further information on data protection can be found at: https://sucuri.net/privacy/ and https://sucuri.net/dpa/.
e) Services in preparation
The following services are configured but not currently active on the website:
Google Tag Manager: Prepared for centralized tag management
Google Analytics: Prepared for future use for website analysis
8. Updating and amending the privacy policy
This privacy policy is currently valid and was last updated in September 2025. It may become necessary to amend this privacy policy as a result of the further development of our website and offers on it or due to changes in legal or official requirements. You can access and print out the current privacy policy at any time on the website at https://www.luenendonk.de/datenschutz/.
Data protection information for our social media presence
With this data protection notice, we would like to inform you about what happens to your personal data when you visit our social media sites.
The following provisions relate to the following social media sites operated by us:
- LinkedIn: https://www.linkedin.com/company/luenendonk-gmbh
- X: https://x.com/luenendonk
- Xing: https://www.xing.com/pages/lunendonk-hossenfeldergmbh
- YouTube: https://www.youtube.com/channel/UCRjC_hvsgnSXYHoIoDY3BsA
- Facebook: https://de-de.facebook.com/luenendonk/
- Instagram: https://privacycenter.instagram.com/policy
1. Responsibility
a) Those responsible
We,
Lünendonk & Hossenfelder GmbH
Maximilianstraße 40
D-87719 Mindelheim
Tel: +49 8261 73140-0
Fax: +49 8261 73140-66
Email: info@luenendonk.de are partly responsible for the data processing described below on the social media sites.
and in some cases the respective operator of the social media platform.
In principle, we have no influence on the data processing by the respective operator of the social media platform and cannot provide any information on this ourselves. Information on data processing by the operator of the respective social media platform can be found in the privacy policy of this operator:
- LinkedIn: https://de.linkedin.com/legal/privacy-policy
- X: https://x.com/de/privacy
- Xing: https://privacy.xing.com/de/datenschutzerklaerung
- YouTube: https://policies.google.com/privacy?hl=de&utm_source=ucb
- Facebook: https://www.facebook.com/privacy/explanation
With regard to some processing operations, there is also joint responsibility within the meaning of Art. 26 GDPR between us and the respective operator of the social media platform.
b) Joint responsibility
There is a relationship of joint responsibility with the following platform operators in accordance with Art. 26 (1) GDPR:
- LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum
- Facebook: https://de-de.facebook.com/legal/terms/page_controller_addendum
The evaluation of visits to these social media sites is the joint responsibility of us and the operator of the respective social media platform.
The legal basis for the evaluation of your visits to our social media sites is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.
We have no influence on the other recipients who receive your data, on the possibility of deactivating the evaluation or on the further processing purposes of the operators of the social media platforms. The information can be found in the privacy policy of the respective operator of the social media platform:
- LinkedIn: https://de.linkedin.com/legal/privacy-policy
- Facebook: https://www.facebook.com/privacy/explanation
2. Our manufacturing processes
a) Communication via the social media sites
We operate our social media sites in order to provide information about us and our products and to get in touch with interested parties and customers. Communication with our customers and interested parties takes place via interaction with our posts (e.g. liking, commenting), public posts on our pinboard or direct messages.
The legal basis for the processing of this data is our legitimate interest in direct advertising, public relations and communication with customers and interested parties, Art. 6 para. 1 sentence 1 lit. f) GDPR. We delete direct messages as soon as they have been conclusively answered. A final response is assumed if no further queries regarding our response are received from you after 90 days. You can delete public posts and interactions with our posts at any time. We reserve the right to delete individual posts if they could violate laws, the regulations of the operators of the social media platforms, common decency or our principles.
b) Social listening
We use the tools Hubspot (HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA) and Tweetdeck (Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) to get an idea of how our company and our products and services are perceived. The posts on the social media platforms we use are searched for specific search terms and the results are displayed clearly. This may include not only the posts on our social media sites, but also other publicly posted posts that match the relevant search criteria. This gives us access to the respective content of the post and the public part of the user profile.
The legal basis for the processing of personal data in the context of social listening is Art. 6 para. 1 sentence 1 lit. f) GDPR, as we are pursuing our legitimate interest in viewing the publicly viewable posts and thus being able to respond to praise, criticism and questions from the authors.
We have concluded a contract processing agreement with the operators of the tools. This means that they are not allowed to process the data for their own purposes, but only in accordance with our instructions.
The public contributions are not stored permanently.
3. Processing of data in a third country
Your data may be transferred to third countries by the operators of the social media platforms. We have no influence on such transmission. Further information can be found in the data protection declarations of the respective operator of the social media platform mentioned under 1. a).
4. Rights of data subjects
You have the right:
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. If we process your data, you can request information in particular about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, in particular in the case of recipients in third countries, the planned storage period or the criteria for determining it, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal to a supervisory authority, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
- in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
- in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing is necessary in particular to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR and it is not yet clear whether our legitimate reasons outweigh your interests;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transmission to another controller, provided that the processing is based on your consent or a contract and the processing is carried out by automated means;
- in accordance with Art. 7 para. 3 GDPR, to withdraw your consent once given to us at any time. As a result, we may no longer continue the data processing that was based on this consent in the future and
may lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
5. Right of objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. e or f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising.
In the former case, we will no longer process your data unless we can prove compelling reasons that outweigh your interests, freedoms and rights or our processing serves the assertion, exercise or defense of legal claims.
In the latter case, you have a general right of objection, which we will implement without specifying a particular situation. If you wish to exercise your right of revocation or objection, simply send an e-mail to info@luenendonk.de.
6. Data protection officer
You can reach the data protection officer using the following contact details:
dhpg IT-Services GmbH
Bunsenstr. 10a
51647 Gummersbach
to H. Dr. Christian Lenz
Tel: +49 2261 8195-0
E-Mail: datenschutz@dhpg.de
7. Topicality and amendment of the data protection information
This data protection notice is currently valid and was last updated in September 2025. It may become necessary to amend this data protection notice as a result of the further development of our social media presence and offers or due to changes in legal or official requirements. You can access and print out the current data protection information at any time on the website at https://www.luenendonk.de/datenschutz/.
Lünendonk & Hossenfelder GmbH
Managing Partner
Jörg Hossenfelder
Maximilianstraße 40
D-87719 Mindelheim
Tel: +49 8261 73140-0
Fax: +49 8261 73140-66
E-Mail: info@luenendonk.de
You can contact the data protection officer at:
dhpg IT-Services GmbH
Bunsenstr. 10a
51647 Gummersbach
to H. Dr. Christian Lenz
Tel: +49 2261 8195-0
E-Mail: datenschutz@dhpg.de
Photo information for events
Below you will find detailed photo information in accordance with our information obligations under Articles 13 and 14 GDPR.
As part of our events, we reserve the right to create, process and disseminate photo, video and audio recordings of speakers, participants and guests for the purposes of PR and public relations work, unless they object in individual cases. This will be pointed out in an appropriate manner both as part of the electronic event registration and at the event venue.
The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to provide information about the content of the events as part of our PR and public relations work and to draw attention to similar events, the content and the work of Lünendonk & Hossenfelder GmbH.
This takes the form of text and video contributions and photo galleries on www.luenendonk.de, in our newsletter, on social media ( YouTube, Facebook, Xing, LinkedIn and X) and in event-related publications.
The photo, video and audio recordings made during our public events are also passed on to media representatives from newspapers, radio stations and online editorial offices for editorial reporting as part of our press work.
We also provide the guests involved in the respective event with image material for individual use.
We store the photo, video and audio recordings for as long as we have a legitimate interest in reporting on our event.
You can object to the processing of photo, video and audio recordings. This objection must be justified. In the event of an objection, we will no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.
You can find a description of your other rights as a data subject in our privacy policy.
If you do not wish to be recorded, please contact the management and the photographer on site.
Contact for press and interested parties:
Responsible for the creation, storage and processing of image and sound recordings:
Lünendonk & Hossenfelder GmbH
Managing Partner
Jörg Hossenfelder
Maximilianstraße 40
D-87719 Mindelheim
Tel: +49 8261 73140-0
Fax: +49 8261 73140-66
E-Mail: info@luenendonk.de
You can contact the data protection officer at:
dhpg IT-Services GmbH
Bunsenstr. 10a
51647 Gummersbach
to H. Dr. Christian Lenz
Tel: +49 2261 8195-0
E-Mail: datenschutz@dhpg.de