search

Privacy Policy

General information

With this privacy policy we would like to inform you about what happens to your personal data when you visit our website. In addition, we also generally process personal data within the scope of the market research division (Lünendonk® rankings and surveys), for events (e.g. Lünendonk Day), online presentations and our business relationships. The protection of your data transmitted to us is of the utmost importance to us.

In some cases, Lünendonk & Hossenfelder GmbH carries out campaigns in cooperation with third parties. In our offers, the cooperation partners are identified as sponsors or partners. A transfer of your personal data to third parties for purposes other than those mentioned does not take place. You can find more detailed information on this in this privacy policy.

1. Name and contact details of the controller

This privacy policy applies to data processing by:

Person in charge:
Lünendonk & Hossenfelder GmbH
Maximilianstraße 40
D-87719 Mindelheim
Phone: +49 8261 73140-0
Fax: +49 8261 73140-66
E-Mail: [email protected]

You can reach the data protection officer at the following contact details:
dhpg IT-Services GmbH
Bunsenstr. 10a
51647 Gummersbach
Dr. Christian Lenz
Tel: +49 2261 8195-0
E-Mail: [email protected]

Data subject rights

You have the right:

  • in accordance with Art. 15 GDPR to request information about your personal data processed by us. If we process your data, you may in particular request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, in particular in the case of recipients in third countries, the planned storage period or the criteria for determining it, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint to a supervisory authority, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details. You may also request meaningful information about the details of such decision-making;
  • in accordance with Art. 16 GDPR to demand the immediate correction of incorrect or completion of your personal data stored by us;
  • in accordance with Art. 17 GDPR to request the deletion of your personal data stored by us, unless the processing is necessary in particular for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
  • to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the correctness of the data is disputed by you, the processing is unlawful, but you object to its deletion and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR and it is not yet clear whether our legitimate reasons outweigh your interests;
  • in accordance with Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller, provided that the processing is based on your consent or a contract and the processing is carried out with the help of automated procedures;
  • to revoke your consent at any time in accordance with Art. 7 (3) GDPR. This has the consequence that we may no longer continue the data processing based on this consent for the future and
  • complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

3. Right of objection

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1)(1) e or f GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising.
In the former case, we will no longer process your data unless we can demonstrate compelling reasons that override your interests, freedoms and rights or our processing serves the assertion, exercise or defence of legal claims.
In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation. If you wish to exercise your right of revocation or objection, it is sufficient to send an e-mail to [email protected].

4. Disclosure of data

We do not transfer your personal data to third parties for purposes other than those listed below. We will only disclose your personal data to third parties if:

  • you have given your express consent to this in accordance with Art. 6 (1)(1) a GDPR,
  • the disclosure is necessary in accordance with Art. 6 (1) (1) f GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
  • in the event that a legal obligation exists for the disclosure pursuant to Art. 6 (1) (1) c GDPR, as well as
  • this is legally permissible and necessary for the processing of contractual relationships with you according to Article 6 (1) (1) b GDPR.

In addition, our order processors receive your personal data for processing in accordance with our instructions, insofar as this is necessary for the fulfilment of the order. Our order processors do not have their own right to use your data.

5. Data security

Within the website visit, we use the common SSL procedure (Secure Socket Layer) in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol or by the use of https in front of the address of our (sub)website. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

6. Third countries

Data will only be transferred to third countries in accordance with the legal regulations.
The permissibility of data transfer to third countries is governed by Article 44 et seq. GDPR. If we transfer your data to a third country, you will be informed about this in the special data protection information on the respective processing process, stating the respective legal regulation.
Specific privacy information regarding the data processing operations on the website.

Specific privacy information regarding the data processing operations on the website

1. When visiting the website

When you access our website, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion:

  • IP address of the requesting computer,
  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which the access is made (referrer URL),
  • the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The aforementioned data will be processed by us for the following purposes:

  • Ensuring a smooth connection of the website,
  • Ensuring a comfortable use of our website,
  • Evaluation of system security and stability, and
  • for other administrative purposes.

The legal basis for the data processing is Article 6 (1) (1) f GDPR. Our legitimate interest is the operation of our website and the associated presentation of our company.
Your data will be deleted as soon as they are no longer required for the stated purposes, at the latest after 6 months.

2. When using our contact form

For questions of any kind, we offer you the option to contact us via a form provided on the website. In doing so, it is necessary to provide a valid e-mail address, first name and surname, so that we know from whom the inquiry originates and in order to be able to answer it. Further information can be provided voluntarily.
Data processing for the purpose of contacting us is carried out on the basis of your voluntarily given consent in accordance with Article 6 (1) (1) a GDPR. The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request.
If your request is aimed at the conclusion of a contract, Art. 6 (1) (1) b GDPR serves as the legal basis. In this case, we store your data for the duration of the statutory retention periods.

3. When registering for our newsletter, advertising and market research

If you have expressly consented in accordance with Article 6 (1) (1) a GDPR, we will use your e-mail address to send you our newsletter on a regular basis. For the receipt of the newsletter, the specification of an e-mail address is sufficient. You can voluntarily provide your name so that we can address you personally in the newsletter. In addition, we use your personal data such as name, e-mail address and postal address for sending out surveys, market research results and self-promotion, if you have given your consent. We use your telephone number with your consent for queries regarding these mailings. You can unsubscribe at any time, for example via the link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time by e-mail to [email protected].
We will store your data until you withdraw your consent.

HubSpot

We use the service provider HubSpot, Inc, 25 First Street, Cambridge, MA 02141 USA to send and analyse our newsletter. HubSpot, Inc. only processes the data according to our instructions and do not have their own right to use it. We have also concluded the standard contractual clauses with HubSpot, Inc.

Analysis of the mailing

We use analytics tools in our survey, market research results and self-promotion e-mails and newsletter that allow us to see whether an e-mail has been opened and which links in the mailing have been clicked. This allows us to optimise the design of e-mails for the future. For more information, please visit: https://de.sendinblue.com/newsletter-software/?rtype=n2go or https://www.hubspot.de/data-privacy/gdpr/hubspot-product-playbook
Tracking only takes place with your consent in accordance with Article 6 (1) (1) a GDPR, which you give us by subscribing to the newsletter/mailing. You can revoke this consent at any time, for example by unsubscribing via the link at the end of each e-mail. Alternatively, you are also welcome to send your unsubscribe request at any time by e-mail to [email protected].
When you unsubscribe from the mailing, your data will be deleted.

4. When applying by e-mail or document upload

It is particularly important to us to ensure the highest possible protection of your personal data. All personal data collected and processed by us as part of an application, either by e-mail or by document upload, are protected by technical and organisational measures against unauthorised access and manipulation. We require your personal data in the application documents in order to consider you as an applicant in the application process and to check whether you may be under consideration as an employee of our company. If you provide information that goes beyond this required information, you provide it to us voluntarily and declare your consent to the processing.
The legal bases for the processing are therefore Art. 6 (1) (1) a GDPR and § 26 1 BDSG. The revocation of consent is possible at any time. You can send your revocation at any time by e-mail to [email protected].
After the end of the application process, we will store your documents for a further 4 months for evidence purposes.
For a possible conclusion of a contract, it is necessary that you provide us with your personal data in the application documents. Otherwise, we will not be able to consider you in the application process.

5. When ordering chargeable products

When ordering our fee-based products (e.g. studies), various data are requested for the conclusion of the contract so that we can process your inquiry and your order. This information is stored until the order is completed. For the conclusion of the contract it is necessary that you provide us with the following data:

  • Name
  • Address
  • Company and position
  • Phone number
  • E-mail address

The legal basis for the data processing is Article 6 (1) (1) b GDPR.
We store your data as long as this is necessary for the fulfilment of contractual obligations. Subsequently, we store the data for the duration of the statutory retention periods.

HubSpot

We use the service provider HubSpot, Inc, 25 First Street, Cambridge, MA 02141 USA to ship our products that can be ordered for a fee. HubSpot, Inc. only processes the data according to our instructions and has no right of use of its own. We have also concluded the standard contractual clauses with HubSpot, Inc.

6. Exclusive downloads

We offer you two types of our “Exclusive Downloads”. First, you can receive “Exclusive Downloads” as a thank you for signing up for our newsletter. In addition, we offer you other “Exclusive Downloads” as a thank you for consenting to the analysis of user behaviour. For both types of “Exclusive Downloads”, we use forms and services provided by the service provider HubSpot, Inc, 25 First Street, Cambridge, MA 02141 USA. HubSpot, Inc only processes the data according to our instructions and do not have their own right to use it. We have also concluded standard contractual clauses with HubSpot, Inc. For more information on HubSpot’s cookies and analysis functions, please see item 7. b) (5) in this privacy policy.

a) Download as a thank you for subscribing to the newsletter

You have the option to download “Exclusive Downloads” via our website as a thank you for subscribing to our newsletter. For this, it is necessary that you enter your e-mail address, your name and the company or organisation in the order form. You can voluntarily enter your telephone number so that we can contact you for further interest-based information about our products, events and surveys. In addition, you can optionally specify the reason for your interest. After submitting your information, you will receive an e-mail at the e-mail address you provided us in which you must confirm your order by clicking on a link. After this confirmation, we will promptly send you the “Exclusive Download” by e-mail.
We process your data in accordance with Article 6 (1) (1) a GDPR based on your consent. Unsubscribing from our newsletter is possible at any time, for example via the link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time by e-mail to [email protected].
We store your data until you unsubscribe from our newsletter.

b) Download as a thank you for the analysis of user behaviour

You have the option of downloading “Exclusive Downloads” from our website as a thank you for your consent to the analysis of your user behaviour. For this it is necessary that you enter your e-mail address, your name and the company or organisation in the order form. Before downloading, it is necessary to give Lünendonk & Hossenfelder your consent to record your future visits to our website on a personal basis in order to be able to provide you with targeted and personally tailored subject-related information (e.g. current studies, surveys). We use a cookie from our service provider HubSpot to record the individual Lünendonk websites and topics that a registered user looks at during his visits (see also point 7. b) (5) in this privacy policy)
Once given, consent can be revoked by sending a message to [email protected].
If you have not used our offers in any form for a year, you will be considered not interested and will be automatically deleted from HubSpot.

7. Cookies, analytics tools, plugins and other third-party elements

We use cookies on our site. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar). Cookies do not cause any damage to your end device; they do not contain viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific end device used. However, this does not mean that we gain direct knowledge of your identity.
Analysis tools evaluate the user behaviour of website visitors and enable the operator to optimise the website and adapt marketing measures.
Plugins and other third-party elements are used to integrate content from these providers into a website.

a) Required first-party cookies

The use of our required first-party cookies serves on the one hand to make the use of our offer more pleasant for you. We use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.
In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognised that you have already been with us and what entries and settings you have made so that you do not have to enter them again.
This data will be deleted after 6 months at the latest.
We process your data based on our legitimate interest in the external presentation of our company via the website you have accessed and to promote user-friendliness. The legal basis for the processing is Article 6 (1) (1) f GDPR.
Most browsers automatically accept these cookies. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before such a cookie is created. However, completely disabling cookies may result in the website not being displayed correctly or you not being able to use all the functions of our website.

Cookiebot

We use the cookie banner Cookiebot from the provider Cybot A/S, Havnegade 39, 1058 Copenhagen to inform you about the cookies we use and to obtain your consent for the use of cookies. Through Cookiebot, a required cookie is set that stores the settings you have chosen so that you do not have to set them again each time you visit the website. You can delete the cookie via the cookie settings of your browser. In this case, you will be asked to select your settings again when you return to the website.

b) Third party cookies, analysis tools, plugins and other third-party elements

The third-party cookies, analysis tools, plugins and other third-party elements listed below and used by us are only used with your express consent and thus on the basis of Article 6 (1) (1) a GDPR. You can revoke your granted consent at any time with effect for the future. Failure to grant or revocation of consent may result in the website not being displayed correctly to you or you not being able to use all the functions of the website.
With the use of third-party cookies, analysis tools, plugins and other third-party elements, we want to ensure that our website is designed and continuously optimised to meet your needs. In addition, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimising our offer for you.
The respective function descriptions, any recipients of the data, information on possible transfers to a third country and the storage period can be found in the following notes on the individual processing activities provided with third-party cookies, analysis tools, plug-ins and other third-party elements.

(1) Google Analytics

For the purpose of demand-oriented design and continuous optimisation of our pages, we use Google Analytics, a web analysis service of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymised usage profiles are created and cookies are used (see under point 4). The information generated by the cookie about your use of this website such as

  • Browser type/version,
  • Operating System used,
  • RReferrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request,

will be transmitted to and stored by Google on servers in the United States. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the Internet for the purposes of market research and the design of these Internet pages to meet requirements. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that an assignment is not possible (IP masking).
Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).
Pursuant to Article 49 (1) a GDPR, the data will be transferred to the USA as a third country with your consent, if you have given it to us after we have informed you about the possibly missing or limited legal protection options and the lower data protection in the USA in contrast to the EU.

 (2) Google Adwords Conversion Tracking

In order to statistically record the use of our website and to evaluate it for the purpose of optimising our website for you, we also use Google Conversion Tracking, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). Google Adwords sets a cookie on your computer if you have accessed our website via Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the website of the Adwords customer and the cookie has not yet expired, Google and the customer can recognise that the user has clicked on the ad and was redirected to this page.
Each Adwords customer receives a different cookie. Cookies can therefore not be tracked via the websites of Adwords customers. The information collected using the conversion cookie is used to create conversion statistics for Adwords customers who have opted in to conversion tracking. Adwords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users. The information obtained is transferred to a Google server in the USA and stored there.
Google’s privacy policy on conversion tracking can be found here (https://services.google.com/sitestats/de.html).
Pursuant to Article 49 (1) a GDPR, the data will be transferred to the USA as a third country with your consent, if you have given it to us after we have informed you about the possibly missing or limited legal protection options and the lower data protection in the USA in contrast to the EU.

(3) Google Ads Remarketing Pixel

By means of the remarketing function of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”), we can, with the express consent of visitors to the website, target them with advertising by displaying personalised, interest-based advertisements for visitors to our website when they visit other websites in the Google Display Network. To carry out the analysis of website usage, which forms the basis for the creation of the interest-based advertisements, Google uses cookies. For this purpose, Google stores a small file with a sequence of numbers in the browsers of the website visitors. This number is used to record the visits to the website as well as anonymised data on the use of the website.
If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously accessed product and information areas.
Further information on Google Remarketing as well as Google’s privacy policy can be found at: www.google.com/privacy/ads/.
Pursuant to Article 49 (1) a GDPR, the data will be transferred to the USA as a third country with your consent, if you have given it to us after we have informed you about the possibly missing or limited legal protection options and the lower data protection in the USA in contrast to the EU.

(4) YouTube

We use social plugins from YouTube LLC (901 Cherry Avenue, San Bruno, CA 94066, USA), a subsidiary of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) in order to make our company better known.
The plugins are marked with a YouTube logo, for example in the form of a “YouTube camera” or a “Play” button.
The integration of these plugins by us takes place by way of the so-called two-click method in order to protect visitors to our website as best as possible. This means that your personal data (in particular your IP address) is not already transmitted to YouTube when you access the website. Rather, you must first activate the embedded “buttons” and videos by clicking on them. With this click, you give your consent that a connection with the YouTube servers is established.
Through this integration, YouTube receives the information that your browser has accessed the corresponding page of our website, even if you do not have a YouTube profile or are not currently logged in to YouTube.
This information (including your IP address) is transmitted by your browser directly to a YouTube server in the USA and stored there. If you are logged in to YouTube, YouTube can directly assign your visit to our website to your YouTube account. If you interact with the plugins, for example by clicking the “YouTube” button, this information is also transmitted directly to a YouTube server and stored there. The information is also published on your YouTube account and displayed there to your contacts.
If you do not want YouTube to assign the data collected via our website directly to your YouTube account, you must log out of YouTube before activating the plugins.
For more information, please see YouTube’s privacy policy (https://www.youtube.de/t/privacy).
Pursuant to Article 49 (1) a GDPR, the data will be transferred to the USA as a third country with your consent, if you have given it to us after we have informed you about the possibly missing or limited legal protection options and the lower data protection in the USA in contrast to the EU.

(5) HubSpot

To evaluate the use of our website, we use the service of the provider HubSpot, Inc. (25 First Street, 2nd Floor, Cambridge, MA 02141 USA).
So-called “tracking pixels” are used and “cookies” are also set, which are stored on your computer and which enable us to analyse your use of the website. The information collected (e.g. IP address, geographical location, type of browser, data entered in contact forms, duration of the visit and pages accessed) is evaluated by HubSpot on behalf of Lünendonk & Hossenfelder in order to generate reports on the visit and the pages visited on Lünendonk & Hossenfelder sites.
If, as described in Section 3, the newsletter is subscribed to or Exclusive Downloads (Section 6) are obtained, HubSpot can also link a user’s visits to www.luenendonk.de with the personal data (especially name/email address) on the basis of consent given, thus recording personal data and informing users individually and in a targeted manner about preferred subject areas.
If a collection by HubSpot is generally not desired, the storage of cookies can be prevented at any time by changing your consent (see above under item 7b).
For more information about how HubSpot works, see the HubSpot Inc. privacy policy, available at: http://legal.hubspot.com/de/privacy-policy.
Pursuant to Article 49 (1) a GDPR, the data will be transferred to the USA as a third country with your consent, if you have given it to us after we have informed you about the possibly missing or limited legal protection options and the lower data protection in the USA in contrast to the EU.

(6) Podigee Podcast Hosting

We use the Podigee podcast hosting service from Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany. The podcasts are loaded by Podigee or transmitted via Podigee. We integrate this plugin using the so-called two-click method in order to protect visitors to our website in the best possible way. This means that your personal data (in particular your IP address) are not transmitted to Podigee GmbH when you visit the website. Rather, you first have to activate the integrated podcast player with a click. With this click you give your consent for a connection to the Podigee servers to be established.

Podigee processes IP addresses and device information in order to enable podcast downloads/playbacks and to determine statistical data, such as retrieval figures. This data is anonymised or pseudonymised before being stored in Podigee’s database, unless it is necessary for the provision of the podcasts.

For more information and to opt-out, please see Podigee’s privacy policy: https://www.podigee.com/de/about/privacy/.

c) Google Tag Manager

We use “Google Tag Manager” on our website, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). Google Tag Manager enables us as marketers to manage website tags via an interface. The Google Tag Manager tool implementing the tags is a cookie-less domain and does not collect any personal data by itself. Google Tag Manager provides for the triggering of other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

d) Cloudflare

We use the services of the provider Cloudflare, Inc. (101 Townsend St, San Francisco. CA 94107, USA). This includes the use of the Content Delivery Network (CDN) and the protection functions for the website.
The services are used to make our website appealing, to improve the loading times of the website and to protect the website from attacks by third parties. For this purpose, a connection is established to the servers of the provider, who thereby becomes aware that our website was accessed via your IP address. We have entered into an order processing agreement with Cloudflare, Inc. as well as the standard contractual clauses. The provider may therefore only process the data according to our instructions and not for their own purposes and grants an appropriate level of protection for your data. We use these services due to our legitimate interest in optimising, providing and securing our website. The legal basis is Article 6 (1) (1) f GDPR.

e) LinkedIn Insight Tag

We use LinkedIn Insight Tag, a service provided by LinkedIn Corporation based in Sunnyvale, California, USA, to optimise our online marketing. In the European Economic Area (EEA) and Switzerland, LinkedIn services are offered by: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

Pseudonymised usage profiles are created and cookies used (see section 7) in connection with the LinkedIn Insight Tag service. The information generated by the cookie about your use of this website may, among other things, be transmitted to a LinkedIn server in the USA and stored there. This information is used to show you interest-based advertising within the LinkedIn network. IP addresses are shortened or hashed to make attribution impossible. If you are a registered user of LinkedIn, it is possible in principle for LinkedIn to attribute the cookie to your user account. If you want to avoid attribution, log out of your LinkedIn profile while using our website and delete the cookie before logging in again, if you had previously consented to use of the LinkedIn Insight Tag. The data we obtain from LinkedIn is pseudonymised by LinkedIn for the purpose of evaluating your user behaviour, so we only receive job-related demographic data from LinkedIn in order to evaluate the success of our advertising campaigns.

We have no influence over LinkedIn’s further processing and use of the data and can therefore assume no responsibility for this.

Further information on LinkedIn’s data protection and processing can be found in LinkedIn’s privacy policy (https://www.linkedin.com/legal/privacy-policy?trk=content_footer-privacy-policy).

It also provides you with detailed information on the management of your own data in connection with both LinkedIn products and, where applicable, your LinkedIn profile should you have one.

f) PayPal

We offer the option of processing the payment transaction via the payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f DSGVO). In this context, we pass on the following data to PayPal insofar as it is necessary for the fulfilment of the contract (Art. 6 para. 1 lit. b DSGVO):

  • Company
  • First name
  • Last name
  • Address
  • E-mail address
  • Telephone number

The processing of the data provided under this section is not required by law or contract. Without the transmission of your personal data, we cannot carry out a payment via PayPal.
PayPal carries out a credit check for various services such as payment by direct debit in order to ensure your willingness and ability to pay. This corresponds to the legitimate interest of PayPal (according to Art. 6 Para. 1 lit. f DSGVO) and serves the execution of the contract (according to Art. 6 Para. 1 lit. b DSGVO). For this purpose, your data (name, address and date of birth, bank account details) are passed on to credit agencies. We have no influence on this process and only receive the result of whether the payment has been made or rejected or a check is pending.
You can find more information about objection and removal options vis-à-vis PayPal at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Your data will be stored until payment processing is completed. This includes the period required for processing refunds, claims management and fraud prevention. In accordance with [§ 147 AO / § 257 HGB], we have a statutory retention period of 10 years for invoices.

8. Current validity and modification of the privacy policy

This privacy policy is currently valid and was last updated in July 2021. Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this privacy policy. You can access and print out the current privacy policy at any time on the website at https://www.luenendonk.de/en/privacy/.

Data protection information for our social media sites

With this data protection information, we would like to inform you about what happens to your personal data when you visit our social media sites.

The following provisions apply to the following social media sites operated by us:

1. Responsibility

a) The persons responsible

Responsible for the data processing on the social media sites described below are partly us, the
Lünendonk & Hossenfelder GmbH
Maximilianstraße 40
D-87719 Mindelheim
Phone: +49 8261 73140-0
Fax: +49 8261 73140-66
E-mail: [email protected]

and partly the respective operator of the social media platform.

In principle, we have no influence on the data processing by the respective operator of the social media platform and cannot provide our own information on this. The information on data processing by the operator of the respective social media platform can be found in the privacy policy of the respective operator:

In relation to some processing operations, there is also joint responsibility within the meaning of Article 26 GDPR between us and the respective operator of the social media platform.

b) Shared responsibility

There is a joint responsibility relationship with the following platform operators pursuant to Article 26(1) of the GDPR:

The evaluation of visits to these social media sites is the joint responsibility of us and the operator of the respective social media platform.
The legal basis for the evaluation of your visits to our social media sites is your consent in accordance with Article 6 (1) (1) a GDPR.
We have no influence on the other recipients who receive your data, on the option to deactivate the evaluation or on the further processing purposes of the operators of the social media platforms. The information can be found in the privacy policy of the respective operator of the social media platform:

2. Our processing procedures

a) Communication via the social media sites

We operate our social media sites in order to provide information about us and our products and to get in touch with interested parties and customers. Communication with our customers and interested parties takes place via interaction with our posts (e.g. liking, commenting), public posts on our wall or direct messages.
The legal basis for the processing of this data is our legitimate interest in direct advertising, public relations and communication with customers and interested parties, Article 6 (1) (1) f GDPR. We delete direct messages as soon as they have been conclusively answered. A final response is to be assumed if no further queries about our response are received from you after 90 days. Public posts and interactions with our posts can be deleted by you at any time. We reserve the right to delete individual posts if they could violate laws, the regulations of the operators of the social media platforms, morality or our principles.

b) Social Listening

We use the tools Hubspot (HubSpot, Inc., 25 First Street, Cambridge, MA 02141 USA) and Tweetdeck (Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) to get a picture of the perception of our company and our products and services. The posts on the social media platforms we use are searched for certain search terms and the results are displayed in a descriptive manner. This may include not only the posts on our social media presences, but also other publicly posted articles that match the relevant search criteria. This gives us access to the respective content of the post and the public part of the user profile.
The legal basis for the processing of personal data in the context of social listening is Article 6 (1) (1) f GDPR, as we are thereby pursuing our legitimate interest in being able to view the publicly viewable posts and thereby respond to praise, criticism and questions from the authors.
We have concluded an order processing agreement with the operators of the tools. This means that they are not allowed to process the data for their own purposes, but only according to our instructions.
The public contributions are not stored permanently.

3. Processing of data in a third country

If applicable, your data will be transmitted to third countries by the operators of the social media platforms. We have no influence on such transmission. You can find further information in the privacy policies of the respective operator of the social media platform mentioned under 1. a).

4. Data subject rights

You have the right:

    • in accordance with Article 15 GDPR to request information about your personal data processed by us. If we process your data, you may in particular request information about the processing purposes, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, in particular in the case of recipients in third countries, the planned storage period or the criteria for determining it, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint to a supervisory authority, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details. You may also request meaningful information about the details of such decision-making;
    • in accordance with Art. 16 GDPR to demand the immediate correction of incorrect or completion of your personal data stored by us;
    • in accordance with Art. 17 GDPR to request the deletion of your personal data stored by us, unless the processing is necessary in particular for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
    • to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the correctness of the data is disputed by you, the processing is unlawful, but you object to its deletion and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR and it is not yet clear whether our legitimate reasons outweigh your interests;
    • in accordance with Art. 20 GDPR to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller, provided that the processing is based on your consent or a contract and the processing is carried out with the help of automated procedures;
    • to revoke your consent at any time in accordance with Article 7 (3) GDPR. This has the consequence that we may no longer continue the data processing based on this consent for the future and
      complain to a supervisory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

5. Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) (1) e or f GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising.
In the former case, we will no longer process your data unless we can demonstrate compelling reasons that override your interests, freedoms and rights or our processing serves the assertion, exercise or defence of legal claims.
In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation. If you wish to exercise your right of revocation or objection, it is sufficient to send an e-mail to [email protected].

6. Data protection officer

You can reach the data protection officer at the following contact details:

dhpg IT-Services GmbH
Bunsenstr. 10a
51647 Gummersbach
Dr. Christian Lenz
Tel: +49 2261 8195-0
E-mail: [email protected]

7. Topicality and change of the privacy policy

This privacy policy is currently valid and was last updated in July 2021. Due to the further development of our social media sites and offers on them or due to changes in legal or regulatory requirements, it may be necessary to change this privacy policy. You can access and print out the current privacy policy at any time on the website at https://www.luenendonk.de/en/privacy/.

Lünendonk & Hossenfelder GmbH
Managing Partner
Jörg Hossenfelder
Maximilianstraße 40
D-87719 Mindelheim
Phone: +49 8261 73140-0
Fax: +49 8261 73140-66
E-mail: [email protected]

You can reach the data protection officer at::
dhpg IT-Services GmbH
Bunsenstr. 10a
51647 Gummersbach
Dr. Christian Lenz
Tel: +49 2261 8195-0
E-Mail: [email protected]

Photo references for events

Below you will find detailed photo instructions in accordance with our information obligations under Articles 13 and 14 GDPR.

In the context of our events, we reserve the right to create, process and distribute photo, video and audio recordings of speakers, participants and guests for the purposes of PR and public relations work, unless this is objected to in individual cases. This will be pointed out in an appropriate manner both in the context of the electronic event registration and at the event location.
The legal basis for this is Article 6 (1) (1) f GDPR. Our legitimate interest is to provide information about the content of the events as part of our PR and public relations work and to draw attention to similar events, the content and the work of Lünendonk & Hossenfelder GmbH.
This is done, for example, in the form of text, video contributions and photo galleries on www.luenendonk.de, in our newsletter, in social media (YouTube, Facebook, Xing, LinkedIn and Twitter) and event-related publications.
The photos, videos and audio recordings made during our public events are also passed on to media representatives of newspapers as well as radio stations and online editorial offices for editorial reporting as part of our press work.
We also provide photo material to the guests involved in the respective event for individual use.
We store the photo, video and audio recordings for as long as we have a legitimate interest in reporting on our event.
You may object to the processing of the photo, video and audio recordings. This objection must be justified. We will no longer process the data in the event of an objection, unless we can demonstrate compelling reasons worthy of protection that outweigh your interests, rights and freedoms.
You will find a description of your further rights as a data subject in our privacy policy.
If you do not wish to be photographed, please contact the management and the photographer on site.

Contact for press and stakeholders:

Responsible for the creation, storage and processing of the image and audio recordings::

Lünendonk & Hossenfelder GmbH
Managing Partner
Jörg Hossenfelder
Maximilianstraße 40
D-87719 Mindelheim
Phone: +49 8261 73140-0
Fax: +49 8261 73140-66
E-mail: [email protected]

You can reach the data protection officer at:
dhpg IT-Services GmbH
Bunsenstr. 10a
51647 Gummersbach
Dr. Christian Lenz
Phone: +49 2261 8195-0
E-mail: [email protected]