Lornamead GmbH
Osterbekstraße 90b
22083 Hamburg Germany
Phone number: +49 (0) 40 / 888 859 – 0
E-Mail adress: info@lornamead.de
Commercial register no.: HRB 182005
Managing director: Riccardo Granata
Lornamead GmbH is a company of the Sodalis Group.
If you have general questions or suggestions on the subject of data protection, you can contact us at any time by telephone or e-mail using the contact details given above.
The data protection officer of the responsible party is:
stefano.modena@assiteca.it
ASSITECA Consulting
Via G. Sigieri, 14
IT – 20135 Milano
Basic information on data processing and legal basis
This data protection declaration informs you about the type, scope and purpose of the processing of personal data within our online offer and the websites, functions and content connected to it (hereinafter jointly referred to as “online offer” or “website”). The privacy policy applies regardless of the domains, systems, platforms and devices (e.g. desktop or mobile) used on which the online offer is executed.
With regard to the terms used, such as “personal data” or their “processing”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (DSGVO). Personal data of users processed within the scope of this online offer includes all those data that relate to a specific natural person or enable information to be attributed to a specific natural person. These are, for example, the name, date of birth and e-mail address or telephone numbers, but also usage data such as your IP address or content data such as the messages written by you that you send us via the contact form. Statistical data collected in addition, which cannot be assigned to a specific natural person, is not personal data.
The term “user” includes all categories of persons affected by data processing. They include visitors and users of our online offer. The terms used, such as “user”, are to be understood as gender-neutral. We process users’ personal data only in compliance with the relevant data protection regulations. This means that user data will only be processed if legal permission has been granted. I.e., in particular if the data processing is necessary or legally required for the provision of our contractual services (e.g. processing of orders) as well as online services, if there is a consent of the users, as well as due to our legitimate interests (i.e. interest in the analysis, optimization and economic operation and security of our online offer in terms of Art. 6 para. 1 lit. f. DSGVO, in particular in the case of range measurement, creation of profiles for advertising and marketing purposes, and collection of access data and use of third-party services. We point out that the legal basis of the consents Art. 6 para. 1 lit. a. and Art. 7 DSGVO, the legal basis for processing for the performance of our services and implementation of contractual measures Art. 6 para. 1 lit. b. DSGVO, the legal basis for processing to fulfill our legal obligations Art. 6 para. 1 lit. c. DSGVO, and the legal basis for processing to protect our legitimate interests Art. 6 para. 1 lit. f. DSGVO is.
Collection and storage of personal data and the nature and purpose of their use when visiting the website.
When you visit our website https://www.rapidwhite.de, information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:
The above data is processed by us for the following purposes:
The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. F DSGVO. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person. The log files are stored for a period of 6 months.
Security measures
We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are complied with and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.
Disclosure of data to third parties and third-party providers
Data is only passed on to third parties within the framework of legal requirements. We only pass on users’ data to third parties if this is necessary, for example, on the basis of Art. 6 Para. 1 lit. b) DSGVO for contractual purposes or on the basis of legitimate interests pursuant to Art. 6 Para. 1 lit. f. DSGVO in the economic and effective operation of our business. If we use subcontractors to provide our services, we take appropriate legal precautions as well as corresponding technical and organizational measures to ensure the protection of the Services.
We process inventory data (e.g. names and addresses as well as contact data of users), contract data (e.g. services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services pursuant to Art. 6 para. 1 lit b. DSGVO.
Contact
Type and scope of processing
On our website we offer you the option of contacting us via the email address provided. The information collected is necessary to process the request. In addition, you can voluntarily provide additional information that you feel is necessary to process the contact request.
To answer your inquiries, we are supported by customerservices@ceutahealthcare.com.We have concluded an order processing agreement with the service provider in accordance with Art. 28. DSGVO
Purpose and legal basis
The processing of your data is carried out for the purpose of communication and processing of your request on the basis of your consent pursuant to Art. 6 para. 1 lit. a DSGVO. Insofar as your inquiry relates to an existing contractual relationship with us, the processing is carried out for the purpose of fulfilling the contract on the basis of Art. 6 (1) lit. b DSGVO. There is no legal or contractual obligation to provide your data, but the processing of your request is not possible without providing the information of the mandatory fields. If you do not wish to provide this data, please contact us by other means.
Storage period
Insofar as you use the contact form on the basis of your consent, we store the collected data of each inquiry for a period of three years, starting with the completion of your inquiry or until you revoke your consent.
If you use the contact form in the context of a contractual relationship, we store the collected data of each request for a period of three years] from the end of the contractual relationship.
Cookies & Reach Measurement
Cookies are pieces of information that are transmitted from our web server or third-party web servers to users’ web browsers, where they are stored for later retrieval. Cookies may be small files or other types of information storage.
If users do not want cookies to be stored on their computers, they are asked to disable the corresponding option in the system settings of their browsers. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.
This website analyzes the usage behavior of visitors, among other things with the help of cookies, for purposes of reach measurement and advertising. Our social networking, advertising and analytics partners may combine this information with other data they hold. To prevent the collection of your data by means of web tracking (e.g. Google Analytics or Facebook Pixel) on our website, please click the corresponding “Disable” buttons.
Google Analytics
Type and scope of processing
We use Google Analytics by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of times our online offer is called up, sub-pages visited and the length of time visitors stay.
Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.
This information is used, among other things, to compile reports on website activity.
Purpose and legal basis
We process data using Google Analytics for the purpose of optimizing our website and for marketing purposes based on your consent pursuant to Art. 6 (1) lit. a. DSGVO.
Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy?hl=de-DE.
Google TagManager
Type and scope of processing
We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through one interface and allows us to control the exact integration of services on our website
This allows us to flexibly integrate additional services to evaluate user access to our website.
Purpose and legal basis
Google Tag Manager is used on the basis of your consent given to us to optimize our services in accordance with Art. 6 para. 1 lit. a). DSGVO.
Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.
Consent with Borlabs Cookie
Our website uses Borlabs Cookie consent technology to obtain your consent to store certain cookies in your browser or to use certain technologies, and to document this consent in a privacy-compliant manner. The provider of this technology is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg (hereinafter Borlabs).
When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data is not shared with the Borlabs cookie provider.
The collected data will be stored until you request us to delete it or until you delete the Borlabs cookie yourself or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
Borlabs Cookie Consent Technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c DSGVO.
Integration of third-party services and content
We use within our online offer on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) to integrate content or services offered by third-party providers, such as videos or fonts (hereinafter uniformly referred to as “content”). This always requires that the third-party providers of this content are aware of the IP address of the user, since without the IP address they could not send the content to their browser. The IP address is thus necessary for the display of this content. We endeavor to use only such content whose respective providers use the IP address only for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as be linked to such information from other sources. The following presentation provides an overview of third-party providers and their content, along with links to their privacy statements, which contain further information on the processing of data and, in part already mentioned here, opt-out options: Videos of the platform “YouTube” of the third-party provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/. External fonts from Google, Inc, https://www.google.com/fonts (“Google Fonts”). The integration of Google Fonts is done by a server call at Google (usually in the USA). Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/. Note for the privacy policy
Facebook Fanpage (Meta Platforms, Inc)
When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more detailed information on this under the following link: http://de-de.facebook.com/help/pages/insights .
It is not possible for us to draw conclusions about individual users by means of the statistical information transmitted. We only use this information to respond to the interests of our users and to continuously improve our online presence and ensure its quality.
We collect your data via our fan page only to realize a possible provision for communication and interaction with us. This collection usually includes your name, message content, comment content, and the profile information you provide “publicly”.
The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 (1) f) DSGVO. Should you as a user have given your consent to the data processing to the respective provider of the social network, the legal basis of the processing extends to Art. 6 para. 1 a), Art. 7 DSGVO.
Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to fully access your data. Due to this, only the provider can directly take and implement appropriate measures to fulfill your user rights (information request, deletion request, objection, etc.). The assertion of corresponding rights is therefore most effective directly against the respective provider.
Should you still require assistance in this matter, please feel free to contact us.
Affected party rights
The Facebook “Page Controller Addendum” sets out the rights and obligations to be complied with together with Facebook. These can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum
In the event of a request for information, we will forward this to Facebook and ask you to fill out the corresponding contact form at https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fhelp%2Fcontact%2F308592359910928.
Below you will find a detailed description of the respective data processing by the providers and their objection options (so-called opt-out) via the corresponding links to the providers’ websites:
– Meta Platforms, Inc (1 Hacker Way Menlo Park, California 94025) – Privacy Policy: https://www.facebook.com/about/privacy/
– Instagram (- Meta Platforms, Inc (1 Hacker Way Menlo Park, California 94025) -privacy policy: http://instagram.com/about/legal/privacy/
– Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Policy: https://policies.google.com/privacy , Opt-Out: https://adssettings.google.com/authenticated , Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Rights of the users
Users have the right, upon request and free of charge, to receive information pursuant to Art. 15 DSGVO about the personal data that we have stored about them. In addition, users have the right to rectification of inaccurate data pursuant to Art. 16 GDPR, to restriction of processing pursuant to Art. 18 GDPR, to information pursuant to Art. 19 GDPR and to erasure of your personal data pursuant to Art. 17 GDPR, and may, where applicable, assert your rights to data portability pursuant to Art. 20 GDPR and, in the event that we assume that data processing is unlawful, file a complaint with the competent supervisory authority within the meaning of Art. 77 GDPR. Likewise, users can revoke consents, in principle with effect for the future. This does not affect the lawfulness of the data processing until the time of revocation. To exercise the aforementioned rights, please contact info@lornamead.de with the subject “Data Protection”. The responsible party for data processing is Lornamead GmbH.
Deletion of data
The data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. If user data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to user data that must be retained for reasons of commercial or tax law. According to legal requirements, data is stored for 6 years in accordance with § 257 para. 1 HGB (commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 para. 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).
Right of objection
Users may object to the future processing of their personal data in accordance with the legal requirements at any time. The objection can be made in particular against processing for direct advertising purposes.
Changes to the data protection declaration
We reserve the right to change the data protection declaration in order to adapt it to changed legal situations or in the event of changes to the service as well as data processing. However, this only applies with regard to declarations on data processing. Insofar as user consents are required or components of the data protection declaration contain provisions of the contractual relationship with the users, the changes will only be made with the consent of the users.
Users are requested to inform themselves regularly about the content of the data protection declaration.