Privacy Policy

1. Privacy at a Glance

General Information

The fol­low­ing infor­ma­tion pro­vides a sim­ple overview of what hap­pens to your per­son­al data when you vis­it this web­site. Per­son­al data is any infor­ma­tion that can be used to iden­ti­fy you per­son­al­ly. For detailed infor­ma­tion on data pro­tec­tion, please refer to our Pri­va­cy Pol­i­cy set out below.

Data Collection on this Website

Who is responsible for data collection on this website?

Data pro­cess­ing on this web­site is car­ried out by the web­site oper­a­tor. You can find the oper­a­tor’s con­tact details in the sec­tion “Infor­ma­tion on the Con­troller” of this Pri­va­cy Pol­i­cy.

How do we collect your data?

Your data is col­lect­ed, on the one hand, when you pro­vide it to us. This may include, for exam­ple, data that you enter into a con­tact form.

Oth­er data is col­lect­ed auto­mat­i­cal­ly by our IT sys­tems, or after you have giv­en your con­sent, when you vis­it this web­site. This pri­mar­i­ly includes tech­ni­cal data (e.g. your inter­net brows­er, oper­at­ing sys­tem, or the time of the page request). This data is col­lect­ed auto­mat­i­cal­ly as soon as you access this web­site.

What do we use your data for?

Some of the data is col­lect­ed to ensure that the web­site is pro­vid­ed with­out errors. Oth­er data may be used to ana­lyze your user behav­ior. Where con­tracts can be con­clud­ed or ini­ti­at­ed via the web­site, the trans­mit­ted data is also processed for con­tract offers, orders, or oth­er busi­ness inquiries.

What rights do you have regarding your data?

You have the right, at any time and free of charge, to obtain infor­ma­tion about the ori­gin, recip­i­ents, and pur­pose of your stored per­son­al data. You also have the right to request the cor­rec­tion or dele­tion of this data. If you have giv­en your con­sent to the pro­cess­ing of your data, you may with­draw that con­sent at any time with effect for the future. Fur­ther­more, under cer­tain cir­cum­stances, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data. You also have the right to lodge a com­plaint with the com­pe­tent super­vi­so­ry author­i­ty.

If you have any ques­tions about data pro­tec­tion or your rights, you may con­tact us at any time.

Analytics Tools and Third-Party Tools

When you vis­it this web­site, your brows­ing behav­ior may be sta­tis­ti­cal­ly ana­lyzed. This is pri­mar­i­ly done using ana­lyt­ics pro­grams.

Detailed infor­ma­tion about these ana­lyt­ics pro­grams can be found in the Pri­va­cy Pol­i­cy below.

2. Hosting

We host the con­tent of our web­site with the fol­low­ing provider:

External Hosting

This web­site is host­ed exter­nal­ly. The per­son­al data col­lect­ed on this web­site is stored on the servers of the host­ing provider(s). This may include, in par­tic­u­lar, IP address­es, con­tact inquiries, meta­da­ta and com­mu­ni­ca­tion data, con­tract data, con­tact details, names, web­site access data, and oth­er data gen­er­at­ed through a web­site.

Exter­nal host­ing is car­ried out for the pur­pose of ful­fill­ing our con­trac­tu­al oblig­a­tions towards our prospec­tive and exist­ing cus­tomers (Arti­cle 6(1)(b) GDPR) and in the inter­est of pro­vid­ing our online ser­vices secure­ly, quick­ly, and effi­cient­ly through a pro­fes­sion­al host­ing provider (Arti­cle 6(1)(f) GDPR). If con­sent has been request­ed, pro­cess­ing is car­ried out exclu­sive­ly on the basis of Arti­cle 6(1)(a) GDPR and Sec­tion 25(1) of the Ger­man Telecom­mu­ni­ca­tions Dig­i­tal Ser­vices Data Pro­tec­tion Act (TDDDG), inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion on the user’s device (e.g. device fin­ger­print­ing) with­in the mean­ing of the TDDDG. Con­sent may be with­drawn at any time.

Our host­ing provider(s) will process your data only to the extent nec­es­sary to ful­fill their con­trac­tu­al oblig­a­tions and will fol­low our instruc­tions regard­ing such data.

We use the fol­low­ing host­ing provider(s):

netcup GmbH
Daim­ler­straße 25
D‑76185 Karl­sruhe

Data Processing Agreement

We have entered into a Data Pro­cess­ing Agree­ment (DPA) with the provider named above. This is a con­tract required under data pro­tec­tion law, which ensures that the provider process­es the per­son­al data of our web­site vis­i­tors only in accor­dance with our instruc­tions and in com­pli­ance with the GDPR.

3. General Information and Mandatory Information

Privacy

The oper­a­tors of this web­site take the pro­tec­tion of your per­son­al data very seri­ous­ly. We treat your per­son­al data con­fi­den­tial­ly and in accor­dance with the applic­a­ble data pro­tec­tion laws and this Pri­va­cy Pol­i­cy.

When you use this web­site, var­i­ous types of per­son­al data are col­lect­ed. Per­son­al data is any infor­ma­tion that can be used to iden­ti­fy you per­son­al­ly. This Pri­va­cy Pol­i­cy explains what data we col­lect, how we use it, and for what pur­pose. It also explains how and why this pro­cess­ing takes place.

Please note that data trans­mis­sion over the Inter­net (e.g. com­mu­ni­ca­tion by email) may be sub­ject to secu­ri­ty vul­ner­a­bil­i­ties. Com­plete pro­tec­tion of data against access by third par­ties is not pos­si­ble.

Information on the Controller

The con­troller respon­si­ble for data pro­cess­ing on this web­site is:

Langer Finan­cial Ser­vices
Haller Straße 25
73479 Ell­wan­gen (Jagst)
Ger­many

Phone: +49 7961 5790 580
Email: kontakt@langer-services.de

The con­troller is the nat­ur­al or legal per­son who, alone or joint­ly with oth­ers, deter­mines the pur­pos­es and means of pro­cess­ing per­son­al data (e.g. names, email address­es, or sim­i­lar infor­ma­tion).

Storage Period

Unless a more spe­cif­ic stor­age peri­od is stat­ed in this Pri­va­cy Pol­i­cy, your per­son­al data will remain with us until the pur­pose for pro­cess­ing the data no longer applies. If you assert a legit­i­mate request for dele­tion or with­draw your con­sent to data pro­cess­ing, your data will be delet­ed unless we have oth­er legal­ly per­mis­si­ble grounds for retain­ing your per­son­al data (e.g. reten­tion peri­ods required under tax or com­mer­cial law). In the lat­ter case, the data will be delet­ed once those grounds no longer apply.

General Information on the Legal Bases for Data Processing on This Website

If you have giv­en your con­sent to data pro­cess­ing, we process your per­son­al data on the basis of Arti­cle 6(1)(a) GDPR or, where spe­cial cat­e­gories of per­son­al data pur­suant to Arti­cle 9(1) GDPR are processed, on the basis of Arti­cle 9(2)(a) GDPR. In the case of explic­it con­sent to the trans­fer of per­son­al data to third coun­tries, data pro­cess­ing is also based on Arti­cle 49(1)(a) GDPR. If you have con­sent­ed to the stor­age of cook­ies or to access to infor­ma­tion on your device (e.g. via device fin­ger­print­ing), data pro­cess­ing is addi­tion­al­ly based on Sec­tion 25(1) of the Ger­man Telecom­mu­ni­ca­tions Dig­i­tal Ser­vices Data Pro­tec­tion Act (TDDDG). You may with­draw your con­sent at any time.
If your data is required for the per­for­mance of a con­tract or for car­ry­ing out pre-con­trac­tu­al mea­sures, we process your data on the basis of Arti­cle 6(1)(b) GDPR. Fur­ther­more, we process your data where this is nec­es­sary to com­ply with a legal oblig­a­tion on the basis of Arti­cle 6(1)© GDPR. Data pro­cess­ing may also be car­ried out on the basis of our legit­i­mate inter­est pur­suant to Arti­cle 6(1)(f) GDPR. Infor­ma­tion on the legal basis applic­a­ble in each indi­vid­ual case is pro­vid­ed in the fol­low­ing sec­tions of this Pri­va­cy Pol­i­cy.

Information on Data Transfers to Third Countries Without an Adequate Level of Data Protection and Transfers to US Companies That Are Not DPF Certified

Among oth­er things, we use tools pro­vid­ed by com­pa­nies based in third coun­tries that do not offer an ade­quate lev­el of data pro­tec­tion under applic­a­ble data pro­tec­tion law, as well as US-based tools whose providers are not cer­ti­fied under the EU–US Data Pri­va­cy Frame­work (DPF). If these tools are active, your per­son­al data may be trans­ferred to and processed in these coun­tries. Please note that a lev­el of data pro­tec­tion com­pa­ra­ble to that of the Euro­pean Union can­not be guar­an­teed in third coun­tries that do not pro­vide an ade­quate lev­el of data pro­tec­tion.

Please note that the Unit­ed States is gen­er­al­ly con­sid­ered a third coun­try with an ade­quate lev­el of data pro­tec­tion. Accord­ing­ly, the trans­fer of per­son­al data to the Unit­ed States is per­mit­ted if the recip­i­ent is cer­ti­fied under the EU–US Data Pri­va­cy Frame­work (DPF) or pro­vides appro­pri­ate addi­tion­al safe­guards. Infor­ma­tion on trans­fers to third coun­tries, includ­ing the recip­i­ents of the data, can be found in this Pri­va­cy Pol­i­cy.

Recipients of Personal Data

As part of our busi­ness activ­i­ties, we work with var­i­ous exter­nal par­ties. In some cas­es, this requires the trans­fer of per­son­al data to these exter­nal par­ties. We only dis­close per­son­al data where this is nec­es­sary for the per­for­mance of a con­tract, where we are legal­ly oblig­ed to do so (e.g. dis­clo­sure of data to tax author­i­ties), where we have a legit­i­mate inter­est in the dis­clo­sure pur­suant to Arti­cle 6(1)(f) GDPR, or where anoth­er legal basis per­mits the dis­clo­sure.
When using data proces­sors, we dis­close our cus­tomers’ per­son­al data only on the basis of a valid Data Pro­cess­ing Agree­ment (DPA). In the case of joint pro­cess­ing, a Joint Con­troller Agree­ment is con­clud­ed.

Withdrawal of Your Consent to Data Processing

Many data pro­cess­ing oper­a­tions are only pos­si­ble with your explic­it con­sent. You may with­draw any con­sent you have already giv­en at any time. The law­ful­ness of any data pro­cess­ing car­ried out before the with­draw­al remains unaf­fect­ed.

Right to Object to Data Processing in Specific Cases and to Direct Marketing (Article 21 GDPR)

IF YOUR PERSONAL DATA IS PROCESSED ON THE BASIS OF ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO ANY PROFILING BASED ON THOSE PROVISIONS. THE RELEVANT LEGAL BASIS FOR THE PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS (RIGHT TO OBJECT PURSUANT TO ARTICLE 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (RIGHT TO OBJECT PURSUANT TO ARTICLE 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of vio­la­tions of the GDPR, data sub­jects have the right to lodge a com­plaint with a super­vi­so­ry author­i­ty, in par­tic­u­lar in the Mem­ber State of their habit­u­al res­i­dence, place of work, or the place of the alleged infringe­ment. This right to lodge a com­plaint is with­out prej­u­dice to any oth­er admin­is­tra­tive or judi­cial reme­dies.

Right to Data Portability

You have the right to receive the data that we process auto­mat­i­cal­ly on the basis of your con­sent or in the per­for­mance of a con­tract in a com­mon­ly used, machine-read­able for­mat, either for your­self or for trans­mis­sion to a third par­ty. If you request the direct trans­fer of the data to anoth­er con­troller, this will only be car­ried out where tech­ni­cal­ly fea­si­ble.

Right of Access, Rectification, and Erasure

With­in the frame­work of the applic­a­ble legal pro­vi­sions, you have the right at any time to obtain, free of charge, infor­ma­tion about your stored per­son­al data, its ori­gin, the recip­i­ents of the data, and the pur­pose of the data pro­cess­ing. You may also have the right to request the rec­ti­fi­ca­tion or era­sure of this data. If you have any ques­tions about this or oth­er mat­ters relat­ing to per­son­al data, you may con­tact us at any time.

Right to Restriction of Processing

You have the right to request the restric­tion of the pro­cess­ing of your per­son­al data. You may con­tact us at any time to exer­cise this right. The right to restric­tion of pro­cess­ing applies in the fol­low­ing cas­es:

• If you con­test the accu­ra­cy of your per­son­al data stored by us, we will gen­er­al­ly require time to ver­i­fy this. Dur­ing the ver­i­fi­ca­tion peri­od, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data.
• If the pro­cess­ing of your per­son­al data was or is unlaw­ful, you may request the restric­tion of data pro­cess­ing instead of the era­sure of your per­son­al data.
• If we no longer need your per­son­al data, but you require it for the estab­lish­ment, exer­cise, or defence of legal claims, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data instead of its era­sure.
• If you have object­ed to the pro­cess­ing of your per­son­al data pur­suant to Arti­cle 21(1) GDPR, a bal­anc­ing of inter­ests between your inter­ests and ours must be car­ried out. Until it has been deter­mined whose inter­ests pre­vail, you have the right to request the restric­tion of the pro­cess­ing of your per­son­al data.

If you have restrict­ed the pro­cess­ing of your per­son­al data, such data may – apart from being stored – only be processed with your con­sent, or for the estab­lish­ment, exer­cise, or defence of legal claims, for the pro­tec­tion of the rights of anoth­er nat­ur­al or legal per­son, or for rea­sons of impor­tant pub­lic inter­est of the Euro­pean Union or a Mem­ber State.

SSL/TLS Encryption

This web­site uses SSL/TLS encryp­tion for secu­ri­ty rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as orders or inquiries that you send to us as the web­site oper­a­tor. You can rec­og­nize an encrypt­ed con­nec­tion by the change in your browser’s address bar from “http://” to “https://” and by the pad­lock icon dis­played in your browser’s address bar.

When SSL/TLS encryp­tion is enabled, the data you trans­mit to us can­not be read by third par­ties.

4. Data Collection on This Website

Cookies

Our web­site uses so-called “cook­ies.” Cook­ies are small data files that do not cause any dam­age to your device. They are stored either tem­porar­i­ly for the dura­tion of a ses­sion (ses­sion cook­ies) or per­ma­nent­ly (per­sis­tent cook­ies) on your device. Ses­sion cook­ies are auto­mat­i­cal­ly delet­ed at the end of your vis­it. Per­sis­tent cook­ies remain stored on your device until you delete them your­self or they are auto­mat­i­cal­ly delet­ed by your web brows­er.

Cook­ies may be set by us (first-par­ty cook­ies) or by third-par­ty providers (third-par­ty cook­ies). Third-par­ty cook­ies enable the inte­gra­tion of cer­tain ser­vices pro­vid­ed by third par­ties with­in web­sites (e.g. cook­ies used to process pay­ment ser­vices).

Cook­ies serve var­i­ous func­tions. Many cook­ies are tech­ni­cal­ly nec­es­sary, as cer­tain web­site fea­tures would not func­tion with­out them (e.g. the shop­ping cart func­tion or the dis­play of videos). Oth­er cook­ies may be used to ana­lyze user behav­ior or for adver­tis­ing pur­pos­es.

Cook­ies that are required to car­ry out the elec­tron­ic com­mu­ni­ca­tion process, to pro­vide cer­tain func­tions request­ed by you (e.g. the shop­ping cart func­tion), or to opti­mize the web­site (e.g. cook­ies used to mea­sure web­site traf­fic) (nec­es­sary cook­ies) are stored on the basis of Arti­cle 6(1)(f) GDPR, unless anoth­er legal basis is spec­i­fied. The web­site oper­a­tor has a legit­i­mate inter­est in stor­ing nec­es­sary cook­ies to ensure the tech­ni­cal­ly error-free and opti­mized pro­vi­sion of its ser­vices. Where con­sent has been request­ed for the stor­age of cook­ies and sim­i­lar recog­ni­tion tech­nolo­gies, pro­cess­ing is car­ried out exclu­sive­ly on the basis of this con­sent (Arti­cle 6(1)(a) GDPR and Sec­tion 25(1) of the Ger­man Telecom­mu­ni­ca­tions Dig­i­tal Ser­vices Data Pro­tec­tion Act (TDDDG)). Con­sent may be with­drawn at any time.

You can con­fig­ure your brows­er to noti­fy you when cook­ies are set, to allow cook­ies only in indi­vid­ual cas­es, to exclude the accep­tance of cook­ies for spe­cif­ic cas­es or in gen­er­al, and to enable the auto­mat­ic dele­tion of cook­ies when you close your brows­er. If cook­ies are dis­abled, the func­tion­al­i­ty of this web­site may be lim­it­ed.

Details of the cook­ies and ser­vices used on this web­site can be found in this Pri­va­cy Pol­i­cy.

Consent with Borlabs Cookie

Our web­site uses the Bor­labs Cook­ie con­sent tech­nol­o­gy to obtain your con­sent for the stor­age of cer­tain cook­ies in your brows­er or the use of spe­cif­ic tech­nolo­gies and to doc­u­ment this con­sent in com­pli­ance with data pro­tec­tion reg­u­la­tions. The provider of this tech­nol­o­gy is Bor­labs GmbH, Rübenkamp 32, 22305 Ham­burg, Ger­many (here­inafter “Bor­labs”).

When you vis­it our web­site, a Bor­labs cook­ie is stored in your brows­er to save the con­sents you have giv­en or the with­draw­al of such con­sents. This data is not shared with the provider of Bor­labs Cook­ie.

The col­lect­ed data is stored until you request its dele­tion, delete the Bor­labs cook­ie your­self, or the pur­pose for stor­ing the data no longer applies. Manda­to­ry statu­to­ry reten­tion peri­ods remain unaf­fect­ed. For details on how Bor­labs Cook­ie process­es data, please vis­it:
https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

Der Ein­satz der Bor­labs-Cook­ie-Con­sent-Tech­nolo­gie erfol­gt, um die geset­zlich vorgeschriebe­nen Ein­willi­gun­gen für den Ein­satz von Cook­ies einzu­holen. Rechts­grund­lage hier­für ist Art. 6 Abs. 1 lit. c DSGVO.

Server Log Files

The provider of this web­site auto­mat­i­cal­ly col­lects and stores infor­ma­tion in so-called serv­er log files, which your brows­er auto­mat­i­cal­ly trans­mits to us. This infor­ma­tion includes:

• Brows­er type and brows­er ver­sion
• Oper­at­ing sys­tem used
• Refer­rer URL
• Host­name of the access­ing device
• Time of the serv­er request
• IP address

This data is not merged with data from oth­er sources.

The col­lec­tion of this data is based on Arti­cle 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in ensur­ing the tech­ni­cal­ly error-free pre­sen­ta­tion and opti­miza­tion of the web­site. For this pur­pose, serv­er log files must be col­lect­ed.

Contact Form

If you send us inquiries via the con­tact form, the infor­ma­tion you pro­vide in the inquiry form, includ­ing the con­tact details you enter, will be stored by us for the pur­pose of pro­cess­ing your inquiry and in case of fol­low-up ques­tions. We will not dis­close this data with­out your con­sent.

The pro­cess­ing of this data is based on Arti­cle 6(1)(b) GDPR if your inquiry is relat­ed to the per­for­mance of a con­tract or is nec­es­sary for car­ry­ing out pre-con­trac­tu­al mea­sures. In all oth­er cas­es, the pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive han­dling of inquiries addressed to us (Arti­cle 6(1)(f) GDPR) or on your con­sent (Arti­cle 6(1)(a) GDPR), where such con­sent has been request­ed. You may with­draw your con­sent at any time.

The data you enter in the con­tact form will remain with us until you request its dele­tion, with­draw your con­sent to its stor­age, or the pur­pose for stor­ing the data no longer applies (e.g. once your inquiry has been ful­ly processed). Manda­to­ry statu­to­ry provisions—particularly statu­to­ry reten­tion periods—remain unaf­fect­ed.

Inquiries by Email, Telephone, or Fax

If you con­tact us by email, tele­phone, or fax, your inquiry, includ­ing all per­son­al data result­ing from it (such as your name and the con­tent of your inquiry), will be stored and processed by us for the pur­pose of han­dling your request. We will not dis­close this data with­out your con­sent.

The pro­cess­ing of this data is based on Arti­cle 6(1)(b) GDPR if your inquiry is relat­ed to the per­for­mance of a con­tract or is nec­es­sary for car­ry­ing out pre-con­trac­tu­al mea­sures. In all oth­er cas­es, the pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive han­dling of inquiries addressed to us (Arti­cle 6(1)(f) GDPR) or on your con­sent (Arti­cle 6(1)(a) GDPR), where such con­sent has been request­ed. You may with­draw your con­sent at any time.

The data you send to us through con­tact inquiries will remain with us until you request its dele­tion, with­draw your con­sent to its stor­age, or the pur­pose for stor­ing the data no longer applies (e.g. once your request has been ful­ly processed). Manda­to­ry statu­to­ry provisions—particularly statu­to­ry reten­tion periods—remain unaf­fect­ed.

Communication via WhatsApp

If you con­tact us via What­sApp, we process your phone num­ber, your name, and the infor­ma­tion you pro­vide. This is done in order to process your inquiry or—if you have express­ly giv­en your consent—to send you pro­mo­tion­al mes­sages.

For the exchange of mes­sages via What­sApp and oth­er com­mu­ni­ca­tion chan­nels, we use the “What­sApp for Insur­ance Bro­kers” ser­vice pro­vid­ed by Insur­Mag­ic GmbH, Buchen­weg 1, 69221 Dossen­heim, Ger­many (“Insur­Mag­ic”). The tech­ni­cal provider of What­sApp is What­sApp Ire­land Lim­it­ed, 4 Grand Canal Square, Grand Canal Har­bour, Dublin 2, Ire­land (“What­sApp”), a com­pa­ny of Meta Plat­forms, Inc. (for­mer­ly Face­book).

What­sApp process­es per­son­al data in accor­dance with its own Pri­va­cy Pol­i­cy. The con­tent of com­mu­ni­ca­tions is pro­tect­ed by end-to-end encryp­tion. In addi­tion, What­sApp may col­lect so-called meta­da­ta, such as infor­ma­tion about the sender and recip­i­ent, phone num­bers, device infor­ma­tion, and data relat­ing to the use of the app (e.g. dura­tion and fre­quen­cy of use). What­sApp may also use this infor­ma­tion for its own pur­pos­es, such as improv­ing its ser­vices. We have no influ­ence over the details of this pro­cess­ing and do not receive any fur­ther infor­ma­tion about it. Fur­ther­more, it can­not be ruled out that data may be trans­ferred to oth­er com­pa­nies with­in the Meta group in third coun­tries (e.g. the Unit­ed States), where an equiv­a­lent lev­el of data pro­tec­tion can­not be guar­an­teed.

Legal Basis

The legal bases for our pro­cess­ing of your per­son­al data are:

• Arti­cle 6(1)(b) GDPR, where the com­mu­ni­ca­tion is nec­es­sary for the ini­ti­a­tion or per­for­mance of a con­trac­tu­al rela­tion­ship,
• Arti­cle 6(1)(a) GDPR, where you have giv­en your con­sent by sub­scrib­ing to our What­sApp newslet­ter,
• Arti­cle 6(1)(f) GDPR, where the pro­cess­ing of your inquiry is based on our legit­i­mate inter­est.

Where pro­cess­ing is based on your con­sent, we will delete your data as soon as you with­draw that con­sent. You may with­draw your con­sent at any time by send­ing an email to kontakt@langer-services.de. In all oth­er cas­es, we will delete your data as soon as the pur­pose of the pro­cess­ing no longer applies (e.g. once your inquiry has been ful­ly resolved). Where statu­to­ry reten­tion peri­ods apply, the data will be restrict­ed for the dura­tion of those peri­ods and per­ma­nent­ly delet­ed once they expire.

5. Analytics Tools and Advertising

Google Tag Manager

We use Google Tag Man­ag­er. The provider is Google Ire­land Lim­it­ed, Gor­don House, Bar­row Street, Dublin 4, Ire­land.

Google Tag Man­ag­er is a tool that allows us to inte­grate track­ing or ana­lyt­ics tools and oth­er tech­nolo­gies into our web­site. Google Tag Man­ag­er itself does not cre­ate user pro­files, store cook­ies, or per­form any inde­pen­dent analy­ses. It serves sole­ly to man­age and deploy the tools inte­grat­ed through it. How­ev­er, Google Tag Man­ag­er does col­lect your IP address, which may also be trans­ferred to Google’s par­ent com­pa­ny in the Unit­ed States.

The use of Google Tag Man­ag­er is based on Arti­cle 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the fast and straight­for­ward inte­gra­tion and man­age­ment of var­i­ous tools on the web­site. If con­sent has been request­ed, pro­cess­ing is car­ried out exclu­sive­ly on the basis of Arti­cle 6(1)(a) GDPR and Sec­tion 25(1) of the Ger­man Telecom­mu­ni­ca­tions Dig­i­tal Ser­vices Data Pro­tec­tion Act (TDDDG), inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion on the user’s device (e.g. device fin­ger­print­ing) with­in the mean­ing of the TDDDG. Con­sent may be with­drawn at any time.

The com­pa­ny is cer­ti­fied under the EU–US Data Pri­va­cy Frame­work (DPF). The DPF is an agree­ment between the Euro­pean Union and the Unit­ed States designed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards when per­son­al data is processed in the Unit­ed States. Every com­pa­ny cer­ti­fied under the DPF under­takes to com­ply with these data pro­tec­tion stan­dards. Fur­ther infor­ma­tion is avail­able from the provider at: https://www.dataprivacyframework.gov/participant/5780.

Google Analytics

This web­site uses fea­tures of the Google Ana­lyt­ics web ana­lyt­ics ser­vice. The provider is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

Google Ana­lyt­ics enables the web­site oper­a­tor to ana­lyze the behav­ior of web­site vis­i­tors. In doing so, the web­site oper­a­tor receives var­i­ous usage data, such as page views, time spent on the web­site, oper­at­ing sys­tems used, and the user’s ori­gin. This data is assigned to the respec­tive user’s device. It is not linked to a user ID.

In addi­tion, Google Ana­lyt­ics allows us to record, among oth­er things, your mouse move­ments, scrolling behav­ior, and clicks. Google Ana­lyt­ics also uses var­i­ous mod­el­ing approach­es to sup­ple­ment the col­lect­ed data sets and applies machine learn­ing tech­nolo­gies in its data analy­sis.

Google Ana­lyt­ics uses tech­nolo­gies that enable the recog­ni­tion of users for the pur­pose of ana­lyz­ing user behav­ior (e.g. cook­ies or device fin­ger­print­ing). The infor­ma­tion col­lect­ed by Google about your use of this web­site is gen­er­al­ly trans­mit­ted to a Google serv­er in the Unit­ed States and stored there.

The use of this ser­vice is based on your con­sent pur­suant to Arti­cle 6(1)(a) GDPR and Sec­tion 25(1) TDDDG. Con­sent may be with­drawn at any time.

Data trans­fers to the Unit­ed States are based on the Euro­pean Com­mis­sion’s Stan­dard Con­trac­tu­al Claus­es (SCCs). Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The com­pa­ny is cer­ti­fied under the EU–US Data Pri­va­cy Frame­work (DPF). The DPF is an agree­ment between the Euro­pean Union and the Unit­ed States designed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards when per­son­al data is processed in the Unit­ed States. Every com­pa­ny cer­ti­fied under the DPF under­takes to com­ply with these data pro­tec­tion stan­dards. Fur­ther infor­ma­tion is avail­able from the provider at: https://www.dataprivacyframework.gov/participant/5780.

IP Anonymization

Google Ana­lyt­ics IP anonymiza­tion is enabled. As a result, your IP address will be trun­cat­ed by Google with­in Mem­ber States of the Euro­pean Union or in oth­er states that are par­ty to the Agree­ment on the Euro­pean Eco­nom­ic Area before being trans­mit­ted to the Unit­ed States. Only in excep­tion­al cas­es will the full IP address be trans­mit­ted to a Google serv­er in the Unit­ed States and trun­cat­ed there. On behalf of the oper­a­tor of this web­site, Google will use this infor­ma­tion to eval­u­ate your use of the web­site, com­pile reports on web­site activ­i­ty, and pro­vide oth­er ser­vices relat­ed to web­site usage and inter­net usage to the web­site oper­a­tor. The IP address trans­mit­ted by your brows­er as part of Google Ana­lyt­ics will not be merged with oth­er Google data.

Browser plugin

You can pre­vent Google from col­lect­ing and pro­cess­ing your data by down­load­ing and installing the brows­er plug-in avail­able at the fol­low­ing link:
https://tools.google.com/dlpage/gaoptout.

For more infor­ma­tion on how Google Ana­lyt­ics han­dles user data, please refer to Google’s Pri­va­cy Pol­i­cy:
https://support.google.com/analytics/answer/6004245.

Google Ads

The web­site oper­a­tor uses Google Ads. Google Ads is an online adver­tis­ing pro­gram pro­vid­ed by Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

Google Ads enables us to dis­play adver­tise­ments in Google’s search engine or on third-par­ty web­sites when users enter cer­tain search terms on Google (key­word tar­get­ing). In addi­tion, tar­get­ed adver­tise­ments can be dis­played based on user data avail­able to Google (e.g. loca­tion data and inter­ests) (audi­ence tar­get­ing). As the web­site oper­a­tor, we can eval­u­ate this data quan­ti­ta­tive­ly, for exam­ple by ana­lyz­ing which search terms led to the dis­play of our adver­tise­ments and how many adver­tise­ments result­ed in cor­re­spond­ing clicks.

The use of this ser­vice is based on your con­sent pur­suant to Arti­cle 6(1)(a) GDPR and Sec­tion 25(1) TDDDG. You may with­draw your con­sent at any time.

Data trans­fers to the Unit­ed States are based on the Euro­pean Com­mis­sion’s Stan­dard Con­trac­tu­al Claus­es (SCCs). Details can be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

The com­pa­ny is cer­ti­fied under the EU–US Data Pri­va­cy Frame­work (DPF). The DPF is an agree­ment between the Euro­pean Union and the Unit­ed States designed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards when per­son­al data is processed in the Unit­ed States. Every com­pa­ny cer­ti­fied under the DPF under­takes to com­ply with these data pro­tec­tion stan­dards. Fur­ther infor­ma­tion is avail­able from the provider at: https://www.dataprivacyframework.gov/participant/5780.

Google Ads Remarketing

This web­site uses the Google Ads Remar­ket­ing fea­tures. The provider is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

Google Ads Remar­ket­ing enables us to assign users who have inter­act­ed with our online offer­ing to spe­cif­ic tar­get groups so that they can sub­se­quent­ly be shown inter­est-based adver­tis­ing with­in the Google adver­tis­ing net­work (remar­ket­ing or retar­get­ing).

In addi­tion, the adver­tis­ing audi­ences cre­at­ed with Google Ads Remar­ket­ing can be linked with Google’s cross-device fea­tures. This allows inter­est-based, per­son­al­ized adver­tis­ing mes­sages that have been tai­lored to you based on your pre­vi­ous usage and brows­ing behav­ior on one device (e.g. a mobile phone) to also be dis­played on your oth­er devices (e.g. a tablet or PC).

If you have a Google account, you can opt out of per­son­al­ized adver­tis­ing by vis­it­ing the fol­low­ing link: https://adssettings.google.com/anonymous.

The use of this ser­vice is based on your con­sent pur­suant to Arti­cle 6(1)(a) GDPR and Sec­tion 25(1) TDDDG. You may with­draw your con­sent at any time.

For fur­ther infor­ma­tion and Google’s Pri­va­cy Pol­i­cy, please vis­it:
https://policies.google.com/technologies/ads.

The com­pa­ny is cer­ti­fied under the EU–US Data Pri­va­cy Frame­work (DPF). The DPF is an agree­ment between the Euro­pean Union and the Unit­ed States designed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards when per­son­al data is processed in the Unit­ed States. Every com­pa­ny cer­ti­fied under the DPF under­takes to com­ply with these data pro­tec­tion stan­dards. Fur­ther infor­ma­tion is avail­able from the provider at: https://www.dataprivacyframework.gov/participant/5780.

Audience Creation with Customer Match

To cre­ate audi­ences, we use Google Ads Cus­tomer Match as part of Google Ads Remar­ket­ing. For this pur­pose, we trans­mit cer­tain cus­tomer data (e.g. email address­es) from our cus­tomer lists to Google. If the cus­tomers con­cerned are Google users and are logged into their Google account, they may be shown rel­e­vant adver­tis­ing mes­sages with­in the Google net­work (e.g. on YouTube, Gmail, or in Google Search).

Google Conversion-Tracking

This web­site uses Google Con­ver­sion Track­ing. The provider is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

With the help of Google Con­ver­sion Track­ing, Google and we can deter­mine whether users have per­formed cer­tain actions. For exam­ple, we can ana­lyze which but­tons on our web­site are clicked most fre­quent­ly and which prod­ucts are viewed or pur­chased most often. This infor­ma­tion is used to gen­er­ate con­ver­sion sta­tis­tics. We receive the total num­ber of users who clicked on our adver­tise­ments and the actions they per­formed. We do not receive any infor­ma­tion that per­son­al­ly iden­ti­fies indi­vid­ual users. Google itself uses cook­ies or com­pa­ra­ble recog­ni­tion tech­nolo­gies for iden­ti­fi­ca­tion pur­pos­es.

The use of this ser­vice is based on your con­sent pur­suant to Arti­cle 6(1)(a) GDPR and Sec­tion 25(1) TDDDG. You may with­draw your con­sent at any time.

For more infor­ma­tion about Google Con­ver­sion Track­ing, please refer to Google’s Pri­va­cy Pol­i­cy: https://policies.google.com/privacy.

The com­pa­ny is cer­ti­fied under the EU–US Data Pri­va­cy Frame­work (DPF). The DPF is an agree­ment between the Euro­pean Union and the Unit­ed States designed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards when per­son­al data is processed in the Unit­ed States. Every com­pa­ny cer­ti­fied under the DPF under­takes to com­ply with these data pro­tec­tion stan­dards. Fur­ther infor­ma­tion is avail­able from the provider at: https://www.dataprivacyframework.gov/participant/5780.

6. Plugins and tools

CleanTalk

This web­site uses CleanTalk Anti-Spam plu­g­ins. The provider is CleanTalk Inc., 711 S Car­son Street, Suite 4, Car­son City, NV 89701, USA (“CleanTalk”).

CleanTalk is used to pro­tect our web­site against spam activ­i­ty (e.g. pre­vent­ing unwant­ed adver­tis­ing, unwant­ed mes­sages, or com­ments). For this pur­pose, CleanTalk col­lects var­i­ous per­son­al data, such as IP address, email address, nick­name of the mes­sage sender, infor­ma­tion about the JavaScript tech­nol­o­gy in the sender’s brows­er, and the texts entered.

This infor­ma­tion is gen­er­al­ly trans­mit­ted to a CleanTalk serv­er in the Unit­ed States and stored there.

For secu­ri­ty rea­sons and to pro­tect against spam, your data is processed in the CleanTalk Cloud Ser­vice and stored in log files for a max­i­mum of 31 days. After this peri­od has expired, this data is com­plete­ly delet­ed.

The use of CleanTalk is based on Arti­cle 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in pro­tect­ing the web­site as effec­tive­ly as pos­si­ble against spam activ­i­ties. Where con­sent has been request­ed, pro­cess­ing is car­ried out exclu­sive­ly on the basis of Arti­cle 6(1)(a) GDPR and Sec­tion 25(1) TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion on the user’s device with­in the mean­ing of the TDDDG. Con­sent may be with­drawn at any time.

Data trans­fers to the Unit­ed States are based on the Euro­pean Com­mis­sion’s Stan­dard Con­trac­tu­al Claus­es (SCCs). Details can be found here: https://cleantalk.org/publicoffer#privacy.

Data Processing Agreement

We have entered into a Data Pro­cess­ing Agree­ment (DPA) with the provider named above. This is a con­tract required under data pro­tec­tion law, which ensures that the provider process­es the per­son­al data of our web­site vis­i­tors only in accor­dance with our instruc­tions and in com­pli­ance with the GDPR.

ManageWP

We man­age this web­site using the Man­ageWP tool. The provider is GoDaddy.com WP Europe, Trg repub­like 5, 11000 Bel­grade, Ser­bia (“Man­ageWP”).

With Man­ageWP, we can, among oth­er things, mon­i­tor the secu­ri­ty and per­for­mance of our web­site and cre­ate auto­mat­ic back­ups. As a result, Man­ageWP has access to all con­tent on the web­site, includ­ing our data­bas­es. Man­ageWP is host­ed on the provider’s servers.

The use of Man­ageWP is based on Arti­cle 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in ensur­ing the most effec­tive and secure oper­a­tion of the web­site. Where con­sent has been request­ed, pro­cess­ing is car­ried out exclu­sive­ly on the basis of Arti­cle 6(1)(a) GDPR and Sec­tion 25(1) TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion on the user’s device (e.g. device fin­ger­print­ing) with­in the mean­ing of the TDDDG. Con­sent may be with­drawn at any time.

The com­pa­ny is cer­ti­fied under the EU–US Data Pri­va­cy Frame­work (DPF). The DPF is an agree­ment between the Euro­pean Union and the Unit­ed States designed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards when per­son­al data is processed in the Unit­ed States. Every com­pa­ny cer­ti­fied under the DPF under­takes to com­ply with these data pro­tec­tion stan­dards. Fur­ther infor­ma­tion is avail­able from the provider at: https://www.dataprivacyframework.gov/participant/4957.

Data Processing Agreement

We have entered into a Data Pro­cess­ing Agree­ment (DPA) with the provider named above. This is a con­tract required under data pro­tec­tion law, which ensures that the provider process­es the per­son­al data of our web­site vis­i­tors only in accor­dance with our instruc­tions and in com­pli­ance with the GDPR.