Privacy policy

Compliance with data protection regulations is of utmost significance to our company in order to protect your personal data and your privacy accordingly. The collection of your data is carried out within the framework of applicable legal regulations. We use the information you provide exclusively for the purposes of completing and processing your order. The following data protection information provides details about the processing of your data.

I. Name and address of the Data Controller

According to the Data Protection Regulation and other national data protection laws of the member states as well as any other provisions of data protection law, the Data Controller is:

Lischka GmbH
Boxberger Straße 19
12681 Berlin

II. Name and address of the Data Protection Officer

Lischka GmbH
Boxberger Straße 19
12681 Berlin

Phone: +49 (0) 30 981958 -0
Email: datenschutzbeauftragter@lischka.berlin

III. General information on data processing

1. The scope of the processing of personal data

Generally, we collect and use personal data of our users only to the extent that it is required for the processing of our contractual agreements. Once the contractual obligations have been fulfilled, we only process data with your explicit consent. An exception applies in cases where it is not possible to obtain prior consent for factual reasons or where the processing of the data is permitted by legal regulations.

2. Legal basis for the processing of personal data

If we obtain the consent of the data subject for the processing of personal data, Art. 6 (1)(a) of the Data Protection Act shall apply. For processing personal data that is necessary for the performance of a contract to which the data subject is a contracting party, Art. 6 (1)(b) of the Data Protection Act shall apply. This principle also applies to processing operations which are necessary for carrying out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 (1)(c) of the Data Protection Act shall apply.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the said interest, Art. 6(1)(f) of the Data Protection Act GDPR shall apply as the legal basis for the processing.

3. Data deletion and period of storage

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage ceases to apply. Furthermore, storage may take place if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject.
Blocking or deletion of the data shall also take place if the storage period stipulated by the aforementioned standards expires, unless there is a need for further storage of the data for the purpose of conclusion or fulfilment of a contract.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer.

In this context, the following data is collected: 1.Information about the browser type and version used
2.The user’s operating system 3.The user’s Internet service provider 4.The user’s IP address 5.Date and time of access 6.The websites from which the user’s system accesses our website 7.The websites accessed by the user’s system via our website

This data is not stored together with any other personal data of the user.

2. Legal basis for data processing

The legal basis for temporary storage of data and log files is Art. 6(1)(f) of the German Data Protection Act (DSGVO).

3. Purpose of data processing

Temporary storage of IP address by the system is necessary to enable delivery of the website to the user’s computer. To do this, the user’s IP address must be stored for the duration of the session.

Log files are saved to ensure the functionality of the website. Data is also used to optimise the website and ensure the security of our information technology systems. We do not evaluate this data for marketing purposes.

These purposes also encompass our legitimate interest in data processing in accordance with Art. 6(1)(f) of the German Data Protection Act (DSGVO).

4. Duration of retention

The data will be deleted as soon as it is no longer required to achieve the purpose of its collection.
In the case the data was collected in order to provide the website, it will be deleted once your session on our site has ended.

If the data is stored in log files, it will be deleted after 8 weeks at the latest. However, it may be retained for a longer period. In this case, the user’s IP address will be deleted or distorted, so that the accessing client can no longer be identified.

5. Objection and deletion option

Collection of data required to make the website available and storage of the data in log files is essential for the operation of the website. Consequently, there is no possibility for the user to object.

V. Use of cookies

Cookie settings

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s computer system. This cookie contains a distinctive character string that enables unique identification of the browser when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following data is stored and transmitted in cookies:

1. Language settings

2. Privacy settings

3. Session ID

We also use cookies on our website to analyse user behaviour.

The following data can be transmitted in this way:

1. Entered search terms

2. Sources of visitors

3. Page view frequency

4. Use of website features

Cookies used; Purpose and validity

The user data acquired in this way is pseudonymised by means of technical procedures. Therefore, it is no longer possible to assign the data to the user who is accessing the site. The data is not stored jointly with other personal data of the users.

Upon accessing our website, users are informed via an information banner about the use of cookies for analytical purposes and are referred to this Privacy policy. In this context, there is also a note on how the storage of cookies can be disabled in the browser settings.

When accessing our website, the user is informed regarding the use of cookies for analytical purposes and his or her consent to the processing of personal data used in this context is obtained. In this context, a reference to this Privacy policy is also included.

2. Legal basis for data processing

The legal basis for processing personal data using cookies is Art. 6(1)(f) of the German Data Protection Act (DSGVO).

3. Purpose of data processing

The purpose of using such technically essential cookies is to make the website easier to use. Some features of our website will not be available if the use of cookies is disabled. This is why it is necessary that your browser remains recognisable as you make your way through our site.

We require cookies for the following applications:

1. Application of language settings

2. Saving of privacy settings

3. Saving of page settings and visited pages

The user data collected by technically necessary cookies is not used to create user profiles.

Analytics cookies are used to improve the quality of our website and its content. Analytics cookies enable us to find out how the website is used and thus to constantly optimise our offer.

For these purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6(1)(f) of the German Data Protection Act (DSGVO).

4. Period of storage, options for objecting to the collection of your data and requesting its deletion
Length of storage, possibility of objection and deletion

Cookies are stored on the user’s computer and transmitted to our site. You, therefore, retain full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies which have already been saved may be deleted at any time. This can also be done automatically. If cookies for our website are disabled, it is possible that you will no longer be able to use all of its features.

VI. Contact form and e-mail contact

1. Description and scope of data processing

A contact form is available on our website, which can be used for contacting us online. If a user decides to select this option, the data entered in the input screen will be transmitted to us and stored. This data includes:

Mandatory fields:
– E-mail address

Optional fields:
– Name
– Phone number
– Country
– Subject
– Message

Optional information is used for targeted data processing, e.g. forwarding to responsible departments.

Additionally, the following data is stored at the time of sending the message:

1. User’s IP address

2. Date and time

During submission of the data, your consent is obtained for the processing of the data and reference is made to this Privacy policy.

Alternatively, you can contact us via the e-mail address provided. In this case, the user’s personal data transmitted via e-mail will be stored.

Such data will not be disclosed to third parties in this context. This data will be used exclusively to respond to your enquiry.

2. Legal basis for data processing

The legal basis for processing the data, if the user’s consent to this has been obtained, is Art. 6(1)(a) of the GDPR.

The legal basis for processing the data transmitted in the course of sending an e-mail is Art. 6(1)(f) of the German Data Protection Act (DSGVO). If the e-mail contact is targeted at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1)(b) of the GDPR.

3. Purpose of data processing

The personal data provided in the contact form is processed solely for the purpose of contacting you. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the submission process is intended to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Length of storage

The data will be deleted as soon as it is no longer required to achieve the purpose of its collection.
This applies to the personal data from the input screen of the contact form and those sent by e-mail when the respective communication with the user has been completed. The communication is considered to have been completed when it is evident that the matter in question has been definitively resolved.

Personal data that was additionally collected during the sending procedure will be deleted at the latest after a period of seven days.

5. Possibility of objection and deletion

The user has the option of revoking his or her consent to the processing of personal data at any time. If the user contacts us, he/she can object to the storage of his/her personal data at any time. In such a case, the communication cannot be continued.

The objection to the storage of personal data can be requested by telephone, post, fax or e-mail using the following contact details:

Lischka GmbH
Boxberger Straße 19
12681 Berlin
Email: info@lischka.berlin

In this case, all personal data stored in the course of contacting us will be deleted.

VII. Data protection for applications and in the application process

The person responsible for the processing collects and processes the personal data of applicants for the purpose of carrying out the application procedure. The processing is carried out via electronic communication when an applicant sends relevant application documents to the controller by electronic means, for example by e-mail. If the data controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application files shall be automatically deleted six months after the notification of rejection, unless otherwise justified by the legitimate interests of the controller. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

VIII. Rights of the data subject

Should your personal data be processed, you are a data subject within the meaning of the GDPR. As a consequence, you have the following rights vis-à-vis the data controller:

1. Right to information

You may request confirmation from the data controller as to whether we are processing or have processed personal data concerning you.

If such processing has taken place, you can request the following information from the data controller:

1. The purposes for which personal data is processed;

2. The categories of personal data that is processed;

3. The recipients or categories of recipients to whom the personal data relating to you has been disclosed or will be disclosed;

4. The scheduled period of storage of the personal data relating to you or, if it is not possible to provide specific information in this regard, criteria for determining the period of storage;

5. The existence of a right to rectification or deletion of personal data relating to you, a right to restriction of processing by the controller or a right to object to such processing;

6. The existence of a right of appeal to a supervisory authority;

7. Any information available on the origin of the data if the personal data has not been collected from the data subject;

You have the right to be informed as to whether your personal data will be transmitted to a third country or an international organisation. In this regard, you can request to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in relation to the transmission.

2. Right to rectification

You have a right to correct and/or add to the personal data held by the data controller if it is incorrect or incomplete. We are required to make the correction immediately.

3. Right to restrict processing

You may ask for the processing of your personal data to be restricted under the following conditions:

1. If you dispute the accuracy of the personal data relating to you for a period enabling the controller to verify the accuracy of the personal data;

2. The processing is unlawful and you refuse the deletion of your personal data and demand the restriction of the use of the personal data instead;

3. The data controller no longer needs the personal data for the purposes of processing, however, you require the data for the assertion, exercise or defence of legal claims; or

4. You have objected to the processing in accordance with Art. 21(1) GDPR and it has not been determined yet whether the legitimate grounds of the controller outweigh your grounds.

If the processing of personal data concerning you has been restricted, then – apart from its storage – this data may only be processed with your consent or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State.

If the limitation of the processing has been restricted for any of the grounds listed above, you will be notified by the data controller before the restriction has been lifted.

4. Right to deletion

a. Obligation to delete

You may request the data controller to delete your personal data without delay and the data controller shall be obliged to delete such data without delay if one of the following reasons applies:

1. Your personal data is no longer necessary for the purposes for which it has been collected or processed in any other way.

2. You revoke your consent on which the processing is based pursuant to Art. 6(1) (a) or Art. 9(2)(a) GDPR and there is no other legal basis for the processing.

3. You object to its processing in accordance with Art. 21(1)GDPR, and there are no overriding legitimate reasons for its continued processing, or you submit an objection to its processing in accordance with Art. 21(2) GDPR.

4. Your personal data has been processed unlawfully.

5. The deletion of your personal data is necessary for compliance with a legal obligation under EU law or the law of the Member States to which the data controller is subject.

6. Your personal data has been processed with regard to information society services offered pursuant to Art. 8 (2) of the Data Protection Act.

b. Transfer of personal data to third parties

If the data controller has made your personal data public and is required to delete it in accordance with Art. 17(1) GDPR, the data controller shall take reasonable steps, including technical measures, with due regard to the available technology and the cost of implementation, to inform data controllers who process the personal data that you, as data subject, have requested them to delete all links to, or copies or replications of, that personal data.

c. Exceptions

There is no right to deletion insofar as the processing is necessary:

1. to exercise the right to freedom of expression and information;

2. to comply with a legal obligation which requires processing under EU or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;

3. for reasons of public interest in the sector of public health as defined in Art. 9(2)(h) and (i), as well as Art. 9(3) GDPR;

4. for the purposes of archiving, scientific or historical research in the public interest or for statistical purposes in accordance with Art. 89(1) GDPR, insofar as the right referred to in Section a) is likely to prevent or seriously prejudice the achievement of the purposes of such processing, or

5. to assert, exercise or defend legal claims.

5. Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the data controller, they are obliged to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed as to these recipients by the data controller.

6. Right to data portability

You have the right to obtain a copy of the personal data you have supplied to the data controller concerning you in a structured, commonly used, machine-readable format. Moreover, you have the right to transmit this data to another data controller without any obstruction from the data controller to whom the personal data has been given, if

1. the processing is based on your consent in accordance with to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on the basis of a contract in accordance with to Art. 6(1)(b) GDPR, and

2. the processing is carried out by means of automated procedures.

In exercising this right, you also have the right to have the data controller transfer your personal data directly to another data controller if this is technically feasible. This action must not affect the freedoms and rights of other persons.

The right to data portability does not apply to personal data processing that is required for the performance of a task that falls within the public interest or that occurs in the exercise of public authority that has been transferred to the data controller.

7. Right to object

Due to reasons related to your particular situation, you have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) or (f) GDPR, including profiling based on those provisions.

The data controller will no longer process the personal data relating to you unless they can prove a compelling, legitimate reason for this which outweighs your interests, rights, and freedoms or the processing serves to assert, exercise, or defend legal claims.

If the personal data relating to you is processed for direct marketing purposes, you have the right to object at any time to such processing; this also applies to profiling insofar as it is associated with such direct marketing.

If you object to your data being processed for direct marketing purposes, your personal data will no longer be processed for such purposes. Notwithstanding the provisions of the 2002/58/EC Directive, you have the possibility to exercise your right to object in relation to the use of information society services by means of automated procedures involving the application of technical specifications.

8. Right to withdraw the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

9. Automated decisions in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, that is likely to have legal effects against you or to affect you significantly in a similar way. This shall not apply if the decision

1. is necessary for either the conclusion or performance of a contract between you and the data controller;

2. is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or

3. is based on your explicit consent.

However, these decisions must not be based on special categories of personal data pursuant to Art. 9(1) of the GDPR, unless Art. 9(2)(a) or (g) GDPR apply and appropriate measures have been taken to protect your rights and freedom as well as your legitimate interests.

In the cases referred to in (1) and (3), the responsible party shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person on the part of the responsible party, to state his or her own position and to challenge the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of the GDPR.

The supervisory authority to which the appeal is submitted will inform you about the status and results of the appeal, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.

IX. Disclosure of personal data to third parties

YouTube

Our website uses plug-ins from YouTube, which is operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

If you visit one of our pages featuring a YouTube plug-in, a connection to the YouTube servers is established. This informs the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used to ensure an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. Further information about the handling of user data can be found in YouTube’s Privacy Policy: https://www.google.de/intl/de/policies/privacy.

X. Website analytics services

1. Google Analytics

This website uses features of the web analytics service Google Analytics. The provider of this service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called ‚cookies‘. These are text files that are stored on your computer and enable an analysis of how you use the website. The information generated by the cookie about your use of the website will typically be transmitted to and stored by Google on servers in the USA. Google Analytics cookies are stored on the basis of Art. 6(1)(f) of the German Data Protection Act (DSGVO). The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

a. IP anonymization

We have activated the IP anonymization feature on this website. This means that your IP address will be truncated by Google within the member states of the European Union or other contracting states to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

b. Browser plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to access the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

c. Objection to the collection of data

You may prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent your information from being collected during future visits to this website: Disable Google Analytics. For more information about how Google Analytics handles user data, see Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en

d. Processing of order data

We have concluded an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

XII. Use of service providers

We use IT service providers to provide services and process your data as well as for the maintenance and upkeep of our website. The service providers process the data exclusively in accordance with our instructions and have been obligated to comply with the applicable data protection provisions. The deployment is necessary to maintain our IT infrastructure.

1. Name and address of the Data Protection Officer

IONOS SE
The Data Protection Officer
Elgendorfer Straße 57
56410 Montabaur

E-Mail: datenschutz@ionos.de

2. General data processing information

2.1 Scope of processing personal data


As a matter of principle, we collect and use personal data of our users only insofar as this is necessary for the processing of our contracts. Once the contractual obligations have been fulfilled, we only process data with your explicit consent. An exception applies in those cases where obtaining prior consent is not possible for factual reasons or the processing of the data is permitted by law.

2.2 Legal basis for the processing of personal data

If we obtain the consent of the data subject for the processing of personal data, Art. 6(1)(a) of the Data Protection Act shall apply. For processing personal data that is necessary for the performance of a contract to which the data subject is a contracting party, Art. 6(1)(b) of the Data Protection Act shall apply. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6(1)(c) GDPR shall apply. If processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights, and freedoms of the person concerned do not outweigh the first-mentioned interest, Art. 6(1)(f) GDPR applies as the legal basis for the processing.

2.3 Deletion of data and length of storage

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage is no longer applicable. Furthermore, storage may take place if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject.
 Blocking or deletion of the data shall also take place if the storage period stipulated by the aforementioned standards expires, unless there is a need for further storage of the data for the purpose of conclusion or fulfilment of a contract.

3. Data protection information of our IT service provider (IONOS)

What data concerning my website visitors does IONOS store?

Following data is collected from website visitors, which is anonymized directly at the time of collection:

  • Referrer (previously visited website)
  • Requested website or file
  • Browser type and browser version
  • Operating system used
  • Type of device used
  • Time of access
  • IP address in anonymized form (only used to determine the location of the access)

Furthermore, there is processing carried out by WebAnalytics .

What is the purpose for the collection of data?

The data is collected for the legitimate interest of ensuring the security and stability of the offer and to enable us to provide the website visitors with the highest level of quality.

How long will the visitor data be stored?

The data will be stored for 8 weeks.

Is any visitor data passed on to third parties?

No, your data will not be passed on to third parties.

Is visitor data transferred to third countries outside the EU?

No, there is no transfer to third countries.