Use of Google Analytics
We use Google Analytics on our Lamy websites. Google Analytics is a web analysis service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google LLC and Google Ireland Limited hereinafter referred to as "Google").
Type of data processing
Google Analytics sets cookies to perform an analysis of your use of the Lamy websites. Google Analytics receives the following information about you:
- Online tags including cookie tags,
- IP addresses,
- device IDs and
- tags assigned by you.
For example, we receive the following information:
- The number of accesses to certain pages within the website (so-called click path),
- Information on access times (so-called length of stay timeof users),
- Information about pages via which the user reaches the website (so-called referrer URL),
- Information about pages via which the user leaves the website (so-called jump pages),
- Information on the regional origin of the users (e.g. sorted by city or country of origin) and
- Information about the conversion rate ofcertain sub-pages.
The Lamy websites use Google Analytics with the extension "_anonymizeIp()" (so-called IP masking). This causes IP addresses within member states of the European Union are shortened before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and then shortened there.
On behalf of Lamy, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
Legal basis for the processing of data
The information collected in this way is usually transferred to a Google server in the USA and then stored there. There is no adequacy decision for the USA pursuant to Art. 45 GDPR, as the USA cannot provide protection of personal data comparable to that of the GDPR. Access by US authorities to the data stored by Google cannot be ruled out. We have agreed standard contractual terms with Google, which serve as a guarantee for adequate protection of your data. The standard contractual terms are available at https://workspace.google.com/terms/mcc_terms.html.
The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your once given consent at any time and without giving reasons for the future. The legality of the processing carried out on the basis of consent until revocation shall not be affected by the revocation.
By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies which have already been saved may be deleted at any time. This can also be done automatically. If cookies are deactivated for our websites, it may no longer be possible to use all the functions of the websites to their full extent.
In addition, you can prevent Google from collecting the data generated by the cookie pertaining to your use of the Lamy website (including your IP address) and prevent the processing of this data by Google by clicking on the link below and downloading and installing the browser plug-in (https://tools.google.com/dlpage/gaoptout?hl=de).
You can find more information on the terms of use of Google Analytics and on data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.
Duration of storage
We delete this personal data at the latest after 24 months.
Use of the Facebook Pixel
We use the Facebook Pixel analysis tool on our Lamy websites. Facebook Pixel is a Facebook Inc. service. The responsible service provider in the EU is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook Inc. and Facebook Ireland Limited hereinafter referred to collectively as "Facebook").
Type of data processing
We use Facebook Pixel to tailor our advertising to your interests. If you have accessed the Lamy websites via a Facebook ad, the Facebook pixel triggers a section of JavaScript code and stores your user behaviour on our Lamy websites using cookies. These cookies allow Facebook to match your user data with your Facebook account data. If you are logged in as a Facebook user, your visit to our Lamy websites is automatically assigned to your account.
The Facebook Pixel collects the following information and shares it with us:
- information stored in the HTTP header, i.e. IP address, information on the web browser used, page location, document, referrer and the visitor to the web pages,
- pixel-specific data, i.e. pixel ID and data from the Facebook cookie,
- button click data, i.e. all buttons that are clicked by you on the Lamy websites and all pages that are called up as a result of the button clicks,
- optional values when visiting personalised data events, e.g. conversion value and page type and
- form field names that are populated when a product is purchased, e.g. email address, address and quantity of the product purchased.
Legal basis for the processing of data
The information collected in this way is usually transferred to a Facebook server in the USA and then stored there. There is no adequacy decision for the USA pursuant to Art. 45 GDPR, as the USA cannot provide protection of personal data comparable to that of the GDPR. Access by US authorities to the data stored by Facebook cannot be ruled out. We have agreed standard contractual terms with Facebook which make it possible to guarantee adequate protection of your data. The standard contractual terms are to be found at https://www.facebook.com/legal/EU_data_transfer_addendum.
The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your once given consent at any time and without giving reasons for the future. The legality of the processing carried out on the basis of consent until revocation shall not be affected by the revocation.
By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies which have already been saved may be deleted at any time. This can also be done automatically. If cookies are deactivated for our websites, it may no longer be possible to use all the functions of the websites to their full extent.
If you are logged in to Facebook, you can independently change the settings for advertisements under https://www.facebook.com/about/basics/advertising/ad-preferences. Instructions for this can be found at https://de-de.facebook.com/help/568137493302217.
You can find more information on the terms of use of Facebook Pixel and Facebook's data protection policy at https://www.facebook.com/policy.php, https://www.facebook.com/legal/terms/dataprocessing/update and https://de-de.facebook.com/legal/terms/businesstools#.
Duration of storage
We delete this personal data after 90 days.
Facebook Conversion API
We have integrated Facebook Conversion API into this website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, based on the information provided by Facebook, the recorded data is also transmitted to the United States and other Non-EU and Non-EEZ countries.
Facebook Conversion API enables us to record the interactions of our website visitors with our website and to share this information with Facebook to improve the promotional performance with Facebook.
To do this, in particular the time you accessed the site, the website you accessed, your IP address and your user agent, as well as, if applicable, other specific data (e.g., purchased products, value of the shopping cart and currency) are tracked. For a complete overview of the tracked data, please visit: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters.
The use of this service occurs on the basis of your consent pursuant to Art. 6 Sect. 1 lit. a GDPR and § 25 Sect. 1 TTDSG. You may revoke your consent at any time.
If personal data is collected on our website with the assistance of the tool described herein and if it is shared with Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland shall be jointly responsible for the processing of your data, i.e., we are the data controllers (Art. 26 GDPR). This shared responsibility is limited exclusively to the recording of your data and its sharing with Facebook. The processing that occurs after the data has been shared with Facebook is not part of this shared responsibility. The obligations we share responsibility for have been documented in an agreement on joint processing. The concrete wording of this agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for the provision of the data protection information when using the Facebook tool and for the data protection law compliant secure implementation of the tool on our website. Facebook is liable for the data security of Facebook products. You may request information on your rights as a data subject (e.g., request for information) related to the data processed by Facebook directly from Facebook. If you claim any data subject rights with us, we are required to forward your request to Facebook.
The transfer of data to the United States is based on the standard contract clauses of the EU commission. For details please visit: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
In Facebook’s data privacy policy, you will find additional information pertaining to the protection of your privacy: https://de-de.facebook.com/about/privacy/.
Data processing
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
This can also be done automatically.
We use Google Ads for online marketing on our Lamy websites. Google Ads is an online advertising system provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google LLC and Google Ireland Limited hereinafter referred to as "Google").
Type of data processing
We use the tracking tool offered by Google Ads. A so-called conversion occurs when you click on one of our Google Ads and subsequently interact in some way with us, for example by making a purchase or signing up for our newsletter. This allows us to see which keywords, ads and campaigns trigger customer actions. Conversion tracking allows us to evaluate and optimise the success of our advertising measures.
The Google Ads tracking tool uses cookies for this purpose. As soon as you click on one of Lamy's Google Ads and thereby reach one of our Lamy web pages, Google Ads stores a cookie. This cookie allows Google Ads to recognise your web browser. When you visit our Lamy websites and the conversion cookie has not yet expired, Google and ourselves will recognise that you have clicked on a Google Ads ad from Lamy and were thereby redirected to one of the Lamy websites. The cookie with the conversion data is read by Google and statistical evaluations are provided to us by Google. We ourselves do not collect any personal data. We have no influence as to how Google uses the data. Google states that it takes care to maintain the confidentiality and security of conversion data.
We receive the following information through conversion cookies:
- Unique Cookie ID,
- number of ad impressions per placement (frequency),
- last impression (relevant for post-view conversions) and
- opt-out information (marking that you no longer wish to be contacted).
Legal basis for the processing of data
The data collected in this way is usually transferred to a Google server in the USA and stored there. There is no adequacy decision for the USA pursuant to Art. 45 GDPR, as the USA cannot provide protection of personal data comparable to that of the GDPR. Access by US authorities to the data stored by Google cannot be ruled out. We have agreed standard contractual terms with Google, which serve as a guarantee for adequate protection of your data. The standard contractual terms are to be found at https://workspace.google.com/terms/mcc_terms.html.
The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your once given consent at any time and without giving reasons for the future. The legality of the processing carried out on the basis of consent until revocation shall not be affected by the revocation.
By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies which have already been saved may be deleted at any time. This can also be done automatically. If cookies are deactivated for our websites, it may no longer be possible to use all the functions of the websites to their full extent.
In addition, you can prevent Google from collecting the data generated by the cookie pertaining to your use of the Lamy website (including your IP address) and prevent the processing of this data by Google by clicking on the link below and downloading and installing the browser plug-in (https://tools.google.com/dlpage/gaoptout?hl=de).
You can find more information about Google Ads terms of use and Google's data protection policy at https://support.google.com/google-ads/answer/9028179?hl=de&ref_topic=3119071 and at https://policies.google.com/?hl=de.
Duration of storage
We delete this personal data after 90 days.
Use of Google’s "remarketing" or "similar target groups" function
We use Google's "remarketing" or "similar target groups" function on our Lamy websites. Google Analytics is a web analysis service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google LLC and Google Ireland Limited hereinafter referred to as "Google").
Type of data processing
After visiting our Lamy websites, Google's "remarketing" or "similar target groups" function may be used to present you with ads from Google on other websites that contain Lamy-related advertising. To do this, Google analyses your interaction on our Lamy websites and sets cookies that record your visit. A remarketing audience is created based on user behaviour on our Lamy websites and then used to place interest-based Google Ads.
Google may process the following and other data, in connection with the "remarketing" or "similar target groups" function:
- URLs and referral URLs for web pages that trigger a tag,
- user-defined parameters of your tracking tag and
- the resulting inclusion on remarketing lists.
Legal basis for the processing of data
The information obtained is transferred to a Google server in the USA and stored there. There is no adequacy decision for the USA pursuant to Art. 45 GDPR, as the USA cannot provide protection of personal data comparable to that of the GDPR. Access by US authorities to the data stored by Google cannot be ruled out. We have agreed standard contractual terms with Google, which serve as a guarantee for adequate protection of your data. The standard contractual terms are to be found at https://workspace.google.com/terms/mcc_terms.html.
The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your once given consent at any time and without giving reasons for the future. The legality of the processing carried out on the basis of consent until revocation shall not be affected by the revocation.
By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies which have already been saved may be deleted at any time. This can also be done automatically. If cookies are deactivated for our websites, it may no longer be possible to use all the functions of the websites to their full extent.
In addition, you can prevent Google from collecting the data generated by the cookie pertaining to your use of the Lamy website (including your IP address) and prevent the processing of this data by Google by clicking on the link below and downloading and installing the browser plug-in (https://tools.google.com/dlpage/gaoptout?hl=de).
More information on the terms of use of the "Remarketing" or "Similar target groups" function and on Google's data protection policy can be found at https://support.google.com/adspolicy/answer/143465 and at https://policies.google.com/?hl=de.
Duration of storage
We delete this personal data after 90 days.
Google Tag Manager
We use the Google Tag Manager on our Lamy websites. The Google Tag Manager is a service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google LLC and Google Ireland Limited hereinafter referred to as "Google").
Type of data processing
The Google Tag Manager allows sections of code from tracking tools used on Lamy websites to be integrated into our Lamy websites in a structured and simplified manner. The code sections are called tags. The Google Tag Manager ensures that the tags embedded on the Lamy websites can be triggered. When triggered, a tag sends tracking information from our Lamy websites to third party providers such as Google. The Google Tag Manager can also transmit and generate its own cookies. For this purpose, the Google Tag Manager records your IP address.
Legal basis for the processing of data
The information collected in this way is usually transferred to a Google server in the USA and then stored there. There is no adequacy decision for the USA pursuant to Art. 45 GDPR, as the USA cannot provide protection of personal data comparable to that of the GDPR. Access by US authorities to the data stored by Google cannot be ruled out. We have agreed standard contractual terms with Google, which serve as a guarantee for adequate protection of your data. The standard contractual terms are to be found at https://workspace.google.com/terms/mcc_terms.html.
The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your once given consent at any time and without giving reasons for the future. The legality of the processing carried out on the basis of consent until revocation shall not be affected by the revocation.
By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies which have already been saved may be deleted at any time. This can also be done automatically. If cookies are deactivated on our Lamy websites, it may no longer be possible to use all the functions of the websites to their full extent.
In addition, you can prevent Google from collecting the data generated by the cookie pertaining to your use of the Lamy website (including your IP address) and prevent the processing of this data by Google by clicking on the link below and downloading and installing the browser plug-in (https://tools.google.com/dlpage/gaoptout?hl=de).
For more information on the terms of use of the Google Tag Manager and data protection at Google, see https://support.google.com/tagmanager/answer/6102821?hl=de and under https://policies.google.com/?hl=de.
Use of Hotjar
We use the analysis tool Hotjar on our Lamy websites. Hotjar is a service provided by Hotjar Ltd, Dragonara Business Centre, Dragonara Road, Paceville St Julian's STJ 3141, Malta.
Type of data processing
Hotjar enables us to evaluate the behaviour of visitors to Lamy websites, including for example how much time they spend on the websites and which links they click on. Hotjar uses various tools for this purpose, such as heat maps, session recording, incoming feedback, on-site surveys, external link surveys, funnel analytics and cookies.
As a result, Hotjar collects and shares the following information, etc. with Lamy:
- IP address,
- screen size and device type (so-called Unique Device Identifiers),
- browser used,
- mouse movement, clicks and scrolling behaviour,
- location (country only),
- preferred language setting and
- date and time of visit.
Legal basis for the processing of data
Data collected in this way is transferred to servers in Germany, Ireland and the USA. Hotjar uses contracted Sub-processors for this purpose. Currently, these are Datadog for Germany, Amazon Web Services for Ireland and Sentry for the USA. Hotjar reserves the right to use additional contracted Sub-processors and pledges to take appropriate security measures with new partners.
There is no adequacy decision for the USA pursuant to Art. 45 GDPR, as the USA cannot provide protection of personal data comparable to that of the GDPR. Access by US authorities to the data stored by Sentry cannot be ruled out. Hotjar has agreed standard contractual terms with Sentry which ensure that your data is adequately protected. The standard contractual terms are to be found at sentry.io/legal/dpa/.
The legal basis for this processing of data is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. Once you have given your consent, you can revoke it with respect to the future at any time and without giving reasons. The legality of the processing carried out on the basis of consent until revocation shall not be affected by the revocation.
By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies which have already been saved may be deleted at any time. This can also be done automatically. If cookies are deactivated for our websites, it may no longer be possible to use all the functions of the websites to their full extent.
You can find more information on data protection at Hotjar at https://www.hotjar.com/legal/policies/privacy/?tid=331633074810 and https://www.hotjar.com/legal/compliance/gdpr-commitment.
Duration of storage
We delete this personal data after 90 days.
Google Maps
We use Google Maps on our Lamy websites, a map service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google LLC and Google Ireland Limited hereinafter referred to as "Google").
Type of data processing
Google Maps allows us to show you the locations of our dealers on our Lamy websites. In order to integrate Google Maps on our Lamy websites in a data-saving manner, we use the so-called two-click solution. When you visit our Lamy websites, this two-click solution prevents Google Maps from transferring your data to Google. Only when you click on a Google Maps map on our Lamy website and activate it will data be transferred to Google with your consent. Google Maps then collects information about your browser, the device type, operating system, IP address and the date and time of the request, etc.
The Lamy website also offers you the possibility to search for dealers in your area. For this purpose, you can independently enter an address, a place or a country in the search bar. Clicking the button activates Google Maps and the above data is transferred to Google with your consent. You can also perform a search "as seen from your current location". Clicking the button will then transmit your current location to Google with your consent, in addition to the data mentioned above.
Legal basis for the processing of data
The information collected in this way is usually transferred to a Google server in the USA and then stored there. There is no adequacy decision for the USA pursuant to Art. 45 GDPR, as the USA cannot provide protection of personal data comparable to that of the GDPR. Access by US authorities to the data stored by Google cannot be ruled out. We have agreed standard contractual terms with Google, which serve as a guarantee for adequate protection of your data. The standard contractual terms are to be found at https://workspace.google.com/terms/mcc_terms.html.
The legal basis for this processing of data is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your once given consent at any time and without giving reasons for the future. The lawfulness of the processing carried out on the basis of the consent until revocation shall not be affected by the revocation. You can find more information on data protection at Google at https://policies.google.com/privacy?hl=de.
Duration of storage
We delete this personal data after 90 days.
If you contact us via the contact form, the data that you supply is processed in order to respond to your request. The legal basis for data processing is, depending on the content of your request, the necessity to fulfil contractual or pre-contractual obligations pursuant to Art. 6 (1) sentence 1 lit. b GDPR or our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f GDPR to process your request and reply to your message.
This personal data will be deleted six months after we have responded to your enquiry, unless there are statutory retention periods, in particular under commercial and tax law, or another legal basis.
Requesting teaching material
If you are an eligible person requesting educational material, you consent to us using the contact details you provide for the purpose of providing such material.
The legal basis for this processing of data is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your consent with respect to the future at any time and without giving reasons (by email to datenschutzbeauftragter@lamy.de). The legality of the processing carried out on the basis of consent until revocation shall not be affected by the revocation.
After sending the requested teaching material, we will delete the data you provided in the request, unless and insofar as there are legal, in particular commercial and tax law retention periods to the contrary or another legal basis exists.
Newsletter registration
By entering your email address in the newsletter subscription field on the landing page and ticking the box to receive the newsletter, or by ticking the box to receive the newsletter when requesting educational material, you consent to us using your email address for this purpose. When you register to receive the newsletter, your IP address as well as the date and time of your request will be stored in addition to your email address, so that we can provide evidence in the event of any misuse of the email address.
The legal basis for this processing of data is your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your consent with respect to the future at any time and without giving reasons (by email to datenschutzbeauftragter@lamy.de or via the unsubscribe link provided in each email). The legality of the processing carried out on the basis of consent until revocation shall not be affected by the revocation.
After you have revoked your consent, we will delete the data provided by you in connection with the enquiry, unless and insofar as there are legal obligations, in particular relating to commercial and tax law retention periods or another legal basis.
Application
Should you submit your applicant data to us via the online forms provided or send us your applicant data by post or email, we will only process this data for the intended purpose and within the scope of the application procedure in accordance with statutory provisions. Generally, we collect the following information:
- First name and surname
- Contact details and
- the documents pertaining to the application, such as cover letter, curriculum vitae and references.
Applicants may also send us additional information at their own discretion. If you use the online forms, the data is transmitted to us in an encrypted form in accordance with the technical state-of-the-art.
The personal data you provide will be processed for the purpose of deciding on the establishment of an employment relationship in accordance with Art. 88 para. 1 GDPR in conjunction with. § Section 26 (1) sentence 1 BDSG. The provision of your personal data is necessary for the execution of the application process and for the decision on the establishment of an employment relationship.
We will store this data for the period of the application process. Should your application not be successful or should you withdraw your application, your data will be deleted after six months, unless there is another legal basis for its retention.
Should your application be successful, we will save the data for your personnel file. This is required for the implementation of the employment relationship pursuant to Art. 88 para. 1 GDPR in conjunction with § 26 para. 1 sentence 1 BDSG.
