Issue date: May 22, 2018
Whether you are a customer, supplier, candidate, prospect, or visitor to our website, we respect and protect your privacy and personal information.
Pseudonymised use of the website
Using the webpages of the Lutze Ltd. is basically possible without any indication of personal data. However, if a person concerned wishes to use our company's special services through our website, personal data processing may be required. If the processing of personal data is required and there is no legal basis for such processing, we generally seek the consent of the person concerned.
Pseudonymised usage of data is not merged with the data of the bearer of the pseudonym. The creation of pseudonymous usage profiles does not take place.
The processing of personal data, such as name, address, email address or telephone number of a concerned person is always in accordance with the General Data Protection Regulation and in accordance with the country-specific data protection provisions applicable to Lutze Ltd..
Name and address of the controller
Responsible in the sense of the General Data Protection Regulation, other data protection laws in the member states of the European Union and other provisions with data protection character is Lutze Ltd., Unit 3 Sandy Hill Park, Sandy Way, Amington, Tamworth, Staffs, B77 4DU
As the responsible body, we take all legally required measures to protect your personal data.
Data Protection Officer
Unit 3 Sandy Hill Park,
Sandy Way, Amington
Tamworth, Staffs, B77 4DU
When we process personal information, it means that we use this e.g. for collecting, storing, using, transmitting, deleting or blocking purposes.
- Customers, suppliers, applicants, prospects who are natural persons
- All other natural persons who are in contact with us, as well as representatives or employees of legal entities, but also visitors to our website and persons who register on the website.
Legal basis and collection of personal data
We collect your personal information when you contact us or when you use our products and services as part of existing business relationships. Legal bases are legal regulations and contracts.
We process the following personal data:
- Personal identification information
For example, first and last name, address, date and place of birth, nationality, email address, telephone number.
- Order and sales data
For example, IBAN, payment data
- Data about your financial situation
For example, payment behavior, creditworthiness, late payment
- Data on your online behavior and preferences
For example, IP addresses, unique mapping characteristics, data about your visits to our website
- Information about your interests and wishes, which you tell us
For example, through our customer dialogue or our website
Purpose of data processing
In order to fulfill our contracts, we have to process your data.
The purposes of data processing are primarily based on business relationships and your requests.
As these data enjoy special protection, they are only collected to the extent required.
Analysis of credit risk and behavior (scoring)
When placing orders, we are required to verify your creditworthiness. In doing so, we apply certain statistical risk models to your personal data. For more information, see the terms and conditions of each product or service and your contract documentation. Details of the respective purposes of the data processing can be found in the contract documents and our business and product conditions.
Processing of data outside the EU
Outside the EU, we process data in the US and China.
Third party content (such as LinkedIn, Xing, YouTube videos, Google maps, etc.) may also be included on our website. The providers of this content store usually cookies on the computers of users. This can be prevented by appropriate settings of your browser, which, however, may mean that this content is not displayed correctly. In addition, many (third party) providers store the IP address of the users in order to be able to send the corresponding content to the user's browser. On the use of the IP address at the (third) provider, we have no influence.
Our website makes use of so-called cookies in order to recognize repeat use of our website by the same user/internet connection subscriber. Cookies are small text files that your internet browser downloads and stores on your computer. They are used to improve our website and services. In most cases these are so-called "session cookies" that are deleted once you leave our website. To an extent, however, these cookies also pass along information used to automatically recognize you. Recognition occurs through an IP address saved to the cookies. The information thereby obtained is used to improve our services and to expedite your access to the website. You can prevent cookies from being installed by adjusting the settings on your browser software accordingly. You should be aware, however, that by doing so you may not be able to make full use of all the functions of our website.
For technical reasons, data such as the following, which your internet browser transmits to us or to our web space provider (so called server log files), is collected: - type and version of the browser you use - operating system - websites that linked you to our site (referrer URL) - websites that you visit - date and time of your visit - your Internet Protocol (IP) address. This anonymous data is stored separately from any personal information you may have provided, thereby making it impossible to connect it to any particular person. The data is used for statistical purposes in order to improve our website and services.
Use of Google Analytics with anonymization
Our website uses Google Analytics, a web analysis service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, hereinafter referred to as “Google“. Google Analytics employs so-called “cookies“, text files that are stored to your computer in order to facilitate an analysis of your use of the site. The information generated by these cookies, such as time, place and frequency of your visits to our site, including your IP address, is transmitted to Google’s location in the US and stored there. We use Google Analytics with an IP anonymization feature on our website. In doing so, Google abbreviates and thereby anonymizes your IP address before transferring it from member states of the European Union or signatory states to the Agreement on the European Economic Area. Google will use this information to evaluate your usage of our site, to compile reports on website activity for us, and to provide other services related to website- and internet usage. Google may also transfer this information to third parties if this is required by law or to the extent this data is processed by third parties on Google´s behalf.
Google states that it will in never associate your IP address with other data held by Google. You can prevent cookies from being installed by adjusting the settings on your browser software accordingly. You should be aware, however, that by doing so you may not be able to make full use of all the functions of our website.
Google also offers a disabling option for the most common browsers, thus providing you with greater control over the data which is collected and processed by Google. If you enable this option, no information regarding your website visit is transmitted to Google Analytics. However, the activation does not prevent the transmission of information to us or to any other web analytics services we may use. For more information about the disabling option provided by Google, and how to enable this option, visit https://tools.google.com/dlpage/gaoptout?hl=en
Use of Google+ recommendation components
Our website employs the “+1“-buttom from Google+ belonging to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, hereinafter referred to as “Google“. Each time our website receives an access request equipped with a “+1“ component, the component prompts your browser to download an image of this component from Google. Through this process, Google is informed precisely which page of our website is being visited. As specified by Google, your visit undergoes additional analysis in the event you are not logged into your Google account. If you access our site while logged into Google and press the “+1" button, Google can collect information about your Google account, websites you recommend as well as your IP address, along with other browser-related information. This allows your “+1“ recommendation to be stored and publicized. Your Google “+1“ recommendation can then appear as a reference in other Google services, such as search results, your Google account or other places, such as on websites and ads in the internet, , together with your account name and, if applicable, a picture you provided to Google. Furthermore, Google can link your visit to our site with data stored by Google. Google also records this information for the purpose of further improving Google services. If you wish to minimize the collection of information by Google as previously described, you must log out of your Google account before visiting our website. You can access Google‘s data protection policies relating to the “+1“ button together with all relevant information on the collection, transfer and use of data by Google, your rights in this regard as well as your profile settings options at the following link: https://developers.google.com/+/web/buttons-policy
Use of Facebook components
Our website employs components provided by facebook.com. Facebook is a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Each time our website receives an access request equipped with a Facebook component, the component prompts your browser to download an image of this Facebook component. Through this process, Facebook is informed precisely which page of our website is being visited. When you access our site while logged into Facebook, Facebook uses information gathered by this component to identify the precise page you are viewing and associates this information to your personal account on Facebook. Whenever you click on the “Like“ button, for example, or enter a comment, this information is transmitted to your personal account on Facebook and stored there. In addition, Facebook is informed of your visit to our website. This occurs regardless of whether you click on a component or not. If you wish to prevent the transfer to and storage of data by Facebook about you and your interaction with our website, you must first log out of Facebook before visiting our website. The data protection policies of Facebook provide additional information, in particular about the collection and use of data by Facebook, your rights in this regard as well as the options available to you for protecting your privacy: https://de-de.facebook.com/about/privacy/ In addition, tools are freely available on the market that can be used to block Facebook social plug-ins with add-ons from being added to all commonly used browsers: http://webgraph.com/resources/facebookblocker/ You can find an overview of Facebook plugins at https://developers.facebook.com/docs/plugins/
Use of Twitter recommendation components
Use of YouTube components with enhanced data protection mode
On our website we use components (videos) of YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company belonging to Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA. To this end, we use the “ - enhanced data protection mode - ” option provided by YouTube. When you display a page that has an embedded video, a connection will be made to the YouTube server and the content will appear on the website via a communication to your browser. According to the information provided by YouTube, in “ - enhanced data protection mode -”, data is only transferred to the YouTube server, in particular which of our websites you have visited, if you watch the video. If you are logged onto YouTube at the same time, this information will be matched to your YouTube member account. You can prevent this from happening by logging out of your member account before visiting our website. Further information about data protection by YouTube is provided by Google under the following link: https://www.google.de/intl/de/policies/privacy/
Use of Xing recommendation components
Use of LinkedIn recommendation components
Our website employs components provided by the network LinkedIn. LinkedIn is a service of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time our website receives an access request equipped with a LinkedIn component, the component prompts your browser to download an image of this component from LinkedIn. Through this process, LinkedIn is informed exactly which page of our website is being accessed. By clicking the LinkedIn “recommend button“ while logged into your LinkedIn account, you can link content from our website to your LinkedIn profile. This allows LinkedIn to associate your visit to our site with your LinkedIn account.
The use of Instagram
We promote the service Instagram on our website. Instagram is a service of Instagram Inc. By means of the integrated "Insta" button on our page, Instagram receives the information that you have accessed the corresponding page of our website. If you are logged into Instagram, Instagram may assign the visit to our site to your Instagram account and link the data by this means. The data transmitted by clicking the "Insta" button is stored by Instagram. You can find more information regarding the purpose and scope of data collection, its processing and use, as well as your related rights and settings options for protecting your privacy in the Instagram data protection notice under https://help.instagram.com/155833707900388.
To prevent your visit to our site from being accessed by your Instagram account, you must log out of your Instagram account before visiting our site.
Use of Pinterest
Our website employs the services of pinterest.com. Pinterest.com is a service of Pinterest, Inc., 808 Brannan St, San Francisco, CA 94103, USA. Through the “Pin it“ button integrated into our website, Pinterest is informed that you have accessed that particular page of our site. If you are logged into Pinterest, Pinterest can associate your visit to our site with your Pinterest account and thereby create a link to the data collected. Pinterest stores the data that is transferred through clicks on “Pin it“ buttons. You can find more information with respect to the purpose and extent of data collected, how it is processed and used as well as your rights in this regard and what settings you can use to protect your privacy by consulting the Pinterest data protection policy, which you can access at http://pinterest.com/about/privacy/.
To prevent Pinterest from associating your visit to our website to your Pinterest account, you must first log out of your Pinterest account before visiting our site.
The use of Odeki
The use of Flickr
Our website offers you the opportunity to subscribe to our newsletter. The newsletter provides you periodically with information about our services. To receive our newsletter, we require a valid email address. We will review the email address you provide for the purpose of determining whether you are in fact the owner of the email address provided or whether the actual owner of said address is authorized to receive the newsletter. When subscribing to our newsletter, we will store your IP address as well as the date and time you subscribed. This serves to protect us in the event a third party improperly and without your knowledge makes use of your email address to subscribe to our newsletter. We will not collect any other data. The data thereby collected is used solely for the purpose of receiving our newsletter. No data is transferred to third parties. Nor is any of this information matched to any information that other components of our website may collect. You may cancel your subscription to the newsletter at any time. You will find additional details in the email confirming your subscription as well as in each newsletter. If you have subscribed to our newsletter service, we will send information on company news, e.g. via fax or email. You can unsubscribe from any of such service offers at any time sending an email to sales.gb(at)lutze.co.uk, or by phone, +44 1827 31333 0. If you refer one of our webpages to a friend or acquaintance using the service “send page by email,” your information will be used to send that email in order to inform the recipient about the sender. Your information will not be used for other purposes and will neither be saved permanently.
On our website we offer you the opportunity to contact us, either by email and/or by using a contact form. In such event, information provided by the user is stored for the purpose of facilitating communications with the user. No data is transferred to third parties. Nor is any of this information matched to any information that may be collected by other components of our website.
Publication of vacancy announcements / job applications
E-mails for applications will be kept confidential by us and will only be processed by the employees concerned. The transmission of this data is not encrypted.
We electronically collect and process your application data for the purpose of completing the application process. If your application results in the conclusion of an employment contract, the data collected from you may be stored in your personnel file for purposes of normal organizational and administrative processes in compliance with appropriate legal requirements.
Your personal data is stored by taking all technical and organizational possibilities so that it is not accessible to third parties.
We would like to expressly point out that the transmission of data via the Internet (e.g., by e-mail) can offer security vulnerabilities. It is therefore impossible to safeguard the data completely against access by third parties. We cannot assume any liability for damages arising as a result of such security vulnerabilities.
General Legal Disclaimer
The use by third parties of all published contact details for the purpose of advertising is expressly excluded. We reserve the right to take legal steps in the case of the unsolicited sending of advertising information; e.g., by means of spam mail.
Regarding copyrights and used trademarks on our homepage: Protected trademarks and trade names are not identifiable at all times. This does not mean that it is a matter of free names in terms of trademark and copyright law. It can not be concluded from its publication, that terms and images used on this website are free from third party rights. Regardless of subsequent patent protection, information will be published. Trade names are used without the warranty of their free usability. Texts, images and data were processed with the utmost care at the time of their compilation. We therefore object any legal responsibility or liability. We welcome suggestions and comments that serve correction or truth. The author does not assume responsibility for the contents of the documents.
Rights of the person concerned
Right to confirmation
Each person concerned has the right, as granted by the European Regulators and Regulators, to require the controller to confirm whether personal data relating to him / her is being processed. If an affected person wishes to make use of this confirmation right, they can contact our data protection officer or another employee of the controller at any time.
Right to information
Any person concerned by the processing of personal data shall have the right, granted by the European Directive and Regulatory Authority, at any time to obtain from the data controller information free of charge on the personal data stored about him and a copy of that information. Furthermore, the European legislator and regulator has provided the person concerned with the following information:
- the processing purposes
- the categories of personal data being processed
- the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations
- if possible, the planned duration for which the personal data will be stored or, if that is not possible, the criteria for determining that duration
- the right of rectification or erasure of the personal data concerning them or restriction of processing by the controller or a right to object to such processing
- the existence of a right of appeal to a supervisory authority
- if the personal data are not collected from the person concerned: all available information on the source of the data
- the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) of the the EU General Data Protection Regulation (GDPR) and - at least in these cases - meaningful information on the logic involved and the scope and intended impact of such processing on the person concerned.
In addition, the person concerned has a right of access as to whether personal data has been transmitted to a third country or to an international organization. If that is the case, then the person concerned has the right to obtain information about the appropriate guarantees in connection with the transfer.
If an affected person wishes to exercise this right to information, they can contact our data protection officer or another employee of the controller at any time.
Right to rectification
Any person affected by the processing of personal data has the right granted by the European legislator to demand the immediate correction of inaccurate personal data concerning him / her. Furthermore, the person concerned has the right to request the completion of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.
If an affected person wishes to exercise this right of rectification, they can contact our data protection officer or another member of the data controller at any time.
Right to cancellation (right to be forgotten)
Any person affected by the processing of personal data shall have the right granted by the European Directives and Regulators to require the controller to immediately delete the personal data concerning him, provided that one of the following reasons is satisfied and the processing is not required:
- The personal data has been collected or otherwise processed for such purposes for which they are no longer necessary.
- The person concerned revokes the consent on which the processing was based on Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR and lacks any other legal basis for the processing.
- The person concerned submits an objection to the processing pursuant to Art. 21 (1) GDPR, and there are no legitimate reasons for the processing, or the person concerned appeals pursuant to Art. 21 (2) GDPR the processing.
- The personal data were processed unlawfully.
- The deletion of personal data is required to fulfill a legal obligation under Union or national law to which the controller is subject.
- The personal data were collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.
If one of the above reasons is correct and an affected person wishes to arrange for the deletion of personal data stored by Lutze Ltd., they may at any time contact our data protection officer or another employee of the controller. The data protection officer of Lutze Ltd. or another employee will arrange that the deletion request be fulfilled immediately.
If the personal data have been made public by Lutze Ltd. and if our company is responsible for deleting personal data as the person responsible pursuant to Art. 17 para. 1 GDPR, Lutze Ltd. shall take appropriate measures, taking into account the available technology and the implementation costs of a technical nature, to inform other data controllers processing the published personal data that the person concerned has deleted – from all other data controllers – any links to such personal data or copies or replications of such personal data as far as the processing is not required. The data protection officer of Lutze Ltd. or another employee will arrange the necessary in individual cases.
Right to restriction of processing
Any person affected by the processing of personal data has the right, granted by the European directive and regulatory authority, to require the controller to restrict the processing if one of the following conditions applies:
- The accuracy of the personal data is contested by the person concerned for a period of time that enables the person responsible to verify the accuracy of the personal data.
- The processing is unlawful, the person concerned refuses to delete the personal data and instead requests the restriction of the use of personal data.
- The data controller no longer needs the personal data for processing purposes, but the person concerned requires them to assert, exercise or defend their rights.
- The person concerned has objection to the processing acc. Art. 21 para. 1 GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh those of the person concerned.
If one of the above-mentioned conditions exists and an affected person wishes to request the restriction of personal data stored by Lutze Ltd., they can contact our data protection officer or another member of the data controller at any time. The data protection officer of Lutze Ltd. or another employee will initiate the restriction of processing.
Right to data portability
Any person affected by the processing of personal data shall have the right conferred by the European Directives and Regulations to obtain the personal data concerning him / her provided to a controller by the person concerned in a structured, common and machine-readable format. It also has the right to transfer the data to another person responsible without hindrance by the controller to whom the personal data was provided, given that the processing is based on the consent pursuant to Article 6 (1) (a) of the GDPR or Article 9 (1) (b) 2 (a) of the GDPR or on a contract pursuant to Article 6 (1) (b) of the GDPR and processing by means of automated processes, unless the processing is necessary for the performance of a task of public interest or in the exercise of public authority, which has been assigned to the responsible person.
Furthermore, in exercising their right to data portability under Article 20 (1) of the GDPR, the person concerned has the right to obtain that the personal data are transmitted directly from one controller to another, insofar as this is technically feasible and if so this does not affect the rights and freedoms of others.
In order to assert the right of data transferability, the person concerned may at any time contact the data protection officer appointed by Lutze Ltd. or another employee.
Right to objection
Any person concerned by the processing of personal data shall have the right conferred by the European directive and regulatory authority at any time, for reasons arising from its particular situation, against the processing of personal data relating to it pursuant to Article 6 (1) (e) or GDPR takes an objection. This also applies to profiling based on these provisions.
Lutze Ltd. will no longer process the personal data in the event of an objection, unless we can prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the person concerned, or the processing is the assertion, exercise or defense of legal claims.
Lutze Ltd. processes personal data in order to operate direct mail, the person concerned has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to the profiling, as far as it is associated with such direct mail. If the person concerned objects to Lutze Ltd. for the purposes of direct marketing, Lutze Ltd. will no longer process the personal data for these purposes. In addition, the person concerned has the right, for reasons arising from his / her particular situation, against the processing of personal data concerning him or her, for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. GMOs are invited to submit an objection unless such processing is necessary to fulfill a task of public interest.
In order to exercise the right to object, the person concerned can directly contact the data protection officer of Lutze Ltd. or another employee. The person concerned is also free, in the context of the use of information society services, notwithstanding Directive 2002/58 / EG, to exercise his right of opposition by means of automated procedures using technical specifications.
Automated decisions in individual cases including profiling
Any person concerned by the processing of personal data shall have the right, as granted by the European legislature, not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on it or, in a similar manner, significantly affects it; unless the decision (1) is necessary for the conclusion or performance of a contract between the person concerned and the controller, or (2) is permitted by Union or Member State legislation to which the controller is subject, and that legislation provides for appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the person concerned; or (3) with the express consent of the person concerned.
If the decision (1) is required for the conclusion or the performance of a contract between the person concerned and the person responsible or (2) it takes place with the express consent of the person concerned, the Lutze Ltd. takes appropriate measures to protect the rights and freedoms as well as the authorized persons Interests of the person concerned, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and to contest the decision.
If the person concerned wishes to enforce automated decision-making rights, they may contact our data protection officer or other data controller at any time.
If you have given us consent to the processing of personal data for specific purposes, the processing of such data is lawful. You can revoke your consent at any time. This also applies to the revocation of declarations of consent which you have submitted to us before the validity of the GDPR (Basic Data Protection Regulation), before May 25, 2018. The revocation of consent does not affect the legality of the data processed until the revocation.
Withdrawal of consent – data and change requests
Any person affected by the processing of personal data has the right, granted by the European directive and regulatory authority, to revoke consent to the processing of personal data at any time. You may revoke any permission given to us to use your personal information at any time.
Under the Data Protection Act, you have a right to free information about your stored data and, if necessary, a right to correct, block or delete this data. Your data will be deleted, if not contrary to legal regulations.
Case-specific right of objection
You have the right to object to the processing of your personal data for reasons that arise from your particular situation. The prerequisite for this is that the data processing takes place in the public interest or on the basis of a balance of interests. This also applies to profiling.
In the event of an objection, we will no longer process your personal data. Unless we can provide compelling legitimate grounds for processing these data that outweigh your interests, rights and freedoms. Or your personal data serve the assertion, exercise or defense of legal claims.
Objection to the processing of your data for our direct mail
In individual cases, we use your personal data for our direct mail. You have the right to object to this at any time; this also applies to profiling when it comes to direct mail.
In the event of an objection we will no longer process your personal data for these purposes.
Information, deletion and correction requests and the contradiction to your data and any suggestions you may send at any time to the following address:
Data Protection Officer
Unit 3 Sandy Hill Park,
Sandy Way, Amington
Tamworth, Staffs, B77 4DU
or by email to: data-protection(at)lutze.co.uk
We do not store your data longer than we need for the respective processing purposes.
If the data is no longer required for the fulfillment of contractual or legal obligations, these are regularly deleted, unless their temporary storage is still necessary.
Reasons i.e. can be
- The fulfillment of commercial and tax retention requirements:
In particular the Commercial Code and the Tax Code. The deadlines for storage and documentation specified there are up to ten years.
- The receipt of evidence for legal disputes within the framework of the statutory statute of limitations:
Civil law periods of limitation may be up to 30 years, whereby the regular limitation period is three years.
We assure that we will not disclose your personal data to third parties without your explicit consent, unless we are legally obliged to do so.
Our service providers may also receive data to meet the purposes described if they meet specific confidentiality requirements. These can be, for example, companies in the categories of IT services, logistics, printing services, telecommunications, web hosting, shredding. All service providers receive order processing and are obliged to confidentiality.