Langheinrich contract textiles
Langheinrich Vertriebs GmbH Logo
Langheinrich contract textiles

Privacy policy

Translation notice: This translation is provided for convenience. In the event of discrepancies, the German version shall prevail.

We are pleased that you are interested in our company. Data protection is particularly important to the management of Langheinrich Vertriebs GmbH. Our website can generally be used without providing personal data. If a data subject wishes to use particular services, however, processing personal data may be necessary. Where processing is required and no statutory basis exists, we obtain the data subject’s consent.

Personal data such as a person’s name, address, email address or telephone number is processed in accordance with the General Data Protection Regulation (GDPR) and the data protection rules applicable to Langheinrich Vertriebs GmbH. This privacy policy explains the nature, scope and purpose of the personal data we collect, use and process and informs data subjects of their rights.

Langheinrich Vertriebs GmbH has implemented technical and organisational measures to protect personal data processed through this website as fully as possible. Internet-based data transmission may nevertheless involve security gaps, so absolute protection cannot be guaranteed. Data subjects may therefore also provide personal data by alternative means, for example by telephone.

1. Definitions

The terms used in this policy are based on the definitions of the GDPR. In particular:

  • Personal data means any information relating to an identified or identifiable natural person (“data subject”).
  • Data subject means an identified or identifiable natural person whose personal data is processed.
  • Processing means any operation performed on personal data, including collection, recording, organisation, storage, alteration, retrieval, use, disclosure, restriction, erasure or destruction.
  • Restriction of processing means marking stored personal data to limit future processing.
  • Profiling means automated processing used to evaluate personal aspects of a natural person.
  • Pseudonymisation means processing personal data so that it can no longer be attributed to a specific data subject without additional information kept separately and protected appropriately.
  • Controller means the person or body that determines the purposes and means of processing personal data.
  • Processor means a person or body that processes personal data on behalf of the controller.
  • Recipient means a person or body to whom personal data is disclosed.
  • Third party means a person or body other than the data subject, controller, processor and authorised persons under their direct authority.
  • Consent means a freely given, specific, informed and unambiguous indication of the data subject’s wishes.

2. Name and address of the controller

The controller for the purposes of the GDPR and other applicable data protection legislation is:

Langheinrich Vertriebs GmbH
Finkenstraße 18
48268 Greven
Germany

Phone: +49 (0) 25 71 - 54 93 54
Email: langheinrich@vestio.de
Website: www.langheinrich.de

3. Cookies

The Langheinrich Vertriebs GmbH website uses cookies. Cookies are text files stored on a computer system through a web browser. Many cookies contain a unique cookie ID that allows websites and servers to distinguish the browser concerned from other browsers.

Cookies enable us to provide more user-friendly services and to optimise information and offers for users. They may, for example, allow a website to remember settings or items in a shopping basket.

Data subjects can prevent cookies from being set at any time through their browser settings and can delete cookies already stored. If cookies are disabled, some website functions may not be fully available.

4. Collection of general data and information

Each time the website is accessed, general data and information may be recorded in server log files. This may include browser type and version, operating system, referring website, pages accessed, date and time, IP address, internet service provider and similar security-related information.

Langheinrich Vertriebs GmbH does not use this data to identify the data subject. It is required to deliver and optimise website content, maintain the functionality and security of our systems and provide law-enforcement authorities with necessary information in the event of a cyberattack. Anonymous server log data is stored separately from personal data supplied by a data subject.

5. Contact via the website

If a data subject contacts the controller by email or through a contact form, the personal data transmitted is stored automatically for processing the enquiry or contacting the data subject. This data is not passed on to third parties.

6. Routine erasure and blocking of personal data

The controller processes and stores personal data only for as long as necessary for the purpose of storage or as required by European or national law. When the purpose ceases to apply or a statutory retention period expires, the data is routinely blocked or erased in accordance with legal requirements.

7. Rights of the data subject

  • Right to confirmation: the data subject may request confirmation as to whether personal data concerning them is being processed.
  • Right of access: the data subject may obtain free information and a copy of stored personal data, including processing purposes, categories, recipients, storage period, available rights, source of the data and information about automated decision-making and transfers to third countries.
  • Right to rectification: inaccurate data may be corrected and incomplete data completed without undue delay.
  • Right to erasure: personal data may be erased where it is no longer necessary, consent is withdrawn and no other legal basis applies, an objection is upheld, processing is unlawful, erasure is legally required or the data was collected in relation to information-society services. Statutory exceptions remain unaffected.
  • Right to restriction: processing may be restricted where accuracy is contested, processing is unlawful but erasure is opposed, the controller no longer needs the data but the data subject requires it for legal claims, or an objection is under review.
  • Right to data portability: data supplied by the data subject may be received in a structured, commonly used and machine-readable format and transmitted to another controller where the legal conditions are met.
  • Right to object: the data subject may object at any time, on grounds relating to their particular situation, to processing based on Article 6(1)(e) or (f) GDPR, including related profiling. An objection to direct marketing always ends processing for that purpose.
  • Automated decision-making: the data subject has the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects, subject to statutory exceptions and safeguards.
  • Right to withdraw consent: consent to the processing of personal data may be withdrawn at any time.

To exercise these rights, data subjects may contact any employee of Langheinrich Vertriebs GmbH.

8. Data protection in applications and recruitment

The controller processes applicant data for recruitment purposes, including electronically submitted applications. If an employment contract is concluded, the data is stored for the employment relationship in accordance with legal requirements. Otherwise, application documents are generally erased two months after rejection unless legitimate interests, such as evidentiary obligations under equal-treatment law, require longer storage.

9. Legal basis for processing

Article 6(1)(a) GDPR is the legal basis where consent is obtained. Article 6(1)(b) applies where processing is necessary for a contract or pre-contractual measures. Article 6(1)(c) applies to legal obligations, Article 6(1)(d) to vital interests and Article 6(1)(f) to legitimate interests that are not overridden by the interests or fundamental rights and freedoms of the data subject.

10. Legitimate interests pursued by the controller or a third party

Where processing is based on Article 6(1)(f) GDPR, our legitimate interest is conducting our business for the benefit of our employees and shareholders.

11. Storage period

The applicable statutory retention period determines how long personal data is stored. After that period, the data is routinely erased unless it remains necessary for performance or preparation of a contract.

12. Statutory or contractual provision of personal data

The provision of personal data may be required by law or contract and may be necessary to conclude a contract. Failure to provide required data may prevent a contract from being concluded. Before supplying data, the data subject may contact an employee, who will explain whether provision is required and the possible consequences of not providing it.

13. Automated decision-making

As a responsible company, we do not use automated decision-making or profiling.

This privacy policy is based on the policy generated by DGD Deutsche Gesellschaft für Datenschutz GmbH in cooperation with privacy lawyer Christian Solmecke.