I. Name and Address of the Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR), other national data protection laws of the member states, and other data protection provisions is:

Olga Gavrikova
Tirschenreuter Ring 71
12279 Berlin
Germany
Tel.: +49 176 61879445
E-mail: info@la-ol.de
Website: la-ol.com

II. General Information on Data Processing

1. Scope of Application

This privacy policy informs users of this website, in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the Telecommunications-Telemedia Data Protection Act (TDDDG), about the type, scope, and purpose of the collection and use of personal data by the data controller.

The data controller takes your data protection very seriously and treats your personal data confidentially and in accordance with legal regulations.

Please note that data transmission over the internet may inherently have security vulnerabilities. Complete protection against access by third parties is not technically feasible.

2. Legal Basis for the Processing of Personal Data

  • Where we obtain the consent of the data subject for processing operations involving personal data, Art. 6(1)(a) GDPR serves as the legal basis.
  • Where processing of personal data is necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required for the performance of pre-contractual measures.
  • Where processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.
  • Where processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6(1)(d) GDPR serves as the legal basis.
  • Where processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and the interests, fundamental rights, and freedoms of the data subject do not override those interests, Art. 6(1)(f) GDPR serves as the legal basis for processing.
  • Where information is stored on or read from end devices, the legal basis is additionally governed by § 25 TDDDG. Technically necessary operations are governed by § 25(2) TDDDG; non-essential operations are generally governed by § 25(1) TDDDG.

3. Data Deletion and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may continue beyond this point if provided for by European or national legislators in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless further storage is necessary for the conclusion or performance of a contract.

III. Provision of the Website and Creation of Log Files

1. Access Data

a. Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device. The following data is collected and stored as server log files:

  • Information about the browser type and version used
  • The user’s operating system
  • The user’s internet service provider
  • The user’s IP address
  • Date and time of access
  • Websites accessed from the user’s system via our website

The collected data serves the technical provision and security of the website. The controller reserves the right to subsequently review server log files if there are concrete indications of unlawful use. The IP address will be anonymized or deleted after seven days at the latest, unless a legal retention obligation applies.

b. Legal Basis for Data Processing

The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR.

c. Purpose of Data Processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s device. For this purpose, the user’s IP address must remain stored for the duration of the session.

Storage in log files is carried out to ensure the functionality of the website and the security of our information technology systems. No evaluation of the data for marketing purposes takes place in this context.

d. Storage Duration

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collected to provide the website, this is the case when the respective session ends.

In the case of storage in log files, this is the case after seven days at the latest. Further storage is possible; in this case, IP addresses are deleted or pseudonymized so that assignment to the accessing client is no longer possible.

e. Objection and Removal Options

The collection of data for providing the website and the storage of data in log files is essential for the operation of the website. Consequently, users have no right to object.

2. Cookies

a. Description and Scope of Data Processing

This website uses cookies and comparable technologies. These are small text files or other information that can be stored on or read from your end device.

Upon your first visit to our website, you will be shown a so-called “cookie banner” through which you can decide whether and which non-technically essential cookies and comparable technologies may be set or used. Your consent can be revoked or adjusted at any time via the consent management tool used.

Common browsers also offer the option to disable cookies. Note: If you make such settings, we cannot guarantee that you will be able to access all functions of this website without restrictions.

We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.

The following data in particular may be stored and transmitted via cookies:

  • Language settings
  • Items in a shopping cart
  • Log-in information

When you access our website, you will be informed about the use of non-technically essential cookies and comparable technologies and, where required, asked for your consent. Reference to this privacy policy is also provided in this context.

b. Legal Basis for Data Processing

  • For technically essential cookies and comparable technologies, the legal basis for storing information on your end device and accessing information already stored there is § 25(2) TDDDG.
  • Where cookies or comparable technologies are not technically essential, storage of information on your end device and access thereto occurs exclusively on the basis of your consent pursuant to § 25(1) TDDDG.
  • Where personal data is subsequently processed, such processing occurs:
    • Where consent exists, on the basis of Art. 6(1)(a) GDPR;
    • For the performance of pre-contractual measures or fulfillment of a contract, on the basis of Art. 6(1)(b) GDPR;
    • For compliance with legal obligations, on the basis of Art. 6(1)(c) GDPR;
    • Otherwise, where applicable, on the basis of Art. 6(1)(f) GDPR.

c. Purpose of Data Processing

The purpose of using technically essential cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies; for these, it is necessary that the browser is recognized again after a page change.

Non-technically essential cookies and comparable technologies are used only with your consent. They serve specifically for analytics, reach measurement, marketing, and tracking purposes.

d. Storage Duration, Objection and Removal Options

Cookies are stored on the user’s computer and transmitted from there to our site. Therefore, as a user, you generally have control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Already stored cookies can be deleted at any time.

Consent to non-technically essential cookies and comparable technologies can also be revoked or adjusted at any time via the cookie settings.

IV. Analytics Tools – Tracking and Marketing Services

1. Legal Basis for Processing Personal Data

The analytics, tracking, and marketing measures listed below are used only to the extent that you have previously consented to them.

  • The legal basis for storing information on your end device and accessing information already stored there is § 25(1) TDDDG.
  • The legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.

2. Purpose of Data Processing

The analytics, tracking, and marketing measures employed are intended to statistically record the use of our website, measure reach, continuously optimize our offerings, and track the effectiveness of advertising and partner measures.

The respective data processing purposes and data categories are specified in the descriptions of the individual services below. You can revoke or adjust any consent given at any time with future effect via the cookie settings.

3. Google Analytics

Where you have consented, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics is activated only if you have consented to the corresponding category. Without your consent, Google Analytics will not be loaded.

Google Analytics uses cookies and comparable technologies to evaluate the use of our website. In particular, information about your use of the website, technical information about your browser and end device, pseudonymous identifiers, referrer information, interaction data, and IP-related information may be processed.

  • The legal basis for storing and reading corresponding information on your end device is § 25(1) TDDDG.
  • The legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.

You can revoke your consent at any time with future effect via the cookie settings.

It cannot be excluded that, in the course of using this service, personal data may also be transmitted to servers in third countries, particularly in the USA. There, a level of data protection may exist that does not correspond in all respects to that in the European Union.

4. Google Ads Conversion Tracking

Where you have consented, we use Google Ads Conversion Tracking provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads Conversion Tracking is activated only if you have consented to the corresponding category. Without your consent, the service will not be loaded.

If you reach our website via a Google ad, a cookie or comparable technology may be stored on your end device to track whether a specific user action has occurred on our website.

In particular, information about ad clicks, page views, conversion events, technical device information, identifiers, and, where applicable, IP-related information may be processed.

  • The legal basis for storing and reading corresponding information on your end device is § 25(1) TDDDG.
  • The legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.

You can revoke your consent at any time with future effect via the cookie settings.

It cannot be excluded that, in the course of using this service, personal data may also be transmitted to servers in third countries, particularly in the USA. There, a level of data protection may exist that does not correspond in all respects to that in the European Union.

V. Adcell Affiliate Program

We use the affiliate program of Firstlead GmbH, Rosenfelder Straße 15–16, 10315 Berlin (“Adcell”) on our website.

If you access our website via an affiliate link, Adcell can track that the access occurred via a specific advertising medium. For this purpose, Adcell uses cookies and comparable technologies.

Processing serves to attribute advertising successes and to settle commissions within the framework of the affiliate program.

The storage of information on your end device and access thereto occurs exclusively on the basis of your consent. Further processing of personal data also occurs on the basis of your consent.

In particular, cookie IDs, timestamps, information about the advertising medium used, and usage data may be processed. In this context, the IP address may also be transmitted.

The recipient of the data is Firstlead GmbH as the operator of Adcell.

The storage duration of cookies is partly session-based and otherwise program-dependent.

You can revoke your consent at any time via the cookie settings.

VI. Social Media Plug-ins

Note: The following provisions apply only to the extent that the respective social media plug-ins are actually integrated into the website. If individual plug-ins are not used, the relevant subsections do not apply.

We use social plug-ins or comparable integrations of social networks on our website only to the extent that this is technically and legally permissible.

Where non-technically essential information is stored on or read from your end device via plug-ins or embedded content, or personal data is transmitted to third-party providers, this occurs only in accordance with the respective applicable legal bases and, where required, only after your consent.

1. Facebook

Where plug-ins from Facebook are used on our website, a connection to Facebook servers may be established when you access a corresponding page. In particular, Facebook may receive information about your visit to our website, your IP address, and your interactions with the plug-in.

If you do not want Facebook to associate the data collected via our website with your Facebook account, you must log out of Facebook before visiting our website.

For information on the purpose and scope of data collection and the further processing and use of data by Facebook, please refer to Facebook’s privacy policy.

2. Instagram

Where plug-ins from Instagram are used on our website, a connection to Instagram servers may be established when you access a corresponding page. In particular, Instagram may receive information about your visit to our website, your IP address, and your interactions with the plug-in.

If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website.

3. LinkedIn

Where plug-ins from LinkedIn are used on our website, a connection to LinkedIn servers may be established when you access a corresponding page. In particular, LinkedIn may process usage data, device information, login data, cookies, and IP addresses.

If you do not want LinkedIn to associate the data collected via our website with your LinkedIn account, you must log out of LinkedIn before visiting our website.

For information on the purpose and scope of data collection and the further processing and use of data by LinkedIn, please refer to LinkedIn’s privacy policy.

VII. Registration

1. Description and Scope of Data Processing

On our website, we offer users the opportunity to register by providing personal data. After the registration process, we use external technical service providers to manage this data. These include, in particular, care4digital.com and seitup.de. Further information can be found at digiway.dev/privacy-policy. The data is entered into an input mask, transmitted to us, and stored.

The following data may be collected during the registration process:

  • First name, last name, company name (if applicable)
  • Address
  • Telephone number
  • Tax number (if applicable)
  • Authorized representative of the company (if applicable)
  • Company website (if applicable)
  • Company register entry (if applicable)
  • Images and product descriptions (if applicable)
  • E-mail address
  • Password

At the time of registration, the following data is also stored:

  • IP address of the user
  • Date and time of registration

2. Legal Basis for Data Processing

  • Where the user has given consent, the legal basis for processing the data is Art. 6(1)(a) GDPR.
  • Where registration serves to fulfill a contract to which you, as the user, are a party, or to carry out pre-contractual measures, the additional legal basis is Art. 6(1)(b) GDPR.

3. Purpose of Data Processing

User registration is necessary for the performance of a contract with the user or for carrying out pre-contractual measures.

4. Storage Duration

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

For data collected during the registration process for the performance of a contract or pre-contractual measures, this is the case when the data is no longer required for the performance of the contract. Even after the contract has been concluded, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations.

5. Objection and Removal Options

As a user, you have the option to cancel your registration at any time. You can also request changes to the data stored about you at any time.

If the data is required for the performance of a contract or for pre-contractual measures, early deletion is only possible to the extent that no contractual or legal obligations preclude it.

VIII. Contact Form and E-mail Contact

1. Description and Scope of Data Processing

Our website includes a contact form that can be used for electronic contact. If a user makes use of this option, the data entered in the input mask is transmitted to us and stored. This data includes:

  • First name
  • Last name
  • Telephone number
  • E-mail address

At the time the message is sent, the following data is also stored:

  • IP address of the user
  • Date and time of registration

During the submission process, your consent is obtained for the processing of the data, and reference is made to this privacy policy.

Alternatively, contact can be made via the provided e-mail address. In this case, the user’s personal data transmitted with the e-mail is stored.

In this context, no data is passed on to third parties. The data is used exclusively for processing the conversation.

2. Legal Basis for Data Processing

  • Where the user has given consent, the legal basis for processing the data is Art. 6(1)(a) GDPR.
  • The legal basis for processing data transmitted in the course of sending an e-mail is Art. 6(1)(f) GDPR. If the e-mail contact aims to conclude a contract, the additional legal basis is Art. 6(1)(b) GDPR.

3. Purpose of Data Processing

The processing of personal data from the input mask serves solely to handle the contact request. In the case of contact by e-mail, this also constitutes the required legitimate interest in processing the data.

The other personal data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Storage Duration

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the contact form input mask and those transmitted by e-mail, this is the case when the respective conversation with the user has ended.

The personal data additionally collected during the submission process will be deleted after seven days at the latest.

5. Objection and Removal Options

You have the right to revoke your consent to the processing of personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.

All personal data stored in the course of making contact will be deleted in this case.

IX. Newsletter

1. Description and Scope of Data Processing

On our website, you have the option to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us:

  • First name
  • Last name
  • E-mail address
  • Telephone number

The following data is also collected during registration:

  • IP address of the accessing computer
  • Date and time of registration

During the registration process, your consent is obtained for the processing of the data, and reference is made to this privacy policy.

In connection with data processing for sending newsletters, no data is passed on to third parties. The data is used exclusively for sending the newsletter.

2. Legal Basis for Data Processing

Where the user has given consent, the legal basis for processing the data after newsletter registration is Art. 6(1)(a) GDPR.

3. Purpose of Data Processing

The collection of the user’s e-mail address serves to deliver the newsletter.

The collection of other personal data during the registration process serves to prevent misuse of the services or of the e-mail address used.

4. Storage Duration

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Accordingly, the user’s e-mail address is stored for as long as the newsletter subscription remains active.

5. Objection and Removal Options

The affected user can cancel the newsletter subscription at any time. For this purpose, a corresponding link is included in every newsletter.

X. Rights of the Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. Right of Access

You may request confirmation from the controller as to whether personal data concerning you is being processed by us.

If such processing is taking place, you may request information about the legally prescribed details, in particular regarding purposes, categories of personal data, recipients, storage duration, origin of the data, the existence of further data subject rights, and, where applicable, the existence of automated decision-making including profiling.

2. Right to Rectification

You have the right to request rectification and/or completion from the controller if the processed personal data concerning you is inaccurate or incomplete.

3. Right to Restriction of Processing

Under the legal prerequisites, you may request the restriction of processing of the personal data concerning you.

4. Right to Erasure (“Right to be Forgotten”)

Under the legal prerequisites, you may request the immediate erasure of the personal data concerning you.

5. Right to be Informed

If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate this rectification, erasure, or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort.

6. Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format, provided the legal prerequisites are met.

7. Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, insofar as such processing is based on Art. 6(1)(e) or (f) GDPR.

8. Right to Withdraw Consent under Data Protection Law

You have the right to withdraw your data protection consent declaration at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before the withdrawal.

9. Automated Individual Decision-Making, Including Profiling

You have the right not to be subject to a decision based solely on automated processing—including profiling—which produces legal effects concerning you or similarly significantly affects you, unless a legal exception applies.

10. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR.

XI. Payment Processing via Stripe Standard

Where payments are processed on our platform, we use Stripe Standard for this purpose. For the European region, the providers according to Stripe’s contractual documents are, in particular, Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, and, where applicable, Stripe Technology Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

Within the scope of payment processing, the data required to carry out the transaction is transmitted to the payment service provider. This may include, in particular, account data, contact details, payment data, transaction data, technical connection data, and billing-related information.

According to the current model, funds are allocated directly to the respective vendor after a successful sale. Any Stripe fees are deducted directly from the payment amount. The remaining amount is then paid out to the respective vendor. Where the platform charges a commission, this is done in accordance with the respective established billing model.

Transparency obligations regarding recipients and purposes arise from Art. 13 GDPR.

The legal basis for processing the data required for payment processing is Art. 6(1)(b) GDPR, insofar as the processing is necessary for the performance of the contract or pre-contractual measures.

Where legal retention obligations exist, the additional legal basis is Art. 6(1)(c) GDPR.