Privacy policy of the website baeckerei-laube.de

(1) In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. your name, address, e-mail addresses and (if applicable) your user behavior.

(2) The controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is

Bäckerei Laube GmbH und Co. KG
vertreten durch die Komplementär-GmbH Bäckerei Laube Verwaltungsgesellschaft mbH
letztere vertreten durch den Geschäftsführer Marcel Nitz

Güterbahnhofstraße 1

01705 Freital

datenschutz@baeckerei-laube.de (see our legal notice).

(3) When you contact us by e-mail or via our contact form, the data you provide will be processed and stored by us in order to answer your questions. Mandatory information on your part with regard to our contact form is marked with an “*”. We delete the data arising in this context after storage is no longer required, or restrict processing if (e.g. tax) statutory retention obligations exist. In the latter case, however, we will separate and restrict access to the data stored on the basis of statutory provisions after two years of storage at the latest, unless otherwise stated below. 1 p. 1 lit. a GDPR, for further processing in the context of the performance of a contract Art. 6 para. 1 p. 1 lit. b GDPR and (if applicable) further storage for other legal reasons Art. 6 para. 1 p. 1 lit. c GDPR.

(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We also specify the defined criteria for the storage period.

§2 Your rights

(1) You have the following rights vis-à-vis us with regard to your personal data:

– Right to information (Art. 15 GDPR),

– Right to rectification or erasure (Art. 16, 17 GDPR),

– Right to restriction of processing (Art. 18 GDPR),

– Right to data portability (Art. 20 GDPR),

– Right to object to processing (Art. 21 GDPR).

(2) You also have the right to complain to a data protection supervisory authority about what you consider to be unlawful processing of your personal data by us, Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

(3) If you have asserted your rights to rectification, erasure or restriction of processing listed in paragraph 1 against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of the rectification or erasure of the data or restriction of processing requested by you, unless this proves impossible or involves a disproportionate effort. However, you have the right to be informed about these recipients in any case, Art. 19 GDPR.

(4) We would like to clarify that we do not use any automated decision-making pursuant to Art. 22 (1) and (4) GDPR.

§3 Collection of personal data when visiting (= accessing) our website

(1) If you visit the website for information purposes only (= access), i.e. if you do not register or otherwise provide us with information (e.g. via the contact form), we only collect the personal data that your browser transmits to our server. We use a transmission method based on the SSL protocol (Secure Sockets Layer protocol: TLS 1.2). If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

  • IP address limited to 7 days, thereafter in anonymized form
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes
  • Browser
  • Operating system and its interface
  • Language and version of the browser software.

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case us). Cookies cannot run programs or transfer viruses to your computer. They serve to make the website more user-friendly and effective overall. Insofar as the use of cookies is necessary to enable our service in the first place or to further develop it technically, the legal basis for the storage is Art. 6 para. 1 p. 1 lit. f GDPR, otherwise your consent (Art. 6 para. 1 sentence 1 lit. a GDPR) will be obtained before they are used.

(3) This website uses the following types of cookies, the scope and function of which are explained below:

-essential cookies, which make our service technically possible in the first place, and

-Third-party cookies with a wide variety of purposes that are described in more detail on our website before they are used on site

A detailed description of the cookies we use can be found within the links in our cookie banner. If you have already clicked this away and want to reconsider your settings, we will give you the opportunity below:

Open cookie settings again!

§4Functions and offers of our website

(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you must generally provide further personal data that we use to provide the respective service and to which the aforementioned data processing principles apply.

(2) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

(3) Furthermore, we may pass on your personal data to third parties if contracts or similar services are offered by us together with partners. You will receive more detailed information on this when you provide your personal data or in the description of the offer. We use the company IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter “HOSTING PARTNER”), whose servers are also located in Germany, to host our website.

(4) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

§5 Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data in individual cases, you can revoke this at any time under the above-mentioned § 1 paragraph 2 or in the imprint linked there. Such a revocation affects the permissibility of the processing of your personal data after you have declared it to us.

(2) Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if the processing is not required in particular to fulfill a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(3) Of course, you can object to any processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the contact details given above under § 1 paragraph 2 or in the imprint linked there.

§6 Use of our webshop

(1) If you wish to place an order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we require for the processing of your order. Mandatory information required for the processing of contracts is marked separately with an “*”, further information is voluntary. We process the data you provide to process your order. We may pass on your payment details to our bank for this purpose. The legal basis for this is Art. 6 para. 1 p. 1 lit. b GDPR. We may also process the data you provide in order to send you e-mails containing technical information.

(2) Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, we will restrict processing after two years, i.e. your data will only be used to comply with legal obligations.

(3) To prevent unauthorized access by third parties to your personal data, in particular financial data, the order process is encrypted using TLS technology.

§7 Use of Google Analytics

(1) This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

(2) The (anonymized) IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

(3) A description of the cookies stored on your device by Google Analytics can be found within the links in our cookie banner. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de
. If you also click below, the so-called “opt-out cookie” will be set: Deactivate Google Analytics

Google Analytics will then no longer collect any data from your visit. Opt-out cookies prevent the future collection of your data when you visit this website. Furthermore, in order to prevent Universal Analytics from collecting data across different devices (on all third-party sites) (regardless of the website in question), you must download the aforementioned opt-out cookie on all systems used.

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. As a result, IP addresses are further processed in abbreviated form, so that they cannot be traced back to individuals. Insofar as the data collected about you has a personal reference, this is therefore immediately excluded and the personal data is therefore immediately deleted.

(5) We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f GDPR.

(6) Information from the third-party provider: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. User conditions: http://www.google.com/analytics/terms/de.html and the privacy policy: https://policies.google.com/privacy?hl=de

(7) We have also concluded a contract data processing agreement with Google as a precautionary measure – although no IP is transmitted to Google thanks to the anomyzeIP function. In addition, the standard contractual clauses of the European Commission for the transfer of data for online advertising and personal data apply to Google.

§ 8 Use of Facebook links

(1) We currently use links to Facebook. However, these are pure links, not plugins. This means that when you visit our site, no personal data is initially passed on to Facebook. We give you the option of using the button to go directly to the third-party pages. Only if you click on the link will Facebook receive the information that you have accessed the corresponding website of our online offering. In addition, the data mentioned under § 3 of this declaration will be transmitted. According to Facebook, in Germany the IP address is anonymized immediately after collection. When you visit the Facebook pages, your personal data may be transmitted to Facebook and stored there (in the USA). As Facebook collects data via cookies in particular, we recommend that you delete all cookies via your browser’s security settings before clicking on the link.

(2) We have no influence on the data collected and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing or the storage periods. We also have no reliable information on the deletion of the data collected by Facebook.

(3) Facebook stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Facebook to exercise this right. Via the Facebook pages, Facebook also offers you the opportunity to interact with us and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of our own profiles there is Art. 6 para. 1 p. 1 lit. f GDPR.

(4) The data transfer takes place regardless of whether you have a Facebook account and are logged in there. If you are logged in to Facebook, the data we collect from you will be assigned directly to your existing Facebook account. We recommend that you log out regularly after using Facebook, especially before activating a button or link, as this will prevent you from being assigned to your Facebook profile.

(5) Further information on the purpose and scope of data collection and its processing by Facebook can be found in the provider’s privacy policy provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy.

(6) Addresses of Facebook and URL with their data protection notices:

Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§9 Use of Facebook pixels (Facebook Custom Audiences)

(1) Furthermore, the website uses the so-called “Facebook pixel” as a remarketing function of Facebook Inc. (“Facebook”). This allows users of the website to be shown interest-based advertisements (“Facebook ads”) when they visit the Facebook social network or other websites that also use the process. We are interested in showing you advertising that is of interest to you in order to make our website more interesting for you. Using the Facebook pixel, we can also evaluate the effect of Facebook ads, in particular whether a user visits our website after clicking on our Facebook ads.

(2) Due to the Facebook pixel used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: By integrating the Facebook pixel, Facebook receives the information that you have accessed the corresponding website of our Internet presence or have clicked on an advertisement from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and store your IP address and other identifying features.

(3) Deactivation of the Facebook pixel is possible here Open cookie settings again! and for logged-in users at https://www.facebook.com/settings/?tab=ads#_.

(4) The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f) GDPR. Further information on data processing by Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; can be found at http://www.facebook.com/policy.php;

Further information on data collection:

http://www.facebook.com/help/186325668085084

http://www.facebook.com/about/privacy/your-info-on-other#applications

and http://www.facebook.com/about/privacy/your-info#everyoneinfo

§ 10 Use of the payment provider PayPal

(1) We offer payment via PayPal on this website. Therefore, if you select “PayPal” as the payment method, we will transmit your data relating to the purchase contract and the processing of the payment to PayPal (Europe) S.à r.l. et Cie S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) after you have given your express consent.

(2) In particular, the following data is transmitted: the contents of the shopping cart (the selected goods, the costs incurred, the number and the time of the order) and the billing or delivery address.

(3) Your data may be passed on to third parties by PayPal in individual cases to process the payment, please refer to PayPal’s privacy policy under the link https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

(4) Further information on the purpose and scope of data collection and its processing by PayPal can be found in the provider’s privacy policy. You can also obtain further information on your rights in this regard at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

§11 Links to external websites

Insofar as there are links to websites of other providers, this data protection declaration does not apply to their content. What data the operators of these pages may collect is beyond our knowledge and sphere of influence. Information on this can be found in the data protection notice of the respective page.

§12 Collection of personal data from job applicants

(1) We only collect your personal data as an applicant for a position if you provide it to us online via the so-called “lead generator” (a software-based program for the targeted approach of job applicants) of smashleads UG (haftungsbeschränkt), represented by the managing director Noah Frohn, Kiebitzweg 5, 50354 Hürth (hereinafter “smashleads”), by e-mail, by post or by telephone. This applies both to applications in response to job advertisements and to unsolicited applications. In this context, we collect the information provided in the application. Depending on the scope of your communications, this may include in particular your name, date of birth, contact details, interests, qualification data and educational and professional background. The personal data collected from you will only be used for the purpose of carrying out the application process (legal basis is then Art. 6 para. 1 S.1 lit. a), b) and f) GDPR in conjunction with. § SECTION 26 BDSG).

(2) You are not obliged to provide the aforementioned personal data. The data provided may be required for the conclusion of a future contract after the application process has been completed. Without the provision of the data, it may not be possible to communicate, carry out the application process or conclude an (employment) contract.

(3) Data is transmitted to employees of the HR department, employees of the management and the respective head of department. Your personal data will not be transferred to third parties – not even as part of our online application process to smashleads. smashleads is our data processor and you submit your personal (applicant) data to us via smashleads. For more information, please refer to § 15 of this privacy policy. There is no intention to transfer your data to a recipient in a third country (not a member state of the EU/EEA) or an international organization.

(4) The data will be deleted or have it deleted as soon as it is no longer required for the purpose for which it was collected. We therefore retain your application data for 12 months after the application procedure has been completed in the event of a rejection following notification of the rejection decision to you. If you have consented to a longer storage period, the storage period will be the period covered by your consent. Thereafter, we will – if no other justification for the storage is apparent – either delete your data or have it deleted or obtain your consent again for further storage. You have the option to withdraw your consent to the processing of personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

§13 Integration of YouTube videos

(1) We have integrated YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transmission.

(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 3 of this declaration will be transmitted. This takes place regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

(3) Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and settings options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

§14 Use of Google reCAPTCHA

(1) This website uses Google reCAPTCHA, a service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

(2) Google reCAPTCHA uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of the behavior of website users. The information generated by the cookies about your use of this website is usually transmitted to a Google server (also in the USA) and stored there. Google collects data about the use of the website and the user’s browser, including the IP address, which is usually transmitted to a Google server (also in the USA) and stored there.

(3) The use of Google reCAPTCHA is intended to give us the opportunity to distinguish an entry on our website by a natural person from an automated abusive entry. The aim is to prevent abuse and spam on our website. Google reCAPTCHA analyzes the data collected about the user’s behavior and uses the results of the user’s input and mouse movements on our website.

(4) The legal basis for the use of Google reCAPTCHA is Art. 6 para. 1 p. 1 lit. f GDPR.

(5) Further information on the purpose and scope of data collection and its processing by Google can be found in Google’s privacy policy. You can also obtain further information on your rights in this regard there: https://www.google.com/intl/de/policies/privacy/

§ 15 Use of Perspective

(1) On our website, we use the services of Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg (hereinafter referred to as “Perspective”) to provide contact, inquiry or application forms. Perspective offers lead generation.

(2) Perspective itself stores your data exclusively on European servers.

(3) The following data may be collected by Perspektive on our behalf:

  • Date and time of access
  • Websites from which you came to our website (“referrer”)
  • Context information (e.g. button clicks on the pages, selections made on the pages)
  • Contents of all completed text fields (e.g. contact details, such as your name or address, or other personal data, depending on the question shown in the specific text field)
  • any files you have uploaded
  • Information about the browser type and version used
  • the operating system of your computer
  • the Internet service provider you use
  • Date and time of your access to the so-called funnel, i.e. our applicant quiz

(4) The purpose of this data processing is to enable the communication you have recorded. The processing of your data from contact, inquiry or application forms is therefore initially based on your consent. The legal basis is Art. 6 para. 1 p. 1 lit. a) GDPR. If a contract is initiated via an inquiry form, the legal basis is also Art. 6 para. 1 p. 1 lit. b) GDPR. The legal basis for the processing of data in an application form may be Art. 6 para. 1 p. 1 lit. f) GDPR can also be Art. 88 GDPR in conjunction with 26 BDSG.

(5) The personal data processed by Perspective on our behalf will be deleted as soon as they are no longer required for the purpose for which they were collected. In the case of the collection of data for the provision of the service, this is the case when the respective session has ended. Your personal data from inquiry or application forms will be stored for as long as is necessary to fulfill the purpose of processing or until you withdraw your consent. Exceptions to this principle are data that Perspective must retain due to legal obligations, as the additional legal basis is Art. 6 para. 1 p. 1 lit. c) GDPR applies. This includes, for example, retention obligations under commercial and tax law. These retention periods are – currently – up to ten years.

(6) An order processing contract has been concluded with Perspective for the aforementioned purposes in accordance with Article 28 GDPR.

Status: November 2023