1. General notes and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data are collected. Personal data is information that relates to an identified or identifiable natural person. The following data protection declaration explains which data we collect and what we use it for.
We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Information about the responsible person

The person responsible within the meaning of data protection law is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses or similar).
Responsible for the data processing on this website is:

LASEREXPRESS GmbH
Neue Industriestr. 3
27472 Cuxhaven

Telefon: +49 4721 59300-0
E-Mail: info@laserexpress.de

Contact details of the data protection officer

If you have any questions and as a contact person on the subject of data protection at our company, our company data protection officer is available to you at any time. His contact details are:

LASEREXPRESS GmbH
z. H. of the data protection officer
Neue Industriestr. 3
27472 Cuxhaven

E-Mail: datenschutz@laserexpress.de

2. Data collection on our website

Server-Log-Files

The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• browser type and browser version
• Operating system used
• referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address of the requesting computer

The storage of the aforementioned access data is necessary for technical reasons to provide a functional website and to ensure system security. The basis of the data processing is our legitimate interests according to Art. 6 para. 1 lit. f DSGVO. Our legitimate interest is to provide our web offer in a secure manner. The storage period of the data described above is seven days. In exceptional cases, the data is stored to clarify suspected cases of unlawful use until the suspicion is resolved.

Contact Form

If you send us an inquiry via the contact form, the information you provide in the form, including the contact data you enter there, will be processed by us for the purpose of processing the inquiry and in the event of follow-up questions.
If you contact us within the framework of an existing contractual relationship or contact us in advance for information about our range of services or our other services, the data and information you provide will be processed for the purpose of processing and responding to your contact request in accordance with Art. 6 (1) lit. b DSGVO. If you contact us for any other reason, the processing is carried out to protect our legitimate interests pursuant to Art. 6 (1) lit. f DSGVO for the proper response to contact requests. In this respect, our legitimate interest is the provision of a communication channel for the speedy establishment of contact and response.The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after we have completed processing your inquiry). Mandatory legal provisions – in particular retention periods – remain unaffected.

3. Plug-ins and Tools

YouTube

Our website uses plug-ins of the video platform YouTube to embed videos and play them directly on our website. The operator of the video platform is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (“YouTube”). YouTube is a company affiliated with Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

The integration of YouTube videos takes place in the so-called “extended data protection mode”, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode.Thus, YouTube – regardless of whether you watch a video – establishes a connection to the Google DoubleClick network.

If you activate embedded videos on our website, a connection to YouTube’s servers is established and a data transmission is started. We have no influence on the scope and content of the data that is transmitted to YouTube and possibly other partners of YouTube by activating the plug-in. Among other things, the YouTube server is informed which of our websites you have visited. According to YouTube, this information is used, among other things, to collect video statistics, improve user-friendliness and prevent abusive behavior. YouTube uses cookies to collect information about user behavior. The cookies remain on your terminal device until you delete them. You can prevent YouTube from storing cookies by making the appropriate settings in your browser software.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account before activating the play button.

In this respect, the processing by us is based on our legitimate interests pursuant to Art. 6 (1) lit. f DSGVO. Our legitimate interest is the use of YouTube for the purpose of an appealing presentation of our online offers.

We do not store any personal data when using the YouTube plug-in.

For more information on the handling of user data, please refer to YouTube’s privacy policy at: www.google.de/intl/de/policies/privacy.

Google Web Fonts

This website uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google’s servers. This gives Google knowledge that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers.

This represents a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO.If your browser does not support web fonts, a standard font will be used by your computer.

You can find more information about Google Web Fonts at developers.google.com/fonts/faq and in Google’s privacy policy: www.google.com/policies/privacy/.

4. Social Media

LASEREXPRESS is also active in various social networks (social media), whereby personal data of data subjects are also processed. In the following, we would like to inform you about which social media are involved in detail:

a) Facebook

LASEREXPRESS uses the technical platform and services of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for the information service offered here.

We would like to point out that you use this Facebook page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). Alternatively, you can also access the information offered via this page on our website at www.laserexpress.de/de/datenschutz/. When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is available in the form of cookies on your PC.

Joint accountability with Facebook

LASEREXPRESS is only jointly responsible with Facebook for the processing of so-called “Insights data” insofar as this data is used for the creation of so-called “Page Insights”.

LASEREXPRESS and Facebook have concluded an agreement as part of their joint responsibility, which you can access here: de-de.facebook.com/legal/terms/page_controller_addendum (so-called “Page Insights Information”). The agreement applies to those data processing operations that are collected in connection with a visit to or interaction with our LinkedIn profile, but only insofar as these data are also processed (thereafter) for “Page Insights”. “Page Insights” include analytics services that help the operator of a LinkedIn profile to better understand interactions with their pages. The purpose of the data processing is to create aggregated statistics for LinkedIn profile operators.

This information is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more detailed information on this at the following link: de-de.facebook.com/help/pages/insights

The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union. Facebook describes in general terms what information it receives and how it is used in its data usage guidelines. There you will also find information on how to contact Facebook and on the settings options for advertisements. The data usage guidelines are available at the following link: de-de.facebook.com/about/privacy You can find Facebook’s complete data guidelines here: de-de.facebook.com/full_data_use_policy

In what way Facebook uses data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties, is not conclusively and clearly stated by Facebook and is not known to us. When you access a Facebook page, the IP address assigned to your terminal device is transmitted to Facebook. According to Facebook, this IP address is anonymized (for “German” IP addresses). Facebook also stores information about the end devices of its users (e.g. as part of the “login notification” function); this may enable Facebook to assign IP addresses to individual users. If you are currently logged in to Facebook as a user, a cookie with your Facebook ID is located on your end device. This enables Facebook to track that you have visited this page and how you have used it. This also applies to all other Facebook pages. Via Facebook buttons embedded in websites, it is possible for Facebook to record your visits to these website pages and assign them to your Facebook profile. Based on this data, content or advertising can be offered tailored to you.

If you want to avoid this, you should log out of Facebook or disable the “stay logged in” feature, delete the cookies present on your device, and exit and restart your browser. In this way, Facebook information through which you can be directly identified will be deleted. This will allow you to use our Facebook page without revealing your Facebook identifier. When you access interactive features of the page (Like, Comment, Share, Message, etc.), a Facebook login screen will appear. After any login, you will again be recognizable to Facebook as a specific user. For information on how to manage or delete information about you, please visit the following Facebook support pages: de-de.facebook.com/about/privacy

Responsibilities of LASEREXPRESS

In addition, LASEREXPRESS is also solely responsible for certain data processing. We process the following data for communication with Facebook users in order to offer our information service:

• User interactions (postings, likes, etc.),
• Profile name as well as data provided by the user in the course of the conversation, e.g. for processing service requests,
• Statistical surveys for target group advertising,
• Statistical data on user interactions in aggregated form, i.e. without personal reference for LASEREXPRESS (e.g. page activities, page views, page previews, likes, recommendations, posts, videos, page subscriptions incl. origin, times of day), and
• Targeted advertisements based on aggregated demographic data without personal identifiability (e.g., age, location, language, or gender information).
• You can find the current version of this data privacy statement under “Data privacy” on our Facebook page. If you have any questions about our information offering, you can contact us at www.laserexpress.de/de/datenschutz/.

Insofar as personal data is transferred to Facebook servers in the USA and stored and further processed there, Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2 Dublin, Ireland has concluded the standard data protection clauses adopted by the EU Commission with the Facebook companies located in the USA, which permit the transfer of personal data to the USA in individual cases.

The legitimate interest, insofar as the legal basis is Art. 6 para. 1 lit. f DSGVO (legitimate interests), is the effective provision of information to users, customers and interested parties and communication with these persons as well as the external presentation of LASEREXPRESS.

After your request has been completed, the personal data you have provided will be deleted from our systems. Should you interact with us publicly, for example by leaving a comment or “liking” a post, this data will remain publicly accessible on the site until deleted by us or you. Insofar as legal storage obligations require longer storage, your data will only be stored for this purpose and will be blocked for other purposes.

To exercise your right to object to us, please contact us either at www.laserexpress.de/de/datenschutz/ or at the above address by mail or telephone. We will then process your request immediately.

The provision of your data is voluntary. However, it is not possible to visit our site without us processing personal data jointly with Facebook or LASEREXPRESS and Facebook processing personal data under their own, separate responsibility.

b) Instagram

LASEREXPRESS uses the technical platform and services of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland for the information service offered here. Instagram is part of Facebook Ltd.

We would like to point out that you use this Instagram profile and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). Alternatively, you can also access the information offered via this page on our website at www.laserexpress.de/de/datenschutz/. When you visit our Instagram profile, Facebook collects, among other things, your IP address and other information that is available in the form of cookies on your PC.

Joint accountability with Facebook

This information is used to provide us, as the operator of the Instagram profile, with statistical information about the use of the Instagram profile. Facebook provides more detailed information on this at the following link: help.instagram.com/1533933820244654.

The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union. Facebook describes in general terms what information it receives and how it is used in its data usage guidelines. There you will also find information on how to contact Facebook and on the settings options for advertisements. The data usage guidelines are available at the following link: help.instagram.com/519522125107875.

In what way Facebook uses the data from the visit of Instagram profiles for its own purposes, to what extent activities on the Instagram profile are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties, is not conclusively and clearly stated by Facebook and is not known to us. When accessing an Instagram profile, the IP address assigned to your end device is transmitted to Facebook. According to information from Facebook, this IP address is anonymized (for “German” IP addresses). Facebook also stores information about the end devices of its users (e.g., as part of the “login notification” function); if necessary, Facebook is thus able to assign IP addresses to individual users. If you are currently logged in to Facebook as a user, a cookie with your Instagram ID is located on your end device. This enables Facebook to track that you have visited this page and how you have used it. This also applies to all other Facebook pages. Via Facebook buttons embedded in websites, it is possible for Facebook to record your visits to these website pages and assign them to your Instagram profile. Based on this data, content or advertising can be offered tailored to you.

If you want to avoid this, you should log out of Facebook or disable the “stay logged in” feature, delete the cookies present on your device, and exit and restart your browser. In this way, Facebook information that can directly identify you will be deleted. This allows you to use our Instagram profile without revealing your Instagram identifier. When you access interactive features of the site (like, comment, share, message, etc.), an Instagram login screen will appear. After any login, you will again be recognizable to Facebook as a specific user. Information on how to manage or delete information about you can be found on the following Facebook support pages: help.instagram.com/1533933820244654.

Responsibility of LASEREXPRESS

In addition, LASEREXPRESS is also solely responsible for certain data processing. We process the following data for communication with Instagram users in order to offer our information service:

• User interactions (postings, likes, etc.);
• Profile name as well as data provided by the user in the course of the conversation, e.g. for processing service requests,
• Statistical surveys for target group advertising;
• Statistical data on user interactions in aggregated form, i.e. without personal reference for LASEREXPRESS (e.g. page activities, page views, page previews, likes, recommendations, posts, videos, page subscriptions incl. origin, times of day);
• Targeted advertisements based on aggregated demographic data without personal identifiability (e.g., age, location, language or gender information); and
• You can find this data protection declaration in the currently valid version under the item “Data protection” on our Facebook page. If you have any questions about our information offering, you can contact us at datenschutz@laserexpress.de.

Processing is carried out for the purpose of responding to your inquiries (if you have submitted an inquiry to us) or communicating with you and to publish information about LASEREXPRESS events, products and services. The legal basis for processing for the purpose of responding to inquiries that serve a future conclusion of a contract and are initiated by you is Art. 6 para. 1 lit. b DSGVO and in other cases Art. 6 para. 1 lit. f DSGVO.

Insofar as personal data is transferred to Facebook servers in the USA and stored and further processed there, Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2 Dublin, Ireland has concluded the standard data protection clauses adopted by the EU Commission with the Facebook companies located in the USA, which permit the transfer of personal data to the USA in individual cases.

The legitimate interest, insofar as the legal basis is Art. 6 para. 1 lit. f DSGVO (legitimate interests), is the effective provision of information to users, customers and interested parties and communication with these persons as well as the external presentation of LASEREXPRESS.

After your request has been completed, the personal data you have provided will be deleted from our systems. Should you interact with us publicly, for example by leaving a comment or “liking” a post, this data will remain publicly accessible on the site until deleted by us or you. Insofar as legal storage obligations require longer storage, your data will only be stored for this purpose and will be blocked for other purposes.

To exercise your right to object to us, please contact us either at datenschutz@laserexpress.de or at the above address by mail or telephone. We will then process your request immediately.

The provision of your data is voluntary. However, visiting our profile is not possible without us processing personal data jointly with Facebook or LASEREXPRESS and Facebook processing personal data under their own, separate responsibility.

c) LinkedIn

LASEREXPRESS uses the technical platform and services of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter “LinkedIn”) for the information service offered here. We would like to point out that you use this LinkedIn page of LASEREXPRESS and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).

Joint accountability with LinkedIn

LASEREXPRESS is only jointly responsible with LinkedIn for the processing of so-called “Insights data” insofar as this data is used for the creation of so-called “Page Insights”.

LASEREXPRESS and LinkedIn have concluded an agreement as part of their joint responsibility, which you can access here: legal.linkedin.com/pages-joint-controller-addendum (so-called “Page Insights Joint Controller Addendum”). The agreement covers those data processing operations that are collected in connection with a visit to or interaction with our LinkedIn profile, but only to the extent that such data are also processed (thereafter) for “Page Insights”. “Page Insights” include analytics services that help the operator of a LinkedIn profile to better understand interactions with their pages. The purpose of the data processing is to create aggregated statistics for LinkedIn profile operators.

This involves processing of data in the context of a visit to or interaction of persons with a LinkedIn profile, but only insofar as the purpose is the use for “page insights”. LinkedIn provides more detailed information on this at the following link:

• When a LinkedIn member visits, follows, or engages with the Page, LinkedIn processes personal data to provide the Page operator with usage insights;
• Specifically, LinkedIn processes data that the member has provided to LinkedIn, such as job function, country, industry, seniority, company size, and employment status data from a member’s profile and employment status data from a member’s profile; and
• In addition, LinkedIn processes information about how a member has interacted with your company page, such as whether a member is a follower.

When you visit our LinkedIn page, LinkedIn collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide us, as the operator of the LinkedIn page, with statistical information about the use of the LinkedIn page. We do not receive any personal data from LinkedIn in this context.

The data collected about you in this context is processed by LinkedIn and may be transferred to countries outside the European Union. What information LinkedIn receives and how it is used is described in general terms by LinkedIn in its user agreement and its privacy policy. There you will also find information on how to contact LinkedIn and on the settings options for advertisements. LinkedIn’s data policy is available at the following link: www.linkedin.com/legal/privacy-policy.

Should you wish to exercise a data subject right to which you are entitled under the GDPR, we would like to point out that we cannot fully comply with all of these rights without LinkedIn. Surely, therefore, it would be more effective for you to contact LinkedIn directly. However, if you still need assistance, please feel free to contact us.

The respective responsibilities, in particular with regard to the protection of data subject rights, between LASEREXPRESS and LinkedIn can be found in the Page Insights Addendum (https://legal.linkedin.com/pages-joint-controller-addendum).

LinkedIn assumes primary responsibility for compliance with the GDPR obligations for the shared processing of “Insights Data”. This includes the fulfillment of the following data subject rights:

• The right of access (Art. 15 DSGVO);
• The right from erasure (Art. 17 GDPR);
• The right to restriction of processing (Art. 18 DSGVO);
• The right to data portability (Art. 20 GDPR); and
• The right to object (Art. 21 DSGVO).

More details on how to exercise these rights are provided by LinkedIn in its Privacy Policy under point 4: www.linkedin.com/legal/privacy-policy.

Responsibility of LASEREXPRESS

In addition, LASEREXPRESS is also solely responsible for certain data processing. We process the following data for communication with LinkedIn users in order to offer our information service:

• User interactions (postings, likes, etc.);
• Profile name as well as data provided by the user in the course of the conversation, e.g. for processing service requests;
• Statistical surveys for target group advertising;
• Statistical data on user interactions in aggregated form, i.e. without personal reference for LASEREXPRESS (e.g. page activities, page views, page previews, likes, recommendations, posts, videos, page subscriptions incl. origin, times of day); and
• Target group-controlled advertisements based on aggregated demographic data without personal reference (e.g. age, place of residence, language or gender information).

Processing is carried out for the purpose of responding to your inquiries (if you have submitted an inquiry to us) or communicating with you and to publish information about LASEREXPRESS events, products and services. The legal basis for processing for the purpose of responding to inquiries that serve a future conclusion of a contract and are initiated by you is Art. 6 para. 1 lit. b DSGVO and in other cases Art. 6 para. 1 lit. f DSGVO.

Insofar as personal data is transferred to LinkedIn servers in the USA and stored and further processed there, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland has concluded the standard data protection clauses adopted by the EU Commission with the LinkedIn companies located in the USA, which permit the transfer of personal data to the USA in individual cases.

The legitimate interest consists in the effective provision of information to users, customers and interested parties and communication with these persons as well as the external presentation of LASEREXPRESS.
You can find the current version of this privacy policy on the “About Us” page under the “Privacy Policy” section of our LinkedIn page.

After your request has been completed, the personal data you have provided will be deleted from our systems. Should you interact with us publicly, for example by leaving a comment or “liking” a post, this data will remain publicly accessible on the site until deleted by us or you. Insofar as legal storage obligations require longer storage, your data will only be stored for this purpose and will be blocked for other purposes.

After your request has been completed, the personal data you have provided will be deleted from our systems. Should you interact with us publicly, for example by leaving a comment or “liking” a post, this data will remain publicly accessible on the site until deleted by us or you. Insofar as legal storage obligations require longer storage, your data will only be stored for this purpose and will be blocked for other purposes.

To exercise your right to object to us, please contact us either at datenschutz@laserexpress.de or at the above address by mail or telephone. We will then process your request immediately.

The provision of your data is voluntary. However, visiting our profile is not possible without us processing personal data jointly with LinkedIn or LASEREXPRESS and LinkedIn processing personal data in their own, separate responsibility.

5. Your rights as a data subject

Right to information

You can request information in accordance with Art. 15 DSGVO about your personal data that we process.

Right to object

You have a right to object on specific grounds (see below under “Right to object under Article 21(1) of the GDPR”).

Right to rectification

If the information concerning you is not (or no longer) accurate, you may request a correction in accordance with Art. 16 DSGVO. If your data is incomplete, you can request that it be completed.

Right to deletion

You may request the deletion of your personal data in accordance with Art. 17 DSGVO.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data in accordance with Art. 18 DSGVO.

Right to complain

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Ar. 77 (1) DSGVO. This includes the data protection supervisory authority responsible for the controller: State Commissioner for Data Protection of Lower Saxony, www.navo.niedersachsen.de/navo2/portal/csend/8915/fileget/dsbeschwerdeformular.html.

Right to data portability

In the event that the requirements of Art. 20 (1) DSGVO are met, you have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. The collection of data to provide the website and the storage of log files are absolutely necessary for the operation of the website. They are therefore not based on consent pursuant to Art. 6 (1) a DSGVO or on a contract pursuant to Art. 6 (1) b DSGVO, but are justified pursuant to Art. 6 (1) f DSGVO. The requirements of Art. 20 (1) of the GDPR are therefore not met.

Right of objection pursuant to Art. 21 (1) DSGVO

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Article 6 (1) (f) DSGVO. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website.

6. Actuality and change of this privacy policy

This privacy policy is currently valid and has the status: 06.09.2023.

Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy.