1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our privacy policy below.
Data Collection on this Website
Who is responsible for collecting data on this website?
Data on this website is processed by the website operator. You can find their contact details in the section “Information on the data controller” in this privacy policy.
How do we collect your data?
Some of your data is collected when you provide it to us. This may include, for example, data that you enter in a contact form.
Other data is collected automatically or with your consent when you visit the website through our IT systems. This is primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you access this website.
What do we use your data for?
Some data is collected to ensure that the website functions properly. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to obtain, free of charge and at any time, information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may withdraw this consent at any time with future effect. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time with questions about this or other data protection matters.
Analytics Tools and Third-Party Tools
When you visit this website, your browsing behavior may be statistically evaluated. This is done primarily using so-called analytics programs.
Detailed information about these analytics programs can be found in the following privacy policy.
2. Hosting
External Hosting
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website visits, and other data generated through a website.
The hosting provider is used to fulfill contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online services securely, quickly, and efficiently through a professional provider (Art. 6(1)(f) GDPR).
Our hosting provider will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.
We use the following hosting provider:
IVRY GmbH
Neumühlenweg 3
84567 Perach
Data processing
We have concluded a data processing agreement (DPA) with the provider named above. This is a contract required under data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General information and mandatory disclosures
Privacy
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.
When you use this website, various personal data are collected. Personal data is data that can be used to identify you personally. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
Please note that data transmission over the Internet (e.g. when communicating by email) may have security vulnerabilities. It is not possible to completely protect data from access by third parties.
Information about the controller
The controller responsible for data processing on this website is:
LAKA-TOOLS GmbH
Im Lettenäcker 3
72202 Nagold
Phone: +49(0)7459/91534-31
Email: info@laka-tools.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g. names, email addresses, or similar).
Retention period
Unless a more specific retention period is stated in this Privacy Policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you submit a valid request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing your personal data (e.g. tax or commercial retention periods); in the latter case, deletion will take place once those grounds no longer apply.
Note on data transfers to the USA and other third countries
We use, among other things, tools from companies based in the USA or other third countries without an adequate level of data protection. When these tools are active, your personal data may be transferred to and processed in these third countries. Please note that these countries cannot be guaranteed to offer a level of data protection comparable to that of the EU. For example, US companies are required to disclose personal data to security authorities, without you, as the data subject, being able to take legal action against this. It therefore cannot be ruled out that US authorities (e.g. intelligence agencies) may process, analyse and permanently store your data held on US servers for surveillance purposes. We have no influence over these processing activities.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your explicit consent. You may withdraw consent you have already given at any time. The lawfulness of data processing carried out before withdrawal remains unaffected by the withdrawal.
Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNING YOU, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to receive data that we process automatically based on your consent or in fulfillment of a contract, either yourself or through a third party, in a commonly used, machine-readable format. If you request that the data be transferred directly to another data controller, this will only be done where technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this page uses SSL or TLS encryption. You can recognize an encrypted connection by the browser address bar changing from “http://” to “https://” and by the padlock icon in your browser bar.
When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Encrypted payments on this website
If, after concluding a paid contract, you are required to provide us with your payment details (e.g. account number for direct debit authorization), this data is required to process the payment.
Payments using the common payment methods (Visa/MasterCard, direct debit) are processed exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the browser address bar changing from “http://” to “https://” and by the padlock icon in your browser bar.
With encrypted communication, your payment details transmitted to us cannot be read by third parties.
Access, deletion and correction
You have the right at any time, within the framework of applicable legal provisions, to obtain free information about your stored personal data, its origin and recipients, and the purpose of data processing, and, where applicable, the right to have this data corrected or deleted. You can contact us at any time with regard to this and any other questions about personal data.
Right to Restriction of Processing
You have the right to request restriction of the processing of your personal data. You may contact us at any time to do so. The right to restrict processing applies in the following cases:
- If you contest the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the review, you have the right to request restriction of the processing of your personal data.
- If the processing of your personal data was/is unlawful, you may request restriction of data processing instead of deletion.
- If we no longer need your personal data, but you need it to exercise, defend or establish legal claims, you have the right to request restriction of the processing of your personal data instead of its deletion.
- If you have lodged an objection under Article 21(1) GDPR, a balancing of your interests against ours must be carried out. Until it has been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may be processed, apart from being stored, only with your consent or for the establishment, exercise or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
Objection to Promotional Emails
We hereby object to the use of contact details published to comply with the legal notice requirement for sending unsolicited advertising and informational materials. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.
4. Data Collection on This Website
Cookies
Our websites use so-called “cookies.” Cookies are small text files and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.
Cookies from third-party companies may also be stored on your device when you visit our website (third-party cookies). These enable us or you to use certain services provided by the third-party company (e.g., cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or displaying videos). Other cookies are used to analyze user behavior or display advertising.
Cookies that are necessary to carry out the electronic communication process (necessary cookies), to provide certain functions you have requested (functional cookies, e.g., for the shopping cart function), or to optimize the website (e.g., cookies for measuring website traffic) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies to ensure the technically flawless and optimized provision of its services. If consent to the storage of cookies has been requested, the relevant cookies are stored exclusively on the basis of this consent (Art. 6(1)(a) GDPR); consent may be withdrawn at any time.
You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to reject cookies in certain cases or altogether, and to enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.
If cookies from third-party companies or for analytical purposes are used, we will inform you separately about this in this privacy policy and, if applicable, ask for your consent.
Contact form
If you send us inquiries via the contact form, we will store the information you provide in the inquiry form, including the contact details you enter there, for the purpose of processing your inquiry and in case of follow-up questions. We will not share this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR if your request relates to the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling the requests sent to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if requested.
The data you enter in the contact form will remain with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.
Inquiries by email, telephone, or fax
If you contact us by email, telephone, or fax, your request, including all personal data resulting from it (name, request), will be stored and processed by us for the purpose of handling your inquiry. We will not disclose this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR if your request relates to the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling the requests sent to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if requested.
The data you send us through contact requests will remain with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your request has been fully processed). Mandatory statutory provisions—in particular statutory retention periods—remain unaffected.
Communication via WhatsApp
We use the WhatsApp instant messaging service, among others, to communicate with our customers and other third parties. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Communication is protected by end-to-end encryption (peer-to-peer), which prevents WhatsApp or other third parties from accessing the content of communications. However, WhatsApp can access metadata generated during the communication process (e.g., sender, recipient, and time). We also point out that, according to WhatsApp, it shares its users’ personal data with its US-based parent company, Facebook. Further details about data processing can be found in WhatsApp’s Privacy Policy at: https://www.whatsapp.com/legal/#privacy-policy.
WhatsApp is used on the basis of our legitimate interest in communicating with customers, prospective customers, and other business and contractual partners as quickly and effectively as possible (Art. 6(1)(f) GDPR). If consent has been requested, data is processed solely on the basis of that consent, which may be withdrawn at any time with effect for the future.
The communication content exchanged between us and on WhatsApp remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.
We use WhatsApp in its “WhatsApp Business” version.
Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://www.whatsapp.com/legal/business-data-transfer-addendum.
5. Analytics Tools and Advertising
Google Analytics
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the user's origin. Google may combine this data into a profile that is assigned to the respective user or their device.
In addition, we may use Google Analytics to record your mouse and scroll movements, as well as clicks. Google Analytics also uses various modeling approaches to supplement the collected data and uses machine learning technologies in its data analysis.
Google Analytics uses technologies that enable users to be recognized for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transferred to a Google server in the USA and stored there.
This analytics tool is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If consent has been requested (e.g. consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent may be withdrawn at any time.
Data transfers to the USA are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
IP Anonymization
We have enabled the IP anonymization feature on this website. This means your IP address is truncated by Google within member states of the European Union or other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide the website operator with other services related to website and internet use. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.
Browser plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
For more information about how Google Analytics handles user data, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Data processing
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Retention period
User- and event-level data stored by Google and linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android Advertising ID) is anonymized or deleted after 14 months. For details, see the following link: https://support.google.com/analytics/answer/7667196?hl=de
Google Ads
The website operator uses Google Ads. Google Ads is an online advertising program provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in the Google search engine or on third-party websites when users enter certain search terms on Google (keyword targeting). Targeted ads can also be displayed based on user data held by Google (e.g. location data and interests) (audience targeting). As the website operator, we can analyze this data quantitatively, for example by analyzing which search terms triggered our ads and how many ads resulted in clicks.
Google Ads is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in marketing its service products as effectively as possible.
Data transfers to the USA are based on the European Commission's Standard Contractual Clauses. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.
Facebook Pixel
This website uses the Facebook visitor action pixel to measure conversions. This service is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.
This allows the behavior of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This makes it possible to evaluate the effectiveness of Facebook ads for statistical and market research purposes and optimize future advertising measures.
The data collected is anonymous to us as the operator of this website, and we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook, so it can be linked to the respective user profile and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Policy . This allows Facebook to place advertisements on Facebook pages and outside Facebook. We, as the website operator, cannot influence this use of the data.
Facebook Pixel is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising measures, including social media. If consent has been requested (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Art. 6(1)(a) GDPR; consent may be withdrawn at any time.
Data transfers to the USA are based on the EU Commission’s standard contractual clauses. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
To the extent that personal data is collected on our website using the tool described here and forwarded to Facebook, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). This joint responsibility is limited exclusively to collecting the data and forwarding it to Facebook. The subsequent processing by Facebook after the data has been forwarded is not part of the joint responsibility. Our joint obligations have been set out in an agreement on joint processing. You can find the text of the agreement at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy information when using the Facebook tool and for ensuring the tool is implemented securely from a data protection perspective on our website. Facebook is responsible for the data security of its products. You can exercise your data subject rights (e.g. requests for access) regarding data processed by Facebook directly with Facebook. If you exercise your data subject rights with us, we are required to forward them to Facebook.
You can find further information about protecting your privacy in Facebook’s privacy policy: https://de-de.facebook.com/about/privacy/.
You can also deactivate the “Custom Audiences” remarketing feature in the Ad Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen . You must be logged in to Facebook to do this.
If you do not have a Facebook account, you can opt out of usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.
6. Newsletter
Newsletter data
If you wish to subscribe to the newsletter offered on the website, we need your email address and information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No other data is collected, or it is collected only on a voluntary basis. We use this data exclusively to send the requested information and do not share it with third parties.
The data entered in the newsletter subscription form is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw your consent to the storage of your data and email address, and their use to send the newsletter, at any time, for example by clicking the “Unsubscribe” link in the newsletter. The lawfulness of any data processing already carried out remains unaffected by the withdrawal.
The data you provide to us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter, and will be deleted from the mailing list after you unsubscribe or the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter mailing list at our discretion, in accordance with our legitimate interest under Art. 6(1)(f) GDPR.
After you unsubscribe from the newsletter mailing list, your email address may be stored in a blacklist by us or the newsletter service provider to prevent future mailings. The data in the blacklist is used only for this purpose and is not merged with other data. This serves both your interests and our interests in complying with legal requirements for sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). There is no time limit on storage in the blacklist. You may object to this storage if your interests outweigh our legitimate interest.
7. Plugins and Tools
Google Web Fonts
This website uses what are known as web fonts, provided by Google, for the consistent display of fonts. When you visit a page, your browser loads the necessary web fonts into your browser cache to display text and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This allows Google to learn that this website was accessed via your IP address. Google Web Fonts are used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring a consistent presentation of fonts on its website. If corresponding consent was requested (e.g. consent to store cookies), processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent may be withdrawn at any time.
If your browser does not support Web Fonts, a standard font from your computer will be used.
For more information about Google Web Fonts, see https://developers.google.com/fonts/faq and Google's privacy policy: https://policies.google.com/privacy?hl=de.
8. eCommerce and payment providers
Processing data (customer and contract data)
We collect, process and use personal data only to the extent necessary to establish, substantiate or amend the legal relationship (inventory data). This is done on the basis of Art. 6(1)(b) GDPR, which permits the processing of data to perform a contract or take pre-contractual measures. We collect, process and use personal data about the use of this website (usage data) only to the extent necessary to enable or bill the user for use of the service.
The customer data collected will be deleted after the order has been completed or the business relationship has ended. Statutory retention periods remain unaffected.
Data transfer upon conclusion of a contract for online shops, retailers and shipping goods
We only transfer personal data to third parties when this is necessary to process the contract, for example to companies responsible for delivering the goods or the credit institution commissioned to process payments. No further transfer of data takes place, or only takes place if you have expressly consented to the transfer. We do not pass on your data to third parties without your express consent, for example for advertising purposes.
The legal basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data to perform a contract or take pre-contractual measures.
Integration of the Trusted Shops Trustbadge
The Trusted Shops Trustbadge is embedded on this website to display our Trusted Shops quality seal and any reviews collected, and to offer Trusted Shops products to buyers after they place an order.
This serves to protect our overriding legitimate interests, identified through a balancing of interests, in optimal marketing by enabling secure shopping, pursuant to Art. 6(1) S. 1 lit. f GDPR. The Trustbadge and the services promoted with it are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided as part of order processing by a CDN provider (Content Delivery Network). Trusted Shops GmbH also uses service providers in the USA. An adequate level of data protection is ensured. Further information about data protection at Trusted Shops GmbH can be found here: https://www.trustedshops.de/impressum/#datenschutz
When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which also contains your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access. Individual access data is stored in a security database to analyze security incidents. The log files are automatically deleted no later than 90 days after they are created.
Further personal data will be transferred to Trusted Shops GmbH if, after completing an order, you decide to use Trusted Shops products or have already registered to use them. The contractual agreement between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you, as a buyer, are already registered to use a product is checked automatically using a neutral parameter: the email address hashed using a cryptographic one-way function. Before transmission, the email address is converted into this hash value, which Trusted Shops cannot decrypt. Once a match has been checked, the parameter is automatically deleted.
This is necessary to pursue our and Trusted Shops’ overriding legitimate interests in providing the buyer protection and transactional review services associated with the specific order in each case, pursuant to Art. 6(1) S. 1 lit. f GDPR. Further details, including information on how to object, can be found in the Trusted Shops Privacy Policy linked above and in the Trustbadge.