Data Protection

Data Protection at a Glance
General Information
The following information provides a simple overview of what happens with your personal data when you visit this website. Personal data includes any information that can be used to identify you personally. Detailed information about data protection can be found in our privacy policy listed below this text.
Data Collection on this Website
Who is responsible for data collection?
The data processing on this website is carried out by the website operator. Their contact details can be found in the section “Information about the Responsible Party” of this privacy policy.
How we collect your data
Your data is collected partly by you providing it to us. This may include data you enter in a contact form. Other data is automatically collected or after your consent when you visit the website through our IT systems. This includes mainly technical data (e.g., internet browser, operating system, time of page access). The data collection happens automatically as soon as you visit the website.
Purpose of data use
Some data is collected to ensure error-free website provision. Other data is used to analyze user behavior. If contracts are concluded or initiated via the website, the data is also processed for contractual offers, orders, or other service requests.
Your rights regarding your data
You have the right at any time to receive free information about the origin, recipients and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you can revoke this consent with future effect at any time. You also have the right to request restriction of your personal data processing under certain circumstances. Further, you have the right to lodge a complaint with the competent supervisory authority.
You may contact us anytime for these or other data protection questions.
Analytics and third-party tools
Your surfing behavior may be statistically evaluated when visiting this website, mainly using so-called analytics programs. Detailed information on these analytics programs can be found in the privacy policy.
Hosting
The contents of our website are hosted by united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Germany.
This website is externally hosted. Personal data recorded on this website is stored on the servers of the hosting provider(s). This may include IP addresses, contact requests, meta- and communication data, contract data, contact data, names, website accesses and other data generated via a website.
The external hosting is for performance of contracts with our potential and actual customers (Art. 6 (1) lit. b GDPR) and in the interests of secure, fast and efficient online service provision by a professional provider (Art. 6 (1) lit. f GDPR).
If consent is obtained, data processing is solely on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG insofar as consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under TDDDG. Consent can be revoked at any time.
Our host(s) will only process your data as far as necessary to fulfill their obligations and will follow our instructions regarding the data.
General information and legal requirements
We take data protection seriously and treat your data confidentially and according to legal provisions and this privacy policy.
When you use the website, various personal data is collected.
Personal data means data that can identify you personally. This privacy policy explains which data is collected and what it is used for. It also explains how and for what purpose.
Please note that data transmission over the internet (e.g., email communication) can have security gaps. Complete protection from third-party access cannot be guaranteed.
Information about the responsible party
The responsible party for data processing on this website is:
Lafrenz Industries-Management GmbH
Heilwigstraße 95
20249 Hamburg
Phone: +491783866521
Email: r-d.lafrenz@gmx.de
The responsible party is the natural or legal person which solely or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Storage duration
Unless otherwise stated, your personal data will be stored until the purpose of the data processing ceases. If you make a justified erasure request or revoke consent to data processing, your data will be deleted unless there are legal obligations to retain (e.g., tax or commercial law retention periods). Deletion will occur after these obligations cease.
Legal basis for data processing
If you consented, we process your data based on Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR for special categories. If you explicitly consented to data transfer to third countries, processing is also on Art. 49 (1) lit. a GDPR. If you consented to cookie storing or device information access (e.g., device fingerprinting), the processing is also on § 25 (1) TDDDG. Consent can be revoked anytime. We process data for contract performance and legal obligations or legitimate interests as applicable. Detailed legal bases are given in this policy.
Recipients of personal data
In our business activities, we cooperate with external entities. Sometimes personal data is transferred to those entities. Data is shared only if necessary for contract fulfillment, legally required (e.g., tax authorities), legitimate interests (Art. 6 (1) lit. f GDPR), or other legal grounds. Data processors are only given data based on valid processing contracts. In joint data processing, joint processing agreements apply.
Revocation of data processing consent
Many data processes require your explicit consent. You can revoke consent anytime. Lawfulness of data processing prior to revocation is not affected.
Right to object in special cases and direct advertising (Art. 21 GDPR)
If processing is based on Art. 6 (1) lit. e or f GDPR, you have the right to object based on your particular situation, including profiling based on these provisions. You find the legal basis in this privacy policy. If you object, we stop processing your data unless we can show overriding lawful reasons or processing serves legal claims.
If your data is processed for direct advertising, you may object anytime, also regarding profiling. After objection, data will no longer be used for these purposes.
Right to lodge complaints
If GDPR is violated, you can complain to supervisory authorities in your EU member state of residence, workplace or violation location, without affecting other legal remedies.
Right to data transfer
You can request data processed on consent or contract in a common, machine-readable format and request transfer to another controller if technologically feasible.
Right of access, correction and erasure
You have the right to information about your stored data, its origin, recipients and purpose. You can also request correction or deletion of data within legal provisions. Contact us for questions on personal data.
Right to restrict processing
You can request restrictions in processing in cases of contested data accuracy, unlawful processing, need for storage for legal claims, or objection pending interest balancing. Restricted data can only be processed with your consent, legal claims, or important public interests.
Objection to advertising emails
Use of contact data published in the imprint for unsolicited advertising and information sending is objected to. Operators reserve rights for legal steps against unsolicited advertising (e.g., spam emails).
Data collection on this website
Contact form
Data you provide in contact forms including contact details is stored for inquiry processing and follow-up. Data is not shared without your consent. Processing is based on Art. 6 (1) lit. b GDPR if contract related, otherwise on legitimate interest or consent, which can be revoked anytime. Data remains until deletion is requested, consent revoked or purpose ends unless legal retention applies.
Social media
Social media elements with Shariff
This website uses social media components (Facebook, X, Instagram, Pinterest, XING, LinkedIn, Tumblr). These elements are usually identifiable by their logos. To protect data, we use the “Shariff” solution to prevent data transfer before your consent. Once activated, a direct server connection transmits your IP and visit info. Logged in users can have visits assigned to accounts.
Plugin activation is your consent per Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, revocable anytime.
Use is to obtain legally required consent for certain technologies. Legal basis is Art. 6 (1) lit. c GDPR.
Facebook
Facebook elements are integrated. Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Facebook may transfer data to the US and other countries. Details: Facebook plugins.
Active elements establish a device connection to Facebook servers, sharing IP and visit data, allowing content linking to your Facebook profile. We do not access transmitted data or usage. Privacy: Facebook privacy.
Role is consent-based and revocable. Data transfer to Facebook is jointly controlled by us and Meta Platforms Ireland Limited per Art. 26 GDPR, limited to collection and forwarding. Facebook processes data alone later. Joint agreements apply: Joint processing agreement. We’re responsible for privacy info and secure tool integration. Data rights may be enforced directly at Facebook or via us.
US data transfer relies on standard contractual clauses: SCC. Facebook holds EU-US Data Privacy Framework certification: DPF.
Instagram
Instagram functions are similarly provided by Meta Platforms Ireland Limited. Server connection and data flow procedures match Facebook’s with corresponding privacy and consent protocols. More info: Instagram policy.
Analytics and advertising
WP Statistics
We use WP Statistics, operated by Veronalabs, Estonia (https://veronalabs.com), to statistically analyze visitor traffic. Data includes log files (IP address, referrer, browser, user origin, search engine), and user actions like clicks and views. Data is stored only on our servers.
Use is based on legitimate interests (Art. 6 (1) f GDPR). With consent, processing is according to Art. 6 (1) a GDPR and § 25 TDDDG, revocable anytime. IP addresses are anonymized by truncation.
Newsletter
Newsletter data
If you wish to subscribe to our newsletter, we need your email and information that allows verification of ownership and your agreement to receive the newsletter. No other data is required except optionally volunteered. We use this data only to send the requested newsletter and do not share it with third parties. Data processing is solely based on your consent per Art. 6 (1) a GDPR. You can revoke your consent and unsubscribe anytime, e.g., via an unsubscribe link. Lawfulness of prior processing remains unaffected. Data is stored until unsubscription or purpose ends and then deleted. In line with legitimate interests, we may delete or block email addresses. Data used for other purposes remains unaffected.
After unsubscription, your email may be stored in a blacklist to prevent future mailings, only used for this aim, respecting your and our interests regarding legal compliance. Blacklist storage is indefinite but can be contested when overriding interests apply.