Legal Information / Privacy Policy

The responsible authority according to the Data Protection Act is

Blue Lion GmbH
Denninger Straße 165
81925 München
Telefon +49 89 25 54 24 30

Legal information

The controller (entity acting as data controller) regularly verifies and updates the information on its websites. Despite the due care taken, it is possible that some of the information may have changed. Therefore, no liability can be assumed or guarantee given that the information is always current, correct and/or complete. The same applies to all other websites referred to via hyperlinks. The controller is not responsible for the content of the websites that are linked in this way.

The content and design of the website are copyrighted. Any reproduction of the pages or their contents requires the prior written consent of the controller, unless such reproduction is permitted by law.

Privacy policy

Welcome to our website and thank you for your interest in our privacy policy. The protection of your personal data is important to us. Therefore the processing of data belonging to visitors to our website, interested parties and customers is performed in accordance with the applicable laws and regulations for the protection of personal data, such as the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG-neu).

This privacy policy provides you with information on which data will be collected and how it will be used, and the legal basis for doing this. We will also provide you with information about your rights and who you can contact if you have any questions about data protection or complaints.

Personal data

Personal data is detailed information about personal or material circumstances of an identified or identifiable natural person. This includes information such as your name, your address, your telephone number and your date of birth. Information that is not directly related to your actual identity is not considered personal data.

General purposes of data collection

Data is only collected, stored and processed for our own business purposes. Our websites are available to all users without requiring them to disclose personal data. Personal data will only be requested, processed and used to the extent necessary to provide the services or content that you have requested.

Server logs

When you visit our website, our web servers temporarily store information in so-called server log files. This information includes the IP address assigned to your computer, the webpages you visit, the date and duration of your visit, the type of browser and operating system type used, and the website from which you are visiting us. This data is processed for the purpose of enabling use of the website (establish a connection), system security, technical administration of the network infrastructure and optimizing our Internet presence. This involves only information that does not permit any conclusions to be drawn about your person.

Contact form

If you contact us by email or using the contact form, the information you provide will be saved for the purpose of processing your request and for possible follow-up questions. The personal data transmitted to us in this way will of course only be used for the purpose for which you made it available to us when contacting us.

The provision of this information is entirely voluntary and is performed with your consent. If the information involved is information relating to communication channels (such as postal address, e-mail address, telephone number), you also agree that we may contact you via these communication channels in order to respond to your request.

You can of course revoke your declarations of consent at any time in the future. To do this, please contact our data protection officer, whose contact details are listed below.

Collection of personal data for personalized use

In addition to the use of our website for purely informational purposes, we also offer various services and products that you can use if interested. To do this, you will usually have to provide additional personal data that we will use to provide the respective service. Optional information is marked accordingly. We only collect, process and use the personal data that is required for your use of the website and/or for the performance of a contract concluded with us, or which you specify yourself. This includes in particular the following inventory data and usage data, which may be transmitted by means of forms on our website or contractual documents:

  • Company
  • Name (form of address, first name, last name)
  • Address
  • Company
  • Telephone number
  • E-mail address
  • User’s registration and login data

We use inventory data and usage data to establish, if applicable, a contractual relationship with you, to define its nature, to change or terminate it, to fulfill our contractual obligations, to log the user onto the website, and to contact you if requested to do so by you or required or legally permitted to do so within the scope of the contractual relationship.
If you have provided us with your consent, we also collect your data for the purpose of sending information material, brochures, advertising, event management, managing press contacts and the management of charity events for example.

If we provide you with contractual or precontractual services in accordance with Art. 6 para. 1(b) GDPR, the data to be processed, the type, the scope, the purpose and the need for its processing are determined by the underlying mandate. This includes inventory and master data (name, address, etc.) as well as contact data (e-mail address, telephone number, etc.). Furthermore, it may be necessary to collect other contract data (nature of the task, fees, terms, information about the brokered companies/services) and payment data. We may also process information on the characteristics and circumstances of persons or property belonging to them if this is forms part of the task we are to perform, for example the rental or sale of commercial or residential property. This can include information on personal circumstances, movable and immovable property for example.

Data protection relating to job applications and the application process

The controller collects and processes the applicants’ personal data for the purpose of carrying out the application process. Processing may also be performed electronically. This applies in particular if an applicant sends the relevant application documents to the controller by electronic means, for example via e-mail or using a web form available on the website. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of handling the employment relationship in compliance with statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be deleted automatically six months after that applicant has been notified of the decision to reject his or her application, provided that no other legitimate interests of the controller prevent their deletion. Other legitimate interest in this context would be the burden of proof in proceedings under the General Equal Treatment Act (AGG) for example.

Use and disclosure of personal data

If we disclose data to other persons or companies (processors or third parties) during our processing operation, transmit the data to them or otherwise grant them access to the data, this will only take place on the basis of a legal authorization (e.g. if transmission of the data to third parties is required for contract performance pursuant to Art. 6 para. 1(b) DSGVO), if you have consented, if a legal obligation provides for this, or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

If we commission third parties with the processing of data within the framework of a so-called “order processing contract”, this is done on the basis of Art. 28 GDPR.

Deletion or blocking of data

We adhere to the principles of data avoidance and minimization. Legislators have stipulated a number of storage-related obligations and storage periods. Once these time periods have expired, the corresponding data is routinely deleted or blocked in accordance with statutory provisions. Where data is not subject to such statutory time limits, it will be deleted or blocked once the reasons for which it was collected cease to apply. If you have agreed to your data being stored, processed and used for a longer period of time, we will delete or block your data after this period has expired or if you your revoke your consent.


So-called cookies are used to improve the content of our website. These are small files that are transmitted from a web server to your browser and which are sent to us by your browser every time you access one of our webpages. The data stored is collected for the purpose of market research and allows us to tailor our offering to your particular needs and is used exclusively for this purpose. Please note that you can configure your browser in such a way that you prevent the use of cookies or are informed when a cookie is being set. If you want to know how to change your cookie settings, click on the “Help” field in your browser.

Web analysis using Google Analytics

This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called cookies, i.e. text files that are stored on your computer, to allow an analysis of how you use the site. The information that the cookie generates about your use of this website is transmitted to and stored on a server operated by Google in the USA. IP address anonymization is activated on this website. This means that Google will abbreviate your IP address in advance within member states of the European Union or other contracting parties to the Agreement on the European Economic Area. The complete IP address will only be transmitted to a Google server in the US and abbreviated there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports about website activities for the website operator and provide other services related to the use of the website and of the Internet. The IP address conveyed by your browser within the context of Google Analytics will not be linked to any other Google data.

You will find more information about how Google Analytics uses the data and how you can control the information that is sent to Google here.

You can prevent the use of cookies by selecting the appropriate settings in your browser. In this case, however, we would like to point out that you might not be able to make full use of all the features of this website.
You can also prevent the data generated by the cookie about your interaction with the website (including your IP address) from being conveyed to Google and being processed by Google by downloading and installing the browser plug-in available via the following link: An opt-out cookie will be set which prevents your data from being collected when you visit this website in the future Disable Google Analytics

Social bookmarks

So-called social bookmarks are integrated in our website. Social bookmarks are Internet bookmarks that allow users of such a service to collect links and news items. These are merely integrated in our website as links to the corresponding services. After clicking on the embedded graphic, you will be forwarded to the website of the respective provider. This means user information will only be transmitted to the respective provider from that point on. For information on how your personal information is handled when you use these websites, please consult the respective provider’s data protection regulations.


We have integrated Youtube videos into our website where appropriate; these are stored on www. and can be played directly from our website. These are all integrated in the “enhanced data protection mode”, i.e. no data about you as a user will be transmitted to Youtube if you do not play the videos. Only when you play the videos will the third party provider be informed that you have accessed the corresponding subpage of our website. We have no influence over the transmission of this data.

The data protection regulations published by Youtube, which can be accessed at, provide information about the collection, processing and use of personal data by Youtube and Google.

Use of Google Maps

This website uses Google Maps API to display geographical information visually where appropriate. When using Google Maps, Google also collects, processes and uses data about the visitors’ use of the map functions. You can find more information about Google’s data processing in Google’s privacy policy. This is also where you will find the data protection center, where you can change your personal data protection settings.
Address for Google Inc. and the URL for its privacy policy:
Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA;

Links to websites operated by other providers

Our websites include links to websites operated by other providers that are not covered by this data privacy policy. Insofar as the use of websites operated by other providers involve the collection, processing or use of personal data, please take account of the privacy policy provided by the respective website operator.

Legal basis for data collection

In accordance with Articles 13 and 14 of the GDPR, we wish to provide you with information regarding the legal basis for our data processing.

  • Insofar as we obtain the consent for the processing of personal data from the data subject, Art. 6 para. 1(a) GDPR serves as the legal basis.
  • When processing personal data that is required for the performance of a contract to which the data subject is a party, Art. 6 para. (1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the execution of precontractual measures.
  • Insofar as the processing of personal data is required for compliance with a legal obligation to which our company is subject, Art. 6 para. 1(c) GDPR serves as the legal basis.
  • The legal basis for the temporary storage of data and log files is Art. 6 para. 1(f) GDPR .
  • The legal basis for the processing of personal data using cookies that are technically necessary is Art. 6 para. 1(f) GDPR. The legal basis for the processing of personal data using cookies for analytical purposes is Art. 6 para. 1(f) GDPR.
  • After you register for our newsletter, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1(a)XXOK GDPR.
  • If processing is required to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 para. 1(f) GDPR serves as the legal basis for processing.
  • If the processing of personal data is based on Art. 6 1(f) GDPR, it is in our legitimate interest to conduct our business for the benefit of well-being of all our employees and our shareholders.


We have taken comprehensive technical and operational security measures to protect your data from intentional or unintentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are monitored regularly and updated in line with technological progress.

SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. TLS) via HTTPS.

Server location

Our hosting partner’s systems are located in the Federal Republic of Germany.

Your rights / right to information, objection, deletion, rectification and complaint

The user and other persons concerned have the following rights with regard to their personal data:

  • Right to information pertaining to the relevant personal data (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to deletion (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right of objection to processing if the processing of data is based on Art. 6 para. 1(e/f) GDPR (Art. 21 GDPR ); see also the following reference to the right of objection under Art. 21 GDPR
  • Right to data portability (Art. 20 GDPR)
  • Right to revoke consent given at any time, without affecting the legality of the processing carried out on the basis of the consent until revocation, if the data processing is based on consent pursuant to Art. 6 para. 1(a) or Art. 9 para. 2(a) GDPR

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR).

Reference to the right to object under Art. 21 GDPR

A. Objection on grounds relating to the particular situation
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data that is based on Art. 6 para 1e (public safety) or 1f (data processing on the basis of a balancing of interests) of the GDPR; this includes profiling based on those provisions. We no longer process personal data unless we can prove compelling grounds for processing this data that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

B. Right to object to direct advertising
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of you personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

C. Exercising your right to object
The right of objection can be exercised informally. Simply contact our data protection contact named at the end of this privacy policy.

Contact data for the data protection officer

If you have any questions about data protection or would like further information, please contact our data protection officer:
Blue Lion GmbH
Denninger Straße 165
81925 München

Contact data for the responsible supervisory authority

Bayerisches Landesamt für Datenschutzaufsicht (Bavarian State Ministry for Data Privacy Protection)
Postal address:
Postfach 606
D-91511 Ansbach
Telephone: +49 981 53-1300
Telefax: +49 981 53-981300

Amendment to our data protection regulations

We reserve the right to make amendments to this privacy policy on occasion so that it corresponds to the current legal requirements or in order to incorporate changes in our services in the privacy policy, e.g. for the introduction of new services.  The new privacy policy will then apply to your next visit.