The responsible authority according to the Data Protection Act is
Blue Lion GmbH
Denninger Straße 165
Telefon +49 89 25 54 24 30
The controller (entity acting as data controller) regularly verifies and updates the information on its websites. Despite the due care taken, it is possible that some of the information may have changed. Therefore, no liability can be assumed or guarantee given that the information is always current, correct and/or complete. The same applies to all other websites referred to via hyperlinks. The controller is not responsible for the content of the websites that are linked in this way.
The content and design of the website are copyrighted. Any reproduction of the pages or their contents requires the prior written consent of the controller, unless such reproduction is permitted by law.
Personal data is detailed information about personal or material circumstances of an identified or identifiable natural person. This includes information such as your name, your address, your telephone number and your date of birth. Information that is not directly related to your actual identity is not considered personal data.
General purposes of data collection
Data is only collected, stored and processed for our own business purposes. Our websites are available to all users without requiring them to disclose personal data. Personal data will only be requested, processed and used to the extent necessary to provide the services or content that you have requested.
When you visit our website, our web servers temporarily store information in so-called server log files. This information includes the IP address assigned to your computer, the webpages you visit, the date and duration of your visit, the type of browser and operating system type used, and the website from which you are visiting us. This data is processed for the purpose of enabling use of the website (establish a connection), system security, technical administration of the network infrastructure and optimizing our Internet presence. This involves only information that does not permit any conclusions to be drawn about your person.
If you contact us by email or using the contact form, the information you provide will be saved for the purpose of processing your request and for possible follow-up questions. The personal data transmitted to us in this way will of course only be used for the purpose for which you made it available to us when contacting us.
The provision of this information is entirely voluntary and is performed with your consent. If the information involved is information relating to communication channels (such as postal address, e-mail address, telephone number), you also agree that we may contact you via these communication channels in order to respond to your request.
You can of course revoke your declarations of consent at any time in the future. To do this, please contact our data protection officer, whose contact details are listed below.
Collection of personal data for personalized use
In addition to the use of our website for purely informational purposes, we also offer various services and products that you can use if interested. To do this, you will usually have to provide additional personal data that we will use to provide the respective service. Optional information is marked accordingly. We only collect, process and use the personal data that is required for your use of the website and/or for the performance of a contract concluded with us, or which you specify yourself. This includes in particular the following inventory data and usage data, which may be transmitted by means of forms on our website or contractual documents:
- Name (form of address, first name, last name)
- Telephone number
- E-mail address
- User’s registration and login data
We use inventory data and usage data to establish, if applicable, a contractual relationship with you, to define its nature, to change or terminate it, to fulfill our contractual obligations, to log the user onto the website, and to contact you if requested to do so by you or required or legally permitted to do so within the scope of the contractual relationship.
If you have provided us with your consent, we also collect your data for the purpose of sending information material, brochures, advertising, event management, managing press contacts and the management of charity events for example.
If we provide you with contractual or precontractual services in accordance with Art. 6 para. 1(b) GDPR, the data to be processed, the type, the scope, the purpose and the need for its processing are determined by the underlying mandate. This includes inventory and master data (name, address, etc.) as well as contact data (e-mail address, telephone number, etc.). Furthermore, it may be necessary to collect other contract data (nature of the task, fees, terms, information about the brokered companies/services) and payment data. We may also process information on the characteristics and circumstances of persons or property belonging to them if this is forms part of the task we are to perform, for example the rental or sale of commercial or residential property. This can include information on personal circumstances, movable and immovable property for example.
Data protection relating to job applications and the application process
The controller collects and processes the applicants’ personal data for the purpose of carrying out the application process. Processing may also be performed electronically. This applies in particular if an applicant sends the relevant application documents to the controller by electronic means, for example via e-mail or using a web form available on the website. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of handling the employment relationship in compliance with statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be deleted automatically six months after that applicant has been notified of the decision to reject his or her application, provided that no other legitimate interests of the controller prevent their deletion. Other legitimate interest in this context would be the burden of proof in proceedings under the General Equal Treatment Act (AGG) for example.
Use and disclosure of personal data
If we disclose data to other persons or companies (processors or third parties) during our processing operation, transmit the data to them or otherwise grant them access to the data, this will only take place on the basis of a legal authorization (e.g. if transmission of the data to third parties is required for contract performance pursuant to Art. 6 para. 1(b) DSGVO), if you have consented, if a legal obligation provides for this, or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties with the processing of data within the framework of a so-called “order processing contract”, this is done on the basis of Art. 28 GDPR.
Deletion or blocking of data
We adhere to the principles of data avoidance and minimization. Legislators have stipulated a number of storage-related obligations and storage periods. Once these time periods have expired, the corresponding data is routinely deleted or blocked in accordance with statutory provisions. Where data is not subject to such statutory time limits, it will be deleted or blocked once the reasons for which it was collected cease to apply. If you have agreed to your data being stored, processed and used for a longer period of time, we will delete or block your data after this period has expired or if you your revoke your consent.
Web analysis using Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called cookies, i.e. text files that are stored on your computer, to allow an analysis of how you use the site. The information that the cookie generates about your use of this website is transmitted to and stored on a server operated by Google in the USA. IP address anonymization is activated on this website. This means that Google will abbreviate your IP address in advance within member states of the European Union or other contracting parties to the Agreement on the European Economic Area. The complete IP address will only be transmitted to a Google server in the US and abbreviated there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports about website activities for the website operator and provide other services related to the use of the website and of the Internet. The IP address conveyed by your browser within the context of Google Analytics will not be linked to any other Google data.
You can also prevent the data generated by the cookie about your interaction with the website (including your IP address) from being conveyed to Google and being processed by Google by downloading and installing the browser plug-in available via the following link: An opt-out cookie will be set which prevents your data from being collected when you visit this website in the future Disable Google Analytics
So-called social bookmarks are integrated in our website. Social bookmarks are Internet bookmarks that allow users of such a service to collect links and news items. These are merely integrated in our website as links to the corresponding services. After clicking on the embedded graphic, you will be forwarded to the website of the respective provider. This means user information will only be transmitted to the respective provider from that point on. For information on how your personal information is handled when you use these websites, please consult the respective provider’s data protection regulations.
- Xing SE, Dammtorstraße 30, 20354 Hamburg, DE;http://www.xing.com/privacy
- Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php.
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland; https://www.google.com/policies/privacy/partners/?hl=de.
- Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy.
- Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA; https://help.instagram.com/155833707900388/
- LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy
- Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA; http://vimeo.com/privacy
- VK, LLC “V Kontakte” of 1-N, bld. 12-14, Lit. A, Khersonskaya st., St. Petersburg, Russia, 191024;https://vk.com/privacy
We have integrated Youtube videos into our website where appropriate; these are stored on www. Youtube.com and can be played directly from our website. These are all integrated in the “enhanced data protection mode”, i.e. no data about you as a user will be transmitted to Youtube if you do not play the videos. Only when you play the videos will the third party provider be informed that you have accessed the corresponding subpage of our website. We have no influence over the transmission of this data.
The data protection regulations published by Youtube, which can be accessed at www.google.de/intl/de/policies/privacy/, provide information about the collection, processing and use of personal data by Youtube and Google.
Use of Google Maps
Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de
Links to websites operated by other providers
Legal basis for data collection
In accordance with Articles 13 and 14 of the GDPR, we wish to provide you with information regarding the legal basis for our data processing.
- Insofar as we obtain the consent for the processing of personal data from the data subject, Art. 6 para. 1(a) GDPR serves as the legal basis.
- When processing personal data that is required for the performance of a contract to which the data subject is a party, Art. 6 para. (1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the execution of precontractual measures.
- Insofar as the processing of personal data is required for compliance with a legal obligation to which our company is subject, Art. 6 para. 1(c) GDPR serves as the legal basis.
- The legal basis for the temporary storage of data and log files is Art. 6 para. 1(f) GDPR .
- The legal basis for the processing of personal data using cookies that are technically necessary is Art. 6 para. 1(f) GDPR. The legal basis for the processing of personal data using cookies for analytical purposes is Art. 6 para. 1(f) GDPR.
- After you register for our newsletter, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1(a)XXOK GDPR.
- If processing is required to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 para. 1(f) GDPR serves as the legal basis for processing.
- If the processing of personal data is based on Art. 6 1(f) GDPR, it is in our legitimate interest to conduct our business for the benefit of well-being of all our employees and our shareholders.
We have taken comprehensive technical and operational security measures to protect your data from intentional or unintentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are monitored regularly and updated in line with technological progress.
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. TLS) via HTTPS.
Our hosting partner’s systems are located in the Federal Republic of Germany.
Your rights / right to information, objection, deletion, rectification and complaint
The user and other persons concerned have the following rights with regard to their personal data:
- Right to information pertaining to the relevant personal data (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to deletion (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right of objection to processing if the processing of data is based on Art. 6 para. 1(e/f) GDPR (Art. 21 GDPR ); see also the following reference to the right of objection under Art. 21 GDPR
- Right to data portability (Art. 20 GDPR)
- Right to revoke consent given at any time, without affecting the legality of the processing carried out on the basis of the consent until revocation, if the data processing is based on consent pursuant to Art. 6 para. 1(a) or Art. 9 para. 2(a) GDPR
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR).
Reference to the right to object under Art. 21 GDPR
A. Objection on grounds relating to the particular situation
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data that is based on Art. 6 para 1e (public safety) or 1f (data processing on the basis of a balancing of interests) of the GDPR; this includes profiling based on those provisions. We no longer process personal data unless we can prove compelling grounds for processing this data that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
B. Right to object to direct advertising
If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of you personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
C. Exercising your right to object
Contact data for the data protection officer
If you have any questions about data protection or would like further information, please contact our data protection officer:
Blue Lion GmbH
Denninger Straße 165
Contact data for the responsible supervisory authority
Bayerisches Landesamt für Datenschutzaufsicht (Bavarian State Ministry for Data Privacy Protection)
Telephone: +49 981 53-1300
Telefax: +49 981 53-981300
Amendment to our data protection regulations