As a visitor to our website, as a customer or party interested in our services or any other data subject, we would like to give you an overview of the processing of your personal data by us and of your rights under data protection law with the following information. Details of which data are processed and the manner in which they are used is predominantly determined by the services requested or agreed. Therefore, not every element of this information may be applicable to you.
1. Controller and contact details of the Data Protection Officer
Responsibility lies with
LUKAS Hydraulik GmbH
Tel: +49 9131 698-0
Fax: +43 7 242 698-394
(hereinafter referred to as the "company")
You can reach our internal Data Protection Officer under
Tel: +49 8441 47706-10
2. Processing of personal data in connection with your use of our website
2.1 Data categories, purpose of processing and legal basis
Within the scope of your use of the website, we process the following personal data:
- Personal data that you yourself enter voluntarily as part of an online offering (e.g. contact requests) such as first and last name, e-mail address, telephone number, information provided as part of a support request, comments or forum posts and
- Information that is automatically sent to us by your web browser or terminal device such as your IP address, device type, browser type, web pages previously visited, sub-pages visited, or the date and time of each visitor's enquiry.
We process your personal data to allow the display of the website in your browser, to ensure the functionality of the website and to optimise the website. An analysis of the data for marketing purposes does not take place in this context.
The above-mentioned purposes also constitute our legitimate interest in data processing in accordance with Article 6 paragraph 1 lit. f) GDPR
- to enable you to use the services and functions of the online offerings,
- to process your request,
- to determine your identity and allow user authentication,
or to fend off and prevent fraudulent and similar acts, including attacks on our IT infrastructure.
In some cases, we will ask you for your express consent to the processing of your personal data. In such a case, the legal basis for processing your personal data is the consent you have given in accordance with Article 6 paragraph 1 lit. a) GDPR.
Cookies are small text files that your browser automatically creates and stores on your mobile device when you visit the website. Cookies contain information that is related to the context of use and your terminal device.
The following cookies are used by us:
2.2.1 Necessary cookies
Necessary cookies are mandatory for the use of the website services by allowing basic functions such as page navigation and access to secure areas of the website. The website usually does not function properly without setting the required cookies. Furthermore, necessary cookies are those that serve IT security.
2.2.2 Preference cookies
Preference cookies allow us to store settings of the website that are not linked to a permanent identification code of the website such as a user name. Usually such cookies contain information about the language settings or the presentation of search results.
2.2.3 Marketing and statistical cookies
Marketing and statistical cookies are used for behavioural advertising. This includes in particular cookies for the purpose of frequency capping or affiliate marketing. Also included are analysis or statistics cookies (which are sometimes differentiated in other presentations), which are used to determine the number of individual visitors or the respective usage behaviour on the respective website. Marketing cookies are set when user links to websites follow in order to track clicking behaviour.
2.2.4 Third party cookies
These cookies are set by third parties, e.g. social networks such as Facebook, Twitter and Google+ the contents of which you can integrate via the "social plug-ins" offered on the websites.
2.2.5 Overview of the cookies used on this website:
You automatically receive an overview of the cookies used and can actively agree to them or make a selection.
188.8.131.52 Google Analytics
This website uses functions of the web analysis service "Google Analytics". This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, U.S.A.
Google Analytics uses so-called cookies. These are text files that are stored on your computer and which enable you to use the website for analysis. The information about your use of the Website generated by the cookie is usually transferred to a Google server in the United States where it is then stored.
The storage of Google Analytics cookies is based on Article 6 paragraph 1 lit. a) GDPR. We will obtain the necessary consent from our users as soon as they have called up our website..
We have activated the IP anonymisation function on this website. This means that Google will truncate your IP address within the states of the European Union or other signatory states to the Agreement on the European Economic Area before sending it to the U.S.A. Only in exceptional cases will the entire IP address be transferred to the Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transferred by Google Analytics from your browser will not be combined with other data from Google.
You can prevent the storage of cookies by making the appropriate setting in your browser software. However, we should point out that, in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent collection and processing of the data generated by the cookie relating to your use of the website (including your IP address) by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An op-out cookie is set to prevent the collection of your data during future visits to this website: Disable Google Analytics.
For additional information on the handling of user data at Google Analytics, please refer to the privacy notice of Google: https://support.google.com/analytics/answer/6004245?hl=de.
184.108.40.206 Google Tag Manager
We use the Google Tag Manager on our website. The provider is Google Ireland Limited, Google Building, Gordon House, 4 Barrow St., Dublin, D04 E5W5, Ireland, as our contract processor.
The Google Tag Manager allows us to manage cookies and control their play out. This allows us to implement e.g. your consent, a revocation of consent or an opt-out. The Google Tag Manager does not set its own cookies and does not process data stored in cookies.
The data (protocol data that is generated for technical reasons when the website is called up via the Hypertext Transfer Protocol (Secure) (HTTP(S)), e.g. IP address, type and version of your Internet browser, operating system used, the page called up, the page previously visited (referrer URL), date and time of access) is automatically made available by the user's browser.
Without disclosure of personal data such as the IP address, the use of the website is not possible. Communication via the website without providing data is not technically possible.
We integrate the maps of the OpenStreetMap service to show our dealer network so that you can easily find your nearest LUKAS-Hydraulik partner. The provider of OpenStreetMap is the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.
The data is stored on the basis of Article 6 paragraph 1 lit. a) GDPR. We will obtain the necessary consent from our users as soon as they have called up our website..
2.4 Links to other websites and to our social media pages
You will recognise the links by the logo of the respective social network. By clicking on the logo, a direct connection will be established between your browser and the server of the respective service and you are redirected to the website of the service provider.
- Facebook https://www.facebook.com/privacy/explanation
- YouTube https://policies.google.com/privacy?gl=DE&hl=de#infocollect
2.5 Facebook fan page
We maintain a so-called "Facebook Fan Page" (https://www.facebook.com/LUKAS.Rescue/) to communicate with customers and interested parties there and to inform them about our services and activities. For this purpose, we provide links to this fan page on our website. We have no influence on the type and scope of processing by Facebook. This applies especially to the use of the interactive functions (e.g. sharing, rating). Nor are there any effective control options in this respect. When accessing the platform, the terms and conditions and data processing guidelines of Facebook apply. We should point out that you have sole responsibility when using the services and their functions.
When you visit our Facebook fan page, Facebook especially records your IP address and, if applicable, other information that is available on your PC in the form of cookies. This information is used to provide us, as the owner of the Facebook fan page, with statistical information about the usage of the Facebook page.
For further information, please refer to the data protection declaration of Facebook under
In addition, Facebook provides us with so-called page insights data. We are jointly responsible with Facebook for this data processing. The page insights data is anonymous statistics that we use to evaluate the quality of our Facebook page and our content. These statistics are compiled on the basis of usage data that Facebook collects about your interaction with our Facebook page; we do not have access to this usage data. Facebook has committed itself to us to take primary responsibility for the processing of the page insights data and compliance with your rights according to the EU General Data Protection Regulation and to provide you with the essentials of the applicable agreement. For more information on page insights, see www.facebook.com/legal/terms/information_about_page_insights_data.
2.6 Making contact
If a user contacts us via the e-mail address provided on the website, the data entered in the E-mail is transmitted to us and part of the data is stored.
In this context, the data will not be passed on to third parties outside the company. The data will be used exclusively for processing correspondence.
The legal basis for processing data transmitted in connection with sending an E-mail is Article 6 paragraph 1 lit. f) GDPR. If the objective of the E-mail contact is to conclude a contract, Article 6 paragraph 1 sentence 1 lit. b) GDPR is a further legal basis for processing.
Processing the personal data from the input mask serves us to make contact and to prevent improper use of the contact form. The data will be erased as soon as they are no longer necessary for the purpose for which they were collected. For personal data sent by E-mail, this is the case when the respective correspondence with the user has ended and the matter in question has been finally clarified.
Users have the possibility to object to the processing of their personal data at any time. In such a case, the correspondence cannot be continued. Please send us your erasure request via E-mail to firstname.lastname@example.org for the attention of LUKAS Marketing. In this case, all personal data stored in the course of the contact will be erased.
3. Processing of personal data of business partners
3.1 Description and scope of data processing
Within the scope of its cooperation with Business Partners, the company processes personal data of liaisons at customers, suppliers, interested parties, sales partners and cooperation partners (hereinafter referred to as “Business Partners"): In particular, the following personal data are processed:
- Contact information such as first and last name, business address, business telephone number, business mobile number, business fax number and business E-mail address,
- Payment information such as details required for processing payment transactions or preventing fraud, including credit card details and card verification numbers,
- Additional information which needs to be processed in the context of a project or handling a contractual relationship and which is voluntarily provided by Business Partners, e.g. in the context of orders placed, inquiries or details of projects,
- Personal data collected from publicly available sources, information databases or credit agencies, and,
- as far as legally required in the context of compliance screenings: Date of birth, identity card and ID numbers, information on relevant legal proceedings or other legal disputes involving Business Partners.
3.2 Purpose of data processing
The personal data are processed for the following purposes:
- Communication with Business Partners on products, services and projects, for example to process inquiries from the Business Partner or to provide technical information on products,
- Planning, execution and management of the contractual business relationship, for example to process orders for products and services, collect payments, for accounting and billing purposes and to carry out deliveries, maintenance activities or repairs,
- Implementation of customer surveys, marketing campaigns, market analyses, raffles, competitions and similar promotions and events,
- Implementation of customer satisfaction surveys and direct marketing,
- Maintaining and protecting the security of our products and services as well as our websites, preventing and detecting security risks, fraudulent acts or other criminal or deliberate acts with the intent to cause damage,
- Compliance with (i) legal requirements (e.g. retention requirements under tax and commercial law), (ii) existing obligations to conduct compliance screenings (to prevent white-collar crime or money laundering), and (iii) policies and industry standards and
- Settlement of legal disputes, enforcement of existing contracts and the assertion, exercise and defence of legal claims.
3.3 Legal bases
Processing personal data is necessary to achieve the aforementioned purposes. Unless expressly stated otherwise at the time of collection of personal data, the legal basis for data processing is
- the execution and performance of a contract with you in accordance with Article 6 paragraph 1 lit. b) GDPR,
- the fulfilment of legal obligations to which the undertaking is subject pursuant to Article 6 paragraph 1lit. c) GDPR, or
- safeguarding legitimate interests under Article 6 paragraph 1 lit. f) GDPR. The legitimate interest lies in the initiation, implementation and handling of the business relationship.
If you have expressly given your consent to processing your personal data in individual cases, this consent is the legal basis for processing in accordance with Article 6 paragraph 1 lit. a) GDPR.
3.4 Duration of storage
We process and store your personal data for as long as is necessary for the fulfilment of our contractual obligations and the exercise of our rights. If the data are no longer necessary for the fulfilment of contractual or legal obligations, they are regularly deleted, unless their - temporary - further processing is necessary for the following purposes:
- Fulfilment of commercial and tax law retention obligations under the German Commercial Code (HGB), the German Tax Code (AO) and the Money Laundering Act (GwG). As a rule, the time limits specified there for retention or documentation are two to ten years;
- Preservation of evidence under the statutory regulations regarding the statute of limitations. According to Secs. 195 et seqq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, the regular limitation period being 3 years.
4. Processing of personal data of applicants
4.1 Categories of data and purpose of data processing
Within the framework of the application procedure, we generally process the following categories of personal data:
- Contact and identity information, including name, marital status, gender, nationality, date of birth, residential address and contact details.
- Your application documents and all information contained therein including your CV, cover letter and certificates; other documents relating to your previous work experience, education or similar; and pictures.
- Information about your employment history and work-related experience and skills including hiring date, termination date and reason, employment status, current salary level, other supporting data submitted by applicants or employees, information we may use in the review process of references, previous applications, proof of your skills/qualifications and relocation information.
- Information relating to character and professional interests, including job-related and personal interests; knowledge or skills; and awards or memberships.
- Other personal information you provide to us during the recruitment process including our notes from interviews with you or others about you; and all correspondence you have with us or a recruitment agency during the application process.
- Information about your work permit status.
- Sensitive data, in certain circumstances, including your racial or ethnic origin, trade union membership; religious beliefs; or information about your health such as information about a disability for which the company must make reasonable adjustments during the recruitment process.
We may also obtain the above information about you from other sources, including recruitment agencies, the references you provide, websites and other publicly available information on the Internet. This includes, for example, personal data that you have published as part of an online profile. We may also receive information that you provide to us through third-party websites, such as LinkedIn.
Personal data that you provide us with in the context of your application will be stored and used exclusively for the purpose of processing your application and, if applicable, for the purpose of the subsequent employment.
If your application has convinced us, but we cannot consider you for a vacancy, we would appreciate being allowed to store your documents in our talent pool. In this case, we will ask for your consent in a separate E-mail. Then there is the possibility for you that we will contact you again in case of suitable job openings that fit your profile.
If we would like to send your application documents to other companies in our Group, we will also ask for your consent. You can also give advance consent in your application. In such a case, your personal data will be forwarded to the competent departments of other Group members for the purpose of initiating the application procedure in the respective companies.
4.2 Legal basis for data processing
The processing of your personal data in the context of the application procedure is based on Article 6 paragraph 1 lit. b) GDPR (establishment and execution of a contract) as well as Sec. 26 (1) sentence 1 German Federal Data Protection Act (BDSG).
The storage and processing of your data in the talent pool or forwarding to other members of the Group is based on your consent in accordance with Article 6 paragraph 1 lit. a) GDPR.
4.3 Transfer of data
Your data will be made available to the relevant employees in the Human Resources Department and to the employees or managers of the department(s) responsible for the position for which you have applied. In the case of an unsolicited application, your documents will be made available to the relevant members of the Human Resources Department and to the responsible employees or superiors of the relevant departments for whom your application might be of interest.
Due to our company structure, it can happen that several persons will be responsible for your application; this is evident from the application documents in individual cases. This transfer is protected by obligations set out in intra-group agreements that we have entered into between the various legal entities of the IDEX group of companies. International transfers within the IDEX group of companies are governed by standard contractual clauses approved by the EU Commission for controllers and, where relevant, for processors. You can obtain a copy of these standard contractual clauses which are used in our intra-group agreements by contacting the company and asking for it.
Apart from that, we will not forward your applicant data to affiliated subsidiaries or parent companies unless your application also relates to these companies, is kept open for this purpose or you have given us your express consent.
We also use contract processors (e.g. IT service providers) for the application process. Your data will be passed on to them in strict compliance with the obligation of secrecy and the requirements of the GDPR. The processors commissioned by us may only process the data on our behalf and not for their own purposes. The responsibility for data processing in these cases remains with us.
Data will also be passed on if we are obliged to do so by law and/or official or court orders.
4.4 Transfer of personal data to third countries
Our company is part of the IDEX group of companies where personnel responsibilities can extend beyond national borders. For this reason, relevant supervisors in other countries may also have access to your applicant data. These data processing operations are necessary for the decision of whether or not to offer employment. In addition, data transfer to third countries also takes place when your data is included in the talent pool. This means that our affiliated foreign units also have access to your application data.
When data are transferred to a body in a third country, relevant guarantees for the protection of your personal data ensure that the data protection level of the European Union is observed.
4.5 Deletion periods for applicant data
If no employment relationship is established, the application documents will be deleted six months after a negative reply. The legal basis for storage in this respect is Article 6 paragraph 1 lit. f) GDPR. Our legal interest in this respect is the defence against any claims arising from the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz =”AGG”). In all other respects, the general erasure periods and notes under Clause 8 apply.
5. Recipients and categories of recipients
Within our company, access to your data is granted to those bodies that need it to fulfil their contractual and legal obligations. Service providers and vicarious agents employed by us may also receive data for these purposes, provided they especially maintain confidentiality and integrity of the data. These are companies in the categories IT services, logistics, printing services, telecommunication, collection of receivables, consulting as well as sales and marketing.
As far as passing on data to recipients outside our company is concerned, it must first be kept in mind that we will pass on only necessary personal data, observing all regulations on data protection. We may only pass on information about you if this is required by law, if you have given your consent or if we are authorised to provide information. Under these conditions, recipients of personal data may be
- public bodies and institutions (e.g. tax authorities, criminal prosecution authorities, family courts, land registry offices) if there is a legal or official obligation,
- banking and financial services institutes or comparable institutions to whom we transfer personal data for performing the contractual relationship (banks, credit agencies),
- creditors or liquidators submitting queries in connection with a foreclosure,
- service providers whom we involve in connection with contract data processing relationships,
- sales representatives of the company.
6. Transfer to third countries
Data transfer to bodies in states outside the European Union (so-called third countries) will take place to the extent
- it is necessary for the execution of your orders (e.g. delivery orders)
- it is required by law (such as obligatory reporting under tax law) or
- you have given us your consent.
Moreover, transfer to bodies in third countries is intended in the following cases:
- If necessary in individual cases, your personal data may be transferred to an IT service provider in a third country to ensure the IT operation of the company in compliance with the European data protection level.
- Due to legal regulations to control money laundering, the financing of terrorism and other criminal acts, and as part of a balancing of interests, personal data (e.g. legitimisation data) will be transferred to third countries in individual cases in compliance with the data protection level of the European Union.
You can revoke your consent at any time with effect for the future. For this purpose, please contact our Data Protection Officer at dsb_LukasHydraulik@riscreen.de and delete the relevant cookies in your browser.
7. Data security
Our staff and the providers we have hired are committed to confidentiality and compliance with the provisions of the applicable data protection laws. The company takes adequate technical and organisational security measures to protect your personal data against loss, modification, destruction, access by unauthorised persons or unlawful transfer. Our security measures are constantly being improved in line with technological developments.
8. Rights of data subjects
Every data subject has the right to information pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to limitation of processing pursuant to Article 18 GDPR, and the right to data portability pursuant to Article 20 GDPR.
As far as the right to obtain information and the right to erasure are concerned, the restrictions pursuant to Secs. 34 and 35 BDSG are applicable. In addition, there is a right of appeal to a competent data protection supervisory authority (Article 77 GDPR in conjunction with Sec. 19 BDSG).
You can revoke your consent to the processing of personal data at any time. This also applies to the withdrawal of declarations of consent given to us before the effective date of the GDPR, i.e. before 25 May 2018. Please note that this withdrawal will be valid only for the future. Processing events that took place before withdrawal are not affected.
You also have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 paragraph 1 lit. e) GDPR (data processing in the public interest) and Article 6 paragraph 1, lit. f) GDPR (data processing based on a balancing of interests); this also applies to profiling within the meaning of Article 4 paragraph 4 GDPR based on this provision. If you do object, we will no longer process your personal data unless we have compelling justified reasons for such processing which override your interests, rights and freedoms. This especially is the case where processing is necessary for the assertion, exercise or defence of legal claims.
Pursuant to Article 22 GDPR, you also have the right not to be subjected to fully automated decision-making. As a matter of principle, we do not use a fully automated decision-making process to establish, implement and terminate the business relationship. Should we use these processes in individual cases (e.g. to improve our products and services), we will inform you separately about this and about your rights in this regard, insofar as this is required by law.
9. Obligation to provide data
Within the scope of our business relationship, you are obligated to provide us with those personal contractual data which are necessary for the commencement, execution and termination of a business relationship and for the fulfilment of the associated contractual obligations or which we are legally obliged to collect. Without these data, we will generally not be able to enter into agreements with you, to perform under such an agreement or to terminate it.
The same applies to the visit of our online offering and the collection of usage data. Without the collection of usage data, we and our service providers are not able to provide you with our online offering.