Data protection

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

LEONHARD WEISS GmbH & Co. KG
BAUUNTERNEHMUNG
Leonhard-Weiss-Str. 2-3
74589 Satteldorf – Germany
P +49 7951 33-0
E-Mail bau-de(at)leonhard-weiss.com
HRA 530194

You can contact our Data Protection Officer at datenschutz(at)leonhard-weiss.com

As a data subject, you have the right:

• to obtain information about the data concerning you that we process (Art. 15 GDPR); 
• to request the rectification or completion of inaccurate or incomplete data (see also Art. 16 GDPR);
• to obtain the immediate erasure of data concerning you (see also Art. 17 GDPR) or, alternatively, where further processing is required pursuant to Art. 17(3) GDPR, to request restriction of processing in accordance with Art. 18 GDPR; 
• to request the portability of your personal data (Art. 20 GDPR).

You also have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you where we base such processing on Art. 6(1)(f) GDPR. We will then no longer process this data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (Art. 21 GDPR).

Pursuant to Art. 21(2) GDPR, you have the right to object at any time to the processing of personal data concerning you. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. Please note that your objection only takes effect for the future. Processing carried out before the objection remains unaffected.

You may withdraw any consent given for the processing of personal data at any time vis-à-vis the LEONHARD WEISS Group. Please note that the withdrawal only takes effect for the future. Processing carried out before the withdrawal remains unaffected.

Furthermore, you have the right to lodge a complaint with a competent data protection supervisory authority. The authority responsible is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Postfach 10 29 32
70025 Stuttgart
Email: poststelle@lfdi.bwl.de
Phone: +49 (0) 711 / 615541 – 0

As a rule, you can visit the website without us collecting personal data from you. However, when you access the website or retrieve a file stored on the website, data is collected and processed. This generally only takes place where it is necessary to provide a functional website and its content and services. Furthermore, personal data is generally only collected and used with the corresponding consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by statutory provisions.

When accessing the website, the following categories of data are logged:

• Browser type/version
• Operating system used
• IP address
• Date and time of the server request
• Other information such as server log data

Storage in log files ensures the proper functioning of the website and also serves to improve and secure our systems. No further analysis of this data (for example for marketing purposes) takes place in this context. The legal basis for storing the data/log files is Art. 6(1)(f) GDPR.

The data stored by the LEONHARD WEISS Group is deleted as soon as it is no longer required for achieving the purpose for which it was collected. This is the case after six weeks at the latest. Storage beyond this period is possible. In this case, users’ IP addresses are deleted or anonymised so that the calling client can no longer be assigned.

Have you seen a notice sign relating to drone operations? Here we explain why it has been put up.

Standardised, automated capture of aerial images and videos by means of drones for the documentation and measurement of construction progress on construction sites. Data subjects are not the target of the drone deployment, but may be captured incidentally, for example if they are on or near the construction site during drone operations. The data may be made available to the respective client. No transfer of data outside the EU or the EEA takes place.

In the context of drone operations, personal data may be captured temporarily. This is not the purpose of the drone deployment. Inadmissible recordings are deleted without delay.

Efficient and standardised documentation of construction progress, quality assurance, support in relation to variation claims and costing, as well as fulfilment of contractual obligations towards the client.

The legal basis is legitimate interests pursuant to Art. 6(1)(f) GDPR. We have a legitimate interest in documenting construction progress, quality assurance, fulfilling contractual obligations and providing evidence vis-à-vis clients.

The data is stored for as long as is necessary for the purpose of the processing. In addition, inadmissible recordings (e.g. of private property or persons outside the construction site area) are deleted without delay.

As part of your contact request, we process the personal data that you provide to us. No data is forwarded to third parties.

• Contact details such as company name, name, email address and telephone number
• Content entered into the form

The data is processed for handling and processing your contact request. We base the processing of your data on your consent pursuant to Art. 6(1)(a) GDPR.

The data will be deleted once storage is no longer required for ongoing contact.

We process your personal data in order to inform you about news from our company (e.g. by newsletter), invite you to trade fairs or contact you for the purpose of surveying business partner satisfaction.

• Contact details such as name, email address and, where applicable, further contact information such as company, department or role of the recipient
• Communication data, such as newsletter dispatch history and subscription/unsubscription status (opt-in / opt-out)

We base the processing of your data on our legitimate interest – Article 6(1)(f) GDPR. This lies in particular in maintaining and further developing existing business relationships, initiating and establishing new partnerships, providing information on relevant news and offers to promote business exchange, and the continuous development of our portfolio.

No data is forwarded to third parties. We store personal data for as long as it is required for the stated purposes.

In the context of using the Energy Check Tool, we collect and process your personal data, company-related data and energy-related data in order to carry out the analysis, identify optimisation potential and further develop the software.

For the provision of the Energy Check Tool, you will be redirected to our processor, Grid-ty GmbH (Neue Weyerstraße 6, 50676 Cologne). You can view its data protection information there.

Your data is treated confidentially and used exclusively for the above-mentioned purposes. Data is only disclosed to third parties if this is necessary to carry out the energy check or if you have expressly consented.

• Company and contact person data: company name, industry sector, first name, last name, telephone number, email address
• Energy-related data: electricity demand, heat demand, existing technologies
• Location and usage information: postal code, number of employees, type of building use
• We use the email address to contact you and to send the analysis results

The processing of this data serves to carry out the energy check, identify optimisation potential and prepare individual analyses. In addition, we use anonymised data to further develop and improve the Energy Check Tool.

Your data is processed on the basis of Art. 6(1)(b) GDPR, as it is necessary for carrying out the energy check and for the performance of pre-contractual or contractual measures.

In addition, we base the processing on the legitimate interest of the tool provider pursuant to Art. 6(1)(f) GDPR. This legitimate interest lies in the further development of the software.

The data for the analysis is stored for up to 6 months after completion of the process. Data used to further develop the software may be anonymised or processed beyond this period on the basis of our legitimate interest. After expiry of the relevant periods, or at your request, the data will be deleted unless statutory retention obligations apply.

When visiting our corporate websites, your browsing behaviour may be statistically analysed. This is done by using the Matomo analytics program (InnoCraft Ltd, 7 Waterloo Quay, PO Box 625, 6140 Wellington, New Zealand).

Transfers of personal data outside the European Union (EU) or the European Economic Area (EEA) may take place. Where this is the case, we base such transfers on the principles set out in Art. 44 et seq. GDPR.

We process a masked IP address as well as browser and usage data, in particular information on how, when, for how long and which content visitors access on our corporate website. The processing is carried out for statistical purposes. Due to anonymisation, it is not possible to trace the data back to individual persons.

The processing serves to optimise our website content, improve user-friendliness and further develop our web offering both technically and in terms of content.

The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6(1)(f) GDPR. This legitimate interest lies in analysing and optimising our online presence.

You can object to this data processing:

The data is stored for as long as is necessary for the purpose of the processing. The data is deleted 18 months after it has been collected.

We maintain corporate pages on the following social media platforms:

• „Facebook / Instagram”: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland
• „LinkedIn”: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
• „XING“: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany
• „TikTok“: TikTok Germany GmbH, Stralauer Allee 2, 10245 Berlin, Germany
• „YouTube“: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• „kununu“: kununu GmbH, Kurfürstenstr. 1, 80801 Munich, Germany

As the operator of an online presence on social media platforms, we process personal data if you con-tact us via the respective platform either directly by private message or publicly via the comment func-tion. The data processed in this context depends on the information you provide and on the contact details you have provided or made available. Insofar as the processing is necessary for the perfor-mance of a measure requested by you, it is carried out on the basis of Art. 6(1)(b) GDPR. In all other cases, we base the processing on our legitimate interest in efficiently handling inquiries addressed to us pursuant to Art. 6(1)(f) GDPR.

When visiting a corporate page, the respective platform provider also collects information that enables the recognition of users and a comprehensive analysis of user behavior. On the basis of these data, the provider may also create user profiles. If you are logged into your social media account during your visit, the provider may also associate the visit with your user account.

We ourselves receive only anonymized statistical evaluations from the respective provider regarding the use of our corporate page. This information helps us tailor our content even more specifically in the future. To this extent, we have a legitimate interest in the collection and processing of this information. In addition, we have a legitimate interest in using various communication channels in order to be able to reach as many interested persons as possible personally. The legal basis for operating our corporate pages is therefore Art. 6(1)(f) GDPR.

We do not ourselves disclose any personal data that we receive via our corporate pages to third par-ties. However, we can neither influence nor exclude the possibility that the providers mentioned may transfer the collected data to third parties, in particular to affiliated companies or partner companies that may also be located outside the European Union. Transfers of data to the USA are permissible in particular on the basis of an adequacy decision of the European Commission if the respective compa-ny is certified under the EU-US Data Privacy Framework, as is the case, for example, with Meta Plat-forms, Inc. and LinkedIn Corporation. 

In principle, you may assert your data subject rights (see also the section “Data Subject Rights”) with regard to data processing on our corporate pages both against us and against the respective platform provider. However, it should be noted that asserting such rights vis-à-vis the respective provider is generally the most effective approach, as only that provider has direct access to the user data.
 

Further information on data processing by the respective provider can be found at:

Facebook: https://en-gb.facebook.com/privacy/policy/

Instagram: https://privacycenter.instagram.com/policy/?section_id=0-WhatIsThePrivacy&hl=de

LinkedIn: https://www.linkedin.com/legal/privacy-policy

XING: https://privacy.xing.com/de/datenschutzerklaerung

TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/de

YouTube: https://www.youtube.com/intl/ALL_de/howyoutubeworks/privacy/

„kununu“: https://www.kununu.com/de/info/datenschutz

We have concluded an agreement pursuant to Art. 26 GDPR with Facebook, LinkedIn and TikTok respectively. These agreements govern how the data protection obligations arising from the operation of our corporate page are allocated between us and the respective provider. In this context, the providers assume a substantial part of the data protection obligations. These include, in particular, the handling of data subject rights pursuant to Art. 12 et seq. GDPR, the provision of appropriate technical and organizational measures to protect personal data, and the reporting and notification obligations in the event of a personal data breach. If you contact us in order to exercise your data subject rights, we will forward your request to the respective provider without undue delay. We are obliged to do so on the basis of the agreement concluded with the provider.

Information on the agreements with the respective providers can be found at:

Facebook / Instagram: https://www.facebook.com/legal/terms/page_controller_addendum

LinkedIn: https://www.linkedin.com/help/linkedin/answer/124838?lang=de

TikTok: https://www.tiktok.com/legal/page/global/tiktok-analytics-joint-controller-addendum/en

Information on the purpose, provider and storage duration of the cookies used can be found in the Usercentrics consent management tool.

Our websites contain references (links) to external sites; no social plug-ins are used in this context. We do not adopt the content of those sites as our own.

The data stored within the LEONHARD WEISS Group is protected against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. IT security experts review our security measures at regular intervals and adapt them to the latest standards.

Dear Business Partners, Please always carefully check the sender's address for orders and inquiries made in our name, and thoroughly review incoming emails, especially their attachments. In case of doubt, please contact your designated representative at LEONHARD WEISS. Thank you for your attention.