Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) is the

Lanes & Planes GmbH,
Friedenheimer Brücke 16, 80639 Munich, Germany. Email: kontakt@lanes-planes.com
, Phone: +49 89 21 54 07 10

You can reach the data protection officer at

Proliance GmbH

www.proliance.ai

Data Protection Officer

Leopoldstr. 21

80802 Munich

Email: data protection officer@proliance.ai

When contacting the data protection officer, please specify the company to which your inquiry relates. Please also refrain from attaching sensitive information, such as a copy of your identification, to your inquiry.

This website is hosted by an external service provider (host). This website is hosted within the EU. Personal data collected on this website is stored on the host's servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, website access data, and other data generated by a website.

We collect the listed data to ensure a smooth connection to the website and the technically flawless provision of our services. Processing this data is essential to provide you with the website. The legal basis for processing this data is our legitimate interest in the correct presentation and functionality of our website, in accordance with Article 6(1)(f) of the GDPR.

We have concluded a data processing agreement with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige him to protect the data of our customers and not to pass it on to third parties.

We use the Content Delivery Network (CDN) from Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107 USA to increase the security and delivery speed of our website.

A Content Delivery Network (CDN) is an online service that delivers large media files (such as graphics, page content, or scripts) through a network of regionally distributed servers connected via the internet. For this to work, your browser must connect to Cloudflare's servers. This allows Cloudflare to know that our website was accessed via your IP address. The data collected is used solely for the aforementioned purpose and to maintain the functionality and security of the CDN. For this purpose, Cloudflare may process personal data in the form of server log files. These log files may contain information such as the name of the accessed web page or file, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, the referrer URL (the previously visited page), the IP address, and the requesting provider. This data also helps Cloudflare, for example, to identify new threats to websites. This allows Cloudflare to guarantee a high level of security protection for our website.

To the extent that we use cookies and similar technologies in connection with the integration of this service, or to the extent that data is stored on or read from your device by this service, this is done in accordance with Section 25 Paragraph 2 No. 2 of the German Telemedia Act (TMG). The processing of personal data in connection with the use of Cloudflare is based on our legitimate interest pursuant to Article 6 Paragraph 1 Letter f of the GDPR in technically improving our website and providing our online presence efficiently and securely.

By integrating this service, data is transmitted to Cloudflare and processed there for as long as necessary to achieve the stated purposes. The data processed by the service and made available to us is not stored in our own systems beyond this period.

Data is transferred to Cloudflare Inc., which is based in the USA. The EU Commission has issued an adequacy decision for the USA pursuant to Article 45(1) GDPR regarding companies certified under the EU-US Data Privacy Framework. Cloudflare Inc. is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

For potential transfers to other third countries outside the EU and the EEA, for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

We have a data processing agreement with Cloudflare. You can find more detailed information about data protection and Cloudflare here:

On our website we use the Cloudflare service provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA.

Cloudflare provides, among other things, technical security and infrastructure services. This includes, in particular, the protection of our website against distributed denial-of-service (DDoS) attacks. Cloudflare may use affiliated companies and other subcontractors for certain services.

Cloudflare is used as a security and infrastructure service to ensure the availability, stability, and security of our websites, and in particular to protect them from DDoS attacks, unauthorized access, automated attacks, and other security-related requests. For this purpose, Cloudflare may process the following data:

The data processing serves in particular the following purposes:

Cloudflare may act as a so-called reverse proxy between the affected person's device and our websites. In this case, the request is first sent to Cloudflare's infrastructure, where it undergoes security checks and is then forwarded to our websites – provided it is not blocked.

The legal basis for processing personal data in the context of DDoS protection is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in:

This processing is necessary for these purposes because DDoS protection measures must technically be implemented as soon as a request is received, and therefore before it is potentially forwarded to our websites. Consent is generally not required for purely security-related DDoS protection, provided that no additional technologies requiring consent are used.

To the extent that Cloudflare additionally uses cookies, similar technologies, analytics functions, bot management functions, or other technologies that store information on or read information from the end device, the specific technical configuration must be examined separately. Where consent is required for this, such use will only occur after corresponding consent has been obtained in accordance with Section 25 Paragraph 1 of the German Telemedia Act (TDDG). The subsequent processing of personal data in this case is based on Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR.

As part of the use of DDoS protection, personal data may be transmitted to the following recipients:

Cloudflare processes the data, insofar as this is necessary for providing DDoS protection and related security services, generally as a data processor on our behalf. However, Cloudflare may also process data for its own purposes, in particular to ensure, improve, and secure its own services, as well as to detect and defend against attacks on the Cloudflare infrastructure.

For more information on how Cloudflare processes personal data, please see Cloudflare's privacy policy:

When using Cloudflare, the processing of personal data in countries outside the European Union or the European Economic Area, particularly in the USA, cannot be ruled out.

For transfers to the USA, Cloudflare can rely on appropriate safeguards under Chapter V of the GDPR. According to Cloudflare's published information, Cloudflare, Inc. is certified under the EU-US Data Privacy Framework. Where a transfer cannot be based on an adequacy decision, the Cloudflare Data Processing Addendum, according to published information, provides in particular for the use of EU Standard Contractual Clauses and supplementary safeguards.

Further information on data transfers to third countries can be found in the general information section of this privacy policy and in the following documents:

For the use of Cloudflare described here for pure DDoS protection, the available product information does not indicate the independent use of a generative AI system for processing the content of affected individuals. However, Cloudflare may use automated analysis and machine learning methods for security and abuse detection functions to identify request and attack patterns.

Cloudflare may store security-related connection and event data for a period that depends on the specific Cloudflare service, the chosen plan, the configuration, and the specific security and logging purpose. We store the security-related information we receive from Cloudflare only as long as necessary for the aforementioned purposes or as required by law. Afterward, the data is deleted unless further processing for another purpose stated in this privacy policy and on a corresponding legal basis is permitted.

By using our website, information (e.g., IP address) may be accessed or stored on your devices (e.g., cookies). This access or storage may involve further processing of personal data as defined by the GDPR.

In cases where such access to or storage of information is absolutely necessary for the technically flawless provision of our services, this is done on the basis of Section 25 Paragraph 2 Number 1 or Number 2 of the German Telemedia Act (TMG). In cases where such a process serves other purposes (e.g., the needs-based design of our website), it is done on the basis of Section 25 Paragraph 1 of the TDDDG. Consent can be revoked at any time with effect for the future.

If personal data is subsequently processed, this will be done on the basis of the GDPR and/or the German Federal Data Protection Act (BDSG). We explain this data processing separately in our privacy policy.

Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.

When you visit our website, it is technically necessary for data to be transmitted from your internet browser to our web server. The following data is recorded during an active connection for communication between your internet browser and our web server:

We collect the listed data to ensure a smooth connection to the website and the technically flawless provision of our services. Processing this data is essential to provide you with the website. The log files are used to evaluate system security and stability, as well as for administrative purposes. The legal basis for processing this data is our legitimate interest in the protection and functionality of our website, in accordance with Article 6(1)(f) of the GDPR.

For technical security reasons, in particular to defend against attacks on our web server, we temporarily store this data. In anonymized form, the data may also be processed for statistical purposes. This data is never stored together with other personal data of the user, compared with other databases, or shared with third parties.

Our website uses so-called "cookies." Cookies are small text files that are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted after you leave our website. Persistent cookies remain stored on your device until you delete them yourself. or an automatic solution is provided by your web browser. 

Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or language settings). Other cookies are used to analyze user behavior. or to display advertisements. 

The processing of data through the use of strictly necessary cookies is based on a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the technically flawless provision of our services. For details on the processing purposes and legitimate interests, please refer to the explanations of the specific data processing activities.

The processing of personal data through the use of other cookies is based on consent pursuant to Art. 6 para. 1. lit. a GDPR. Consent can be withdrawn at any time for the future. Insofar as such cookies are used for analysis and optimization purposes, we will inform you separately about this within the framework of this privacy policy and obtain your consent in accordance with Art. 6 para. 1 lit. a GDPR. 

You can configure your browser so that you  

Cookie settings can be managed via the following links for the respective browsers: 

You can also manage cookies from many companies and features used for advertising individually. To do this, use the relevant user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices .  

Most browsers also offer a so-called... “Do-Not-Track-Function”. When this function is enabled, the respective browser informs advertising networks, websites and applications that you do not want to be "tracked" for behavioral advertising and similar purposes. Information and instructions on how to edit this function can be found at the following links, depending on your browser provider:  

Additionally, you can prevent scripts from loading by default. "NoScript" allows JavaScript, Java, and other plugins to run only on trusted domains of your choice. Information and instructions on how to configure this setting can be obtained from your browser provider (e.g., [insert example here]). For example, for Mozilla Firefox: https://addons.mozilla.org/de/firefox/addon/noscript/ ). Please note that disabling cookies may limit the functionality of our website. You can revoke or change your cookie settings at any time. To do so, simply access the cookie settings again. You can always find these in the bottom left corner of the website.        

Our website includes links to social media services and third-party websites. Clicking on the embedded text/image link will redirect you to the respective provider's page. User information is only transferred to the provider after this redirection. For information on how your personal data is handled when using these websites, please refer to the respective privacy policies of the providers you use.

On our websites, we use the consent management platform "OneTrust CMP" from OneTrust LLC, 505 North Angier Avenue, Atlanta, Georgia 30308, USA.

We use this service to manage your consent to the use of cookies and similar technologies, as well as the subsequent data processing. If you give your consent via the banner on our consent management platform, the service will process the following data:

This data is logged on the provider's servers. Cookies are used as part of the data processing to store your consent status on your device, read it again when you revisit the site, and compare it.

In this way, we are able to check your consent status on all subsequent and future visits to our websites and, according to your decision regarding the use of cookies and other technologies, activate or deactivate them when you revisit the site.

To the extent that we use cookies and similar technologies in connection with the integration of this service, or if data is stored on or read from your device by the service, this is done in accordance with Section 25 Paragraph 2 No. 2 of the German Telemedia Act (TMG). Subsequent data processing is based on Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR, our legitimate interest in centrally managing the cookies and similar technologies and services integrated on our website and in providing you with a simple way to grant and withdraw your consent, thereby fulfilling our legal obligations to obtain consent and our accountability obligations under Article 5 Paragraph 2 of the GDPR.

By integrating this service, data is transmitted to OneTrust and processed there only as long as necessary to achieve the stated purposes. The data processed by the service and made available to us is not stored in our own systems beyond this period.

Since OneTrust LLC may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional safeguards are required to ensure the level of data protection required by the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Article 45(1) GDPR regarding companies certified under the EU-US Data Privacy Framework. OneTrust LLC is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

For potential transfers to other third countries outside the EU and the EEA, for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

This website uses the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

This service allows website tags to be managed via a single interface. The Google Tag Manager only implements tags. This means that no cookies are used, and only the user's IP address is transmitted to Google to establish a connection. The Google Tag Manager triggers other tags, which may in turn collect data. However, the Google Tag Manager does not access this data. If deactivation has been performed at the domain or cookie level, it remains in effect for all tracking tags implemented with the Google Tag Manager.

The use of cookies and similar technologies is based on § 25 Abs. 1 TDDDG. The subsequent data processing is based on your consent, pursuant to Art. 6 Abs. 1 S. 1 lit. a GDPR.

By integrating this service, data is transmitted to Google and processed there for as long as necessary to achieve the stated purposes. The data processed by the service and made available to us is not stored in our own systems beyond this period .

Since Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional safeguards are necessary to ensure the level of data protection required by the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Article 45(1) GDPR regarding companies certified under the EU-US Data Privacy Framework. Google LLC is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

For potential transfers to other third countries outside the EU and the EEA, for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

On our websites, we integrate advertising services and functions of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland .

We use Google advertising services and features such as Google Ads , Google Ads Conversion Tracking, Google Ads Remarketing and Google Adsense to place and control targeted advertisements for our products and services via Google's advertising network , and to measure the success of these advertisements.

Cookies and similar technologies, especially JavaScript, are used to store and read data on your device. Through the use of these technologies , Google can pseudonymously recognize website visitors and the devices they use. Visitors who have their own user account on Google platforms can also be identified by Google as visitors to our websites across multiple devices.

When you click on an ad placed for us via Google, third-party websites or apps set cookies for conversion tracking. These cookies are then read when you visit our site. This process involves processing data from the originating website or app, including which search terms (keywords) you may have entered into a search engine, which ad or group of ads you clicked on, and which of our online marketing campaigns the ad was associated with.

We then collect data on our websites about how you used our website and how you interacted with the website content, e.g., which subpages were visited, which content was clicked or accessed, or which forms or dialogs you used. The conversion of an advertisement into a specific action by a website visitor on a website is called a conversion.

When using Google Analytics at the same time , we can use the data collected to analyze your actions on our websites even more precisely. Google uses the processed information to create aggregated statistics for us within the framework of Google Ads Conversion Tracking , allowing us to see how many users have responded to our advertisements and in what way. We only receive aggregated statistics from Google, from which we, as users of Google advertising services, cannot draw any conclusions about individual users.

Based on the statistics, we can optimize the effectiveness of our online advertising and manage our advertising strategy via Google advertising services . Google Ads Remarketing then allows us to display interest- and target group-based advertisements during your further internet or app usage , based on websites and content you have visited on our site, how you used them, and the actions (conversions) you have taken on our websites.

The purpose of data processing is to be able to place and control targeted advertisements for our products and services via Google's advertising network, and to be able to measure how successful these advertisements are.

The legal basis for the integration and use of the respective service is your consent, provided you have given it via our consent management platform. The use of cookies and similar technologies is based on § 25 Abs. 1 TDDDG. The subsequent data processing is based on Art. 6 Abs. 1 S. 1 lit. a GDPR.

Since Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional safeguards are necessary to ensure the level of data protection required by the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Article 45(1) GDPR regarding companies certified under the EU-US Data Privacy Framework. Google LLC is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

For potential transfers to other third countries outside the EU and the EEA, for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

By integrating this service into our websites, data is transmitted to the recipients mentioned above and stored there for up to 18 months (for example, in the case of analytics and log data). Cookies for conversion tracking typically have a lifespan of 30 to 90 days, while information for remarketing lists can be stored for up to 540 days, depending on the configuration. Furthermore, the data processed by the service and provided to us is stored in our own systems for up to 36 months.

Further information on how the service provider handles personal data can be found at https://policies.google.com/privacy?hl=de .

We integrate the "Google Analytics" service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, into our websites.

“ Google Analytics ” creates user profiles based on pseudonyms (identification features from cookie and device ID and other data about the device used or the so-called browser fingerprint) and usage data (e.g., name and address of the website content requested by your browser, referral links, description of the web browser and operating system used, and the IP address of the requesting device). Likewise,

recorded and analyzed.

In this way, Google can pseudonymously recognize website visitors and the devices they use, count them as such, and assign them to specific demographic groups, prospect groups, or customer segments. Visitors who have their own user account on Google platforms can also be identified by Google as visitors to our websites across multiple devices.

Cookies and similar technologies, especially JavaScript, are used to store and read data on your device. Further details can be found above under " Data processing in connection with cookies and similar technologies ". Google uses the processed information to create aggregated statistics for us, which allow us to see what users of our websites are interested in and how many users interact with our websites.

only receive aggregated statistics from Google , from which we, as users of Google advertising services, cannot draw any conclusions about individual persons. We then use this information to place targeted online advertising and marketing campaigns in advertising networks, especially in Google advertising services.

The purpose of data processing is to evaluate and analyze the origin, preferences and interests of visitors to our websites in order to subsequently optimize our online advertising measures and target advertising to specific audiences based on these insights.

The use of cookies and similar technologies is based on Section 25 Paragraph 1 of the German Telemedia Act (TDDG). Subsequent data processing is based on your consent pursuant to Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR.

By integrating this service, data is transmitted to Google and processed there for as long as necessary to achieve the stated purposes. The data processed by the service and made available to us is not stored in our own systems beyond this period.

Since Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional safeguards are necessary to ensure the level of data protection required by the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Article 45(1) GDPR regarding companies certified under the EU-US Data Privacy Framework. Google LLC is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

For potential transfers to other third countries outside the EU and the EEA, for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

On our websites we integrate the HubSpot platform of HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin.

The platform allows us

The aim is to acquire new prospects for our products and services, to target existing prospects and customers with specific advertising, and to optimize our marketing strategy, particularly in online and email marketing, through evaluations and analyses. Cookies and similar technologies, especially JavaScript, may be used to store and read data on your device. Further details can be found above under " Data processing in connection with cookies and similar technologies ". The legal basis for the processing of personal data is your consent pursuant to Art. 6 Abs. 1 lit. a GDPR or our legitimate interest pursuant to Art. 6 Abs. 1 lit. f GDPR.

We use HubSpot to manage prospect and customer data.

For this purpose, we process personal data that you provide via forms and chat on our websites (title, first name, last name, position /function, contact details such as email address and telephone number, and, if applicable, data about your company), information about which of our products you are interested in, and other information that you voluntarily provide. Furthermore, we also use the platform to manage our customer contacts, including the aforementioned data of our contact persons at customer companies. The purpose of the data processing and our legitimate interest lie in effectively managing the contact details of potential prospects and customers and also using this data for other data processing activities enabled by the platform.

We use HubSpot to manage and optimize sales processes.

We process your business contact and company data, as well as information about interactions with our sales team (e.g., call notes, email history, deal status, and prioritization). This processing serves to structure the sales process from inquiry to completion, coordinate internal responsibilities, and ensure seamless customer support.

The purpose of data processing and our legitimate interest lie in the efficient management of our sales activities and the creation of tailored offers based on previous communication.

We use HubSpot to answer and document incoming inquiries .

In order to respond to your inquiry by email or telephone, we process the personal data you provide (title, first name, last name, contact details such as email address and telephone number, and, if applicable, data about your company), details of your request, and any other information you voluntarily provide. This processing is carried out to handle your inquiry and to document the processing, in particular to be able to access the previous status of your request in the event of further inquiries on the same or similar topics. The purpose of data processing and our legitimate interest lies in being able to process your requests effectively and to document our measures for implementing your request in a comprehensible manner.

We use HubSpot to analyze and evaluate website visits.

We monitor and analyze the behavior of website visitors and their use of our websites. This allows us to pseudonymously identify returning visitors and count them accordingly. We process data on how a visitor arrived at our websites (e.g., via web search, direct page access, social media pages, redirects from other websites, and potentially via marketing emails or other advertising campaigns), how many visits occurred, how long each visit lasted, and how many individual pages were viewed. In addition, we process further data on your interactions and behavior on our website (e.g., filling out forms, click behavior , downloading documents, playing media, etc.). The purpose of this data processing is to compile statistics to improve the attractiveness of our website, optimize the effectiveness of our marketing measures, and manage our advertising strategy.

We use HubSpot to analyze and evaluate interactions with our social media presences.

We publish posts and, where applicable, newsletters on our social media platforms, such as LinkedIn and HubSpot, and analyze visitor interactions (e.g., sharing or liking posts, user interaction with newsletters, such as the extent to which the content was engaged with, in particular which links were clicked, and to what extent the newsletter was read or skimmed). The purpose of this data processing is to compile statistics to improve the appeal of our social media presence, optimize the effectiveness of our marketing efforts, and manage our advertising strategy.

We use HubSpot for contact and communication via the social media platform.

In order to respond to your inquiry via social media, we process the personal data you provide (title, first name, last name, contact details such as email address and telephone number, and, if applicable, data about your company), information about which of our products you are interested in, and any other information you voluntarily provide. The purpose of this data processing and our legitimate interest lies in being able to effectively answer your inquiry via the social media channel.

We use HubSpot to prepare and conduct email marketing and, if necessary, for email tracking.

If you give us separate consent on our website, we will also use your email address to contact you via marketing emails and to inform you about our products and services, current events, promotions and offers, and other relevant information through direct marketing tailored to your interests. The purpose of this data processing is to address you or your company in a personalized manner via email or our email newsletter and to inform you about our own products, goods, services, events and offers, or those of our cooperation partners.

If you also give us separate consent, you allow us to process data relating to whether you receive our marketing emails and whether you have opened them, which email client software you use, the extent to which you interacted with the content, in particular which links you clicked, and to what extent you read or skimmed our emails. We use this data to create statistics in order to improve the attractiveness of our marketing emails, optimize the effectiveness of our marketing measures, and manage our advertising strategy. The purpose of the data processing is to create statistics to improve the attractiveness of our social media presence, optimize the effectiveness of our marketing measures, and manage our advertising strategy.

After you have submitted your email address via a form or chat on our website, you will receive an email from us with a link asking you to confirm your email address and thus subscribe to receive promotional emails.

The purpose of data processing is to ensure that only authorized persons register to receive our promotional emails.

We use HubSpot to create, enrich, and analyze prospect profiles.

We compile the data processed via the platform into a personalized profile, enrich it where necessary with data from other sources, evaluate it within the profile using score values, and conduct analyses to determine which of our products and services, current events, promotions and offers you are interested in, which customer segment you can be assigned to, and the likelihood that your interest in our products and services would lead to a contract. For this purpose, we process the following data:

The purpose of data processing is to optimize our marketing measures and manage our advertising strategy in order to target you with advertising in the most effective way possible.

Legal basis for data processing

Management of prospect and customer data

The legal basis for using the platform to manage prospect and customer data is Art. 6 Abs. 1 lit. f GDPR.

Answering and documenting inquiries to our customer service via telephone and email.

Insofar as we use HubSpot to answer and document inquiries to our customer service via email or telephone, the legal basis for data processing for answering and documenting inquiries to our customer service is Art. 6 Abs. 1 S. lit. b GDPR or Art. 6 Abs. 1 lit. f GDPR.

Answering inquiries via the chat function

Legal basis for data processing in the context of responding to general inquiries Inquiry via our Chat functions are Art. 6 Abs. 1 lit. f GDPR and Art. 6 Abs. 1 lit. a GDPR applies to the extent that you voluntarily provide us with information in our correspondence. Your consent is voluntary and you can withdraw it at any time with effect for the future. To exercise your right to withdraw consent for the processing of data voluntarily provided in our correspondence, please contact kontakt@lanes-planes.com. Insofar as your request is aimed at concluding a contract with you or your company, or insofar as it is a request to our customer service, the legal basis for data processing is Art. 6 Abs. 1 S. lit. b GDPR or Art. 6 Abs. 1 lit. f GDPR.

Analysis and evaluation of website visits

The legal basis for integrating and using the platform on our websites for analyzing and evaluating interactions with the website is your consent, provided you have given it via our consent management platform.

The use of cookies and similar technologies is based on § 25 Abs. 1 TDDDG. The subsequent data processing is based on Art. 6 Abs. 1 lit. a GDPR. Your consent is voluntary and you can withdraw it at any time with effect for the future.

Analysis and evaluation of interactions with our social media profiles

The legal basis for the analysis and evaluation of interactions with our social media presences is your consent in accordance with Art. 6 Abs. 1 lit. a GDPR applies insofar as you have given your consent via the social media provider. Your consent is voluntary and you can withdraw it at any time with effect for the future. You can find out how to exercise your right of withdrawal in the privacy policy of the respective social media provider. Furthermore, you can exercise your right to object to the processing of data processed exclusively by us by contacting marketing@lanes-planes.com .

Contact and communication via the social media platform

The legal basis for contacting you and processing communication via social media is your consent according to Art. 6 Abs. 1 lit. a GDPR insofar as you have submitted this information via the social media provider. The legal basis for processing inquiries via our social media presences is Art. 6 Abs. 1 lit. f GDPR and Art. 6 Abs. 1 lit. a GDPR applies to the extent that you voluntarily provide us with information in our correspondence. Your consent is voluntary and you can withdraw it at any time with effect for the future. To exercise your right to withdraw consent for the processing of data voluntarily provided in our correspondence, please contact marketing@lanes-planes.com.

Preparation and execution of email marketing and, if applicable, email tracking.

The legal basis for processing your data in the context of email marketing and email tracking is also your consent, which is obtained separately, e.g. via forms. The use of cookies and similar technologies is also based on § 25 Abs. 1 TDDDG. The subsequent data processing is based on Art. 6 Abs. 1 lit. a GDPR. Your consent is voluntary and you can withdraw it at any time with effect for the future. To withdraw your consent to data processing for email marketing and email tracking, please use the unsubscribe link in our marketing emails or contact us at marketing@lanes-planes.com.

Creation and evaluation of prospect profiles

The legal basis for processing your data in the context of creating and evaluating prospect profiles is also your consent, which is obtained separately, e.g. via forms. The use of cookies and similar technologies is also based on § 25 Abs. 1 TDDDG. The subsequent data processing is based on Art. 6 Abs. 1 lit. a GDPR. Your consent is voluntary and you can withdraw it at any time with effect for the future. To withdraw your consent to data processing for the creation and evaluation of prospect profiles , please use the unsubscribe link in our marketing emails or contact us at kontakt@lanes-planes.com.

Use of Artificial Intelligence

Description of the use of AI and its intended purpose

Artificial intelligence is used in the processing of your data.

We use the artificial intelligence "Breeze" from HubSpot, which is integrated into various functions of the platform or provided to us in the form of different AI agents. We use the following "Breeze" functions and agents within the data processing described above in the areas of marketing and sales:

The purpose of the processing is to increase the efficiency of our sales and marketing processes, to ensure the quality of our communication, and to provide a fast, personalized service.

Legal basis for the use of AI

Data processing is based on our overriding legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. If AI processing is directly necessary for the performance of pre-contractual measures or for the fulfillment of a contract, Art. 6 para. 1 sentence 1 lit. b GDPR serves as the legal basis. 

Recipient

As part of data processing, your data will be transmitted to the following recipients:

Data processing in third countries

Your data will be transferred to recipients in third countries. For data transfers to the USA, there is an adequacy decision by the EU Commission regarding companies certified under the EU-US Privacy Shield. Data Privacy Framework. HubSpot Inc. is certified under the EU-US Data Privacy Framework. Further information and links can be found above in the section " General information on data transfers to third countries ".

Storage duration

We process the collected data for as long as necessary to achieve the stated purposes. Afterwards, we delete your data from our operational systems, unless further data processing for another purpose stated in this declaration and on a corresponding legal basis is still permissible.

On our websites we integrate the service “ Sentry” from Sentry Software Netherlands BV, Schiphol Boulevard 359, 1118 BJ, Amsterdam Schiphol, Netherlands.

This service allows us to ensure and improve the technical stability of our service. With "Sentry," we can detect errors in our application that have led to a malfunction or crash. Specifically, the following types of data are processed by the service:

Cookies and similar technologies, especially JavaScript, may be used to store and read data on your device.

To the extent that we use cookies and similar technologies in connection with the integration of the service, or to the extent that data is stored on or read from your device by the service, this is done in accordance with Section 25 Paragraph 2 No. 2 of the German Telemedia Act (TMG). Subsequent data processing is based on Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR, our legitimate interest in the technical stability of our website.

By integrating this service into our websites, data is transmitted to Sentry and processed there only as long as necessary to achieve the stated purposes. The data processed by the service and made available to us is not stored in our own systems beyond this period.

Since Sentry may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional safeguards are required to ensure the level of data protection required by the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Article 45(1) GDPR regarding companies certified under the EU-US Data Privacy Framework. Sentry (Functional Software Inc.) is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

For potential transfers to other third countries outside the EU and the EEA, for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

On our websites we integrate advertising services and functions of LinkedIn Ireland Unlimited Company, Wilton Plaza, Gardner House 4,5,6, Dublin 2, Ireland.

We use LinkedIn advertising services and features such as LinkedIn Ads & Analytics and LinkedIn Conversion Tracking and Retargeting (LinkedIn Insight Tag) to place and control targeted advertisements for our products and services on LinkedIn, and to measure the success of these advertisements. 

Cookies and similar technologies, in particular JavaScript, are used to store and read data on your device. Further details can be found above under " Data processing in connection with cookies and similar technologies ".

If you see an ad we placed on LinkedIn on other websites or click on it, these other websites will store a " LinkedIn Conversion Tracking" cookie with a pseudonym assigned to us on your device, based on your consent given there .

If you then visit our websites within the storage period of this cookie, this cookie and your usage data will be tracked using a pixel and JavaScript code (so-called " LinkedIn Insight Tag" ) on our websites is read. The following data is processed:

LinkedIn shortens the IP addresses of website visitors to prevent them from being linked to a specific individual. If website visitors are also LinkedIn members , their user ID is also processed. Members' IP addresses are not shortened but hashed to enable cross-device tracking. In addition to the user ID, demographic data such as job title, company, and industry are also processed. This allows LinkedIn to determine that you have seen one of our advertisements or that you clicked on it and subsequently visited our website , as well as how you then used our website.

The conversion of a website visitor to an advertisement is called a conversion. LinkedIn Ads & Analytics uses this information to generate statistics for us, allowing us to see how many users have responded to our advertisements and in what way. Based on these statistics, we can optimize the effectiveness of our advertising and manage our advertising strategy. In particular, LinkedIn Ads enables us to create target groups for LinkedIn Retargeting (targeted advertising) based on this data and to reach these groups with LinkedIn advertisements.

Further information on how the service provider handles personal data can be found at https://www.linkedin.com/legal/privacy-policy .

The purpose of data processing is to be able to place and manage targeted advertisements for our products and services via LinkedIn, and to measure the success of these advertisements. The use of cookies and similar technologies is based on § 25 Abs. 1 TDDDG. The subsequent data processing is based on your consent pursuant to Art. 6 Abs. 1 S. 1 lit. a GDPR.

By integrating these services into our websites, data is transmitted to and stored by the recipients mentioned above. LinkedIn shortens the IP addresses of website visitors to prevent them from being linked to a specific individual. For LinkedIn members , IP addresses are not shortened but hashed to enable cross-device tracking. The direct identifiers of members are removed within seven days to pseudonymize the data. This remaining pseudonymized data is then deleted within 90 days. If we use retargeting lists, user profiles remain in these lists for a maximum of 180 days (for website visitors) or up to 365 days (for interactions with our LinkedIn content). Furthermore, the data processed by the service and provided to us is stored in our own systems for up to 24 months.

Since LinkedIn may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional safeguards are necessary to ensure the level of data protection required by the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Article 45(1) GDPR regarding companies certified under the EU-US Data Privacy Framework. LinkedIn Corporation is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

For potential transfers to other third countries outside the EU and the EEA, for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

On our websites we integrate advertising services and functions of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

We use meta advertising services and features such as the meta pixel and meta custom audiences. the​ Meta Conversion Tracking, Meta Retargeting and the Meta Ads Ad Manager are used to place and control targeted advertising for our products and services on the Meta social media platforms Facebook and Instagram , and to measure the success of these advertisements.

Cookies and similar technologies, in particular JavaScript, are used to store and read data on your device. Further details can be found above under " Data processing in connection with cookies and similar technologies ".

Data collection and processing on our website is carried out via the " Meta Pixel ." This is a JavaScript code that is loaded when the page is accessed and executed in your browser. Using this JavaScript code, cookies can then be stored on your device, and various pieces of information can be read from your device and from the cookies stored there.

This allows us to pseudonymously recognize website visitors and the devices they use. Visitors who have their own user account on the Meta social media platforms can also be identified by Meta as visitors to our websites across multiple devices.

"Meta Pixel" allows us to track and analyze your interests based on the websites you visit and your interactions with our websites. The information collected via the " Meta Pixel " includes, in particular...

From this information, Meta generates statistics for us within the " Meta Conversion Tracking " feature of the " Meta Ads Ads Manager ." These statistics allow us to see how many users have responded to our ads on Meta's social media platforms and in what way . The conversion of an ad into an action by a website visitor is called a conversion. Based on these statistics, we can optimize the effectiveness of our advertising and manage our advertising strategy.

Furthermore, we use the information collected via the " Meta Pixel " on our websites to create so-called " Meta Custom Audiences " in the " Meta Ads Ads Manager " and to display targeted advertising to these audiences on the Meta social media platforms . For example, we can display ads on these platforms to website visitors who have previously shown interest in our products, services, or promotions and visited our websites within a specific timeframe. This type of targeted advertising is known as retargeting.

The purpose of data processing is to be able to place and manage targeted advertisements for our products and services on meta social media platforms , and to measure the success of these advertisements. The use of cookies and similar technologies is based on § 25 Abs. 1 TDDDG. The subsequent data processing is based on your consent pursuant to Art. 6 Abs. 1 S. 1 lit. a GDPR.

By integrating this service into our websites, data is transmitted to the recipients mentioned above and processed there for as long as necessary to achieve the stated purposes. Furthermore, the data processed by the service and provided to us is stored in our own systems for up to 24 months .

Since Meta may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional safeguards are required to ensure the level of data protection required by the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Article 45(1) GDPR regarding companies certified under the EU-US Data Privacy Framework. Meta Platforms Inc. is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

For potential transfers to other third countries outside the EU and the EEA, for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

On our websites we integrate the service “Leadfeeder” from Dealfront Group GmbH, Durlacher Allee 73, 76131 Karlsruhe, Germany.

This service allows us to identify which companies have visited our websites and how visitors have used our content. Specifically, the service processes the following types of data:

Leadfeeder identifies companies based on their IP addresses using its own IP address database. The provider automatically filters out all users who visit our websites via private IP addresses and internet service providers. With Leadfeeder, we are able to categorize, analyze, and evaluate potential customers into segments and target groups based on the type of company, their website usage, and their interests, with the goal of identifying promising leads.

Furthermore, the service provider gives us access to a database containing contact details of relevant contacts within the companies, enabling us to easily and quickly get in touch with potential customers by phone. This data is sourced from publicly available sources and databases.

The service also allows us to connect our other marketing systems and our software for managing customer and prospect data via interfaces, thus supplementing existing information on customers and prospects. The use of cookies and similar technologies is based on Section 25 Paragraph 1 of the German Telemedia Act (TMG). Subsequent data processing is based on your consent pursuant to Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR.

By integrating this service into our websites, data is transmitted to Dealfront Group GmbH and processed there for as long as necessary to achieve the stated purposes. Furthermore, the data processed by the service and provided to us is stored in our own systems for up to 24 months .

On our websites we integrate the service “Vanta Trust Center” of Vanta Inc., 369 Hayes St, San Francisco, CA 94102, USA.

This service allows us to transparently present our company's security and compliance and to provide our customers and prospective clients with access to relevant security and data protection documents. The Trust Center serves as a central hub for information on certifications, security measures, audit reports, and other compliance documents. Personal data is processed primarily for the provision of this service, the management of access requests for restricted documents, and the fulfillment of legal and contractual obligations in the areas of data protection and information security. In particular, the following data is processed by the service:

Cookies and similar technologies, especially JavaScript, may be used to store and read data on your device. Further details can be found above under " Data processing in connection with cookies and similar technologies ".

The use of cookies and similar technologies is based on Section 25 Paragraph 2 No. 2 of the German Telemedia Act (TDDG). Subsequent data processing is based on Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR, our legitimate interest in providing a secure and transparent compliance portal, and, where necessary, on Article 6 Paragraph 1 Sentence 1 Letter b of the GDPR, the performance of a contract, and Article 6 Paragraph 1 Sentence 1 Letter c of the GDPR, the fulfillment of legal obligations. Where consent is required, processing is based on Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR.

By integrating this service, data is transmitted to Vanta and processed there for as long as necessary to achieve the stated purposes. The data processed by the service and made available to us is not stored in our own systems beyond this period.

Since your data is transferred to Vanta Inc. in the USA, additional safeguards are required to ensure the level of data protection required by the GDPR. The EU Commission has issued an adequacy decision for the USA pursuant to Article 45(1) GDPR regarding companies certified under the EU-US Data Privacy Framework. Vanta Inc. is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

For potential transfers to other third countries outside the EU and the EEA, for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

On the pages of our Help Center, we use the customer service and support software “Zendesk” from Zendesk International Limited, 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland.

Zendesk enables us to manage and process customer inquiries across various communication channels (e.g., email, contact forms, chat, telephone). Personal data is processed for the purpose of handling and documenting inquiries, improving our customer service, tracking support cases, and ensuring and optimizing the quality of our services. In particular, the following categories of personal data may be processed when using Zendesk:

The processing of your data is based on Article 6(1)(b) GDPR (performance of a contract and pre-contractual measures), insofar as processing your request or fulfilling a contract is necessary. Furthermore, processing is based on Article 6(1)(f) GDPR (legitimate interest), in particular for optimizing our customer service, ensuring quality, and following up on support cases. Where consent is obtained, the legal basis is Article 6(1)(a) GDPR.

By integrating this service, data is transmitted to Zendesk and processed there only as long as necessary to achieve the stated purposes. The data processed by the service and made available to us is not stored in our own systems beyond this period.

Zendesk also processes data in the USA and other third countries. The transfer of personal data to the USA and other third countries requires additional safeguards to ensure the level of data protection guaranteed by the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Article 45(1) GDPR regarding companies certified under the EU-US Data Privacy Framework. Zendesk Inc. is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

For potential transfers to other third countries outside the EU and the EEA, for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

We use "Google Fonts" on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Fonts allows us to use external fonts. When you access our website, the necessary Google Fonts are loaded from your web browser into your browser cache. This is necessary so that your browser can display our text with improved visual quality. If your browser does not support this feature, a standard font from your computer will be used. These Google Fonts are integrated via a server request, usually to a Google server in the USA. This transmits information to the server about which page of our website you have visited. Google also stores the IP address of the visitor's device.

We use Google Fonts for optimization purposes, in particular to improve your experience on our website and to make its design more user-friendly. This processing is carried out in accordance with Article 6(1)(a) GDPR and Section 25(1) TDDDG, based on your consent.

Since Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional safeguards are necessary to ensure the level of data protection required by the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Article 45(1) GDPR regarding companies certified under the EU-US Data Privacy Framework. Google LLC is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search

For potential transfers to other third countries outside the EU and the EEA, for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

Further information on data protection can be found in Google's privacy policy: http://www.google.de/intl/de/policies/privacy . Further information on Google Fonts can be found at https://fonts.google.com/

When you send us inquiries via contact form or email, your information from the inquiry form or your email, including the personal data you provide, will be stored by us for processing the inquiry and in case of follow-up questions. Providing your name and email address is required for us to contact you; providing your telephone number is voluntary. We will not share this data with third parties under any circumstances without your consent. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 para. 1 lit. f GDPR, and, where applicable, Art. 6 para. 1 lit. b GDPR if your inquiry aims at concluding a contract. Your data will be deleted after your inquiry has been fully processed, as soon as no further questions are expected, and provided that no statutory retention obligations apply.

On our websites, we collect personal data via various web forms for the purpose of contacting you for advertising purposes, in order to promote the sale of our products, goods, or services through direct marketing. These forms may include...

We will act on your behalf. Further information on the processing of your data for advertising purposes can be found in the following section of this privacy policy.

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the establishment, execution and fulfillment of a contract.

Where personal data is required for the initiation or performance of a contractual relationship or in the context of carrying out pre-contractual measures, processing is lawful in accordance with Article 6(1)(b) GDPR. In the context of contract performance with our customers, we conclude a data processing agreement with them as described in section 4.8.

If you give us your explicit consent to process your personal data for specific purposes (e.g., disclosure to third parties, evaluation for marketing purposes, or promotional contact via email), the lawfulness of this processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. Where necessary and legally permissible, we process your data beyond the actual contractual purposes to fulfill legal obligations pursuant to Art. 6 para. 1 lit. c GDPR.

Furthermore, processing may occur to protect our legitimate interests or those of third parties, as well as to defend against and assert legal claims in accordance with Article 6(1)(f) GDPR. Where required by law, we will inform you separately about the legitimate interest.

We process data related to the establishment of the contract or pre-contractual measures. This may include general data about you or individuals within your company (name, address, contact details, etc.) as well as any other data you provide to us in connection with the establishment of the contract.

Furthermore, we process the data that you voluntarily provide to us, for example for advertising purposes.

We process personal data that we receive from you in the context of contacting you, establishing a contractual relationship, or in the context of pre-contractual measures, via mail, telephone, email, forms on our website, or via one of our social media profiles.

As part of data processing, your data will be transmitted to the following categories of recipients or recipients, whom we use for data processing to achieve the aforementioned purposes:

Within our company, we only share your personal data with those departments and individuals who need this data to fulfill contractual and legal obligations or to pursue our legitimate interests.

Your personal data is processed on our behalf based on data processing agreements pursuant to Article 28 of the GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The categories of recipients in this case are internet service providers and providers of customer management systems and software.

Data is otherwise only transferred to recipients outside the company if permitted or required by law, if the transfer is necessary for processing and thus fulfilling the contract or, at your request, for carrying out pre-contractual measures, if we have your consent, or if we are authorized to provide information. Under these conditions, recipients of personal data may include, for example:

Personal data will only be transferred to countries outside the EEA (European Economic Area) or to an international organization if this is necessary for processing and thus fulfilling the contract or, at your request, for carrying out pre-contractual measures, if the transfer is legally required, or if you have given us your consent. In these cases, recipients may include, among others, software and marketing service providers.

We store your data for as long as necessary to achieve the processing purpose. Afterwards, we delete your data unless further data processing is permitted on the basis of another legal ground or is mandatory for us (e.g., in the case of statutory retention obligations).

Where necessary, we process and store your personal data for the duration of our business relationship or to fulfill contractual purposes. This includes, among other things, the initiation and execution of a contract. Furthermore, we are subject to various retention and documentation obligations arising, among other things, from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention or documentation periods prescribed therein range from two to ten years. Finally, the storage period also depends on the statutory limitation periods, which, for example, according to Sections 195 et seq. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.

Providing personal data for decisions regarding contract conclusion, contract fulfillment, or pre-contractual measures is voluntary. However, we can only make a decision regarding contractual measures if you provide the personal data necessary for concluding the contract, fulfilling the contract, or taking pre-contractual measures.

We process our customers' personal data in accordance with Article 28 of the GDPR (General Data Protection Regulation). The data processing agreement is incorporated into the contract via the General Terms and Conditions and can be viewed here: https://www.lanes-planes.com/agb-av/ .

We process your personal data to the extent necessary for the decision on whether to establish an employment relationship with us.

We only process data related to your application. This may include general personal information (name, address, contact details, etc.), details of your professional qualifications and education, information on professional development, results from selection tests (assessments), video recordings or notes from interviews, and any other data you provide us with in connection with your application. We also process publicly available, professional data that you have published on career networks (e.g., LinkedIn), provided it is relevant for assessing your suitability.

With your consent, we also process audio and video recordings of job interviews, as well as transcripts and AI-supported summaries created from them, for the objective documentation and analysis of your suitability.

As part of our active sourcing, we process publicly available profile data from professional networks, which is analyzed using AI-supported sourcing tools to contact you about suitable vacancies.

If an employment relationship is established between you and us, we may further process the personal data we have already received from you for the purposes of the employment relationship, insofar as this is necessary for the execution or termination of the employment relationship or for exercising or fulfilling the rights and obligations of the employee representation arising from a law or a collective agreement, a company or service agreement (collective agreement).

The legal basis for data processing is Article 88 GDPR in conjunction with Section 26 Paragraph 1 of the German Federal Data Protection Act (BDSG) or Article 6 Paragraph 1 Sentence 1 Letter b GDPR, insofar as the data processing is necessary for the decision on establishing an employment relationship. If you give us your explicit consent to the processing of personal data for specific purposes, the lawfulness of this processing is based on your consent pursuant to Section 26 Paragraph 2 BDSG, Article 6 Paragraph 1 Sentence 1 Letter a GDPR. You may withdraw your consent at any time with effect for the future. The legal basis for any further processing that may take place for the purpose of carrying out or terminating the employment relationship is Article 88 GDPR in conjunction with Section 26 Paragraph 1 BDSG or Article 6 Paragraph 1 Sentence 1 Letter b GDPR.

We process personal data that we receive from you in connection with contacting us or your application via our application form, by post or email, or that you transmit to us via job portals and professional networks of your choice, or that we receive from recruitment agencies.

As part of data processing, your data will be transmitted to the following categories of recipients or recipients, whom we use for data processing to achieve the aforementioned purposes:

Personal data will only be transferred to countries outside the EEA (European Economic Area) or to an international organization if this is necessary for processing and thus fulfilling the contract or, at your request, for carrying out pre-contractual measures, if the transfer is required by law or if you have given us your consent.

In cases where the transfer of personal data to countries outside the EU and the EEA is possible, further safeguards are required to ensure the level of data protection guaranteed by the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Article 45(1) GDPR regarding companies certified under the EU-US Data Privacy Framework. Service providers whose processing may involve a transfer to the USA are certified under the EU-US Data Privacy Framework and are therefore committed to complying with appropriate data protection standards.

For potential transfers to other third countries outside the EU and the EEA, for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the providers in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

We store your personal data for as long as necessary to make a decision regarding your application. Your personal data or application documents will be deleted no later than 6 months after the application process has ended (e.g., notification of the rejection decision), unless longer storage is legally required or permitted.

We also store your personal data only to the extent required by law or in a specific case for the establishment, exercise or defense of legal claims for the duration of a legal dispute.

If you have consented to the longer-term storage of your personal data, we will store it in accordance with your declaration of consent. If an employment, apprenticeship, or internship relationship results from the application process, your data will initially continue to be stored, insofar as necessary and permissible, and subsequently transferred to your personnel file.

Following the application process, you may receive an invitation to join our talent pool. This allows us to consider you for suitable vacancies in the future. If we have your consent, we will store your application data in our talent pool in accordance with your consent or any future consents you may grant.

Providing your personal data as part of the application process is voluntary. However, we can only make a decision regarding employment or establish an employment relationship with you if you provide the personal data necessary for processing your application.

Below you will find information on how we handle your data, which is collected through your use of our social media profiles on social networks and platforms.

We maintain profiles, appearances, pages or fan pages on the following social media platforms:

Depending on how the platform operators and we, as website operators, are involved in processing your personal data, the respective responsibilities or roles differ. We may be jointly responsible with the platform operator, or the platform operator may be solely responsible.

We and the following platform operators share joint responsibility:

For the processing of your personal data in connection with your visit to the appearance, profile, page or fan page on the platforms, we as the page operator are jointly responsible with the providers of the respective platform if the platform operators provide aggregated information about visitors to our profiles, appearances, pages or fan pages (e.g. so-called "Insights" or "Analytics").

In cases of joint controllership, we have concluded agreements with the platform operators pursuant to Article 26 GDPR regarding joint controllership for the processing of your personal data (e.g., Page Controller Addendum or Joint Controller Addendum). These agreements specify which data processing operations we and the respective platform operator are responsible for. You can view these agreements via the following links:

Further information on data processing by the platform operators can be found in their privacy policies:

You can contact the data protection officers of the platform operators here:

When you access our profiles on the aforementioned platforms, the platform operator uses cookies and similar technologies on your device to store or read data from your device. This access or storage may involve further processing of personal data as defined by the GDPR.

In cases where such access to or storage of information is absolutely necessary for the technically flawless provision of the services, this is done on the basis of Section 25 Paragraph 1 Sentence 1, Paragraph 2 No. 2 TDDDG. Any subsequent data processing may be carried out on the basis of Article 6 Paragraph 1 Sentence 1 Letter f GDPR.

In cases where such processing serves other purposes (e.g., tailoring our website to user needs), it is carried out on the basis of Section 25 Paragraph 1 of the German Telemedia Act (TMG) only with your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR. You may withdraw your consent at any time with effect for the future. The processing of your personal data is governed by the provisions of the GDPR and the German Federal Data Protection Act (BDSG).

Further information on the use of cookies and similar technologies, as well as their legal basis, can be found in the respective privacy policy of the platform operator. Links to the respective privacy policies are provided above. For further questions, please contact the operator of the respective social media platform directly.

As a rule, personal data on our social media profile is primarily processed for market research and advertising purposes by the platform operator. Insofar as data collection also takes place directly on our social media profile, we participate in the data processing by the platform operator and are therefore jointly responsible with them in this respect.

Data processing involves the use of cookies and similar technologies that allow the platform operator to recognize you when you visit a social media profile. Furthermore, the platform operator conducts extensive analysis of your interactions on the platform (clicks, comments, and likes) and processes the information you provide to the platform operator, such as your personal data, profile picture, and username. In particular, demographic information (age, gender, country, industry, occupation, etc.) from your own member profile may also be processed.

The collected data can be used to create user profiles. These are then used by the platform operator to display advertisements, both on and off the platform, that are presumably tailored to your interests.

Although we do not have direct access to the data processed by the platform operator, we also benefit from this data processing by placing relevant advertisements within or outside the platforms based on the target groups identified by the platform operator.

The legal basis for processing your personal data is your consent given to the platform operator pursuant to Art. 6 para. 1 lit. a GDPR.

Please note that we have no control over the data collection and further processing carried out by the platform operators. Consequently, we cannot provide any information about the extent, location, or duration of data storage by the platform operators.

Further information can be found in the privacy policy of the respective provider.

Furthermore, your data will be processed jointly in connection with so-called “Page Insights” or “Page Analytics”.

“Page Insights” or “Page Analytics” are analysis functions provided by the platform operator, through which the master data processed by you, in particular demographic data and data on your interactions with our profile, are jointly collected by the platform operator and us.

The platform operator then analyzes this data and creates aggregated data for us, from which we can see which demographic target group visited our profile and how our profile was used by them.

We also have no direct access to the data processed by the platform operator. This data is only provided to us by the platform operator in aggregated form. This means that we cannot identify individual visitors or their interactions from the aggregated data.

We then use this aggregated data to target our social media profile to specific audiences and to generally optimize it for the aforementioned advertising purposes (increasing the reach and awareness of our profile and evaluating the success of marketing campaigns).

The legal basis for processing your personal data is your consent given to the platform operator pursuant to Art. 6 para. 1 lit. a GDPR.

Please note that we have no control over the data collection and further processing carried out by the platform operators. Consequently, we cannot provide any information about the extent, location, or duration of data storage by the platform operators.

Further information can be found in the privacy policy of the respective provider.

If the respective platform operators ask you for your consent to processing your data for a specific, shared purpose, the legal basis for the processing is Article 6(1)(a) and Article 7 of the GDPR. You can withdraw your consent at any time with effect for the future.

If we pass on personal data to the operators of social media platforms, the latter are recipients of the data within the meaning of Art. 4 No. 9 GDPR.

When you visit our social media profiles, your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA), i.e., in third countries. For data transfers to certain third countries, there is an adequacy decision by the EU Commission. For data transfers to the USA, there is an adequacy decision by the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies certified under the EU-US Data Privacy Framework.

For data transfers to third countries for which there is no adequacy decision by the EU Commission, standard data protection clauses are concluded or binding corporate rules are used to ensure an adequate level of data protection, and further supplementary measures are taken to secure the data transfer.

If you, as a visitor to the site, wish to exercise your rights (access, rectification, erasure, restriction, data portability, complaint to the supervisory authority, objection or revocation), you can contact both the platform operator and us.

If your personal data is processed by one of the operators of social media platforms listed below, this processing is carried out under the sole responsibility of the platform operator within the meaning of Art. 4 No. 7 GDPR.

We have no control over the data processing carried out by the platform operators. For further information, please refer to the privacy policy of the respective platform operator.

To exercise your data subject rights, we would like to point out that these can be most effectively asserted directly with the respective service providers. Only they have access to the data collected from you. Should you nevertheless require assistance, please feel free to contact us at any time.

We are solely responsible for the following data processing activities via our social media profiles.

When you visit or interact with our social media profile, we process your personal data. This may include information you actively provide (comments, likes, and publicly available information such as your profile picture or name). Depending on the provider and your settings on their platform, we may also be informed about who has viewed our profile within that platform.

The legal basis for processing personal data when operating our social media profile is Article 6(1)(f) GDPR. The legitimate interest lies in contacting visitors for advertising purposes and in providing an effective means of communication and interaction with our company on the social media platform.

We collect personal data ourselves when you contact us, for example via a contact form or a messenger function of the respective platform.

The data collected depends on the information you provide and the contact details you have given or made available. This data is stored by us for the purpose of processing your request and in case of follow-up questions.

The legal basis for processing your data is our legitimate interest in responding to your inquiry, pursuant to Article 6(1)(f) of the GDPR. Your data will be deleted after your inquiry has been fully processed, unless statutory retention obligations apply. We consider your inquiry to be fully processed when it is clear from the circumstances that the matter has been resolved.

If your contact via a social network or other platform aims at concluding a contract with us for the delivery of goods or the provision of services, we process your data to fulfill the contract or to carry out pre-contractual measures or to provide the requested services.

The legal basis for processing your data in this case is Article 6(1)(b) GDPR. Your data will be deleted when it is no longer required for the performance of the contract or when it is established that the pre-contractual measures will not lead to a contract corresponding to the purpose of contacting you.

Please note that even after the contract has been concluded, it may be necessary to store personal data of our contractual partners in order to comply with contractual or legal obligations.

If we ask for your consent to process your data for a specific purpose, the legal basis for the processing is Article 6(1)(a) and Article 7 of the GDPR. You can withdraw your consent at any time with effect for the future.

The personal data we collect will be deleted from our system when it is no longer needed for the purposes for which it was collected, or when you have exercised your right to withdraw your consent or object to its processing. Statutory retention periods remain unaffected. We have no control over the storage duration of your data by social media providers for their own purposes. Please contact them directly for details.

Below you will find information about the rights granted to you by applicable data protection law with regard to the processing of your personal data by the controller:

You have the right, pursuant to Article 15 of the GDPR, to request information about your personal data processed by us. In particular, you can request information about the purposes of the processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if they were not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved.

The right, pursuant to Article 16 GDPR, to request the immediate rectification of inaccurate or incomplete personal data concerning you that we hold.

You have the right, pursuant to Article 17 GDPR, to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.

The right, pursuant to Article 18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is contested by you, the processing is unlawful, but you object to its erasure, and we no longer need the data, but you require it for the establishment, exercise or defense of legal claims, or you have objected to the processing pursuant to Article 21 GDPR.

The right, pursuant to Article 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller.

You have the right to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR. Generally, you can contact the supervisory authority of the federal state where our registered office is located (as stated above) or, if applicable, the supervisory authority of your usual place of residence or work.

The right to withdraw consent pursuant to Article 7(3) GDPR: You have the right to withdraw your consent to the processing of your data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, unless further processing is permitted by another legal basis that does not require consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to object

If we process your personal data based on legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, provided that this is done for reasons arising from your particular situation. If the objection is directed against the processing of personal data for direct marketing purposes, you have a general right to object without having to specify a particular situation. If you wish to exercise your right to withdraw consent or object, please contact us using the contact details provided above under "Controller".

This privacy policy was last modified on 18.08.2026.