Privacy policy of
Local Brand X
In this privacy policy, we inform you about the scope of the processing of your personal data (hereinafter referred to as "data").
1. responsible for data processing
Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is
Local Brand X GmbH
Mombacher Straße 4
55122 Mainz
Phone: +49 6131 63571 00
Web: www.local-brand-x.com/datenschutz/
E-mail: info@local-brand-x.com
2. contact details of our data protection officer
RMPRIVACY GmbH
Matthias Rosa
Große Langgasse 1A
55116 Mainz
Phone: +49 6131 144 56 25
E-mail: datenschutz@local-brand-x.com
3. general information on data processing
We process data as part of our business and website operations.
This also includes disclosure by transfer to third parties and, if applicable, to so-called third countries outside the European Union ("EU") and the European Economic Area ("EEA"). Insofar as we transfer data outside the EU or the EEA, we have marked this accordingly below.
4. data processing
The individual data concerned, processing purposes, legal bases, recipients and any transfers to third countries are listed below:
a) Log file when visiting the website
We log your website visit. In doing so, we process
- Name(s) of our accessed website(s),
- date and time of access,
- the amount of data transferred,
- the browser type and version,
- the operating system you are using,
- the referrer URL (the previously visited website),
- your IP address,
- the requesting provider.
The legal basis for data processing is our overriding legitimate interest in the continuous provision and security of our website in accordance with Art. 6 para. 1 f) GDPR.
The log file is deleted after seven days, unless it is required to prove or clarify specific legal violations that have become known within the retention period.
b) Hosting
To provide our online presence, we use the services of web hosting providers who process the above-mentioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.
The legal basis for data processing is our overriding legitimate interest in the provision of our website in accordance with Art. 6 para. 1 f) GDPR.
c) Making contact
If you contact us, we process the following data from you for the purpose of processing and handling your request: Name, contact details - if provided by you - and your message.
The legal basis for data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations pursuant to Art. 6 para . 1 b) GDPR and/or our overriding legitimate interest in processing your request pursuant to Art. 6 para. 1 f) GDPR.
d) Contact for applications
If you contact us to send us your application as an employee, e.g. by e-mail or via a contact form, the data you provide (e.g. name, e-mail address, desired place of work, etc.), your message and the application documents sent will be processed exclusively for the purpose of processing and handling your application request.
The legal basis for data processing is primarily Section 26 BDSG. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permitted.
Should the data be necessary for legal prosecution after completion of the application process, data processing may be carried out to safeguard our legitimate interests in accordance with Art. 6 para. 1 f) GDPR, namely to assert and/or defend against claims.
e) Inclusion in the applicant pool
If we do not make you a job offer, you have the option of being included in our applicant pool. If you are accepted, all documents and details from your application will be transferred to the applicant pool so that you can be contacted in the event of suitable vacancies.
The legal basis for inclusion in the applicant pool and contacting you in the event of suitable vacancies is your consent in accordance with Art. 6 (1) a) GDPR. Giving your consent is voluntary and is not related to the current application process. You can revoke your consent in whole or in part at any time for the future. However, please also note that we will delete application documents after 2 years at the latest if no suitable position is available for your profile during this time.
f) Contract execution and service provision
We process various data as part of the provision of our services and to initiate and process the existing contractual relationship between you and us.
If you have commissioned us to provide a service, we will process your data (if provided: name, contact details, address) and all information necessary for the fulfillment of the order exclusively for the purpose of processing and handling the contractual relationship.
This includes in particular our appropriate advice and support, correspondence with you, invoicing, fulfillment of our accounting and tax obligations. The data is processed accordingly on the basis of Art. 6 para. 1 b) GDPR and to fulfill our legal obligations in accordance with Art. 6 para. 1 c) GDPR.
If this is necessary to process the order, your data will be passed on to third parties.
This includes, in particular, disclosure to supervisory authorities for the purpose of correspondence and for the assertion and defense of your rights.
We take all appropriate measures to transfer personal data only to the extent necessary for the underlying purpose.
g) Ticket system
We use the ClickUp ticket tool from Mango Tegnologies Inc, 215 Lowell Ave, Palo Alto, CA 94301, United States (hereinafter "ClickUp") to process your support requests. In doing so, we process the data of your request that you transmit to us.
This also involves data transfers to Click-UP's AWS servers in the United States of America.
Mango Technologies Inc. is certified under the EU-US Data Privacy Framework and is covered by the EU adequacy decision for the US.
h) Newsletter
In order to provide you with regular information about our company and offers, we offer to send you an e-mail newsletter. When you register for the newsletter, we process the data you entered when registering (e-mail address and other voluntary information). In order to prevent misuse, we will send you an e-mail after your registration in which we ask you to confirm your registration (double opt-in procedure). In order to be able to prove the registration process in a legally compliant manner, your registration will be logged. This includes the time of registration and confirmation as well as your IP address.
The legal basis for sending the newsletter is your consent in accordance with Art. 6 para. 1 a) GDPR. The data processing in connection with the sending of the confirmation email for your registration and the associated data logging is carried out in accordance with Art. 6 para. 1 f) GDPR due to our legitimate interest in proving your proper registration.
If you give us your consent, we will also evaluate in the newsletters whether you have opened the newsletter and the scrolling and clicking behavior in the newsletter. This is done for the purpose of optimally tailoring our newsletter to your interests and improving the content of our newsletter. The legal basis for the analysis of the newsletter is your consent in accordance with Art. 6 para. 1 a) GDPR.
We use service providers to whom we transmit the aforementioned data to send the newsletter.
After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
i) Download of various publications
You can download various white papers, checklists, studies or handouts on our products from our website.
We process your name, company and e-mail address in order to send you the requested materials by e-mail.
The legal basis for the processing of personal data is the obligation to fulfill the contract in accordance with Art. 6 I 1 b) GDPR.
Further information on the terms and conditions for downloading white papers can be found on our website at: https://www.local-brand-x.com/downloadbedingungen/.
j) Chatbot
We use Loci, the chatbot, to answer your inquiries faster and more efficiently. For this purpose, we process your name and your message.
The legal basis for data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations pursuant to Art. 6 para . 1 b) GDPR and/or our overriding legitimate interest in the best possible processing of your request pursuant to Art. 6 para. 1 f) GDPR.
k) Use of cookies
We use so-called cookies on our website. Cookies are small text files that are stored on your end device (PC, smartphone, tablet, etc.) and saved by your browser.
Information about the specific cookies we use, their providers and purposes can be found in our consent banner. There you can give your consent to the respective services, revoke it or adjust your settings at a later date.
Our consent banner
We use the consent management platform of Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, website: usercentrics.com/en/ (hereinafter "Usercentrics") to obtain your consent to the storage of certain cookies on your end device and to document this in accordance with data protection regulations. The following data is transmitted to Usercentrics:
- Opt-in and opt-out data
- Referrer URL
- User agent
- User settings
- Consent ID
- Time of consent
- Consent type
- Template version
- Banner language
The legal basis for data processing is the fulfillment of our legal obligation pursuant to Art. 6 para. 1, sentence 1 c) GDPR to obtain the corresponding consents.
You can revoke your consent to the use of cookies at any time under Cookie settings and/or adjust the settings at any time.
l) Analysis / Marketing
aa) Google services
We use various services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google") on our website. It is possible that data may also be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 in the USA.
Google is certified under the EU-US Data Privacy Framework and falls under the EU adequacy decision for the US.
Google Analytics
We use the Google Analytics tracking tool from Google on our website. We use Google Analytics to evaluate your use of the website, to compile reports on the activities within this website and to provide other services associated with the use of the website and thus improve user-friendliness.
When Google Analytics is used, the interactions of website visitors are primarily recorded and systematically analyzed using cookies.
We use Google Analytics with the extension "anonymizeIp()". This shortens IP addresses within the member states of the EU or EEA. If a transmission to Google's servers in the USA takes place, the full IP address is only transmitted and shortened there in exceptional cases. A direct personal reference is therefore generally excluded. In particular, it is no longer possible to identify the computer or end device of the website visitor.
The following data is processed through the use of Google Analytics:
- 3 bytes of the IP address of the website visitor's accessed system (anonymized IP address),
- the website accessed,
- the website from which the user accessed the page on our website (referrer),
- the subpages accessed from the website,
- the time spent on the website,
- the frequency with which the website is accessed.
According to its own information, Google will never associate your IP address with other Google data.
Google Remarketing/Retargeting
We use so-called tracking cookies from Google on our website. When you visit our site, permanent cookies store information about which products you have viewed on our site and which third-party advertisements and pages users use to reach our website. If you subsequently visit a partner website, we can display personalized advertising for you based on the products you have viewed on our website.
Legal basis and revocation
The legal basis for data processing in the context of the aforementioned Google services is your prior consent in accordance with Art. 6 para. 1 a) GDPR.
You can revoke your consent at any time with effect for the future by adjusting your preferences in our content banner.
Google Ads
We use Google Ads, an online advertising program from Google, on our website. So-called conversion tracking is used here. If you click on an ad placed by Google, a cookie is set. This cookie loses its validity after 30 days and is not used to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.
The data collected using the conversion cookie is used to generate statistics for Ads customers who have opted for conversion tracking.
Legal basis and revocation
The legal basis for data processing in the context of the aforementioned Google services is your prior consent in accordance with Art. 6 para. 1 a) GDPR.
You can revoke your consent at any time with effect for the future by adjusting your preferences in our consent banner.
bb) Facebook Custom Audiences (pixels/cookies)
We use a so-called tracking pixel from Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Facebook Inc. 1601, Willow Road Menlo Park, CA 94025, USA, on our website. We use Facebook Pixel to track the success of our own Facebook advertising campaigns and to optimize the delivery of Facebook advertising campaigns to interested target groups.
After clicking on a Facebook ad or visiting our website, a cookie is stored on your device using the pixel on our website. The cookie processes data about whether you have reached our website via a Facebook ad and enables us to analyze the user's behavior until the purchase is completed. This allows us to track the success rate of our Facebook advertising campaigns. In addition, the pixel processes data about the fact that you have visited our website and enables us to adapt the advertising displayed on Facebook to your interests.
The Facebook pixel integrated on our website establishes a direct connection to the Facebook servers when you visit our website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to Facebook in the USA.
Meta is certified under the EU-US Data Privacy Framework and is covered by the EU adequacy decision for the US.
The data collected is anonymous to us and does not allow us to draw any conclusions about the user. If you are registered with Facebook, Facebook can assign the information collected to your account. Even if you do not have a Facebook account or are not logged in when you visit our website, your IP address and other identification data may be processed and stored by Facebook.
You can revoke your consent to data processing by Facebook Pixel for our web domain at any time with effect for the future by adjusting your preferences in our consent banner.
The legal basis for data processing is your consent in accordance with Art. 6 (1) a) GDPR.
m) External content
We use dynamic content ("content") from third parties to optimize the presentation and offer of our website. When you visit the website, a request is automatically sent to the server of the respective content provider via an interface, during which certain log data (e.g. the user's IP address) is transmitted. The dynamic content is then transmitted to our website and displayed there.
We use external content in connection with the following functionalities:
Integration of Vimeo videos
We have integrated videos from the Vimeo portal of Vimeo, Inc, 555 West 18th Street, New York, New York 10011, USA on our website. When the videos are played, log data is transmitted to the Vimeo servers in the USA. This processing is carried out on the basis of our overriding legitimate interest in the optimal marketing of our offer in accordance with Art. 6 para. 1 f) GDPR.
For data transfers to the USA, Vimeo ensures an appropriate level of data protection via the EU standard contractual clauses. A copy of the relevant EU standard contractual clauses will be provided upon request. Please contact datenschutz@local-brand-x.com for this purpose.
5. duration of data storage
We only store personal data for as long as is necessary for the purposes for which it is processed or for as long as you have withdrawn your consent. Insofar as statutory retention obligations must be observed, the storage period for certain data may be up to 10 years, regardless of the processing purposes.
6. your rights as a data subject
a) Information
On request, you can obtain information about all personal data that we have stored about you at any time and free of charge.
b) Rectification, erasure, restriction of processing (blocking), objection
If you no longer consent to the storage of your personal data or if it has become incorrect, we will arrange for the deletion or blocking of your data or make the necessary corrections (insofar as this is possible under the applicable law). The same applies if we are only to process data to a limited extent in future. You have the right to object in particular in cases where your data is required for the performance of a task carried out in the public interest or in our legitimate interest, as well as profiling based on this. You also have such a right to object in the case of data processing for the purpose of direct advertising.
c) Right to withdraw consent with effect for the future
You can withdraw your consent at any time with effect for the future. Your revocation does not affect the legality of the processing up to the time of revocation.
d) Data portability
If data processing is carried out on the basis of a contract, pre-contractual negotiations, consent or with the aid of automated procedures, you have the right to data portability. Upon request, we will provide you with your data in a commonly used, structured and machine-readable format so that you can transmit the data to another controller if you wish.
e) Restriction of processing
Data for which we are not able to identify the data subject, e.g. if it has been anonymized for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible with regard to this data if you provide us with additional information that allows us to identify you.
f) Exercising your rights as a data subject and right to lodge a complaint
If you have any questions regarding the processing of your personal data, information, correction, blocking, objection or deletion of data or if you wish to transfer the data to another company, please contact datenschutz@local-brand-x.com.