Privacy Policy - LEHMANN Config App

Introduction

LEHMANN Vertriebsgesellschaft mbH & Co. KG, Uphauser Weg 82, 32429 Minden is responsible
for the operation of the LEHMANN Config App (hereinafter referred to as "App").

Our contact details can be found in the imprint of the app.

Data protection officer and contact

For questions related to our handling of personal data or further information on data protection
issues, our data protection officer at datenschutzbeauftragter@lehmann-locks.com is at your disposal.

Personal Data

Personal data are information about an identified or identifiable natural person. This includes all
information about your identity, such as your name, your e-mail address or your postal address,
as well as information which, when combined with other information, allows conclusions to be
drawn about your person.

Information about the processing of your data

Certain information is automatically processed as soon as you download the app from the app
store. We will list the data that will be processed exactly as follows:

Information that is collected during the download

When downloading the app, certain required information will be transmitted to the App Store,
in particular, the username, the email address, the account number of your account, the time of
download, payment information and the individual device code can be processed. The processing
of this data is done exclusively by the respective App Store and is beyond our control.

Information that is collected automatically

As part of your use of the app, we collect no personal information.
While using the app, data will never be transmitted to LEHMANN.

Use of the App

The App requires authorization to use NFC on the smartphone.

Transfer of personal data

We do not pass on data to third parties without your explicit consent, especially for advertising
purposes.

Storage of data

When using the app, LEHMANN does not process or store any personal data.

Your rights

Right to confirmation

You have the right to obtain confirmation from us as to whether or not personal data
concerning you is being processed.

Right of information acc. Art. 15 DS-GVO

You have the right to receive free information from us at any time about the personal
data stored about you and a copy of this data in accordance with the statutory provisions.

Right to rectification acc. Art. 16 DS-GVO

You have the right to request the rectification of inaccurate personal data concerning you.
You also have the right to request the completion of incomplete personal data, taking into
account the purposes of the processing.

Deletion acc. Art. 17 DS-GVO

You have the right to demand that we delete the personal data concerning you immediately,
provided that one of the reasons provided by law applies and insofar as the processing or
storage is not necessary.

Restriction of processing acc. Art. 18 DS-GVO

You have the right to demand that we restrict processing if one of the legal requirements is met.

Data transferability acc. Art. 20 DS-GVO

You have the right to receive the personal data concerning you, which you have provided to us,
in a structured, commonly used and machine-readable format. You also have the right to transmit
this data to another controller without hindrance from us to whom the personal data has been
provided, provided that the processing is based on consent pursuant to Art. 6 para. 1 lit. a) GDPR
or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 lit. b) GDPR and the
processing is carried out by automated means, unless the processing is necessary for the
performance of a task carried out in the public interest or in the exercise of official authority
vested in us.

Furthermore, when exercising your right to data portability pursuant to Art. 20 para. 1 GDPR, you
have the right to obtain that the personal data be transferred directly from one controller to
another controller, insofar as this is technically feasible and provided that this does not adversely
affect the rights and freedoms of other persons.

Objection acc. Art. 21 DS-GVO

You have the right to object, on grounds relating to your particular situation, at any time to
processing of personal data concerning you which is based on Article 6(1)(e) (data processing in the
public interest) or (f) (data processing on the basis of a balancing of interests) of the GDPR.

This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling
legitimate grounds for the processing which override your interests, rights and freedoms or if the
processing serves the establishment, exercise or defense of legal claims.

In individual cases, we process personal data for the purpose of direct advertising. You can object
to the processing of your personal data for the purpose of such advertising at any time. This also
applies to profiling insofar as it is associated with such direct advertising. If you object to processing
for direct marketing purposes, we will no longer process the personal data for these purposes.

You also have the right to object, on grounds relating to your particular situation, to the processing
of personal data concerning you which is carried out by us for scientific or historical research
purposes or for statistical purposes pursuant to Article 89(1) GDPR, unless such processing is
necessary for the performance of a task carried out in the public interest.

You are free to exercise your right to object in connection with the use of information society
services, notwithstanding Directive 2002/58/EC, by means of automated procedures using
technical specifications.

Revocation of consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time
with effect for the future.

Complaint to a supervisory authority

You have the right to lodge a complaint about our processing of personal data with a supervisory
'authority responsible for data protection.

Changes to this privacy statement

The status of this privacy statement is indicated by the date below. We reserve the right to
change this privacy statement at any time with future effect. A change is made in particular
in the case of technical adjustments of LMS or the App or in the event of changes to the data
protection regulations. The current version of the privacy statement is always available directly
via LMS or the app. We recommend that you regularly check for changes to this privacy statement.

Status of this privacy statement: August 2024