Privacypolicy.
The protection of your data is very important to us. This privacy policy explains what personal data LOX24 collects from you through interactions with you or through our products, and how we use that data.
This privacy policy describes LOX24's general data protection practices regarding the processing, including collection, use and disclosure, of personal data of users and other individuals at our customers, business partners, suppliers and other companies with which LOX24 has or is considering a business relationship.
The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Your Data Subject Rights
Using the contactdetails of our data protection contact person, you can exercise the following rights at any time:
- Access to your data stored by us and its processing,
- Rectification of inaccurate personal data,
- Erasure of your data stored by us,
- Restriction of data processing, where we are not yet permitted to delete your data due to legal obligations,
- Objection to our processing of your data, and
- Data portability, where you have consented to the data processing or have entered into a contract with us.
If you have given us your consent, you can withdraw it at any time with effect for the future.
You can lodge a complaint with the competent supervisory authority at any time. Your competent supervisory authority depends on the federal state where you live or work, or where the alleged violation occurred. A list of supervisory authorities (for the non-public sector) with their addresses can be found at: bfdi.bund.de.
In addition, you have the right to lodge a complaint with the Bundesnetzagentur (Federal Network Agency): bundesnetzagentur.de
Purposes of Data Processing by the Controller and Third Parties
We process your personal data only for the purposes stated in this privacy policy. Your personal data will not be transferred to third parties for purposes other than those stated. We will only share your personal data with third parties if:
- you have given your explicit consent,
- the processing is necessary for the performance of a contract with you,
- the processing is necessary for compliance with a legal obligation,
the processing is necessary for the purposes of legitimate interests and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed.
Deletion and Blocking of Data
We adhere to the principles of data avoidance and data minimization. We therefore store your personal data only for as long as necessary to achieve the purposes stated here or as required by the various retention periods stipulated by law. Once the respective purpose no longer applies or these periods expire, the relevant data is routinely blocked or deleted in accordance with legal requirements.
Collection of General Information When Visiting Our Website
When you access our website, general information is automatically collected by means of a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, and similar details. This is exclusively information that does not allow any conclusions to be drawn about you personally.
This information is technically necessary to correctly deliver the website content you request, and it is generated whenever the internet is used. It is processed in particular for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring trouble-free use of our website,
- Evaluating system security and stability, and
- Other administrative purposes.
Your personal data is processed on the basis of our legitimate interest in the data collection purposes listed above. We do not use your data to draw conclusions about you personally. The only recipients of the data are the controller and, where applicable, processors.
We may statistically analyze anonymous information of this kind in order to optimize our website and the technology behind it.
Registration on our website
When you register to use our personalized services, certain personal data is collected, such as your name, address, and contact and communication details like your phone number and email address. Once you are registered with us, you can access content and services that we offer only to registered users. Registered users can also change or delete the data they provided during registration at any time if needed. Of course, we will also provide you with information about the personal data we have stored about you at any time. We will gladly correct or delete this data at your request, unless statutory retention obligations prevent us from doing so. To contact us in this regard, please use the contact details provided at the end of this privacy policy.
Provision of paid services
To provide paid services, we request additional data, such as payment details, in order to process your order. We store this data in our systems until the statutory retention periods have expired.
Traffic data when sending SMS
We collect traffic data from registered customers in accordance with §9 TTDSG in order to provide our communication services. This traffic data includes the sender number, recipient number, sending time, submission time, delivery status, the sender's IP address, the charge for the connection, and the data volume. This data is deleted no later than 60 days after the service has been billed, or at the customer's request. This data is subject to the confidentiality of telecommunications under § 8 of the Telecommunications and Telemedia Data Protection Act (TTDSG) and is protected by Article 10 of the German Basic Law (GG) and by Article 8 of the European Convention on Human Rights (ECHR). Traffic data is used to the extent necessary to provide telecommunications services, including protecting their technical systems. Use of this data for other purposes, in particular disclosure to others, is permitted only where required by law. Data is not passed on to third parties for other purposes.
Address book and group/bulk SMS
When you send bulk SMS through our website, you can import your destination numbers and other data, such as recipient names, and save them in a kind of address book. You can view, edit, and delete this data at any time. You can also let us know that we should deactivate this feature for your account free of charge.
Mailbox
When you send SMS through us, we store the message texts in encrypted form in various folders, such as Outbox and Sent SMS, to give you a clear overview and to let you track your messages. You can view or delete these messages at any time. You can also let us know that we should deactivate this feature for your account free of charge.
Google Calendar Appointment Reminders
You can send appointment reminders to your customers using Google Calendar. In this case, our system will connect to your calendar and read data from it. Data is processed only to send your appointment reminders. No other data is stored or processed. You can disconnect or block our service's access to your calendar at any time, either on our website or on Google's website: security.google.com
SSL Encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) over HTTPS.
Contact Form
If you contact us with questions of any kind by email or via the contact form, you voluntarily consent to us contacting you. A valid email address is required for this. It is used to assign the inquiry and to reply to it. Providing additional data is optional. The information you provide is stored for the purpose of processing your inquiry and for possible follow-up questions. Once your inquiry has been resolved, personal data is deleted automatically.
Google reCAPTCHA
We use reCAPTCHA from Google (hereinafter "reCAPTCHA") to prevent spam and unauthorized access to user accounts, e.g., by bots checking stolen passwords. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
reCAPTCHA is used to verify whether data entered on our websites (e.g., in a contact form or at login) is submitted by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, the time the visitor spends on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The analyses run in the background. Website visitors are therefore not separately notified that an analysis is taking place.
Data processing is carried out on the basis of Art. 6(1)(f) GDPR. LOX24 has a legitimate interest in protecting its web offerings from abusive automated spying and from spam. This measure also serves to protect customer accounts and is therefore also in the interest of our customers.
Further information about Google reCAPTCHA and Google's privacy policy can be found at google.com/policies/privacy and google.com/recaptcha/intro.
Use of script libraries (Google Web Fonts)
To display our content correctly and attractively across all browsers, we use script libraries and font libraries on this website, such as Google Web Fonts. Google Web Fonts are transferred to your browser's cache to avoid repeated loading. If your browser does not support Google Web Fonts or blocks access to them, content will be displayed in a default font.
Calling up script libraries or font libraries automatically triggers a connection to the operator of the library. In theory, it is possible for the operators of such libraries to collect data, although it is currently unclear whether they do so and, if so, for what purposes.
You can find the privacy policy of the library operator Google here: google.com/policies/privacy
Use of Google Maps
This website uses the Google Maps API to display geographic information visually. When you use Google Maps, Google also collects, processes, and uses data about visitors' use of the map functions. You can find more information about data processing by Google in Google's privacy notices. There, in the privacy center, you can also change your personal privacy settings.
Detailed instructions on managing your own data in connection with Google products can be found here.
Embedded YouTube videos
On some of our web pages, we embed YouTube videos. The operator of the relevant plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to YouTube's servers is established. YouTube is thereby informed which pages you visit. If you are logged in to your YouTube account, YouTube may be able to associate your browsing behavior with you personally. You can prevent this by logging out of your YouTube account beforehand.
When a YouTube video is started, the provider uses cookies that collect information about user behavior.
Anyone who has disabled the storage of cookies for the Google Ad program will not have to expect such cookies when watching YouTube videos either. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in your browser.
Further information on data protection at "YouTube" can be found in the provider's privacy policy at: google.de/policies/privacy
Google AdWords
Our website uses Google conversion tracking. If you arrived at our website via an ad served by Google, Google AdWords places a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad served by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can tell that the user clicked on the ad and was redirected to that page. Each Google AdWords customer receives a different cookie. Cookies therefore cannot be tracked across the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted in to conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
If you do not want to take part in tracking, you can decline the setting of a cookie required for it – for example, via a browser setting that generally disables the automatic setting of cookies, or by configuring your browser to block cookies from the domain "googleleadservices.com".
Please note that you must not delete the opt-out cookies as long as you do not want measurement data to be recorded. If you have deleted all of your cookies in the browser, you will need to set the respective opt-out cookie again.
Use of Google Remarketing
This website uses the remarketing function of Google Inc. The function is used to present interest-based ads to website visitors within the Google advertising network. A so-called "cookie" is stored in the visitor's browser, which makes it possible to recognize the visitor when they visit websites that belong to Google's advertising network. On these pages, the visitor may be shown ads related to content they previously viewed on websites that use Google's remarketing function.
According to Google, no personal data is collected during this process. If you still do not want to use Google's remarketing function, you can generally disable it by adjusting the corresponding settings at google.com/settings/ads . Alternatively, you can disable the use of cookies for interest-based advertising through the Network Advertising Initiative by following the instructions at networkadvertising.org .
Account Top-Up, Invoicing, and Payment Service Providers
To order SMS credit and pay invoices, we use a number of external payment service providers. However, you also have the option of paying by standard bank transfer. In this case, no service provider comes into contact with your data.
PayPal
We offer the option of processing the payment via the payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6(1)(f) GDPR). In this context, we share the following data with PayPal to the extent necessary for the performance of the contract (Art. 6(1)(b) GDPR).
The processing of the data specified in this section is required neither by law nor by contract. Without the transmission of your personal data, we cannot process a payment via PayPal.
For various services, such as payment by direct debit, PayPal performs a credit check to verify your willingness and ability to pay. This corresponds to PayPal's legitimate interest (pursuant to Art. 6(1)(f) GDPR) and serves the performance of the contract (pursuant to Art. 6(1)(b) GDPR). For this purpose, your data (name, address, date of birth, bank account details) is passed on to credit reporting agencies. We have no influence on this process and only receive the result, i.e. whether the payment was completed, declined, or is pending review.
For more information on options for objecting to and removing data with PayPal, please see: paypal.com/privacy-full
Your data will be stored until payment processing is complete. This includes the period required for processing refunds, receivables management, and fraud prevention.
Sofortüberweisung (Sofort, Klarna)
We offer the option of processing payments via Sofortüberweisung, provided by the payment service provider Klarna GmbH, Theresienhöhe 12, 80339 Munich, Germany (Klarna). This is in our legitimate interest in offering an efficient and secure payment method (Art. 6(1)(f) GDPR). In this context, we share the following data with Klarna to the extent necessary for the performance of the contract (Art. 6(1)(b) GDPR).
Depending on how your bank manages online accounts, different verification steps are required: If your bank only accepts transfer orders when there are sufficient funds in the account, Klarna does not perform an account balance check. In all other cases, Klarna checks whether the sum of your account balance and overdraft limit, minus unposted transactions, covers the amount to be transferred.
In cases with an increased risk of misuse, Klarna reserves the right to review Sofortüberweisung payments from the last 30 days to verify whether they were successfully executed. No credit checks are performed based on historical payment data.
The check is carried out either via your bank's HBCI interface or via your online banking user interface, as if you were logging in yourself. If you manage multiple accounts, information about accounts you did not select is not stored.
Klarna also stores your online banking user ID (login name/account number) as a hash value. PINs and TAN codes are not stored.
We have no influence on this process and only receive the result indicating whether the payment was completed or declined, along with your account number, bank code, reference, amount, and date.
For more information on options for objecting to and removing data with Klarna, please see: sofort.com/data_protection.
For billing purposes, Klarna stores your name, account number, bank code, reference, date, and transfer amount within the statutory retention periods. The legal basis for this is Section 28(1), sentence 1, no. 1 of the German Federal Data Protection Act (BDSG).
We store your data until payment processing is complete. This includes the period required for processing refunds, receivables management, and fraud prevention.
Stripe (credit card and SEPA direct debit)
We offer the option of processing payments via the payment service provider Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2 (Stripe). This is in our legitimate interest in offering an efficient and secure payment method (Art. 6(1)(f) GDPR). In this context, we share the following data with Stripe to the extent necessary for the performance of the contract (Art. 6(1)(b) GDPR).
Processing the data listed in this section is required neither by law nor by contract. Without the transmission of your personal data, we cannot process a payment via Stripe.
In its data processing activities, Stripe acts in a dual role as both controller and processor. As a controller, Stripe uses your transmitted data to fulfill regulatory obligations. This is in Stripe's legitimate interest (Art. 6(1)(f) GDPR) and serves to perform the contract (Art. 6(1)(b) GDPR). We have no influence on this process.
Stripe acts as a processor so that transactions can be completed within the payment networks. Within the scope of the data processing relationship, Stripe acts exclusively on our instructions and has been contractually obligated under Art. 28 GDPR to comply with data protection regulations.
Stripe has implemented compliance measures for international data transfers. These apply to all worldwide activities in which Stripe processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).
For more information on options for objecting to and removing data with Stripe, please visit: stripe.com/privacy-center/legal
We store your data until payment processing is complete. This includes the period required for processing refunds, receivables management, and fraud prevention.
You have the option to save your credit card details with Stripe to speed up future payments to LOX24. In this case, the data will be stored beyond the completion of the payment process. To use this feature, you must explicitly consent to the storage of your data.
If you set up a SEPA mandate, we are required to store the mandate data, which includes your name, bank details, and address, for 14 months from the last collection (end of the technical processing period for the return of unauthorized SEPA direct debits). We use Stripe for this.
Changes to our privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements, or to reflect changes to our services, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
Questions for the Data Protection Officer
If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly: Miguel Bastl, berlin@lox24.eu
This privacy policy was created with the privacy policy generator by activeMind AG .
Comment Function
When users leave comments on our website, the time the comment was created and the username previously chosen by the website visitor are stored along with the comment itself. This is for our protection, as we can be held liable for unlawful content on our website, even if it was created by users.