PRIVACY POLICY

We are committed to complying with statutory data protection regulations and endeavor to follow the principles of data avoidance and data minimization at all times.

a) The controller
The controller within the meaning of the General Data Protection Regulation, other national data protection laws of EU member states, and other data-protection provisions is:


Livory Group GmbH
Am Tullnaupark 15
90402 Nürnberg, Germany
Email: datenschutz@livory-group.de


b) The data protection officer
The controller's data protection officer can be reached as follows:


SiDIT GmbH, www.sidit.de, Email: info@sidit.de

We have designed our privacy policy following the principles of clarity and transparency. Should any ambiguities remain regarding the use of various terms, the corresponding definitions can be reviewed here.

a) Processing of personal data under the GDPR
We process your personal data — such as your first and last name, email address, IP address, etc. — only when there is a legal basis for doing so. Under the General Data Protection Regulation, the following provisions in particular may apply:


• Art. 6 (1) sentence 1 lit. a GDPR: The data subject has given consent to the processing of their personal data for one or more specific purposes.
• Art. 6 (1) sentence 1 lit. b GDPR: Processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.
• Art. 6 (1) sentence 1 lit. c GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject.
• Art. 6 (1) sentence 1 lit. d GDPR: Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
• Art. 6 (1) sentence 1 lit. e GDPR: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
• Art. 6 (1) sentence 1 lit. f GDPR: Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.


At the relevant points of this privacy policy, we always point out again on which legal basis your personal data is processed.


b) Consent of legal guardians under Art. 8 (1) sentence 2 alt. 2 GDPR
A legal guardian must consent to any data processing on this website that requires the consent of a minor who has not yet reached the age of 16.
Information on the individual processing activities, their purposes, and the data categories affected for which consent is required can be found in the privacy policy.


You can revoke your consent at any time by sending a written declaration of revocation to the contact details of the controller. Processing carried out up to the revocation remains lawful.


c) Processing of information under § 25 (1) TDDDG
We also process information pursuant to § 25 (1) TDDDG by storing information on your terminal device or accessing information already stored on your terminal device. This may involve personal as well as non-personal data, e.g. cookies, browser fingerprints, advertising IDs, MAC addresses, and IMEI numbers. A terminal device is any device connected directly or indirectly to the interface of a public telecommunications network for the purpose of sending, processing, or receiving messages, § 2 (2) no. 6 TDDDG.


We generally process this information on the basis of your consent, § 25 (1) TDDDG.


If an exception under § 25 (2) no. 1 or no. 2 TDDDG applies, no consent is required. Such an exception applies if we access or store information solely to transmit a message via a public telecommunications network, or if this is strictly necessary to provide a telemedia service you have expressly requested. You can revoke your consent at any time.


We would like to inform you that revoking your consent does not affect the lawfulness of processing carried out on the basis of consent up to the point of revocation.

Sharing personal data also constitutes processing within the meaning of section 3 above. We would like to inform you separately about the topic of sharing data with third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.


Data is therefore only shared with third parties if there is a legal basis for the processing. For example, we share personal data with persons or companies that act on our behalf as processors in accordance with Art. 28 GDPR. A processor is anyone who processes personal data on our behalf — in particular within a relationship of instruction and control with us.


In accordance with the requirements of the GDPR, we conclude a contract with each of our processors to oblige them to comply with data-protection regulations and to thereby provide comprehensive protection for your data.

Your personal data will be deleted by us as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed, provided that processing is not required for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

For security reasons and to protect the transmission of confidential content — such as inquiries you send to us as the website operator — this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser address bar changes from „http://“ to „https://“ and by the lock symbol in your browser bar.


With SSL or TLS encryption activated, the data you transmit to us cannot be read by third parties.

To optimize our processes and improve your personalized visitor experience on our website, your personal data may be processed using artificial intelligence (AI) technologies. AI is used in particular to:


• perform data analyses,
• create forecasts,
• close security gaps,
• and make routine processes more efficient.


The AI used operates in accordance with the principles of the GDPR. Any decisions that have legal or similar effects on you are not made by the AI alone, but are supplemented by human intervention.

We use cookies on our website. Cookies are small data packets that your browser creates automatically and that are stored on your terminal device when you visit our website. These cookies are used to store information related to the terminal device used in each case.


When using cookies, a distinction is made between technically necessary cookies and „other“ cookies. Technically necessary cookies are those that are strictly required to provide an information society service expressly requested by you.


a) Technically necessary cookies
To make using our offering more convenient for you, we use technically necessary cookies. These may include so-called session cookies (e.g. language and font selection, shopping cart, etc.), consent cookies, cookies for ensuring server stability and security, or similar. The legal basis for these cookies is Art. 6 (1) sentence 1 lit. f GDPR, our legitimate interest in the error-free operation of the website and our interest in providing our services to you in an optimized manner.


b) Other cookies
Other cookies include cookies for statistical, analysis, marketing, and retargeting purposes.
We use these cookies on the basis of your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR.


You can revoke your consent for the use of cookies at any time.
We would like to inform you that revoking your consent does not affect the lawfulness of processing carried out on the basis of consent up to the point of revocation.


To do so, you can either edit your cookie settings on our website, disable the use of cookies in your browser settings (which may also limit the functionality of the online offering), or set an opt-out for the respective service on a case-by-case basis.


Within the privacy policy, we point out the legal basis on which the respective data is processed for each service.