Impress & Privacy Policy
Impress & Privacy Statement
WEBSITE
Imprint according to §5 TMG:
LuBu UG (haftungsbeschränkt) i.L.
Hamburger Allee 45
60486 Frankfurt
REPRESENTED BY
Tarik El Bouyahyani
Luisa El Bouyahyani
CONTACT
Phone: +49 162 7700899
Email: hello(at)lunchbuddies.de
REGISTER ENTRY
Commercial register Entry.
Register court: Local court Frankfurt am Main
Registration number: HRB 109472
SALES TAX
Sales tax identification number according to §27 a sales tax law:
DE 315 931 734
DISPUTE SETTLEMENT
The European Commission provides an online dispute resolution (OS) platform:
You will find our e-mail address at the top of the imprint. We are not willing or obliged to participate in dispute resolution proceedings before a consumer arbitration board.
LIABILITY FOR CONTENT
As a service provider, we are responsible for our own content on these pages according to § 7 paragraph 1 TMG (German Telemedia Act) and general laws. According to §§ 8 to 10 TMG we are not obliged to monitor transmitted or stored information from third parties or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information according to general laws remain unaffected by this. However, liability in this respect is only possible from the time of knowledge of a concrete infringement. If we become aware of any such legal infringements, we will remove the content in question immediately.
LIABILITY FOR LINKS
Our offer contains links to external websites of third parties, on whose contents we have no influence. Therefore we cannot assume any liability for these external contents. The respective provider or operator of the sites is always responsible for the contents of the linked sites. The linked pages were checked for possible legal violations at the time of linking. Illegal contents were not identified at the time of linking. However, a permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any infringements, we will remove such links immediately.
COPYRIGHT
The contents and works on these pages created by the site operators are subject to German copyright law. The reproduction, editing, distribution and any kind of use outside the limits of copyright law require the written consent of the respective author or creator. Downloads and copies of these pages are only permitted for private, non-commercial use. Insofar as the content on this site was not created by the operator, the copyrights of third parties are observed. In particular, third-party content is identified as such. Should you nevertheless become aware of a copyright infringement, please inform us accordingly. If we become aware of any infringements, we will remove such contents immediately.
Privacy Policy Website
(Last updated:06.2020)
i. General Information & your rights
Data protection is an important concern for us. Therefore, we, LuBu UG (haftungsbeschränkt) i. L., inform you in this privacy policy about our handling of personal data when you visit our website. A separate privacy policy for the LuBu app can be found here.
Personal data is information that enables us to identify you directly or indirectly. For example, it is information that allows us to draw conclusions about your identity, such as your name or your e-mail address.
You have the following rights in relation to the personal data concerning you:
- Right to information,
- Right of correction or deletion,
- Right to limit processing,
- Right to object to the processing, and
- Right to data portability.
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us
II. Collection of personal data
1. When visiting the website
If you use our website for information purposes only, i.e. do provide us with further information voluntarily, we only collect the personal data that your browser sends to our server. If you wish to read our website, we collect the following data, which is technically necessary for us to display our website and to ensure its stability and security:
- IP address,
- Date and time of the request,
- Time zone difference to Greenwich Mean Time (GMT),
- Content of the request (concrete page),
- Access status/HTTP status code,
- Amount of data transferred in each case,
- Website from which the request comes,
- Browser,
- Operating system and its interface and
- Language and version of the browser software.
The legal basis for the collection of the above-mentioned data is our legitimate interest according to Art. 6 paragraph 1 sentence 1 lit. f DSGVO (English: GDPR) to offer a stable and secure website. Furthermore, we use cookies (see under III.) and web analysis services (see under IV.) when you visit our website. If we use contracted service providers for individual functions of our offer or wish to use your data for advertising purposes, we will inform you within the following paragraphs of this data protection declaration in which form, on which basis and for which period (storage period) this is done.
2. When contacting us
If you contact us by email or via our contact form, the data you provide (your email address, your name and telephone number, if applicable) will be stored by us to answer your questions. The legal basis for this is Art. 6 paragraph 1 sentence 1 lit. b DSGVO. This can be done by means of a customer relationship management or similar system. For further purposes, the protection of legitimate interests pursuant to Art. 6 paragraph 1 lit. f DSGVO serves as the legal basis. We delete the data arising in this connection if storage is no longer necessary or restrict processing if there are legal obligations to retain data. We review the necessity every two years.
3. Further functions and offers of our website
We also offer various services on our website, which you can use if you are interested. To do so, you will generally have to provide additional personal data which we use to provide the respective service and to which the aforementioned data processing principles apply. In some cases, we use external service providers to process your data. We select these carefully before we place an order with them. They are also bound by our instructions and are regularly checked. A transfer of the data collected by us will only take place if:
- You have given your express consent in accordance with Art. 6 paragraph 1 sentence 1 lit. a DSGVO.
- The transfer in accordance with Art. 6 paragraph 1 sentence 1 lit. f DSGVO is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection that your data is not transferred.
- We are legally obliged to pass on your data in accordance with Art. 6 paragraph 1 S. 1 lit. c DSGVO.
- The processing is legally permissible and, according to Art. 6 paragraph 1 sentence 1 lit. b DSGVO, is necessary for the processing of contractual relationships with you or for the implementation of pre-contractual measures which are carried out at your request.
- A further legal basis mentioned in this data protection declaration exists.
Insofar as our service providers or partners are based in a state outside the European Economic Area (EEA), we will inform you in the relevant section of this data protection declaration what this means for you.
4. Requesting a web demo
If you request for a web demo, the personal data you enter will be used by us to process the appointment. The legal basis is Art. 6 paragraph 1 p. 1 lit. b DSGVO. We have created a booking system for this purpose with the help of HubSpot, a provider of online marketing solutions. More information about HubSpot can be found further down in this privacy policy (section IV.2.).
You are explicitly not obliged to submit a request for a web demo via our web form. You can also request an appointment via hello(at)lunchbuddies.de. Personal data that we store for the purpose of conducting a web demo will only be kept for communication in connection with this web demo and, if applicable, your future interest in our services. We regularly delete this personal data when it can no longer be stored for the intended purpose. This deletion practice is only restricted if there are legal storage obligations.
III. Information about our cookies
We use cookies on our website. These are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not cause any damage to your terminal device, do not contain viruses, Trojans or other malware. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website as a whole more user-friendly and effective. In the following, we explain the scope and function of the various types of cookies that we use on this website.
Temporary cookies or session cookies store a so-called session ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognized when you return to our website. The session cookies are automatically deleted when you log out or close the browser.
Permanent cookies are stored on your hard drive and are automatically deleted after a preset period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
The Flash cookies used are not registered by your browser, but by your Flash plug-in. We also use HTML5 storage objects, which are stored on your end device. These objects store the required data regardless of the browser you use and do not have an automatic expiration date. If you do not want Flash cookies to be processed, you must install a corresponding add-on, e.g.:
You can prevent the use of HTML5 storage objects by setting your browser to private mode. We also recommend that you regularly delete your cookies and browser history manually. You can configure your browser settings to your liking, such as rejecting third-party cookies or all cookies ("do-not-track-me" feature). Please note that you may not be able to use all functions of this website.
We use cookies to identify you for subsequent visits. The use of cookies is based on our legitimate interest in enabling you to use our website more conveniently and individually. The legal basis is Art. 6 paragraph 1 sentence 1 lit. f DSGVO.
If you wish to change your cookie settings, please use the banner at the bottom of the screen and click on "Cookie Settings".
IV. Web analysis services
1. Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies, which are text files placed on your computer (for more information on cookies, please refer to Section III.), to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
However, due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before this happens. By using Google Analytics with the extension "_anonymizeIp()" a personal reference can be excluded. If the data collected about you contains a personal reference, this is immediately excluded and the personal data is therefore deleted immediately.
Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the internet. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:
Third party information:
This website also uses Google Analytics for a cross-device analysis of visitor flows, which is performed using a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My Data", "Personal Data".
We can use the statistics obtained by Google Analytics to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield.
The legal basis for the use of Google Analytics is our legitimate interest in the analysis, optimization and economic operation of our website, in terms of Art. 6 paragraph 1 sentence 1 lit. f DSGVO. In addition, a contract for order processing within the meaning of Art. 28 DSGVO has been concluded with Google.
2. Use of HubSpot
For our online marketing activities, we use the services of HubSpot Inc. a U.S. company with a branch in Ireland: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland ("HubSpot"). HubSpot is an integrated software solution that we use to cover various aspects of our online marketing activities. These include, among others:
- Reporting (e.g. traffic sources, accesses, etc. ...)
- Contact management (e.g. user segmentation and customer relationship management)
- Contact forms (e.g. for contacting and booking web demos)
This information and the content of our site are stored on HubSpot's servers. We may use this information to contact visitors to our site and to determine which of our services are of interest to them. All information collected is used exclusively to optimize our marketing activities. HubSpot is a US-based software company with a subsidiary in Ireland and is certified under the EU-US Privacy Shield.
Third party information:
The legal basis for the use of this service is our legitimate interest within the meaning of Art. 6 paragraph 1 sentence 1 lit. f DSGVO to optimize our marketing measures and improve the quality of service on our website. Furthermore, a contract for order processing was concluded with HubSpot in accordance with Art. 28 DSGVO.
If you generally do not want HubSpot to collect data, you can prevent the storage of cookies by changing your browser settings accordingly. For further information, please refer to section V.
V. Other Web Services
1. Integration of Google Maps
On this website we use the offer of Google Maps, also a service of Google (see also section V.1.). This enables us to display interactive maps directly on the website and enables you to use the map function conveniently. The legal basis is Art. 6 paragraph 1 S. 1 lit. f DSGVO, based on our legitimate interest in the integration of a map service to provide our web offer.
By visiting the website, Google receives the information that you have called up the corresponding subpage of our website with the integrated map. In addition, the data mentioned under III.1. of this data protection declaration is transmitted. This happens regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you don't want your profile to be associated with Google, you must log out before using the map. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact Google to exercise this right.
For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information about your rights and settings to protect your privacy:
Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield.
2. Use of Google Fonts
External fonts from Google Fonts are used on these Internet pages. Google Fonts is also a service of Google (see also section V.1.) The integration of these web fonts is done by a server call, usually a Google server in the USA. This transfers to the server which of our Internet pages you have visited. The IP address of the browser of the end device of the visitor to this website is also stored by Google. The legal basis is Art. 6 paragraph 1 p. 1 lit. f DSGVO, based on our legitimate interest in using widely used and legible fonts.
Further information can be found in Google's data protection information, which can be accessed here:
Further information on Google Fonts can be found here:
Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield.
3. Use of Vimeo
Our websites include plug-ins from the video portal Vimeo of Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA, ("Vimeo"). Each time you access a page that offers one or more Vimeo video clips, a direct connection is established between your browser and a Vimeo server in the USA. Information about your visit and your IP address is stored there. Through interaction with the Vimeo plug-ins (e.g. clicking the start button), this information is also transmitted to Vimeo and stored there. The legal basis is Art. 6 paragraph 1 sentence 1 lit. f DSGVO, based on our legitimate interest in the integration of video and image content. If you have a Vimeo user account and do not want Vimeo to collect information about you through this website and link it to your membership data stored with Vimeo, you must log out of Vimeo before visiting this website.
In the event that personal data is transferred to the USA, Vimeo has subjected itself to the EU-US Privacy Shield.
The Privacy Policy for Vimeo, which contains more detailed information on the collection and use of your data by Vimeo, can be found at
4. Facebook Fan Page
We operate our own so-called fan page at the social network of Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA ("Facebook"). With the help of this fan page, we want to communicate with everyone who is interested in our work and inform them about LuBu. The legal basis for this is our legitimate interest in the sense of Art. 6 paragraph 1 S. 1 lit. f DSGVO to communicate with customers, interested parties and users on various channels.
Through the fan page we can obtain information about users registered with Facebook. Examples of such information may relate to users on the one hand: Information about the number of users, their names, interactions between users such as likes or comments. Other examples may include aggregate demographic and other types of information, and statistics based on specific parameters about our website and the information provided on our fan page. This information can help us learn about interactions with our fan page.
We have no control over data processed by Facebook. However, we would like to point out that when you visit the fan page, data is transferred to the Facebook servers ("Facebook Insights"). If you are logged in to Facebook with a user name and password, Facebook receives the information that you have visited our fan page. By logging in, Facebook can assign this information to your user account.
Facebook itself uses the aforementioned data and information to create detailed statistics and uses them for its own purposes, over which we have no influence. This is considered to be processing in so-called joint responsibility according to Art. 26 DSGVO. A corresponding contract for this use has been concluded with Facebook.
In the event that further personal is transferred to the USA, Facebook has subjected itself to the EU-US Privacy Shield.
You can find more detailed information on this in the Facebook data policy:
Further information on how to assert rights against Facebook regarding the use of data at Facebook Insights can be found here:
As far as we have personal data in this context, visitors to our fan page have the right to object to the use of their data as stated in this privacy policy. Should visitors to our fan page also wish to assert rights against Facebook, the easiest way to do so is to contact Facebook directly. Facebook knows the details of the technical operation of its social network as well as the associated data processing and the specific purposes of this data processing. Facebook can implement appropriate measures upon request if users make use of their rights. We are happy to support users in the assertion of their rights as far as we are able.
5. Further presence in social media
In addition to the online presences already mentioned in this section, we continue to be active on the social networks and platforms mentioned in this sub-section, in order to give all those interested in our work the opportunity to inform themselves about it. The legal basis for this is our legitimate interest within the meaning of Art. 6 paragraph 1 sentence 1 lit. f DSGVO to communicate with customers, interested parties and users on various channels and to inform them about our work.
In this context, it is possible that your data may be processed outside the EU if you use our offer in these social media channels. To enable you to find out more about the processing of your data by the respective providers and about your right to object, we provide you with links to these providers at this point.
As already explained in connection with the Facebook fan page, the easiest way to assert your user rights is to contact the respective providers directly. They have direct access to your data and are therefore best placed to implement measures and provide information. We are happy to support users in asserting their rights as far as we are able.
Google/ YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland):
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA):
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland):
VI. Objection or revocation against the processing of your data
If you have given your consent to process your data, you can revoke it at any time. Such a revocation influences the permissibility of processing your personal data after you have given it to us. Insofar as we base the processing of your personal data on the balancing of interests, you may object to the processing. As far as we are able to do so, we have also indicated direct opt-out options and links in the sections on the relevant third-party providers.
You have this option to object if the processing is not necessary. If you exercise such an objection, please explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the facts of the case and will either stop or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.
Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us about your objection to the processing of your personal data under the following contact details:
VII. Data security
All the data you provide us with personally is transmitted using the common and secure TLS (Transport Layer Security) standard. TLS is a secure and proven standard that encrypts the information you enter. You can recognize a secure TLS connection by, among other things, the attached s at http (i.e. https://..) in the address bar of your browser or by the lock symbol at the bottom of your browser.
We also use suitable technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
VIII. Up-to-dateness and amendment of this data protection declaration
This privacy policy is currently valid. Due to the further development of the website or due to changes in legal or official requirements, it may become necessary to amend this data protection declaration. You can access and print out the current data protection declaration at any time on the website at: