Privacy Policy LOYS AG


Protection of personal data and responsible handling of information are important and special concerns for us. LOYS AG (LOYS) processes personal data only in accordance with legal requirements, in particular the EU Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz or BDSG).

With this privacy policy we inform you how, to what extent and for what purpose we process personal data when using our website.

1. Verantwortlicher und Datenschutzbeauftragter

Controller: LOYS AG

Data Protection Officer: +49 40 609 44 190,

2. Processing of your Personal Data

The use of this website requires the processing of personal data to the extent described under section 3. In addition, personal data will be processed in the cases described in Section 4 et seq.

3. Data Processing to Enable the Use of the Website

Usage Data includes your IP address and information on start, end, your use of the website and identification data (e.g. your login data when you log into a secure area). It also includes technical data transmitted by your browser such as browser type / browser version, previously visited website (referrer URL), monitor resolution, operating system, if applicable device information (e.g. device type) etc. We process these data for the provision and demand-oriented design of this website in our legitimate interest (Art. 6(1)(f) GDPR).

4. Newsletter and E-Mail Advertising

In case your register for our newsletter, we process your e-mail address and send a confirmation e-mail with a confirmation link. You need to activate the confirmation link to subscribe to our newsletter.

In case you purchase our goods or services, we will add your e-mail to our mailing list to provide you with e-mail advertising for our own similar goods or services, unless you have expressed your objection. You can unsubscribe from the newsletter at any time and object to e-mail advertising at any time. You will find an explanation on how to express objection in each of our newsletter.

You can unsubscribe from the newsletter at any time and object to the e-mail advertising at any time. You will find a way to declare your objection in every newsletter and other advertising e-mail we send you.

5. Cookie-Banner: Consent to Cookies and Pseudonymous usage profiles

On your first visit to our website or if necessary again, we will ask you whether you agree that we may

·           process usage data in pseudonymous usage profiles (tracking) for purposes of advertising, market research, web analysis and website improvement (see sec. 7.),


·           for this purpose and possibly for other purposes, we use cookies that are not required for the technical provision of the website. (see sec. 6).

For this we show a corresponding banner, in which we refer to it. If you click on "accept" or "OK" or simply continue surfing, you agree. If you do not click on "OK", no cookies will be set and no pseudonymous user profiles will be created.

You can restrict your consent to the setting of cookies in whole or in part by configuring your browser settings accordingly and deactivating the setting of cookies in whole or in part. In addition, you can install a plugin in your browser to protect your privacy, which offers the possibility to prevent web analysis - e.g. AdBlock, Ghostery or NoScript (see the data protection information of the respective plugin provider). In addition, some web analytics providers are members of industry associations whose websites allow you to centrally prevent usage-based online advertising and web analytics by their respective members. Below you will find the websites of these associations for a convenient cross-vendor prevention of web analytics. You can also prevent the creation of pseudonymous user profiles by doing the following

·           „European Interactive Digital Advertising Alliance“ (EDAA):

·           „Digital Advertising Alliance“ (DAA):

·           „Network Advertising Initiative“ (NAI):

The following table lists the web analysis technologies used on our website and the respective providers who process usage data in pseudonymous profiles for the respective purposes. In addition, the link to the data protection declaration of the provider is given and an explanation of how you can prevent web tracking by the individual service providers with effect from the time the action is taken. Typically, an "anti-tracking cookie" is then stored on your device, which excludes the collection of usage data from your device by the respective provider for the future. Please note that if cookies are deleted from your device, you may have to set the "Anti-Tracking Cookie" again.

Tool/Provider Purpose Link to the privacy policy of the provider / Prevent processing
Google Analytics: Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA Web analysis, interest-oriented advertising

Prevent processing: Via Browser-Plugin (see Add-On) and for additional information see sec. 8

6. Cookies

When you visit our website, information in the form of cookies may be stored on your device. A cookie is a small text file that is sent from a web server to your browser and stored on your device. When you revisit our website, cookie data are transmitted to our web server again. We may then, for example, recognise you again and take your individual settings into account when displaying the website.

Cookies can be categorised according to the following characteristics:

·           Necessity: Some cookies are required to ensure the technical functionality of the website (e.g. to save the language setting, for a shopping basket function or to avoid multiple logins during a session). Other cookies are not required for this, but serve other purposes, for example to make the use of the website as pleasant as possible, to design it in accordance with your interests or to carry out a web analysis.

·           Storage Period: Some cookies are only stored on your end device during your visit to our website (session cookies), others are stored for a longer period of time (persistent cookies).

·           First-Party-Cookies and Third-Party-Cookies: When visiting a website, cookies can be set by the operator of the website itself (first party cookies), but also by third-party providers (third party cookies).

Required Cookies

DYou will find the cookies required for operation and their purpose in the following table. These are first-party cookies.

Name Purpose Retention Period
PHPSESSID   Ende des Besuchs der Website

Not Required Cookies (with Consent)

When visiting our website for the first time or if necessary again, we obtain your consent for the setting of cookies which are not required for the provision of the technical functionality of the website (see 5.), but are set by us in order to make the use of the website as pleasant as possible and in line with your interests. This applies to the following first-party cookies:

Name Purpose Retention Period

You can limit the consent to the setting of these cookies in whole or in part (see 5.) and delete cookies from your hard drive at any time. If you do not allow cookies to be set in their entirety (e.g. by deactivating them in your browser settings) or if you delete cookies from your hard drive, any required cookies may also be deleted. It is therefore possible that the use of the website or individual functions thereof may then be restricted or not possible at all.

7. Pseudonymous Usage Profiles for Advertising and Market Research (Webtracking and Analysis)

For advertising, market research and to make your use of our website as enjoyable as possible, LOYS uses web analytics technology based on cookies, among other things (non-required first party cookies and third party cookies). Data about the use of our website is stored in pseudonymous user profiles (your IP address is anonymized). This enables us to further develop our website and tailor the content even better to your needs.

The pseudonymous usage profiles are not merged with personal data. Before we process your data for the purposes mentioned in this section, we obtain your consent (see 5.).

8. Google Analytics

This website uses Google Analytics, a web analysis service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies (see section 6), to enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, Google will reduce your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area beforehand and thus make it anonymous. Only in exceptional cases the full IP address will be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

9. Recipients and Categories of Recipients / Transfer to Third Parties

DWe only pass on the personal data described here insofar as this is necessary for the provision of our service or otherwise allowed by law (see Art. 6(1) (a) and (c) GDPR). Within the scope of the purposes mentioned here, personal data is forwarded to service providers who work for us and support us in particular in the provision of services. In addition to their legal obligation to comply with all data protection regulations, these service providers are bound by further contractual data protection requirements. As a rule, this includes an obligation as an data processor pursuant to Art. 28(3) GDPR.

Otherwise, we will only transfer personal data to third parties if you have given us legal permission to do so or have given your prior consent. You may revoke any consent you may have given at any time with effect for the future. We will only pass on your data to government agencies within the framework of legal obligations or on the basis of an official order or court decision and only to the extent that this is permissible under data protection law.

10. Transfer to Recipients of Personal Data in States outside the EU

If necessary, for our purposes, we may also transfer your data to recipients outside the EU, if it is ensured that the recipient of the data guarantees an adequate level of data protection within the meaning of Chapter V of the GDPR and that there are no other interests worthy of protection against the data transfer. To ensure an appropriate level of protection for the recipient of the data, we in particular use the standard contractual clauses of the EU Commission on the transfer of personal data to third countries.

11. Deletion

We delete your personal data as soon as it is no longer required for the purposes for which it was processed and insofar as there are no legal obligations to retain it.

12. Your Rights

You may at any time and free of charge request information from LOYS about the personal data stored about you and - as far as the legal requirements are met - about its correction, deletion and limitation of the processing of this data. If LOYS processes your data to pursue legitimate interests, you may exercise your right of objection. Whether and to what extent these rights exist in the individual case and which conditions apply to it, result from the law (until 25 May 2018 from the BDSG, from 25 May 2018 also from the GDPR). The GDPR also grants you a right to data transfer under certain circumstances. If you have given your consent under data protection law, you can revoke this at any time with effect for the future. You also have the right to contact the competent data protection supervisory authority. However, if you have any questions or complaints regarding data protection at LOYS, we recommend that you first contact our data protection officer.

For the exercise of these rights and for other questions regarding data protection, please contact our company data protection officer (see section 1). In order to process your request as quickly as possible, we recommend that you provide us with your name, first name, date of birth and, if available, your e-mail address and, in the event of an objection, send us a copy of the advertising material after receiving it.

13. No automated individual Decision-Making

We do not use your personal data for automated individual decisions in the meaning of Art. 22(1) GDPR.

14. Amendment of the Privacy Policy

New legal requirements, business decisions or technical developments may require changes to our privacy policy. The privacy policy will then be adapted accordingly. You can always find the latest version on our website.

Last Update: May 2018