Privacy Policy

for LEI Now (lei-now.in and app.lei-now.in).

1. General

Bundesanzeiger Verlag GmbH
Amsterdamer Str. 192
50735 Cologne

Tel.: +49 221 97668 8602
Fax: +49 221 97668 278
Email: service(at)lei-now.com

operates this website for purposes of offering information and services.

We will process your personal data exclusively in accordance with the provisions of the Data Privacy Law as amended. The individual data protection terms can be found in a brief glossary under "Definitions". The following provisions will inform you about the type, scope and reasons why personal data may be collected, processed and used. This Privacy Notice applies exclusively to our web pages. Should links on our web pages take you to other web pages, then please refer to those pages for information on how they will handle your data.

Technical and organisational measures will be implemented wherever possible to encrypt your personal data using digital security systems and to prevent manipulation, deletion or unauthorised access.

2. Collection and Use of Personal Data

We collect, store and process the personal data you provide (for example: your name, address and telephone number or email address, as well as the data required for billing purposes), to the extent necessary for the processing of enquiries or orders (e.g. LEI applications, challenge notifications or newsletter subscriptions) or for the technical administration of the websites, and for purposes to which we are legally obliged. The legal basis for the processing of this data is found in Art. 6(1)(a), (b), (c) and (f) of the EU GDPR. To facilitate these tasks, your data may in some cases be shared with service providers involved in order and billing processing. Beyond this, we will not pass on your personal data to third parties, unless we are required to do so by mandatory legal provisions, this is necessary for payment collection, or you yourself have so determined.

Your registered data and billing data (e.g. bank account details) are always transmitted to our systems in encrypted form. This protects communication between you and our web server and prevents data misuse. For encryption, we use SSL (Secure Socket Layer), a recognised and widely used internet system also used by banks and online shops for internet transactions, which in its current version is considered secure.

3. Use of Personal Data

Your personal data will be used exclusively for the purpose of and to the extent required for justification, structuring of content or amendments to the contractual relationship (master data). We explicitly reserve the right of recourse to legal issues pertaining to permissions and legality. If you contact us by email, fax or telephone, we may request certain personal information from you in that context. The data requested will be the data we need to meaningfully process your contact request – at a minimum your first and last name, email address and telephone number. The legal basis is the legitimate interest in processing pursuant to Art. 6(1)(c) and (f) of the GDPR. You may also in the course of your contact enquiry volunteer additional data. The data is stored by us and used for the purpose of responding to your contact request. Voluntary provisioning of such data will imply your consent to their use as defined above. Consent to the collection and use of data is recorded by us. The legal basis for data processing is also the data subject's consent pursuant to Art. 6(1)(a) of the EU GDPR.

Your name and address must, for instance, be disclosed to providers of chargeable billing services. Unless mandatory, your personal data will not without your explicit consent be disclosed to third parties that are not in a contractual relationship.

We are permitted in specific cases and on demand of an authorized body to disclose master data for purposes of law enforcement and hazard control by state police authorities, for fulfilment of the statutory responsibilities of the Federal and State authorities for the protection of the constitution and fulfilment of the statutory responsibilities of the Federal Information services and military counter-intelligence, or for the assertion of intellectual property rights.

We will use the means available to us to carefully examine any such requests and will not disclose your data unless our statutory obligation is absolutely evident. The legal basis for data processing in such cases is, pursuant to Art. 6(1)(c) and (e) of the GDPR, the fulfilment of legal obligations by the controller, as well as relevant special legislation.

4. Payment processing via Razorpay

We use the payment services provided by Razorpay to process payments. For this purpose, we may share personal data such as your name, email address, address and telephone number, as well as information about the relevant payment transaction, with Razorpay.

Razorpay processes this data for different purposes. On the one hand, Razorpay processes the data to provide its payment services and to support payment-related processes on our side. In particular, Razorpay may use the data to match the customer information we provide with the relevant payment transaction and to assign and reconcile payments with the respective customer account and invoice. This allows us to check whether an invoice has been paid and to correctly assign the payment to the relevant customer and invoice. Where applicable, Razorpay also processes the data in connection with recurring payments.

On the other hand, Razorpay processes certain data for its own purposes, in particular to create and manage a customer account with Razorpay. Razorpay determines the purposes and means of these processing activities independently and acts as an independent controller in this respect. This may also include processing for its own legal and regulatory obligations.

The transfer of personal data to Razorpay constitutes a transfer to a third country under the GDPR. To safeguard this transfer, we have entered into the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914), Module 1 (Controller-to-Controller) with Razorpay. The transfer is therefore based on Article 46(2)(c) GDPR.

Further information about how Razorpay processes personal data can be found in Razorpay's privacy policy.

5. Collection and Processing of Non-Personal Data

a. Browser Data

For technical reasons and to maintain and improve functionality, information transmitted to us by your internet browser is automatically collected and stored by us and, where necessary, passed on to third parties. As a further purpose, server log files are processed for the analysis of website usage and traffic, as well as for the assessment of the visibility and discoverability of content in automated systems, and, where required, passed on to third parties. The legal basis for processing is Art. 6(1)(1)(f) of the GDPR. Our legitimate interest in processing, pursuant to Art. 6(1) (1)(f) of the GDPR, is the operational security of the website as well as the interest in analysing website usage for technical and content-related optimisation.

These data are:

• Browser type and version
• Browser and operating system used
• Web page from which you visit us (referrer URL)
• Web page you visit
• Date and time of your access
• Your internet protocol data (IP address)
• Volume of data transferred
• Access status (files transferred, file not found, etc.)

These data are stored separately from any personal data you may have provided. Once evaluated, these data are deleted by us and our service providers.

To the extent data are collected in the manner described, this is necessary for the security and operation of the website.

b. Anonymised Usage Profiles

Unless otherwise stated here, you will not be required to furnish personal data when using our website. Information about when a user accesses the abovementioned web pages or retrieves a file will be stored in a log file. We will use such information to technically enable your visit to our website. We will also use such information for statistical purposes and towards the improvement of our website design and layout. The use of these data will not reference any persons. Our legitimate interest in processing, pursuant to Art. 6(1)(f) of the GDPR, is the operational security and functionality of the website.

The following dataset will be stored for each retrieval:

• Name of the file retrieved
• Date and time of the retrieval
• Volume of data transferred
• Notification of whether the retrieval was successful
• Description of the type of web browser used
• Requesting domain
• Country of origin of the domain

6. Use of Cookies

a. Cookies

Our website uses what are known as "cookies". Cookies are small text files which our web server will send to your computer to store certain information (e.g. attributes for identification).

If Javascript is disabled, only the technically necessary cookie JSESSIONID is set and used.

Cookies will be used for statistical analysis of usage, including recording of new and recurring visits when you use our website anonymously. We also use Cookies to determine the extent to which free content is used. Our website will send a Unit ID to your browser to determine this parameter. This will be an anonymous code used exclusively to establish the already used free content.

If you use our website whilst logged in to your user profile, cookies are used to identify your browser for the duration of the visit, including when navigating between different pages. Our website can also be used without allowing the storage of cookies. You can disable the storage of cookies in your browser settings or configure your browser to notify you when a website intends to store cookies. You may then decide to accept or reject the storage of cookies. For our website to remain fully functional it will, however, be necessary for technical reasons to allow the unrestricted storage of temporary cookies. Even when cookies are deactivated our website will send the above Unit ID to your browser to measure the usage of free content. The legal basis for this is a legitimate interest pursuant to Article 6(1)(f) GDPR.

For further information on blocking cookies, please refer to the help pages of your internet browser – for example, for Microsoft Edge at support.microsoft.com and for Firefox at support.mozilla.com.

Technically Necessary Cookies:

Edit cookie settings

7. Google Ads & Google Ads Conversion Tracking

We use Google Ads to advertise our products, offers and services online. In this way, we aim to draw the attention of more people on the internet to the high quality of our offerings. As part of our advertising activities through Google Ads, we use on our website the conversion tracking service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). With the help of conversion tracking, we can tailor our offering much more effectively to your interests and needs. Below, we wish to explain in more detail why we use conversion tracking, what data are stored in the process and how you can prevent this data storage. The legal basis for the use of Google Ads Conversion Tracking is Art. 6(1)(a) of the GDPR (consent).

Google's proprietary Google Ads platform can be used to create online advertisements to introduce our products and services to interested users.

A conversion occurs when website visitors become active visitors. This happens whenever you click on one of our adverts and subsequently carry out a further action, such as visiting our website. Using Google's conversion tracking tool, we record what happens after a user clicks on one of our Google Ads adverts. For example, we can see whether products are purchased, services are used or whether visitors have signed up for our newsletter.

We use Google Ads to draw attention to our offering on other websites as well. The aim is to ensure that our advertising campaigns reach only those people who are genuinely interested in our products and offerings. With the conversion tracking tool, we can see which keywords, adverts, advert groups and campaigns lead to the desired customer actions. We can see how many customers interact with our adverts on a device or in a browser and then carry out a conversion. This data enables us to calculate our cost-benefit ratio, measure the success of individual advertising activities and consequently optimise our online marketing activities and make our website more appealing.

We have integrated a conversion tracking tag on our website in order to better analyse certain visitor actions. When you click on one of our Google Ads adverts, the cookie "Conversion" from a Google domain is stored on your computer (usually in the browser) or mobile device. Cookies are small text files that store information on your computer.

Marketing Cookies:

As soon as you complete an action on our website, Google recognizes the cookie and saves your action as a so-called conversion. As long as you browse our website and the cookie has not yet expired, we and Google can recognize that you found us via our Google Ads ad. The cookie is read and sent back to Google Ads along with the conversion data.

For more information about how Google uses conversion data and Google's privacy policy, please visit: https://support.google.com/google-ads/answer/93148?ctx=tltp

https://policies.google.com/privacy

8. Google Analytics 4

Provided you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Nature and Purpose of Processing

Google Analytics uses cookies that enable analysis of your use of our website. The information generated by the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

In Google Analytics 4, anonymisation of IP addresses is enabled by default. Due to IP anonymisation, your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

During your visit to the website, your user behaviour is recorded in the form of "events". Events may include:

• Page views
• First visit to the website
• Start of the session
• Web pages visited
• Your "click path", interaction with the website
• Scrolls (each time a user scrolls to the bottom of the page (90%))
• Clicks on external links
• Internal search queries
• Interaction with videos
• File downloads
• Adverts viewed/clicked
• Language setting

Additionally, the following are recorded:

• Your approximate location (region)
• Date and time of the visit
• Your IP address (in truncated form)
• Technical information about your browser and the devices you use (e.g. language setting, screen resolution)
• Your internet service provider
• The referrer URL (the website or advertising medium via which you came to this website)

Purposes of Processing

On behalf of the operator of this website, Google will use this information to evaluate your use of the website and to compile reports on website activity. The reports provided by Google Analytics serve to analyse the performance of our website and the success of our marketing campaigns.

Recipients

Recipients of the data are/may be:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as data processor pursuant to Art. 28 GDPR)
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Third-Country Transfer

For the USA, the European Commission adopted its adequacy decision on 10 July 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (e.g. Singapore) cannot be entirely excluded, we have also concluded the EU standard contractual clauses with the provider.

Storage Period

The data sent by us and linked to cookies are automatically deleted after 14 months. The maximum lifespan of Google Analytics cookies is 2 years. The deletion of data whose retention period has been reached takes place automatically once a month.

Legal Basis

The legal basis for this data processing is your consent pursuant to Art. 6(1)(a) of the GDPR and § 25(1)(1) of the TDDDG.

Withdrawal

You may withdraw your consent at any time with effect for the future by accessing the cookie settings for our products at the bottom left of the screen and changing your selection there. The lawfulness of processing carried out on the basis of consent prior to withdrawal remains unaffected.

You can also prevent the storage of cookies from the outset by configuring your browser software accordingly. However, if you configure your browser to reject all cookies, this may result in restricted functionality on this and other websites. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) being sent to Google, and the processing of these data by Google, by:

1. not giving your consent to the placement of the cookie, or
2. downloading and installing the browser add-on to disable Google Analytics HERE.

Marketing Cookies:

For more information on the terms of use of Google Analytics and data protection at Google, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

9. Your rights / contact details / objection

Objection and revocation

You may at any time object to the use of your data without prior consent, with future effect.

We point out that you may also at any time and with future effect revoke (even partially) any consent you may have given. To do so, please contact us preferably by email:

Data Protection Officer, Bundesanzeiger Verlag GmbH, Amsterdamer Straße 192, 50735 Cologne, tel.: +49 (0) 221 97668-0, dsb(at)bundesanzeiger.de

You also have the following rights:

• Article 13, 14 EU GDPR – Right to information
• Article 15 EU GDPR – Right of access: We will on request gladly inform you about your stored personal data. The information will be provided in text form. Contact – see below.
• Article 16 EU GDPR – Right to rectification
• Article 17 EU GDPR – Right to erasure, subject to its restrictions, in particular Art. 17(3)(b)
• Article 18 EU GDPR – Right to restriction of processing
• Article 19 EU GDPR – Notification
• Article 20 EU-GDPR – Right to data portability
• Article 21 EU GDPR – Objection
• Article 22 EU GDPR – Automated individual decision-making, including profiling
• Article 23 EU GDPR – Restrictions
• Article 77 EU GDPR – Right to lodge a complaint

Bundesanzeiger Verlag processes personal data and other data on this website in order to fulfil legal obligations and to carry out tasks in the public interest. In addition, the legislature has enacted numerous retention obligations and periods, e.g. § 147 of the German Fiscal Code (AO). Data are deleted in accordance with these legal requirements.

Note:

We endeavour to take technical and organisational steps to ensure that your personal data will be stored in a way to prevent access by third parties. Since full data security cannot be guaranteed during communication by email, we recommend mailing confidential information by post.

10. Scope

This Privacy Notice applies to the domain www.lei-now.in and all subdomains.

11. Definition / Glossary

"Processing" means the storage, modification, transmission, blocking and erasure of personal data. The following definitions also apply, irrespective of the processes used:

1. "Storage" means the acquisition, recording or storing of personal data on data carriers for purposes of further processing or use;
2. "Changing" means editing of stored personal data;
3. "Transmission" means the disclosure of stored or data-processing-derived personal data to a third party in such a way that (a) the data are passed on to the third party, or (b) the third party views or retrieves data made available for inspection or retrieval;
4. "Blocking" means the marking of stored personal data in order to restrict their further processing or use;
5. "Erasure" means the rendering unidentifiable of stored personal data.