Data protection

The protection of your data and your trust are very important to us. Therefore, we have implemented technical and organizational measures to ensure the security of processing, which we are continuously developing, such as hosting our own servers in Germany! Lanes & Planes meets the requirements of the EU General Data Protection Regulation and is data protection compliant as an organization and as software in accordance with the EU GDPR.

Scope of application

Thank you for your interest in our website. Below we inform you about which data is collected and processed for which purposes when you use our website.

Person responsible

The controller within the meaning of data protection law is the:

Lanes & Planes GmbH
Friedenheimer Brücke 16
80639 Munich
[email protected]
Phone 089-21 54 07 10

We have appointed as data protection officer

PROLIANCE GmbH / www.datenschutzexperte.de
Leopoldstr. 21
80802 Munich
[email protected]

Further information can be found in the imprint.

Data protection & IT security at Lanes & Planes GmbH

Data protection and information security are a central component of Lanes & Planes' products and services. We only handle personal data to the extent that this is possible in accordance with data protection regulations. We also take all necessary technical and organizational security measures to adequately protect your personal data from unauthorized access and misuse at all times.

Insofar as we store or process personal data, this takes place within a high-security data center. To protect the security of your data during transmission, we use encryption methods (e.g. SSL) via HTTPS. Our servers are protected by a firewall and IDS (intrusion detection system). Back-up and recovery procedures as well as role and authorization concepts are a matter of course for us.

Our employees are obliged to comply with the provisions of the GDPR and the BDSG when handling data.

Handling of personal data

Personal data is information that can be used to identify a person, i.e. information that can be assigned to a person. This includes, for example, the name, e-mail address or telephone number. We collect personal data in the context of data avoidance and data economy only to the extent and for as long as is necessary for the use of our website or as required by law. We take the protection of your personal data seriously and strictly adhere to the relevant legal regulations and this privacy policy when collecting and processing personal data. If the purpose of data collection ceases to apply or the end of the statutory storage period is reached, the data collected will be blocked or deleted. As a rule, our website can be used without the disclosure of personal data. If we collect personal data - such as your name, address or e-mail address - this data is collected voluntarily. This data will not be disclosed to third parties without your express consent. Please note that data on the Internet is generally not always transmitted securely. Particularly in e-mail traffic, protection during data exchange cannot be guaranteed.

Cookies

Our website uses cookies, which are stored on your device by the browser and which contain certain settings for the use of the website (e.g. for the current session). Cookies are used to make our website more user-friendly, effective and secure. We also use cookies for remarketing purposes. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted when you close your browser. Other cookies remain stored on your end device until you delete them or the storage period expires. These cookies enable us to recognize your browser on your next visit.

In some cases, cookies are used to simplify website processes by storing settings (e.g. the provision of already selected options). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. The cookie settings can be managed for the respective browsers under the following links.

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies

Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac / https://support.apple.com/de-de/guide/mdm/mdmf7d5714d4/web

Opera: http://help.opera.com/Windows/10.20/de/cookies.html

You can also individually manage the cookies of many companies and functions that are used for advertising. To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices

Most browsers also offer a "do-not-track" feature that allows you to indicate that you do not want to be "tracked" by websites. If this function is activated, the respective browser informs advertising networks, websites and applications that you do not wish to be tracked for the purpose of behavior-based advertising and the like. For information and instructions on how to edit this function, please refer to the following links, depending on your browser provider:

Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de

Mozilla Firefox: https://www.mozilla.org/de/firefox/dnt/

Internet Explorer: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track

Opera: http://help.opera.com/Windows/12.10/de/notrack.html

You can also prevent scripts from loading by default. NoScript only allows the execution of JavaScripts, Java and other plug-ins on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).

Use of the service without registration

Our service can generally be accessed without you providing us with personal data. Your IP address is automatically shortened before it is stored in the log files so that it is no longer possible to establish a personal reference. Nevertheless, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your Internet browser and our web server:

We collect the listed data to ensure a smooth connection to the website and to enable users to use our website comfortably. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of the data or log files is Art. 6 para. 1 lit. f GDPR.

The server log files are anonymized data that are collected when you access our website. This information does not allow any conclusions to be drawn about you personally, but for technical reasons it is essential for the delivery and presentation of our content. It also serves our statistics and the continuous optimization of our content. Log files also enable a precise check to be carried out in the event of suspected illegal use of our website.

This data is collected exclusively for statistical purposes. This data is not merged with other data sources.

Use of the service with registration

When employees register, we collect the following data, among others: Name, address, e-mail address, password, gender, telephone number, IP address and, if necessary, ID data, rail card number and any other data relevant for booking travel.

We collect the following data when you register as a corporate customer: Name (and company, if applicable), address, e-mail address, password, VAT ID (if available), IP address and any other data required for processing the contract.

This data is used by us exclusively to fulfill our contractual obligations and in particular to process the contractual bookings of travel services. The legal basis for data processing is the consent of the data subject in accordance with Art. 6 para. 1 a) EU GDPR. The registration data will be deleted as soon as a registration on our website is canceled, modified or deleted by the user. You can change and/or delete your registration/user account, including the data you have provided, on our websites and/or online offers, which is available after logging in.

By using the service with registration, every user receives access to the Lanes & Planes app. When employees register, we collect the following data, among others: Name, address, email address, password, gender, telephone number, IP address and, if necessary, also ID data, rail card number and any other data relevant to the booking of trips.

We collect the following data when you register as a corporate customer: Name (and company, if applicable), address, e-mail address, password, VAT ID (if available), IP address and any other data required for processing the contract.

This data is used by us exclusively to fulfill our contractual obligations and in particular to process the contractual bookings of travel services. The legal basis for data processing is the consent of the data subject in accordance with Art. 6 para. 1 a) EU GDPR. The registration data will be deleted as soon as a registration on our website is canceled, modified or deleted by the user. You can change and/or delete your registration/user account, including the data you have provided, on our websites and/or online offers, which is available after logging in.

Crashes of the app are first recorded anonymously via iTunes Connect or Google Play Console. In addition, usage data and crashes are documented anonymously via Firebase and error reports are recorded via Sentry.

This site uses the map service Google Maps via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

For this purpose, corresponding program libraries or map contents are called up from Google servers. This calls up external Google servers in the USA. To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

In this regard, the Google privacy policy applies, which you can access at http://www.google.de/intl/de/policies/privacy/. You can opt out at https://www.google.com/settings/ads/.

We use Google Tag Manager on our websites, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Tag Manager enables Lanes & Planes to use so-called website tags via a web-based user interface provided to us by Google. Website tags are "measurement codes and associated code fragments" that communicate with Tag Manager servers and can be configured via a web-based user interface, Google Tag Manager. Google Tag Manager also allows us to resolve other website tags that may also collect data. In order to provide the service, we set a cookie if you have consented to the activation of the cookie (Art. 6 para. 1. p. 1 lit. a GDPR).
In the event that your personal data is transferred to Google LLC in the USA, Google LLC has taken appropriate measures to ensure compliance with the level of data protection applicable in the European Union or the European Economic Area (e.g. certification under the EU-U.S. Data Privacy Framework adopted by the EU Commission; conclusion of standard data protection clauses). Further information on Google Tag Manager can be found on the following Google websites: Google's use of personal data: https://business.safety.google/privacy/ Privacy Policy: https://policies.google.com/privacy Google Tag Manager FAQ: https://support.google.com/tagmanager/ Terms of Use Google Tag Manager: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/

We use Google Analytics 4 (GA4) on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Purpose of data processing

Google Analytics 4 enables us to analyze user behavior on our website in order to optimize our website, improve the user experience and measure the effectiveness of our marketing measures. GA4 collects data about your interactions with our website, such as page views, clicks, scrolls and other events.

Collection and processing of data

If you visit our website and have consented to the use of analysis cookies, GA4 collects information about your surfing behavior. This may include the following data:

GA4 uses cookies and similar technologies to collect this data. The data is transmitted to Google, where it is stored and processed.

Legal basis

The processing of your personal data by Google Analytics 4 is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time by adjusting your cookie settings.

Data transfer to the USA

Google may transfer data to the USA or other third countries. Google has taken measures to ensure an adequate level of data protection. Information on Google's data protection measures can be found in Google's privacy policy.

Recipients of the data / categories of recipients

The recipient of the data collected by Google Analytics 4 is Google Ireland Limited.

Storage duration

The data collected by Google Analytics 4 will be stored by Google for as long as is necessary for the above-mentioned purposes. The storage period may vary depending on the type of data and the applicable legal provisions.

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability of your personal data. You also have the right to lodge a complaint with a supervisory authority.

Further information

Further information on data protection at Google Analytics 4 can be found in Google's privacy policy:

If you do not give us your consent to analyze your data using Google Analytics, we will not track your personal data. In these cases, we use the Google Consent Mode of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Consent Mode allows us to carry out an analysis using so-called modeling, which takes place without the use of cookies and without processing your personal data. To carry out the so-called modeling, we process the following data without personal reference to your visit to our website: Function-related data (timestamp, user agent, referrer URL), aggregated data (Boolean information on the status of consent, random number when building each separate page, references to information on the ad click in the URL in the user's navigation history of the previous or current page and information on the consent platform used). Further information on Google Consent Mode can be found at: https://support.google.com/google-ads/answer/10000067?hl=de General information on data protection at Google can be found here: https://business.safety.google/privacy/ https://policies.google.com/privacy

We use the "Google Ads" service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to show you personalized advertisements for our services based on your interests and behavior on our website.

These advertisements are placed via "AdServer". We use "AdServer cookies" to measure the success of advertising measures (e.g. ad impressions, clicks, form submissions) and to provide you with personalized recommendations on our website based on your behavior (e.g. features viewed, content). This also helps us to optimize our advertising campaigns and measure the effectiveness of our ads. Lanes & Planes is a "Google Ads customer".

If you access our websites via a Google Ads ad, Google Ads stores a cookie in your browser/end device (if permitted). These cookies enable your web browser to be recognized, do not serve to identify you personally and are generally invalid after 30 days.

The Google Ads cookie stores/transmits to Google: unique cookie ID, number of ad impressions per placement (frequency analysis), opt-out information (if selected) and last impression for post-view conversions. Each Google Ads customer is assigned an individual cookie based on the cookie information. Cookies are not tracked across our websites.

In the event that your personal data is transferred to Google LLC (USA), Google LLC has taken measures to ensure the level of data protection in the EU/EEA (e.g. certification under the EU-U.S. Data Privacy Framework; standard data protection clauses).

If the Google Ads cookie is activated and you visit our website by clicking on an advertisement, Google and Lanes & Planes can determine that you have reached our website via this advertisement.

After transmission of the cookie data, we only receive statistically prepared evaluations of the advertising measures from Google. We do not receive any detailed user information and cannot identify you as a user. This data helps us to assess the effectiveness of our advertising. We have no influence on the further use/scope of the data that Google collects through Google Ads.

To the best of our knowledge, Google can assign your visit to our websites to your Google user account (if available) after clicking on an advertising measure.

Your personal data is processed on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR (by setting/saving cookies). You can revoke this consent at any time with effect for the future by deactivating the corresponding cookie in our cookie settings. This will activate a so-called opt-out cookie, which prevents the processing of your personal data during future website visits. If you deactivate cookies, the functions of our website may be restricted.

Further information on the processing of your personal data: https://policies.google.com/privacy

Information on the use of data by Google: https://business.safety.google/privacy/
https://services.google.com/sitestats/de.html

Objection to this data processing for the display of individual recommendations: https://adssettings.google.com

If you consent to the processing of your personal data for the evaluation of certain parameters to measure the success of our advertising measures through Google Ads and have consented to the use of Google Analytics, it is possible that we may also use the data generated by Google Analytics in connection with Google Ads. Further information and the purposes of data processing by Google Analytics can be found in the corresponding section on Google Analytics.

To optimize our marketing measures, we use the integration of HubSpot and Google Ads. In doing so, we can share information from HubSpot with Google Ads if you have given your consent to the use of marketing cookies. Further information and the purposes of data processing by HubSpot can be found in the corresponding section on HubSpot.

We use Microsoft Advertising, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"), to present you with personalized advertisements.

Purpose of data processing

Microsoft Advertising enables us to display advertisements on Bing search results pages and in the Microsoft advertising network. This enables us to present you with relevant offers and optimize our marketing measures.

Collection and processing of data

If you visit our website and have consented to the use of marketing cookies, Microsoft Advertising collects information about your surfing behavior. This includes, for example

Microsoft uses cookies and similar technologies to collect this data. The data is used to display personalized advertisements and to measure the effectiveness of our advertising campaigns.

Legal basis

The processing of your personal data is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time by adjusting your cookie settings.

Data transfer to the USA

Microsoft is a company based in the USA. Your data may therefore be transferred to the USA. Microsoft has taken appropriate measures to ensure an adequate level of data protection. These include, for example, standard data protection clauses.

Storage duration

The data collected by Microsoft Advertising will be stored for as long as necessary to fulfill the stated purposes. The storage period may vary depending on the type of data and the applicable legal provisions.

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability of your personal data. You also have the right to lodge a complaint with a supervisory authority.

Microsoft Advertising Consent Mode

We use Microsoft Advertising Consent Mode to control data collection by Microsoft Advertising (Bing Ads) in accordance with your consent decisions.

What is Microsoft Advertising Consent Mode?

Consent Mode allows us to inform Microsoft Advertising about your consent status in relation to marketing cookies. Depending on your consent, certain functions of Microsoft Advertising will be adjusted to comply with data protection regulations.

How does Consent Mode work?

Purpose of use

The use of Consent Mode enables us to do this:

Data processing in the event of denied consent

Even if consent is denied, Microsoft Advertising may process aggregated and anonymized data to analyze trends and general campaign performance. No personal data is used to create individual profiles.

Legal basis

The processing of your personal data is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. The use of Consent mode serves to adapt the data processing as precisely as possible to the consent^.

Further information

Further information on data protection at Microsoft Advertising can be found in Microsoft's privacy policy:

We use HubSpot, a service of HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141 USA ("HubSpot"), as our central system for managing customer relationships (CRM) and for carrying out marketing activities.

Purpose of data processing

HubSpot helps us to manage customer contacts, personalize communication with customers and interested parties, carry out marketing campaigns and analyse customer behaviour on our website.

Collection and processing of data in CRM

As part of CRM use, we collect and store the following data in HubSpot:

Collection and processing of data via the website

If you visit our website and have consented to the use of marketing cookies, HubSpot collects information about your surfing behavior. This includes, for example

HubSpot uses cookies and similar technologies to collect this data. The data is stored and processed in our HubSpot system.

Disclosure of hashed data to third parties

With your consent, we may share certain information from HubSpot in hashed form with other providers. This serves to show you personalized advertising on other platforms and to optimize our marketing campaigns.

Legal basis

Your personal data is processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR (for marketing cookies) or for the fulfillment of the contract or implementation of pre-contractual measures in accordance with Art. 6 para. 1 lit. b GDPR (for CRM use in the context of customer relationships). You can withdraw your consent at any time by adjusting your cookie settings.

Data transfer to the USA

HubSpot is a company based in the USA. Your data may therefore be transferred to the USA. HubSpot has taken appropriate measures to ensure an adequate level of data protection. These include, for example, standard data protection clauses.

Storage duration

The data collected by HubSpot is stored for as long as is necessary to fulfill the stated purposes. The storage period may vary depending on the type of data and the applicable legal provisions. Data from the CRM application can be stored for as long as a business relationship exists.

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability of your personal data. data. You also have the right, to complain to a supervisory authority.

Further information

Further information on data protection at HubSpot can be found in HubSpot's privacy policy: https://legal.hubspot.com/de/privacy-policy

On our website, we use pixels from LinkedIn Analytics and LinkedIn Ads, services provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn").

Purpose of data processing

Collection and processing of data

Legal basis

Data transfer to the USA

Recipients of the data / categories of recipients

Storage duration

Your rights

Further information

We use Meta Pixel on our website, a service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta").

Purpose of data processing

The meta pixel allows us to track the behavior of users after they have clicked on a Facebook or Instagram ad to visit our website. This helps us measure the effectiveness of our Facebook and Instagram advertising campaigns, optimize the audiences for our ads and show you more relevant ads.

In addition, we can use the meta pixel to create target groups for retargeting campaigns. This means that we can display advertisements again on Facebook and Instagram to users who have already visited our website.

Collection and processing of data

If you visit our website and have consented to the use of marketing cookies, the meta pixel will be activated on our website. The meta pixel then collects information about your surfing behavior on our website. This may include the following data, for example:

This information is transmitted to Meta, where it is stored and processed. Meta may link this data to your Facebook or Instagram account if you have such an account and are logged in to it.

Legal basis

The processing of your personal data by the Meta Pixel is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time by adjusting your cookie settings.

Data transfer to the USA

Meta Platforms Ireland Limited transmits data to Meta Platforms, Inc. in the USA. Meta has taken appropriate measures to ensure an adequate level of data protection.

Recipients of the data / categories of recipients

The recipient of the data collected via the Meta Pixel is Meta Platforms Ireland Limited.

Storage duration

The data collected by Meta via the Meta Pixel will be stored by Meta for as long as is necessary for the above-mentioned purposes. The storage period may vary depending on the type of data and the applicable legal provisions.

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability of your personal data. You also have the right to lodge a complaint with a supervisory authority.

Further information

Further information on data protection at Meta can be found in Meta's privacy policy:

We use Typeform, a service of TYPEFORM S.L., Carrer Bac de Roda, 163 (local), 08018 Barcelona, Spain ("Typeform"), to provide our savings calculator.

Purpose of data processing

The savings calculator allows you to calculate your potential savings when using our services. The data you enter in the savings calculator will be used to perform these calculations and display the results to you.

Collection and processing of data

If you use the savings calculator, the data you enter will be transmitted to Typeform. This may include the following data, for example:

Typeform processes this data to perform the calculations and display the results.

Integration of Datadog pixels

We have integrated Typeform into our website via an iFrame. Typeform loads pixels from Datadog when the iFrame is loaded, provided you have consented to this. Datadog is a service of Datadog, Inc. 620 8th Avenue, New York, NY 10018, USA ("Datadog"). Datadog's pixels collect and process data for performance and security purposes in order to ensure the stability and efficiency of the savings calculator. The data collected by Datadog may include information about your device, your browser, your IP address and your interactions with the savings calculator.

Forwarding of data

The data you enter in the savings calculator is transmitted to Typeform. The data collected by the Datadog Pixel is transmitted to Datadog. We receive the data you enter from Typeform via its services.

Legal basis

The processing of your personal data in the context of using the savings calculator and loading the Datadog Pixel is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time by no longer using the savings calculator or by adjusting your cookie settings.

Data transfer to third countries

Typeform stores data on servers in the European Union. However, it cannot be ruled out that data traffic may also be routed through third countries during maintenance work or due to technical developments. Typeform has taken appropriate measures to ensure an adequate level of data protection. Datadog is also a company based in the USA, which is why data is also transmitted to the USA. Datadog has taken appropriate measures to ensure an adequate level of data protection. For more information on this, please consult the privacy policies of Typeform and Datadog.

Storage duration

The data you enter in the savings calculator will be stored for as long as is necessary to carry out the calculations and display the results. The data collected by Datadog is stored for as long as is necessary for the relevant analysis purposes.

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability of your personal data. You also have the right to lodge a complaint with a supervisory authority.

Further information

Further information on data protection at Typeform can be found in Typeform's privacy policy:

Further information on data protection at Datadog can be found in Datadog's privacy policy:

We use the Dealfront service provided by Dealfront Group GmbH, Durlacher Allee 73, 76131 Karlsruhe, Germany ("Dealfront").

Purpose of data processing

Dealfront is a tool for identifying companies that visit our website. It helps us to gain insights into the interest of companies in our services. Dealfront analyzes website visits to provide information about companies that have visited our website. This enables us to optimize our sales and marketing activities and identify potential business customers.

Collection and processing of data

Dealfront works by analyzing information about website visitors. This information may include the following:

Dealfront combines this information with publicly available data to identify companies. Dealfront itself stores and processes this data.

Legal basis

The processing of data by Dealfront is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, our legitimate interest lies in the optimization of our sales and marketing activities.

Recipients of the data / categories of recipients

The recipient of the data processed by Dealfront is Dealfront Group GmbH.

Storage duration

The data processed by Dealfront will be stored for as long as necessary for the above-mentioned purposes. The storage period may vary depending on the type of data and the applicable legal provisions.

Right of objection

You can object to the processing of your data by Dealfront. Information on how you can exercise your right to object can be found in Dealfront's privacy policy.

Further information

Further information on data protection at Dealfront can be found in Dealfront's privacy policy:

We use Cloudflare, a service provided by Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare"), to improve the security and performance of our website.

Purpose of data processing

Cloudflare acts as a content delivery network (CDN) and offers various security features, such as protection against DDoS attacks and web application firewalls. By using Cloudflare, we can:

Collection and processing of data

When you visit our website, your data is routed via the Cloudflare network. Cloudflare processes the following data:

Cloudflare uses cookies and similar technologies to process this data. The data is used to ensure the security and performance of the website.

Legal basis

The use of Cloudflare is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR; our legitimate interest lies in ensuring the functions and security of our website.

Data transfer to the USA

Cloudflare is a company based in the USA. Your data may therefore be transferred to the USA. Cloudflare has taken appropriate measures to ensure an adequate level of data protection. For more detailed information, please consult Cloudflare's privacy policy.

Recipients of the data / categories of recipients

The recipient of the data processed by Cloudflare is Cloudflare, Inc.

Storage duration

The data processed by Cloudflare is stored for as long as is necessary for the above-mentioned purposes. The storage period may vary depending on the type of data and the applicable legal provisions.

Further information

Further information on data protection at Cloudflare can be found in Cloudflare's privacy policy:

We use the A/B testing tool VWO on our website, a service provided by Wingify Software Private Limited, 404, Pearl Precinct, Plot No. 49, Sector 48, Gurugram - 122018, Haryana, India ("VWO").

Purpose of data processing

VWO allows us to test different versions of our website elements (e.g. headlines, buttons, images) to find out which versions work better and optimize the user experience. A/B testing allows us to make data-driven decisions to improve the effectiveness of our website.

Collection and processing of data

If you visit our website and have consented to the use of analysis cookies, VWO collects information about your surfing behavior. This may include the following data:

VWO uses cookies and similar technologies to collect this data and analyze the test results. The data is transmitted to VWO, where it is stored and processed.

Legal basis

The processing of your personal data by VWO is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time by adjusting your cookie settings.

Data transfer to third countries

VWO is based in India. Therefore, your data may be transferred to third countries. VWO has taken appropriate measures to ensure an adequate level of data protection.

Recipients of the data / categories of recipients

The recipient of the data collected by VWO is Wingify Software Private Limited.

Storage duration

The data collected by VWO will be stored for as long as necessary to perform the A/B tests and analyze the results. The storage period may vary depending on the type of data and the applicable legal provisions.

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability of your personal data. You also have the right to lodge a complaint with a supervisory authority.

Further information

Further information on data protection at VWO can be found in VWO's privacy policy:

We use the OneTrust Consent Management Platform, provided by OneTrust Technology Limited, Dixon House, 1st Floor, Sir William Fry Place, Dublin 2, Ireland ("OneTrust"), to manage the consents of our website visitors in relation to cookies and other tracking technologies.

Purpose of data processing

OneTrust enables us to obtain, manage and document the required consents in accordance with the General Data Protection Regulation (GDPR) and other relevant data protection laws. By using OneTrust we can:

Collection and processing of data

When you visit our website, OneTrust collects information about your consent decisions and your interactions with the cookie banner. This may include the following data:

This information is processed by OneTrust to store and manage your consents.

Legal basis

The processing of your personal data by OneTrust is based on our legal obligation to comply with data protection regulations in accordance with Art. 6 para. 1 lit. c GDPR.

Recipients of the data / categories of recipients

The recipient of the data processed by OneTrust is OneTrust Technology Limited.

Storage duration

The consent data collected by OneTrust will be stored for as long as is necessary to comply with the statutory retention obligations.

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability of your personal data. You also have the right to lodge a complaint with a supervisory authority. To exercise your rights in relation to consent, use the settings options in the cookie banner.

Further information

Further information on data protection at OneTrust can be found in OneTrust's privacy policy:

Lanes & Planes GmbH uses the Zendesk ticket system, a customer service platform from Zendesk Inc, 1019 Market St, San Francisco, USA(www.zendesk.com), to process customer inquiries.

Pseudonymized data is collected and stored for the purpose of web analysis, to operate the live chat system for answering live support requests and the ticket system. This pseudonymized data can be used to create user profiles under a pseudonym. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor's Internet browser. Among other things, cookies make it possible to recognize the Internet browser. If the information collected in this way has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in effective customer service and the statistical analysis of user behavior for optimization purposes.

The data collected with the Zendesk technologies will not be used to personally identify the visitor to this website and will not be merged with personal data about the bearer of the pseudonym without the separately granted consent of the person concerned. In order to avoid the storage of Zendesk cookies, you can set your Internet browser so that no more cookies can be stored on your computer in the future or cookies that have already been stored are deleted. However, deactivating all cookies may mean that some functions on our website can no longer be executed. You can deactivate the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with effect for the future by sending us your objection informally by e-mail to the e-mail address given in the legal notice.

Zendesk Inc., based in the USA, guarantees a data protection-compliant transfer of personal data through the SCC complied with in the data protection declaration. You can find more information on data processing by Zendesk in Zendesk's data protection declaration at: https://www.zendesk.de/company/customers-partners/privacy-policy.

General note on the use of providers based in the USA

Processing also takes place outside the EU, namely in the USA. There are guarantees in the form of concluded standard contractual clauses. A level of data protection that is approximately the same as within the EU is guaranteed in the best possible way by technically restricting the transfer of data.

The standard contractual clauses can be viewed here:

https://commission.europa.eu/publications/publications-standard-contractual-clauses-sccs_de

Right to object to the creation of pseudonymized profiles in accordance with Section 15 (3) TMG

Our web analysis does not allow us to identify individuals. However, pseudonymized profiles within the meaning of Section 15 (3) TMG may be created. According to Section 15 (3) TMG, you can object to this processing of data. You can do this by blocking the setting of cookies in your browser settings, either altogether or through our domain.

Information, corrections, blocking and deletion

You have the following rights regarding your personal data free of charge:

Right to information pursuant to Art. 15 GDPR

Right to rectification pursuant to Art. 16 GDPR

Right to erasure pursuant to Art. 17 GDPR

Right to restriction of processing pursuant to Art. 18 GDPR

Right to information pursuant to Art. 19 GDPR

Right to data portability pursuant to Art. 20 GDPR

Right to lodge a complaint pursuant to Art. 77 GDPR

Right to withdraw consent granted pursuant to Art. 7 (3) GDPR

Duration of storage of personal data

The respective duration of the storage of personal data is based on the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for contract fulfillment or contract initiation or if we have a legitimate interest in further storage, the data will be deleted if it is no longer required for these purposes or if you have exercised your right of revocation or objection.

Application form

When you apply to us via our web form, we collect personal data. This includes in particular your contact details (such as first name, surname, name affixes, private address, (mobile) telephone number, e-mail address) as well as other data provided by you about your career (e.g. CV, qualifications and degrees, professional experience) and your person (e.g. cover letter, personal interests). This may also include special categories of personal data (e.g. details of a severe disability). Your personal data is generally collected directly from you as part of the application process and encrypted during electronic transmission. The data originates from the application form to be completed online and from the uploaded files.

The data processing serves to initiate an employment relationship. The primary legal basis for this is Art. 6 para. 1 b GDPR in conjunction with Section 26 para. 1 BDSG. In addition, consent in accordance with Art. 6 para. 1 lit. a, 7 GDPR in conjunction with Section 26 para. 2 BDSG can be used as a data protection authorization provision. If the processing of your data is based on consent, you have the right to withdraw your consent at any time with effect for the future.

Within our company, only those persons and departments (e.g. Human Resources) have access to your personal data that absolutely need it to carry out the application process or to fulfill our legal obligations. If necessary, your application will be forwarded to the responsible person for review. Under no circumstances will your personal data be passed on to third parties without authorization.

Your data relating to an application for a specific job advertisement will be stored and processed by us during the ongoing application process. After completion of the application process (e.g. in the form of an acceptance or rejection), the application process including all personal data will be deleted from the system six months after completion of the application process. In the event of an acceptance, we reserve the right to keep your application for longer if the start date is more than six months in the future.

Right to object pursuant to Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims. the objection can be made informally with the subject "Objection", stating your name, address or other identifying features, to: [email protected]

Status 24.03.2025