Thank you for visiting our website and for your interest in Lucom GmbH.
The protection of personal data is very important to us. All Internet activities of Lucom GmbH are carried out in accordance with the applicable legal provisions for the protection of personal data and data security.
This privacy policy informs you about how Lucom GmbH guarantees the protection of your data, which data is collected on our website and how such data is used.
Lucom GmbH has implemented numerous technical and organisational measures to ensure the protection of personal data processed via this website as complete as possible. Nevertheless, Internet-based data transmissions can have security gaps, so that absolute protection cannot be guaranteed.
Purpose of data processing
The purpose of data processing is to operate a website with information about our company, our services and solutions.
In addition, we collect and process personal data of job applicants for the purpose of processing applications.
When contacting us (e.g., via e-mail addresses, telephone numbers or social networks (social media) published on this website), the details of the enquiring persons are processed as far as necessary to respond to the contact enquiries and any actions requested. Your e-mails sent will be stored by Lucom GmbH. At the end of each year, it is checked whether further storage is necessary or if there are storage obligations for the e-mails. Depending on this, the e-mails will still be stored or deleted. Our e-mails are processed by an e-mail service provider in Germany with which a data processing agreement is in place.
By contacting us, however, you are more than a "simple" visitor to the website, namely a communication contact of Lucom GmbH. In this case, data processing takes place based on contract fulfilment and pre-contractual enquiries (Art. 6 para. 1 p. 1 lit. b. GDPR) and legitimate interests (Art. 6 para. 1 p. 1 lit. f. GDPR).
Scope of the processing of personal data
We only collect and use personal data of our users as far as this is necessary to provide a functional website. This is also where our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR lies.
Application Process
The collection and processing of personal data from applicants for the purpose of handling the application process is carried out in accordance with Art. 6 (1) (b) GDPR. According to this, the processing of those data that are required in connection with the decision on the establishing of an employment contract is permitted.
If you send us your application documents electronically, for example by e-mail, this processing is carried out electronically. The applicant data are viewed after the application has been received. In general, only those people in the company have access to the applicant data who need it for the proper handling of the application process.
Your details are required for the application. Without them, we cannot consider your application.
If we conclude an employment contract with an applicant, the transmitted data will be processed for the purpose of fulfilling the employment agreement in compliance with the legal regulations.
Should the data be required for legal action after the application process has been completed, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular to fulfil legitimate interests in accordance with Art. 6 Para. 1 lit. f) GDPR. Our interest then consists in asserting or defending claims or in the function of preserving evidence in accordance with the General Act on Equal Treatment (AGG).
In case of a rejection data of applicants will be deleted 6 months after receipt of the rejection at the latest.
General data and information
The use of our website is possible without providing personal data, but a number of general data and information is collected each time you visit our website. This general data and information is stored in the log files of the server. We record the types and versions of browsers used, the operating system used by the accessing system, the website from which an accessing system accesses our website (so-called referrer), the date and time of access to the website, the page or file requested, the type of request, the response status, the amount of data transferred and the IP address of the accessing device. If a request cannot be processed, an error message is also stored, which also contains the IP address.
This information is required to correctly deliver the contents of our website, to optimize the contents of our website, to ensure the long-term functionality of our systems and the technology of our website, and to detect and investigate attacks on our website.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is the security of our systems. The log files are not combined with other data. Our server is operated by a hosting provider in Germany with which a data processing agreement is in place. The log files are deleted automatically after 30 days. In the event of a specific security incident, we may retain the affected log files until the incident has been investigated, for a maximum of six months.
Access statistics with truncated IP addresses
We evaluate access to our website in aggregated form (number of visits, pages requested, response status, referring sites, browsers). The evaluation runs on our own server. Before the evaluation, each IP address is truncated so that the statistics no longer contain any personal reference. No cookies are set, no program code is executed in your browser and no data is transmitted to third parties.
Cookies
Our website does not set cookies and does not store any information on your device. It does not load any content from other providers, such as fonts, maps or videos. All content is delivered by our own server.
SSL encoding
Our website uses SSL encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
OpenStreetMap
Our contact page contains a link to OpenStreetMap (https://www.openstreetmap.org). No map is embedded on our website. Only when you click the link do you leave our website, and the privacy policy of the OpenStreetMap Foundation applies.
For more information about the privacy policy and terms of use for OpenStreetMap: https://www.openstreetmap.de/; Privacy policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy
Presence in social networks (social media)
We have integrated links to Xing, kununu and LinkedIn on our website in order to draw attention to our online presence there. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR.
We maintain online presences within social networks and process user data in this context in order to communicate with users who are active on these networks or to offer information about us.
We would like to point out that user data can be processed outside the European Union. User data is usually processed within social networks for market research and advertising purposes. For example, user profiles can be created based on user behaviour and the resulting interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the user behaviour and the interests of the users are stored.
For a detailed presentation of the respective processing forms and the opt-out options, please refer to the privacy policy and information provided by the operators of the respective networks.
In the case of information enquiries for access and the assertion of data subjects' rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate action and provide information directly.
For the statistics that LinkedIn provides to us on the use of our company page (“Page Insights”), we are joint controllers with LinkedIn (Art. 26 GDPR). LinkedIn provides the essence of the arrangement at https://www.linkedin.com/legal/l/page-joint-controller-addendum. You can also exercise your rights with us.
Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;
Website: https://www.linkedin.com;
Privacy Policy: https://www.linkedin.com/legal/privacy-policy;
Possibility of objection (Opt-Out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Service provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany;
Website: https://www.xing.com; https://www.kununu.com/
Privacy Policy: https://privacy.xing.com/en/privacy-policy
Video conferences, online meetings, webinars & trainings
We use platforms and applications of other providers (in the following referred to as "conference platforms") for the purpose of conducting video and audio conferences, webinars, trainings and other types of video and audio meetings (in the following collectively referred to as "conference"). When selecting the respective conference tools, we ensure that the processing of personal data complies with the GDPR. You will find information on the tool currently used in the respective conference information.
Downloads & Files
We offer a number of downloads on our website. The files for download are located on our server in a German data centre.
Recipients / passing on of data
We do not transfer any personal data to third parties other than as described in this privacy policy.
Data processing outside the European Union
We do not transfer personal data to countries outside the European Union or the European Economic Area other than those described in this privacy policy.
Your rights as a data subject
You have the right to obtain access to the personal data concerning you. You can contact us for information at any time.
In the case of a request for access that is not made in writing, we ask for your understanding that we may require evidence from you that proves that you are the person you claim to be.
Furthermore, you have a right to rectification or erasure or to restriction of processing or to data portability, insofar as you are entitled to this by law.
Right to object: Where we process your data on the basis of Art. 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).
You also have the right to complain about our processing of personal data to a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Postfach 20 04 44, 40102 Düsseldorf, Germany.
Data deletion
We generally delete personal data when there is no need for further storage. A requirement may exist in particular if the data is still needed in order to fulfil contractual services, to check and grant or ward off warranty and, if applicable, guarantee claims. In the case of legal retention obligations, deletion will only be considered after expiry of the respective retention obligation.
Responsible in the sense of the GDPR is
Lucom GmbH
Parkstraße 10
40699 Erkrath
Tel. +49 211 247006-0
Fax +49 211 247006-29
E-Mail: info@lucom.com
Data Protection Officer of Lucom GmbH
If you have any questions or suggestions regarding data protection, please contact our data protection officer directly.
Lucom GmbH
- Data Protection Officer -
Parkstraße 10
40699 Erkrath
Tel. +49 211 247006-0
E-Mail: datenschutz@lucom.com
Changes to this privacy policy
The privacy policy will be edited in the event of changes to this website or other occasions that make this necessary. You will always find the current version on this website.
As of: 06.11.2026