The protection of your personal data is of particular importance to us.
The purpose of this privacy policy is to inform you about how we process your personal data when you use partslink24 (www.partslink24.com) (hereinafter ‘partslink24’).
This Privacy Policy supplements the General Terms and Conditions applicable to the use of partslink24.
LexCom Informationssysteme GmbH
Rüdesheimer Str. 23
80686 Munich
You can contact our Data Protection Officer by emailing privacy@lex-com.net.
This privacy policy generally uses the official terms of the GDPR. The official definitions are set out in Article 4 of the GDPR.
LexCom adheres to the following principles when protecting your personal data in connection with the use of partslink24:
LexCom collects, processes and uses your personal data in accordance with the relevant data protection laws of the European Union (in particular the EU General Data Protection Regulation – GDPR) and the Federal Republic of Germany.
LexCom uses your personal data primarily to enable you to use partslink24. In such cases, the processing is carried out for the purpose of fulfilling the contract on the basis of Article 6(1)(b) of the GDPR. In addition, LexCom may process the data for other purposes where appropriate. Any further processing takes place exclusively on the basis of your consent under Article 6(1)(a) of the GDPR or a legitimate interest under Article 6(1)(f) of the GDPR. In such cases, your data will be processed in an anonymised or pseudonymised form wherever possible.
In cases where personal data is processed by a data processor or transferred to a third party, processing shall always take place solely on the basis of a data processing agreement in accordance with Article 28 of the GDPR, on the basis of standard contractual clauses in the event of a transfer to third countries in accordance with Article 46 of the GDPR, or on the basis of a legitimate interest in accordance with Article 6 (1)(f) of the GDPR.
LexCom will erase the following data as soon as a) there is no longer any legitimate interest in its processing, b) there is no lawful basis for processing this data, or c) provided there are no statutory retention obligations.
To use partslink24, you must first register. As part of the registration process, LexCom must process certain personal data provided by you as your registration details (hereinafter referred to as ‘registration details’).
These initially include the following data:
Name / Company name
Address
Contact details (email address)
Password
Depending on the country, additional mandatory fields may be required, which means that further personal data, such as the VAT registration number, may be requested during registration.
LexCom processes the registration details, in particular in the following cases, to fulfil your contract and to provide partslink24 in accordance with Article 6(1)(b) of the GDPR:
To register you as a user on partslink24, set up an account and grant you the relevant access to user management/account management. This is necessary to enable you to make full use of partslink24.
To send you, as the customer, your login details by email.
To send you important information regarding the existing contractual relationship (such as announcements of new programme versions and key features) and to assist you with any queries regarding payment and contract processing.
To be able to identify and contact you for the purposes of providing customer service.
Furthermore, LexCom may use this personal data for the following additional purposes on the basis of a legitimate interest pursuant to Article 6(1)(f) of the GDPR:
To send you news and help topics regarding the use of partslink24.
To send you offers and promotions relating exclusively to our own or similar goods and/or services.
To survey you regarding your use of and satisfaction with partslink24.
For internal analysis by LexCom for the purpose of product development in the customer’s interest and/or for forwarding to dealers/order recipients, manufacturers and/or importers for the purpose of sales optimisation and performance measurement. In these cases, personal data is processed only on the basis of your consent and is otherwise pseudonymised or anonymised.
Interested users are also free to register for a free trial subscription via the website https://selfattend.amigosdopartslink.com/. To do so, they must enter their name, email address and a telephone number. Clicking the ‘Send’ button transmits the entered data to LexCom. LexCom will then use this data to pre-configure a free trial subscription in the system. The temporary login details will subsequently be sent to the email address provided. The details can then be used to log in to www.partslink24.com. There, the registration must then be completed, if necessary, by providing further details.
The data you enter in Amigos do partslink24 will be used exclusively to create a free trial account in accordance with Article 6(1)(b) of the GDPR for the purpose of entering into a contractual relationship and – unless required for further use in partslink24 – will subsequently be automatically deleted. Any further processing of your data following completion of registration will be carried out in accordance with the principles set out in this privacy policy.
Users who are registered in the system as account administrators (“admins”) can log in to www.partslink24.com using their login details and, via the partslink24 administration panel, gain access to various functions and settings, as well as the ability to manage their registration details and subscriptions. In particular, in conjunction with taking out relevant additional subscriptions, they can create new/additional users from their own organisation within the system, granting them the appropriate authorisations. These users will then receive their individual login details at the email address provided by the admin. We process the personal data stored by the admin in partslink24, for which the admin is solely responsible, for the purpose of providing the service in accordance with Article 6(1)(b) of the GDPR.
Where necessary, LexCom processes your payment details, such as bank and credit card details, for the purposes of payment processing and billing in accordance with your chosen payment method. Depending on your country, various payment options are available to you for purchasing subscriptions to use partslink24:
Invoice by bank transfer
Direct debit
Payment by credit card: To process credit card payments, LexCom
transfers your payment data to the extent necessary to the service
providers Adyen (Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ
Amsterdam, Netherlands) or Stripe (Stripe, Inc., 3180 18th
Street, Suite 100, San Francisco CA 94110 / Stripe Payments Europe,
Limited, One Wilton Park,
Wilton Place, Dublin 2, D02 FX04, Ireland), who will process this
data accordingly. LexCom ensures that your credit card details are
processed in accordance with the PCI-DSS security standard. This means,
amongst other things, that your credit card details are never stored in
plain text by LexCom.
In other countries, additional payment methods such as ‘Boleto’ may be available.
The processing of your payment data by LexCom is necessary for the performance of your contract with LexCom; see Article 6(1)(b) of the GDPR. LexCom requires this information to bill you for LexCom services and to be able to contact you regarding payment and contract fulfilment.
On partslink24, you can enter vehicle identification numbers (VINs) and search for matching spare parts. The VIN is considered personal data within the meaning of the GDPR. You have two options here: you can either search for a VIN before selecting a manufacturer’s brand, or carry out the search after selecting the brand.
In order for us to provide you with the correct vehicle information for the VIN you are searching for in partslink24, your query must be processed by us and, where necessary, forwarded to the relevant manufacturer’s web service, from which the relevant data is then returned to partslink24. This transfer takes place for the purpose of fulfilling the contract in accordance with Article 6(1)(b) of the GDPR or – in the case of a third party’s VIN – on the basis of the data processing agreement concluded with you via partslink24 in accordance with Article 28 of the GDPR.
This function enables listed dealers with a subscription to select an image-text page from the partslink24 catalogue and send it directly to third parties by email. At the same time, a check is carried out to determine whether the recipient is listed as a registered or unregistered customer with partslink24, to ensure that the correct email content can be determined.
The email sent contains a link to the selected image-text page as well as a further link. New customers can use this link to register for a free trial subscription with partslink24, whilst recipients/customers who are already registered receive a paid link to register. In this context, the email address is processed as personal data. The legal basis is Article 6(1)(b) of the GDPR.
Furthermore, LexCom may analyse this service specifically for the purpose of measuring its effectiveness, e.g. to determine the number of new customers following the dispatch of image-text pages. Personal data is only processed to the extent necessary to make this assessment. Otherwise, no profiling of specific recipients or user accounts takes place. This processing is carried out on the basis of a legitimate interest in accordance with Article 6(1)(f) of the GDPR.
As a partslink24 user, you have the option to create shopping baskets in partslink24 for the processing of orders and to forward these to selected dealers. This involves, at a minimum, the processing of the VIN and, as a rule, other personal data (such as your name, your billing address or (alternative) delivery address). This depends on the details you provide when creating the orders.
Even when you select a dealer via the dealer search – even without placing an order – your contact details may be sent to that dealer by email in accordance with data protection regulations, to facilitate potential communication.
The seller can view and process orders via partslink24’s central order management system, which is referred to in the user interface as ‘Received Orders/Enquiries’.
Here you can process incoming and outgoing orders. This includes adjusting prices and quantities, adding comments for the independent garage, and changing the order status.
Further processing of your order, in particular delivery and payment, takes place between you and the selected dealer outside of partslink24.
The legal basis for the processing of personal data in this context is the provision of the order transmission service in accordance with Article 6(1)(b) of the GDPR.
In addition, every shopping basket created, including the VIN, is automatically transmitted to LexCom and further processed for its own purposes of product development. The VIN and other personal data are removed or anonymised for further processing. Processing in this context is carried out in accordance with Article 6(4)(e) of the GDPR.
OrderBridge is a tool which partslink24 users can utilise as an interface to external systems they use, such as shop management or damage calculation systems, in order to transfer parts lists to vehicle identification numbers in partslink24, where they can be checked for accuracy, supplemented if necessary, and returned to the external system.
When data is transferred to partslink24, the VIN and the technical user ID provided by LexCom for the use of OrderBridge are transferred in particular.
The processing of the VIN imported into partslink24 is carried out in accordance with the data processing agreement in place with the partslink24 user. The processing of other personal data via OrderBridge is carried out in accordance with Article 6(1)(b) of the GDPR.
LexCom also reserves the right to store and analyse the orders transmitted via OrderBridge and to report them as transaction volumes to the recipients. Personal data is not subject to this analysis and is removed or anonymised wherever possible. This processing is carried out in accordance with Article 6(4)(e) of the GDPR.
As a partslink24 user, you have the option to upload your own photos of vehicles or parts to partslink24 and share them with other users. You also have the option to upload a previously created parts list to make it easier to add the spare parts it contains to your shopping basket (Partslist Scan). In the course of the aforementioned processing activities, the following personal data may be stored and/or – where AI-supported processes are used – transferred to external AI service providers:
IP address
User ID/company ID
Username
Session-ID
VIN
Number plate
Date, time and location of the uploaded photos
PC/device name
Image metadata
LexCom requires the image metadata to detect any unlawful and/or abusive use of partslink24. Personal data is only analysed if there is reasonable suspicion of misuse of partslink24 by a specific user account. This analysis serves to protect partslink24 and the data it contains, as well as to protect partslink24 users and their data from misuse and attacks.
The processing of data for the above-mentioned purposes is carried out to provide the service in accordance with Article 6(1)(b) of the GDPR, as well as on the basis of LexCom’s legitimate interests in accordance with Article 6(1)(f) of the GDPR.
Unless a longer retention period is permitted – for example, to enforce legal claims – the log files are stored in our data centre for 6 months and then automatically deleted.
As described below, LexCom processes data relating to the extent and manner of your use of partslink24 (hereinafter referred to as ‘usage data’). This includes, for example, the following data:
The nature and extent of your use of the manufacturers’ catalogues
Use of functions, buttons, tabs, etc.
Shopping basket analysis
The nature and extent of vehicle searches based on entered VINs
This usage data may be analysed for specific purposes, for example to measure the relevance or success of a feature or – in the event of a lack of usage – to identify potential problems and then contact users specifically in this regard. These analyses are always used exclusively for the purposes of measuring success and usage, as well as for product and sales optimisation in the customer’s best interests, and constitute a legitimate interest of LexCom pursuant to Article 6(1)(f) of the GDPR. Personal data is pseudonymised or anonymised wherever possible and, where this is not possible, is only processed if it is strictly necessary to achieve the purpose, or if you have given us your consent in accordance with Article 6(1)(a) of the GDPR.
Furthermore, LexCom may also analyse usage data on an ongoing basis to detect any unlawful and/or abusive use of the LexCom services. Personal data is only subject to such analysis if there is reasonable suspicion of misuse of the LexCom services by a specific user account. This analysis serves to protect the LexCom services and the data they contain, as well as to protect LexCom users and their data from misuse and attacks, and thus constitutes a legitimate interest of LexCom in accordance with Article 6(1)(f) of the GDPR.
LexCom may analyse usage data in anonymised or pseudonymised form and use it for training purposes to further develop and optimise its own support and AI systems. Individual users are not identified in this process. The processing is carried out on the basis of Article 6(1)(f) of the GDPR.
If you send us enquiries via the contact form or by email, we will store your details and the personal data you provide there, including any files you may have sent. If you leave us a voice message, this may be transcribed into text using AI, summarised and subsequently stored together with your voice message. All the processing activities mentioned above are carried out for the purpose of handling your enquiry and in the event of any follow-up questions.
Under no circumstances will we pass on this data without your consent, nor will we use it to train AI models. The legal basis for processing the data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) of the GDPR and, where applicable, Article 6(1)(b) of the GDPR, provided that your enquiry is aimed at concluding a contract.
Your data will be deleted once your enquiry has been fully processed, provided there are no statutory retention obligations or a legitimate interest pursuant to Article 6(1)(f) of the GDPR, in particular for the purpose of assessing post-contractual claims. In the case of Article 6(1)(f) of the GDPR, you may object to the processing of your personal data at any time.
“Cookies” are small files that enable us to store specific information relating to you, the user, on your PC or other device whilst you are using partslink24. Cookies help, for example, to determine the frequency of use and the number of users of web services, to analyse usage behaviour on websites, to enhance security, and to make web services as convenient, efficient and engaging as possible.
Once you have logged in (using your partslink24 ID/company ID, username and password), partslink24 uses so-called “session cookies”, which allow you to be identified for the duration of your visit. Session cookies expire automatically at the end of the session, i.e. they are deleted.
In addition, partslink24 uses “persistent cookies”. These cookies store information about visitors who access partslink24 repeatedly (e.g. company ID, username, language, timestamp of last use).
The purpose of using these permanent cookies is, on the one hand, to display partslink24 in the correct language before you have logged in. On the other hand, this allows you to return directly to your last session if you did not log out at the end of your last use of partslink24. The cookies we set do not create individual profiles based on your usage behaviour. The cookies are automatically deleted no later than 4 weeks after your last visit.
You may be able to disable the storage of cookies in your browser, restrict it to certain websites, or set your browser to notify you as soon as a cookie is sent. You can also delete cookies from your device at any time. Please note, however, that it is not possible to use partslink24 if user cookies are rejected.
We use so-called pixels, web beacons, clear GIFs or similar mechanisms (“pixels”). A pixel is an image file or a link to an image file that is embedded in the website code but is not stored on your device (e.g. computer, smartphone, etc.). Pixels enable us, for example, to determine the browser used or the screen resolution. We do not establish any personal links when using pixels. Nor does any personal tracking take place. Pixels usually work in conjunction with cookies. If you have disabled cookies, the pixel will merely record an anonymous visit to the website.
Every time partslink24 is accessed, access data is stored in log files.
The data records stored in this way contain, in particular, the following information (hereinafter collectively referred to as ‘log files’):
the IP address
the partslink24 ID
the username
the Session-ID
the time of Login
LexCom requires the log files, on the one hand, to identify and rectify technical errors, such as broken links or programme errors, and thus to further develop partslink24.
Furthermore, LexCom may analyse the log files on an ongoing basis to detect any unlawful and/or abusive use of partslink24. Personal data is only subject to analysis if there is reasonable suspicion of misuse of partslink24 by a specific user account. This analysis serves to protect partslink24 and the data it contains, as well as to protect partslink24 users and their data from misuse and attacks.
Furthermore, LexCom may use the log files to analyse the use of partsslink24 (e.g. specific functions) in greater detail. This processing also serves exclusively to further develop partsslink24 in the customer’s best interests. At no point is the usage behaviour of specific accounts or users analysed. In such cases, personal data is pseudonymised and/or anonymised wherever possible.
The processing of data for the purposes mentioned above is carried out on the basis of LexCom’s legitimate interests in accordance with Article 6(1)(f) of the GDPR.
Unless a longer retention period is permitted – e.g. for the enforcement of legal claims – the log files are stored in our data centre for 6 months and then automatically deleted.
partslink24 is primarily hosted on the controller’s own internal servers.
In some cases, partslink24 is also operated in the Amazon Web Services (AWS) cloud on servers within the European Union (Frankfurt am Main region). Your personal data is generally processed on servers within the EU.
In addition, partslink24 may in some cases be hosted in the ‘Oracle Cloud Infrastructure’ (OCI) on servers belonging to Oracle America Inc. (‘Oracle’). Your personal data is processed on servers within the EU.
However, the transfer of personal data to the USA cannot be ruled out. In this case, the transfer takes place on the basis of the EU-US Data Privacy Framework. Oracle holds a valid certification and thus demonstrates an adequate level of protection. Details of the certification can be found here: https://www.dataprivacyframework.gov/list
Further information on the processing of personal data by Oracle can be found at:
AWS: https://aws.amazon.com/privacy/HTTPS
Oracle: https://www.oracle.com/legal/privacy/services-privacy-policy.html#legal
The legal basis for the processing is Article 6(1)(f) of the GDPR. We have a legitimate interest in ensuring that our services operate as efficiently and reliably as possible.
Support provided by LexCom’s overseas subsidiaries
We process your personal data listed in the preceding sections within the European Union and, where applicable, on our behalf (in particular to provide support) in Brazil, China, Japan, the USA, Mexico and the United Kingdom. Processing in these third countries takes place exclusively on the basis of an EU adequacy decision or EU Standard Data Protection Clauses in accordance with Article 46 of the GDPR.
You can view these at the following link: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de
Analysis of web traffic by Akamai
In addition, your personal data listed in the previous sections is processed by Akamai Technologies Inc. (‘Akamai’) through the integration of Akamai’s delivery, security and analytics services.
On the one hand, traffic from partslink24 is routed via Akamai’s servers in order to deliver partslink24 quickly, reliably and securely, to analyse it for malware and to prevent unauthorised access to it. This processing is carried out on behalf of LexCom on the basis of its legitimate interest pursuant to Article 6(1)(f) of the GDPR.
Secondly, Akamai also processes your data on its own behalf in the form of generated log files. These may contain personal data in the form of IP addresses and analyses of your usage behaviour of LexCom’s web services, and are used in particular for security analyses and to detect malicious patterns for the further development of Akamai’s services. Akamai does not use this data to identify natural persons or for profiling natural persons.
The transfer of your personal data to Akamai is based on the EU-US Data Privacy Framework. Akamai holds a valid certification and thus demonstrates an adequate level of protection.
Details of the certification can be found here: https://www.dataprivacyframework.gov/list
Further information on the terms of use regarding the processing of personal data by Akamai and on the Akamai Privacy Policy can be found at https://www.akamai.com/de/de/privacy-policies/
Usercentrics Consent Management Platform
In order to obtain and document the data protection consent of partslink24 users regarding the cookies and services we use, we utilise the Cookie Consent Tool provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.
Your consent data (date and time of consent/refusal and IP address) is stored for the purpose of complying with legal obligations under Section 25(2)(2) of the TDDDG and Article 6(1)(c) of the GDPR.
We have entered into a data processing agreement with Usercentrics, in which we oblige them to protect our customers’ data and not to disclose it to third parties.
Further information on Usercentrics can be found at: https://usercentrics.com/privacy-policy/
Address validation
To ensure that no incorrect address data is stored in our system, we use the “Global Address” service provided by GB Group PLC, The Foundation, Herons Way, Chester Business Park, Chester, CH4 9GB, United Kingdom (“Loqate”) for the relevant data validation. We have entered into a data processing agreement with Loqate.
When you enter your address via the online interface, Loqate simply checks it for validity and does not store it beyond that. If an error is detected when you enter your address, Loqate suggests an alternative address or the correct spelling of the address. For these purposes, Loqate must also process your IP address. However, this is transmitted in a truncated form, meaning it can no longer be linked to an individual.
The Loqate database used to validate the data is located in the United Kingdom. The European Commission has adopted an adequacy decision pursuant to Article 45(1) of the GDPR, which legitimises the transfer of personal data to the United Kingdom.
Your data is processed in accordance with Article 6(1)(f) of the GDPR. We have a legitimate interest in processing valid data in partslink24 to ensure the smooth provision of our services.
Further information on privacy at Loqate can be found at: https://www.loqate.com/de/products-services-privacy-notice/
Google Ads Conversion Tracking
We use the ‘Google Ads Conversion Tracking’ service (Google Ads) provided by Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us, for example by setting a cookie, to track whether a user has accessed the LexCom web service after clicking on an advert displayed via Google Ads and has used certain services there. This allows us to measure the quality and success of our advertising campaigns. We cannot draw any conclusions regarding the identity of individual users.
Use of this service is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may withdraw your consent at any time by accessing the Consent Management Tool again.
The transfer of your personal data to Google takes place on the basis of the EU-US Data Privacy Framework. Google holds a valid certification and thus demonstrates an adequate level of protection. Details of the certification can be found here: https://www.dataprivacyframework.gov/list
Further information and the data protection provisions can be found in Google’s privacy policy at: https://www.google.com/policies/technologies/ads/
Furthermore, data collected is processed by Google and may be transferred to countries outside the EU, in particular the USA. Further information on Privacy at Google and on data transfers to the USA can be found here:
http://www.google.com/intl/de/policies/privacy/
https://support.google.com/adwords/answer/1722022?hl=de
https://policies.google.com/privacy/frameworks
Google Maps
We use the ‘Google Maps’ service (Google Maps) provided by Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.
Through Google Maps, we enable you, for example, to search for available retailers/delivery recipients in your vicinity.
In doing so, Google may process your search terms, IP address and location data – provided you have consented to this – for its own purposes beyond our control. Your data may also be transferred to countries outside the EU, in particular the USA.
Use of this service is based on your consent in accordance with Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may withdraw your consent at any time by accessing the Consent Management Tool again.
The transfer of your personal data to Google takes place on the basis of the EU-US Data Privacy Framework. Google holds a valid certification and thus demonstrates an adequate level of protection. Details of the certification can be found here: https://www.dataprivacyframework.gov/list
Further information on the handling of user data can be found in Google’s Privacy Policy: https://www.google.de/intl/de/policies/privacy/
Google Document AI
To provide the “Partslist Scan” function, we use the “Google Document AI” service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. The AI service is configured to search the uploaded document exclusively for spare parts information and/or chassis numbers. Any other information contained therein is ignored.
We have entered into a data processing agreement with Google, which obliges Google to process the transferred data solely for the purpose of providing the feature and not to store it for any other purpose.
The transfer of your personal data to Google takes place on the basis of the EU-US Data Privacy Framework. Google holds a valid certification and thus demonstrates an adequate level of protection. Details of the certification can be found here: https://www.dataprivacyframework.gov/list.
Further information on the handling of user data can be found in Google’s Privacy Policy: https://www.google.de/intl/de/policies/privacy/
Meta Pixel (formerly Facebook Pixel)
We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “Meta”) on our website. Via , this tracking pixel establishes a direct connection between your browser and the Meta server. The so-called tracking is carried out using a cookie, which is stored on your computer and collects the following information, such as HTTP header information (including IP address, web browser details, page location, document, website URL and web browser user agent, as well as the date and time of use), and pixel-specific data (this includes the pixel ID and Facebook advertising account, and linking them to a Facebook user).
The Meta Pixel enables us, on the one hand, to analyse the use of our web services and track the effectiveness of Facebook advertising (‘conversion tracking’), and to check whether users were redirected to our web services after clicking on a Facebook advert. We cannot draw any conclusions about the identity of users in this process. However, the data may be stored by Meta outside our control and used for its own purposes in accordance with Meta’s privacy policy.
We also use the Meta Pixel to display personalised advertising messages to you based on your interest in our products. Firstly, we can identify users of our web services as target groups for the display of adverts by Meta (so-called Meta Ads). Accordingly, we use the Meta Pixel to ensure that the Meta Ads we place are shown only to those Facebook users who have demonstrated an interest in our web services or who exhibit certain characteristics (e.g. interests in specific topics or products, determined on the basis of the websites they have visited), which we transmit to Meta (so-called ‘Custom Audiences’). In this way, we aim to ensure that our Meta Ads match users’ potential interests.
If you are a Facebook member and have permitted this via your account’s privacy settings, Meta may also link the information collected during your visit to our site to your member account and use it for the targeted display of Meta ads. You can view and change the privacy settings of your Facebook profile at any time.
The use of the Meta Pixel is based solely on your consent in accordance with Article 6(1)(a) of the GDPR, which you provide to us via the cookie consent tool on our website. You may withdraw this consent at any time by accessing the cookie consent tool again.
If you have not consented to the use of the Meta Pixel, Facebook will only display general Meta Ads that are not selected on the basis of information collected about you on this website.
The transfer of your personal data to Meta takes place on the basis of the EU-US Data Privacy Framework. Meta holds a valid certification, and thus demonstrates an adequate level of protection. Details of the certification can be found here: https://www.dataprivacyframework.gov/list
Further information on the handling of user data can be found in the privacy policy: https://de-de.facebook.com/about/privacy/
Vimeo
LexCom may use the external service Vimeo on the partslink24 websites to upload videos and make them available to you. The provider of the video portal is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit a page with an integrated Vimeo plugin, a connection to Vimeo’s servers in the USA is not established immediately. Instead, a local image (‘thumbnail’) is loaded to preview the video, and Vimeo is identified as a third-party provider. As a user, you must actively play the Vimeo video. Only then is personal data (e.g. the IP address of your device) transferred to Vimeo. The use of Vimeo only takes place with your consent, which is given by your active playback of the video, in accordance with Article 6(1)(a) of the GDPR. You can manage your consent at any time via the Usercentrics Consent Management system integrated into our website.
As personal data may be transferred to the USA, additional safeguards are required to ensure the level of data protection provided by the GDPR. To ensure this, Vimeo is certified under the EU-US Data Privacy Framework. Vimeo therefore demonstrates an adequate level of protection.
Further details on the certification can be found at: https://www.dataprivacyframework.gov/list
Further details on the handling of user data can be found in Vimeo’s privacy policy at: https://vimeo.com/privacy
In addition, LexCom has added the parameter dnt=1 to the Vimeo embed code to prevent cookies from being set. See https://vimeo.zendesk.com/hc/en-us/articles/360001494447-Using-Player-Parameters for further details.
Google Cloud Platform / Gemini
We use proprietary speech and image processing models to process data via AI services. We currently use Gemini version 3 Flash. We reserve the right to update the models used to newer versions or successor models from the same provider (Google) in future for security and performance reasons. Processing takes place within the Google Cloud Platform (GCP) with data residency in the European Union (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Data is processed exclusively in accordance with the applicable data protection regulations; no personal data is transferred to third countries, nor are external AI models trained using this data.
Further information on the terms of use relating to the processing of personal data by Google and on Google’s Privacy Policy & Terms of Service can be found at:
https://policies.google.com/privacy
Microsoft Azure OpenAI
For the processing of data via AI services, we use proprietary language models via the Azure OpenAI Service. Depending on the use case, various GPT models may be employed. We reserve the right to update these models in future to newer versions or successor models from the same provider (Microsoft/OpenAI) for security, quality and performance reasons.
Data processing takes place via the Azure OpenAI Service within the European Union. The contractual partner is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.
Data processing is carried out exclusively in accordance with the applicable data protection regulations. The data transmitted is not used to train the AI models in use.
Further information on the processing of personal data by Microsoft
can be found at:
https://privacy.microsoft.com/de-de/privacystatement
The retention period for the personal data described in the preceding sections is determined – unless otherwise specified in this privacy policy – by the relevant statutory retention periods (e.g. under commercial and tax law). Once the respective period has expired, the relevant data is routinely deleted. Please note that a partslink24 account remains active for a fixed period of 12 months. During this period, the user has the option to re-register for a subscription. Where data is required for the performance of a contract or for entering into a contract, or where we have a legitimate interest in continuing to store the data, the data will be deleted once it is no longer required for these purposes or once you have exercised your right of withdrawal or right to object.
Under the applicable data protection laws, you have the right to access your data (Art. 15 GDPR), to have it rectified (Art. 16 GDPR) or erased (Art. 17 GDPR), or to restrict its processing (Art. 18 GDPR), as well as the right to data portability (Art. 20 GDPR).
If you have any further questions regarding Privacy when using the LexCom website and/or LexCom services, or if you wish to exercise the rights mentioned above, please contact our Data Protection Officer directly:
LexCom Informationssysteme GmbH
– Data Protection Officer –
Rüdesheimer Str. 23
80686 Munich
privacy@lex-com.net
You also have the right to lodge a complaint with a supervisory authority responsible for Privacy if you believe that LexCom is not complying with the applicable Privacy laws.
Where we process your personal data on the basis of a legitimate interest pursuant to Article 6(1)(f) of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data, provided this is for reasons arising from your particular situation. In this case, LexCom will no longer process the personal data unless LexCom can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
If you wish to exercise your right to withdraw consent or to object, simply send an email to privacy@lex-com.net.