lcmd Platform
Privacy Policy for End Users

Overview
In this privacy policy for End Users ("Privacy Policy for End Users"), LCM Digital GmbH explains how LCM Digital GmbH processes personal data of End Users on behalf of the Licensee on the lcmd web application or the lcmd mobile app (collectively the "lcmd Platform"). Licensee in the sense of this Privacy Policy is the organisation or person through which you have obtained access to the lcmd Platform.
‍
1. Responsible
LCM Digital GmbH, Obere Waldplätze 22, 70659 Stuttgart, Germany licenses the lcmd Platform to Licensees. These Licensees are controllers within the meaning of the EU General DataProtection Regulation ("GDPR") for the processing of the End Users' personal data in connection with the lcmd Platform.

LCM Digital GmbH processes the data collected in the course of using the lcmd Platform on behalf of the lcmd Licensees. If you have any questions about the processing of your data, you can therefore contact the data protection officer of LCM Digital GmbH directly. The data protection office of LCM Digital GmbH is provided by our parent company Drees & Sommer SE:
‍
‍Contact Details of Data Protection Officer
‍Lejla Llugaxhiu
datenschutzbeauftragter@dreso.com

When contacting the Data Protection Officer, please identify the Licensee whose access you are using to work with the lcmd Platform. Please refrain from enclosing sensitive information such as a copy of an ID card with your request. In addition, you can of course also contact the data protection officer of the lcmd Licensee itself.
‍
2. Processing of personal data

2.1 Personal data
"Personal data" means any information relating to an identified or identifiable natural person (Article 4 No. 1 GDPR). This includes, in particular, the e-mail address and all other registration data that End Users provide when registering for the lcmd Platform, as well as data that end users create, post or upload in the lcmd licensee account ("Personal Data").

2.2 Processing of personal data
‍"Processing" means, inter alia, any collection and recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure of personal data (Article 4(2) GDPR). In part, the processing of Personal Data of End Users is necessary to operate the lcmd Platform or to manage the user relationship.
Other Personal Data is processed by LCM Digital GmbH for the Licensee on the basis of legitimate interests. Specifically, LCM Digital GmbH processes the following categories of Personal Data for the following purposes:

2.2.1 Registration on the lcmd Platform
‍When End Users register for the lcmd Platform, LCM Digital GmbH processes on behalf of the Licensee their picture, first name, last name, title, company, state, email address, country, city, date of birth, telephone number, mobile number, address, password and preferred language, which the End User enters in the registration form ("Registration Data"), for the purpose of registration, i.e. the creation of access for the lcmd Platform.
‍
2.2.2 Operation of the lcmd Platform
In order to provide the lcmd Platform to End Users, LCM Digital GmbH processes the End Users' Registration Data on behalf of the Licensee.

2.2.3 IT security
In order to ensure the secure operation of the lcmd Platform, LCM Digital GmbH also processes the information which browser the End User uses when visiting the lcmd Platform, their login activities and the IP addresses used by means of log files for the licensee.

2.2.4 Management of the usage relationship
For the administration of the user relationship, LCM Digital GmbH processes the Registration Data of End Users for the licensee.

2.2.5 Email notifications and push messages
In addition, LCM Digital GmbH processes the Registration Data of End Users on behalf of the Licensee in order to provide them with information as part of the provision of the lcmd Platform (e.g. a welcome e-mail, information about new functionalities or to manage the user relationship).

2.2.6 Content upload
End users can enter, create and upload content (e.g. calendar details, trade affiliation, team affiliation, work orders, actions, photos, voice recordings) containing their own Personal Data or Personal Data of other End Users on the lcmd Platform within the framework of the functionalities contained there in, via free textfields and upload areas.

LCM Digital GmbH processes this Personal Data on behalf of the Licensee in order to provide the communicative and collaborative functionalities of the lcmd Platform and to give End Users an overview in project management dashboards and statistics, e.g. general project information and/or pending and completed work orders.

2.2.7 Support requests
When End Users submit support requests to the relevant support office, LCM Digital GmbH processes their Registration Data on behalf of the Licensee for the purpose of processing and responding to the support request.

2.2.8 Voice Recordings/Audio Files
End users can use the mobile lcmd app of the Icmd platform to create so-called tickets for tasks with the help of audio recordings. This function is only available after the user has consented to the use of the microphone.
The user's audio recordings are temporarily stored as audio files on the user's mobile device and then transmitted to an interface within the server instance of LCM Digital GmbH for processing.
‍
For processing, the lcmd platform uses artificial intelligence technologies to analyze and transcribe the content, thereby improving the user experience. The audio files are deleted immediately after transcription and are not passed on to third parties.
‍
3. Legal Basis
The legal basis for the processing is the licensee's overriding legitimate interest in providing End Users with a secure and functioning service of the lcmd Platform (Article 6 (1) lit. f GDPR).

In particular, the Licensee has an overriding legitimate interest in processing the Personal Data that End-Users have posted, created or uploaded in order to make the functionalities and planning results on the lcmd Platform accessible to all its End-Users and to enhance the overall user experience (Article 6(1) lit. f GDPR). This does not conflict with the interests of the End Users concerned, as no sensitive private data is processed and they have accepted the terms of use for the lcmd Platform. These terms of use describe the communication and collaboration functionalities of the lcmd Platform that are necessary for the contractual functioning of the lcmd Platform; by accepting these terms of use, the respective End User undertakes in particular not to create, post or upload any content that infringes personal rights.

4. How long does LCM Digital GmbH store this Personal Data for the Licensee?
The data will be stored for the duration of the existing license agreement and then deleted, unless longer storage is required by law.

5. How does LCM Digital GmbH share this Personal Data with third parties?
As far as necessary, the contents of the Platform are available to other End Users. Furthermore, Personal Data of End Users will only be passed on to third parties by LCM Digital GmbH in the following cases:

LCM Digital GmbH uses external and independent service providers (e.g. cloud or hosting providers) to support LCM Digital GmbH in operating the lcmd Platform. LCM Digital GmbH has carefully selected these service providers and, where required by law, has concluded so-called data processing agreements. If LCM Digital GmbH commissions other companies to carry out tasks within the framework of data processing agreements and forwards Personal Data for this purpose, these companies are obliged to protect the forwarded Personal Data and to use it only for the purposes agreed in the respective order processing agreements.

In cases where LCM Digital GmbH transfers Personal Data to countries outside the EU / EEA, this is only done on the basis of sufficient security measures in accordance with Art.45 GDPR that ensure an appropriate level of data protection.End users can request further information, e.g. copies of the respective security measures.

6. What security measures are taken?
LCM Digital GmbH takes appropriate technical and organisational security measures to protect the Personal Data of End Users from unlawful destruction, loss, alteration or unauthorised disclosure to third parties.

7. Rights of End Users
As a data subject, you have the right to information, correction, deletion, restriction of processing and data portability in accordance with Art. 13 (2) b)-d) GDPR. End users can assert their rights directly with LCM Digital GmbH or the lcmd licensee. In addition, you have the right to object to processing for the protection of legitimate interests if reasons arise from your particular situation that speaka gainst data processing. We will then no longer process the Personal Data in the event of a justified objection. If you feel that your rights have been violated by the collection, processing or use of your Personal Data, you can submit your complaint to the competent data protection supervisory authority. The competent data protection authority is Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Te.: +49 711 615541-0, mail: poststelle@lfdi.bwl.de.