Submenu items for Home coming soon — add them in /cp under Navigation → Header — Primary.
Lans
AustriaThe original destination for deep medical reset and metabolic renewal.
Tegernsee
GermanyThe most comprehensive destination for prevention, recovery and performance.
Sylt
GermanyThe seaside destination for stress relief, sleep and vital regeneration.
Marbella
SpainThe Mediterranean destination for longevity, beauty and restorative wellbeing.
The original Lanserhof Concept for regeneration.
Precision diagnostics to slow biological ageing.
Sustainable weight regulation, medically led.
Medically guided resilience against stress.
Regenerative sleep, restored without medication.
Strength and vitality before and after surgery.
Bringing the immune system back into balance.
Protecting cognitive health through early detection.
Precise care for hormonal and gender-specific health.
Smarter training, better movement, deeper recovery.
Restorative relaxation beyond traditional wellness.
Natural radiance from skin health and inner balance.
Reconnecting with your inner balance.
The controller responsible for data processing is:
Lanserhof Management GmbH
Gut Steinberg 1-4
83666 Waakirchen
Germany
[email protected]
Thank you for your interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your personal data.
Last updated: 30 September 2026
You may visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which may contain, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and which documents the access. This access data is evaluated exclusively for the purpose of ensuring the trouble-free operation of the website and improving our services. This serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in the proper presentation of our services pursuant to Art. 6(1) sentence 1 lit. f GDPR. All access data is processed only for as long as is necessary to achieve the processing purposes stated above.
Hosting
The services for hosting and displaying the website are provided by our service provider as part of processing carried out on our behalf. The operation and hosting of the website system are handled by Project LNS GmbH, Hamburg, Germany, as a processor pursuant to Art. 28 GDPR. The servers are located at netcup GmbH in Nuremberg, Germany. Unless otherwise explained in this Privacy Policy, all access data and all data collected via forms provided on this website are processed on these servers. If you have any questions about our service providers or the basis of our cooperation with them, please use the contact details provided in this Privacy Policy.
Content Delivery Network and Security Services (Cloudflare)
For the purpose of reducing loading times and protecting the website against attacks, we use the content delivery network and security services of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (“Cloudflare”). Images, videos and documents on this website are also stored in Cloudflare storage located within the European Union and delivered from there. Each time the website is accessed, Cloudflare processes connection and log data, in particular your IP address, the date and time of access, as well as device and browser information. This serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in the secure, fast and trouble-free provision of our services pursuant to Art. 6(1) sentence 1 lit. f GDPR. Cloudflare processes the data on our behalf. Cloudflare is based in the USA and uses servers in countries outside the EU and the EEA. The transfer is based on the European Commission’s adequacy decision for the USA, as Cloudflare is certified under the EU-U.S. Data Privacy Framework, and additionally on the European Commission’s Standard Contractual Clauses.
Contact Requests
As part of customer communication, we collect personal data in order to process your enquiries pursuant to Art. 6(1) sentence 1 lit. b GDPR if you voluntarily provide such data when contacting us, for example via a contact form or by email. Mandatory fields are marked as such, as in these cases we require the relevant information in order to process your enquiry. The data collected can be seen from the respective input forms. Submissions made via the contact form are stored in our website system and forwarded to our team via the mail server of our processor in Germany; you will receive a confirmation of receipt at the email address you provide. Once your enquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR or unless we reserve the right to use the data beyond this scope where such use is permitted by law and explained in this Privacy Policy.
Booking Enquiry
You can use the booking process on our website to request a stay at one of our properties. For this purpose, we collect the information you provide during the individual steps: the desired property, travel dates and room preference, title, first and last name, date of birth and nationality of the travelling persons, the email address, telephone number and address of the main contact person, as well as your expected arrival time. We process this data for the preparation and performance of the accommodation contract pursuant to Art. 6(1) sentence 1 lit. b GDPR.
If you select focus areas or programmes for the travelling persons during the booking process, this information may allow conclusions to be drawn about your health. We process such information exclusively on the basis of your explicit consent pursuant to Art. 9(2) lit. a GDPR in conjunction with Art. 6(1) sentence 1 lit. a GDPR, which we obtain separately before you submit your enquiry. The information is used solely to prepare your stay and programme and is treated confidentially by our medical team.
Your booking enquiry is not stored in the website database. Instead, it is saved as a file on the server of our processor in Germany, which is excluded from backups and third-party systems, and transmitted to our reservations team via the processor’s mail server. The file is deleted no later than 90 days after submission. If an accommodation contract is concluded, we will continue to process your data in our reservation systems for the purpose of performing the contract. You may withdraw your consent to the processing of your health-related information at any time with effect for the future by using the contact details provided in this Privacy Policy.
Direct Booking via OnePageBooking
By clicking the “Book Directly” link, you will be taken to the booking interface of our OnePageBooking booking system, which is provided by HNS GmbH and accessed via the domain onepagebooking.com. You will only leave our website once you click this link. To avoid requiring you to enter your information again, we transfer the names, email addresses and telephone numbers entered during the booking process in encrypted form within the address component of the link to the booking interface, where they are inserted into the relevant form fields. The encrypted portion is not evaluated by any server and is removed from the address bar immediately after the page is opened. The processing serves the preparation and performance of the accommodation contract pursuant to Art. 6(1) sentence 1 lit. b GDPR. The privacy information linked within the booking interface applies additionally to data processing carried out within that interface itself.
AI Assistant (“Get Guidance” and “Start Your Journey”)
On our website, we offer an AI-powered assistant that answers your questions about our properties, programmes, prices and processes and, if you wish, supports you in a guided conversation when selecting a suitable programme. Use of the assistant is voluntary. The messages you enter into the chat, as well as your responses during the guided conversation, are processed.
Your entries may contain information that allows conclusions to be drawn about your health, for example if you describe symptoms or ask about suitable focus areas. As a precaution, all entries are therefore treated as if they contained health data and are processed exclusively on the basis of your explicit consent pursuant to Art. 9(2) lit. a GDPR in conjunction with Art. 6(1) sentence 1 lit. a GDPR, which we obtain before the conversation starts. Your consent is stored in a cookie in your browser for seven days so that you do not have to provide it again each time you visit.
To answer your questions, your entries are transmitted to an AI language model. Before each transmission, personal information such as names, email addresses, telephone numbers, addresses or identification numbers is automatically detected on the infrastructure of our processor and replaced with placeholders (pseudonymisation). The mapping between the placeholders and the original information remains exclusively on this infrastructure in Germany and is deleted when the session ends. The responses generated by the language model are only recombined with the original information when displayed in your browser. IP addresses, session identifiers and user identifiers are not transmitted to the language model.
Model requests are routed via Cortecs GmbH, Austria, which acts as a processor and operates a European AI router that forwards requests exclusively to data centres within the European Union. Inputs and outputs are processed there only in volatile memory, are not logged, are not stored permanently and are not used to train AI models. No transfer to third countries takes place.
The conversation history is retained in pseudonymised form on our processor’s server for the duration of your session and is deleted when the conversation ends, or at the latest when the session expires. We do not store chat histories and do not analyse your entries on a personal basis. To protect against misuse, the number of requests per session and per IP address is limited; for this purpose, your IP address is processed temporarily on the server. This serves to safeguard our legitimate interests in maintaining stable operation pursuant to Art. 6(1) sentence 1 lit. f GDPR.
You may withdraw your consent at any time by ending the conversation or deleting the cookie in your browser. This does not affect the lawfulness of processing carried out before the withdrawal. The assistant is not a substitute for medical advice; for personal concerns, you may contact us at any time via the contact form.
If you subscribe to our newsletter, we use the data required for this purpose, or data separately provided by you, to send you our email newsletter on a regular basis on the basis of your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR.
You may unsubscribe from the newsletter at any time, either by sending a message using the contact details described below or by using the unsubscribe link provided in the newsletter.
After you unsubscribe, we will delete your email address from the recipient list unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR or unless we reserve the right to use the data beyond this scope where such use is permitted by law and explained in this Privacy Policy.
If you have additionally given us your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR to analyse our newsletters, we also analyse your interaction with our newsletter by measuring, storing and evaluating opening rates and click-through rates for the purpose of designing future newsletter campaigns (“newsletter tracking”).
For this analysis, the emails we send contain single-pixel technologies, such as web beacons or tracking pixels, which are stored on our website. For the purpose of these analyses, we link in particular the following “newsletter data”:
the page from which the page was requested (so-called referrer URL),
the date and time of access,
a description of the type of web browser used,
the IP address of the requesting device,
the email address,
the date and time of registration and confirmation,
as well as the single-pixel technologies with your email address or IP address and, where applicable, an individual ID. Links contained in the newsletter may also include this ID.
You may opt out of newsletter tracking at any time, either by sending a message using the contact details described in this Privacy Policy or by using the corresponding link provided in the newsletter.
The information is stored for as long as you remain subscribed to the newsletter.
The newsletter and the newsletter tracking described above may also be carried out by our service providers as part of processing performed on our behalf. If you have any questions about our service providers or the basis of our cooperation with them, please use the contact details provided in this Privacy Policy.
To make your visit to our website attractive and to enable the use of certain functions, we use technologies, including so-called cookies, on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser when you next visit our website (persistent cookies). You can find information on the duration of storage in the overview provided in the cookie settings of your web browser.
Protection of Privacy on End Devices
When you use our online services, we employ technologies that are strictly necessary in order to provide the digital service expressly requested by you. In this respect, storing information on your device or accessing information already stored on your device does not require your consent.
For functions that are not strictly necessary, storing information on your device or accessing information already stored on your device requires your consent. Please note that if you do not provide your consent, certain parts of the website may not be fully available. Any consent you have given will remain valid until you adjust or reset the relevant settings on your device.
Strictly Necessary Cookies and Local Storage on This Website
Our website itself uses a session cookie that maintains your session for the duration of your visit (valid for 120 minutes from your last activity), as well as a security cookie to protect forms against misuse. Your choice between light and dark mode is stored in your browser’s local storage. Your consent to the use of the AI assistant is stored in a cookie for seven days. These technologies are necessary for the operation of the website and do not require consent.
Any Subsequent Data Processing Through Cookies and Other Technologies
We use technologies that are strictly necessary for the use of certain functions of our website. These technologies collect and process your IP address, the time of your visit, device and browser information, as well as information about your use of our website. This serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in the optimised presentation of our services pursuant to Art. 6(1) sentence 1 lit. f GDPR.
We also use technologies in order to comply with legal obligations to which we are subject, for example to be able to demonstrate consent to the processing of your personal data, as well as for web analytics and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this Privacy Policy.
We may also use additional technologies that are not individually listed in this Privacy Policy. Further information about these technologies, including the respective legal basis for data processing, can be found on the Usercentrics platform. You can access this via the “Cookie Settings” link in the footer.
Cookie Settings
You can find the cookie settings for your browser via the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
Where you have consented to the use of technologies pursuant to Art. 6(1) sentence 1 lit. a GDPR, you may withdraw your consent at any time by sending a message using the contact details described in this Privacy Policy. Alternatively, you may use the “Cookie Settings” link in the footer.
On our website, we use the Usercentrics Consent Management Platform (“Usercentrics”) to inform you about the cookies and other technologies we use on our website and, where legally required, to obtain, manage and document your consent to the processing of your personal data through these technologies. This is necessary pursuant to Art. 6(1) sentence 1 lit. c GDPR in order to comply with our legal obligation under Art. 7(1) GDPR to be able to demonstrate your consent to the processing of your personal data. Usercentrics is a service provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, which processes your data on our behalf. When you visit our website, the Usercentrics web server stores a so-called server log file, which also contains your anonymised IP address, the date and time of your visit, device and browser information, as well as information about your consent choices. Your data will be deleted after three years unless you have expressly consented to further use of your data pursuant to Art. 6(1) sentence 1 lit. a GDPR or unless we reserve the right to use the data beyond this scope where such use is permitted by law and explained in this Privacy Policy.
Our service providers are based in and/or use servers in the following countries for which the European Commission has determined by decision that an adequate level of data protection exists: USA. The adequacy decision for the USA serves as the basis for transfers to third countries where the respective service provider is certified. Such certification is in place.
We use the following cookies and other technologies from third-party providers on our website. Unless otherwise stated for the individual technologies, this is based on your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. Once the relevant purpose no longer applies and we cease using the respective technology, the data collected in this context will be deleted. You may withdraw your consent at any time with effect for the future. Further information on your options for withdrawal can be found in the section “Cookies and Other Technologies”. Further information, including the basis of our cooperation with the individual providers, can be found under the respective technologies. If you have any questions about the providers or the basis of our cooperation with them, please use the contact details provided in this Privacy Policy.
Separate Consent to Data Transfers to Third Countries
Some of the providers listed below also process your data in countries outside the EU and the EEA for which no adequacy decision by the European Commission exists or whose service providers are not certified under the EU-U.S. Data Privacy Framework. Where you additionally consent via the cookie settings to the transfer of data to such third countries, the transfer is carried out on the basis of your explicit consent pursuant to Art. 49(1) sentence 1 lit. a GDPR. Please note that these countries may not provide a level of data protection comparable to that under EU law; in particular, public authorities may be able to access your data without effective legal remedies being available to you. You may withdraw this consent at any time with effect for the future via the “Cookie Settings” link in the footer; this does not affect the lawfulness of any transfer carried out prior to withdrawal.
We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies about your use of our website is generally transferred to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Unless otherwise stated for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR concluded for the respective technology. Further information about data processing by Google can be found in Google’s Privacy Policy.
Our service providers are based in and/or use servers in countries outside the EU and the EEA. Where the European Commission has determined by decision that an adequate level of data protection exists in these countries, the transfer is based on that decision; with regard to the USA, this applies because Google is certified under the EU-U.S. Data Privacy Framework. In all other cases, our cooperation is based on the European Commission’s Standard Contractual Clauses.
Google Analytics
For the purpose of website analytics, Google Analytics automatically collects and stores data such as your IP address, the time of your visit, device and browser information, as well as information about your use of our website. Pseudonymous user profiles are created from this data. Cookies may be used for this purpose. If you visit our website from within the EU, your IP address is stored on a server located in the EU for the purpose of deriving location data and is then deleted immediately before the traffic is forwarded to other Google servers for further processing. Data processing is carried out on the basis of a data processing agreement with Google.
Google Tag Manager
Google Tag Manager enables us to manage various codes and services on our website. When individual tags are implemented, Google may also process personal data, such as IP addresses and online identifiers, including cookies. Data processing is carried out on the basis of a data processing agreement with Google. Google Tag Manager enables us to integrate various services and technologies. If you do not wish individual tracking services to be used and have therefore deactivated them, the deactivation remains effective for all relevant tracking tags integrated via Google Tag Manager.
YouTube Video Plugin
To embed third-party content, the YouTube Video Plugin, which we use in enhanced privacy mode, collects data such as your IP address, the time of your visit, and device and browser information, transmits this data to Google and allows Google to process it only when you play a video.
Use of the Meta Pixel
We use the Meta Pixel as part of the technologies described below from Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Facebook (by Meta)” or “Meta Platforms Ireland”). The Meta Pixel automatically collects and stores data such as your IP address, the time of your visit, device and browser information, as well as information about your use of our website based on events defined by us, such as visiting a webpage or subscribing to a newsletter. Pseudonymous user profiles are created from this data.
When you visit our website, the Meta Pixel automatically places a cookie that enables your browser to be recognised automatically when you visit other websites by means of a pseudonymous cookie ID. Meta Platforms Ireland may combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website use, in particular personalised and group-based advertising.
The information automatically collected by Meta Platforms Ireland technologies about your use of our website is generally transferred to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Further information about data processing by Meta Platforms Ireland can be found in the Meta Platforms Ireland Privacy Policy.
Our service providers are based in and/or use servers in the following countries for which the European Commission has determined by decision that an adequate level of data protection exists: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom and Argentina. The adequacy decision for the USA serves as the basis for transfers to third countries where the respective service provider is certified. Such certification is in place.
Our service providers are based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico. No adequacy decision by the European Commission exists for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s Standard Contractual Clauses.
Meta Ads Manager
We use Meta Ads Manager to advertise this website on Facebook (by Meta) and on other platforms. We determine the parameters of the respective advertising campaign. Meta Platforms Ireland is responsible for the specific implementation, in particular the decision as to where advertisements are placed for individual users. Unless otherwise stated for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Joint controllership is limited to the collection of data and its transmission to Meta Platforms Ireland. Subsequent processing of the data by Meta Platforms Ireland is not covered by this joint controllership.
To play our podcast episodes, we embed the podcast player provided by Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany (“Podigee”). When the player is loaded on a page, your browser establishes a connection to Podigee’s servers. In doing so, data such as your IP address, the time of your visit, device and browser information, as well as information about playback of the episode, is transmitted to and processed by Podigee in order to deliver the audio file and statistically analyse the use of the player. The player is only loaded if you have given your consent via the cookie settings pursuant to Art. 6(1) sentence 1 lit. a GDPR. Further information about data processing by Podigee can be found in the Podigee Privacy Policy.
Our Online Presence on Facebook (by Meta), X (formerly Twitter), Instagram (by Meta), YouTube, LinkedIn and Xing
Where you have given your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR to the respective social media operator, your data is automatically collected and stored for market research and advertising purposes when you visit our online presences on the social media platforms listed above. Pseudonymous user profiles may be created from this data. These may be used, for example, to display advertisements within and outside the platforms that are presumed to correspond to your interests. Cookies are generally used for this purpose. Detailed information on the processing and use of data by the respective social media operator, as well as contact options, your rights and the settings available to protect your privacy, can be found in the providers’ privacy notices linked below. If you nevertheless require assistance in this regard, you may contact us.
Facebook (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). Information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is generally transferred to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing in connection with a visit to a Facebook (by Meta) fan page is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information, including information on Insights data, can be found here.
Our service providers are based in and/or use servers in the following countries for which the European Commission has determined by decision that an adequate level of data protection exists: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom and Argentina. The adequacy decision for the USA serves as the basis for transfers to third countries where the respective service provider is certified. Such certification is in place. Our service providers are also based in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico. No adequacy decision by the European Commission exists for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s Standard Contractual Clauses.
X is a service provided by X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“X”). Information automatically collected by X about your use of our online presence on X is generally transferred to and stored on a server operated by X Corp., FM 1209, Building 2, Bastrop, TX 78602, USA. Our service providers are based in and/or use servers in countries outside the EU and the EEA. Where an adequacy decision by the European Commission exists for such countries, the transfer is based on that decision; otherwise, it is based on the European Commission’s Standard Contractual Clauses.
Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). Information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transferred to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in connection with a visit to an Instagram (by Meta) fan page is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information, including information on Insights data, can be found here. The countries and safeguards described above for Facebook (by Meta) also apply to transfers to third countries in connection with Instagram.
YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Information automatically collected by Google about your use of our online presence on YouTube is generally transferred to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Our service providers are based in and/or use servers in countries outside the EU and the EEA. Where an adequacy decision by the European Commission exists for such countries, the transfer is based on that decision; with regard to the USA, this applies because Google is certified under the EU-U.S. Data Privacy Framework. In all other cases, our cooperation is based on the European Commission’s Standard Contractual Clauses.
LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). Information automatically collected by LinkedIn about your use of our online presence on LinkedIn is generally transferred to and stored on a server operated by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. Our service providers are based in and/or use servers in the following countries for which the European Commission has determined by decision that an adequate level of data protection exists: USA. The adequacy decision for the USA serves as the basis for transfers to third countries where the respective service provider is certified. Such certification is in place.
Xing is a service provided by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. Where New Work SE uses servers in countries outside the EU and the EEA, the transfer is based on an adequacy decision by the European Commission or on the European Commission’s Standard Contractual Clauses.
As a data subject, you have the following rights:
pursuant to Art. 15 GDPR, the right to request information about the personal data we process concerning you, to the extent specified therein;
pursuant to Art. 16 GDPR, the right to request the immediate rectification of inaccurate personal data or completion of incomplete personal data stored by us;
pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is necessary for exercising the right to freedom of expression and information, compliance with a legal obligation, reasons of public interest, or the establishment, exercise or defence of legal claims;
pursuant to Art. 18 GDPR, the right to request restriction of the processing of your personal data where you contest the accuracy of the data, the processing is unlawful but you oppose its deletion, we no longer require the data but you need it for the establishment, exercise or defence of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;
pursuant to Art. 7(3) GDPR, the right to withdraw consent you have given at any time with effect for the future;
pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual place of residence or workplace, or that responsible for our registered office.
Right to Object
Where we process personal data as described above on the basis of our legitimate interests, which prevail in the context of a balancing of interests, you may object to such processing with effect for the future. Where the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. Where the processing is carried out for other purposes, you have the right to object only on grounds relating to your particular situation.
After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or where the processing serves the establishment, exercise or defence of legal claims.
This does not apply where the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.
If you have any questions regarding the collection, processing or use of your personal data, or if you wish to request access, rectification, restriction or deletion of data, withdraw any consent you may have given, or object to a particular use of your data, please contact our
Data Protection Officer of the Lanserhof Group
Gut Steinberg 1-4
83666 Waakirchen
Germany
The following information provides you with an overview of how we handle your personal data (hereinafter referred to as “data”) and your data protection rights. The specific data we process from you is determined by the application process.
When applying via our online job market:
If you visit the websites of Lanserhof Management GmbH as part of the application process, this privacy policy also applies.
Data protection information in connection with your application
– Who is responsible for data processing and who can I contact?
– What data do we use and where does it come from?
o Applying for a job at Lanserhof Management GmbH via the contact form
o Applying for a job via LinkedIn
– For what purpose do we process your data and on what legal basis?
– Who receives your data?
– Will your data be transferred to a third country?
– How long will the personal data be stored?
– What data protection rights can you assert as a data subject?
– Are you obliged to provide your data?
– To what extent is there automated decision-making or profiling?
– Right to object
Art. 13 para. 1 lit. a GDPR
The controller responsible for data processing is
Lanserhof Management GmbH
Neue ABC-Str. 8
20354 Hamburg
Germany
Managing Director: Dr. jur. Christian Harisch
Commercial register: Munich Local Court, HRB 213099
You can contact the data protection officer of Lanserhof Management GmbH at [email protected].
Your personal data is collected directly from you as part of the application process. We only collect and process data related to your application. These are in particular:
– general personal data (master data such as first name, surname, name affixes)
– contact details (e.g. private address, (mobile) telephone number, e-mail address)
– information on your professional qualifications (in particular school education, vocational training, previous activities, information on further professional training, certificates, other qualifications)
– other data from the entire application process (e.g. cover letter, questionnaires, interviews)
– profile information from job-related social media (e.g. LinkedIn, Xing)
– notes about applicants
– work results as part of the practical day
– other information that you provide to us in connection with your application.
If you have also voluntarily provided special categories of personal data (such as health data, religious affiliation, degree of disability) in the letter of application or during the application process, processing beyond storage will only take place if you have consented to this or if a legal permission justifies this.
In addition to the contact form on our application portal, you can also apply for a job via email or LinkedIn.
Art. 13 para. 1 lit. c GDPR
For the fulfilment of contractual obligations
We collect and process your data in accordance with the statutory provisions, in particular the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), for the following purposes:
– to carry out and process the application procedure and to assess the extent to which you are suitable for the employment relationship in question or other vacant positions (Art. 6 para. 1 lit. b GDPR in conjunction with Section 26 para. 1 BDSG)
– if an employment relationship is established between you and us: for the further processing of the data already received from you for the purposes of the recruitment process and for the implementation / termination of the employment relationship (Art. 6 para. 1 lit. b GDPR in conjunction with Section 26 para. 1 BDSG)
Due to legal requirements or in the public interest
– To fulfil legal obligations or official requirements. The processing also takes place in order to fulfil our legal obligations as an employer, in particular in the area of tax and social security law, as well as to fulfil control and reporting obligations (Art. 6 para. 1 lit. c and lit. e GDPR in conjunction with Section 26 BDSG).
– If you specify a degree of disability, we are obliged under SGB IX to forward this data internally to the representative body for severely disabled employees. In this case, the legal basis is Section 26 para. 3 sentence 1 BDSG in conjunction with the corresponding standards from SGB IX.
If necessary, we process your data to protect our legitimate interests or those of third parties (Art. 6 para. 1 lit. f GDPR), in particular:
– anonymised processing for our own statistical purposes (e.g. studies on applicant behaviour)
On the basis of consent
– If it is clear from your letter of application or CV that you wish the processing of disclosed personal data, including special categories (such as information on voluntary activities in a political party or religious organisation), for which there is no legal permission, we assume that you consent to the processing. In this case, the legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR, possibly in conjunction with Art. 9 para. 2 lit. a GDPR. You can withdraw your consent at any time, even during the application process.
– If you enter personal data in your letter of application or CV that we are not permitted to collect ourselves, we will assume that you have given your consent to the storage of this data on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR and will not use it for other purposes. You can withdraw your consent at any time, even during the application process.
Contact by e-mail or telephone, telephone interview / video interview
As part of the application process, we will contact you regarding your application, in case of queries or to arrange interviews and, if necessary, to arrange a practical day. For this purpose, we will use the contact details you have provided and contact you by e-mail or telephone. The job interviews and, if applicable, the practical day regularly take place via the service providers named below; alternatively, job interviews can also be conducted by telephone. You will find information on the handling of your data in the following sections:
We use Rainbow from ALE International and WebEx from Cisco Systems (as telephone/video conferences) to conduct job interviews and the practical day with you. ALE International and Cisco Systems are responsible for the processing of data via Rainbow and WebEx (app or browser).
The scope of the data processed depends, on the one hand, on the information you provide yourself before and during participation in an online meeting and, on the other hand, on how you participate in the meeting.
The purpose of the data processing is to conduct the job interviews, the practical day and, if necessary, the exchange of data via the chat function. The legal basis is the implementation of pre-contractual measures, Section 26 para. 1 sentence 1 BDSG in conjunction with Art. 6 para. 1 GDPR.
Personal data processed in connection with participation in an online meeting will not be passed on to third parties unless they have been transmitted for the purpose of disclosure. We use service providers to process personal data on our behalf in order to conduct the online meetings. These companies are based in the USA. Please note the information in the section on third-country transfers below with regard to the associated risks.
Inclusion in the application pool
In some cases, we may not be able to consider applicants for the advertised position. In some cases, we offer the possibility of inclusion in our application pool.
Such inclusion in the application pool only occurs if you voluntarily give us your consent to include you in the application pool. You will be informed of the duration of storage when your consent is obtained.
You can revoke your consent at any time for the future.
Art. 13 para. 1 lit. e GDPR
Within our company, those persons who need your data to fulfil the above-mentioned purposes, in particular for the decision on recruitment and to fulfil our pre-contractual/contractual and legal obligations, e.g. responsible managers and employees of the P&C department, will have access to your data.
As an employer, we already have legal obligations to pass on data in certain cases during the application process. In addition, we use selected service companies (processors) and vicarious agents of the categories listed below, who may have access to your data to the extent necessary and use it to fulfil the orders placed by us.
Under these conditions, recipients of your data may be:
– public bodies and institutions in the event of a legal or regulatory obligation,
– third parties who process your data for their own purposes
o payment service providers / banks
o postal service companies
o auditing companies / legal services companies
– service companies (processors) / vicarious agents in the following areas:
o recruiting software
o personnel management software
o office applications
o video telephony software
Art. 13 para. 1 lit. f GDPR
Lanserhof Management GmbH uses various service companies as processors for the aforementioned purposes in the context of recruitment. Some of these are based outside the European Union or the European Economic Area (EEA) or use corresponding service companies, e.g. for hosting purposes. Our contracts with the service providers provide for exclusive processing on servers in the EU. We have also agreed standard contractual clauses as a suitable guarantee.
Some service providers also have so-called approved rules of conduct (Binding Corporate Rules), which ensure that the company complies with European data protection standards.
Art. 13 para. 2 lit. a GDPR
We process and store your data as long as it is necessary for the fulfilment of the above-mentioned purposes, in particular for the decision on your application and your suitability for vacant positions. If an employment relationship between you and us does not materialise, we will delete your data 6 months after completion of the application process, unless statutory provisions prevent deletion or longer storage is required due to legal disputes or you have consented to longer storage.
Art. 13 para. 2 lit. b – d GDPR
As a data subject, you have the following rights:
– in accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
– in accordance with Art. 16 GDPR, the right to demand the immediate rectification of incorrect or incomplete personal data stored by us;
– in accordance with Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation; for reasons of public interest or for the establishment, exercise or defence of legal claims;
– in accordance with Art. 18 GDPR, the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you; the processing is unlawful, but you refuse to delete it; we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
– in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller;
– in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters. The following supervisory authority is responsible for Lanserhof Management GmbH: the Hamburg Commissioner for Data Protection and Freedom of Information.
If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction of processing or deletion of data as well as revocation of any consent given or objection to a specific use of data, please contact our company data protection officer.
Art. 13 para. 2 lit. e GDPR
As part of your application, you must provide the data that is required to carry out the application process and the suitability assessment or that we are legally obliged to collect. Without this data, we will not be able to carry out the application process and make a decision on the establishment of an employment relationship with you.
Art. 13 para. 2 lit. f GDPR
In principle, we do not use fully automated decision-making or profiling to establish, implement or terminate an employment relationship in accordance with Article 22 GDPR. Should we use these procedures in individual cases, we will inform you of this separately if this is required by law.
If we process personal data as explained above in order to safeguard our legitimate interests, which are overriding in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have the right to object if there are grounds relating to your particular situation.
After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.
This does not apply if the processing is for direct marketing purposes. In this case, we will no longer process your personal data for this purpose.
Searching… of results Nothing matched that search.
Results appear as you type. Two letters are enough.