Data Protection / GDPR

Privacy is important to us
With the new General Data Protection Regulation (GDPR), which will come into force on 25 May 2018, personal data will be even better protected. For us, the protection of your data has long been a matter of course. We would therefore like to inform you today about our new privacy policy. We store and process your data, in particular for contractual or pre-contractual purposes, as well as to provide you with the information that is relevant to you. Your data will not be passed on to third parties for advertising purposes. Of course, you still have the opportunity to object to the sending of information at any time. Simply click on the unsubscribe button.

1. GDPR – Was ist die GDPR?
The Basic Data Protection Regulation, unlike its predecessor, is a regulation rather than a directive. A directive must be transposed into national law by the individual member states of the European Union, while a regulation is directly valid in all Member States as if it were a national law. The Basic Data Protection Regulation seeks to standardize data protection standards in all EU Member States and focuses on the protection of personal data.

2. Privacy Statement of LEIPZIGER LEUCHTEN GmbH

2.1 General
For LEIPZIGER LEUCHTEN, the protection of your data has long been a matter of course. Your data will therefore be collected, stored and processed in accordance with the applicable data protection regulations. In our business processes, we take the security of your personal data into account. Our employees and the suppliers and service providers commissioned by us have been obliged by us to secrecy and to comply with the data protection regulations.

This Privacy Policy explains how we protect your privacy. This privacy policy is based on the General Data Protection Regulation (GDPR) valid from 25.05.2018. According to GDPR, in this privacy policy we provide you with the respective legal basis for the processing of personal data to which we refer.

2.1.1 Responsible body / Data protection officer
Responsible body:
LEIPZIGER LEUCHTEN GMBH, Heiterblickstraße 37, 04347 Leipzig
Managing Directors: Jörg Hofmann, Nadine Hofmann

Data protection officer:
LEIPZIGER LEUCHTEN GMBH, Heiterblickstraße 37, 04347 Leipzig
E-Mail: datenschutz@leipziger-leuchten.com

2.2 Collection, storage and use of personal data of our business partners
For the settlement of business relationships with our business partners (customers, suppliers, other business partners) we also store personal data (eg e-mail address, postal address, telephone number, etc.). The personal data we collect for this purpose is used internally by the departments involved in conducting the business relationship. (Legal basis for processing is Art. 6 (1) (a), (b) and (f) GDPR)

We process your personal information for the purposes required to fulfill the business relationship between you and us, such as: for the following purposes:

•     Creation of offers to customers for deliveries and services
•     Determination of your individual prices
•     internal processing of your order
•     Delivery of the ordered goods
•     Inquiries to our suppliers
•     contract negotiations
•     Clarification of all technical aspects of the products and services from the business relationship
•     payments
•     General business correspondence with you

If necessary, your data will be merged and stored with the data of further orders, inquiries and business correspondence that you send us by other means (fax, mail, telephone, etc.).
 
If necessary, we also use the help of service providers, (for example, logistics service providers for shipping products, banks for payment processing). We will only transfer your data to such third parties to the extent necessary for the fulfillment of these tasks (legal basis of the processing is Art. 6 (1) b and f GDPR). Our legitimate interest external service providers, such. Our logistics service provider for the shipment of your ordered goods, is to provide our services as efficiently and effectively as possible and thus for you as quickly and inexpensively as possible. Third parties who receive personal data from our business partners are obliged to comply with the data protection regulations.
 
We reserve the right to pass on your personal data for the conduct of a credit check to external service providers in order to safeguard our legitimate interest in securing our claims (legal basis of the processing is Art. 6 (1) f GDPR). We receive information about your past payment history and credit ratings from these credit bureaus. These data allow us to evaluate our business relationship and are used by us to decide on delivery and to protect against payment defaults. We store your personal data for the duration of our business relationship or according to the statutory retention periods.

2.3 Collection and storage of usage data when visiting our online offers and online information
You can also visit our website without expressly providing personal information. All you need to do is use your full IP address to transfer the data from our website to your device (the legal basis for the processing is Art. 6 para. 1 b and f DSGVO). We store the full IP address for 7 days so that we can initiate defenses and, if necessary, prosecution in the event of attacks on our IT, in order to protect our legitimate interest in our information technology integrity (legal basis for processing is Art. 6 (1) (f) GDPR) true. 

For some service areas of our website, we also require personal data. We use these for our other services described in this privacy policy.

2.4 Our website service providers and partners

2.4.1 External links on our websites:
Insofar as our websites link to the pages of other providers or partners, our privacy policy does not apply to their contents. We have no influence on the compliance with the legal data protection regulations by these third party providers. Information about the privacy of the operators of these pages can be found on the respective websites.

2.4.2 Google Maps
We use maps from Google Maps on the website to help you find your way around. Google Maps is a service of Google Inc. We have no control over this and we do not receive information from Google as to whether you have exchanged map information when visiting our site.
For more information about Google Maps, please see the Google Privacy Policy:
https://policies.google.com/privacy
https://www.google.com/intl/de_de/help/terms_maps.html

2.5 Cookies
You can find our information about cookies under this link:  
http://www.leipziger-leuchten.com/cookies.html

2.6 Contact Forms / Registrations
We offer forms for your registration for various services on our website. In these forms, you may provide us with personal information that we need to provide these services (such as name, first name, email address, contact information, etc.) and use it accordingly. (Legal basis of the processing is Art. 6 para. 1 a, b, f GDPR). Your consent to the processing of the data is obtained during the registration process and reference is made to this privacy policy. We store this data for the duration of our business relationship or according to legal retention periods.

2.7 Direct mail
We use your personal data (such as names and e-mail addresses) that you have provided us with in the registration form or that we save from you as our business partner (see section 3) also for the purpose of addressing for your own advertising purposes, as long as you Use does not contradict. (The legal basis of the processing is Article 6 (1) (a), (b) and (f) GDPR). We would also like to provide you with targeted information (corresponding to your interests and the business relationship). For a contradiction against the use for other direct advertising purposes it is sufficient to send us an e-mail under the address: service@leipziger-leuchten.info.

2.8 Newsletter
If you register for our newsletter by means of a form, you must in particular give us your e-mail address and further contact details  . (The legal basis of the processing is Article 6 (1) (a), (b) and (f) GDPR). If you provide us with further information, such as Call your name, this is done voluntarily. They allow us to address you personally with your name. For the processing of the data, your consent is requested during the registration process and reference is made to this privacy policy. This means that after registering for the newsletter, you will receive an e-mail from us requesting you to confirm your subscription to the newsletter. In the newsletter we inform you about news from our company (product and company news, services, offers, etc.). Your data will be stored for as long as the subscription to the newsletter is active. However, you can unsubscribe at any time from the distribution list of this newsletter via the link contained in each newsletter or by a corresponding message to us - without stating reasons - (service@leipziger-leuchten.info)  (= revocation of your consent)

2.9 E-mail traffic
The Internet is generally considered an insecure medium. Please note, therefore, that we can not guarantee the confidentiality of normal e-mail traffic via the links offered on our homepage and other e-mail addresses of LEIPZIGER LEUCHTEN GmbH. If you wish to encrypt your e-mail traffic with LEIPZIGER LEUCHTEN GmbH, please contact your e-mail contact person directly.

2.10 applications
You will find links to the e-mail address m.rogge@leipziger-leuchten.com in our Job Offers section.You can send unsolicited applications or applications for vacancies to this address. Please note that the e-mail traffic with this address is unencrypted and therefore the confidentiality of your data is not guaranteed. If you wish to encrypt your e-mail traffic, please contact service@leipziger-leuchten.info. We use your application documents to personally contact you to check your suitability for employment at our company and to handle the application process. (The legal basis for the processing is Art. 6 (1) (b), (c) and (f) DSGVO). For this, your application documents are stored in the personnel department and, if necessary, forwarded to the department in question for employment. If we are currently unable to take your application into consideration, we will keep your application documents for 12 months   in order to be able to examine any subsequent consideration. The deletion of your application documents after this deadline takes place, as far as deletion no other legitimate interests of us stand against. Other legitimate interest in this sense, for example, a burden of proof in a procedure under the General Equal Treatment Act (AGG). You can object to this storage by e-mail to the address m.rogge@leipziger-leuchten.com. We will record your application documents in case of an employment relationship in the personnel file and save for the entire duration of the employment relationship as well as statutory retention periods (legal basis of the processing is Art. 6 para. 1 a, b GDPR, § 26 BDSG para 1 n.F.).

2.11 General information on legal bases, data deletion and storage period

2.11.1 General information on legal bases
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis for the processing of personal data. In the processing of personal data necessary for the performance of a contract of which the data subject is a party, Art. 6 para. 1 lit. b GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual actions. Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c GDPR as legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 para. 1 lit. f GDPR as legal basis for processing.

2.11.2 General information on data deletion and storage duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, such storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

2.12. Your rights
If personal data is processed by you, you are i.S.d. GDPR and you have the following rights:

2.12.1 Right to information
On request you will receive free information about your stored data. Their right to information is governed by Art. 15 GDPR.

2.12.2 Right to rectification
You have a right to rectification and / or completion if the personal data you process is incorrect or incomplete.

2.12.3 Right to restriction of processing
You have the right to restrict the processing of your personal data. The conditions and scope of this right are governed by Art. 18 GDPR

2.12.4 Right to cancellation
You have the right to have your data stored with us deleted, provided the prerequisites are met. The requirements and scope of this right are governed by Art. 17 GDPR

2.12.5 Right to information
If you have validly asserted the right of rectification, erasure or restriction of processing to us  , we are obliged to notify all recipients to whom the personal data you have disclosed this rectification or deletion of the data or restriction of processing Unless this proves impossible or involves disproportionate effort.
You have the right to be informed about these recipients.

2.12.6 Right to Data Portability
You have the right to receive personally identifiable information you provide to us in a structured, common and machine-readable and interoperable format. You also have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data. The conditions and scope of this right of data transferability are governed by Art. 20 GDPR

2.12.7 Right to object
You have the right at any time, for reasons arising from your particular situation, against the processing of personal data concerning you, which, pursuant to Art. 6 para. 1 lit. e or f DSGVO takes an objection; this also applies to profiling based on these provisions. We will then no longer process your personal information, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, pursuing or defending legal claims.
If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.

2.12.8 Right to revoke the data protection consent declaration
You have the right to revoke your privacy statement at any time without giving reasons. In the case of withdrawal, we will delete your personal data immediately and stop processing. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. For a revocation please service@leipziger-leuchten.info.

2.12.9 Automated decision on a case-by-case basis including profiling
You have the right not to be subjected to a decision based solely on automated processing - including profiling - that will have legal effect or similarly affect you in a similar manner. The conditions and scope of this right are governed by Art. 22 GDPR

2.12.10 Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its place of residence, employment or the place of the alleged infringement, if you believe that the processing of your personal data is contrary to GDPR violates.

2.13 Further information
We use technical and organizational security measures to protect your personal data from intentional manipulation, loss and unauthorized access. The security measures used are state-of-the-art. Our websites are constantly adapted to the technical development and the needs of us and our users. We therefore reserve the right to amend, supplement and modify this privacy policy at any time as required. Valid is the respective current version, which is published on our homepage.

For further questions please contact:
LEIPZIGER LEUCHTEN GmbH, Heiterblickstraße 37, 04347 Leipzig
Tel.: +49 341 245613-0
E-Mail: datenschutz@leipziger-leuchten.com

Leipzig, 25.05.2018