Data privacy

Data privacy

With the new General Data Protection Regulation (GDPR), which comes into effect on 25 May 2018, personal data will be even better protected. For us, the protection of your data has long been a matter of course. Therefore, we would like to inform you about our updated privacy policy today. We store and process your data primarily for contractual or pre-contractual purposes and to continue providing you with relevant information. Your data will not be shared with third parties for advertising purposes. Of course, you also have the option to object to receiving information at any time. A simple click on the unsubscribe button is all it takes.

1. What is the GDPR?

Unlike its predecessor, the General Data Protection Regulation is a regulation and not a directive. A directive must be implemented into national law by the individual member states of the European Union, whereas a regulation applies directly in all member states as if it were national legislation. The General Data Protection Regulation aims to harmonise data protection standards in all EU member states and focuses on the protection of personal data.

2. Privacy Policy of LEIPZIGER LEUCHTEN GmbH

2.1 General  

For LEIPZIGER LEUCHTEN, the protection of your data has long been a matter  of course. Your data is therefore collected, stored and processed in accordance  with the applicable data protection regulations. We take the security of your  personal data into account in our business processes. Our employees and the  suppliers and service providers commissioned by us have been obliged by us  to maintain confidentiality and to comply with data protection regulations.  This privacy policy explains how we ensure the protection of your personal  data. This privacy policy is based on the General Data Protection Regulation  (GDPR), which has been in force since 25.05.2018. In accordance with the  GDPR, we inform you in this privacy policy of the respective legal basis for the  processing of personal data to which we refer.

2.1.1 Responsible party | Data protection officer  

Responsible party:  LEIPZIGER LEUCHTEN GMBH, Heiterblickstraße 37, 04347 Leipzig  Managing Directors: Jörg Hofmann, Nadine Hofmann  Data Protection Officer:  LEIPZIGER LEUCHTEN GMBH, Heiterblickstraße 37, 04347 Leipzig  E-mail: [entfernte E-Mail-Adresse]  

2.1.2 Personal data  

Personal data is information that relates to an identified or identifiable natural  person. This privacy policy explains how LEIPZIGER LEUCHTEN handles your  personal data.

2.2 Collection, storage and use of personal data of our business partners  

For the processing of business relationships with our business partners (customers,  suppliers, other business partners), we also store personal data from you  (e.g. e-mail address, postal address, telephone number, etc.). The personal  data that we collect for this purpose is used internally by the departments  involved in processing the business relationship. (Legal basis for processing is  Art. 6 para. 1 a, b and f GDPR)  We process your personal data for the purposes necessary for the fulfilment of  the business relationship between you and us, such as:  

  • Creation of offers for customers for deliveries and services  
  • Determination of your individual prices  
  • Internal processing of your order  
  • Delivery of the ordered goods  
  • Inquiries to our suppliers  
  • Contract negotiations  
  • Clarification of all technical aspects of the products and services from the  business relationship  
  • Payment transactions  
  • General business correspondence with you


Your data may be combined and  stored with data from other orders, inquiries and business correspondence  that you send us by other means (fax, post, telephone, etc.). If necessary, we  also use the help of service providers (e.g. logistics service providers for the  shipment of products, banks for payment processing). We will only pass on  your data to such third parties to the extent necessary for the fulfilment of  these tasks (legal basis for processing is Art. 6 para. 1 b and f GDPR). Our legitimate  interest in using external service providers, such as our logistics service  provider for the shipment of your ordered goods, is to provide our services as  efficiently and effectively as possible and thus as quickly and cost-effectively  as possible for you. Third parties who receive personal data from our business  partners are obliged to maintain data protection. We reserve the right to pass  on your personal data to external service providers for the purpose of conducting  a credit check in order to protect our legitimate interest in securing our  claims (legal basis for processing is Art. 6 para. 1 f GDPR). We receive information  from these credit agencies about your previous payment behaviour and  credit assessments. This data enables us to evaluate our business relationship  and is used by us to decide whether to deliver and to protect ourselves against  payment defaults. We store your personal data for the duration of our business  relationship or in accordance with the statutory retention periods.  

2.3 Collection and storage of usage data when visiting our online offers and  online information

You can visit our website without explicitly providing personal  data. Only the use of your complete IP address is required to transmit the  data you have requested from our website to your end device (legal basis for  processing is Art. 6 para. 1 b and f GDPR). We store the complete IP address  for 7 days so that we can take defensive measures in the event of attacks on  our IT system and, if necessary, initiate criminal proceedings in order to protect  our legitimate interest in our IT integrity (legal basis for processing is Art. 6  para. 1 f GDPR).  For some service areas of our website, we also require personal data. We use  this data for our other services for you described in this privacy policy.  

2.4 Our website service providers and partners  

2.4.1 External links on our websites  

If our websites contain links to the sites of other providers or partners, our  privacy policy does not apply to their content. We have no influence on the  compliance of these third-party providers with legal data protection regulations.  Information about the data protection of the operators of these sites can  be found on the respective websites.  

2.4.2 Google Maps  

We use Google Maps on our website to make it easier for you to find your  way around. Google Maps is a service of Google Inc. We have no control over  this and do not receive any information from Google as to whether you have  exchanged any map information when visiting our site.  For more information about Google Maps, please see Google‘s privacy policy:  https://policies.google.com/privacy  https://www.google.com/intl/de_de/help/terms_maps.html  

2.5 Cookies  

You can find our information on the subject of cookies under this link:  http://www.leipziger-leuchten.com/cookies.html

2.6 Contact forms | Registrations  

We offer forms on our website for your registration for various services. In  these forms you can provide us with personal data that we need to provide  these services (e.g. name, first name, e-mail address, contact details, etc.) and  use accordingly. (Legal basis for processing is Art. 6 para. 1 a, b, f GDPR). Your  consent is obtained for the processing of the data within the framework of the  registration process and reference is made to this privacy policy. This means  that after you register for the newsletter, you will receive an e-mail from us  asking you to confirm your newsletter order. In the newsletter we inform you  about news from our company (product and company news, services, offers,  etc.). Your data will be stored for as long as the newsletter subscription is  active. However, you can unsubscribe from this newsletter at any time via the  link contained in each newsletter or by sending us a corresponding message  - without giving reasons - (service@leipziger-leuchten.com) (= revocation of  your consent)  

2.7 Direct marketing  

We also use your personal data (such as name and e-mail address) that you  have provided to us in the registration form or that we have stored from you  as our business partner (see section 3) for our own advertising purposes, as  long as you do not object to the use. (Legal basis for processing is Art. 6 para.  1 a, b and f GDPR). In this way, we would also like to provide you with targeted  information (corresponding to your interests and the business relationship). To  object to the use for other direct marketing purposes, simply send us an email  to service@leipziger-leuchten.com.  

2.8 Newsletter  

If you register for our newsletter using the form, you must provide us with your  email address and other contact details. (Legal basis for processing is Art. 6  para. 1 a, b and f GDPR). If you provide us with further information, such as  your name, this is voluntary. This allows us to address you personally by name.  Your consent is obtained for the processing of the data within the framework  of the registration process and reference is made to this privacy policy. This  means that after you register for the newsletter, you will receive an email from  us asking you to confirm your newsletter order. In the newsletter we inform you  about news from our company (product and company news, services, offers,  etc.). Your data will be stored for as long as the newsletter subscription is  active. However, you can unsubscribe from this newsletter at any time via the  link contained in each newsletter or by sending us a corresponding message  - without giving reasons - (service@leipziger-leuchten.com) (= revocation of  your consent)  

2.9 Email Traffic  

The internet is generally considered an insecure medium. Please note that we  cannot guarantee the confidentiality of normal email traffic via the links offered  on our homepage or via other email addresses of LEIPZIGER LEUCHTEN GmbH.  If you wish to encrypt your email traffic with LEIPZIGER LEUCHTEN GmbH,  please contact your email contacts directly.  

2.10 Applications  

In our job offers section, you will find links to the email address [entfernte  E-Mail-Adresse]. You can send unsolicited applications or applications for  advertised positions to this address. Please note that email traffic to this address  is unencrypted and therefore the confidentiality of your data cannot be  guaranteed. If you wish to encrypt your email traffic, please contact service@  leipziger-leuchten.com. We use your application documents to contact you  personally, to assess your suitability for employment in our company and to  process the application process. (Legal basis for processing is Art. 6 para. 1 b,  c and f GDPR). For this purpose, your application documents will be stored in  the HR department and, if necessary, forwarded to the relevant department  responsible for recruitment. If we are unable to consider your application at  this time, we will store your application documents for 12 months in order to be  able to consider a later application. Your application documents will be deleted  after this period, unless we have a legitimate interest in retaining them. A  legitimate interest in this sense is, for example, a duty of proof in proceedings  under the General Equal Treatment Act (AGG). You can object to this storage  by sending an email to [entfernte E-Mail-Adresse]. In the event of an employment  relationship, we will include your application documents in your personnel  file and store them for the entire duration of the employment relationship and  for any additional statutory retention periods (legal basis for processing is Art.  6 para. 1 a, b GDPR, § 26 BDSG Abs. 1 n.F.).  Absolutely! Here‘s a translation of the German text into English, with a focus on  maintaining the legal and technical accuracy of the original:  

2.11 General Information on Legal Basis, Data Deletion and Storage Duration  

2.11.1 General Information on the Legal Basis  

Insofar as we obtain the consent of the data subject for the processing of personal  data, Art. 6 para. 1 lit. a GDPR serves as the legal basis for the processing  of personal data. In the processing of personal data that is necessary for the  performance of a contract to which the data subject is a party, Art. 6 para. 1 lit.  b GDPR serves as the legal basis. This also applies to processing operations  that are necessary for the implementation of pre-contractual measures. Insofar  as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal  basis. If the processing is necessary to safeguard a legitimate interest of our  company or a third party and if the interests, fundamental rights and freedoms  of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f  GDPR serves as the legal basis for the processing.  

2.11.2 General Information on Data Deletion and Storage Duration  

The personal data of the data subject will be deleted or blocked as soon as  the purpose of storage ceases to exist. Storage may also take place if this  has been provided for by the European or national legislator in EU regulations,  laws or other provisions to which the controller is subject. The data will also  be blocked or deleted if a storage period prescribed by the aforementioned  standards expires, unless there is a need for further storage of the data for the  conclusion or fulfillment of a contract.  

2.12 Your Rights  

If personal data is processed by us, you are a data subject within the meaning  of the GDPR and you have the following rights:  

2.12.1 Right to Access Information  

Upon request, you will receive information free of charge about your data stored  by us. Your right to access information is governed by Art. 15 GDPR.  

2.12.2 Right to Rectification  

You have the right to have incorrect or incomplete personal data concerning  you rectified.  

2.12.3 Right to Restriction of Processing  

You have the right to restrict the processing of your personal data. The requirements  and scope of this right are governed by Art. 18 GDPR.  

2.12.4 Right to Erasure  

You have the right to have your data stored by us deleted, provided the requirements  are met. The requirements and scope of this right are governed by  Art. 17 GDPR.  

2.12.5 Right to Notification  

If you have successfully asserted your right to rectification, erasure or restriction  of processing against us, we are obliged to notify all recipients to whom  your personal data has been disclosed of this rectification or erasure of data or  restriction of processing, unless this proves impossible or involves disproportionate  effort. You have the right to be informed about these recipients.  

2.12.6 Right to Data Portability  

You have the right to receive the personal data concerning you, which you  have provided to us, in a structured, commonly used and machine-readable  format. You also have the right to transmit this data to another controller  without hindrance from the controller to whom the personal data has been  provided. The requirements and scope of this right to data portability are  governed by Art. 20 GDPR.  

2.12.7 Right to Object  

You have the right to object, on grounds relating to your particular situation, at  any time to the processing of personal data concerning you which is based on  Art. 6 para. 1 lit. e or f GDPR, including profiling based on these provisions. We  will then no longer process the personal data concerning you unless we can  demonstrate compelling legitimate grounds for the processing which override  your interests, rights and freedoms or the processing serves to assert, exercise  or defend legal claims.  If the personal data concerning you are processed for direct marketing purposes,  you have the right to object at any time to the processing of personal data  concerning you for the purpose of such marketing; this also applies to profiling  insofar as it is related to such direct marketing. If you object to the processing  for direct marketing purposes, the personal data concerning you will no  longer be processed for these purposes. You have the possibility to exercise  your right to object in the context of the use of information society services,  and regardless of Directive 2002/58/EC, by automated means using technical  specifications.  

2.12.8 Right to Withdraw Data Protection Consent  

You have the right to withdraw your data protection consent declaration at  any time without giving reasons. In the event of withdrawal, we will delete your  personal data immediately and no longer process it. The withdrawal of consent  shall not affect the lawfulness of processing based on consent before its  withdrawal. Please contact service@leipziger-leuchten.com to withdraw your  consent.

2.12.9 Automated Individual Decision-making, Including Profiling  

You have the right not to be subject to a decision based solely on automated  processing, including profiling, which produces legal effects concerning you or  similarly significantly affects you. The requirements and scope of this right are  governed by Art. 22 GDPR.  

2.12.10 Right to Lodge a Complaint with a Supervisory Authority  

Without prejudice to any other administrative or judicial remedy, you have  the right to lodge a complaint with a supervisory authority, in particular in the  Member State of your residence, place of work or place of the alleged infringement,  if you consider that the processing of personal data concerning you  infringes the GDPR.  

2.13 Further Information  

We use technical and organizational security measures to protect your personal  data from intentional manipulation, loss and unauthorized access. The  security measures used correspond to the latest state of the art. Our websites  are constantly adapted to the technical development and the needs of us and  our users. We therefore reserve the right to adapt, supplement and change this  data protection declaration at any time. The current version, which is published  on our homepage, is valid.

 

For further questions, please contact

LEIPZIGER LEUCHTEN GmbH, Heiterblickstraße 37, 04347 Leipzig
Tel.: +49 341 245613-0
E-Mail: datenschutz@leipziger-leuchten.com

 

Bei weiteren Fragen wenden Sie sich bitte an

LEIPZIGER LEUCHTEN GmbH, Heiterblickstraße 37, 04347 Leipzig
Tel.: +49 341 245613-0
E-Mail: datenschutz@leipziger-leuchten.com