Data privacy

With the new General Data Protection Regulation (GDPR), which comes into effect on 25 May 2018, personal data will be even better protected. For us, the protection of your data has long been a matter of course. Therefore, we would like to inform you about our updated privacy policy today. We store and process your data primarily for contractual or pre-contractual purposes and to continue providing you with relevant information. Your data will not be shared with third parties for advertising purposes. Of course, you also have the option to object to receiving information at any time. A simple click on the unsubscribe button is all it takes.
1. What is the GDPR?
Unlike its predecessor, the General Data Protection Regulation is a regulation and not a directive. A directive must be implemented into national law by the individual member states of the European Union, whereas a regulation applies directly in all member states as if it were national legislation. The General Data Protection Regulation aims to harmonise data protection standards in all EU member states and focuses on the protection of personal data.
2. Privacy Policy of LEIPZIGER LEUCHTEN GmbH
2.1 General
For LEIPZIGER LEUCHTEN, the protection of your data has long been a matter of course. Your data is therefore collected, stored and processed in accordance with the applicable data protection regulations. We take the security of your personal data into account in our business processes. Our employees and the suppliers and service providers commissioned by us have been obliged by us to maintain confidentiality and to comply with data protection regulations. This privacy policy explains how we ensure the protection of your personal data. This privacy policy is based on the General Data Protection Regulation (GDPR), which has been in force since 25.05.2018. In accordance with the GDPR, we inform you in this privacy policy of the respective legal basis for the processing of personal data to which we refer.
2.1.1 Responsible party | Data protection officer
Responsible party: LEIPZIGER LEUCHTEN GMBH, Heiterblickstraße 37, 04347 Leipzig Managing Directors: Jörg Hofmann, Nadine Hofmann Data Protection Officer: LEIPZIGER LEUCHTEN GMBH, Heiterblickstraße 37, 04347 Leipzig E-mail: [entfernte E-Mail-Adresse]
2.1.2 Personal data
Personal data is information that relates to an identified or identifiable natural person. This privacy policy explains how LEIPZIGER LEUCHTEN handles your personal data.
2.2 Collection, storage and use of personal data of our business partners
For the processing of business relationships with our business partners (customers, suppliers, other business partners), we also store personal data from you (e.g. e-mail address, postal address, telephone number, etc.). The personal data that we collect for this purpose is used internally by the departments involved in processing the business relationship. (Legal basis for processing is Art. 6 para. 1 a, b and f GDPR) We process your personal data for the purposes necessary for the fulfilment of the business relationship between you and us, such as:
- Creation of offers for customers for deliveries and services
- Determination of your individual prices
- Internal processing of your order
- Delivery of the ordered goods
- Inquiries to our suppliers
- Contract negotiations
- Clarification of all technical aspects of the products and services from the business relationship
- Payment transactions
- General business correspondence with you
Your data may be combined and stored with data from other orders, inquiries and business correspondence that you send us by other means (fax, post, telephone, etc.). If necessary, we also use the help of service providers (e.g. logistics service providers for the shipment of products, banks for payment processing). We will only pass on your data to such third parties to the extent necessary for the fulfilment of these tasks (legal basis for processing is Art. 6 para. 1 b and f GDPR). Our legitimate interest in using external service providers, such as our logistics service provider for the shipment of your ordered goods, is to provide our services as efficiently and effectively as possible and thus as quickly and cost-effectively as possible for you. Third parties who receive personal data from our business partners are obliged to maintain data protection. We reserve the right to pass on your personal data to external service providers for the purpose of conducting a credit check in order to protect our legitimate interest in securing our claims (legal basis for processing is Art. 6 para. 1 f GDPR). We receive information from these credit agencies about your previous payment behaviour and credit assessments. This data enables us to evaluate our business relationship and is used by us to decide whether to deliver and to protect ourselves against payment defaults. We store your personal data for the duration of our business relationship or in accordance with the statutory retention periods.
2.3 Collection and storage of usage data when visiting our online offers and online information
You can visit our website without explicitly providing personal data. Only the use of your complete IP address is required to transmit the data you have requested from our website to your end device (legal basis for processing is Art. 6 para. 1 b and f GDPR). We store the complete IP address for 7 days so that we can take defensive measures in the event of attacks on our IT system and, if necessary, initiate criminal proceedings in order to protect our legitimate interest in our IT integrity (legal basis for processing is Art. 6 para. 1 f GDPR). For some service areas of our website, we also require personal data. We use this data for our other services for you described in this privacy policy.
2.4 Our website service providers and partners
2.4.1 External links on our websites
If our websites contain links to the sites of other providers or partners, our privacy policy does not apply to their content. We have no influence on the compliance of these third-party providers with legal data protection regulations. Information about the data protection of the operators of these sites can be found on the respective websites.
2.4.2 Google Maps
We use Google Maps on our website to make it easier for you to find your way around. Google Maps is a service of Google Inc. We have no control over this and do not receive any information from Google as to whether you have exchanged any map information when visiting our site. For more information about Google Maps, please see Google‘s privacy policy: https://policies.google.com/privacy https://www.google.com/intl/de_de/help/terms_maps.html
2.5 Cookies
You can find our information on the subject of cookies under this link: http://www.leipziger-leuchten.com/cookies.html
2.6 Contact forms | Registrations
We offer forms on our website for your registration for various services. In these forms you can provide us with personal data that we need to provide these services (e.g. name, first name, e-mail address, contact details, etc.) and use accordingly. (Legal basis for processing is Art. 6 para. 1 a, b, f GDPR). Your consent is obtained for the processing of the data within the framework of the registration process and reference is made to this privacy policy. This means that after you register for the newsletter, you will receive an e-mail from us asking you to confirm your newsletter order. In the newsletter we inform you about news from our company (product and company news, services, offers, etc.). Your data will be stored for as long as the newsletter subscription is active. However, you can unsubscribe from this newsletter at any time via the link contained in each newsletter or by sending us a corresponding message - without giving reasons - (service@leipziger-leuchten.com) (= revocation of your consent)
2.7 Direct marketing
We also use your personal data (such as name and e-mail address) that you have provided to us in the registration form or that we have stored from you as our business partner (see section 3) for our own advertising purposes, as long as you do not object to the use. (Legal basis for processing is Art. 6 para. 1 a, b and f GDPR). In this way, we would also like to provide you with targeted information (corresponding to your interests and the business relationship). To object to the use for other direct marketing purposes, simply send us an email to service@leipziger-leuchten.com.
2.8 Newsletter
If you register for our newsletter using the form, you must provide us with your email address and other contact details. (Legal basis for processing is Art. 6 para. 1 a, b and f GDPR). If you provide us with further information, such as your name, this is voluntary. This allows us to address you personally by name. Your consent is obtained for the processing of the data within the framework of the registration process and reference is made to this privacy policy. This means that after you register for the newsletter, you will receive an email from us asking you to confirm your newsletter order. In the newsletter we inform you about news from our company (product and company news, services, offers, etc.). Your data will be stored for as long as the newsletter subscription is active. However, you can unsubscribe from this newsletter at any time via the link contained in each newsletter or by sending us a corresponding message - without giving reasons - (service@leipziger-leuchten.com) (= revocation of your consent)
2.9 Email Traffic
The internet is generally considered an insecure medium. Please note that we cannot guarantee the confidentiality of normal email traffic via the links offered on our homepage or via other email addresses of LEIPZIGER LEUCHTEN GmbH. If you wish to encrypt your email traffic with LEIPZIGER LEUCHTEN GmbH, please contact your email contacts directly.
2.10 Applications
In our job offers section, you will find links to the email address [entfernte E-Mail-Adresse]. You can send unsolicited applications or applications for advertised positions to this address. Please note that email traffic to this address is unencrypted and therefore the confidentiality of your data cannot be guaranteed. If you wish to encrypt your email traffic, please contact service@ leipziger-leuchten.com. We use your application documents to contact you personally, to assess your suitability for employment in our company and to process the application process. (Legal basis for processing is Art. 6 para. 1 b, c and f GDPR). For this purpose, your application documents will be stored in the HR department and, if necessary, forwarded to the relevant department responsible for recruitment. If we are unable to consider your application at this time, we will store your application documents for 12 months in order to be able to consider a later application. Your application documents will be deleted after this period, unless we have a legitimate interest in retaining them. A legitimate interest in this sense is, for example, a duty of proof in proceedings under the General Equal Treatment Act (AGG). You can object to this storage by sending an email to [entfernte E-Mail-Adresse]. In the event of an employment relationship, we will include your application documents in your personnel file and store them for the entire duration of the employment relationship and for any additional statutory retention periods (legal basis for processing is Art. 6 para. 1 a, b GDPR, § 26 BDSG Abs. 1 n.F.). Absolutely! Here‘s a translation of the German text into English, with a focus on maintaining the legal and technical accuracy of the original:
2.11 General Information on Legal Basis, Data Deletion and Storage Duration
2.11.1 General Information on the Legal Basis
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis for the processing of personal data. In the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.
2.11.2 General Information on Data Deletion and Storage Duration
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to exist. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
2.12 Your Rights
If personal data is processed by us, you are a data subject within the meaning of the GDPR and you have the following rights:
2.12.1 Right to Access Information
Upon request, you will receive information free of charge about your data stored by us. Your right to access information is governed by Art. 15 GDPR.
2.12.2 Right to Rectification
You have the right to have incorrect or incomplete personal data concerning you rectified.
2.12.3 Right to Restriction of Processing
You have the right to restrict the processing of your personal data. The requirements and scope of this right are governed by Art. 18 GDPR.
2.12.4 Right to Erasure
You have the right to have your data stored by us deleted, provided the requirements are met. The requirements and scope of this right are governed by Art. 17 GDPR.
2.12.5 Right to Notification
If you have successfully asserted your right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
2.12.6 Right to Data Portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data has been provided. The requirements and scope of this right to data portability are governed by Art. 20 GDPR.
2.12.7 Right to Object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR, including profiling based on these provisions. We will then no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims. If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. You have the possibility to exercise your right to object in the context of the use of information society services, and regardless of Directive 2002/58/EC, by automated means using technical specifications.
2.12.8 Right to Withdraw Data Protection Consent
You have the right to withdraw your data protection consent declaration at any time without giving reasons. In the event of withdrawal, we will delete your personal data immediately and no longer process it. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Please contact service@leipziger-leuchten.com to withdraw your consent.
2.12.9 Automated Individual Decision-making, Including Profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. The requirements and scope of this right are governed by Art. 22 GDPR.
2.12.10 Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
2.13 Further Information
We use technical and organizational security measures to protect your personal data from intentional manipulation, loss and unauthorized access. The security measures used correspond to the latest state of the art. Our websites are constantly adapted to the technical development and the needs of us and our users. We therefore reserve the right to adapt, supplement and change this data protection declaration at any time. The current version, which is published on our homepage, is valid.
For further questions, please contact
LEIPZIGER LEUCHTEN GmbH, Heiterblickstraße 37, 04347 Leipzig
Tel.: +49 341 245613-0
E-Mail: datenschutz@leipziger-leuchten.com
Bei weiteren Fragen wenden Sie sich bitte an
LEIPZIGER LEUCHTEN GmbH, Heiterblickstraße 37, 04347 Leipzig
Tel.: +49 341 245613-0
E-Mail: datenschutz@leipziger-leuchten.com