Privacy Policy
Personal data (hereinafter mostly referred to as "data") are processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered therein, in accordance with Art. 6(1)(f) GDPR.
According to Article 4, point 1 of Regulation (EU) 2016/679, i.e., the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
With the following privacy policy, we inform you in particular about the nature, scope, purpose, duration, and legal basis of the processing of personal data according to §§ 13 and 15 GDPR. Furthermore, we inform you below about the third-party components used by us for optimization purposes and to enhance the quality of use, insofar as third parties process data under their own responsibility according to § 15 GDPR.
Our privacy policy is structured as follows:
- Information about us as the Controller
II. Rights of Users and Data Subjects
III. Information on Data Processing - Information about us as the Controller
The controller responsible for this website in terms of data protection law is:
Begleitlichter GmbH & Co. KG
Straßburger Platz 9
30853 Langenhagen
Phone: 0511 54 53 51 00
Fax: 0511 37 19 38
Email: datenschutz [at] begleitlichter.de
The Data Protection Officer is:
Nicola Pilotto
Phone: 0 511 545 35 107
Email: datenschutz [at] begleitlichter.de
Rights of Users and Data Subjects
With regard to the data processing described in more detail below, users and data subjects have the right
- to confirmation as to whether data concerning them is being processed, to information about the processed data, to further information about data processing, and to copies of the data (cf. also Art. 15 GDPR);
- to the rectification or completion of inaccurate or incomplete data (cf. also Art. 16 GDPR);
- to the immediate erasure of data concerning them (cf. also Art. 17 GDPR), or, alternatively, insofar as further processing is necessary pursuant to Art. 17(3) GDPR, to the restriction of processing in accordance with Art. 18 GDPR;
- to receive the data concerning them and provided by them, and to transmit this data to other providers/controllers (cf. also Art. 20 GDPR);
- to lodge a complaint with the supervisory authority if they believe that their data is being processed by the provider in violation of data protection regulations (cf. also Art. 77 GDPR).
Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider about any rectification or erasure of data or restriction of processing carried out pursuant to Articles 16, 17(1), 18 GDPR. However, this obligation does not apply if such communication is impossible or involves disproportionate effort. Notwithstanding this, the user has the right to be informed about these recipients.
Under no circumstances will data be passed on to third parties without informing the data subject or without their consent. Digital profiling or other forms of digital evaluation of the data subject and their data are categorically excluded when processing personal data.
Furthermore, users and data subjects have the right, pursuant to Art. 21 GDPR, to object to the future processing of their data, provided that the data is processed by the provider in accordance with Art. 6 para. 1 lit. f) GDPR. In particular, an objection to data processing for direct marketing purposes is permissible.
III. Information on Data Processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, provided that no legal retention obligations prevent the deletion of the data, and no other information regarding individual processing procedures is provided below.
Webflow (Hosting and Content Delivery Network)
Our website is hosted via the service "Webflow". The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA.
Webflow provides the infrastructure for operating our website (hosting, content delivery network, content storage). When you access our website, data is automatically collected by Webflow and stored in so-called server log files. This may include, in particular:
- IP address
- Date and time of access
- Browser type and version
- Operating system
- Referrer URL
- pages accessed
This data is technically necessary to deliver the website correctly and to ensure its stability and security.
Legal Basis for processing is Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and efficient operation of our website).
Data may also be processed on servers in the USA. Webflow is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection.
For more information on data protection at Webflow, please visit:
https://webflow.com/legal/privacy
Cookies
a) Session Cookies
Our website uses so-called cookies. Cookies are small text files or other storage technologies that are placed and stored on your device by the internet browser you use. Through these cookies, certain information about you, such as your browser or location data or your IP address, is processed to an individual extent.
This processing makes our website more user-friendly, effective, and secure, as it enables, for example, the display of our website in different languages or the offering of a shopping cart function.
The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR, provided that these cookies process data for contract initiation or execution.
If the processing does not serve the initiation or execution of a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 para. 1 lit. f) GDPR.
These session cookies are deleted when you close your internet browser.
b) Third-Party Cookies
If applicable, our website also uses cookies from partner companies with whom we collaborate for advertising, analysis, or the functionalities of our website.
For details on this, especially regarding the purposes and legal bases for processing such third-party cookies, please refer to the following information.
c) Removal Option
You can prevent or restrict the installation of cookies by adjusting your internet browser settings. You can also delete already stored cookies at any time. However, the necessary steps and measures for this depend on the specific internet browser you are using. If you have questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. For so-called Flash cookies, however, processing cannot be prevented via browser settings. Instead, you must change the settings of your Flash player. The necessary steps and measures for this also depend on the specific Flash player you are using. If you have questions, please use the help function or documentation of your Flash player or contact its manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may result in not all functions of our website being fully usable.
Contact Inquiries / Contact Options
If you contact us via the contact form or email, the data you provide will be used to process your inquiry. Providing this data is necessary to process and respond to your inquiry – without it, we may not be able to answer your inquiry, or only to a limited extent.
The legal basis for this processing is Art. 6 para. 1 lit. a and b) GDPR.
Your data will be deleted once your request has been fully answered and provided that no legal retention obligations prevent deletion, such as in the case of any subsequent contract processing.
Online Job Applications / Posting Job Ads
We offer you the opportunity to apply to us via our website. For these digital applications, your applicant and application data will be electronically collected and processed by us for the purpose of handling the application process.
The legal basis for this processing is § 26 para. 1 sentence 1 BDSG in conjunction with Art. 88 para. 1 GDPR.
If an employment contract is concluded after the application process, we will store the data you submitted during your application in your personnel file for the purpose of the usual organizational and administrative process – naturally, in compliance with the further legal obligations under §6.1b GDPR.
The legal basis for this processing is also § 26 para. 1 sentence 1 BDSG in conjunction with Art. 88 para. 1 GDPR.
If an application is rejected, we automatically delete the data submitted to us two months after the rejection is announced. However, deletion does not occur if legal provisions, for example, due to evidentiary obligations under the AGG (General Equal Treatment Act), require longer storage of up to four months or until the conclusion of legal proceedings.
The legal basis in this case is Art. 6 para. 1 lit. e GDPR and § 24 para. 1 no. 2 BDSG. Our legitimate interest lies in the defense or enforcement of legal claims.
If you expressly consent to a longer storage of your data, for example, for inclusion in an applicant or prospect database, the data will be further processed based on your consent. The legal basis is then Art. 6 para. 1 lit. a) GDPR. However, you can, of course, revoke your consent at any time with effect for the future by notifying us in accordance with Art. 7 para. 3 GDPR.
Server Data
For technical reasons, particularly to ensure a secure and stable website, data is transmitted by your internet browser to us or our webspace provider. These so-called server log files collect, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our website (referrer URL), the website(s) of our website that you visit, the date and time of each access, and the IP address of the internet connection from which our website is used.
The data collected in this way is temporarily stored, but not together with any other data from you.
This storage is based on the legal grounds of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in improving the stability, functionality, and security of our website.
The data will be deleted after seven days at the latest, unless further retention for evidentiary purposes is required. Otherwise, the data will be wholly or partially exempt from deletion until an incident is finally resolved.
To promote our products and services and to communicate with prospective customers or clients, we maintain a company presence on the Facebook platform.
On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Facebook's data protection officer can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated the joint responsibility in an agreement regarding the respective obligations under the GDPR. This agreement, which sets out the mutual obligations, can be accessed via the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the processing of personal data, as detailed below, is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication, sales, and promotion of our products and services.
The legal basis may also be the user's consent in accordance with Art. 6 para. 1 lit. a GDPR given to the platform operator. The user can revoke this consent at any time for the future, in accordance with Art. 7 para. 3 GDPR, by notifying the platform operator.
When you access our online presence on the Facebook platform, user data (e.g., personal information, IP address, etc.) is processed by Facebook Ireland Ltd., as the platform operator in the EU.
This user data is used for statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes, as well as for creating user profiles. Based on these profiles, Facebook Ireland Ltd. can, for example, target users with interest-based advertising both within and outside of Facebook. If the user is logged into their Facebook account at the time of access, Facebook Ireland Ltd. can also link the data to the respective user account.
If the user contacts us via Facebook, the personal data entered on this occasion will be used to process the inquiry. The user's data will be deleted by us once the inquiry has been definitively answered and no legal retention obligations, such as those arising from subsequent contract processing, prevent deletion.
Facebook Ireland Ltd. may also set cookies for data processing purposes.
If the user does not agree with this processing, it is possible to prevent the installation of cookies by adjusting the browser settings accordingly. Already stored cookies can also be deleted at any time. The settings for this depend on the respective browser. For Flash cookies, processing cannot be prevented via browser settings, but rather through the appropriate setting of the Flash player. If the user prevents or restricts the installation of cookies, this may result in not all Facebook functions being fully usable.
More details on the processing activities, how to prevent them, and the deletion of data processed by Facebook can be found in Facebook's Data Policy:
https://www.facebook.com/privacy/explanation
It cannot be ruled out that processing by Meta Platforms Ireland Limited may also occur via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
To promote our products and services and to communicate with interested parties or customers, we maintain a company presence on the Instagram platform.
On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Instagram's data protection officer can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have defined our joint responsibility in an agreement concerning the respective obligations under the GDPR. This agreement, which sets out the mutual obligations, can be accessed via the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the processing of personal data, as detailed below, is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication, sales, and promotion of our products and services.
The legal basis may also be the user's consent in accordance with Art. 6 para. 1 lit. a GDPR given to the platform operator. The user can revoke this consent at any time for the future by notifying the platform operator, in accordance with Art. 7 para. 3 GDPR.
When you access our online presence on the Instagram platform, Facebook Ireland Ltd., as the platform operator in the EU, processes user data (e.g., personal information, IP address, etc.).
This user data is used for statistical information about the use of our company's presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes, as well as for creating user profiles. Based on these profiles, Facebook Ireland Ltd. can, for example, target users with interest-based advertising both within and outside of Instagram. If the user is logged into their Instagram account at the time of access, Facebook Ireland Ltd. can also link the data to the respective user account.
If the user contacts us via Instagram, the personal data provided on this occasion will be used to process the request. The user's data will be deleted by us once the user's request has been fully answered and no legal retention obligations, such as those arising from subsequent contract processing, prevent deletion.
Facebook Ireland Ltd. may also set cookies for data processing.
If the user does not agree with this processing, it is possible to prevent the installation of cookies by adjusting the browser settings accordingly. Already stored cookies can also be deleted at any time. The settings for this depend on the respective browser. For Flash cookies, processing cannot be prevented via browser settings but through the appropriate Flash Player settings. If the user prevents or restricts the installation of cookies, this may result in not all Facebook functions being fully usable.
Further details on processing activities, how to prevent them, and how to delete data processed by Instagram can be found in Instagram's Data Policy:
https://help.instagram.com/519522125107875
It cannot be ruled out that processing by Facebook Ireland Ltd. also takes place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
YouTube
We maintain an online presence on YouTube to present our company and services and to communicate with customers/interested parties. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
Data protection between the USA and the EU is regulated and guaranteed from 2023 by the EU-US Data Privacy Framework (DPF 07.10.2023).
We therefore point out that user data may be processed outside the European Union, particularly in the USA. This may entail increased risks for users, for example, making subsequent access to user data more difficult. We also do not have access to this user data. Access is exclusively controlled by YouTube.
You can find YouTube's privacy policy at
https://policies.google.com/privacy
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Privacy Policy: https://www.facebook.com/policy.php
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Privacy Policy: https://help.instagram.com/519522125107875
YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA
Privacy Policy: https://policies.google.com/privacy
Facebook Social Plug-in
On our website, we use the plug-in of the social network Facebook. Facebook is an internet service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
If you have given your consent for this processing, the legal basis is Art. 6 para. 1 lit. a GDPR. The legal basis may also be Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in improving the quality of our website.
Further information on the possible plug-ins and their respective functions is provided by Facebook at
https://developers.facebook.com/docs/plugins/
available for you.
If the plug-in is embedded on one of the pages of our website that you visit, your internet browser downloads a representation of the plug-in from Facebook's servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. In addition, the date and time of your visit to our website are also recorded.
If you are logged into Facebook while visiting one of our web pages equipped with the plug-in, the information about your specific visit collected by the plug-in will be recognized by Facebook. Facebook may associate the information thus collected with your personal user account there. For example, if you use the so-called "Like" button from Facebook, this information will be stored in your Facebook user account and possibly published via the Facebook platform. If you wish to prevent this, you must either log out of Facebook before visiting our website or prevent the Facebook plug-in from loading by using an add-on for your internet browser.
Further information on the collection and use of data, as well as your related rights and protection options, is provided by Facebook in the
https://www.facebook.com/policy.php
accessible privacy notices.
Google Analytics
On our website, we use Google Analytics. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our website.
User and usage-related information, such as IP address, location, time, or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. This function ensures that Google truncates the IP address within the EU or EEA.
Data protection between the USA and the EU is regulated and guaranteed by the EU-US Data Privacy Framework (DPF 07.10.2023) starting in 2023.
The data collected in this way is then used by Google to provide us with an analysis of visits to our website and user activities there. This data can also be used to provide additional services related to the use of our website and the internet.
Google states that it does not link your IP address with other data. Furthermore, Google maintains at
https://www.google.com/intl/de/policies/privacy/partners
further data protection information for you, for example, regarding options to prevent data usage.
In addition, Google provides at
https://tools.google.com/dlpage/gaoptout?hl=de
a so-called deactivation add-on along with further information on this. This add-on can be installed with common internet browsers and offers you further control over the data that Google collects when you access our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services. You can, of course, also find out whether and which other web analytics services we use in this privacy policy.
Google Fonts
On our website, we use Google Fonts to display external fonts. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when you access our website.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in optimizing and economically operating our website.
When you access our website, the connection established with Google allows Google to determine from which website your request was sent and to which IP address the font display should be transmitted.
Google provides at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
further information, particularly regarding options for preventing data use.
Google reCAPTCHA
On our website, we use Google reCAPTCHA to verify and prevent interactions on our website by automated access, e.g., by so-called bots. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
Through this service, Google can determine from which website a request is sent and from which IP address you are using the reCAPTCHA input box. In addition to your IP address, Google may collect further information necessary for the provision and guarantee of this service.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the security of our website and in preventing unwanted, automated access in the form of spam or similar.
Google provides under
https://policies.google.com/privacy
further information on the general handling of your user data.
Google Maps
On our website, we use Google Maps to display our location and provide directions. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when you access our website.
If you access the Google Maps component integrated into our website, Google stores a cookie on your device via your internet browser. To display our location and generate directions, your user settings and data are processed. We cannot rule out that Google uses servers in the USA for this purpose.
If you have given your consent for this processing, the legal basis is Art. 6 para. 1 lit. a GDPR. The legal basis may also be Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in optimizing the functionality of our website.
The connection established with Google allows Google to determine from which website your request was sent and to which IP address the directions should be transmitted.
If you do not agree with this processing, you have the option to prevent the installation of cookies by adjusting the corresponding settings in your internet browser. Details on this can be found above under "Cookies".
Additionally, the use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Service https://policies.google.com/terms?gl=DE&hl=de and the Google Maps/Google Earth Additional Terms of Service https://www.google.com/intl/de_de/help/terms_maps.html.
Furthermore, Google offers under
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
further information.
YouTube
On our website, we use YouTube. This is a video portal provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "YouTube".
We use YouTube in conjunction with the "Enhanced Privacy Mode" feature to display videos to you. If you have given your consent for this processing, the legal basis is Art. 6 para. 1 lit. a GDPR. The legal basis can also be Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the "Enhanced Privacy Mode" feature ensures that the data described in more detail below is only transmitted to YouTube's server if you actually start a video.
Without this "Enhanced Privacy" mode, a connection to YouTube's server in the USA will be established as soon as you access one of our web pages that has a YouTube video embedded.
This connection is necessary to display the respective video on our website via your internet browser. In the course of this, YouTube will at least collect and process your IP address, the date and time, and the website you visited. Furthermore, a connection to Google's "DoubleClick" advertising network will be established.
If you are logged into YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you wish to prevent this, you must either log out of YouTube before visiting our website or adjust the corresponding settings in your YouTube user account.
For functionality and to analyze user behavior, YouTube permanently stores cookies on your device via your internet browser. If you do not agree with this processing, you have the option to prevent the storage of cookies by adjusting your internet browser settings. Further information on this can be found above under "Cookies".
Further information on the collection and use of data, as well as your rights and protection options in this regard, Google provides in the
https://policies.google.com/privacy
available privacy notices.
Google AdWords with Conversion Tracking
On our website, we use the advertising component Google AdWords and its conversion tracking feature. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".
We use conversion tracking for targeted promotion of our offerings. If you have given your consent for this processing, the legal basis is Art. 6 para. 1 lit. a GDPR. The legal basis can also be Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our website.
If you click on an ad served by Google, the conversion tracking we use stores a cookie on your device. These so-called conversion cookies expire after 30 days and are not used for your personal identification.
If the cookie is still valid and you visit a specific page of our website, both we and Google can evaluate that you have clicked on one of our ads placed with Google and that you were subsequently redirected to our website.
With the information thus obtained, Google creates statistics for us about visits to our website. In addition, we receive information about the number of users who clicked on our advertisement(s) and about the pages of our website subsequently accessed. However, neither we nor third parties who also use Google AdWords will be able to identify you in this way.
Through the corresponding settings of your internet browser, you can also prevent or restrict the installation of cookies. At the same time, you can delete already stored cookies at any time. However, the necessary steps and measures for this depend on the specific internet browser you are using. If you have questions, please use the help function or documentation of your internet browser or contact its manufacturer or support.
Furthermore, Google also offers under
https://services.google.com/sitestats/de.html
https://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/
further information on this topic and, in particular, on the possibilities of preventing data use.
WhatsApp Contact
To facilitate contact, the provider offers customers, among other options, the possibility to contact via the messenger service WhatsApp. WhatsApp is a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as WhatsApp, a subsidiary of Facebook.
Through the user's communication with the provider via WhatsApp, both the provider and WhatsApp receive the user's mobile phone number and the information that the user has contacted the provider.
The aforementioned data is also forwarded by WhatsApp to Facebook servers in the USA and processed by WhatsApp and Facebook in accordance with WhatsApp's privacy policy, which also includes processing for their own purposes, such as improving the WhatsApp service.
_____________________
According to data protection supervisory authorities, the USA currently does not have an adequate level of data protection. However, so-called standard contractual clauses exist:
https://faq.whatsapp.com/general/about-standard-contractual-clauses
However, these are private agreements and therefore have no direct impact on the access possibilities of authorities in the USA.
_____________________
Further details on the purpose and scope of data collection and the further processing of this data by WhatsApp and Facebook, as well as related rights and privacy settings, are contained in WhatsApp's privacy policy:
https://www.whatsapp.com/legal/#privacy-policy.
The legal basis for this processing and the transfer to WhatsApp is Art. 6 para. 1 sentence 1 b. GDPR, insofar as the contact concerns an existing contractual relationship or serves to initiate such a contractual relationship. Should the contact not be made for the aforementioned purposes, the legal basis is Art. 6 para. 1 lit. f GDPR. The provider's legitimate interest lies in improving service quality.
Translation Notice: This English version of the Privacy Policy was generated and translated with the assistance of artificial intelligence (AI). In the event of any discrepancies, ambiguities, or inconsistencies, the German version shall prevail and remain the legally binding version.