Privacy Statement

Introduction

Being the operator of this website, MA Lighting International GmbH (hereinafter “we”), are the data controller in charge of processing personal data of any users of such website. You can find our contact details in the imprint of the website, while the contacts for questions concerning the processing of your personal data are provided directly in this Privacy Statement.


We are strongly committed to protecting your privacy and your private and personal data. We collect, save, and use your personal data strictly in accordance with the provisions of this Privacy Statement and the applicable data protection provisions, including without limitation the European General Data Protection Regulation (GDPR) and national data protection provisions.


With this Privacy Statement, we wish to inform you to what extent and for what purpose your personal data is processed in connection with the use of our website.


Personal data

Personal data is all information about an identified or identifiable individual. This includes information about your identity such as your name, your e-mail address, or your postal address. Any information that cannot be directly linked to your identity (e.g. statistical details such as the number of users of the website) is, however, not considered to be personal data.


You can essentially use our website without disclosing your identity and without providing any personal data. In that case, we will merely collect general information about your visit to our website. However, some of the services offered require you to provide certain personal data. As a rule, we will process such data only for purposes connected with the use of this website, including without limitation for the provision of the desired information. Whenever personal data is collected, you are only required to provide the data that is absolutely essential. Also, you may be asked to provide additional details, which is optional information provided voluntarily. We let you know in each case whether the input fields are for mandatory or optional details. More specific details are provided in the relevant section of this Privacy Statement.


There is no automated decision-making on the basis of your personal data in connection with the use of our website.


Processing personal data

We store the information provided by you on protected dedicated servers located within the European Union. Technical and organisational measures are taken to protect such servers against loss, destruction, access, modification, or dissemination of your data by unauthorized persons. Access to your data will be permitted only to a limited number of persons in charge of the technical, commercial, or editorial support of the servers. Notwithstanding regular controls, full protection against all risks cannot be provided.


Your personal data is transmitted over the Internet in encrypted form. We use SSL (Secure Socket Layer) encryption for transmission of data.


Disclosure of personal data to third parties

We use your personal information exclusively for providing the services that you have requested from us. Insofar as we use external service providers in performing the service requested, such external service providers will also access the data exclusively for the purpose of performing the service. By taking the necessary technical and organisational measures we ensure compliance with data protection policies and we demand the same of our external partners.


Moreover, we will not disclose the data to any third parties, including without limitation for advertising purposes, without your express consent. We will disclose your personal data only if you have given your consent to disclosure of the data or insofar as we are entitled or obligated to do so under legal provisions and/or administrative or judicial orders. This may include, without being limited to, giving information for purposes of criminal prosecution, in order to avert danger, or in order to enforce intellectual property rights.


Legal basis of data processing

Insofar as we obtain your consent to processing your personal data, Article 6(1)(a) of the GDPR constitutes the legal basis for such data processing.


Insofar as we process your personal data because processing is necessary for the performance of a contract or is necessary under a quasi-contractual relationship with you, the lawfulness of data processing is based on Article 6(1)(b) of the GDPR.


Insofar as we process your personal data because processing is necessary for compliance with a legal obligation, the lawfulness of data processing is based on Article 6(1)(c) of the GDPR.


Furthermore, Article 6(1)(f) of the GDPR may constitute the legal basis for data processing, if processing of your personal data is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by your interests or your fundamental rights and freedoms which require protection of personal data.


Throughout this Privacy Statement, we refer to the legal basis on which we process your personal data.


Deletion of data and duration of storage

We invariably delete or block any personal data provided by you as soon as the purpose of storage of such data has ceased to apply. However, we may continue to store your personal data beyond that, if such storage is governed by legal provisions to which we are subject, including without limitation the legal obligation to retain business records and documentation. In such a case, we will delete or block the personal data after the prescribed period of time has expired.


External Hosting

This website is hosted by an external service provider (host). Personal data collected on this website are stored on the servers of the host. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page access, and other data generated through a web site.


The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of secure, fast and efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR). Our host will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data.


Execution of a contract data processing agreement


In order to guarantee processing in compliance with data protection regulations, we have concluded an order processing contract with our host.


Use of our website

Information relating to your computer

Every time you access our website, we will collect the following information relating to your computer, regardless of whether or not you have registered: the IP address of your computer, the inquiry of your web browser, and the time stamp of that inquiry. In addition, the status and the amount of data transmitted in the course of the inquiry are collected. We also collect product and version information about the web browser used and the operating system of the computer. Furthermore, we record the website from which our own website has been accessed. The IP address of your computer is stored only for the duration of your use of our website; afterwards, it is deleted or anonymised by truncation. The remaining data is stored for a limited period of time.


We use this data to operate the website, more specifically for troubleshooting, or in order to assess the degree of utilisation of the website, or to carry out adjustments or improvements thereof. Such purposes also constitute our legitimate interest in data processing in accordance with Article 6(1)(f) of the GDPR.


Use of cookies

Like many other websites, our website uses cookies. Cookies are small text files that are stored on your computer and store certain settings and data of your web browser for the exchange with our website. As a rule, a cookie contains the name of the domain from which the cookie file has been sent as well as information about the age of the cookie and an alphanumeric identifier.


Cookies enable us recognise your computer and make any default settings immediately available. We use different cookies to achieve this purpose.


Essential cookies enable basic functions and are necessary for the proper functioning of the website. This also constitutes a legitimate interest in the processing of the data in accordance with Article 6(1)(f) of the GDPR.


In addition, we also use marketing cookies that are used by third parties to display personalized advertising, and third-party cookies that allow access to content implemented in our online offering. We use these providers in order to improve our online offering and to provide you with a better service customised to meet your particular requirements. These cookies are only implemented if you have expressly agreed to their use. In this case our legal basis for the use of such services is your consent in accordance with Article 6(1)(a) of the GDPR.


The cookies we use are so-called session cookies that are automatically deleted after the end of the browser session. In individual cases, we may use cookies with a longer storage time so that your default settings and preferences may be considered when you visit our website the next time.


Most web browsers are set to accept cookies by default. However, you can disable the storage of cookies or set up your web browser to inform you when you receive a cookie. It is also possible to manually delete stored cookies in the browser settings. Please note that your use of our website may be limited or restricted if you refuse to save cookies or delete necessary cookies.


Google Analytics

We use Google Analytics for statistical evaluation. Google Analytics is a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Analytics uses so-called “cookies”, which are text files placed on your computer, to help the website analyse how you use the site. The information generated by the cookie about your use of this website will as a rule be transmitted to and stored by Google. If IP anonymisation is activated on this website, Google will first truncate your IP address. Only under exceptional circumstances is the complete IP address transmitted to a server of Google and truncated there. On behalf of the owner of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and Internet usage for the website owner. Google will not associate the IP address transmitted by your browser in connection with Google Analytics with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser software; however, please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the data generated by the cookie and based on your usage of this website (including your IP address) being sent to and processed by Google by downloading and installing the browser plug-in available at: http://tools.google.com/dlpage/gaoptout?hl=de.


For further details please visit http://tools.google.com/dlpage/gaoptout?hl=de or http://www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection). Please be advised that on our web pages, Google Analytics has been extended by the code “anonymizeIp();” in order to anonymise IP addresses by deleting the last octet.


Our legal basis for the use of Google Analytics is your consent according to Art. 6 (1)(a) of the GDPR.


Google DoubleClick

This website uses features of Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter “DoubleClick”).


DoubleClick is used to show you interest-based ads across the Google Network. Advertisements can be tailored to the interests of the viewer using DoubleClick. For example, our ads may appear in Google search results or in banners associated with DoubleClick.


To be able to display interest adequate promotional content to users, DoubleClick must recognize the respective visitor so that it can allocate the websites visited, the clicks and other user pattern information to the user. To do this, DoubleClick deploys cookies or comparable recognition technologies (e.g. device fingerprinting). The recorded information is consolidated into a pseudonym user profile so that the respective user can be shown interest adequate advertising.


The use of Google DoubleClick takes place in the interest of targeted advertising measures. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.


For further information on how to object to the advertisements displayed by Google, please see the following links: https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated.


Google Tag Manager


On this website the Google Tag Manager is used. The Google Tag Manager is a solution from Google Inc. that allows companies to manage website tags through a single interface. Google Tag Manager is a cookie-less domain that does not collect any personal information. Google Tag Manager triggers other tags that may collect data. We hereby draw your attention to this separately. The Google Tag Manager does not access this data. If deactivation has been made by the user at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.


ytimg


On our website a web service of the company Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: ytimg) is loaded. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to ytimg. The legal basis for the data processing is art. 6 para.1 lit. f DSGVO. The legitimate interest lies in an error-free function of the website. ytimg has certified itself within the framework of the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list). The data will be deleted as soon as the purpose of their collection has been fulfilled. Further information on the handling of the transferred data can be found in the privacy policy of ytimg: https://policies.google.com/privacy . You can prevent ytimg from collecting and processing your data by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find it e.g. at http://www.noscript.net or http://www.ghostery.com ).


YouTube with expanded data protection integration

Our website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.


We use YouTube in the expanded data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. Nevertheless, this does not necessarily mean that the sharing of data with YouTube partners can be ruled out as a result of the expanded data protection mode. For instance, regardless of whether you are watching a video, YouTube will always establish a connection with the Google DoubleClick network.


As soon as you start to play a YouTube video on this website, a connection to YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited. If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.


Furthermore, after you have started to play a video, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g. device fingerprinting). In this way YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud.


Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video, which are beyond our control.


The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6 Sect. 1 lit. f GDPR, this is a legitimate interest. If a corresponding agreement has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.


For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.


Google Web Fonts (local embedding)


This website uses so-called Web Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.


For more information on Google Web Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.


Registration

You can register for the use of our website. To register, you have to provide the data requested during registration, such as your username and e-mail address. In addition, we record the date and time of registration and the IP address. During the registration process, we ask for your consent to using your data. That gives you the advantage of not having to enter this data every time you wish to use our online service.


If you give your consent, processing of data provided for registration purposes is based on Article 6(1) (a) of the GDPR. If you register with us for the purposes of performance or initiation of a contract, the legal basis for processing of the data is additionally constituted by Article 6(1)(b) of the GDPR.


The information mandatorily required for registration is needed to execute or initiate a contract for certain services to be provided by us.


After your registration you can optionally add further information, for example a photo, to your account. Our legal basis for this data processing is your consent according to Article 6(1)(a) of the GDPR.


Upon registration, an account is created for you. Your data in the customer account are stored by us for as long as an active customer relationship with you exits. If there has been no activity for a period of three years, the status of the customer relationship is set to Inactive. You can at any time demand deletion of your customer account.


Registration with Facebook Connect

Instead of registering directly on our website, you also have the option to register using Facebook Connect. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.


If you decide to register via Facebook Connect, you will be automatically connected to the Facebook platform. There, you can log in using your username and password. As a result, your Facebook profile will be linked to our website or our services. This link gives us access to the data you have archived with Facebook. These data comprise primarily the following:


-Facebook name

-Facebook profile picture

-Email address provided to Facebook

-Facebook ID

-Birthday

-Gender


This information will be used to set up, provide and customise your account.


The registration via Facebook Connect and the affiliated data processing transactions are implemented on the basis of your consent (Art. 6(1)(a) of the GDPR). You may revoke this consent at any time, which shall affect all future transactions thereafter.


For more information, please consult the Facebook Terms of Use and the Facebook Data Privacy Policies. Use these links to access this information: https://www.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms/.


Registration with Twitter

Instead of registering directly on our website, you also have the option to register using Twitter Connect. The provider of this service is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.


If you decide to register via Twitter Connect, you will be automatically connected to the Twitter platform. There, you can log in using your username and password. As a result, your Twitter profile will be linked to our website or our services. This link gives us access to the data you have archived with Twitter. These data comprise primarily the following:


-Twitter name

-Twitter profile picture

-Twitter cover picture

-Email address provided to Twitter

-Twitter ID

-Birthday

-Gender


This information will be used to set up, provide and customise your account.


The registration via Twitter Connect and the affiliated data processing transactions are implemented on the basis of your consent (Art. 6(a)(a) of the GDPR). You may revoke this consent at any time, which shall affect all future transactions thereafter.


For more information, please consult the Twitter Terms of Use and the Twitter Data Privacy Policies. Use these links to access this information: https://twitter.com/tos and https://twitter.com/privacy.


Use of the forum

After your registration you can comment posts in our forum. Only the username selected by you will be shown together with the comment upon publication. In accordance with Article 6(1)(a) of the GDPR, your consent constitutes the legal basis for processing your data.


Your rights; contact

We are strongly committed to explaining how we process personal data and to inform you about your rights as transparently as possible. If you want more detailed information or wish to exercise your rights, you can contact us at any time so that we can take care of your concerns.


MA Lighting International GmbH

Abteilung Datenschutz

An der Talle 24-28

D-33102 Paderborn


E-Mail: datenschutz@malighting.com


Rights of persons concerned

You have extensive rights with respect to the processing of your personal data. First of all, you have an extensive right to information and under certain circumstances may demand correction and/or deletion or blocking of your personal data. You can also demand restriction of processing and you have a right of objection. You also have a right to data portability with a view to personal data that you have transmitted to us.


If you wish to assert any of your rights and/or want more detailed information concerning your rights, please contact our customer service.


Revocation of consent and objection

You may at any time revoke your consent with future effect. Revocation of the consent does not affect the legality of any processing performed on the basis of such consent given up until the revocation thereof. In such cases as well, please contact our customer service.


Insofar as the processing of your personal data is not based on consent given by you but on another legal basis, you can object to the data processing. Your objection will lead to a review and, if necessary, to termination of the data processing. You will be informed of the outcome of the review and – if the data processing is to be continued nonetheless – you will receive further information from us on why the data processing is admissible.


Complaints

If you are of the opinion that the processing of your personal data does not comply with this Privacy Statement or the applicable data protection provisions, you have the right to file a complaint with a supervisory authority. You can file a complaint with us. We will review the matter and inform you of the outcome of the review.


Further information; amendments

Links to other websites

Our online service may contain links to other websites. Generally, these links are identified as such. We cannot control to what extent linked websites comply with the applicable data protection provisions. We therefore recommend that for other providers’ data protection statements, you refer to the information given on their respective websites.


Amendments of this Privacy Statement

Any revision of this Privacy Statement is identified by the date specified (see below). We reserve the right to amend this Privacy Statement at any time with effect for the future. Amendments will be made, among other things, in case of technical adjustments of the website or changes of the data protection laws. The Privacy Statement as amended from time to time is always made available directly through our website. We recommend obtaining information on any changes of this Privacy Statement on a regular basis.


This Privacy Statement was last revised in: February 2020