Data protection

Privacy policy

1. Data protection at a glance

General information

The following information provides a simplified overview of what happens to your personal data when you visit this website. Personal data includes all data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy outlined below.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator, whose contact details can be found in the “Notice regarding the data controller” section of this privacy policy.

How do we collect your data?

Some of your data is collected when you submit it to us. This includes, for example, the data you enter into our contact form.

Other data is collected either automatically or with your consent when you visit the website, i.e. via our IT systems. This primarily includes technical data (e.g. your internet browser, operating system and the time of the page visit). This data is recorded automatically as soon as you access the website.

For what purpose do we use your data?

Some user data is collected to ensure that our website operates correctly. Other data may be used to analyse user behaviour.

What rights do you have regarding your data?

You have the right to request information, at any time and free of charge, about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted. If you have given your consent for us to process your data, you can revoke this consent at any time with future effect. Under certain circumstances, you also have the right to request that we restrict the processing of your personal data. Additionally, you have the right to file a complaint with the relevant supervisory authority.

For these or any other questions related to data protection, you can contact us at any time.

Analytics tools and third-party tools

When you visit this website, your browsing behaviour may be statistically evaluated. This evaluation is primarily carried out using analytics programs.

Detailed information about these analytics programs can be found elsewhere in this privacy policy.

2. Hosting

We host the content of our website with the following provider:

External hosting

This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider(s). In particular, this may include your IP addresses, contact enquiries, metadata, communication data, contract data, contact details, names, web page access attempts and other data generated via a website.

We use external hosting for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and ensuring the secure, fast and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If the user’s consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) under the German Telecommunications and Telemedia Data Protection Act (TTDSG). The user can revoke their consent at any time.

Our hosting provider(s) will process your data only to the extent necessary to fulfil their contractual obligations and in accordance with our instructions regarding your data.

We host the content of our website with the following provider:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur

Data processing agreement

We have entered into a data processing agreement (DPA) with the above-mentioned provider. This is a data protection agreement required by law, ensuring that the provider processes the personal data of our website visitors strictly in accordance with our instructions and in compliance with the GDPR.

3. General information and mandatory notices

Data protection

The operators of this website take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data refers to any data that can be used to identify you personally. This privacy policy explains what data we collect and how we use it. It also provides information about how and for what purpose this collection and usage occurs.

Please note that data transmission over the internet (e.g. email communication) may involve security risks. It is not possible to guarantee complete protection of your data from third-party access.

Notice regarding the data controller

The data controller responsible for data processing on this website is:

LTT Leuchten-Technik Tettnang GmbH & Co.KG
Hermannstadtstr. 1
88069 Tettnang
Germany

Phone:  +49 7542 5304-0
Email: info(at)ltt-licht.de

The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Storage duration

Unless a more specific storage duration is stated in this privacy policy, your personal data will be retained until such time as it is no longer needed for the purpose for which it was collected. If you submit a legitimate request for deletion or revoke your consent to the processing of your personal data, it will be deleted unless we have other legally permissible reasons for retaining it (e.g. retention periods under tax or commercial law). In such cases, your data will be deleted once these reasons no longer apply.

General information on the legal basis for data processing on this website

If you have consented to the processing of your personal data, we will process it on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or in the case of special categories of data under Article 9(1) GDPR. If you have explicitly consented to the transfer of your personal data to third countries, your data will be processed on the basis of Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g. via device fingerprinting), the data processing will also be based on § 25(1) TTDSG. You can revoke your consent at any time. If your data is required for the performance of a contract or for pre-contractual measures, we will process your data based on Article 6(1)(b) GDPR. Furthermore, we will process your data if this is necessary for compliance with a legal obligation based on Article 6(1)(c) GDPR. Data processing may also take place on the basis of our legitimate interests under Article 6(1)(f) GDPR. The specific legal basis applicable in each case is detailed in the following sections of this privacy policy.

Data protection officer

We have appointed a data protection officer

External data protection officer
in accordance with Article 37 GDPR in conjunction with § 4f(1) Sentence 1 of the Federal Data Protection Act (BDSG):
David Kuhn
Deutsche Datenschutzkanzlei - Stefan Fischerkeller
OfficeBodensee: www.deutsche-datenschutzkanzlei.de

Phone: -
Email: kuhn@ddsk.de

Notice regarding data transfer to the USA and other third countries

We use tools provided by companies based in the USA or other third countries that do not offer an adequate level of data protection. When these tools are active, your personal data may be transferred to these third countries and processed there. Please note that these countries cannot guarantee a level of data protection comparable to that of the EU. For example, US companies are obligated to provide personal data to security authorities without you, as the data subject, having any legal recourse. It is therefore possible that US authorities (e.g. intelligence agencies) could process, analyse and permanently store your data stored on US servers for surveillance purposes. We have no influence over these processing activities.

Withdrawal of your consent to data processing

Many data processing activities are only possible with your explicit consent. You can withdraw any consent you have previously granted at any time. In this case, the legality of the data processing carried out prior to the withdrawal shall remain unaffected.

Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)

IF YOUR DATA IS PROCESSED ON THE BASIS OF ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS FOR THE PROCESSING OF YOUR DATA IS EXPLAINED IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL CEASE PROCESSING YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH PURPOSES AT ANY TIME; THIS ALSO APPLIES TO PROFILING TO THE EXTENT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).

Your right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, including those in the Member State of their habitual residence, place of work or the location of the alleged infringement. Your right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to receive the data that we automatically process – either based on your consent or for the performance of a contract – in a commonly used, machine-readable format, and to have it transferred to yourself or a third party. If you request the direct transfer of your data to another data controller, this will only be carried out where technically feasible.

Information, deletion and rectification

Within the framework of the applicable legal provisions, you have the right to request information about your stored personal data, its origin, recipients and the purpose of the data processing at any time, free of charge. You also have the right to request the rectification or deletion of this data, where applicable. For this and any other questions regarding personal data, you can contact us at any time.

Right to restrict processing

You have the right to restrict the processing of your personal data. You can contact us at any time to exercise this right. Your right to restrict the processing of your data applies in the following cases:

  • If you dispute the accuracy of the personal data we have stored, we will usually need time to verify this. During the verification period, you have the right to restrict the processing of your personal data.
  • If the processing of your personal data was/is unlawful, you can restrict its processing instead of requesting its deletion.
  • If we no longer need your personal data, but you need it to establish, exercise or defend legal claims, you have the right to restrict its processing instead of requesting its deletion.
  • If you have filed an objection pursuant to Article 21(1) GDPR, a balance must be struck between your interests and ours. Until such time as it is determined whose interests prevail, you have the right to restrict the processing of your personal data.

If you have restricted the processing of your personal data, the data in question may – apart from being stored – only be processed with your consent or for the establishment, exercise or defence of legal claims, or to protect the rights of another natural or legal person, or to serve an important public interest of the European Union or a Member State.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator. You can recognise an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the padlock icon in your browser bar.

When SSL or TLS encryption is enabled, any data you transmit to us cannot be read by third parties.

Objection to advertising emails

The use of our contact details, published in compliance with the “legal notice requirement” (“Impressumspflicht”), for sending unsolicited advertising or information materials is strictly prohibited. The operators of this website expressly reserve the right to take legal action in the event that unsolicited promotional materials are sent to our company, such as spam emails.

4. Data collection on this website

Cookies

Our website uses “cookies”. Cookies are small data packets that in no way harm your device. They are stored on your device either temporarily, i.e. for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted after your visit. Persistent cookies will remain stored on your device until you delete them or your web browser automatically removes them.

In some cases, cookies from third-party companies may also be stored on your device when you visit our website (third-party cookies). These cookies enable us or you to use certain services provided by the third party (e.g. cookies for processing payment services).

Cookies serve various functions. Many cookies are necessary for technical reasons because certain website features depend on them (e.g. the shopping cart function or embedded videos). Other cookies are used to analyse user behaviour or display advertising.

Cookies required for electronic communication, the provision of specific functions you have requested (e.g. the shopping cart function), or the optimisation of the website (e.g. cookies for audience measurement) are stored based on Article 6(1)(f) GDPR unless a different legal basis is specified. The website operator has a legitimate interest in storing the necessary cookies to ensure the error-free and optimised provision of its services. Where the user’s consent for storing cookies and similar recognition technologies has been requested, the processing occurs solely based on this consent (Article 6(1)(a) GDPR and § 25(1) TTDSG). Such consent can be revoked at any time.

You can configure your browser to inform you about the use of cookies, to allow cookies only in specific cases, to block the storage of cookies (either in specific cases or generally) and to enable the automatic deletion of cookies when you close the browser. Please note that disabling cookies may limit the functionality of this website.

If cookies from third-party companies or cookies used for analysis purposes are used, we will inform you separately within this privacy policy and, if necessary, request your consent for their use.

Server log files

The provider of these pages automatically collects and stores information in server log files, which your browser automatically transmits to us. This information includes:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not combined with other data sources.

This data is collected in accordance with Article 6(1)(f) GDPR – based on the website operator’s legitimate interest in ensuring the smooth and efficient operation of the website, as well as its optimisation.

Contact form

If you send us enquiries via the contact form, the information you provide in the form, including your contact details, will be stored for the purpose of processing your enquiry and for any follow-up questions. This data will not be shared with third parties without your consent.

The processing of this data is based on Article 6(1)(b) GDPR if your enquiry is related to the fulfilment of a contract or contains information required for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling enquiries directed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if this has been requested. Such consent can be withdrawn at any time.

The data you enter in the contact form will remain stored by us until you request its deletion, withdraw your consent to its storage, or the purpose for its storage no longer applies (e.g. after your enquiry has been fully processed). Our statutory obligations, including any legally mandated retention periods, will remain unaffected.

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, your enquiry, including any resulting personal data (e.g. your name and the content of the enquiry), will be stored and processed by us for the purpose of responding to your enquiry. This data will not be shared with third parties without your consent.

The processing of this data is based on Article 6(1)(b) GDPR if your enquiry is related to the fulfilment of a contract or contains information required for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling enquiries directed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if this has been requested. Such consent can be withdrawn at any time.

The data you provide to us through contact enquiries will remain stored by us until you request its deletion, withdraw your consent to its storage, or the purpose for its storage no longer applies (e.g. after your enquiry has been fully processed). Our statutory obligations, including any legally mandated retention periods, remain unaffected.

5. Analytics tools and advertising

Google Tag Manager

We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking and analytics tools, as well as other technologies, into our website. Google Tag Manager itself does not create user profiles, store cookies or perform independent analyses. It is used solely to manage and deploy the tools integrated via it. However, Google Tag Manager does process your IP address, which may be transmitted to Google’s parent company in the United States.

Our use of Google Tag Manager is based on Article 6(1)(f) GDPR. As the website operator, we have a legitimate interest in ensuring the fast and straightforward integration and management of various tools on our website. If the user’s consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) under the German Telecommunications and Telemedia Data Protection Act (TTDSG). The user can revoke their consent at any time.

Google Analytics

This website uses features of the web analytics service Google Analytics, provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. This includes various usage data such as page views, time spent on the web page, the operating systems used and the user’s location. These data points are aggregated under a user ID and assigned to the website visitor’s device.

Additionally, Google Analytics can record your mouse and scroll movements, as well as clicks. Google Analytics also employs various modelling approaches to enhance the collected datasets and uses machine learning technologies for data analysis.

Google Analytics uses technologies that allow the recognition of users for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about your use of this website is usually transmitted to a Google server in the USA and stored there.

The use of this service is based on your consent under Article 6(1)(a) GDPR and § 25(1) TTDSG. You can revoke your consent at any time.

Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details are available here: https://privacy.google.com/businesses/controllerterms/mccs/.

Browser plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data processing agreement

We have concluded a data processing agreement with Google and fully comply with the strict requirements set forth by the German data protection authorities when using Google Analytics.

6. Plugins and tools

YouTube with enhanced data protection

This website integrates videos from YouTube, a platform operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in “enhanced privacy mode”. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website unless they play a video. However, enhanced privacy mode does not necessarily prevent data from being shared with YouTube’s partners. For instance, YouTube establishes a connection to the Google DoubleClick network regardless of whether you are watching a video.

Whenever you start a YouTube video on this website, a connection is established to YouTube’s servers, and information about which of our pages you visited is transmitted. If you are logged into your YouTube account, YouTube can link your browsing behaviour to your personal profile. You can prevent this by logging out of your YouTube account.

Additionally, once you start a YouTube video, YouTube may store various cookies on your device or use comparable recognition technologies (e.g. device fingerprinting). This allows YouTube to collect information about visitors to this website. This information is used, among other things, to compile video statistics, enhance the user experience and prevent fraudulent activities.

Additional data processing activities may occur after you start a YouTube video, over which we have no control.

Our use of YouTube serves our interest in ensuring an attractive presentation of our online services. This constitutes a legitimate interest pursuant to Article 6(1)(f) GDPR. If the user’s consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) under the German Telecommunications and Telemedia Data Protection Act (TTDSG). The user can revoke their consent at any time.

For more information on YouTube’s data protection practices, please refer to their privacy policy: https://policies.google.com/privacy?hl=de.

Google Fonts (local hosting)

This site uses Google Fonts, provided by Google, to ensure a consistent display of fonts. The Google Fonts are installed locally and no connection to Google’s servers is established.

For more information about Google Fonts, please visit https://developers.google.com/fonts/faq and refer to Google’s privacy policy at: https://policies.google.com/privacy?hl=de.

Font Awesome (local hosting)

This site uses Font Awesome to ensure a consistent display of fonts. Font Awesome is installed locally and no connection to the servers of Fonticons, Inc. is established.

For more information about Font Awesome, please refer to their privacy policy at: https://fontawesome.com/privacy.

7. eCommerce and payment providers

Processing of customer and contract data

We collect, process and use personal customer and contract data to establish, structure and amend our contractual relationships. We collect, process and use personal data concerning the use of this website (usage data) only to the extent necessary to enable the user to utilise the service, or for invoicing purposes. The legal basis for this is Article 6(1)(b) GDPR.

The collected customer data is deleted after the completion of the order or the termination of the business relationship and the expiration of any applicable statutory retention periods. The statutory retention periods remain unaffected.

8. In-house services

Handling applicant data

We offer you the opportunity to apply for employment at our company (e.g. via email, post or an online application form). Below, we explain how your personal data is collected, used and processed during the application process. We ensure that your data is collected, processed and used in compliance with all applicable data protection laws and legal requirements, and that it is handled with the utmost confidentiality.

Scope and purpose of the collected data

If you submit an application to our company, we will process your associated personal data (e.g. contact and communication data, application documents, notes from interviews, etc.) to the extent necessary to make a decision about the establishment of an employment relationship with you. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Article 6(1)(b) GDPR (general contract initiation) and – if you have given your consent – Article 6(1)(a) GDPR. You can revoke your consent at any time. Within our company, your personal data will be shared only with the individuals involved in processing your application.

If your application is successful, the data you have submitted will be stored in our data processing systems for the purpose of implementing the employment relationship, based on § 26 BDSG and Article 6(1)(b) GDPR.

Data retention period

If we are unable to make you a job offer, or if you decline an offer or withdraw your application, we reserve the right to retain the data you have submitted for up to six months after the conclusion of the application process (rejection or withdrawal of the application) based on our legitimate interests (Article 6(1)(f) GDPR). After this period, your data will be deleted and any physical application documents will be destroyed. Our primary reason for retaining your data is to preserve evidence in the event of a legal dispute. If it becomes apparent that the data will be required beyond the six-month retention period (e.g. due to a pending or imminent legal dispute), it will only be deleted once the reason for the extended retention period no longer applies.

The data in question may also be retained for a longer period if you have given your consent to its extended storage (Article 6(1)(a) GDPR) or if our legal retention obligations prevent its deletion.