I. Identity and contact details of the data controller
The data controller responsible in accordance with the purposes of the General Data Protection Regulation (GDPR) of the European Union and other national data protection laws of the Member States as well as other data protection regulations is:
LEDVANCE GmbH
Parkring 29-33
85748 Garching
Germany
+49 89-780673-100
support.shop@ledvance.com
https://shop.ledvance.com
II. Contact details of the data protection officer
The designated data protection officer is:
Mr. Matthias Lindner
bDSB LEDVANCE
c/o intersoft consulting services AG
Beim Strohhause 17
20097 Hamburg
Germany
Phone: +49 40 790235 – 0
Fax: +49 40 790235 – 170
E-Mail: privacy@ledvance.com
III. Provision of website and creation of log files
1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and relevant information from the computer system of the calling device.
The following data is collected:
• Browser type and version used
• The user's operating system
• The user’s internet service provider
• The IP address of the user
• Date and time of access
• Web pages from which the user’s system accessed our website
• Web pages accessed by the user’s system through our website
This data is stored in the log files of our system. This data is not stored together with other personal data of the user.
2. Purpose of data processing
The temporary storage of the IP address by the system is necessary for the delivery of the website to the computer of the user. For this purpose, the user’s IP address must be kept for the duration of the session.
The storage in logfiles is done to ensure the functionality of the website. The data is also used to optimize the website and to ensure the security of our IT systems. An analysis of the data for marketing purposes does not take place.
For the aforementioned purposes, our legitimate interest lies in the processing of data in compliance with Art. 6 (1) (1) (f) GDPR GDPR.
3. Legal basis for data processing
The legal basis for the temporary storage of data and logfiles is Art. 6 (1) (1) (f) GDPR.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The session is complete when the collection of data for the provision of the website is accomplished.
If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is not possible.
5. Objection and removal
The collection of data for the provision of the website as well as the storage of data in log files are essential for the operation of the website. Therefore, the user may not object to the aforementioned processes.
IV. Use of cookies
1. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or the internet browser on the user’s computer system. If a user calls up a website, a cookie can be stored on the user’s operating system. These cookies contain a string of characters that allows the browser to be uniquely identified when the website is reopened.
We use cookies to make our website more user-friendly. Some elements of our website require the calling browser to be identified even after a page break.
The following data is stored and transmitted in the cookies:
• Language settings
• Items in shopping cart
• Log-in information
We also use cookies on our website, which enable us to analyse the browsing behaviour of our users.
As a result, the following data will be transmitted:
• Entered search queries
• Frequency of page views
• Use of website functionalities
The user data collected in this manner is pseudonymised by technical measures. It is therefore not possible to assign the data to the user accessing the site.
2. Purpose of data processing
The purpose of using technical cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. These require that the browser is recognized even after a page change.
We need cookies for the following purposes:
• Shopping cart
• Applying language settings
• Storage of search terms
The user data collected by technical cookies are not used to create user profiles.
The analysis cookies are used for the purpose of improving the quality of our website and its content. Through the analysis cookies, we learn how the website is used and thus can constantly optimize our offer, improving user experience, marketing & analytics.
3. Legal basis for data processing
The legal basis for the processing of personal data using cookies is Art. 6 (1) (1) (a) GDPR.
The legal basis for the processing of personal data using technical cookies is Art. 6 (1) (1) (f) GDPR GDPR.
4. Duration of storage and possibility of objection and removal
Cookies are stored on the user's device and transmitted to our site by the user. Therefore, you as a user also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser.
Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.
The transmission of Flash cookies cannot be prevented via the browser settings, but by changing the settings of the Flash Player.
If you use the Safari browser version 12.1 or higher, cookies will be automatically deleted after seven days. This also applies to opt-out cookies, which are used to prevent the use of tracking mechanisms.
V. Registration
1. Description and scope of data processing
We offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data will not be passed on to third parties. The following data is collected as part of the registration process:
• Email address
• Last name
• First name
• Address
• Telephone / mobile phone number
As part of the registration process, the user's consent to the processing of this data is obtained.
2. Purpose of data processing
A registration of the user is necessary for the fulfilment of a contract with the user or for the execution of pre-contractual measures.
3. Legal basis for data processing
The legal basis for the processing of the data is Art. 6 (1) (1) (a) GDPR if the user has given his consent.
If the registration serves the fulfilment of a contract to which the user is a party or the execution of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 (1) (1) (b) GDPR.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.
This is the case for the data collected during the registration process for the fulfilment of a contract or for the execution of pre-contractual measures if the data is no longer required for the implementation of the contract. Even after the conclusion of the contract, it may be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations.
5. Objection and removal
As a user you have the possibility to cancel the registration at any time. You can request a change to the data stored about you at any time.
You can change or delete your data here: https://shop.ledvance.com/pages/ledvance-gdpr-konformit-t or please send us an email to support.shop@ledvance.com
If the data is necessary for the fulfilment of a contract or for the implementation of pre-contractual measures, a premature deletion of the data is only possible insofar as contractual or legal obligations do not stand in the way of a deletion.
VI. Web shop on Shopify
We offer a web shop on our website. For this we use the following web shop software: Shopify.
The website and the web shop are hosted on external servers by a service provider commissioned by us.
Our service provider is: Cloudflare, Inc.
The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The stored information is:
• Browser type and version
• Used operating system
• Referrer URL
• Hostname of the accessing computer
• Time and date of the server request
• IP address of the user's device
Depending on whether you have given us your consent when visiting our website, we may use the collected data for further analyses as listed in section XX. of this privacy policy. The data is collected on the basis of Art. 6 (1) (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - and server log files are therefore recorded.
We have concluded a data processing agreement with the relevant service provider in which we oblige the relevant service provider to protect user data and not to pass it on to third parties.
The server of the website is geographically located in the following third country: Canada.
VII. Payment options
1. Description and scope of data processing
We offer our customers various payment options for processing their orders. Depending on the payment option, we transfer customers to the platform of the payment service provider in question. After completion of the payment process, we receive the customer's payment data from the payment service providers or our house bank and process these in our systems for billing and accounting purposes.
Payment via Klarna
It is possible to process payment transactions with the payment service provider Klarna.
Klarna is a payment service provider that enables purchase on invoice or payment via installments.
Klarna's European operating company is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.
If you choose "Purchase on account" or "Installment purchase" as payment option within the transaction via Klarna, your personal data will be automatically transferred to Klarna. The personal data transmitted to Klarna are, in particular, the following
• First name
• Last name
• Address
• Date of birth
• Gender
• Email address
• IP address of the user's device
• Telephone / mobile phone number
• Bank account details
• Credit Credit card number incl. expiry date and CVC code
• Number of items
• Product code
• Data on goods and/or services
• Transaction amount and tax dues
The transmission of data is intended in particular for identity verification, payment administration and fraud prevention purposes. The personal data exchanged between Klarna and us may be transferred by Klarna to credit agencies.
The purpose of this transmission is a check of identity and credit score. Klarna may also pass on the personal data to affiliated companies (Klarna Group) and service providers or subcontractors if this is necessary to fulfil the contractual obligations or if the data is to be processed on behalf of Klarna.
Further information on the processing of your data by Klarna can be found in Klarna's privacy policy at: https://pay.amazon.com/de/help/201751600 https://cdn.klarna.com/1.0/shared/content/policy/data/de_en/data_protection.pdf.
Payment via credit card
It is possible to complete the payment process by credit card.
If you have chosen to pay by credit card, payment details will be passed on to payment service providers for payment processing. All payment service providers comply with the requirements of the "Payment Card Industry (PCI) Data Security Standards" and have been certified by an independent PCI Qualified Security Assessor.
The following data will be transmitted regularly as part of payment via credit card:
• Purchase amount
• Date and time of purchase
• First and last name
• Address
• Email address
• Credit Credit card number
• Credit card validity period
• Card validation code (CVC)
• IP address of the user's device
• Telephone number / mobile phone number
Payment data is passed on to the following payment service providers: Shopify Payments.
Payment via PayPal
It is possible to process payment transactions with the payment service provider PayPal. PayPal offers a direct payment method as well as purchase on invoice, direct debit, credit card and installment payment.
The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.
If you choose PayPal as your payment method, your data required for the payment process is automatically transmitted to PayPal.
Following data is processed:
• Last name
• Address
• Email address
• Telephone / mobile phone number
• IP address of the user's device
• Bank account details
• Credit card number
• Card validation date and code (CVC)
• Number of items
• Product code
• Data on goods and services
• Transaction amount and tax dues
• Information on previous purchasing behaviour
The data transmitted to PayPal may be transmitted by PayPal to credit agencies. The purpose of this transmission is a check of identity and credit score.
PayPal may also share your information with third parties to the extent necessary to fulfil your contractual obligations or to process the information on behalf of PayPal. When transferring your personal information within companies affiliated with PayPal, the Binding Corporate Rules, approved by the relevant regulatory authorities, apply.
You can find them here: https://www.paypal.com/de/webapps/mpp/ua/bcr Other data transfers may be based on contractual safeguards. For further information please contact PayPal.
All PayPal transactions are subject to PayPal's privacy policy. You can find them at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full/.
Payment via Sofortüberweisung
There is the possibility of Payment via Sofortüberweisung. In this case, the data will be collected by Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany.
The data controller does not collect and store the data himself.
With the issue of an Sofortüberweisung you instruct Sofort GmbH to automatically check, whether your account covers the amount to be transferred (account coverage check), and any instant transfers of the last 30 days have been successfully completed from your account,
and, after positive verification, to transmit the transfer order approved by you to your bank in electronic form, and to inform us, as the payment recipient selected by you (online provider), of the successful termination of the transfer.
Sofort GmbH requires the IBAN, PIN and TAN of your online banking account. As part of the ordering process, you will automatically be forwarded to the secure payment form of Sofort GmbH.
Immediately afterwards you will receive confirmation of the transaction. We will then directly receive the transfer credit note.
Anyone who has an activated online banking account with PIN/TAN procedure can use Sofortüberweisung as a payment method.
Please note that a few banks do not yet support Payment via Sofortüberweisung.
For further information please click on the following link: https://www.sofort.com/ger-DE/general/fuer-kaeufer/fragen-und-antworten/.
Further information on the stored data can be found at https://www.klarna.com/sofort/#cq-0.
Further payment methods
We also offer payment with the following options: Google Pay, Apple Pay, iDEAL, Shop Pay.
2. Purpose of data processing
The transmission of payment data to payment service providers serves to process payments, e.g. if you purchase a product and/or use a service.
3. Legal basis for data processing
The legal basis for data processing is Art. 6 (1) (1) (b) GDPR, since the processing of the data is necessary for the execution of the concluded sales contract.
4. Duration of storage
All payment data as well as data on possible chargebacks are only stored as long as they are required for payment processing and a possible processing of chargebacks and debt collection as well as for combating misuse.
Furthermore, payment data may be stored beyond this if and as long as this is necessary to comply with statutory retention periods or to prosecute a specific case of misuse.
Your personal data will be deleted at the end of the statutory retention period, i.e. after 10 years at the latest.
5. Objection and removal
You can withdraw your consent to the processing of your payment data at any time by notifying the data controller or the payment service provider used. However, the payment service provider used may still be entitled to process your payment data if and as long as this is necessary for the contractual payment processing.
VIII. Shipping service providers
1. Description and scope of data processing
If you order products or services on our website that are delivered by a shipping service provider, you will receive your order and shipping confirmation via your email address and, depending on the shipping service provider, notification that your shipment has arrived and/or notification of package arrival and possible delivery options.
The data will be transmitted to the following shipping service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.
The data transmitted are regular:
• Last name
• Address
• Email address
2. Purpose of data processing
The purpose of processing personal data is to give Shipping service providers the opportunity to inform recipients of the progress of a shipment by email and thus increase the probability of successful delivery.
3. Legal basis for data processing
The legal basis for the transmission of the email address to the respective shipping service provider and its use is Art. 6 (1) (1) (f) GDPR, based on our legitimate interest in being able to offer the notification service to our customers and thus to make shipping as customer-friendly as possible.
4. Duration of storage
The transmitted data will be deleted by the respective shipping service provider if the package was delivered successfully.
5. Objection and removal
The notification service provided by the shipping service provider may be terminated by the user concerned at any time. For this purpose, there is a corresponding opt-out link in every email.
IX. Newsletter
1. Description and scope of data processing
It is possible to subscribe to a newsletter free of charge. When you register for the newsletter, the following data from the input mask will be transmitted to us: Email address.
Your consent will be obtained for the processing of your data during the registration process and reference will be made to this privacy policy.
If you purchase goods or services on our website and enter your email address, we may subsequently use it to send you a newsletter. In such a case, only direct advertising for similar goods or services will be sent via the newsletter.
No data will be passed on to third parties in connection with data processing for the dispatch of newsletters. The data will be used exclusively for sending the newsletter.
2. Purpose of data processing
The user's email address is collected to deliver the newsletter to the recipient.
3. Legal basis for data processing
The legal basis for the processing of data provided by the user after registration for the newsletter is Art. 6 (1) (1) (a) GDPR if the user has given his consent.
Art. 7 (3) UWG provides the legal basis for the dispatch of the newsletter as a result of the sale of goods or services.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user's email address will therefore be stored as long as the newsletter subscription is active.
The other personal data collected during the registration process is generally deleted after a period of seven days.
5. Objection and removal
The subscription for the newsletter can be cancelled by the data subject at any time. For this purpose, every newsletter contains an opt-out link.
Through this, it is also possible to withdraw the consent to the storage of personal data collected during the registration process.
X. Contact via Email
1. Description and scope of data processing
You can contact us via the email address provided on our website. In this case the personal data of the user transmitted with the email will be stored.
The data will be used exclusively for the processing of the conversation.
2. Purpose of data processing
If you contact us via email, this also constitutes the necessary legitimate interest in the processing of the data.
3. Legal basis for data processing
If the user has given consent, the legal basis for processing the data is Art. 6 (1) (1) (a) GDPR.
The legal basis for the processing of data transmitted while sending an email is Art. 6 (1) (1) (f) GDPR. If the purpose of the email contact is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (1) (b) GDPR.
4. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation ends when it can be concluded from the circumstances that the matter in question has been conclusively resolved.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
5. Objection and removal
The user has the possibility to withdraw the consent to the processing of their personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time.
To revoke your consent or to delete your data please click here https://shop.ledvance.com/pages/ledvance-gdpr-konformit-t
In this case, all personal data stored while establishing contact will be deleted.
XI. Use of corporate profiles on social networks
Instagram:
Instagram, Part of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2 Ireland
On our company profile we provide information and offer Instagram users the possibility of communication. If you carry out an action on our Instagram company profile (e.g. comments, contributions, likes etc.), you may make personal data (e.g. clear name or photo of your user profile) public. However, as we generally or to a large extent have no influence on the processing of your personal data by Instagram, we cannot make any binding statements regarding the purpose and scope of the processing of your data.
Our corporate presence in social networks is used for communication and information exchange with (potential) customers. We use the company's profile for marketing purposes.
Publications on the company profile can contain the following content:
• Information about products
• Information about services
• Advertisement
• Customer contact
Every user is free to publish personal data.
The legal basis for data processing is Art. 6 (1) (1) (a) GDPR.
The data generated on the company profile are not stored in our own systems.
You can object at any time to the processing of your personal data that we collect within the framework of your use of our Instagram corporate web profile and assert your rights as a data subject. Please send us an informal email to support.shop@ledvance.com. For further information on the processing of your personal data by Instagram and the corresponding objection options, please click here:
Instagram: https://help.instagram.com/519522125107875
Pinterest:
Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
On our company profile we provide information and offer Pinterest users the possibility of communication. If you carry out an action on our Pinterest company profile (e.g. comments, contributions, likes etc.), you may make personal data (e.g. clear name or photo of your user profile) public. However, as we generally or to a large extent have no influence on the processing of your personal data by Pinterest, we cannot make any binding statements regarding the purpose and scope of the processing of your data.
Our corporate presence in social networks is used for communication and information exchange with (potential) customers. We use the company's profile for marketing purposes.
Publications on the company profile can contain the following content:
• Information about products
• Information about services
• Advertisement
• Customer contact
Every user is free to publish personal data.
The legal basis for data processing is Art. 6 (1) (1) (a) GDPR.
The data generated on the company profile are not stored in our own systems.
You can object at any time to the processing of your personal data that we collect within the framework of your use of our Pinterest corporate web profile and assert your rights as a data subject. Please send us an informal email to support.shop@ledvance.com. For further information on the processing of your personal data by Pinterest and the corresponding objection options, please click here:
Pinterest: https://policy.pinterest.com/de/privacy-policy
YouTube:
YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States
On our company profile we provide information and offer YouTube users the possibility of communication. If you carry out an action on our YouTube company profile (e.g. comments, contributions, likes etc.), you may make personal data (e.g. clear name or photo of your user profile) public. However, as we generally or to a large extent have no influence on the processing of your personal data by YouTube, we cannot make any binding statements regarding the purpose and scope of the processing of your data.
Our corporate presence in social networks is used for communication and information exchange with (potential) customers. We use the company's profile for marketing purposes.
Publications on the company profile can contain the following content:
• Information about products
• Information about services
• Advertisement
• Customer contact
Every user is free to publish personal data.
The legal basis for data processing is Art. 6 (1) (1) (a) GDPR.
The data generated on the company profile are not stored in our own systems.
You can object at any time to the processing of your personal data that we collect within the framework of your use of our YouTube corporate web profile and assert your rights as a data subject. Please send us an informal email to support.shop@ledvance.com. For further information on the processing of your personal data by YouTube and the corresponding objection options, please click here:
YouTube: https://policies.google.com/privacy?gl=DE&hl=en
XII. Use of the Linkedin network
1. Scope of data processing
We use corporate profiles on professionally oriented networks. We maintain a corporate presence on the following professionally oriented networks:
LinkedIn: LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland
On our site we provide information and offer users the possibility of communication.
The corporate profile is used for job applications, information, public relations, and active sourcing.
We do not have any information on the processing of your personal data by the companies jointly responsible for the corporate profile. Further information can be found in the privacy policy of:
LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
If you carry out an action on our company profile (e.g. comments, contributions, likes etc.), you may make personal data (e.g. clear name or photo of your user profile) public.
2. Legal basis for data processing
The legal basis for the processing of your data in connection with the use of our corporate web profile is Art. 6 (1) (1) (f) GDPR.
3. Purpose of the data processing
Our corporate web profile serves to inform users about our services. Every user is free to publish personal data.
4. Duration of storage
We store your activities and personal data published via our corporate web profile until you withdraw your consent. In addition, we comply with the statutory retention periods.
5. Objection and removal
You can object at any time to the processing of your personal data which we collect within the scope of your use of our corporate web profile and assert your rights as a data subject. Please send us an informal email to the email address stated in this privacy policy.
You can find further information on objection and removal options here:https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
XIII. Geotargeting
We use the IP address and other information provided by the user (e.g. the postal code used for registration or ordering) to approach regional target groups (so-called "geotargeting")
.
The regional target group approach is used, for example, to automatically display regional offers or advertisements that often are more relevant to users. The legal basis for the use of the IP address and any other information provided by the user (e.g. postal code) is Art. 6 (1) (1) (f) GDPR, based on our legitimate interest in ensuring a more precise target group approach and thus providing offers and advertising with greater relevance for our users.
Part of the IP address and the additional information provided by the user (e.g. postal code) are merely processed and not stored separately.
You can prevent geotargeting by, for example, using a VPN or proxy server that prevents accurate localisation. In addition, depending on the browser you are using, you can also deactivate a location localisation in the corresponding browser settings (as far as this is supported by the respective browser).
We use geotargeting on our website for the curstomer approaching.
XIV. Content delivery networks
Furthermore, we use the services of the Content Delivery Networks Fastly.
Information on the privacy policies of these providers can be found on the respective websites.
XV. Use of Google Tag Manager
1. Scope of processing of personal data
This website uses the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") to collect information about user behavior and manage tags.
2. How the tagging works
To utilize the Google Tag Manager, we use so-called "server-side tagging". With the assistance of a tag, your IP-address is being collected and sent to our own server with hosting location within the EU, where the Google Tag Manager is implemented and receives the IP-address. Here, still on our own server, the IP-address is anonymized and only then sent to further services connected to the Tag Manager. This means that we only process your personal data on our own server and a connection to Google servers is technically excluded.
3. Purpose of data processing
The purpose of the processing lies in the collected and clear administration as well as an efficient integration of the services of third parties through tags. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behavior, capture the impact of online advertising and social channels, use remarketing and targeting, and test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user's browser. It contains statements about which tags are to be triggered.
4. Legal basis for the processing of personal data
The legal basis for the processing of personal data is Art. 6 (1) (1) (f) GDPR. The website operator has a legitimate interest in a technically error-free provision of the website and therefore a clear administration as well as an efficient integration of the services of third parties through tags.
5. Duration of storage
The data collected in the context of the use of the Google Tag Manager will be retained for 14 days and then deleted. Beyond the aforementioned storage period, the data is only used for analysis purposes in aggregated and anonymized form, i.e. without the possibility of identifying individuals.
6. Additional measures
We have concluded a so-called data processing agreement with Google for our use of Google Analytics 4, by which Google is obliged to protect the data of our website users and not to pass it on to third parties.
To ensure a higher level of data protection, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.
7. Objection and removal
The collection of data for the provision of the website as well as the storage is essential for the operation of the website. Therefore, the user may not object to the aforementioned processes.
XVI. Google Analytics 4
1. Scope of processing of personal data
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be utilized to analyze the use of websites.
2. How the tracking works
In order to utilize Google Analytics 4, we use so-called "server-side tracking". If you give your consent in accordance with Art. 6 (1) lit. a GDPR via the cookie banner, we will assign you a unique tracking ID. We store this ID together with other data transmitted to us when you visit the website on one of our own servers with hosting location within the EU .
The following data is hereby transmitted:
· IP address
· referrer ID
· timestamps
· browser type
· user agent
· if applicable, mobile identifiers such as IDFA, UDID, Android ID or Google Advertising ID, Windows Advertising ID or other Windows IDs, IMEI or IMSI, MSISDN.
In order to ensure that Google Analytics does not receive any personal data, the tracking ID we create is detached from any personal as well as device data listed above so that the ID is an anonymized record. Once this has been ensured, we will solely transmit your anonymized ID to Google Analytics 4. This may also result in the transmission of this information to the servers of the company Google LLC, which is based in the USA, and further processing of the information there.
Google Analytics 4 also enables the creation of statistics with statements about age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the involvement of third-party information via a special function, the so-called "demographic characteristics". This makes it possible to determine and distinguish between groups of website users for the purpose of targeted marketing measures. However, data collected via the "demographic characteristics" cannot be assigned to a specific person and thus not to you personally. This data collected via the "demographic characteristics" function is retained for 2 months and then deleted.
As an extension of Google Analytics 4, the "UserIDs" function is also used for this website. By assigning individual UserIDs, we can have Google create cross-device reports (so-called "cross-device tracking"). This means that your usage behavior can also be analyzed across devices if you have given your corresponding consent to the use of Google Analytics 4 in accordance with Art. 6 (1) lit. a GDPR, if you have set up a personal account by registering on this website and are logged into your personal account on different end devices with your relevant login data. The data collected in this way shows, among other things, which end device was used to click on an ad for the first time and which end device was used for conversion.
3. Purpose of data processing
The purpose of the processing is the evaluation of the use of the website, the compilation of reports (reports) on website activities or usage behavior and to provide us with further services related to website and internet usage.
4. Legal basis for the processing of personal data
The legal basis for the processing of personal data is the user's given consent in accordance with Art. 6 (1) (a) GDPR.
5. Duration of storage
The data collected in the context of the use of Google Analytics 4 will be retained for 14 months and then deleted. Beyond the aforementioned storage period, the data is only used for analysis purposes in aggregated and anonymized form, i.e. without the possibility of identifying individuals
6. Additional measures
We have concluded a so-called data processing agreement with Google for our use of Google Analytics 4, by which Google is obliged to protect the data of our website users and not to pass it on to third parties.
To ensure a higher level of data protection, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.
7. Possibility of revocation of consent and removal
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.
XVII. Shopify Analytics
1. Scope of processing of personal data
We use the analysis and tracking services of our hosting provider Shopify (Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland).
2. Purpose of data processing
The purpose of the processing lies in the analysis and tracking to generate and view page visits, order numbers and other statistics. Shopify uses cookies for this purpose and generates a so-called “transaction ID” which can be transmitted to other analytics services such as Google Analytics (see the section “Google Analytics” in this privacy policy).
4. Legal basis for the processing of personal data
The legal basis for the use of cookies and the associated processing of your personal data for analysis purposes is your consent pursuant to Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.
5. Duration of storage
The data collected in the context of the use of Shopify Analytics will be retained for 24 months and then deleted. Beyond the aforementioned storage period, the data is only used for analysis purposes in aggregated and anonymized form, i.e. without the possibility of identifying individuals
6. Additional measures
We have concluded a so-called data processing agreement with Shopify for our use of their analytics services by which Shopify is obliged to protect the data of our website users and not to pass it on to third parties.
To ensure a higher level of data protection, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.
7. Possibility of revocation of consent and removal
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.
XVIII. Use of Rich Panel Plugin
1. Scope of the processing of personal data
We use the CRM (Customer Relationship Management) tool Rich Panel. Richpanel is a support CRM that is integrated into the e-commerce shop to enable seamless support for our customers.
2. Purpose of data processing
The use of Rich Panel serves the optimal communication with our customers.
3. Legal basis for the processing of personal data
The legal basis for the processing of personal data is the user's given consent in accordance with Art. 6 (1) (1) (a) GDPR.
4. Duration of storage
Your personal information will be stored for as long as is necessary to fulfill the purposes described in this Privacy Policy or as required by law.
5. Possibility of revocation of consent and removal
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.
You may prevent the collection and processing of your personal data by preventing the storage of cookies by third parties on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. your IP address). Also, you can send an email to the controller.
XVIII. Use of Klaviyo Plugin
1. Scope of processing of personal data
We use the marketing automation tool Klaviyo. Klaviyo is an email marketing tool that is integrated into the e-commerce shop to enable seamless support for our customers.
2. Purpose of data processing
The use of Klaviyo serves the optimal communication with our customers.
3. Legal basis for the processing of personal data
The legal basis for the processing of personal data is the user's given consent in accordance with Art. 6 (1) (1) (a) GDPR.
4. Duration of storage
Your personal information will be stored for as long as is necessary to fulfill the purposes described in this Privacy Policy or as required by law.
5. Possibility of revocation of consent and removal
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.
You may prevent the collection and processing of your personal data by preventing the storage of cookies by third parties on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. your IP address). Also, you can send an email to the controller.
XVX. Use of Shogun Plugin
1. Scope of processing of personal data
We use the marketing automation tool Shogun. Shogun is a content management tool that is integrated in the e-commerce shop and includes functions such as page builder and AB testing.
2. Purpose of data processing
The use of Shogun helps us to optimally display the products in the web shop.
3. Legal basis for the processing of personal data
The legal basis for the processing of personal data is the user's given consent in accordance with Art. 6 (1) (1) (a) GDPR.
4. Duration of storage
Your personal information will be stored for as long as is necessary to fulfill the purposes described in this Privacy Policy or as required by law.
5. Possibility of revocation of consent and removal
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.
You may prevent the collection and processing of your personal data by preventing the storage of cookies by third parties on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. your IP address). Also, you can send an email to the controller.
XIX. Use of Trusted Shop - seal of approval with ratings
1. Scope of processing of personal data
We use the Trusted Shops Trustbadge to display our Trusted Shops Seal of Quality and the possibly collected reviews as well as to offer Trusted Shops products to buyers after an order. The Trustbadge and the services advertised with it are an offer of the Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne (in the following: Trusted Shops called).
When calling up the Trustbadge, the web server automatically saves a so-called server logfile, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call.\Further personal data will only be transferred to Trusted Shops if you have consented to this, have decided to use Trusted Shops products after completing an order or have already registered for use.
In this case, the contractual agreement between you and Trusted Shops applies.\Further information on the collection and storage of data by TrustedShops can be found here: https://www.trustedshops.de/impressum/
2. Purpose of data processing
The use of Trusted Shops serves the optimal marketing of our offer.
3. Legal basis for the processing of personal data
The legal basis for the processing of personal data is the user's given consent in accordance with Art. 6 (1) (1) (a) GDPR.
4. Duration of storage
The access data are automatically deleted at the latest 90 days after the end of your page visit.
5. Possibility of revocation of consent and removal
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.
You can prevent the collection and processing of your personal data by Trusted Shops by preventing the storage of third-party cookies on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
Further information on the possibilities for objection to and removal options regarding Trusted Shops can be found at: https://www.trustedshops.de/impressum/
XX. Use of analytics data for aggregated evaluations and customer insights
In order to get the best insights from tools used on this website, we transfer data that is collected through various tools into our customer resource management (CRM) system and to our specific service providers, with whom we can aggregate data from analytics and tracking services. These providers act as our data processors and we have concluded data processing agreements accordingly.
In our CRM system, we process information gathered from our analytics and tracking tools about your website behavior (e.g. when you visited, from which location you visited or how many times you visited our website). Depending on the permissions you gave us through the cookie banner for the usage of specific analytics and tracking tools, the according analytics and tracking data will be combined with data from the CRM system.
Analytics data from our website as well as data from our CRM system will be used in aggregated form, meaning that any personal reference will have been removed. We analyze the aggregated data insights to improve our marketing strategy and tailor our services to our clientele.
XXI. Rights of the data subject
You have the following rights with regard to your data:
• The right to information about your data,
• The right to transfer your data to you or to another service provider,
• The right to correct incorrect data,
• The right to delete your data or the right to restrict the processing of your data,
• The right to object to processing and
• The right to withdraw consent that you have given.
• You also have the right to lodge a complaint with the responsible data protection supervisory authority.
• However, these rights do not always exist. If, for example, LEDVANCE is legally obliged to store certain data, e.g. for tax purposes, a right to deletion cannot be enforced in this regard.
