+49 2351 65619-0
+49 2351 65619-0

imprint

Instalighting GmbH thanks you for visiting this website and your interest in our products

Responsible for the content of this website:

Instalighting GmbH
Oststrasse 14-16
59929 Brilon

Phone: + 49 2351 65619-0

info@instalighting.de
www.instalighting.de

Managing directors:
Stefan Hackl

Registered:
Arnsberg District Court

Register number:
HRB 14570

VAT ID no .:
DE 325490231

WEEE:
ElektroG (WEEE) registration number at the EAR registration office: WEEE-Reg.-NR. DE 54030568

REX number:
DEREX80000843

Editorial contact
info@instalighting.de

Instalighting GmbH privacy policy

Below you will find information on what types of personal data we process, to what extent and for what purposes.
Personal data is information that can be used to identify you as a data subject, such as your name, address, email address or user behaviour.
Data subjects are those with whom a relationship exists in the context of the provision of our services, visitors to our website and users of our entire online offering.

Name and address of the person responsible for data processing:

Instalighting GmbH
Mr Stefan Hackl
Oststrasse 14-16
59929 Brilon

E-mail: info@instalighting.de
Phone: + 49 2351 65619-0

The data protection officer of the controller is

Datavise GmbH & Co. KG
Luegallee 114
40545 Düsseldorf

Phone: 0211 5800 26 96 0
e-mail: datenschutz@datavise.de"

The following types of data are collected and stored by us:

The categories of persons affected:

The data is collected for the following purposes:

Your personal data is processed exclusively on the basis of the following legal bases: 

"The data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes"

"processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract"

"processing is necessary for compliance with a legal obligation to which the controller is subject"

"processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child"

Data processing in the context of employment or data processing for the purposes of the employment relationship

Transmission to third parties and third countries

Your data will always remain within our company. The transfer or disclosure of your personal data to a third party only takes place 

Our processors are obliged to comply with the necessary technical and organisational measures in order to guarantee the protection of the rights of the data subjects by means of an order processing contract in accordance with Art. 28 GDPR. 

Your personal data will only be transferred to third countries (outside the European Union (EU) / the European Economic Area), 

Duration of storage

Your personal data will be routinely deleted or restricted in processing or blocked at the latest after expiry of the respective statutory retention periods (e.g. retention periods under commercial and tax law), provided that this data is no longer necessary for the fulfilment of the contract and / or there is no legitimate interest on our part for further storage.

Use of the website and creation of log files

When you visit our website, the following information is automatically transmitted from your browser to our provider's server:

- IP address of your end device
- Date and time of access
- Name and URL of retrieved files
- Website from which the access was made or from where you were directed to our site (referrer URL)
- Browser used and, if applicable, the operating system of your device
- Name of the access provider.

This data is not merged with other data sources. The IP address is anonymised.

This data is collected to ensure the proper use of the website, to optimise the website and to ensure the security of our IT systems. These aforementioned purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.

This data is regularly deleted automatically. In the event of misuse of the website, the relevant data, the further storage of which is necessary for evidence purposes, will be retained until the incident has been clarified.

Hosting by Trienekens Online

We use the hosting service of Trienekens Online, Bruggenseweg 11 A

5752 SC Deurne (NL), for the purpose of providing the website on the basis of processing on our behalf. When you visit our website, Trienekens collects the aforementioned usage and metadata.

Cookies

This website uses cookies. These are small text files that are stored in the Internet browser or by the Internet browser on the user's end device. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. 

A distinction is made between the following types of cookies: 

Session cookies

Session cookies are functionally necessary cookies that do not require consent, as they are automatically deleted when you leave the website.

The legal basis for this processing is Art. 6 para. 1 lit. f GDPR. 

Permanent cookies

Permanent cookies remain permanently on the end device. This allows, for example, the login status to be checked or favourite content to be displayed. The data processed here can also be used to measure reach. 

The legal basis for this processing is Art. 6 para. 1 lit. a GDPR, i.e. it requires the user's consent. 

We use cookies that enable an analysis of the user's surfing behaviour.

The following data is stored and transmitted in the cookies:

- Frequency of page views
- Utilisation of website functions

When visiting our website, the user is informed about the use of cookies for analysis purposes and consents to the processing of the corresponding personal data. A reference to this privacy policy is made at the same time.

The user can revoke their consent at any time via the cookie settings or object to the processing of their data.

This objection can also be made via the browser settings. The transmission of cookies can be deactivated or restricted by adjusting the browser settings. Existing cookies can be deleted at any time, even automatically. Please note that deactivating cookies may impair the functionality of the website.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). This also includes providers from unsafe third countries. The data is passed on to partner companies from the USA, for example.

Contact

The use of our website is generally possible without providing personal data. 

If you contact us by other means, such as e-mail or telephone, the data collected here will be treated confidentially and will not be passed on to third parties without your consent. 

The respective purpose of the data processing results from

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. 

For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The user has the option to object to the processing of personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

Contact - Returns

For quick and smooth processing of repairs or complaints, you have the option of completing our service authorisation form (RMA) conveniently online.

The required mandatory information is necessary to fulfil our contractual obligations pursuant to Art. 6 para. 1 lit. b GDPR. In addition, we pursue a legitimate interest in the efficient processing of customer enquiries to our company in accordance with Art. 6 para. 1 lit. f GDPR in order to ensure first-class customer service.

Newsletter and product updates via e-mail

The registration for our newsletter dispatch takes place by means of a so-called Double opt-in procedure. [SB1] After entering your e-mail address on our website, an e-mail will be sent to the address provided and you will be asked to confirm it. 

When you register for the newsletter, the data from the input screen is transmitted to us:

- E-mail address

The following data is also collected during registration:

- IP address of the calling computer
- Date and time of registration
- Browser and device

The newsletter registration is based on the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR. The purpose of the data processing is the proper delivery of the newsletter by using the user's email address. In addition, the processing of other personal data during the registration process serves to prevent misuse of the service or the email address.

As an existing customer, you will receive regular product updates from us by e-mail. You will receive these product updates from us regardless of whether you have subscribed to a newsletter. We use the email address you provided during registration for this purpose. The legal basis for this data processing is Article 6(1)(a) GDPR.

The data will be forwarded to our service provider MailChimp, a service of the:
The Rocket Science Group, LLC
675 Ponce de Leon Ave NE; Suite 5000, Atlanta, GA 30308 USA.

This service enables recipients to track opening hours. The information collected is stored and used to analyse the reach of individual campaigns.


Right of objection and cancellation

The newsletter subscription can be cancelled by the user concerned at any time. You will find an option for cancelling the newsletter at the end of each newsletter e-mail or under this link: Unsubscribe newsletter.

Applicants

By submitting their application, applicants consent to the processing of their data for the application process in accordance with our privacy policy.

The legal basis for the processing of applicant data is Art. 88 GDPR, § 26 BDSG-new and, if applicable, Art. 6 para. 1 lit. b GDPR for the initiation or execution of contractual relationships.

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily communicated as part of the application process, their processing is also carried out in accordance with Art. 9 para. 2 lit. b) GDPR (e.g. health data, such as severely disabled status or ethnic origin).

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants as part of the application process, their processing is also carried out in accordance with Art. 9 para. 2 lit. a) GDPR (e.g. health data if this is necessary for the exercise of the profession).

The data provided by applicants may be further processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job offer is unsuccessful, the applicant's data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. The deletion takes place after a period of six months so that we can answer any follow-up questions about the application and fulfil our obligations to provide evidence under the General Equal Treatment Act. Invoices for any reimbursement of travel expenses are archived in accordance with tax law requirements.

Social media presence

We are represented on the following social networks for user communication and information as well as for advertising purposes:

We only process the data obtained via the social media presences for the purposes stated on the legal basis of

The operators of social networks generally process user data for market research and advertising purposes. With the help of the user's interests and usage behaviour, usage profiles can be created in order to display advertising to the user in the future, both inside and outside the network, which corresponds to their profile/interests.

For further information on processing, objection options and assertion of data subject rights, please refer to the data protection declarations of the respective provider.

LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Plaza Wilton Place, Dublin 2, Ireland

(https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy)

Order processing contract: https://de.linkedin.com/legal/l/dpa

Youtube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

(https://policies.google.com/privacy)

Order processing contract: https://www.youtube.com/t/terms_dataprocessing

Tracking tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR.

With the tracking measures used, we want to ensure a needs-based design and the continuous optimisation of our website. We also use tracking measures to statistically record the use of our website and evaluate it for the purpose of optimising our offering for you. 

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

Google Analytics 4
If you have given your consent, Google Analytics 4, a web analytics service provided by Google LLC, is used on this website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Analytics uses cookies to analyse your use of the website.

The information generated about your website use is usually transferred to a Google server in the USA and stored there.

In Google Analytics 4, the anonymisation of IP addresses is activated by default, which means that your IP address is generally shortened within the EU or other contracting states of the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google ensures that the transmitted IP address is not combined with other Google data.
During your visit to the website, your user behaviour is recorded in the form of "events". Events can be 

It is also recorded: 

Purposes of the processing
On behalf of the operator of this website, Google will use this information to analyse your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website.

Receiver
Recipients of the data are/may be 

Third country transfer
For the USA, the European Commission adopted its adequacy decision on 10 July 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (e.g. Singapore) cannot be completely ruled out, we have also agreed with the provider the EU standard contractual clauses completed. 

Storage duration
The data sent by us and linked to cookies is automatically deleted after 2 [OR: 14 months]. The maximum lifespan of Google Analytics cookies is 2 years. Data whose retention period has been reached is automatically deleted once a month. 

Legal basis

The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 sentence 1 TTDSG. 

Revocation
You can revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

You can find more information on the terms of use of Google Analytics and data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and under https://policies.google.com/?hl=de.

Google Tag Manager

We also use the Google Tag Manager. This service can be used to manage website tags. The Google Tag Manager only sets up "tags" - "tags" are a code that is used to measure visitor traffic and visitor behaviour. 

The "tags" originate from other services - in our case from Google Analytics (see above). These tags are only managed via the Google Tag Manager, no cookies are set and no personal data is collected. If tracking has been deactivated, this also applies to all tracking tags that are managed with the Google Tag Manager.

Your rights

As a data subject, you have the opportunity to assert your rights against us in connection with the General Data Protection Regulation. This includes the following rights:

Right to information in accordance with Article 15 GDPR

You have the possibility to request your data stored by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details. An informal request by email or post is sufficient for this purpose. You will receive the requested information within one month of receipt of the letter.

Right to rectification in accordance with Article 16 GDPR

In the event that we have recorded / stored incorrect personal data about you, you can request the correction or completion of this data via an informal request. You will receive information about the change to your data within one month of receipt of the letter.

Right to erasure in accordance with Article 17 GDPR

You have the option to request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims. However, this presupposes that the purposes for processing have ceased to exist, or that you have objected to the processing in accordance with Article 21 GDPR, you withdraw your consent in accordance with Article 7 GDPR or the processing is unlawful.

Right to restriction of processing in accordance with Article 18 GDPR

You have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but its erasure is rejected and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art. 21 GDPR. You can also notify us of this informally.

Right to data portability in accordance with Article 20 GDPR

You have the option to receive the data we hold about you in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.

Right to withdraw consent in accordance with Art. 7 (3) GDPR

You have the right to withdraw your consent at any time. As a result, we may no longer continue the data processing that was based on this consent in the future, and

Right to object in accordance with Article 21 GDPR

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data if there are reasons for this arising from your particular situation or if the objection is directed against direct advertising.

In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of cancellation or objection, simply send an e-mail to datenschutz@datavise.de.

Right to lodge a complaint pursuant to Article 77 GDPR

You have the right to lodge a complaint with a supervisory authority. To do so, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.

The State Commissioner for Data Protection of North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
Phone: 0211/38424-0
Fax: 0211/38424-999
e-mail: poststelle@ldi.nrw.de

Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and has the status 31.01.2024
Created and checked by