Data privacy

§ 1 Information About the Collection of Personal Data

Below, we inform you about the processing of personal data when using our website. Personal data includes all data that can be personally related to you, such as your name, address, email address, or user behavior. With this, we aim to inform you about our processing operations and simultaneously comply with legal obligations, particularly those arising from the EU General Data Protection Regulation (GDPR).
The controller as defined in Art. 4(7) EU General Data Protection Regulation (GDPR) is JB-Lighting Lichtanlagentechnik GmbH, Sallersteig 15, 89134 Blaustein, info@jb-lighting.de; www.jb-lighting.de (see our legal notice). You can reach our data protection officer at info@jb-lighting.de or at our postal address with the addition "Data Protection Officer".
If you contact us by email or via a contact form, the data you provide (your email address, name, and phone number, if applicable) will be stored by us to respond to your inquiries. The data generated in this context is deleted if the inquiry is associated with a contract, after the contractual retention periods have expired. Otherwise, the data is deleted once storage is no longer necessary, no later than three years after the data's creation at the end of the general statute of limitations, or its processing is restricted if statutory retention obligations exist.
If we rely on contracted service providers for specific functions of our offerings or wish to use your data for advertising purposes, we will carefully select and monitor these service providers and inform you below in detail about the respective processes. This includes specifying the defined criteria for the storage duration.

§ 2 Your Rights

You have the following rights regarding your personal data processed by us:
- Right to access,
- Right to rectification or erasure,
- Right to restriction of processing,
- Right to object to processing,
- Right to data portability,
- Right to object to advertising and revoke consent.
You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

§ 3 Processing of Personal Data When Visiting Our Website
When using the website for informational purposes only (i.e., when you do not register or otherwise provide information to us), we process the personal data transmitted by your browser to our server. The data described below is technically necessary for us to display our website and ensure stability and security. The legal basis is Art. 6(1)(1)(f) GDPR:

IP address
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page visited)
Access status/HTTP status code
Amount of data transferred
Website visited before
Browser
Operating system
Language and version of the browser software.

§ 4 Additional Features and Offerings on Our Website

Besides the informational use of our website, we offer various services you can use if interested. We also utilize standard functions for analysis or marketing of our offerings, described in more detail below. For this, you generally need to provide additional personal data, or we process such additional data necessary for delivering the respective services. All data processing purposes described here are subject to the previously mentioned principles of data processing.

§ 5 Objection or Withdrawal of Consent to Data Processing

If you have given consent to the processing of your data, you may withdraw it at any time. Withdrawal affects the permissibility of processing your personal data after you have notified us. The permissibility of data processing up until the time of withdrawal remains unaffected.
If we base the processing of your personal data on a balancing of interests, you may object to the processing. This is particularly the case if processing is not necessary for fulfilling a contract with you, which we describe in the function details below. When exercising such an objection, please provide reasons why we should not process your personal data as we have. We will review the situation and either stop or adjust the data processing or demonstrate our compelling legitimate grounds for continuing the processing.
Naturally, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can best exercise your objection to advertising by contacting us using the contact details provided above.

§ 6 Data Processing from Your Devices ("Cookie Policy")

In addition to the data mentioned in § 3, we use technical tools for various functions when you use our website, particularly cookies that may be stored on your device. When visiting our website and at any time thereafter, you can choose whether to allow cookies generally or select individual additional functions. Changes can be made in your browser settings or via our consent manager. Below, we first describe cookies from a technical perspective (2), followed by your individual options by distinguishing between technically necessary cookies (3) and optional cookies chosen by you (4).
Cookies are small text files stored on your hard drive associated with the browser you use, allowing the website that sets the cookie to receive specific information. Cookies cannot execute programs or transmit viruses to your computer; they primarily serve to make the internet offering faster and more user-friendly.
Mandatory cookies required to display the website technically: Without these techniques, our website cannot be displayed fully or functionally correctly, nor can support features be enabled. These cookies are transient and deleted no later than 30 days after your visit
Optional cookies upon your consent: We only use various cookies with your consent, which you can select using the so-called cookie consent tool during your first visit to our website. These functions are only activated if you agree and can serve, in particular, to analyze and improve visits to our site, facilitate usage across different browsers or devices, recognize you upon a return visit, or display advertisements (potentially tailored to interests, measure ad effectiveness, or show interest-based ads). The legal basis for this processing is Article 6(1)(1)(a) of the GDPR. You can withdraw your consent at any time, without affecting the legality of processing carried out before the withdrawal.

§ 7 Newsletter

You can subscribe to our newsletter, through which we inform you about our current interesting offers, by giving your consent. The advertised goods and services are specified in the consent declaration.
We use the so-called double opt-in procedure for registering for our newsletter. This means that after signing up, we send an email to the address provided, requesting confirmation that you are the owner of the specified email address and wish to receive the notifications. If you do not confirm your registration within 24 hours, your information will be locked and automatically deleted after one month. We also store the IP addresses you use as well as the time of registration and confirmation. This procedure is used to verify your registration and, if necessary, clarify any potential misuse of your personal data.
Mandatory fields for receiving the newsletter are your company name, first name, last name, email address, and language. Providing additional, specially marked data is voluntary and is used to personalize communication with you. Once you confirm, we store your email address for the purpose of sending the newsletter. The legal basis is Article 6(1)(1)(a) of the GDPR.
You can withdraw your consent to receive the newsletter at any time and unsubscribe. You can revoke your consent by clicking the link provided in every newsletter email.

§ 8 Web tracking using Google Analytics via Google Tag Manager

This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). For this purpose, we use the Google Tag Manager. The purpose of using this tool is to analyze your user interactions on websites and apps, and to improve our services and make them more interesting for you as a user based on the resulting statistics and reports.
Interactions between you as the website user and our website are primarily recorded using cookies, device/browser data, IP addresses, and website or app activities. Additionally, Google Analytics collects anonymized IP addresses to ensure service security and provide information about the user's region ("IP location"). Using the anonymization feature ("IP Masking"), Google truncates IP addresses within the EU/EEA by the last octet.
Google acts as a data processor, and we have concluded a corresponding agreement with Google. The information obtained about your use of this website and the anonymized IP addresses is usually transferred to and processed on Google's servers in the USA. For these cases, Google adheres to the EU-US Privacy Framework.
The legal basis for processing this information (for a maximum of 14 months) is your consent (Article 6(1)(1)(a) of the GDPR). You can withdraw your consent at any time without affecting the legality of processing carried out before the withdrawal. The easiest way to withdraw consent is through our consent manager or by installing the Google browser add-on available at: http://tools.google.com/dlpage/gaoptout?hl=en.
Further details about Google Analytics can be found at: https://marketingplatform.google.com/about/analytics/terms/en/. Information on data processing using Google Analytics is available here: https://support.google.com/analytics/answer/6004245?hl=en. General information on Google's data processing, which is also relevant for Google Analytics, is provided in Google's privacy policy: https://www.google.com/intl/en/policies/privacy/.

§ 9 Integration of YouTube and Vimeo Videos

We have embedded YouTube and Vimeo videos into our online offering, which are stored at http://www.YouTube.com and https://vimeo.com and can be played directly from our website. These are all embedded in "enhanced privacy mode," meaning no data about you as a user is transmitted to YouTube or Vimeo unless you play the videos. Only when you play the videos are the data outlined in Section 2 transmitted. We have no control over this data transmission. The legal basis for displaying the videos is Article 6(1)(1)(a) of the GDPR, meaning the integration occurs only with your consent.
By visiting the website, YouTube or Vimeo receives information that you have accessed the corresponding subpage of our website. Additionally, basic data such as IP address and timestamp are transmitted. This occurs regardless of whether YouTube or Vimeo provides a user account through which you are logged in or if no user account exists. If you are logged into Google, your data will be directly assigned to your account. If you do not want this data to be associated with your YouTube or Vimeo profile, you must log out before activating the button. YouTube and Vimeo save your data as user profiles and use it for purposes such as advertising, market research, and/or tailoring their websites to user needs. Such analysis occurs (even for non-logged-in users) to deliver targeted advertising and inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, which you can exercise by contacting YouTube.
The collected information is stored on servers by Google, including in the USA. For such cases, the provider claims to adhere to standards comparable to the former EU-US Privacy Shield and commits to complying with applicable data protection laws for international data transfers. Additionally, we have concluded standard contractual clauses with Google to ensure an adequate level of data protection in third countries.
Further details on the purpose and scope of data collection and processing by YouTube and Vimeo can be found in their respective privacy policies, where you can also find more information about your rights and privacy settings: https://www.google.com/intl/en/policies/privacy/.

§ 10 Integration of Google Maps

We use the Google Maps service on this website. This enables us to display interactive maps directly on the website and allows you to conveniently use the map function. The legal basis for using the maps is Article 6(1)(1)(a) of the GDPR, meaning the integration occurs only with your consent.
By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. Basic data such as IP address and timestamp are also transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or if no user account exists. If you are logged into Google, your data will be directly assigned to your account. If you do not want this data to be associated with your Google profile, you must log out before activating the button. Google saves your data as user profiles and uses it for purposes such as advertising, market research, and/or tailoring its website to user needs. Such analysis occurs (even for non-logged-in users) to deliver targeted advertising and inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, which you can exercise by contacting Google.
The collected information is stored on Google's servers, including in the USA. The provider claims to adhere to standards comparable to the former EU-US Privacy Shield and commits to complying with applicable data protection laws for international data transfers. Additionally, we have concluded standard contractual clauses with Google to ensure an adequate level of data protection in third countries.
Further details on the purpose and scope of data collection and processing by Google Maps can be found in Google's privacy policy: http://www.google.com/intl/en/policies/privacy/.

§ 11 Use of the JB-USER-Network or JB Dealer Platform

To use our network or dealer platform, you must register by providing your email address, a password of your choice, and other required company information. Providing the above data is mandatory, while all other information can be supplied voluntarily when using our portal.
When you use the network or dealer platform, we store your data required for contract fulfillment until you delete your access permanently. Additionally, we store the voluntary data you provide for as long as you use the network or dealer platform unless you delete it beforehand. You can manage and change all information in the secure customer area. The legal basis is Article 6(1)(1)(b) of the GDPR.
When using the network or dealer platform, the data you provide is accessible to other participants as required by the contract. Non-registered members cannot access your information. For all registered members, your username and photo are visible, regardless of whether you have enabled them. Conversely, your full profile with the data you have enabled is visible to all members you have confirmed as personal contacts. If you share content with personal contacts outside private messages, that content may be visible to third parties if your personal contact has granted access.
To prevent unauthorized third-party access to your personal data, especially financial data, the connection is encrypted using TLS technology.

JB-Lighting is Member of