PROLUX PRIVACY POLICY ACCORDING TO THE GDPR (General Data Protection Regulation)

At ProLux, we put great emphasis on the protection and security of the data of our customers and website visitors. Therefore, it is very important to us to inform you in a transparent manner about the collection, processing, storage and protection of your personal data in the following data protection declaration.

1. WHO IS RESPONSIBLE FOR THIS WEBSITE?

Responsible within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is the:

ProLux Systemtechnik GmbH & Co.KG
Am Schinderwasen 7
89134 Blaustein

For questions regarding this data protection declaration or the protection of your data, you can also contact the data protection officer at any time:

Manuel Jungbauer
Am Schinderwasen 7
89134 Blaustein

Tel. +49 7304 9695-0

datenschutz@prolux.de

2. GENERAL INFORMATION ON DATA PROCESSING

2.1. SCOPE OF THE PROCESSING OF PERSONAL DATA

We generally collect and use personal data of our users only insofar as this is necessary for the provision of a functional website as well as our contents and services. The collection and use of our users' personal data takes place regularly only with the consent of the user. An exception applies in those cases in which it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by legal regulations.

2.2. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

As far as we obtain the consent of the data subject for processing operations of personal data, the legal basis is Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR). When processing personal data that is necessary for the performance of a contract to which the data subject is a party, the legal basis is Article 6 (1) (b) GDPR. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. If the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, the legal basis is Article 6 (1) (c) of the GDPR. In the event that vital interests of the data subject or another natural person make the processing of personal data necessary, the legal basis is Art. 6 (1) (d) of the Data Protection Regulation. If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, the legal basis for the processing is Art. 6 (1) lit. f of the Data Protection Regulation (DSGVO).

2.3. DELETION OF DATA AND STORAGE PERIOD

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage ceases to apply. Furthermore, storage may take place if this has been provided for by the European or national legislator in union regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a necessity for the continued storage of the data for the conclusion or fulfilment of a contract.

3. WHAT ARE YOUR RIGHTS?

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the party responsible:

3.1. RIGHT OF INFORMATION

You may request confirmation from the responsible person as to whether personal data relating to you is being processed by us.

If there is such processing, you can request information from the responsible person about the following:

(1)  the purposes for which the personal data are processed;

(2)   the categories of personal data which are processed;

(3)   the recipients or categories of recipients to whom the personal data concerning you                     have been or will be disclosed;

(4)   the planned duration of the storage of the personal data relating to you or, if specific information on this is not possible, the criteria for determining the storage duration;

(5)   the existence of a right to rectify or erase personal data concerning you, a right to have processing restricted by the controller or a right to object to such processing;

(6)   the existence of the right to lodge a complaint with a supervisory authority;

(7)   any available information on the origin of the data if the personal data are not collected from the data subject;

(8)   the existence of automated decision-making, including profiling, pursuant to article 22(1) and (4) of the GDPR and, at least in these cases, relevant information about the logic involved and the scope and intended effects of such processing for the data subject.

You are entitled to request information on whether personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed about the appropriate safeguards pursuant to article 46 of the GDPR in connection with the transfer.

3.2 RIGHT OF RECTIFICATION

You have a right of rectification and/or completion vis-à-vis the responsible party if the personal data processed concerning you are inaccurate or incomplete. The responsible party shall carry out the rectification without undue delay.

3.3. RIGHT TO RESTRICT PROCESSING

You may request the restriction of the processing of personal data concerning you subject to the following conditions:

(1)   if you object to the accuracy of the personal data concerning you for a period enabling the data processor to verify the accuracy of the personal data;

(2)   the processing is illegitimate and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;

(3)   the data processor no longer needs the personal data for the purposes of processing, but you need it for the assertion, exercise or defence of legal claims,

or

(4)   if you have objected to the processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the data controller outweigh your reasons.

If the processing of personal data relating to you has been restricted, such data may be processed, with the exception of storage, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the European Union or a member state. If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the data controller before the restriction is withdrawn.

3.4. RIGHT TO DELETION 

1. a) Obligation to delete

You may request the data controller to delete the personal data concerning you without delay and the data controller is obliged to delete such data without delay if one of the following reasons applies:

(1)   The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2)   You withdraw your consent on which the processing was based pursuant to article 6 (1) lit. a or article 9 (2) lit. a of the GDPR and there is no other legal basis for the processing.

(3)   You object to the processing pursuant to article 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to article 21 (2) GDPR.

(4)   The personal data concerning you has been processed in an unlawful manner.

(5)   The deletion of the personal data concerning you is necessary for compliance with a legal obligation under European Union law or the law of the member states to which the data controller is subject.

(6)   The personal data concerning you was collected in relation to information society services offered pursuant to article 8(1) of the GDPR.

1. b) Information to third parties 

If the data controller has made the personal data concerning you public and is obliged to delete it pursuant to article 17(1) of the GDPR, it shall take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they delete all links to, or copies or replications of, that personal data.

1. c) Exclusions

The right to deletion does not exist insofar as the processing is necessary

(1)   to exercise the right to freedom of expression and information;

(2)   for compliance with a legal obligation which requires processing under the law of the European Union or the member states to which the data controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;

(3)  for reasons of public interest in the area of public health pursuant to article 9 (2) (h) and (i) and article 9 (3) of the GDPR;

(4)  for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to article 89(1) of the GDPR, where the right referred to in section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing,

or

(5) for the assertion, exercise or defence of legal claims.

3.5 RIGHT TO INFORMATION

If you have asserted the right to rectification, erasure or restriction of processing against the data controller, the data controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right against the controller to be informed about these recipients.

3.6 RIGHT TO DATA TRANSFERABILITY

You have the right to receive the personal data concerning you that you have provided to the data controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another data controller without hindrance from the data controller to whom the personal data has been made available, provided that

(1) the processing is based on consent pursuant to article 6(1) a of the GDPR or article 9(2) a of the GDPR or on a contract pursuant to article 6(1) b of the GDPR.

and

(2) the processing is carried out by means of automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transferred directly from one data controller to another, insofar as this is technically feasible. This must not affect the freedoms and rights of other persons.

The right to data transferability shall not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

3.7 RIGHT OF OBJECTION 

You have the right to object at any time, on the basis of grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. The data controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services, notwithstanding directive 2002/58/EC, to make use of your right to object by means of automated procedures involving the use of technical specifications.

3.8 RIGHT TO WITHDRAWAL OF THE DECLARATION OF CONSENT UNDER DATA PROTECTION LAW

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.

3.9 AUTOMATED DECISION-MAKING IN INDIVIDUAL CASES INCLUDING PROFILING

You are entitled not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

(1)   is necessary for the completion or fulfilment of a contract between you and the responsible person,

(2)   is authorised by the legislation of the Union or of the member states to which the data controller is subject, and this legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests

or

(3)   is done with your express consent.

However, these decisions must not be based on special categories of personal data pursuant to article 9(1) of the GDPR, unless article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

Concerning the cases referred to in (1) and (3), the data controller shall take reasonable steps to safeguard the rights and freedoms of the data subject and his or her legitimate interests, including at least the right to obtain the intervention of a person from the data controller, to express his or her point of view and to contest the decision.

3.10 RIGHT TO COMPLAIN TO A SUPERVISORY AUTHORITY

You have the right to make a complaint to a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy, if you consider that the processing of personal data relating to you violates the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under article 78 GDPR.

>> PROVISION OF THE WEBSITE

1. DESCRIPTION AND SCOPE OF DATA PROCESSING

Whenever our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

• Information about the type of browser and the version used
• The user's operating system
• The user's internet service provider
• The IP address of the user
• Date and time of access
• Websites from which the user's system accesses our website
• Websites that are accessed by the user's system via our website

The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

2. LEGAL BASIS FOR DATA PROCESSING

The legal basis for the temporary storage of the data and the log files is article 6 paragraph 1 letter f DSGVO.

3. PURPOSE OF THE DATA PROCESSING

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. The storage in log files is carried out in order to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes is not performed in this context. These purposes are also our legitimate interest in data processing according to article 6 paragraph 1 letter f GDPR.

4. DURATION OF STORAGE

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the accessing client is no longer possible.

5. POSSIBILITY OF OBJECTION AND REMOVAL

The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. Consequently, there is no possibility for the user to object.

 

 

>>  PROLUX USER ACCOUNT

1. DESCRIPTION AND SCOPE OF DATA PROCESSING

On our website, we offer users the opportunity to register by providing personal data. The data is entered in an input mask and transmitted to us and stored. This data is used to create and manage your user account. We inform you about your order history and your orders and give you the opportunity to define your account settings yourself. We also provide easy ways for you to edit and keep details such as contact details and payment information up to date. In addition, you have the option to save products in your shopping cart or watch list. Your data will not be passed on to third parties.

The following data is stored at the time of registration:

• gender (salutation)
• first and last name
• address
• telephone number / telefax
• e-mail address
• password
• IP address of the user
• date and time of registration

We process the following data when you make a purchase:

• order history
• delivery details
• payment history

We process the following data in connection with your cookies:

• click history
• navigation and surfing history

As part of the registration process, the user's agreement to the processing of this data is obtained.

The transfer of data to third parties only serves to provide the above-mentioned services to optimise the website. We use website agencies and analysis tools for product ratings.

2. LEGAL BASIS FOR DATA PROCESSING

The legal basis for the processing of the data is article 6 paragraph 1 letter a of the GDPR if the user has given his or her consent.

If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is article 6 paragraph 1 letter b GDPR.

3. PURPOSE OF THE DATA PROCESSING

Registration of the user is necessary for the fulfilment of a contract with the user or for the implementation of pre-contractual measures.

4. DURATION OF STORAGE

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for data collected during the registration process for the fulfilment of a contract or for the implementation of pre-contractual measures when the data is no longer required for the implementation of the contract. We retain your data as long as you have an active ProLux user account.

You are entitled to close your account at any time. In this case, your account will expire and become inactive. We will retain your personal data if required by law and if there are unresolved disputes. After closing your account, your data will be deleted. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations.

5. POSSIBILITY OF OBJECTION AND REMOVAL

Registered users have the option of cancelling their registration at any time. You can have the data stored about you changed at any time.

If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

 

 

>>  YOUR PURCHASE WITH PROLUX

1. DESCRIPTION AND SCOPE OF DATA PROCESSING

Your personal data is used for the processing and handling of your order within the ProLux group of companies. This can be done electronically via our web shop, by e-mail or fax as well as offline via our telephone hotlines or in writing.

The processing includes:

• communication within the framework of order processing
• the dispatch of the goods and notifications about the delivery status
• notifications in case of problems with the delivery of your order
• handling of complaints and product warranty claims
• processing for payment handling

We use your personal data to process your payments. The following data is stored at the time of registration:

• company name
• first and last name
• address
• telephone number
• e-mail address
• password
• VAT ID
• IP address of the user
• date and time of registration

If you have a ProLux user account, we also process your personal data that you have submitted in connection with the user account, including:

• account or membership number
• purchase history order history
• payment history

The disclosure of personal data to third parties is only for the purpose of providing the above services, i.e. to companies communication agencies for sending order confirmations, storage and distribution providers in connection with the delivery of your order. Payment service providers for the processing of your payment.

2. LEGAL BASIS FOR DATA PROCESSING

The legal basis for processing your data in the context of order processing is the fulfilment of a contract to which the user/buyer is a party or the implementation of pre-contractual measures, in accordance with article 6 paragraph 1 letter b GDPR.

3. PURPOSE OF THE DATA PROCESSING

Registration of the user is necessary for the fulfilment of a contract with the user or for the implementation of pre-contractual measures.

4. DURATION OF STORAGE

As soon as the data is no longer necessary to achieve the purpose for which it was collected, it will be deleted. This generally means that we will retain your personal data for the duration of our relationship or as necessary to comply with applicable statutes or statute of limitations and to comply with applicable laws, resolve disputes and enforce agreements.

5. POSSIBILITY OF OBJECTION AND REMOVAL

Registered users have the option of cancelling their registration at any time. The data stored about you can be changed at any time.

If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

 

>> CUSTOMER SERVICE

1. DESCRIPTION AND SCOPE OF DATA PROCESSING

The personal data is used to process your enquiries, complaints, product warranty claims and technical support issues by email, telephone/fax, in writing and via social media. We may also contact you if there is a concern with your order. There is a contact form on our website which can be used, amongst other things, to contact us electronically. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored.

The following data is also stored at the time the message is sent:

• the IP address of the user
• the date and time of registration

For the processing of the data, your consent is obtained via a checkbox during the submission process and a link to this privacy policy is provided.

Alternatively, it is possible to contact us via the e-mail address provided, by telephone or via social media. In this case, the user's personal data transmitted by you will be stored.

In this context, the data will not be passed on to third parties outside the ProLux Group. The data will be used exclusively for processing your request.

2. LEGAL BASIS FOR DATA PROCESSING

The legal basis for the processing of data via our contact form is the consent of the user article 6 paragraph 1 letter aof the German Data Protection Regulation (DSGVO).

The legal basis for the processing of data transmitted via email, telephone or social media is article 6 paragraph 1 letter f of the German Data Protection Regulation (DSGVO). If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is article 6 paragraph 1 letter b DSGVO.

 

 

3. PURPOSE OF THE DATA PROCESSING

We only process the personal data from the input mask for the purpose of processing the contact. In the case of contact via e-mail or social media, the processing of the data also constitutes the necessary legitimate interest or the initiation of a contract.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. DURATION OF STORAGE

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This generally means that we will retain your personal data for the duration of our relationship or as necessary to comply with applicable statutes or statute of limitations and to comply with applicable laws, resolve disputes and enforce agreements.

5. POSSIBILITY OF OBJECTION AND REMOVAL

The user has the option to withdraw his consent to the processing of personal data at any time. If the user contacts us by e-mail, he or she can object to the storage of his or her personal data at any time. Should this be the case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

 

>> ELECTRONIC TRADE FAIR TICKET ORDER

1. DESCRIPTION AND SCOPE OF DATA PROCESSING

There is an order form on our website which can be used to order trade fair tickets electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.  

The following data is also stored at the time the order is sent:

• the IP address of the user
• the date and time of the order
• browser type, operating system, language

Your consent will be obtained for the processing of the data during the submission process and reference will be made to this data protection declaration.

The data will be used exclusively for the creation and provision of the fair tickets. Non-mandatory fields are optional.

For companies located in countries of our ProLux trade partners, the data will be passed on to the respective ProLux trade partner for implementation in this context.

2. LEGAL BASIS FOR DATA PROCESSING

The legal basis for the processing of the data is article 6 paragraph 1 letter a of the German Data Protection Act (DSGVO) if the user has given his or her consent.

3. PURPOSE OF THE DATA PROCESSING

The processing of the personal data from the input mask serves solely to provide us with the trade fair tickets. In the event of contact being made, this also constitutes the necessary legitimate interest in processing the data.

The other personal data processed during the submission process serve to prevent misuse of the order form and to ensure the security of our information technology systems.

4. DURATION OF STORAGE

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected, but no later than 30 days after the end of the event.

5. POSSIBILITY OF OBJECTION AND REMOVAL

The user has the option to withdraw his consent to the processing of personal data at any time. If the user contacts us by e-mail, he or she can object to the storage of his or her personal data at any time. In such a case, we will not be able to continue providing the fair ticket. All personal data stored in the course of the order will be deleted in this case.

 

>> PROLUX COMPETITION

1. DESCRIPTION AND SCOPE OF DATA PROCESSING

We collect and process personal data as an organiser of competitions and use it insofar as this is necessary for the establishment of the legal relationship with the participant and for the implementation and handling of the competition.

The processing includes:

• publication of the winner
• communication regarding the processing of the competition
• delivery of the prize

Your personal data will be used to process the competition. The following data is stored at the time of participation in the competition:

• name of the participant
• address data provided (street, postcode, city)
• facebook user ID and profile picture.

2. LEGAL BASIS FOR DATA PROCESSING

The processing of your personal data is based on your consent in the context of participation in a competition in accordance with article 6 paragraph 1 letter a of the German Data Protection Act (DSGVO).

3. PURPOSE OF THE DATA PROCESSING

All personal data will be used exclusively for the purpose of the competition and in accordance with the conditions of participation.

4. DURATION OF STORAGE

All data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This generally means that we retain your personal data for the duration of the competition or as necessary to comply with applicable laws, resolve disputes and enforce agreements. We will generally retain your personal data for a period of 45 days after the end of the competition.

5. POSSIBILITY OF OBJECTION AND REMOVAL

As a participant, you have the right to withdraw your participation at any time. Furthermore, you can have the data stored about you changed at any time.

 

 

>>  DIRECT ADVERTISING VIA E-MAIL OR POSTAL MAIL 

1. DIRECT ADVERTISING VIA E-MAIL OR POSTAL MAIL

We use your personal data to send you offers on products, product recommendations or invitations to industry-specific events by email or postal mail.

This service is based on your previous purchases or due to an explicit registration to our newsletter.

It is possible to subscribe to a free newsletter on our website via a double-opt-in procedure. When registering, the data from the input mask is transmitted to us. For the processing of the data, your consent is obtained during the registration process and reference is made to this data protection declaration.

If you purchase goods or services on our website and provide contact details, these may subsequently be used by us to send a newsletter or postal advertising. No data will be passed on to third parties in connection with the processing of data for the dispatch of newsletters. The data will be used exclusively for sending direct advertising for our own similar goods or services.

The following categories of personal data are processed by us if you provide them to us:

• contact details such as e-mail address, contact person, postcode city, country
• salutation or gender (if you provide this information voluntarily)
• industry

Furthermore, the following additional data is collected during newsletter registration:

• IP address of the calling computer
• date and time of registration

Data is only passed on to third parties for the purpose of carrying out direct advertising, i.e. to technical service providers for physical and digital delivery of direct advertising.

Under no circumstances will your data be passed on, sold or exchanged with third parties outside the ProLux group of companies for advertising purposes.

2. LEGAL BASIS FOR DATA PROCESSING

The legal basis for the processing of the data after registration for the newsletter by the user is the existence of a consent of the user article 6 paragraph 1 letter a of the German Data Protection Act (DSGVO).

The legal basis for sending postal advertising (e.g. catalogues) or a newsletter exists as a result of the sale of goods or services is § 7 paragraph 3 of the German Unfair Competition Act (UWG) or by legitimate interest according to article 6 paragraph 1 letter f of the German Data Protection Act (DSGVO).

3. PURPOSE OF THE DATA PROCESSING

The collection of data serves the sending of direct advertising.

The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.

4. DURATION OF STORAGE

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected or until you withdraw your consent.

Accordingly, the user's email address will be stored as long as the subscription to the newsletter is active. For the purposes of direct marketing of our own similar goods or services, we will consider you to be an inactive customer if you have not made a purchase within the last two years.

5. POSSIBILITY OF OBJECTION AND REMOVAL

You have the right to withdraw your consent for the processing of your personal data for the purpose of direct marketing at any time.

In that case, ProLux-Systemtechnik GmbH & Co KG will no longer be able to send you any further promotional offers or information based on your consent.

You have the following options to refuse direct marketing:

• The subscription to the newsletter can be cancelled by the user concerned at any time. A corresponding link can be found in each newsletter for this purpose.
• according to the instructions in the advertising mail

 

 

 

>>  YOUR APPLICATION WITH PROLUX

1. DESCRIPTION AND SCOPE OF DATA PROCESSING

We use your personal data to process your application as part of the application procedure.

Your application can be submitted by e-mail, postal mail or alternatively online. Our website contains an application form that can be used for online applications. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.

The following data is thus stored at the time the message is sent:

• the IP address of the user
• date and time of receipt
• gender (in the form of address)
• first and last name
• address
• postcode, city
• e-mail address
• telephone
• reference
• field of application
• attachment (cover letter, CV, certificates, photo)

We ask for your consent for the processing of data in the online procedure as part of the submission process and refer you to this data protection declaration.

Alternatively, it is possible to contact us via the e-mail address, telephone number or address provided. In this case, the user's personal data transmitted by you will be stored.

In this context, the data will not be passed on to third parties outside the ProLux Group. The data will be used exclusively for the application process.

2. LEGAL BASIS FOR DATA PROCESSING

The legal basis for processing data via our online application form is the applicant's consent article 6 paragraph 1 letter a of the German Data Protection Act (DSGVO) and §26 paragraph of the Federal Data Protection Act (BDSG).

The legal basis for the processing of data sent by e-mail or post is §26 paragraph of the BDSG.

3. PURPOSE OF THE DATA PROCESSING

The personal data will only be used to process your application and, if necessary, to initiate a contract.

The personal data provided voluntarily in the online application form (no mandatory fields) are used to prevent misuse and to ensure the security of our information technology systems.

4. DURATION OF STORAGE

The data will be deleted when it is no longer required to achieve the purpose for which it was collected. This is the case for personal data from the online application form and those sent by e-mail or postal mail when the respective application procedure has ended. The application procedure is terminated when the circumstances indicate that the matter in question has been conclusively clarified or at the latest after a period of 6 months after the advertised position has been filled. There are deviations in the case of unsolicited applications. If no suitable position is available at the time of receipt of the application, these will be deleted at the latest after a period of 12 months after receipt of the application.

5. POSSIBILITY OF OBJECTION AND REMOVAL

The user has the possibility to withdraw his consent to the processing of personal data at any time. If the user contacts us, he or she can object to the storage of his or her personal data at any time. In such a case, the application process cannot be continued. All personal data stored in the course of the application will be deleted in that case.

 

>> USE OF COOKIES

1. DESCRIPTION AND SCOPE OF DATA PROCESSING

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's hard drive. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

• language settings
• items in a shopping cart
• log-in information

We also use cookies on our website that enable an analysis of the user's browsing behaviour.

The following data can be transmitted in this way:

• entered search terms
• frequency of page views
• use of website functions

When accessing our website, the user is informed about the use of cookies for analysis purposes and his or her consent to the processing of personal data used in this context is obtained. In this context, a reference to this data protection declaration is also made.

2. LEGAL BASIS FOR DATA PROCESSING

The legal basis for the processing of personal data using technically necessary cookies is article 6 paragraph 1 letter f of the German Data Protection Act (DSGVO).

The legal basis for the processing of personal data using cookies for analysis purposes is article 6 paragraph 1 letter a of the German Data Protection Act (DSGVO) if the user has given his or her consent.

3. PURPOSE OF THE DATA PROCESSING

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

We need cookies for the following applications:

• shopping cart
• adoption of language settings
• remembering search terms

We do not use the user data collected through technically necessary cookies to create user profiles.

The analysis cookies are used for the purpose of improving the quality of our website and its content. The analysis cookies enable us to find out how the website is used and thus to continuously optimise our offer.

These purposes are also our legitimate interest in processing the personal data according to article 6 paragraph 1 letter f of the German Data Protection Act (DSGVO).

4. DURATION OF STORAGE, POSSIBILITY OF OBJECTION AND DELETION

Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

 

 

>> SOCIAL MEDIA

1. FACEBOOK

1.1. FACEBOOK CUSTOMER AUDIENCE AND FACEBOOK PIXEL

We use the Facebook Customer Audience service and the Facebook Pixel on our websites to optimise our advertising offer, provided you have given us your consent to do so.

For more information about these Facebook services and the privacy policy of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), please visit the following link:

https://www.facebook.com/privacy/explanation 

The Facebook pixel on our websites can recognise if you are using a Facebook user account by the Facebook cookie that is set, which is used to transmit the collected usage data to Facebook for analysis and marketing purposes. The Facebook pixel may also enable tracking on many other websites. You can check and/or deactivate this data collection and the further processing and use of the data by Facebook directly on Facebook. 

With Facebook Pixel, the following data is transmitted to Facebook: 

• HTTP header information (including IP address, web browser information, page location, document, web page URL and web browser user agent, and day and time of use).
• Pixel-specific data; this includes the pixel ID and Facebook cookie data, including your Facebook ID (this data is used to link events to a specific Facebook ad account and associate them with a Facebook user)
• additional information about visits to our websites, as well as standard and custom data events.
• orders placed (purchase transactions)
• completion of registrations and trial subscriptions
• products searched for, product information retrieved

The aforementioned data processing only concerns users who have an account with Facebook or who have accessed a Facebook partner page (whereby a cookie has been set). The display of advertisements on Facebook (partner) pages using the "Customer Audience" service does not affect users who are not members of Facebook. If the Facebook ID contained in the Facebook cookie can be assigned to a Facebook user, Facebook assigns this user to a target group ("Custom Audience") on the basis of the rules defined by us, provided that the rules are relevant. We use the information obtained in this way to present advertisements on Facebook (partner) pages or other websites. If you wish to object to the use of the Facebook Pixel, you can set an opt-out cookie with Facebook or deactivate JavaScript in your browser. For further information and the settings options for protecting your privacy for advertising purposes, please refer to Facebook's privacy policy, which can be found on https://www.facebook.com/ads/website_custom_audiences.

1.3. SOCIAL PLUGIN

This website uses social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins are recognisable by one of the Facebook logos (white "f" on a blue tile, the terms "Like", "Like" or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and appearance of Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

When a user calls up a website of this offer that contains such a plugin, his/her browser establishes a direct connection with the Facebook servers. The plugin content is transmitted by Facebook directly to your browser, which then integrates it into the website. The provider therefore has no influence on the scope of the data that Facebook collects with the help of this plugin and therefore informs users according to its level of knowledge:

Facebook receives the information that a user has called up the corresponding page of the offer through the integration of the plugins. If the user is logged in to Facebook, Facebook can assign the visit to his or her Facebook account. If users interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted directly from their browser to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and store his or her IP address. Facebook states that only an anonymised IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and settings options for protecting the privacy of users, can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about him or her via this offer and link it to his or her membership data stored on Facebook, he or she must log out of Facebook before visiting the website.

1.4.  CONVERSION MEASUREMENT WITH THE CONVERSION PIXEL FROM FACEBOOK

We use the "conversion pixel" or visitor action pixel of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). By calling up this pixel from your browser, Facebook can subsequently recognise whether a Facebook advertisement was successful, e.g. led to an online purchase. We only receive statistical data from Facebook for this purpose without any reference to a specific person. This allows us to record the effectiveness of the Facebook ads for statistical and market research purposes. In particular, if you are registered with Facebook, we refer you to their data protection information https://www.facebook.com/about/privacy/.

Please go to www.facebook.com/settings?tab=ads if you wish to withdraw your consent to Conversion Pixel.

2. YOUTUBE

This website may contain at least one plugin from YouTube, part of Google Inc. based in San Bruno/California, USA. As soon as you visit pages of our website that are equipped with a YouTube plugin, a connection to the YouTube servers is established. In the process, the YouTube server is informed which particular page of our website you have visited. If, on top of this, you are logged into your YouTube account, you would enable YouTube to assign your surfing behaviour directly to your personal profile. You can negate this possibility of association if you log out of your account beforehand. For further information on the collection and use of your data by YouTube, please refer to the information on data protection at www.youtube.com.

 

 

>> GOOGLE ANALYTICS

1. PRIVACY STATEMENT ON THE USE OF GOOGLE ANALYTICS

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of article 6 paragraph 1 letter f of the German Data Protection Act (DSGVO). The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

2. IP ANONYMISATION

We have activated the IP anonymisation function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

3. BROWSER PLUGIN

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de.

4. OBJECTION TO DATA COLLECTION

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website:Deactivate Google Analytics.

You can find more information on how Google Analytics handles user data in Google's privacy policy:

https://support.google.com/analytics/answer/6004245?hl=de

5. COMMISSIONED DATA PROCESSING

We have concluded an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

6. DEMOGRAPHIC CHARACTERISTICS IN GOOGLE ANALYTICS

This website uses the "demographic characteristics" function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item "Objection to data collection".