Privacy policy
Privacy Policy
General
As the operator of this website and as a company, we come into contact with your personal data. This means all data that reveals something about you and that can be used to identify you. In this privacy policy, we explain how, for what purpose and on what legal basis we process your data.
The party responsible for data processing on this website and within our company is:
stglicht GmbH
Adolf-Dembach-Str. 9
47829 Krefeld
Germany
Telephone: +49 2151 84 130
Email: info@stglicht.de
General Information
SSL/TLS Encryption
Whenever you enter data on websites, place online orders or send emails over the internet, you should always be aware that unauthorised third parties may be able to access your data. There is no complete protection against such access. However, we do everything within our power to protect your data as effectively as possible and to close security gaps wherever we can.
An important protective mechanism is the SSL/TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognise this encryption by the padlock icon in front of the web address in your browser, and by the fact that our web address begins with https:// rather than http://.
How long do we store your data?
In several places in this privacy policy, we inform you how long we, or the companies processing your data on our behalf, store your data. Where no such information is given, we store your data until the purpose of the data processing no longer applies, until you object to the processing, or until you withdraw your consent to the processing.
In the event of an objection or withdrawal, we may nonetheless continue processing your data if at least one of the following conditions applies:
We have compelling legitimate grounds for continuing the processing that outweigh your interests, rights and freedoms (this applies only in the case of an objection to processing; if your objection relates to direct marketing, we cannot rely on legitimate grounds).
The processing is necessary to assert, exercise or defend legal claims (this does not apply if your objection relates to direct marketing).
We are legally required to retain your data.
In such cases, we delete your data as soon as the relevant condition(s) no longer apply.
Data transfer to the USA
We also use tools on our website provided by companies that transfer your data to the USA, where it is stored and, where applicable, further processed. The European Commission has adopted an adequacy decision for the EU-US Data Privacy Framework. This confirms that the USA provides an adequate level of protection for personal data transferred from the EU to US companies. This decision is based on new safeguards and measures introduced by the USA to meet data protection requirements. Among other things, the adequacy decision includes limitations and safeguards regarding access to data by US intelligence services. Binding safeguards have been introduced to limit access by US intelligence services to what is necessary and proportionate for the protection of national security. In addition, enhanced oversight of the activities of US intelligence services has been established to ensure that restrictions on surveillance activities are observed. An independent redress mechanism has also been set up to handle and resolve complaints from European citizens regarding access to their data. The EU-US Data Privacy Framework therefore enables European companies to transfer data to certified US companies without having to implement additional data protection safeguards. A list of all certified companies can be found at the following link: https://www.dataprivacyframework.gov/s/participant-search
A change to the European Commission's decision cannot be ruled out.
Your Rights
Right to object to data processing
WHERE THIS PRIVACY POLICY STATES THAT WE RELY ON LEGITIMATE INTERESTS FOR THE PROCESSING OF YOUR DATA, AND THEREFORE BASE THIS PROCESSING ON ART. 6(1)(F) GDPR, YOU HAVE THE RIGHT UNDER ART. 21 GDPR TO OBJECT TO SUCH PROCESSING. THIS ALSO APPLIES TO ANY PROFILING CARRIED OUT ON THE BASIS OF THIS PROVISION. THIS REQUIRES THAT YOU PROVIDE GROUNDS FOR YOUR OBJECTION THAT ARISE FROM YOUR PARTICULAR SITUATION. NO SUCH GROUNDS ARE REQUIRED IF THE OBJECTION RELATES TO THE USE OF YOUR DATA FOR DIRECT MARKETING PURPOSES.
THE CONSEQUENCE OF AN OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS DOES NOT APPLY IF ONE OF THE FOLLOWING CONDITIONS IS MET:
WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS.
THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
THESE EXCEPTIONS DO NOT APPLY WHERE YOUR OBJECTION RELATES TO DIRECT MARKETING OR TO PROFILING CONNECTED WITH IT.
Further rights
Withdrawing your consent to data processing
Many data processing operations are carried out on the basis of your consent. You provide this, for example, by ticking a corresponding box on an online form before submitting it, or by allowing certain cookies when visiting our website. You may withdraw your consent at any time, without giving reasons (Art. 7(3) GDPR). From the moment of withdrawal, we may no longer process your data on that basis. The only exception is where we are legally required to retain the data for a certain period. Such retention periods exist in particular under tax and commercial law.
Right to lodge a complaint with the competent supervisory authority
If you believe that we are in breach of the General Data Protection Regulation (GDPR), you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. You may contact the supervisory authority in the member state of your habitual residence, your place of work, or the place of the alleged infringement. This right to lodge a complaint exists alongside any other administrative or judicial remedies.
Right to data portability
Data that we process automatically on the basis of your consent or in the performance of a contract must be provided to you or to a third party, at your request, in a common, machine-readable format. We can transfer the data directly to another controller only where this is technically feasible.
Right to access, erasure and rectification
Under Art. 15 GDPR, you have the right to obtain, free of charge, information about the personal data we hold about you, its origin, the parties to whom we disclose it, and the purpose for which it is stored. If the data is incorrect, you have a right to rectification (Art. 16 GDPR); subject to the conditions of Art. 17 GDPR, you may request that we erase the data.
Right to restriction of processing
In certain situations, you may require us, under Art. 18 GDPR, to restrict the processing of your data. In such cases, the data may - apart from being stored - only be processed as follows:
with your consent
to assert, exercise or defend legal claims
to protect the rights of another natural or legal person
for reasons of important public interest of the European Union or of a member state
The right to restriction of processing applies in the following situations:
You have contested the accuracy of your personal data held by us, and we need time to verify this. This right exists for the duration of the verification.
The processing of your personal data is, or was, unlawful. In this case, this right applies as an alternative to erasure of the data.
We no longer need your personal data, but you require it to exercise, defend or assert legal claims. In this case, this right applies as an alternative to erasure of the data.
You have objected under Art. 21(1) GDPR and it has not yet been determined whether our legitimate grounds override yours. This right exists for as long as this determination is pending.
Hosting and Content Delivery Networks (CDNs)
External hosting
Our website is hosted on a server provided by the following internet service provider (host):
IONOS SE
Elgendorfer Str. 57
56410 Montabaur
How do we process your data?
Our host stores all data relating to our website. This includes any personal data collected automatically or entered by you - in particular, this may include your IP address, pages accessed, names, contact details and enquiries, as well as metadata and communication data. When processing this data, our host acts on our instructions and processes the data only to the extent necessary to fulfil its contractual obligations to us.
On what legal basis do we process your data?
As we use our website to address potential customers and maintain relationships with existing customers, the processing of data by our host serves to initiate and perform contracts and is therefore based on Art. 6(1)(b) GDPR. In addition, it is our legitimate interest as a company to provide a professional online presence that meets the necessary requirements for security, speed and efficiency. We therefore also process your data on the basis of Art. 6(1)(f) GDPR.
Data Collection on This Website
Use of cookies
Our website places cookies on your device. These are small text files used for various purposes. Some cookies are technically necessary for the website to function at all ("necessary cookies"). Others are required to enable certain actions or features on the site ("functional cookies") – for example, an online shop's basket function would not work without cookies. Still other cookies are used to analyse user behaviour or to optimise advertising measures. Where we use third-party services on our website, for example to process payments, these companies may also place cookies on your device when you visit the site ("third-party cookies").
How do we process your data?
Session cookies are stored on your device only for the duration of a browsing session; they are deleted automatically once you close your browser. Persistent cookies, by contrast, remain on your device unless you delete them yourself. This may, for example, result in your user behaviour being analysed on an ongoing basis. You can influence how your browser handles cookies through your browser settings:
Whether you wish to be notified when cookies are set
Whether you wish to block cookies generally or in specific cases
Whether you wish cookies to be deleted automatically when you close your browser
If you disable or refuse cookies, the functionality of the website may be limited.
Where we use cookies from other companies or for analytics purposes, we inform you of this within this privacy policy, and we also request your consent when you visit our website where required.
On what legal basis do we process your data?
We have a legitimate interest in ensuring that our online services can be used by visitors without technical problems and that all desired functions are available to them. The storage of necessary and functional cookies on your device is therefore based on Art. 6(1)(f) GDPR. All other cookies are used on the basis of Art. 6(1)(a) GDPR, provided you have given the corresponding consent. You may withdraw this consent at any time with effect for the future. Where you have consented to the placement of necessary and functional cookies as part of the consent request, the storage of these cookies is also based exclusively on your consent.
Cookie consent via Legal Cockpit
What is the Legal Cockpit cookie tool?
A consent management platform (CMP) used to obtain and process GDPR-compliant consent.
Who processes your data?
Legalcore AG, Reinhardtstr. 7, 10117 Berlin
Where can you find further information on data protection at Legal Cockpit?
https://cockpit.legal/datenschutz/
How do we process your data?
We use the Legal Cockpit consent management platform to obtain your consent to the storage of cookies on your device in a data-protection-compliant manner. When you visit our website and close the Legal Cockpit cookie banner after responding to the consent request, the following data is transmitted to the company:
Your IP address
Information about your browser
Information about your device
The time of your visit to the website
Legal Cockpit also stores a cookie in your browser in order to link the consent given (or withdrawn) to your browser. All data collected is stored until the cookies are no longer needed, until you delete the Legal Cockpit cookie, or until you ask us to delete the data. This does not apply where we are legally obliged to retain the data.
On what legal basis do we process your data?
We are legally required to obtain the consent of our website visitors for the use of certain cookies. We use Legal Cockpit in order to fulfil this obligation. The legal basis for this processing is therefore Art. 6(1)(c) GDPR.
Server log files
Server log files record all requests and accesses to our website and log any error messages. They also include personal data, in particular your IP address. However, this is anonymised by the provider after a short period, so that the data can no longer be linked to you personally. This data is transmitted automatically from your browser to our provider.
How do we process your data?
Our provider stores the server log files in order to track activity on our website and identify errors. These files contain the following data:
Browser type and version
Operating system used
Referrer URL
Hostname of the accessing device
Time of the server request
IP address (anonymised where applicable)
We do not combine this data with any other data; we use it solely for statistical analysis and to improve our website.
On what legal basis do we process your data?
We have a legitimate interest in ensuring that our website runs without errors. We also have a legitimate interest in obtaining an anonymised overview of visits to our website. The processing of this data is therefore lawful under Art. 6(1)(f) GDPR.
Plugins and Tools
YouTube (with enhanced privacy mode)
What is YouTube?
A video platform.
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find further information on data protection at YouTube?
https://www.youtube.com/intl/ALL_de/howyoutubeworks/our-commitments/protecting-user-data/
How do we process your data?
Our website allows you to watch YouTube videos. In doing so, Google, as the provider of YouTube, collects and stores certain information about you. As we use YouTube in enhanced privacy mode, this only occurs once you start playing a video. Specifically, the following takes place:
Google's servers are informed which of our pages you have visited from your device. If you are logged into your YouTube account while browsing, Google can link your browsing behaviour directly to your personal profile. If you do not wish this to happen, you must log out of your YouTube account before continuing to browse the internet.
Google receives information about visitors to our website via cookies, device fingerprinting or similar recognition technologies. On this basis, the company compiles video statistics, makes its service more appealing to users, and helps prevent fraud.
Your data may also be processed beyond this. However, the details of this are not known to us, nor can we influence this processing.
Even if you do not play a YouTube video on our website, Google establishes a connection to its DoubleClick network and, where applicable, to further partners. Enhanced privacy mode therefore does not mean that Google processes no data about you at all when you visit our website.
On what legal basis do we process your data?
By embedding YouTube videos, we aim to make our website, as well as our services and offerings, more appealing. This constitutes our legitimate interest as a company and is therefore lawful under Art. 6(1)(f) GDPR.
Where you have consented to this processing, we process your data exclusively on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time. From the moment of withdrawal, we may no longer process your data on this basis.
Google Fonts (self-hosted)
We use fonts provided by the US company Google on our website. These fonts are hosted locally, so no connection is made to Google's servers when you visit our website.
Further information on Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy.
Google Maps
What is Google Maps?
A mapping service provided by Google Ireland Ltd.
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find further information on data protection at Google?
https://policies.google.com/privacy
On what basis do we transfer your data to the USA?
On the basis of the European Commission's adequacy decision and the corresponding certification of the company.
How do we process your data?
We use Google Maps on our website. In order for you to be able to use all the map service's features, Google stores your IP address on one of its servers in the USA.
On what legal basis do we process your data?
Google Maps makes it easier for visitors to find the locations shown on our website. As a company, we have a legitimate interest in this. The processing of this data is therefore lawful under Art. 6(1)(f) GDPR.
Where you have consented to this processing, we process your data exclusively on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time. From the moment of withdrawal, we may no longer process your data on this basis.
Data Processing on Social Media
What is meant by social media?
By social media, we mean the social networks on which we maintain publicly accessible profiles. The specific networks concerned are listed below.
Who processes your data?
The respective operators of the social networks. The individual operators are listed below, under each network.
How is your data processed?
The operators of social networks are generally able to collect and analyse extensive data on the behaviour of visitors and users of their networks. It is not possible for us to track every processing operation carried out within the social networks we use; further processing operations not listed here may therefore be carried out by the operators of these networks. Further information can be found in the terms of use and privacy policies of the respective social networks.
Processing of your data may be triggered by visiting the social network's website or our profile page there. Even visiting a website that uses certain features of the network, such as "like" or "share" buttons, may already result in data being transmitted to the operator of the social network. If you are yourself a user of the social network and logged into your account, your visit to our profile page may be linked to your account by the network's operator. Even if you have not registered a user account, or are not logged in, the network's operator may still collect your personal data - for example, by recording your IP address or setting cookies. Using this data, operators can create user profiles tailored to your behaviour and interests and display interest-based advertising to you, both within and outside the network. If you are a registered user of the network, interest-based advertising may also be displayed on all devices on which you are, or have been, logged in.
On what legal basis is your data processed?
Our profiles on social networks are intended to ensure the broadest possible online presence for our company. As a company, we have a legitimate interest in this. This processing of data is therefore lawful under Art. 6(1)(f) GDPR.
Any processing operations and analyses carried out by the operators of social networks themselves may be based on other legal grounds, which must be specified by the respective operators.
Who is responsible for processing your data, and how can you exercise your rights?
When you visit one of our profiles on a social network, we are jointly responsible, together with the operator of the respective network, for the data processing operations triggered by that visit. You may generally exercise your rights both against us and against the operator of the respective network.
Despite this joint responsibility with the operators of social networks, our influence over the respective operator's data processing operations is limited and is governed primarily by that operator's own requirements.
How long is your data stored?
Where we collect data via our social media profiles, this data is deleted from our systems as soon as the purpose of storage no longer applies, you ask us to delete it, or you withdraw your consent to its storage. Cookies that have been stored remain on your device until you delete them. Mandatory statutory provisions - in particular retention periods - remain unaffected.
We have no influence over how long the operators of social networks store data that they collect for their own purposes. Information on this can be obtained directly from the operator of the respective social network, for example in its privacy policy.
Which social media platforms do we use?
Facebook
What is Facebook?
A social network.
Who processes your data?
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Is your data transferred to third countries?
Yes, to the USA and to other third countries.
Where can you find further information on data protection at Facebook?
https://www.facebook.com/about/privacy/
Where can you, as a Facebook user, adjust your advertising settings?
As a registered Facebook user, you can adjust your advertising settings in your account. To do so, click the following link and log in:
https://www.facebook.com/settings?tab=ads
Instagram
What is Instagram?
A social network specialising in photos and videos.
Who processes your data?
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Is your data transferred to third countries?
Yes.
Where can you find further information on data protection at Instagram?
https://help.instagram.com/519522125107875/
Where can you, as a user, adjust your privacy settings?
As a registered Instagram user, you can adjust your privacy settings in your account. To do so, click the following link and log in:
https://www.instagram.com/accounts/privacy_and_security/
LinkedIn
What is LinkedIn?
A social network for professional contacts.
Who processes your data?
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Is your data transferred to third countries?
Yes.
Where can you find further information on data protection at LinkedIn?
https://www.linkedin.com/legal/privacy-policy
Where can you, as a user, adjust your privacy settings?
As a registered LinkedIn user, you can adjust your privacy settings in your account. To do so, click the following link and log in:
https://www.linkedin.com/psettings/