Legal information
Privacy Policy
§ 1 General information
In this privacy policy you will find detailed information about what happens to your personal data when you visit our website www.alurays.de. All data that allows a personal identification on your part is personal data. When processing your data, we strictly comply with the legal requirements, in particular the General Data Protection Regulation (GDPR). It is very important to us that your visit to our website is completely secure.
§ 2 Responsible body
The responsibility for the collection and processing of personal data on this website lies with:
Alurays lighting technology GmbH
Represented by: Dominic Sacher
Johann-G.-Gutenberg-Str. 19 e/f
82140 Olching, Germany
E-Mail: info@alurays.de
Telephone: +49 8142 4454040
§ 3 Data Protection Officer
The data protection officer for the controller of the processing is:
Dominic Sacher
Johann-G.-Gutenberg-Str. 19 e/f
82140 Olching, Germany
E-Mail: info@alurays.de
Telephone: +49 8142 4454040
If you have any questions or suggestions about data protection, you can contact our data protection officer at any time.
§ 4 Newsletter
Only with your prior consent will we send you our newsletter at regular intervals to your e-mail address. In order to use this service, it is necessary to provide and verify your e-mail address. Further data will not be collected or on a voluntary basis. Your data will be used exclusively for sending the newsletter.
The data provided during the newsletter registration will be processed exclusively with your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time. An informal notification by e-mail or the use of the unsubscribe link contained in the newsletter is sufficient. Data processing already carried out remains unaffected by your revocation.
When you unsubscribe from the subscription, the data stored for the setup of the subscription will be deleted. If this data has already been deposited with us for other purposes and elsewhere, it will remain stored.
§ 5 Contact form
If you contact us by e-mail or contact form, the data transmitted, including your contact details, will be stored in order to process your request and be available for any queries. Such data will not be passed on to third parties without your express consent.
The processing of the data transmitted in the contact form takes place exclusively on the basis of your consent granted in accordance with Art. 6 para. 1 lit. a GDPR. A revocation of this consent is possible at any time without giving reasons. An informal notification by e-mail to us suffices for the revocation. The legality of the data processing carried out before the revocation is not affected by the revocation.
The data transmitted via the contact form will be stored with us until you request us to delete it, revoke your consent to storage or the need for data storage ceases. Legal retention periods remain unaffected.
§ 6 Use and disclosure of data
We assure you that personal data that you provide us with, for example, by e-mail, will not be sold to third parties or otherwise used commercially. Your data will be processed exclusively for the purpose of correspondence with you and for the purpose for which you have provided the data to us. As part of payment processing, your payment data will be forwarded to the commissioned credit institution.
The data collected automatically when you visit our website will be used exclusively for the purposes mentioned above. Any other use of the data will not take place. In principle, we will not pass your data on to third parties unless there is a legal obligation to pass on or you have expressly consented.
§ 7 Encryption (SSL/TLS)
Our website uses SSL or TLS encryption to ensure the security and protection of the transmission of confidential content, in particular requests that you send as a site visitor to us as the operator of the website. An encrypted connection can be identified by "https://" in the address line of your browser as well as the lock symbol. Thus, the data sent to us cannot be read by unauthorized third parties.
§ 8 Storage time
The storage of your personal data, which you transmit to us via our website, only takes place for the period necessary to achieve the respective purpose of data processing. However, in accordance with commercial and tax retention obligations, the storage of certain data may take up to ten years.
§ 9 Your data protection rights
As a data subject of data processing, you have the following rights vis-à-vis the controller with regard to your personal data in accordance with the statutory provisions:
A. Right of withdrawal
If the processing of your data is based on your consent, you have the right, in accordance with Art. 7 para. 3 GDPR, to revoke this consent at any time with effect for the future. The legality of the processing carried out until the revocation remains unaffected. Storage for billing and accounting purposes is not affected by a revocation.
B. Right of access
Pursuant to Art. 15 GDPR, you have the right to confirm whether we process your personal data and, where applicable, to information about this data, the processing purposes, data categories, recipients, storage period or their criteria, your further rights of data subject, the data origin, automated decision-making including profiling, as well as guarantees in accordance with Art. 46 GDPR for transfers to third countries.
C. Right to correction
In accordance with Art. 16 GDPR, you can request the correction of incorrect personal data and the addition of incomplete data at any time.
D. Right to erasure
In accordance with Art. 17 GDPR, you can request deletion if the data is no longer required, you withdraw your consent and there is no other legal basis, you object to Art. 21 GDPR and there are no priority reasons, the processing is unlawful, there is a legal obligation to delete or the data has been collected in connection with services of the information society pursuant to Art. 8 para. 1 GDPR.
The right may be restricted to the extent that processing is necessary for the performance of a legal obligation or public task, for reasons of public health, for archiving, research or statistics purposes in the public interest, or for the establishment, exercise or defence of legal claims.
If we have made data public and are obliged to delete it, we will take reasonable, technical measures, taking into account available technology and implementation costs, to inform other responsible parties about your deletion request regarding links, copies or replications.
E. Right to restriction of processing
In accordance with Art. 18 GDPR, you may request the restriction if you dispute the accuracy of the data, the processing is unlawful and you request a restriction instead of erasure, we no longer need the data, but you need it for legal claims, or during the examination of an objection pursuant to Art. 21 para. 1 GDPR. After a restriction, the data may only be processed with your consent; legal exceptions, for example for legal claims or public interests, remain unaffected.
F. Right to information
In accordance with Art. 19 GDPR, we shall notify all recipients to whom personal data have been disclosed of any rectification, deletion or restriction, unless this is impossible or involves disproportionate effort. Upon request, we will inform you about these recipients.
G. Protection in automated decisions including profiling
In accordance with Art. 22 GDPR, you have the right in principle not to be subject to an exclusively automated decision which has legal effect against you or similarly significantly affects you. Exceptions exist especially if necessary for a contract, legal admissibility with appropriate protective measures or express consent. In the permitted cases there is at least the right to human intervention, presentation of your own point of view and contesting the decision.
H. Right to data portability
In accordance with Art. 20 GDPR, you may request automated processing based on consent or contract to receive the relevant data in a structured, commonly used and machine-readable format or, if technically feasible, to have it transferred directly to another controller.
I. Right to object
In accordance with Art. 21 GDPR, for reasons arising from your particular situation, you may at any time object to processing based on Art. 6 para. 1 lit. e or f GDPR, including profiling. We will then no longer process the data unless we demonstrate compelling reasons worthy of protection or the processing serves legal claims.
If data is processed for direct advertising, you can object at any time to the processing for this purpose, including the associated profiling. After that, your data will no longer be processed for direct advertising. In connection with information society services, you can exercise your right of objection by means of automated procedures in which technical specifications are used.
J. Right to lodge a complaint with a supervisory authority
Under Art. 77 GDPR, without prejudice to other remedies, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, workplace or place of the alleged infringement.