Source: https://www.trilux-akademie.com/uk/footer/data-protection-declaration/
Timestamp: 2019-04-23 03:15:34+00:00

Document:
We are delighted in your interest in our Internet presence and in our offers on our web pages. The protection of your personal data (hereinafter in short “Data”) is a major and very important concern for us. In the following, we would like to inform you therefore in de-tail which Data is being collected during your visit to our Internet presence and your utilisa-tion of the offers available there, and how we subsequently process or utilise these, as well as about which accompanying protective measures we have undertaken also from a tech-nical and organisational perspective.
We protect your privacy and your private data. We collect, process, and use your personal data in compliance with the content of these data protection provisions as well as applica-ble data protection regulations, in particular the GDPR. In these data protection provisions, it is regulated which personal data about you we collect, process, and use. We therefore kindly ask that you carefully read the following explanations.
TRILUX GmbH & Co. KG, Heidestraße 4, D-59759 Arnsberg, Tel.: +49 29 32 301 0, Fax: +49 29 32 301 375, E-mail: privacy@trilux.com, c.f. our Impressum.
On principle, we process the personal data of our users only to the extent that this is nec-essary for providing a functional website as well as our contents and services. The pro-cessing of the personal data of our users is carried out regularly only after having received the user’s consent. An exception applies in such cases in which a prior obtaining of con-sent is not possible for factual reasons and where the processing of the data is permitted by statutory regulations.
To the extent that we obtain a declaration of consent of the data subject for the pro-cessing operations, Art. 6 Par. 1 Lit. a of the EU General Data Protection Regulation (GDPR) serves as legal basis.
To the extent that a processing of personal data is required for the fulfilment of a con-tractual obligation that our company is subject to, Art. 6 Par. 1 Lit. c GDPR serves as le-gal basis.
If the processing is necessary for maintaining a legitimate interest of our company or of a third party and if the interests, basic rights, and basic freedoms of the data subject do not outweigh the aforementioned interest, Art. 6 Par. 1 Lit. f GDPR serves as legal basis for the processing.
Purpose: In case of an informational visit, we collect and use these data exclusively in a form not related to a person. This is done to enable the use of the web pages you retrieved at all, for statistical purposes, as well as to improve our Internet offerings. The temporary storage of the IP address by the system is necessary to make possible a delivery of the web page to the user’s computer. To effect this, the user’s IP address must remain stored for the duration of the session.
Legal basis for the temporary collection of the data and the log files is Art. 6 Par. 1 Lit. f GDPR.
For our Internet presence, we use cookie technology. Cookies are small text files that are sent to your browser by our web server in the context of your visit to our websites and which are stored on your computer by your browser for a later retrieval.
Once the browser session has ended, most of the cookies used by us are deleted from your computer once again (so-called session cookies, also referred to as temporary cook-ies). The purpose of these cookies is to able to continue to identify your computer during a visit to our Internet presence when switching from one of our web pages to another one of our web pages, and to be able to determine the end of your visit. Other cookies may, in-stead, remain on your computer and enable us or our partner companies to “remember” your browser upon your next visit (so-called persistent cookies).
You can specify yourself, through the settings in your browser, whether cookies can be set and retrieved. In your browser, you can, for example, deactivate the storing of cookies al-together, restrict it to certain websites, or configure your browser such that you are auto-matically notified as soon as a cookie is to be set and you are prompted for a response re-garding this. However, for the full scope of functionality of our Internet presence, it necessary, for technical reason, to allow the above.
A collection or storage of personal data in cookies is note being performed by us in this context. Furthermore, we are not utilising any technologies that link the information gener-ated by cookies with user data.
Legal basis for the processing of personal data under utilisation of cookies is Art. 6 Par. 1 Lit. f GDPR.
Legal basis for the processing of personal data under utilisation of cookies for analysis purposes is, in case of an existing corresponding declaration of consent of the user, Art. 6 Par. 1 Lit. a GDPR.
Purpose of the collection of technically necessary cookies is to simplify the utilisation of the websites for the users. Some functions of our website cannot be offered without the utilisa-tion of cookies. For these, is necessary that the browser can be “remembered” even after switching pages.
The user data collected by technically necessary cookies are not being utilised to create user profiles.
The utilisation of analysis cookies is being carried out for the purpose of improving the quality of our website and of its contents. Through analysis cookies, we find out how the website is being utilised and how we can thusly continuously optimise our offer.
These purposes also constitute our legitimate interest in the processing of the personal da-ta in accordance with Art. 6 Par. 1 Lit. f GDPR.
Cookies are stored on the user’s computer and transmitted from the latter to our website. Therefore, you, as the user, also have full control over the utilisation of cookies. By modify-ing the settings in your web browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If you deactivate cookies for our website, it is possible that not all functions of the website can be utilised to their full extent any more.
This website utilises Google Analytics, a web analysis service of Google Inc. ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").
We would like to point out that, in order to prevent a direct correlation with individual per-sons, IP addresses are further processed on this website only in shortened form, since we are using Google Analytics with the “_anonymizeIp()” extension.
In addition to the standard configuration of Google Analytics, functions of Google Analytics are being utilised on this website that support interest-related advertising and advertising based on the surfing behaviour of users. For this, Google Analytics utilises a third party cookie from DoubleClick in order to analyse data regarding the surfing behaviour of users on different websites. With the help of this data, statistical statements regarding demo-graphic data and areas of interest of website users can be made.
We would like to expressly point out to you that we cannot look at any data regarding indi-vidual users and that the statistical data that we utilise cannot be traced back to any specif-ic users.
We are utilising the Pardot Marketing Automation System (“Pardot MAS”) of Pardot LLC, 950 E. Paces Ferry Rd. Suite 3300 Atlanta, GA 30326, USA (“Pardot”) on our websites. Pardot is a specialised software for capturing and analysing the utilisation of a website by website visitors. To the extent that Pardot LLC is processing personally identifiable infor-mation, the processing is performed exclusively on our orders and based on our directions. We have ensured compliance with the GDPR in accordance with Art. 46 GDPR by Pardot LLC via an individual agreement with Pardot LLC.
Purpose: Upon visiting our website, Pardot MAS captures your click path and creates therefrom an individual utilisation profile using a pseudonym. Cookies that allow for a re-identification of your browser are being utilised for this purpose. By confirming the so-called cookie acceptance banner upon your initial utilisation of the website or by consenting to the utilisation of cookies via your continued use of our website, you also agree to the utilisation of cookies of Pardot.
Duration of storage: The data will be deleted as soon as they are no longer needed for re-cording purposes.
Option to object and remove: Cookies are stored on the user’s computer and transmitted from the latter to our website. Therefore, you, as the user, also have full control over the utilisation of cookies. By modifying the settings in your web browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. Furthermore, you can, at any time, deac-tivate the creation of pseudonymised usage profiles by configuring your web browser such that cookies by the “pardot.com” domain are not accepted. If you deactivate cookies for our website, it is possible that not all functions of the website can be utilised to their full ex-tent any more.
To the extent that you would like to take advantage of the services offered on our Internet presence such as (1.) the ordering of catalogues, brochures, and customer magazines, (2.) the ordering of a newsletter, or (3.) the registration of TRILUX products and the extension of the product warranty or the submission of a reclamation, or (4.) registering for events of the TRILUX Academy, it is, however, necessary that you provide additional data for that. Those data will be such data as are necessary to handle the respective request. The nec-essary data and the respective intended purpose, legal basis, and, where applicable, dis-closure to third parties will be presented in detail below. You may voluntarily provide addi-tional information; it will be marked accordingly by us.
In case of shipping a catalogue, a brochure, or a customer magazine, your postal address.
Purpose: The collection or utilisation of your data is carried out for the purpose of handling the ordering of catalogues, brochures, and customer magazines.
Legal basis: for the processing of personal data is Art. 6 Par. 1 Lit. b and/or f GDPR.
On our website, there is the option to order a newsletter free of charge. In the process, the data from the data entry mask is transmitted to us upon registration for the newsletter. In order to be able to register for our e-mail newsletter service, we need – in addition to your declaration of consent under data protection law – at a minimum your e-mail address to when the newsletter is to be sent. Additionally, the date and time of registration are being collected.
Your consent to the processing of the data is being collected in the course of the registra-tion process and this data protection policy is being referred to.
For the sending of the newsletter, we utilise the so-called double opt-in method, i.e., we will only send you the newsletter if you previously confirmed your registration via a link con-tained in a confirmation e-mail sent to you for this purpose. With this, we want to ensure that only you yourself, as owner of the e-mail address specified, can register yourself for the newsletter. Your respective confirmation must be received within 5 working days from receipt of the confirmation e-mail, since your newsletter registration will otherwise be delet-ed from our database automatically.
To the extent that we transfer data to third countries, we have arranged for suitable guar-antees in accordance with Art. 46 GDPR in connection with the transfer.
Purpose: Any additional information will be voluntary and will be utilised to personally ad-dress you and to be able to design the content of the newsletter to you in a personalised fashion as well as to be able to obtain clarification in case of questions regarding the e-mail address. The collection of other personal data in the context of the registration process serves to prevent an abuse of the services or of the e-mail address utilised.
Legal basis for the data processing in case of newsletter marketing is Art. 6 Par. 1 S-Par. 1 Lit. a GDPR.
Duration of the processing and right to object: The data will be erased as soon as they are no longer necessary for achieving the purpose for which they were collected. As such, the user’s e-mail address will be stored as long as the newsletter subscription is active. The other personal data collected in the context of the registration process will typically be de-leted after a period of seven days.
You may cancel a newsletter you subscribed to from us at any time. To do so, you can ei-ther send an informal e-mail to pricacy@trilux.com or effect a cancellation via the link at the end of the newsletter. The cancellation does not affect the lawfulness of the data pro-cessing that took place based on the declaration of consent up until the objection. This also makes possible a withdrawal of consent to storage of the personal data collected during the registration process.
Legal basis is the fulfilment of a contract to which the user is a contractual party or the car-rying out of pre-contractual measures in accordance with Art. 6 Par. 1 Lit. b GDPR.
Duration of storage, Option to object/remove: The data will be erased as soon as they are no longer necessary for achieving the purpose for which they were collected. This is the case during the registration process for the fulfilment of a contract of for carrying out pre-contractual measures, if the data are no longer necessary for the execution of the contract. Even after the contract has been concluded, a need may exist to store personal data of the contractual partner in order to comply with contractual or statutory obligations.
If the data are necessary for the fulfilment of a contract or to carry out pre-contractual measures, an advance deletion of the data is possible only if no contractual or statutory ob-ligations prevent a deletion.
Purpose: The utilisation of your data is performed for the purpose of registering for/with and carrying out the event of the TRILUX Academy.
You may demand from the Controller a confirmation regarding whether personal data con-cerning you are being processed by us.
(8) the existence of an automated decision-making, including profiling, in accordance with Art. 22 Par. 1 and 4 GDPR, and – at least in these cases – meaningful information about the logic involved as well as the significance and the envisioned consequences of such processing for the data subject.
You shall have the right to demand information whether the personal data that related are transferred to a third country or to an international organisation. In connection with this, you may demand to be informed about the appropriate safeguards in accordance with Art. 46 GDPR in connection with the transfer.
You have a right to rectification and/or completion against the Controller insofar as the per-sonal data processed concerning you are incorrect or incomplete. The Controller must per-form the rectification without undue delay.
(4) you have objected to processing pursuant to Art. 21 Par. 1 GDPR and it has not yet been determined whether the legitimate grounds of the Controller override your grounds.
Where the processing of the personal data concerning you has been restricted, such data shall, with the exception of their storage, only be processed with your consent or for the es-tablishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
(1) The personal data concerning you are no longer necessary in relation to the pur-poses for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing is based in accordance with Art. 6 Par. 1 Lit. a or Art. 9 Par. 2 Lit. a GDPR, and there is no other legal ground for the processing.
(3) You object to the processing pursuant to Art. 21 Par. 1 GDPR and there are no overriding legitimate grounds for the processing or you object to the processing pursuant to Art. 21 Par. 2 GDPR.
(5) The personal data concerning you have to be erased for compliance with a legal ob-ligation in Union or Member State law to which the Controller is subject.
(6) The personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8 Par. 1 GDPR.
Where the Controller has made the personal data concerning you public and is obliged, pursuant to Art. 17 Par. 1 GDPR, to erase the personal data, the Controller, taking account of available technology and the cost of implementation, shall take reasonable steps, includ-ing technical measures, to inform controllers which are processing the personal data that you, as the data subject, have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
If you have asserted the right to rectification, erasure or restriction of processing against the Controller, the Controller shall be obliged to communicate to each recipient to whom the respective personal data concerning you was disclosed any rectification or erasure of the data or restriction of the processing, unless this proves impossible or involves dispro-portionate effort.
You shall have the right to be informed by the Controller about those recipients.
In exercising your right to data portability you shall, furthermore, have the right to have the respective personal data transmitted directly from one controller to another, where techni-cally feasible. This shall not adversely affect the rights and freedoms of others.
The right to data portability shall not apply to a processing of personal data that is needed for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.
You shall have the right, at any time, to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 Par. 1 Lit. e or f GDPR; this shall also apply to a profiling based on those provi-sions.
The controller shall no longer process the personal data concerning you unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing serves for the es-tablishment, exercise or defence of legal claims.
Where personal data concerning you are processed for direct marketing purposes, you shall have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this shall also apply to profiling to the extent that it is related to such direct marketing.
Where you object to the processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes.
You shall have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of the declaration of consent will not affect the legality of the processing performed based on the declaration of consent up until the withdrawal.
However, these decisions shall not be based on special categories of personal data re-ferred to in Art. 9 Par. 1 GDPR unless Art. 9 Par. 2 Lit. a or g GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
With respect to the cases referred to in (1) and (3), the Controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests which include, at least, the right to obtain human intervention on the part of the Controller, to express your point of view and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider the processing of personal data relating to you to be infringing on the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the com-plainant on the progress and the outcome of the complaint including the possibility of a ju-dicial remedy pursuant to Art. 78 GDPR.
All information you transmit to us will be stored on servers within the European Union. Un-fortunately, the transmission of information via the Internet is not fully secure, which is why we cannot guarantee the security of the data transmitted to our website via the Internet. However, we protect our website and other systems, through technical and organisational measures, against loss, destruction, access, modification, or distribution by unauthorised persons. In particular, your personal is being transmitted encrypted by us. For this, we uti-lise the SSL (Secure Socket Layer) [and/or TLS (Transport Layer Security)] coding system.
In addition, we are utilising technical and organisational security measures to protected personal data that is incurred or collected, against – in particular – accidental or intentional manipulation, loss, destruction or attack by unauthorised persons. Our security measures are continuously being improved corresponding to the technological development.
The website may contain hyperlinks to and from third party websites. If you follow a hyper-link to one of those websites, please note that we cannot assume responsibility or liability for third party contents or terms and conditions of privacy / data protection. Please deter-mine for yourself the respective applicable terms & conditions of privacy / data protection before transmitting personal data to those websites.
We reserve the right to change these data protection provisions at any time, effective for the future. The website will contain the respective current version. Please visit the website regularly and inform yourself about the applicable data protection provisions.
The privacy / data protection policy has been translated from the German language. In case of inconsistencies, the German version shall prevail.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 6
 Art. 46
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78