Source: https://www.auer-lighting.com/en/privacy/
Timestamp: 2019-04-21 06:16:13+00:00

Document:
We take the protection of your personal data seriously and, naturally, protect them in the scope of the applicable data protection legislation as amended, in particular the provisions of the EU General Data Protection Regulation (GDPR). Unless otherwise stated below, data processing is based on point (f) of Art. 6 (1) GDPR.
When you access our website, your internet browser automatically transmits data to the web server for technical reasons. This information is stored in so-called log files and includes the name of the requested page, date and time of access, the data volume transmitted, notification of whether the request was successful, the operating system, browser type, version and language, the referrer URL that brought you to that page and the IP address or the host name of the access provider allocated to this IP address. This information is not attributed to you personally or used to compile a profile, but used exclusively for statistical analysis, to maintain the technical operation of this website and to improve our online offering. For safety reasons (e.g. to investigate misuse or fraud), logfile information is stored for a period of one month and erased thereafter. Data that needs to be stored as evidence for a longer period is excluded from erasure until the respective incident has been clarified.
Whenever a contractual relationship between you and us is to be established, designed or amended, we collect and use personal data concerning you as far as this is required for such purposes. In individual cases, we are allowed to provide information on this data (existing data) to the competent authorities upon their order as far as this is necessary to enforce the law, prevent threats, to fulfil the statutory duties of protecting the constitution or military counter-intelligence or enforce industrial property rights.
When you contact us (via contact form or another form on this website, email, telephone or by placing an order), we process and store your data in order to handle and process your request. We do not pass these data on without your consent. We erase requests as soon as they are no longer needed. We review the necessity to store data every two years. Further, the statutory archiving periods apply.
In order to deal with an order, we process the data provided by you to perform the contractual services, to bill and deliver the products and to provider customer relations support. The data are processed on the basis of point (b) of Art. 6 (1) GDPR. We set up a user account when you place your first order via the online shop; by logging into that account, you can check your orders and modify your address data (invoice/delivery recipient). These data are stored for the duration of an ongoing business relationship and, subject to contrasting preservation or archiving obligations, erased after the business relationship is ended. We review the necessity to store data every two years.
We only send e-mail newsletters with marketing content to recipients who have explicitly consented to receiving such newsletters. In this context, we use the so-called double opt-in procedure. After you have registered for the newsletter, we send an email to the address stated in the registration requesting you to confirm that registration once again. This ensures that nobody can register using a third person’s name. We only include your address in the mailing list and store your data for this purpose once you have confirmed your registration. The legal basis for processing is point (a) of Art. 6 (1) GDPR (consent). The registration is logged so that we can prove that you have given your consent. You can unsubscribe to our newsletter at any time and thus withdraw your consent to receiving this newsletter. Each newsletter has an unsubscribe link at the bottom.
Based on our legitimate interest (e.g. our interest in analysing, optimising and profitably operating our online offering), we use content or services offered by third parties on our website. This may include videos or maps. Unless otherwise stated below, the IP address is transmitted to the third-party provider when such content is requested.
The data generated by etracker are processed and stored by etracker on behalf of the website provider. Processing and storage takes place only in Germany and is subject to the strict German and European data protection laws and standards. etracker has been audited and certified by an independent body and received the ePrivacyseal data protection seal (https://www.eprivacy.eu/en/customers/awarded-seals/company/etracker-gmbh/).
The legal basis for processing is point (f) of Art. 6 (1) of the EU General Data Protection Regulation (EU-GDPR), i.e. legitimate interest. Our legitimate interest is to optimise our online offering and internet presence. As we place great importance on our users’ privacy, etracker anonymises the IP address as early as possible and converts the etracker registration or device identification information into a unique identifier that cannot be attributed to an individual person. etracker does not use data for other purposes, does not combine the data with other data and does not forward data to third parties.
You can object to the above data processing at any time as far as it refers to you personally. Objections have no negative consequences for you.
In the scope of our processing, we only disclose or transmit data or otherwise grant access to data to other persons or companies (processors or third parties) if we are authorised to do so by law. This is the case, for instance, if the data need to be transmitted for the performance of a contract or to handle an order, if you have given your consent to the data being transmitted, if there is a legal obligation to do so or we are thereby pursuing our legitimate interests (e.g. if we use subcontractors). Whenever we commission third parties to process data, we always conclude a data processing agreement pursuant to data protection legislation.
You have the right to obtain information on the personal data concerning you that we store, the origin and recipients of such data and the purpose of data processing and to receive such information free of charge. Unless your wish conflicts with a statutory preservation period for data (e.g. data retention), you have the right to obtain the rectification of inaccurate personal data concerning you and the right to have your personal data erased or processing thereof restricted.
Pursuant to Art. 7 (3) GDPR, you also have the right to withdraw consent previously given for future processing.
Pursuant to Art. 21 GDPR, you may at any time object to future processing of personal data concerning you.
For a list of additional supervisory authorities and the corresponding contact details, please go to: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 7
 Art. 21