This data privacy notice informs you about the type, scope and purpose of the processing of personal data within our website (hereinafter referred to as "website"). The data privacy notice applies regardless of the domains, platforms and devices used (e.g. desktop, mobile, etc.).
Personal data within the meaning of the GDPR are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour. Which data is processed in detail and how it is used depends largely on which of our services you use.
We use various other terms in our data privacy notice in accordance with the GDPR. These include terms such as processing, restriction of processing, profiling, pseudonymisation, controller, processor, recipient, third party, consent, supervisory authority and international organisation. Art. 4 GDPR provides corresponding definitions of these terms.
Controller in terms of data protection is:
Multi-Lite Lichttechnik Handelsgesellschaft mbH
Senefelder-Ring 61 in 21465 Reinbek
You can contact our data protection officer at:
mip Consult GmbH
Rechtsanwalt Asmus Eggert
Wilhelm-Kabus-Straße 9 in 10829 Berlin
We process personal data that we receive from you in the course of using our website and, if applicable, our business relationship.
In the case of purely informational use of the website, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser sends to our server. When you access our website, we collect the following access data, which is technically necessary for us to display our website and to ensure its stability and security. The access data includes the IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (i.e. name of the specific website accessed), access status/HTTP status code, volume of data transferred in each case.
We also receive your personal data if you contact us via contact form or e-mail. Personal data in this case are e.g. name, address, e-mail, telephone number and, if applicable, the data you send us as a message (hereinafter referred to as "contact data").
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) for the following purposes and on the following legal bases:
Consent, Art. 6 para. 1 lit a GDPR
If you have given us your consent to process personal data for specific purposes, in particular to contact you (e.g. via our contact form or by e-mail for processing and handling your enquiry, sending newsletters, advertising by telephone, e-mail, SMS etc.), the legality of this processing is based on your consent.
A given consent can be withdrawn at any time. Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal is therefore not affected by the withdrawal. The withdrawal can be sent to the above-mentioned contact details or to email@example.com.
To take steps at the request of the data subject prior to entering into a contract, Art. 6 para. 1 lit. b GDPR
When you contact us (via contact form or e-mail), your data will be processed not only with regard to any consent you may have given us for the processing of the contact request and its handling, but also on the basis to take steps at the request of the data subject prior to entering into a contract, Art. 6 para. 1b GDPR.
Establishment of an employment relationship, § 26 BDSG and, after completion of the application procedure, in the event of rejection, to safeguard legitimate interests, Article 6 para 1 lit. f GDPR (defence against claims), if applicable with consent, Article 6 para 1 lit. a GDPR
When you contact us (via contact form or e-mail) in connection with your application, we process your data in order to check your suitability for the position (or any other open positions in our companies) and to carry out the application procedure. Your applicant data will be reviewed by the HR department after receipt of your application. Suitable applications are then forwarded internally to the departmental managers responsible for the respective open position. They will then decide on the further procedure. Within the company, only those persons who need access to your data for the proper course of our application procedure have access to your data.
To take steps at the request of the data subject prior to entering into a contract, Art. 6 para. 1 lit. b GDPR
Within the context of our shop, we use the data transmitted by you to process your order. We store - depending on the scope of the order fields you have filled in - in particular the following types of data when you order products via our website: Name, address data, telephone number and e-mail address as well as your registration data, IP address, time of order and information on the products ordered. We require this data to execute the contract. Users have the option of creating a user account, in which they can view their orders in particular. If you terminate your user account, your user account data will be deleted, unless storage is necessary for reasons of commercial or tax law (legal basis in this case: Art. 6 para 1 lit c GDPR). It is the users' responsibility to back up their data before the end of the contract if they terminate it. We are entitled to irretrievably delete all user data stored during the term of the contract.
In order to fulfil the contract, we will pass on your data to the carrier commissioned with the delivery, insofar as this is necessary for the delivery of ordered products.
In the case of payment by credit card or Paypal or Klarna, we shall pass on the payment data collected for this purpose to EVO Payments International GmbH, Elsa-Brändström-Straße 10-12, 50668 Cologne (EVO) for the purpose of processing these payments. The data protection notice can be found at https://www.evopayments.eu/datenschutz/. EVO will then pass on the data to Paypal or Klarna if necessary.
In the case of payment via Paypal, PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg also already collects this data itself. Here you must log in to PayPal with your access data during the ordering process. The data processed by PayPal is subject to the data protection notice of PayPal (data protection notice: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE).
When paying via Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, data is also processed by Klarna. The data protection notice can be viewed at https://www.klarna.com/de/datenschutz/
Processing is necessary for the purposes of the legitimate interests, Art. 6 para. 1 lit f GDPR
If we make advance payments, e.g. when purchasing on account, we reserve the right to obtain identity and credit information from companies specialising in this area (credit agencies) in order to protect our legitimate interests in concluding contracts with creditworthy contractual partners. For this purpose, we may transmit your personal data required for a credit assessment to the following company(ies):
The credit rating information can include probability values (score values), which are calculated on the basis of scientifically recognised mathematical-statistical methods and in the calculation of which address data, among other things, are included. We use the information received on the statistical probability of a payment default to make an appropriate decision on the establishment, execution or termination of the contractual relationship. Your interests worthy of protection are taken into account in accordance with the statutory provisions.
Processing is necessary for the purposes of the legitimate interests, Art. 6 para. 1 lit f GDPR
We process your access data (see data listed under point 2 above) in order to protect legitimate interests of ourselves or third parties. In particular, we pursue the following legitimate interests:
- Ensuring IT security, in particular the security of the website;
- advertising or market and opinion research, provided that you have not objected to the use of your data;
- assertion of legal claims and defence in the event of legal disputes
Within the company, access to your data is granted to those departments that need it to fulfil our contractual and legal obligations.
Processors employed by us (Art. 28 GDPR) may also receive data for the above-mentioned purposes. These are companies in the categories IT services, logistics, payment service providers (see above under 3.), collection, consulting and advisory services. If we employ processors to provide our services, we take appropriate legal precautions as well as appropriate technical and organisational measures to ensure the protection of personal data in accordance with the relevant legal provisions.
Data will only be passed on to third parties - who are not processors - within the scope of the legal requirements. We only pass on user data to third parties if this is necessary, for example, on the basis of Art. 6 para. 1 lit b GDPR for contractual purposes or on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR in an economic and effective operation of our business or if you have consented to the transfer of data. In the case of purely informational use of the website, we do not pass on any data to third parties.
For security reasons (e.g. to clarify acts of abuse or fraud) log file information is stored for a maximum of 14 days and then deleted (see point 2 above). Data whose further storage is required for evidential purposes are excluded from deletion until the respective incident has been finally clarified.
Where necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and execution of a contract via contact form or e-mail.
Applicant data will be deleted after 6 months in case of a rejection. In the event that you have agreed to further storage of your personal data, we will transfer your data to our pool of applicants. There the data will be deleted if you withdraw your consent or after 5 years at the latest. Should we fill the advertised position with you, your data will be stored in our personnel management system.
In addition, we are subject to various storage and documentation obligations, which result from the German Commercial Code (HGB) and the German Fiscal Code (AO), among others. The periods of retention or documentation stipulated there are two to ten years.
Finally, the duration of storage is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years, whereby the regular limitation period is three years.
The data provided will be processed within the European Union and, with regard to tracking data collected within the framework of this website, also in the USA (Google Analytics and Hotjar, see below). Please note that we have agreed EU standard data protection clauses with recipients of your data for countries where the Commission has not adopted an adequacy decision under Article 45 GDPR, as is the case with the USA (such as Google, Salesforce, Adobe). We would like to point out that the level of protection of personal data in the US does not match the level of data protection required by the EU. In particular, there is a lack of enforceable rights to protect your data against access by government agencies. There is therefore a risk that these governmental authorities may access personal data without the data controller or the recipient being able to effectively prevent this. We do not transfer any data without your consent. Should you wish to withdraw your consent, which you may have already given via the cookie banner, you can do so at any time by clicking on the "Withdraw consent" button, see the "Cookies" section. You have the possibility to receive or view a copy of the EU standard data protection clauses. If necessary, please contact us using the contact details given under point 1 above.
Every person concerned has:
- the right of access in accordance with Art. 15 GDPR (i.e. you have the right to request information about your personal data stored by us at any time) ,
- the right to rectification under Art. 16 GDPR (i.e. in the event that your personal data is incorrect or incomplete, you can request that it be corrected),
- the right to erasure in accordance with Art. 17 GDPR and the right to restriction of processing in accordance with Art. 18 GDPR (i.e. you may have the right to request deletion or restriction of the processing of your personal data if, for example, there is no longer a legitimate business purpose for such processing and statutory storage obligations do not require further storage),
- the right to data portability under Art. 20 GDPR (i.e. you may have the right to receive the personal data concerning you that you have provided us with in a structured, common and machine-readable format and to transfer this data to another person responsible without hindrance)
You may also withdraw your consent, in principle with effect for the future.
In addition, you have the right of appeal to a data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG). You can find the supervisory authority responsible for you at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
In addition, we would like to point out your right of objection according to Art 21. GDPR:
Information about your right of objection according to Art. 21 GDPR
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6 para 1 lit. e GDPR (data processing in the public interest) and Article 6 para 1 lit. f GDPR (data processing is necessary for the purposes of the legitimate interests).
If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
In individual cases we process your personal data for the purpose of direct marketing. You have the right to object at any time to the processing of personal data concerning you for the purposes of such direct marketing, including profiling, insofar as it is connected with such direct marketing. If you object to processing for the purposes of direct marketing, we will no longer process your personal data for those purposes.
The objection can be made without any formality and no costs other than the transmission costs according to the basic tariffs will be incurred.
If possible, the objection should be sent to the contact details mentioned in point 1 above:
Multi-Lite Lichttechnik Handelsgesellschaft mbH
Senefelder-Ring 61 in 21465 Reinbek
oder per E-Mail an: firstname.lastname@example.org
When accessing our website or contacting us by form or e-mail, we do not use fully automated automatic decision making in accordance with Article 22 GDPR. Should we use these procedures in individual cases, we will inform you of this separately if this is required by law. We do not process your data automatically with the aim of evaluating certain personal aspects (profiling).
Within the framework of our website, you must provide those personal data that are technically or for IT security reasons necessary for the use of our website. If you do not provide the aforementioned data, you will not be able to use our website.
When contacting us by form or e-mail or when placing an order in our shop, you only need to provide the personal data required to process your request. Otherwise we will not be able to process your request.
With the following notes we would like to inform you about our newsletter as well as the registration, dispatch and evaluation procedure and inform you about your rights of objection. If you subscribe to our newsletter, you agree to receive the newsletter and the described procedures.
Newsletter content: We send newsletters, e-mails and other electronic notifications containing advertising information (hereinafter referred to as "newsletters") only on the basis of the consent of the recipients or on the basis of legal permission. If we specifically describe individual newsletters in the context of registration, this description is decisive for the consent of a newsletter subscriber. If no separate description is given, our newsletters will contain information about our products, offers and promotions as well as information about our company.
Double-Opt-In: The registration for our newsletter takes place in the so-called Double-Opt-In procedure. This means that after registering for the newsletter, we will send you an e-mail asking you to confirm your registration. This confirmation serves to ensure that only persons who have access to the e-mail address provided register for our newsletter. We log the registrations for the newsletter in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Changes to your data stored by the newsletter service provider are also logged.
The newsletter is sent via SuperMailer (www.supermailer.de).
To subscribe to the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to enter a name for personal contact in the newsletter.
The newsletter of Multi-Lite Lichttechnik Handelsgesellschaft mbH contains so-called counting pixels. A tracking pixel is a miniature graphic that is embedded in such e-mails sent in HTML format to enable log file recording and log file analysis. This enables a statistical evaluation of the success or failure of online marketing campaigns. By means of the embedded pixel-code, Multi-Lite Lichttechnik Handelsgesellschaft mbH can identify whether and when an e-mail was opened by an affected person and which links contained in the e-mail were called up by the affected person. Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by the data controller in order to optimise the newsletter dispatch and to adapt the content of future newsletters even better to the interests of the data subject. This personal data is not passed on to third parties. Data subjects are entitled at any time to withdraw their separate declaration of consent given using the double opt-in procedure. Following a withdrawal, these personal data will be deleted by the data controller. Multi-Lite Lichttechnik Handelsgesellschaft mbH automatically interprets a cancellation of receipt of the newsletter as a withdrawal.
The dispatch of the newsletter and the measurement of success are based on the consent of the recipients according to Art. 6 para. 1 lit. a, Art. 7 GDPR in conjunction with § 7 para. 2 No. 3 UWG or on the basis of the legal permission according to § 7 para. 3 UWG.
The logging of the registration procedure is based on our legitimate interests according to Art. 6 Paragraph 1f GDPR and serves as proof of consent to receive the newsletter.
You can unsubscribe from receiving our newsletter at any time, i.e. withdraw your consent. You will find a link to cancel the newsletter at the end of each newsletter. If users have only registered for the newsletter and cancelled this registration, their personal data will be deleted.
b) Use of data for postal advertising and your right of objection
Furthermore, we reserve the right to use your data for advertising purposes, e.g. to send you interesting offers and information on our products by post.
You can object to the storage and use of your data for these purposes at any time by sending us a message, for example by
by mail: Multi-Lite Lichttechnik Handels GmbH, Senefelder-Ring 61, 21465 Reinbek for the attention of the data protection officer
Some of these cookies are essential for the functioning of our website, while other cookies help us to improve our website by giving us insight into how you use the website.
By default we only use necessary cookies. Necessary cookies enable the core functionalities of our website. The website cannot be displayed correctly without these cookies or individual areas may not function properly. Necessary cookies can only be prevented by appropriate settings in your browser.
Click here for information about the cookies we use:
The following additional possibilities exist with regard to cookies:
Standard data protection clauses issued by the EU Commission have been concluded with Google in accordance with Art. 46 Para. 2 lit. c GDPR. Despite the conclusion of standard data protection clauses with Google, the processing of your data in the USA involves corresponding risks. By giving your consent via our cookie banner, you agree to the processing of your data in the USA despite potential access by US authorities.
Google will use this information on our behalf to evaluate the use of our website by our users, to compile reports on the activities within this website and to provide us with further services associated with the use of this website. Pseudonymous user profiles can be created from the processed data.
We use Google Analytics with activated IP anonymisation. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
Further information on data processing by Google, setting and objection options can be found on the Google websites at https://www.google.de.
We use the Google Ads service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google") based on your consent.
Standard data protection clauses issued by the EU Commission have been concluded with Google in accordance with Art. 46 para. 2 lit. c GDPR. Despite the conclusion of standard data protection clauses with Google, there are corresponding risks associated with the processing of your data in the USA. By giving your consent via our cookie banner, you agree to the processing of your data in the USA despite potential access by US authorities.
Google Ads is a service for the placement of advertising banners on the Internet, which allows us to place ads in Google's search engine results as well as in the Google advertising network. Google Ads allows us to predefine keywords that will cause an ad to appear in Google's search engine results only when the user performs a keyword relevant search. In the Google advertising network, our ads are displayed on topic-relevant websites by means of an automatic algorithm and in compliance with the keywords previously defined by us.
The purpose of our use of Google Ads is to advertise our website by displaying advertisements on the websites of third-party companies and in the search engine results of Google and, if applicable, to display third-party advertising on our website.
If you reach our website via a Google Ads, a so-called conversion cookie is stored on your computer by Google. A conversion cookie loses its validity after thirty days and is not used for your identification, but to determine whether certain sub-pages of our website have been called up. The conversion cookie enables both us and Google to track whether you have reached our website via an ad display, have completed an action (e.g. a purchase) or have cancelled it.
The data and information collected through the use of the conversion cookie is used by Google to create visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via ads. We thus determine the success of our respective ads and are able to optimise our ads for the future based on this information. Neither our company nor other Google Ads advertisers receive any information from Google that could be used to identify the person concerned.
If you wish to opt out of receiving interest-based advertising from Google, you may do so using the "opt-out" facilities provided by Google: http://www.google.com/ads/preferences.
In addition to Adwords Conversion, we also use the Google Remarketing application - provided you have given your consent. This is a procedure with which we would like to contact you again. This application enables us to display our advertisements on your further internet use after you have visited our website. This is done by means of cookies stored in your browser, which are used by Google to record and evaluate your usage behaviour when visiting various websites. This enables Google to determine who has visited our website before.
We use the following third-party providers on our website:
- Google Maps provided by the third party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA The data protection notice can be found at https://www.google.com/policies/privacy/ and an opt-out is possible at https://www.google.com/settings/ads/.
- YouTube videos provided by the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data protection notice is available at https://policies.google.com/privacy and an opt-out is available at https://adssettings.google.com/authenticated.
- Google Translate by the third party provider Google Inc - We use Google Translate by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA to make our website available in other languages. The URL of our site is transmitted to Google together with your IP address. Google processes this information in order to provide users with better services. Further information on the purpose and scope of data collection and its processing by Google can be found in the data protection notice provided by Google at http://www.google.com/intl/de_de/policies/privacy. We have no influence whatsoever on the translation and its quality and would therefore like to point out that some of the translations only approximate the original. Initially Google Translate is deactivated in the standard setting, recognisable by the grey display of the text "Select language". Only when you click on the text "Select language" and thus agree to the use of Google Translator will Google Translate be activated and data be transferred to Google.
You will find us with presences within social networks and platforms, so that we can communicate with you there as well and inform you about our services. We would like to point out that your data may be processed outside the European Union and that the data is usually processed there for market research and advertising purposes. User profiles can be created from the user behaviour and the resulting interests of the users. These user profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies may be stored on the users' computers, in which the usage behaviour and interests of the users are stored. Other data may also be stored in these user profiles, especially if the users are members of the respective platforms and are logged in to them. The processing of users' personal data is based on our legitimate interests in the broadest possible communication with our users in accordance with Art. 6 para. 1 lit f GDPR. If the respective social networks obtain consent for the data processing, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR. For information about the respective processing and the respective possibilities of objection, we refer to the following linked data protection notices of the suppliers:
- Facebook (Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), Facebook pages based on an agreement on joint processing of personal data - data protection notice: https://www.facebook.com/about/privacy/, opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
- Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) - data protection notice: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
- Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) - data protection notice/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung