Contactform

1) Preamble

Welcome to our website! We place great value on the protection of your data and the safeguarding of your private sphere. We would like to explain to you what data we process for what purpose and on what legal basis. The aim is to show you how our services work and how the protection of your personal data is guaranteed.

The following privacy statement applies for the following of our websites:

• https://www.luxelements.com  /.de
• https://m.luxelements.com
• https://www.luxelements.biz

Personal data according to Art. 4 ( 1) GDPR is all information which relates to an identified or identifiable natural person. A natural person is seen as identifiable if s/he can be directly or indirectly identified. For more information please see e.g. Art. 4 (1) GDPR.

This privacy statement can be accessed online, e.g. at https://www.luxelements.com/lux_en/impressum.htm#datenschutz.

We will refer again to the right of objection separately in individual sections (for example, by stating: "You have a right of objection"), if this right exists. There you will also find further information on the assertion of your right of objection.

In the interests of the clarity of the following privacy statement, we refer you by links at various points to information and data protection notices which are located on external websites (see also section "Social networks & external links" in this privacy statement). We make every effort to keep the links that we list in this privacy statement up to date. Nevertheless, due to the constant updating of the websites, it is not guaranteed that links will always work correctly. If you discover a malfunctioning link, please let us know and we will update it.

2) Person in charge

Person in charge in the sense of Art. 4 ( 7) GDPR for the processing of personal data is:

LUX ELEMENTS GmbH & Co. KG
An der Schusterinsel 7
D - 51379 Leverkusen-Opladen

Phone +49 (0) 21 71/ 72 12 - 0
Fax +49 (0) 21 71/ 72 12 40
E-mail: info@luxelements.de

3) Contact partner for data protection

Please direct any questions about the use of your personal data and about your rights concerning data protection to:

Bianca Lux
LUX ELEMENTS GmbH & Co. KG
An der Schusterinsel 7
51379 Leverkusen-Opladen
Germany

Tel.: + 49 (0) 2171-7212-0
E-Mail: datenschutz@luxelements.de

4) Log files

Each time you call up one of our websites, we automatically collect data and information from the operating system of your device and we sometimes store it in so-called server log files. The data is automatically transferred by your browser when you call up one of our websites. The following details are logged:

• The time at which you call up our website (request to the host provider's server)
• URL of the website from which you called up our website
• The operating system you use
• The type and version of the browser which you use

This data is processed to enhance the availability of our website from your device and enables the correct display of our website on your device and/or in your browser. This data helps us to optimise our website and we analyse it anonymously for this purpose.

The legal basis for its processing is 6 (1) lit. f) GDPR. We have a justified interest in presenting an optimised website for your browser and enabling communication between our server and your terminal.

We store the data for two years.

The recipient of the data is our server host, which acts for us in the context of a commissioned data processing.

The provision of personal data is neither legally nor contractually prescribed, nor is it required for the conclusion of contract. You are not obliged to provide your personal data. However, under certain circumstances, the non-provision of your personal data may result in your not obtaining the use and/or full use of the website.

5) Cookies

Our websites use cookies. Cookies are text files which are stored on your device in order to e.g. make the use of a website easier or to recognise a user's device and save settings or the like. Inputs and settings on a website can be stored in cookies so that you do not have to re-enter them the next time you visit the website. Cookies include a so-called cookie ID wherein it is possible to assign the device in which the cookie has been stored. The following individual cookies are used:

• Cookies containing a randomly generated and unique identification numbers which enable you or your device to be identified during your visit to our website. These cookies are automatically deleted after the end of your visit.
• Cookies containing a randomly generated and unique identification number which enable you or your device to be identifiable to our website. You can find the storage duration either in the overview below or via your browser by displaying the cookies (usually by clicking on the "i" next to the address list, e.g. in Firefox or Google Chrome).

The following cookies in particular are placed by us or services used by us:

At any time, you can display all cookies which we use on our various websites and further information about them using your browser.

Cookies set by ourselves are processed to make the use of our website more convenient to you and to enable you to save settings.

The legal basis for its processing is 6 (1) lit. f) GDPR. We have a justified interest in presenting to you a website which saves your personal settings and makes your visit to our website easier.

The provision of personal data is neither legally nor contractually prescribed, nor is it required for the conclusion of a contract. You are not obliged to provide your personal data. However, under certain circumstances, the non-provision of your personal data may result in your not obtaining the use and/or full use of the website.

Cookies are used by other services we use too. For each service we explicitly refer to the use of cookies.

6) Information about Google services

For our websites, we use a number of services of Google LLC ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

You can find more information about the individual Google services we use later on in our privacy statement.

With the integration of Google services Google may under certain circumstances collect and process information (including personal data). It cannot be guaranteed that Google does not pass the information on to a server in a non-EU country.

As specified in Google's Privacy Shield Certification (search "Google" at https://www.privacyshield.gov/list), Google is committed to upholding the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework on the collection, use and storage of personal data from the EU member states and/or the Switzerland. Google, including Google LLC and its one-hundred-percent subsidiaries in the USA have certified that they are committed to upholding the Privacy Shield principles. You can find more information about this at https://www.google.en/policies/privacy/frameworks/.

We cannot influence what data Google actually collects and processes. Google however states that at least the following information (including personal data) might be processed:

• Protocol data (particularly the IP address)
• Geographical information
• Unique application numbers
• Cookies and similar technologies

You can find information about the cookie types used by Google at https://policies.google.com/technology/types.

When you are logged into your Google account, Google can add the processed information to your account depending on your account settings and treat it as personal data. Google states e.g. the following:

"If you are not logged in to a Google Account, we will store the data we collect with unique identifiers associated with the browser, app, or device you are using.In this way we can ensure, for example, that your language settings are maintained throughout all browser sessions.

When you are logged into a Google Account, we also collect data we store in your Google Account and which we consider to be personal data." (https://www.google.com/intl/de/policies/privacy/index.html)

You can stop this data from being directly added by logging off from your Google account or by making the corresponding account settings in your Google account. You can also change your cookie settings (e.g. delete, block cookies etc.). You can find further information at "5) Cookies".

You can access more detailed information about Google's data protection here:

• https://www.google.com/policies/privacy/

You can find information about Google's privacy settings at https://privacy.google.com/take-control.html

7) Use of Google Analytics

We use Google Analytics from Google on our websites (https://www.luxelements.com /.de, https://www.m.luxelements.com / de, http://m.luxelements.com / de, http://www.das-original-kanns.de/ ) .

Google Analytics uses so-called "cookies", text files that are stored on your device and allow the analysis of your use of the websites you visit. Google Analytics can also use so-called Web Beacons (non-visible graphics). Web Beacons allow information such as user traffic on the websites to be analysed. The information generated by Cookies and Web Beacons regarding the use of our website (including the user's IP address) is transmitted to a Google server which may be in the USA or a non-EU country, where it may be saved. This information can be passed on by Google to its contract partners.

Information about Google's Privacy Shield Certification and other relevant information about Google's processing of data in the context of using Google services can be found in this privacy statement under section "6) Information about Google services".

The following types of data are processed by Google:

• Online identifiers (including cookie IDs)
• IP address
  • Device identifiers

You can also find further information at https://privacy.google.com/businesses/adsservices/.

We use Google Analytics only with activated IP anonymising ("anonymize IP"). This will result in your IP address being abbreviated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area prior to being sent to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the US and abbreviated there.

We have agreed a data processing agreement for the use of Google Analytics with Google (Art. 28 GDPR). Google processes the data in our order to analyse your use of our websites, to compile reports about website activity and to provide further services related to website use and internet use for us. Google may pass this information to third parties if legally required or if said third party uses this data by on behalf of Google.

We integrate Google Analytics to analyse user behaviour on our website and be able to respond. This enables us to continually improve our offer.

The legal basis for the processing of personal data described here is Art. 6 (1) lit. f) GDPR. Our justified interest lies in the great benefits for our offer of the functions described above. The statistical analysis of user behaviour enables us in particular to respond appropriately to interest in our range and to optimise our offer accordingly.

Google is entitled to appoint subcontractors in the context of data processing. A list of these subcontractors is available at https://privacy.google.com/businesses/subprocessors/.

The information processed is stored for 26 months and then automatically deleted.

The provision of personal data is neither legally nor contractually prescribed, nor is it required for the conclusion of contract. You are not obliged to provide your personal data. However, under certain circumstances, the non-provision of your personal data may result in your not obtaining the use and/or full use of the website.

8) Use of YouTube

We use videos from YouTube on our website. YouTube is a service of, and is provided by, YouTube LLC ("YouTube"), 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google LLC ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

YouTube is embedded into our website by the use of a so-called "iFrame". In the loading of this iFrame, YouTube and/or Google under certain circumstances collects and processes information (including personal data). It cannot be guaranteed that YouTube and/or Google does not transmit the information to a server in a non-EU country.

Information about Google's Privacy Shield Certification and other relevant information about Google's processing of data in the context of using Google services can be found in this privacy statement under section "5) Information about Google services".

We use YouTube in so-called "enhanced data protection" mode. According to information provided by Google this enables a video to be played without the collection of user data via cookies. We do not collect data when you watch one of our YouTube videos.

We use YouTube to offer you a range of different videos on our website so that you can see these directly at our website.

The legal basis for the processing of personal data described here is Art. 6 (1) lit. f) GDPR. Our requisite justified interest lies in the great benefit which YouTube offers. By embedding external videos, we can save space on our server and use the corresponding resources for other tasks. This can increase the stability of our server amongst other things. YouTube and/or Google also have a justified interest in using the (personal) data they collect to improve their own services.

The provision of personal data is neither legally nor contractually prescribed, nor is it required for the conclusion of contract. You are not obliged to provide your personal data. Non-provision however may result, under certain circumstances, in your being unable to use some contents of our websites.

9) Registration image portal

You have the option to have a user account created on our website http://bilder.luxelements.de/index.php. For access to our image portal please contact us directly and we will send you your personal login. There will be no personal data stored. In case you do not need the image portal anymore, we would kindly ask you to inform us, so we can delete your account.

10) Applications

We also offer you the opportunity to apply for posts on our website and to send your application by email or post.

When you send us your application we will process the information which you provide in relation to the application (e.g. your email address if you send your application by email).

If you send your application electronically, we will use your email address to process the application and to contact the applicant in relation to the application. For postal applications we will use the data provided by you. The purpose of processing the personal data obtained from the application documents sent by you is to be able to identify a suitable candidate.

The legal basis for processing your email address is 6 (1) lit. f) GDPR. Our justified interest is in offering you the opportunity to apply for a post with us electronically. The legal basis for processing the personal data from the application is Art. 6 (1) lit. b), Art. 88 ( 1) GDPR, § 26 ( 1) BDSG (German Federal Data Protection Act) -new.

The application email and attachments will be kept until a decision is made for or against the applicant.  If you have sent us your application documents by post, we will destroy these after completion of the recruitment process if no employment or cooperation results. If you have sent your application to us by email, we will delete the email correspondingly.

If the processing of your data is based on our justified interest, you have a right of objection:

The provision of personal data is neither legally nor contractually prescribed, nor is it required for the conclusion of contract. You are not obliged to provide your personal data. Not providing your data may result in our being unable to process your application.

11) Contact form

You can get in contact with us via our contact form and also request our product catalogues. If you get in contact with us via our contact form our contact form, we will process the data which you enter. Required information is asterisked ("*").

You may enter additional data voluntarily. This may make it easier to process your request and enables us to look after your interests more effectively.

We treat required information and voluntary data in the same way.

We also store the data you provide in our ERP system (Enterprise Resource Planning) in order to process your case. If you have entered voluntary data (e.g. named your industry), this data will also be stored there.

The purpose of processing your personal data in the context of mandatory data and voluntary data is to process the contact request and to be able contact you to respond to your issue. We also process the data to send you the product catalogues which you have ordered, to invite you to selected events or to inform you about personnel changes within the company and changed contact data.

The legal basis for the processing of personal data described here is Art. 6 (1) lit. f) GDPR. Our justified interest is in offering you the opportunity to contact us at any time so that we can answer your query. We also have a justified interest in sending you product catalogues which you have ordered and sending you event invitations.

The data you provide is stored only as long as is required for the aforementioned purpose or as legally stipulated.

The recipient of the data is our server host, which acts for us in the context of a commissioned data processing. In addition, the data may be forwarded to the shipping service provider (e.g. if we are to send you our product catalogue).

The provision of personal data is neither legally nor contractually prescribed, nor is it required for the conclusion of contract. You are not obliged to provide your personal data. Not providing your data may result under certain circumstances in your not being able to use the contact form or our not being able to send you a catalogue.

12) Making contact

You can get in contact with us by telephone, fax or email.

If you contact us by post, we can particularly process your address data (e.g. surname, first name, street, town, postcode), date and time of the receipt of post and any data which results from your correspondence.

If you contact us by telephone, we can particularly use your telephone number and, as required in context of the conversation, we may request your name, email address, time of call and details about your request.

If you contact us by fax, we can particularly process the fax number or sender ID and the data provided within the fax.

If making contact by email we will particularly process your email address, time of email and any data from the message text (including attachments as required).

The purpose of processing the above data is to process the contact and get in contact with the enquirer in order to respond to the issue.

The legal basis for the processing of personal data described here is Art. 6 (1) lit. f) GDPR. Our justified interest is in offering you the opportunity to contact us at any time and be able to answer your queries.

The personal data is deleted as soon as it is no longer needed to achieve the aim for which it was collected.

The provision of personal data is neither legally nor contractually prescribed, nor is it required for the conclusion of contract. You are not obliged to provide your personal data. Not providing your data may under certain circumstances result in your not being able to use the opportunity to make contact and/or that we are unable to get in contact with you.

13) Social networks & external links

Along with this website we also maintain presence in social media which you can access via the corresponding buttons on our website. If you visit one of our social media sites, data is sent to the social network provider. It is possible that as well as storing the actual data entered by you into this social medium, the social network provider will also process other information.

Furthermore, the provider of the social network processes the most important data from the computer system from which you have logged on, for example your IP address, processor type and browser version.

If you have logged into a social network site with your personal user account, this network can assign the visit to this account.

You can find out the purpose and scope of the data collected by the respective medium and the further processing of your data plus your rights in relation to this in the respective provisions of the respective person in charge, e.g. at

Facebook: https://de-de.facebook.com/about/privacy/

Please also note that our websites include links to external third-party websites. We have no influence on the processing of data on these external websites.

14) Data security

We secure our website and other systems by technical and organisational means against loss, destruction, access, change or distribution of your data by unauthorised persons. Despite regular checks, however, complete protection against all dangers is not possible.

15) Alteration of privacy statement

Changes to the law or changes to our company's internal processes may necessitate an update of this privacy statement.

We will inform you on any changes above the heading "Privacy statement".

17) Rights of persons affected

You have the following basic rights:

• Right to information (Art.. 15) GDPR)
• Right of correction (Art. 16) GDPR)
• Right of objection (Art. 21) GDPR)
• Right of deletion (Art. 17) GDPR)
• Right to limit processing (Art. 18f. GDPR)
• Right of data transferability (Art. 20) GDPR)

Please address any questions in this regard to datenschutz@luxelements.de. Please note that in the event of these kinds of queries we must make sure we are really dealing with the person in question.

Without prejudice to any other administrative or judicial remedy, you have the right to complain to a data protection supervisory authority.

No automated decision-making takes place on our website.