Privacy policy

This page is an English courtesy translation of the German privacy policy. In the event of any discrepancy, the German version prevails.

1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

ELCON LED GmbH
Bauernstr. 34
31275 Lehrte (OT Immensen)
Germany
Phone: +49 (0) 5175 - 77 16 116
Email: info@elcon-led.com

No data protection officer has been appointed, as the statutory requirements for this do not apply. For data protection matters, please contact us at the address given above.

2. Hosting

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, using the “Cloudflare Pages” service. When the website is accessed, Cloudflare processes technical connection data in order to deliver the page and to secure its operation. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and efficient operation of the website. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. Any transfer to the USA is based on the EU standard contractual clauses and on the provider’s certification under the EU-US Data Privacy Framework.

3. Server log files

When the website is accessed, information transmitted by your browser is recorded automatically. This is in particular:

• the page or file requested
• the date and time of the request
• the volume of data transferred and notification of successful retrieval
• browser type and version, and the operating system used
• the IP address of the requesting device

This data is not merged with other data sources and serves solely for technical delivery and for defending against attacks. The legal basis is Art. 6(1)(f) GDPR.

4. Getting in touch

The enquiry form on this website does not transmit any data to our server. When you submit it, your local email program opens with a prepared message which you send yourself. The details you have entered therefore only leave your device when that email is sent, and are transmitted via your own email provider.

If you contact us by email, telephone or fax, we process the data you provide in order to deal with your request. The legal basis is Art. 6(1)(b) GDPR where the enquiry is aimed at concluding or performing a contract, and otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in responding to enquiries. We delete this data once it is no longer required for the purpose; statutory retention periods, in particular under commercial and tax law, remain unaffected.

5. Fonts

This website uses the typefaces “Manrope” and “Inter” via the Google Fonts service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When a page is accessed, your browser establishes a connection to Google servers, in the course of which your IP address is transmitted to Google. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a consistent presentation of the website. Further information can be found in Google’s privacy policy at policies.google.com/privacy.

6. Cookies and audience measurement

For audience measurement we use “Cloudflare Web Analytics” provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. The service collects aggregated metrics on which pages are visited and which source visitors come from.

Cloudflare Web Analytics works without cookies: no information is stored on or read from your device, no identifier is assigned, and there is no recognition across devices or websites. No usage profiles are created. For this reason, consent under section 25(1) TDDDG is not required, and no cookie notice appears on this website.

What is recorded is the address accessed, the website visited beforehand (referrer), the approximate region of origin at country level, and technical details about the browser, operating system and device type. The IP address is used for processing but is not stored. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in designing our offering to meet demand and in evaluating it statistically. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare; the transfer to the USA is based on the EU standard contractual clauses and on the provider’s certification under the EU-US Data Privacy Framework.

7. Your rights as a data subject

You have the following rights in relation to your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to object to processing (Art. 21 GDPR)
• right to withdraw consent with effect for the future (Art. 7(3) GDPR)

An informal message to the contact details given under section 1 is sufficient to exercise these rights.

8. Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedies, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement. The authority responsible for our company is the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany.

9. Data security

This website is delivered exclusively over an encrypted connection (TLS). You can recognise this by the address bar of your browser, which begins with https://, and by the padlock symbol. The data transmitted between your device and our server is thus protected from access by third parties.

10. Changes to this privacy policy

We update this privacy policy whenever changes to the procedures we use or to the legal position make this necessary. The version then current applies to each new visit.