Privacy Policy

Last updated: 25 May 2018

This privacy notice explains how LEDVANCE GmbH and our subsidiaries (together „LEDVANCE“) handle your personal data on our websites, the measures we have implemented to protect your data and the rights you have concerning your personal data.

I. Introduction

The protection of your personal data is important to LEDVANCE. Therefore, we process your personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and further applicable laws on data protection and data security.

II. Name and address of the controller

The responsible controller for the processing of your personal data in connection with this website is

LEDVANCE GmbH
Parkring 29-33
85748 Garching

Phone: +49 89 780673-100

Email: contact@ledvance.com

Contact Data Protection Officer: privacy@ledvance.com

In individual cases, LEDVANCE companies may be responsible by themselves or jointly with LEDVANCE GmbH. A list of our companies can be found here.

III. General information on the processing of personal data

Unless stated otherwise, LEDVANCE collects and processes your personal data only insofar as it is necessary for the provision of this website and to ensure its functionality.

Where we obtain your consent for the processing of personal data, Article 6 par. 1 lit. a GDPR serves as the legal basis for the processing.

Where we collect personal data for the performance of a contract between you and LEDVANCE, Article 6 par. 1 lit b GDPR provides the legal basis for the processing. This also applies where the processing is required in order to take steps at your request prior to entering into a contract.

Where we process your personal data to comply with a legal obligation that LEDVANCE is subject to, Article 6 par. 1 lit c. GDPR provides the legal basis for the processing.

Where the processing is necessary to protect your vital interests or that of another person, Article 6 par. 1 lit. d GDPR serves as the legal basis for the processing.

Where the processing is necessary for the purposes of legitimate interests of LEDVANCE or a third party and where such interests are not overridden by your interests or fundamental rights, Article 6 par. 1 lit. f GDPR provides the legal basis for the processing.

We restrict the processing or delete personal data when the data is no longer needed for the purpose for which it was collected or otherwise processed, unless statutory retention periods require further retention of the data.

IV. Processing of your personal data when you visit our website (Art. 6 par. 1 lit. f GDPR)

We collect certain data about your device each time you access our websites.

The following data is collected and logged on our systems:

• information about type and version of your browser
• the operating system of your device
• your internet service provider
• the IP address of your device
• Date and time our website was accessed
• Websites that you visit our website from
• Websites that you visit from our website

We log the data for 7 days to ensure the functionality of our website and the security of our IT systems (in case of misuse) and to help us troubleshoot our website.

The log files are anonymized after 7 days, at which point the data can no longer be used to identify you.

V. Contact forms (Article. 6 par. 1 lit. a GDPR)

We offer a contact form on our website that you can use to send us your requests and claims.

The following data is collected and stored:

• Email address
• Last name, first name
• Title
• Language/country
• Optional: contact information (address, phone number)
• Date and time of registration
• Content of your message

We process your data based on your consent to get in touch with you and to process your requests and claims.

Where this is required to answer your request, e.g. where your request is related to a product distributed by an affiliated LEDVANCE company, we may transfer your data to the respective LEDVANCE company.

We delete your personal data when they are no longer required for the purpose for which they were collected. Generally, that is the case when the processing of your request is completed. Applicable law might require a longer retention of the data in case your request is related to defects of a product or warranties.

You can withdraw your consent at any time with effect for the future. In that case, we will delete your personal data. Please note that we can then no longer process your request.

VI. Newsletter registration (Article. 6 par. 1 lit. a GDPR)

If you register for our newsletter, you provide your consent that LEDVANCE GmbH and our affiliated companies may send you information about our products and services, as well as information about events and marketing campaigns.

We collect the following data at registration:

• Email address
• Last name, first name
• Title
• Language/country
• Date and time of registration

We use your email address solely to send you our newsletter. The further collected data is used to personalize the newsletter and provide proof of your registration.

We store your data until you withdraw your consent. You can withdraw your consent at any time by clicking the „Unsubscribe“ links in every newsletter.

VII. myLEDVANCE.com customer portal (Article. 6 par. 1 lit. b GDPR)

You have the possibility to register for or login to www.myledvance.com, our dedicated portal for registered customers where you can buy our products online and receive other benefits and services through this website. Information on how your personal data is processed on www.myledvance.com can be found in the respective privacy policy here.

VIII. Sharing of your personal data

LEDVANCE GmbH is part of the LEDVANCE group. In some cases, we transfer your personal data to other LEDVANCE companies that process the data by themselves or jointly with LEDVANCE GmbH. We transfer the data i.a. for the following purposes:

• for marketing and advertising purposes if you have given us your explicit consent,
• in the context of central IT and administrative purposes of the LEDVANCE group.

Beyond that, we transfer your personal data to the following recipients:

• to carefully chosen and monitored service providers; these service providers process personal data solely on our behalf and in accordance with our instructions based on contractual agreements for the processing of personal data;
• to other third parties (e.g. public authorities) if we are required to do so by law.

IX. Processing of your personal data outside the EU

At times, your data will be processed in countries outside the European Union (EU) or the European Economic Area (EEA), which may provide a lesser level of data protection as may be the case in Europe. In these cases, LEDVANCE concludes EU Standard Contractual Clauses with its partners to ensure that an adequate level of data protection is guaranteed (copy provided upon request), or we ask for your explicit consent. Data transfers to countries for which the EU has determined an adequate level of data protection require no further approval or agreement.

Any transfer to affiliated LEDVANCE companies with their seat outside the EEA will be made based on Binding Corporate Rules. A copy of the Binding Corporate Rules will be provided upon request.

X. Your Rights

If we process your personal data, you have certain rights towards LEDVANCE based on applicable law. As the data subject, you have the following rights under the GDPR in particular:

Right of access (Article 15 GDPR)
You have the right at any time to obtain a confirmation from us of whether we process personal data concerning you. Furthermore, upon your request, we will provide you with the information for which purposes we use your data, which data categories we process, how long we store your data, the origin of the data (where it was not directly provided by you) and, where applicable, the recipients to whom we transfer your data. If requested, we will provide you with a copy of your personal data.

Right to rectification (Article 16 GDPR)
You have a right to the correction or completion of your personal data insofar as your data is incorrect or incomplete. We will correct the data without undue delay.

Right to erasure (Article 17 GDPR)
You can request the deletion of your personal data if one of the following reasons applies:

• the data is no longer required for the purposes for which it was collected or otherwise processed
• you withdraw your consent and there is no other legal ground for the processing;
• you object to the processing of your personal data and there are no overriding legitimate grounds, or you object to the processing of personal data for the purposes of direct marketing;
• the personal data has been processed unlawfully
• the deletion of the personal data is required to comply with a legal obligation of LEDVANCE;
• the data was collected based on the consent of a child

Right to restriction of processing (Article 18 GDPR)

You can demand the restriction of the processing of your personal data under the following requirements:

• if you contest the accuracy of the data, for a period enabling us to verify the accuracy of the data;
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
• when we no longer require the data; but you require the data for the establishment, exercise or defense of legal claims;
• where you have objected to the processing and it has not been established yet, whether our legitimate grounds override yours.

If the processing was restricted based on the above mentioned requirements, we will inform you, before the restriction is lifted.

Right to data portability (Article 20 GDPR)
Where the processing of your data is based on your consent or where it is required for the execution of a contract between you and LEDVANCE, you have the right to receive from LEDVANCE your personal data in structured, commonly used and machine-readable format and to transfer the data to another controller. Upon your request, we will transfer the data directly to the other controller, where technically feasible.

Right to object (Article 21 GDPR)
You have the right to object to the processing of your data at any time where the processing is based on your consent or the legitimate interest of LEDVANCE or a third party. As a result, we will no longer process your personal data unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms or where the processing is required for the establishment, exercise or defense of legal claims.

Withdrawal of consent
You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Contact
If you would like to exercise your rights or have any question regarding data protection at LEDVANCE, please use our contact form or send an email to privacy@ledvance.com.

Right to complain to the Data Protection Authority
LEDVANCE takes your requests very seriously and we are committed to address any of your concerns. Nonetheless, you have the right to file a complaint with a competent data protection authority at any time.

XI. Changes

We may amend this privacy notice from time to time. All changes will be published on this site. You can find the date of the last update at the beginning of this privacy notice.