§1 Information about the collection of personal data
(1) ) In the following, we inform about the collection of personal data when using our website, as in accordance with Art. 13 of the EU General Data Protection Regulation (EU-GDPR). Personal data are all data that are personally identifiable to you, e.g. name, address, e-mail addresses, user behavior.
(2) The person responsible pursuant to Art.4 para.7 EU General Data Protection Regulation (EU-GDPR) is

Chips 4 Light GmbH
Am Kühlen Kasten 8
93161 Sinzing
Germany

+49 9404 641330
+49 9404 6413329
info@chips4light.com

(see our imprint)

You can contact our Data Protection Officer under:

Bugl & Kollegen GmbH
Eifelstraße 55
93057 Regensburg, Germany
E-mail: kontakt@buglkollegen.de

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, if applicable your name and your telephone number) will be stored by us in order to answer your questions. We delete the data arising in this context after the storage is no longer necessary, or limit the processing if statutory retention obligations exist.
(4) If we make use of contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify the defined criteria for the storage period.

§2 Your rights
(1) You have the following rights towards us regarding your personal data:
– Right to information
– Right to correction or deletion
– Right to limitation of processing
– Right of opposition to the processing
– Right to data transferabilitn

(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data.
The responsible supervisory authority can be found in the following list:
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

3 Hosting
(1) The hosting services used by us serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services which we use for the purpose of operating this online service.

(2) In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this online offer due to our legitimate interests in the efficient and secure provision of this online offer in accordance with Art. 6(1) lit. f EU-GDPR in conjunction with Art. 28 EU-GDPR (conclusion of an order processing contract).

§4 Collection of personal data when visiting our website
1) When using the website for information purposes only, i.e., if you do not register or provide us with information in any other way, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary for us to display our website to you and to ensure stability and security:

– IP address

– Date and time of the request

– Time zone difference to Greenwich Mean Time (GMT)

– Content of the request (specific page)

– Access status/HTTP status code

– The amount of data transferred in each case

– Website from which the request comes

– Browser

– Operating system and its interface

– Language and version of the browser software.

We collect and store this data for a limited time on the basis of our legitimate interest in order to induce derivation of personal data in the event of unauthorised access or attempted access to local servers (Art. 6 (1) lit. f EU-GDPR).

§5 Use of Cookies
(1) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which certain information flows to the location that sets the cookie (here by us). They serve to make the website more user-friendly and effective.

(2) We distinguish between two categories of cookies: (a) essential cookies, without which the functionality of our website would be restricted, and (b) optional cookies for website analysis and marketing purposes.

The use of optional cookies is based on your consent (Art. 6(1) lit. a EU-GDPR).

In the following table and the following paragraphs we describe the optional cookies used on this website in detail.

Optional Cookies
Purpose and content
Storage period

Functional cookies
These cookies enable us to analyze the use of our website in order to measure and improve its performance. e.g. reCAPTCHA, Google Maps,

Marketing cookies
Marketing cookies are generally used to show you advertisements that are in line with your interests. When you visit a website, your browser’s cookie is recognized and selected ads are displayed based on the information stored in that cookie. e.g. Google Analytics
[cookie_confirm_link]

Google Ads

(1) Type and purpose of processing
We use the remarketing or “similar target groups” function of Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”) on our website. If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws. The application serves the purpose of analyzing visitor behavior and visitor interests. Google uses cookies to carry out the analysis of website usage, which forms the basis for creating interest-based advertisements. The cookies are used to record visits to the website and anonymised data on the use of the website. There is no storage of personal data of the visitors to the website. If you subsequently visit another website in the Google Display Network, you will see advertisements that are highly likely to take into account previously accessed product and information areas.

(2) Legal basis for processing
The data entered is processed on the basis of the user’s consent (Art. 6 Para. 1 lit. a GDPR).

(3) Data categories
Pages visited, length of visit, content in which the user is interested, IP address, other information on the use of websites

(4) Receiver
Employee in the IT and marketing department Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Marketing staff of the external advertising agency

(5) Storage periods
In this context, data is only processed as long as the relevant consent is available. They will then be deleted unless there are any statutory retention requirements. To contact us in this context, please use the contact details given at the beginning of this data protection declaration.

(6) Statutory / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

(7) Third country transfer
The processing also takes place outside the European Union (EU) or the European Economic Area (EEA). In order to guarantee the level of data protection in this third country, we have concluded the standard data protection clauses with Google.

(8) Revocation of Consent
You can revoke your consent to the storage of your personal data at any time with effect for the future.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

(9) Automatic decision making and profiling
With the help of the tracking tool, the behavior of visitors to the website can be assessed and interests analyzed. To do this, we create a pseudonymous user profile.

Bing Ads

a. Nature and purpose of the processing
Through BingAds, we advertise this website in Bing, Yahoo and MSN search results and on third party websites. A cookie is automatically set when you visit our website, which automatically enables interest-based advertising using a pseudonymous CookieID and based on the pages you visit.

b. Legal basis of the processing
The processing of the entered data is based on the user’s consent (Art. 6 para. 1 lit. a DSGVO).

c. Data categories: Pages visited, duration of the visit, content in which the user is interested, IP address, other information about the use of websites.

d. Recipients: Recipients of the data are internal employees of Marketing and IT and Microsoft as a processor.

e. Storage periods
After the end of the purpose and the end of the use of BingAds Remarketing by us, the data collected in this context will be deleted.

f. Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot grant you access to our offered content and services.

g. Third party transfer
BingAds is a service of Microsoft Corporation (www.microsoft.com). Microsoft Corporation has its headquarters in the USA. In order to guarantee the level of data protection in the USA, we have concluded standard data protection clauses with Microsoft.

h. Revocation of consent
You can revoke your consent at any time with effect for the future by deactivating the remarketing cookie via this link (https://account.microsoft.com/privacy/ad-settings/signedout?ru=https:%2F%2Faccount.microsoft.com%2Fprivacy%2Fad-settings). You can revoke your consent to the storage of your personal data at any time with effect for the future.

i. Automated decision making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.

§6  Use of Google Analytics
(1) This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is usually transferred to a Google server in the European Union and stored there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

(2) The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

(3) You can also change the use of cookies by setting your browser software accordingly or in the cookie settings.

(4) This website uses Google Analytics with the extension “anonymizeIp“.  As a result, IP addresses are further processed in abbreviated form, so that a personal relationship can be ruled out. As far as the data collected about you is personally identifiable, it will be excluded immediately and the personal data will be deleted immediately.

(5) We use Google Analytics to analyse and regularly improve the use of our website. With the statistics gained we can improve our offer and make it more interesting for you as a user. The legal basis for the use of Google Analytics is Art. 6(1) lit. a EU-GDPR.

(6) Third party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

General information on data protection: https://policies.google.com/privacy?hl=de&gl=de#infocollect

[(7) This website also uses Google Analytics for a device-independent analysis of visitor flows, that is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My Data”, “Personal Data”.]

§7  reCAPTCHA

(1) The purpose of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is made by a person or by an automated program. For this purpose, reCAPTCHA analyses the behavior of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, length of stay of the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Data processing is based on Art. 6(1) lit. a EU-GDPR.

(2) Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

(3) For further information on the purpose and scope of data collection and processing by the provider, please refer to the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.

(4) You can also change the use of cookies by setting your browser software accordingly or in the cookie settings.

§8 Online presences in social media
We maintain online presences within social networks in order to inform active users about our services and, if interested, to communicate directly via the platforms. We are currently represented in the following networks:

LinkedIn (direct link)

Xing (direct link)

Meta Platforms (direct link)

All of our social media channels can only be accessed by visitors to the website via an external link. We do not use any plugins or other interfaces on our website which the respective networks offer for embedding the offers on websites.

We have no influence on the data collection and its further use by the social networks. For example, we do not know to what extent, where or for how long the data will be stored, to what extent the networks will comply with existing deletion obligations, which evaluations and links will be made with the data and to whom the data will be passed on. We therefore expressly draw your attention to the fact that user data (e.g. personal information, IP address) is stored by the network operators in accordance with their data usage guidelines and used for business purposes.

We process the users’ data in the social media presences insofar as they contact and communicate with us via, for example, comments or direct messages.

The legal basis for the processing of the user’s data is Art. 6(1) lit. b and f EU-GDPR.

a) LinkedIN

No functions and contents of the LinkedIn service, offered by the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, are integrated within our online offer. The LinkedIn channels are only accessible via an external link.

If visitors to the website are members of the LinkedIn platform, LinkedIn can assign the call to the social media channel to the user’s profile if the user visits our LinkedIn profile while logged in.

Please note that we have no control over the content, scope of use, or privacy policy of the information collected by LinkedIn Ireland Unlimited Company. For further information in this regard, we refer you to the pages of LinkedIn Ireland Unlimited Company at https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv. We would also like to point out that you can make appropriate changes to your LinkedIn account to protect your privacy.

b) Xing

Within our online offer no functions and contents of the service Xing, offered by the New Work SE, Dammtorstraße 29-32, 20354 Hamburg, Germany, are integrated. The Xing channels can only be reached via an external link.

If the visitors to our website are members of the Xing platform, Xing can assign the call of the social media channel to the user’s profile there if the user visits the Xing profile in the logged in state.

We would like to point out that we have no influence on the content or extent of use of the data collected by Xing. For further information, please refer to Xing’s privacy policy: https://www.xing.com/app/share?op=data_protection

c) Meta Platforms

You can access the social media network Meta Platforms via external links on our website. All functions in the social media network are offered by Meta Platforms, 4 Grand Canal Square, Dublin 2, Ireland. The Facebook channels can only be accessed via an external link.

If you are logged in to Meta Platformswith your own profile and access our social media channel, Meta Platforms can assign your visit to your logged in profile. If you do not wish your account to be associated with your IP address, please log out of your Meta Platforms account prior to using our website.

For further information on the processing of your data, we refer you to the Meta Platforms privacy policy: https://facebook.com/privacy/explanation and to our data policy “Meta Platforms Fanpage”.

Chips 4 Light operates an online presence on Meta Platforms, a so-called Meta Platforms fan page. For visiting our fan page, the following additional notes on data processing apply. Information about data protection on Meta Platforms in general can be found here (https://www.facebook.com/about/privacy/).

1. Joint responsibility, contact data, company data protection officer:

For the operation of our Meta Platforms Fanpage we are responsible together with Meta Platforms according to art. 26 GDPR. For this purpose, we have entered into an agreement with Meta Platforms to determine who fulfils which obligations with regard to data protection. This agreement can be viewed here (https://www.facebook.com/legal/terms/page_controller_addendum). Accordingly, Meta Platforms is primarily responsible for providing the data subject with information about the shared processing and for enabling the data subject to exercise his or her privacy rights. Independent of this, we hereby inform you about your visit to our fan page.

Our contact details are as given in the pricacy policy.

You can reach Meta Platforms  at:

Meta Platforms Ireland Ltd.
4 Grand Canal Square,
Grand Canal Harbour,
Dublin 2, Irland
Online you can reach Meta Platforms here (https://www.facebook.com/help/contact/2061665240770586)

You can reach our company data protection officer at as given in the privacy policy

You can contact the Meta Platforms data protection officer at
https://www.facebook.com/help/contact/540977946302970.

2. Collection and storage of personal data as well as type and purpose and their use:a)

a)         Data collected by Meta Platforms:

If you are a Meta Platforms user, Meta Platforms collects the information described in the Meta Platforms Data Policy under “What types of information do we collect? If you are not a Meta Platforms user, cookies, small text files containing identifiers, may still be stored in your browser to enable tracking of your user behavior.

As a rule, when you visit Meta Platforms, the user data is also processed by Meta Platforms for market research and advertising purposes. Based on user behavior (also when visiting our fan page) complex user profiles are created, which Meta Platforms can use to display personalized advertisements to the visitor inside and outside of Meta Platforms. You can also find more detailed information on this in the Meta Platforms data policy.

If you do not agree with this, you can object here (Opt-Out).

b)     Data used by us (“page insights”) and legal basis:

Meta Platforms provides us with statistics and usage data that we can use to analyze the use of our fan page (so-called “page insights”). This enables us to continuously improve our Meta Platforms offer. We as operators do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR, such as the storage period of cookies on user devices. The primary responsibility in accordance with the GDPR for the processing of Insights data lies with Meta Platforms and Meta Platforms fulfils all obligations under the GDPR with regard to the processing of Insights data.

We as site administrators have no other possibility, not even via user tracking, to evaluate user behavior on our fan page. It is also fundamentally impossible for us to identify the visitor of the fan page on the basis of the Page-Insights. In particular, according to the agreement, we have no right to require Meta Platforms to disclose individual visitor data. We are only able to identify a visitor if we can assign individual profile pictures to “likely-me” information for the page, but only if our fan page has been marked ” like-me” by the respective visitor and the “like-me” information is set to “public”.

What information Meta Platforms uses to create the Page Insights can be found here.

The operation of the Meta Platforms fan page and the use of the page insights serves our legitimate interest in an effective external presentation and efficient communication with our customers and interested parties. This interest justifies the operation of the page both against the legitimate interests of Meta Platforms users, as well as against visitors to our fan page who do not have a Meta Platforms account. The legal basis is accordingly Art. 6 para. 1 lit. f) GDPR.

 

3. Transfer of data to third parties:

Data collected by Meta Platforms is exchanged and processed within the entire Meta Platforms group. The Meta Platforms Group also includes, for example, Instagram, WhatsApp and Oculus. For example, information collected via Meta Platforms is used to display personalized advertising to users on Instagram, or information from WhatsApp is used to take action on Meta Platforms against accounts that send spam via WhatsApp. This information can be found in the Meta Platforms data policy under “How do Meta Platforms companies work together?

Meta Platform’s processing of data may involve the transfer of user data outside the European Economic Area (EEA), particularly the United States.

4. Right of objection:

If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 Par. 1 letter f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR if there are reasons for doing so that arise from your particular situation or if the objection is directed against direct marketing. In the latter case you have a general right of objection, which will be implemented by us without indication of a special situation. If you wish to exercise your right of revocation or objection, simply send an e-mail to info@chips4light.com.

5. Rights of the person concerned:

You have the right to revoke your consent to us at any time. As a result, we are not allowed to continue the data processing that was based on this consent for the future. Furthermore, you have the right to information according to Art. 15 GDPR, the right to correction according to Art. 16 GDPR, the right to deletion according to Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR, as well as the right from data transferability according to Art. 21 GDPR. Furthermore, there is a right of appeal to a competent data protection supervisory authority (Art. 77 GDPR).

In principle, you can assert your rights as a data subject against Meta Platforms as well as against us. Since only Meta Platforms has direct access to your user data, you can most effectively assert your rights of data subjects against Meta Platforms.

If you have any questions regarding this data protection notice, you can contact us or our data protection officer at any time.

§9 Processing of your data within the framework of automated decision making / profiling
(1) In principle, you have the right not to be subject to a decision based exclusively on automated processing, including profiling, which has legal effect towards you or significantly affects you in a similar manner. In particular, these decisions may not normally be based on special categories of personal data pursuant to Art. 9 (1) EU-GDPR. We do not use any corresponding decision-making processes within the framework of our website and the associated data processing.

§10 Newsletter
(1) With your consent, you can subscribe to our newsletter, which we use to inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

(2) We use the so-called double opt-in procedure to register for our newsletter. This means that after your registration we will send you an e-mail to the specified e-mail address in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hour], your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the dates of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

(3) Your e-mail address is the only mandatory information for sending the newsletter. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6(1) lit. a EU-GDPR.

(4) You can revoke your consent to the sending of the newsletter at any time and cancel your subscription to the newsletter. You can declare your objection by clicking on the link provided in every newsletter e-mail or by sending a message to the contact details given in the imprint.

(5) We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files stored on our website respectively stored with our servive provider Cleaverreach. For the evaluations we link the data mentioned in point IV and the web beacons with your e-mail address and an individual ID.

You may object to this tracking at any time by clicking on the separate link provided in each e-mail or by informing us of another contact method. The information is stored as long as you have subscribed to the newsletter. After you have unsubscribed, we store the data purely statistically and anonymously.

Menu