1. Introduction

This Privacy Policy explains how JoBe Lighting GmbH collects, uses and protects personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data protection law.

2. Data Controller

3. Categories of Personal Data

• › Contact data – name, email address, telephone number
• › Contract data – order details, delivery addresses, billing information
• › Technical data – IP address, browser type and version, operating system
• › Cookies and tracking data – LinkedIn Insight Tag, YouTube, Google Analytics 4
• › Communication data – messages submitted via contact form or email

4. Purposes of Processing

• › Providing and operating the website
• › Website analytics and performance measurement
• › Marketing and remarketing (with prior consent)
• › Processing contact and service requests
• › Newsletter distribution (with double opt-in consent)
• › Fulfilment of contractual obligations

5. Legal Bases

6. Cookies & Tracking

Cookies are used as described in our Cookie Policy. Non-essential cookies are only activated with your explicit consent.

7. YouTube Integration

Our website embeds YouTube videos provided by Google Ireland Limited. When a YouTube video is loaded, your browser establishes a direct connection to Google servers, which may result in the transfer of personal data — including IP address — to the United States. YouTube videos are only loaded with your consent.

8. LinkedIn Insight Tag

We use the LinkedIn Insight Tag, a service provided by LinkedIn Ireland Unlimited Company, for website analytics and reach measurement. The Insight Tag is only activated with your explicit consent (Art. 6(1)(a) GDPR).

9. Google Analytics 4

We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, with IP anonymisation enabled. GA4 is only activated with your consent. Data may be transferred to the United States under Standard Contractual Clauses (SCCs).

10. Server Log Files

Our web server automatically records browser type and version, operating system, referrer URL, hostname, timestamp and IP address. This data is used solely for technical operation and security purposes and is not merged with other personal data.

11. Contact Form

Data submitted via our contact form is stored solely for the purpose of processing your enquiry and will not be shared with third parties without your consent.

12. Newsletter

We store your email address and the confirmation of your double opt-in consent for newsletter distribution. You may unsubscribe at any time by clicking the unsubscribe link in any newsletter email or by contacting us directly.

13. Data Sharing

We share personal data only where necessary with IT and hosting service providers, analytics providers (subject to your consent), and — where applicable — shipping and payment service providers. All processors are bound by data processing agreements.

14. International Data Transfers

Where personal data is transferred to third countries outside the European Economic Area (EEA), appropriate safeguards are in place — in particular Standard Contractual Clauses (SCCs) as approved by the European Commission — together with any required supplementary technical and organisational measures.

15. Retention Periods

• › Contract data – retained until the contractual relationship is fully concluded
• › Invoices and accounting records – 10 years (statutory retention obligation)
• › Tracking and analytics data – retained for the duration of your consent or until withdrawal

16. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• › Right of access – Art. 15 GDPR
• › Right to erasure – Art. 17 GDPR
• › Right to rectification – Art. 16 GDPR
• › Right to restriction of processing – Art. 18 GDPR
• › Right to data portability – Art. 20 GDPR
• › Right to withdraw consent – Art. 7(3) GDPR (withdrawal does not affect the lawfulness of prior processing)

17. Security

We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction or alteration, in accordance with Art. 32 GDPR.

18. Children

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you become aware that a child has provided us with personal data without parental consent, please contact us so we can take appropriate action.

19. Changes to This Policy

We may update this Privacy Policy if legal requirements or our data processing practices change. The current version is always available on our website. We recommend checking this page periodically for updates.