Privacy Policy

1. About This Policy

This Privacy Policy applies to the US pages of jobe-lighting.com (the pages under /us). It explains what personal information we collect, where it comes from, what we use it for, with whom we share it, how long we keep it and which choices and rights you have. It describes the processing on this website as it actually takes place technically.

2. Who We Are

The website jobe-lighting.com, including its US pages, is operated by JoBe Lighting GmbH, Hanauer Landstr. 328-330, 60314 Frankfurt am Main, Germany. JoBe Lighting GmbH decides how personal information on this website is processed.

Sales and customer service in the United States are handled by JoBe Ops, LLC. JoBe Ops, LLC has no access of its own to the website data described in this policy; inquiries from the US pages are answered by the JoBe team.

In this policy "JoBe", "we" and "us" mean JoBe Lighting GmbH.

For privacy questions and requests contact us by email at info@jobe-lighting.com or by phone at +1 805 426-9630 (JoBe Ops, LLC).

3. Information We Collect (Notice at Collection)

• Identifiers and contact information: name, email address and, if you provide them, phone number and organization. Source: you, through the contact form, by email or phone, or when you book an appointment. Purpose: answering your inquiry, preparing offers, holding appointments.
• Content of communications: messages you send through the contact form or by email, and the details you enter when you book an appointment online. Source: you. Purpose: as above.
• Commercial information: order details, delivery and billing addresses and billing information, if you order from us. Source: you. Purpose: performing the contract, delivery, invoicing, warranty and returns.
• Internet and network activity: IP address, browser type and version, operating system, requested address and time; only with your consent, page views and interactions on this website. Source: your browser. Purpose: delivering and securing the website; with your consent, audience measurement.

How long we keep each type of information is listed in section 18. We do not collect sensitive personal information as defined by California law, and we do not use personal information to make decisions that produce legal or similarly significant effects on you. We do not sell personal information and do not share it for cross-context behavioral advertising.

4. Hosting and Server Log Files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA ("Vercel"). The program functions of the website, for example the contact form and our own audience measurement, run in a Vercel data center in Frankfurt am Main, Germany. When you open a page, Vercel processes the technical data needed to deliver the page and to keep it secure: IP address, date and time, the requested address, the amount of data transferred, the response status, and the browser type, operating system and, where available, the referrer URL. These runtime logs are kept at Vercel for up to 24 hours (Pro plan) and then deleted. They are not combined with other data.

We do this to deliver the website securely, reliably and quickly. Vercel acts as our service provider under a data processing agreement.

5. Database and Media Storage

The content of the website is stored in a Postgres database provided by Neon, Inc., USA ("Neon"), in a data center in Frankfurt am Main, Germany (Amazon Web Services, region eu-central-1). The database also holds the data described under "Our own audience measurement" and "Contact form and inquiries".

Images, videos, single frames of the animations and downloadable documents are stored in the "Vercel Blob" media storage of Vercel in Frankfurt am Main, Germany (region fra1). Your browser loads these files from the media storage (address a7sgsjpumratukc2.public.blob.vercel-storage.com) or, for images, through the image optimization of Vercel on our own domain as soon as you open a page and before you make a choice in the privacy notice. Vercel receives your IP address in doing so. This is technically necessary to display the page.

Neon and Vercel act as our service providers under data processing agreements.

6. Fonts

The fonts used on this website are delivered from our own server. Opening a page does not connect your browser to servers of Google or any other font provider.

7. Privacy Notice and Storing Your Choice

Without your consent this website sets no cookies for analytics or advertising. After you consent, Google Analytics sets cookies on this website ("_ga" and "_ga_" followed by an identifier; details in our Cookie Policy). A security cookie of our hosting provider may be required (see Cookie Policy). On your first visit it shows a privacy notice at the bottom of the page with two equally weighted buttons: "Essential only" and "Allow analytics". As long as you have not made a choice, no analytics script is loaded, no analytics cookie is set and no measurement event is sent.

When you make a choice, your browser stores it in local storage (entry "jobe-consent-v1") so that the notice does not appear on every page. The entry contains only your choice, no identifier. It is strictly necessary and stays until you delete it in your browser or change your choice. You can change or withdraw your choice at any time with "Manage consent" at the end of every page. Withdrawal takes effect for the future.

Which entries and cookies this website stores, with provider, purpose and duration, is described in our Cookie Policy.

8. Our Own Audience Measurement

If you choose "Allow analytics", we measure the use of this website with our own system, without third-party analytics services; the data is kept in our database (section 5). Your browser then sends events such as page views, reaching page sections, scroll depth, button clicks, downloads and steps in the contact form. For each event we store the event name, details of the event (such as the label and target of a clicked button, the file name of a download, the scroll depth or, for search, only the length of the search term and the number of results), the path visited without query parameters, language and market, the time and a random session identifier. On the first page of a session we also store the campaign parameters contained in the address (utm_source, utm_medium, utm_campaign, utm_content, utm_term). Your IP address and details of your browser are not stored for this. Free text entries, for example from the contact form, are never transmitted.

The session identifier is a random number in your browser's session storage (entry "jobe-measurement-session-v1"). It applies to the open tab only and is deleted when the tab is closed; it does not link visits to each other or to other websites. Events are deleted after 90 days.

Without your consent nothing is sent. You can withdraw it at any time with effect for the future via "Manage consent"; your browser then stops sending events.

9. Google Analytics 4

If you choose "Allow analytics", we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Only with your consent is Google's analytics script loaded and cookies ("_ga" and "_ga_" followed by an identifier) set. Google uses them to evaluate how the website is used, for example pages viewed, origin via campaign links, downloads, clicks on email and telephone links (without the address or number) and contact inquiries sent, and prepares reports for us. We do not pass names, email addresses or message content in the events.

We have switched off the advertising functions: data is not used for advertising or personalized advertising, and Google Signals is disabled. Measurement runs only on our own domain. Your IP address is transmitted to Google when the script is loaded and when measurement data is sent.

According to Google, the cookies are kept for up to two years. The event data in Google Analytics is kept for up to 14 months (setting in our account) and then deleted. Google may transfer data to Google LLC in the United States. Google acts as our service provider under a data processing agreement.

You can withdraw your consent at any time with effect for the future via "Manage consent". The Google Analytics cookies on your device are then deleted and no further data is sent to Google.

10. Contact Form and Inquiries

When you write to us through the contact form we process your name, email address, message and the type of inquiry and, if you provide them, your phone number, organization, a product reference or a configuration number. We also store the address of the page you sent the form from and the time of the inquiry. Name, email address, type of inquiry and message are required; without them we cannot handle your inquiry.

We use this data to answer your inquiry and, where applicable, to prepare an offer. The inquiry is temporarily stored encrypted on our server and handed over through a signed, encrypted connection to our internal system "Otto", in which we handle customer inquiries. Otto is operated by JoBe on a server of Hetzner Online GmbH in a data center in Germany. If our email delivery is set up, we additionally receive a copy of the inquiry by email if the handover is disrupted (see section 12); otherwise the inquiry stays encrypted on our server and is delivered later. We do not pass the data on to third parties for their own purposes. For the retention period see section 18.

Orders and contracts

If you order products or services from us, we process the data needed to perform the contract: contact data, order details, delivery and billing addresses and billing information. We use it to process, deliver and invoice the order and to handle warranty claims and returns. Where necessary we pass delivery data to shipping companies and payment data to banks and payment service providers. We keep invoices and accounting records for the periods required by commercial and tax law (see section 18).

11. Protection Against Misuse of the Form

To protect the form against automated misuse we limit how often inquiries can be sent from the same IP address and with the same email address (at most three inquiries per email address and ten per IP address per hour). For this we do not store the IP address or email address itself, only a check value formed with a secret key and a counter. Both are deleted at the next clean-up after the one-hour time window ends, at the latest after one day. The form also contains a field invisible to humans that is used to detect automated input.

12. Delivery by Email via Microsoft 365

If our email delivery is set up, we additionally receive a copy of the inquiry by email in a JoBe mailbox if the handover to our internal system is disrupted, so that no inquiry is lost; otherwise the inquiry stays encrypted on our server and is delivered later. For this we use Microsoft 365 of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland ("Microsoft"), which acts as our service provider under a data processing agreement. Sending runs from a dedicated mailbox of our own Microsoft 365 account, which Microsoft operates in data centers in the European Union. The email contains the content of your inquiry. Its reply address is the email address you gave in the form, so that we can answer you directly.

The email that is sent stays in the Sent Items folder of the sending mailbox and in the receiving mailbox and is deleted there within the periods given in section 18.

13. Visit History Attached to an Inquiry (Optional)

If you have chosen "Allow analytics" and this function is enabled, the contact form offers an additional checkbox: "Include the history of this visit (optional)". The box is not ticked by default. If you tick it, we add to your inquiry the pages and data sheets you viewed in the current session (address without query parameters, the file name for downloads, at most the last 50 entries, with the campaign parameters of the first page view). This shows us what you were interested in and lets us answer more precisely. Your IP address and details of your device are not included.

This is voluntary; without it we handle your inquiry in the same way. We delete the visit history twelve months after the inquiry is received. You can withdraw your consent at any time with effect for the future by writing to info@jobe-lighting.com.

14. Online Appointment Booking via Microsoft Bookings

On the contact page we link our online appointment booking for the US market through Microsoft Bookings, a service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The link opens the Microsoft booking page in a new tab. As long as you do not click the link, our website loads nothing from Microsoft and sends nothing to Microsoft. If you book an appointment, Microsoft processes the details you enter there (for example name, email address and requested time) on our behalf. We receive the booking in our Microsoft 365 account (mailbox and calendar, data centers in the European Union) and use it to hold the appointment with you. On the booking page Microsoft sets its own strictly necessary cookies; Microsoft's notices apply to them.

15. Name Resolution of the Domain (Cloudflare)

The address jobe-lighting.com is resolved by the DNS service of Cloudflare, Inc., San Francisco, USA ("Cloudflare"). Your page requests do not pass through Cloudflare but go directly to Vercel. Cloudflare only processes the name queries that arise when the address is resolved; in doing so Cloudflare receives the IP address of the querying DNS server, usually that of your internet provider. We use Cloudflare to keep the domain reachable.

16. Service Providers and Disclosure

We disclose personal information only where necessary for the purposes described above and only to service providers bound by data processing agreements: Vercel (hosting, media storage), Neon (database), Microsoft (email delivery, appointment booking), Hetzner (server of our internal system), Cloudflare (name resolution of the domain) and, only with your consent, Google (Google Analytics 4). We do not pass data on to third parties for their own purposes, for example advertising. For orders we pass the necessary data to shipping companies, banks and payment service providers (section 10).

17. Where Your Information Is Processed

We process your information mainly in Germany and the European Union: the website functions, the database and the media storage run in Frankfurt am Main, our internal system runs in Germany and our Microsoft 365 account in data centers in the European Union. Some of the service providers named are based in the United States or may process data there: Vercel Inc. (hosting and media storage), Neon, Inc. (database), Google LLC in connection with Google Analytics 4, Microsoft Corporation as the parent company of the Microsoft 365 service, and Cloudflare, Inc. (name resolution of the domain). Section 22 explains how these transfers are safeguarded under European law.

18. Retention Periods

• Orders, invoices and accounting records: until the contract has been fully performed, then for the periods required by commercial and tax law (in Germany up to ten years)
• Customer inquiries (contact form, Otto): five years after the last interaction with you, because tenders and construction projects in our business are often taken up again only years later
• Email copy of the inquiry in the mailbox: deleted once the inquiry is in Otto, at the latest five years after the last interaction, like the inquiry itself
• Visit history attached to an inquiry (only with your consent): twelve months after the inquiry is received
• Encrypted temporary copy of the inquiry on our server: 30 days
• Events of our own audience measurement: 90 days
• Check values for protection against misuse: until the end of the one hour time window, deleted at the latest after one day
• Choice in the privacy notice (browser): until you delete or change it
• Google Analytics cookies: according to Google up to two years; deleted immediately on withdrawal
• Event data in Google Analytics: up to 14 months (setting in our account)
• Runtime logs at Vercel: up to 24 hours (Pro plan)
• Name resolution logs at Cloudflare: according to Cloudflare kept only briefly; we have no access to them
• Appointment bookings (mailbox and calendar of our Microsoft 365 account): up to twelve months after the appointment, then deleted unless an inquiry resulted from it (then as for customer inquiries)

When a period has ended we delete the data unless a legal obligation requires us to keep it longer.

19. Your Choices, Do Not Track and Global Privacy Control

Analytics runs only if you opt in. You can change or withdraw your choice at any time with "Manage consent" at the end of every page, and you can delete or block cookies in your browser (see our Cookie Policy).

We currently do not respond to Do Not Track signals, and the website does not read Global Privacy Control (GPC) signals. Because we do not sell or share personal information and analytics runs only after you opt in, these signals would not change how the website treats you.

20. Your Privacy Rights in the United States

Whether or not a state privacy law applies to us, we offer every US resident the following rights:

• know what personal information we have collected about you, where it comes from, why we use it and to whom we disclose it, and receive a copy of it
• have inaccurate personal information corrected
• have your personal information deleted
• opt out of the sale of personal information, of its sharing for cross-context behavioral advertising and of targeted advertising
• not be treated differently because you exercised any of these rights

We do not sell personal information and do not share it for cross-context behavioral advertising or targeted advertising, so there is nothing to opt out of. We do not use or disclose sensitive personal information.

To exercise a right, contact us by email at info@jobe-lighting.com or by phone at +1 805 426-9630. We answer requests from any US resident. To protect your information we may ask you for details that let us confirm your identity, usually your name and the email address you used with us. You may let an authorized agent make a request for you; we may ask the agent for your written permission and ask you to confirm your identity with us. We respond within 45 days. If we decline a request, we tell you why; you can ask us to review the decision by replying to our answer.

21. If You Disagree With a Decision

If you are not satisfied with our answer, write to us at info@jobe-lighting.com. Depending on the state you live in, you can also contact the attorney general of your state.

22. Information Under the European GDPR

Because JoBe Lighting GmbH operates this website from Germany, the EU General Data Protection Regulation (GDPR) applies to the processing described here, whoever visits the website. JoBe Lighting GmbH is the controller under the GDPR. It has not appointed a data protection officer because there is no legal obligation to do so (Section 38 of the German Federal Data Protection Act, BDSG).

Legal bases (Art. 6(1) GDPR): consent (point a) for our own audience measurement, Google Analytics 4 and the visit history attached to an inquiry; contract and pre-contractual steps at your request (point b) for inquiries that aim at an offer or contract, for appointments and for orders; legal obligation (point c) for keeping invoices and accounting records; legitimate interests (point f) for hosting, server log files, media storage, protection against misuse, name resolution of the domain and all other inquiries, our interest being the secure and reliable operation of the website and the handling of business inquiries. For storing and reading information on your device, Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) applies in addition: the entry "jobe-consent-v1" and the Vercel security cookie are strictly necessary (Section 25(2) no. 2 TDDDG), everything else requires your consent (Section 25(1) TDDDG).

Where a service provider in the United States is certified under the EU-US Data Privacy Framework, the transfer is based on the adequacy decision of the European Commission of 10 July 2023 (Art. 45 GDPR). Otherwise we have concluded the Standard Contractual Clauses of the European Commission under Art. 46(2)(c) GDPR with the provider, together with supplementary measures where required. You can obtain a copy on request from info@jobe-lighting.com.

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21), and you can withdraw a consent at any time with effect for the future (Art. 7(3)); withdrawal does not affect the lawfulness of the processing carried out until then. Where we process data on the basis of legitimate interests, you can object at any time on grounds relating to your particular situation; we will then stop processing the data unless we can demonstrate compelling legitimate grounds. You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for JoBe Lighting GmbH is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information), Postfach 3163, 65021 Wiesbaden, Germany.

23. Obligation to Provide Data and Automated Decisions

You can use the website without providing personal information. For the contact form, name, email address, type of inquiry and message are required; without them we cannot handle the inquiry. Apart from orders, where we need the data to perform the contract, there is no legal or contractual obligation to provide data. We do not make automated decisions, including profiling, that have legal or similarly significant effects on you (Art. 22 GDPR).

24. Security

We use appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, destruction or alteration. Inquiries from the contact form are stored encrypted on our server and transmitted encrypted.

25. Children

Our website is directed at businesses and public clients, not at children. We do not knowingly collect personal information from children under the age of 16. If you become aware that a child has provided us with personal information, please contact us so we can delete it.

26. What We Do Not Use

This website does not use embedded videos or maps from third parties, messenger services, a newsletter or advertising or remarketing services. The videos on this website are stored in our own media storage. The online appointment booking is a link to a Microsoft page, not a service embedded in the website (section 14).

27. Changes to This Policy

We update this Privacy Policy when legal requirements or our data processing change. The date at the top of this page shows when it was last updated. The current version is always available at this address.

28. Contact

JoBe Lighting GmbH, Hanauer Landstr. 328-330, 60314 Frankfurt am Main, Germany

JoBe Ops, LLC, phone +1 805 426-9630

Email: info@jobe-lighting.com