Privacy policy

The responsible party within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:

ICO-LUX GmbH
Hans-Knöll-Str. 6
07745 Jena

Managing directors with sole power of representation:
Lars Winterfeld, Dr. Stefan Brechtken, Jan Franke

E-Mail: info@ico-lux.de
Phone: +49 3641 92 90 988

Your data subject rights

You can exercise the following rights at any time using the contact details provided by our data protection officer:

• Information about your data stored by us and its processing (Art. 15 DSGVO),

• Correction of incorrect personal data (Art. 16 DSGVO),

• Deletion of your data stored by us (Art. 17 DSGVO),

• Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),

• objection to the processing of your data by us (Art. 21 DSGVO) and

• Data portability, insofar as you have consented to the data processing or have concluded a contract with us (Art. 20 DSGVO).

• If you have given us consent, you can revoke it at any time with effect for the future.

You may at any time lodge a complaint with a supervisory authority, e.g. the competent supervisory authority in the federal state of your residence or the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Collection of general information when you visit our website Nature and purpose of processing:

When you access our website, i.e., when you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.

In particular, they are processed for the following purposes:

• Ensuring a smooth connection setup of the website,

• Ensuring a smooth use of our website,

• evaluating system security and stability, and

• to optimize our website.

• We do not use your data to draw conclusions about you personally. Information of this kind will be statistically evaluated anonymously by us, if necessary, in order to optimize our website and the technology behind it.

Legal basis and legitimate interest:.
The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website.

Receivers:
Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.

Duration of storage:
The data is deleted as soon as it is no longer required for the purpose of collection. This is generally the case for data used to provide the website when the respective session has ended.

In the case of storage of data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are anonymized, so that an assignment of the calling client is no longer possible.

Provision mandatory or required:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website is not guaranteed. In addition, individual services and services may not be available or may be limited. For this reason, an objection is excluded.

Contact form and registration form for contact via e-mail.

Type and purpose of processing:
The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This serves the assignment of the request and the subsequent response to the same. The provision of further data is optional.

Legal basis:
The processing of the data entered in the contact form is based on a legitimate interest (Art. 6 para. 1 lit. f DSGVO).

By providing the contact form, we would like to enable you to contact us in an uncomplicated manner. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b DSGVO).

Receiver:
Recipients of the data are, if applicable, order processors.

Storage period:
Data will be deleted no later than 6 months after processing the request.

If a contractual relationship arises, we are subject to the statutory retention periods under the German Commercial Code (HGB) and delete your data after these periods have expired.

Provision mandatory or required:The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.

Use of Matomo (formerly Piwik).
On this website, the service Matomo is used. This is an analysis tool for website operators, which allows the operator to collect and analyze data about user behavior. This enables us to optimally adapt the offer of our website to the needs of our users. For this purpose, among other things, the recognition of the user is necessary, even if he moves on different subpages of the website.

We use Matomo in a privacy-friendly configuration that does not require cookies and use the tool exclusively on our own servers, so that a transfer of the collected data to third parties is excluded. Instead, so-called "device fingerprinting" is used, in which information about the user's terminal device is stored on our server together with information about the use of the website for the purpose of recognizing the user. This enables us to find out when the user accessed which pages. Depending on the user's network configuration, we also collect information about the region, operating system, browser used, referrer and IP address. The latter is anonymized before storage so that it can no longer be clearly assigned to the user. The above information is stored for a maximum of 24 hours. This allows us to measure which actions are performed by users - for example, clicks on links or length of stay on a sub-page.

Matomo is used on the basis of Art. 6 (1f) of the DS-GVO, according to which the website operator has a legitimate interest in the anonymized analysis of user behavior in order to evaluate and improve its web offering.

Objection:
You can object to the storage and analysis of your data by Matomo at any time via the link below. A so-called opt-out cookie will then be stored on your device, which is valid for two years. As a result, Matomo will not collect any session data. However, please note that the opt-out cookie will be deleted if you delete all cookies.

For more information on the privacy settings of the Matomo software, please see the following link: https://matomo.org/docs/privacy/.

Appointment Planner
This site uses the appointment scheduler service of Harmonizely.com. This allows visitors to choose and book an appointment themselves. Harmonizely has been integrated as an iFrame. The privacy policy of Harmonizely can be found under the following link: https://harmonizely.com/privacy/

Application procedure, possibility to apply.
For the purpose of handling the application procedure, the data controller collects and processes the personal data of applicants. The processing may be transmitted by electronic means. This is particularly the case if the applicant fills in his/her data via the application forms provided on the website and transmits them to the controller. If the data controller concludes an employment contract with the applicant, the transmitted data will be stored for the purpose of processing the contract, taking into account the statutory time limits. If no employment contract is concluded, the application documents will be deleted two months after notification of the rejection decision, provided that no other legitimate interests of the controller prevent deletion. Another legitimate interest is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).The applicant may consent to the inclusion of his/her application documents in the applicant pool of the controller. The data will be deleted until revoked, but at the latest after three years.

SSL Encryption
To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

Information about your right of objection according to Art. 21 DSGVO.Individual right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6(1)(f) DSGVO (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 DSGVO.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

Receiver of an objection.
ICO-LUX GmbH
Jan Franke
Hans-Knöll-Str. 6
07745 Jena

E-Mail: info@ico-lux.de
Phone: +49 3641 92 90 988

Change of our privacy policy
We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection statement will then apply to your next visit.

Questions to the data protection officer
If you have any questions about data protection, please write us an e-mail or contact the person responsible for data protection in our organization directly:

This privacy statement was created in part with the help of activeMind AG, the experts for external data protection officers (version #2020-09-30).