Name and address of the person responsible and of the data protection officer

Controller within the meaning of the General Data Protection Regulation (GDPR respectively DSGVO (Datenschutzgrundverordnung) and other national data protection laws of the member states as well as other data protection provisions is:

Robers Leuchten GmbH & Co. KG
Weseker Weg 36
46354 Südlohn
E-mail: office[at]robers.com
Phone: +49 (0) 28 62 / 99 77 -0
Fax: +49 (0) 28 62 / 99 77 -77

–––––––––––––––––––––––––––––––––––––
DATA PROTECTION DECLARATION
–––––––––––––––––––––––––––––––––––––

1) Introduction and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data in this context refers to all data that can be used to personally identify you.

1.2 The controller in charge of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Robers.Leuchten GmbH & Co. KG, Weseker Weg 36, 46354 Südlohn, Germany, Tel.: 0286299770, E-Mail: office@robers.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data collection when you visit our website
2.1 If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the page server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website:
– Our visited website
– Date and time of access
– Amount of data sent in bytes
– Source/reference from which you came to the page
– Browser used
– Operating system used
– IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are specific indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

3) Hosting & content delivery network
We use a provider that provides its services itself or through selected subcontractors exclusively on servers within the European Union to host our website and display the page content.
All data collected on our website is processed on these servers.
We have concluded an order processing contract with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

4) Cookies
We use cookies, i.e. small text files that are stored on your end device, to make visiting our website more attractive and to enable the use of certain functions. Some of these cookies are automatically deleted again after closing the browser (so-called “session cookies”), while some of these cookies remain on your end device for longer and enable the storage of page settings (so-called “persistent cookies”). In the latter case, you can see the storage period in the overview of cookie settings for your web browser.
If personal data is also processed by individual cookies that we use, the processing is carried out in accordance with Art. 6 (1) point b GDPR, either for the execution of the contract or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can adjust the settings on your browser so that you are informed when cookies are set and can decide whether to accept them on a case-by-case basis, or to exclude the acceptance of cookies in certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact
5.1 WhatsApp Business
We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. We use the so-called “business version” of WhatsApp for this purpose.
If you contact us via WhatsApp regarding a specific transaction (e.g. an order you have placed), we will store and use the mobile phone number you used on WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1) point b GDPR for the purpose of processing and responding to your request. On the same legal basis, we may ask you to provide further data (order number, customer number, address or e-mail address) via WhatsApp in order to be able to assign your request to a specific process.
If you use our WhatsApp contact for general enquiries (e.g. about our range of services, availability or our website), we store and use the mobile phone number you use for WhatsApp and – if provided – your first and last name in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in providing the requested information in an efficient and timely manner.
Your data will only be used to respond to your request via WhatsApp. It will not be passed on to third parties.
Please note that WhatsApp Business is given access to the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp business account, we use a mobile device in whose address book only the WhatsApp contact data of those users are stored who have also contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6 (1) point a GDPR when they first use the app on their device by accepting the WhatsApp terms of use. A transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded in this respect.
For information on the purpose and scope of data collection and the further processing and use of the data by WhatsApp, as well as your rights in this regard and setting options for protecting your privacy, please refer to the WhatsApp data protection information: https://www.whatsapp.com/legal/?eea=1#privacy-policy
As part of the above-mentioned processing, data may be transferred to servers of Meta Platforms Inc. in the United States.
For data transfers to the US, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.

5.2 When you contact us (e.g. using the contact form or by email), personal data is collected. The data collected when using a contact form can be seen from the respective contact form. These data are stored and used solely for the purpose of answering your request or for establishing contact and for the associated technical administration.
The legal basis for processing these data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after the final processing of your request. This is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided that there are no legal storage obligations to the contrary.

6) Use of customer data for direct advertising
Sending the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for goods or services similar to those already purchased from our range by e-mail. According to § 7 Abs. 3 UWG, we do not need to obtain separate consent from you for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct mail in accordance with Art. 6 (1) point f GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail.
You have the right to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the controller named at the beginning. You will only incur the transmission costs according to the basic rates for this. After receiving your objection, the use of your e-mail address for advertising purposes will be stopped immediately.

7) Online marketing
YITH Woocommerce
We participate in the affiliate program of the following provider: Your Inspiration Solutions S.L.U., Calle Valentin Sanz 37,38002, Santa Cruz de Tenerife, Spain
In this context, we have placed links on our website that lead to offers on the provider’s or third-party websites (“partner sites”).
To measure the success of an affiliate link, to evaluate orders generated by such a link and to bill the corresponding commission payments, the provider uses cookies and/or comparable technologies that are generally set on the partner pages and for which we are not responsible in terms of data protection. In doing so, the provider also regularly processes the IP address and, if applicable, further end device information.
All of the processing described above, in particular the reading or saving of information on the end device you are using, will only take place if you have given your express consent to do so in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future by using the cookie consent management options on the partner pages.

8) Web analysis services
8.1 Google Analytics 4
This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.
By default, when you visit the website, Google Analytics 4 sets cookies, which are stored as small text files on your device and collect certain information. The scope of this information also includes your IP address, which is, however, shortened by Google by the last digits in order to exclude a direct personal reference.
The information is transferred to Google servers and processed there. In this context, transfers to Google LLC based in the USA are also possible.
Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services relating to website activity and internet usage. The IP address transmitted and abbreviated by your browser as part of Google Analytics is not merged with other data from Google. The data collected in the course of using Google Analytics 4 is stored for a period of two months and then deleted.
All the processing described above, in particular the setting of cookies on the end device used, will only take place if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service using the “Cookie-Consent-Tool” provided on the website.
We have concluded an order processing contract with Google that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
Further legal information about Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special function “demographic characteristics” and can use it to create statistics that provide information about the age, gender and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to a specific person and will be deleted after being stored for a period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Art. 6 (1) point a GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop the cross-device analysis, you can disable the “Personalized Advertising” feature in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de. Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de.

UserIDs
As an extension to Google Analytics 4, the “UserIDs” function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 (1) point a GDPR, set up an account on this website and log in to this account on various devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the US, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.

8.2 Google Tag Manager
This website uses “Google Tag Manager”, a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).
Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and for calibrating, controlling and attaching conditions to them via a uniform user interface. Google Tag Manager itself does not store any information on user terminals or read it out. Nor does the service perform any independent data analysis. However, when you visit a page, the Google Tag Manager transmits your IP address to Google, where it may be stored. It is also possible that it will be transmitted to Google LLC. servers in the United States.
This processing will only be carried out if you have given us your express consent to do so in accordance with Article 6(1)(a) of the GDPR. Without this consent, the Google Tag Manager will not be used when you visit the site. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service in the “Cookie-Consent-Tool” provided on the website.
We have concluded an order processing contract with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the US, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further legal information about Google Tag Manager can be found at https://policies.google.com/privacy?hl=de&gl=de

9) Retargeting/Remarketing and Conversion Tracking
9.1 Pinterest Retargeting Pixel
This website uses retargeting technology from the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
This makes it possible to address visitors to our website who have already shown an interest in our shop and our products with personalized, interest-based advertising. The advertising material is displayed on the basis of a cookie-based analysis of previous and current usage behavior, but no personal data is stored. In the case of retargeting technology, a cookie is stored on your computer or mobile device in order to collect pseudonymized data about your interests and thus to adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. This means that you are shown advertising that most likely matches your product and information interests.
All the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. Without this consent, retargeting technology will not be used during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service in the “Cookie-Consent-Tool” provided on the website.

9.2 Pinterest tag conversion tracking
This website uses the conversion tracking technology of the following provider: Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
If you have reached our website from an advertisement on the provider’s domain, cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests) can be used to track the success of the advertisement.
For this purpose, certain end device and browser information, including, where applicable, your IP address, is read out via the tracking technology in order to record and evaluate user actions predefined by us (e.g. completed transactions, leads, search queries on the website, views of product pages). This enables us to create statistics about user behavior on our website after being redirected from an advertisement, which we use to optimize our offer.
All of the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

9.3 WooCommerce Order Attribution Tracking
This website uses the conversion tracking technology of the following provider: Automattic Inc., 60 29 th Street # 343, San Francisco, CA 94110, USA
If you have reached our website from an advertisement on the provider’s domain, cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests) can be used to track the success of the advertisement.
For this purpose, certain end device and browser information, including, where applicable, your IP address, is read out via the tracking technology in order to record and evaluate user actions predefined by us (e.g. completed transactions, leads, search queries on the website, views of product pages). This enables us to create statistics on user behavior on our website after being redirected from an advertisement, which we use to optimize our offer.
All of the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the US, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

10) Site functionalities
10.1 Youtube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. In doing so, certain information, including your IP address, is transmitted to the provider.
If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, to create playback statistics and to prevent abusive behavior.
If you are logged into a user account with the provider while visiting our site, your data will be directly assigned to your account when you click on a video. If you do not want the information to be associated with your account, you must log out before clicking the play button.
All of the aforementioned processing, in particular the setting of cookies for reading information on the end device used, will only take place if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service using the “Cookie-Consent-Tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.

10.2 MyFonts
This site uses so-called web fonts from the following provider for the uniform display of fonts: Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, MA 01801, USA
When you access a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly and establishes a direct connection to the provider’s servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.
The processing of personal data in the course of establishing a connection with the provider of the fonts will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service using the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a default font will be used by your computer.
For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

10.3 Google reCAPTCHA
On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA. The provider uses “Google Fonts”, i.e. fonts loaded from the internet by Google, for the visual design of the captcha window. No information other than that mentioned above, which is already transmitted to Google via the ReCaptcha functionality, is processed.
The service checks whether an entry is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is taken by a human and not by an automated bot, the provider collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this to the provider’s server for evaluation.
The legal basis is our legitimate interest in determining individual responsibility on the Internet and avoiding abuse and spam in accordance with Art. 6 para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the US, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.

10.4 – Yumpu
We use the “Yumpu” service provided by i-magazine AG (“Yumpu”), Gewerbestrasse 3, 9444 Diepoldsau, Switzerland, to display PDF files on our website.
Yumpu makes the content of PDF files freely accessible to everyone as a so-called flip page catalog that is easy to read directly in the web browser without having to download the files first. To perform the service, your web browser retrieves the content directly from Yumpu. Yumpu receives information about your web browser and the operating system used, as well as your IP address. Yumpu uses this data exclusively for the purpose of displaying the affected files online. Insofar as personal data is collected and transmitted to Yumpu, this is done in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in a user-friendly retrieval system and the optimal integration of PDF files on our website. In the event of data being transmitted to Yumpu in Switzerland, the European Commission’s adequacy decision ensures an adequate level of data protection.

11) Tools and other
Cookie consent tool
This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “cookie consent tool” is displayed to users when they visit the site in the form of an interactive user interface on which consent for certain cookies and/or cookie-based applications can be given by ticking the appropriate boxes. When the tool is used, all cookies/services requiring consent are only loaded if the respective user gives their consent by ticking the appropriate box. This ensures that such cookies are only set on the respective user’s device if consent has been given.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this process.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and, consequently, in a legally compliant design of our website.
Another legal basis for the processing is Article 6(1)(c) GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Where necessary, we have concluded an order processing contract with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
Further information about the operator and the setting options for the cookie consent tool can be found directly in the corresponding user interface on our website.

12) Rights of the data subject
12.1 The applicable data protection law grants you the following rights (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective conditions of exercise:
– Right of access according to Art. 15 GDPR;
– Right to rectification according to Art. 16 GDPR;
– Right to erasure in accordance with Art. 17 GDPR;
– Right to restriction of processing in accordance with Art. 18 GDPR;
– Right to notification in accordance with Art. 19 GDPR;
– Right to data portability in accordance with Art. 20 GDPR;
– Right to withdraw consent granted in accordance with Art. 7 (3) GDPR;
– Right to lodge a complaint in accordance with Art. 77 GDPR.

12.2 RIGHT TO OBJECT
IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO FILE AN OBJECTION TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN PROVE THAT THERE ARE COMPELLING REASONS FOR PROCESSING WHICH ARE WORTHY OF PROTECTION AND WHICH OUTWEIGH YOUR INTERESTS, fundamental rights and freedoms, or if the processing is for the purpose of enforcing, pursuing or defending legal claims.
IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

13) Duration of the storage of personal data
The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of the processing and, if relevant, additionally on the basis of the respective statutory retention period (e.g. commercial and tax retention periods).
When processing personal data on the basis of express consent in accordance with Art. 6 (1) point a GDPR, the data concerned will be stored until you revoke your consent.
If there are legal retention periods for data that is processed in the context of legal or similar obligations on the basis of Art. 6 (1) point b GDPR, this data is routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfillment or initiation of a contract and/or there is no longer any legitimate interest on our part in further storage.
When processing personal data on the basis of Art. 6 (1) point f GDPR, this data is stored until you exercise your right of objection under Art. 21 (1) GDPR, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) point f GDPR, this data is stored until you exercise your right of objection under Art. 21 (2) GDPR.
Unless otherwise provided in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary in relation to the purposes for which they were collected or otherwise processed.