Legal NoticeData ProtectionAccessibility

Privacy Policy

With this privacy policy, we would like to inform you about how we process personal data. The protection of your privacy is of utmost importance to us, which is why compliance with the legal provisions on data protection is a matter of course for us.

Name and contact details of the person responsible

Leading Lights GmbH (hereinafter referred to as Leading Lights), Alsterdorfer Strasse 2a, D-22299 Hamburg, Germany  

‍

Email: info@leadinglights.de

Telephone: +49 40 4677 - 5450

Fax: +49 40 4677 – 5703

Data protection officer

If you have any questions about our data protection measures, the processing of your data or the protection of your rights as a data subject, you can contact us and our data protection officer as follows:

External data protection officer

ePrivacy GmbH represented by Prof. Dr. Christoph Bauer, Burchardstraße 14, 20095 Hamburg, Germany

‍

Telephone: +49 40 – 6094518 -25/-16

E-Mail: datenschutz@leadinglights.de

‍

If you wish to communicate directly with our data protection officer (for example, because you have a particularly sensitive concern), please contact them by post, as communication by email can always present security risks. Please indicate in your enquiry that your concern relates to Leading Lights GmbH.

Personal data

Personal data is any information relating to an identified or identifiable person. This includes the following categories of personal data that we process:

  • Your personal contact details (such as first name, surname, address, email address, telephone number),
  • Your correspondence with us,
  • Log files containing information about your visit to our website,
  • Browser used and, if applicable, the operating system of your computer and the name of your access provider,
  • Payment details (such as account number, credit card number, financial institution),
  • Online identifiers (such as cookie IDs, IP addresses, advertising IDs),
  • Customer data (such as billing information, user profiles, address, order history, payment details),
  • Application documents (such as CV, references and certificates)

Use of cookies

General information about cookies

‍

A cookie is a text file with an identification number that is transmitted to the user's computer when using the website, together with the other data actually requested, and stored there. The file is kept there for later access and is used to authenticate the user. Since cookies are only simple files and not executable programmes, they do not pose any risk to the computer.

‍

Depending on the settings selected by the user in their internet browser, cookies may be accepted automatically. However, these settings can be changed and the storage of cookies can be deactivated or set so that the user is notified as soon as a cookie is set. If cookie use is deactivated, some functions of the website may not be available or may only be available to a limited extent. You can prevent the setting of cookies by our website at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies.

‍

Cookies that are already active can be deleted at any time via an Internet browser or other software programmes. We may work with advertising partners who help us to make our website more interesting for you. In this case, cookies from partner companies may also be stored on your hard drive when you visit our website (third-party cookies).

‍

Session Cookies

‍

Session cookies are used for the duration of a session and are automatically deleted when the browser is closed. They ensure, for example, that video and audio files can be played, that your user entries are temporarily stored during the input time, and thus improve user-friendliness.

‍

Persistent Cookies

‍

Persistent cookies remain on your device after you close your browser. These cookies can, for example, store your user preferences, such as language settings, and analyse user behaviour on our website. The storage period for persistent cookies corresponds to the respective lifetime of the individual cookie. After this period, they are automatically deleted.

Intended uses

We process your data for the following purposes:

  • to correspond with you,
  • for the processing of contracts with you,
  • for quality assurance and statistics,
  • for the provision of our service,
  • for consideration of your application,
  • to improve our service,

Legal basis

We base the processing of your data on the following legal grounds:

  • Your consent, if you have given us such consent (Art. 6(1)(a) GDPR),
  • the initiation or execution of a contract with you (Art. 6(1)(b) GDPR),
  • the fulfilment of legal obligations (Art. 6(1)(c) GDPR),
  • the pursuit of our legitimate interests (Art. 6(1)(f) GDPR)

Legitimate interests

The processing of your data is intended to safeguard the following legitimate interests:

  • the improvement of our offering,
  • the protection of our systems against misuse,
  • the compilation of statistics,
  • the storage of our correspondence with you,

Requirement or obligation to provide data

Unless expressly stated, the provision of your data is not necessary or mandatory.

Storage period

We store your data,

  • if you have consented to the processing, at most until you withdraw your consent;
  • if we need the data to perform a contract, for no longer than the duration of the contractual relationship with you;
  • if we use the data on the basis of a legitimate interest, at most for as long as your interest in deletion or anonymisation does not outweigh this;
  • if there are statutory retention obligations, until the end of the retention periods.

Data recipient

When processing your data, we work with the following service providers who have access to your data:

‍

LinkedIn Fanpage

‍

We operate a LinkedIn fan page (‘company page’) on LinkedIn, a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter ‘LinkedIn’).  
   

We use our company page to connect and communicate with LinkedIn members and visitors and to provide information about our company and its products and services. When you contact us, we may view the information you have posted on LinkedIn as a LinkedIn member. If you share, like or comment on our content, or if you mention our company profile on LinkedIn, we may also access this information.

‍

When a member visits, follows or engages with the page, LinkedIn processes personal data to provide us with information (‘Page Insights’) about this. This enables us to improve our marketing activities. LinkedIn processes data that the member has provided to LinkedIn, such as the member's job title, country, industry, length of service, company size and employment status data from the member's profile. In addition, LinkedIn will process information about how a member has interacted with our company page.

‍

We have entered into an agreement with LinkedIn, the Page Insights Joint Controller Addendum (the ‘Addendum’). This user agreement is part of the LinkedIn Pages Terms and sets out the responsibilities of LinkedIn and us with regard to the processing of Page Insights. The Page Insights Addendum for joint controllers is available here:

https://legal.linkedin.com/pages-joint-controlleraddendum.

‍

For more information about Page Insights and how you can exercise your rights as a data subject, please refer to the ‘Page Insights Information’. For more detailed information about how LinkedIn processes personal data and how you can exercise your rights as a data subject vis-à-vis LinkedIn, please refer to LinkedIn's privacy policy, which is published here:

https://www.linkedin.com/legal/privacy-policy.

‍

Google Maps

‍

We use Google Maps (API) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’) on our website. Google Maps is a web service for displaying interactive (land) maps to visually represent geographical information. Using this service shows you our location and makes it easier for you to find us. When you visit subpages that contain Google Maps, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This occurs regardless of whether Google provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. In addition, if you have a Google account, you can adjust the settings for your Google Maps activities accordingly. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.

‍

Such evaluation is carried out in particular in accordance with Art. 6 (1) lit. f GDPR on the basis of Google's legitimate interests in displaying personalised advertising, market research and/or the needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. Detailed information on data protection in connection with the use of Google Maps can be found on Google's website (‘Google Privacy Policy’):

http://www.google.de/intl/de/policies/privacy/

Transfer to third countries

Data is transferred to countries outside the European Economic Area. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or where we can ensure the careful handling of personal data through contractual agreements or other appropriate safeguards, such as certifications or proven compliance with international security standards.

  • USA (Standard Contractual Clauses)

Your rights

As a data subject, you have the following rights:

  • Request information about the processing of your data and receive a copy of your personal data. Among other things, you can request information about the purposes of the processing, the categories of personal data being processed, the recipients of the data (if it is disclosed), the duration of storage or the criteria for determining the duration;
  • to receive the personal data concerning you in a structured, commonly used and machine-readable format or to transmit it to another controller;
  • To rectify your data. If your personal data is incomplete, you have the right to have it completed, taking into account the purposes of the processing;
  • Have your data deleted or blocked;
  • restrict processing;
  • object to the processing of your data;
  • Withdraw your consent to the processing of your data for the future;

and

  • to lodge a complaint with the competent supervisory authority regarding unlawful data processing.

Status of the privacy policy

We will update the information if our processes change.  

‍

Status of this privacy policy: 1 January 2024

‍