a) Personal data
Personal data includes all information which relates to an identified or identifiable natural person (hereinafter referred to as "data subject"). An identifiable person is a natural person who can be identified directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier or to one or more specific characteristics which are expressions of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
b) Data subject
The data subject is any identified or identifiable natural person whose personal data is processed by the controller.
Processing includes any process carried out with or without the help of automated processes or any such series of processes in connection with personal data such as collection, recording, organisation, filing, saving, adaptation or amendment, reading, querying, use, publication by forwarding, distribution or any other form of provision, comparison of encoding, abbreviation, deletion or destruction.
d) Restriction of processing
Restriction of processing is the identification of stored personal data in order to limit their future processing.
Profiling is any kind of automated processing of personal data which involves the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or relocation of that natural person.
Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific person concerned without additional information, provided that this additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data is not attributed to an identified or identifiable natural person.
g) Controller or party responsible for data processing
The controller or party responsible for data processing is the natural or legal person, public authority, institution or other body which, alone or in conjunction with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are prescribed by Union law or by the law of the Member States, the controller may, in accordance with Union law or the law of the Member States, lay down the specific criteria for its appointment.
A processor is a natural or legal person, authority, institution or other body who processes personal data on behalf of the controller.
The recipient is a natural or legal person, public authority, institution or other body to whom personal data is disclosed, whether or not they are third parties. However, authorities which may receive personal data in the context of a specific task under Union law or Member State law, shall not be considered recipients.
j) Third party
A third party is a natural or legal person, public authority, institution or other body other than the data subject, the controller, the processor and those authorised under the direct responsibility of the controller to process the personal data.
Consent is any declaration or other unambiguous and informed expression of intent given voluntarily by the data subject, in the form of a declaration or other unambiguous affirmative action, in which the data subject indicates that he/she agrees to the processing of his/her personal data.
The controller within the meaning of the General Data Protection Regulation, other data protection laws in force in the Member States of the European Union, and other provisions of a data protection nature, is:
Multi-Lite Lichttechnik Handelsgesellschaft mbH
21465 Reinbek, Deutschland
The Data protection officer Mr. Asmus Eggert can be contacted at:
mip Consult GmbH
Alte Jakobstr. 77
The website of Multi-Lite Lichttechnik Handelsgesellschaft mbH captures a series of general data and information with each visit to the website by a data subject or an automated system. This general data and information is stored in the server log files. The (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the internet page from which an accessing system reaches our Internet page (so called referrer), (4) the sub-websites which are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system and (8) other similar data and information serving to protect against attacks on our information technology systems.
When using this general data and information, Multi-Lite Lichttechnik Handelsgesellschaft mbH does not draw conclusions regarding the data subject. Rather, this information is required in order to (1) deliver the content of our website correctly, (2) to optimise the content of our website and its advertising, (3) to ensure the long term functionality of our information technology systems and the technology of our website, and (4) to provide law enforcement agencies with the information necessary for prosecution in the event of a cyber attack. These anonymously collected data and information are therefore evaluated by Multi-Lite Lichttechnik Handelsgesellschaft mbH on the one hand statistically and further with the aim of increasing the privacy and data security in our company ultimately to ensure an optimum level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
Article 6 I lit. a of the GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations necessary for the supply of goods or to provide any other service, the processing is based on Article 6 I lit. b of the GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. If our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, the processing is based on Article 6 I lit. c of the GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his or her name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Article 6 I lit. d of the GDPR. Finally, processing operations could be based on Article 6 I lit. f of the GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. It considers that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 of the GDPR).
The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data shall be routinely deleted, as long as it is no longer necessary for the fulfilment of the contract or the initiation of a contract.
The controller shall process and store personal data relating to the data subject only for the period of time necessary to achieve the purposes for which the data is stored, or to the extent provided for by the European guideline and regulatory body or any other legislator in laws or regulations to which the controller is subject.
If the purpose of the storage expires or a retention period prescribed by the European guideline and regulatory body or another competent legislator expires, the personal data shall be routinely blocked or deleted in accordance with legal regulations.
We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary in order to conclude a contract that the data subject provide us with personal data, which must subsequently be processed by us. The data subject is, for example, obligated to provide us with personal data when our company signs a contract with him or her. The non-provision of the personal data would have the consequence that the contract with the data subject could not be concluded. Before personal data is provided by the data subject, the data subject must contact any employee. The employee shall clarify to the data subject whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and the consequences of non-provision of the personal data.
The controller collects or processes the personal data of applicants for the purpose of processing the application procedure. The processing can also be done electronically. This is particularly the case if an applicant submits corresponding application documents by electronic means, for example by email, or via a web form on the website, to the controller. If the controller concludes a contract of employment with an applicant, the data transmitted shall be stored for the purposes of the employment relationship in accordance with the law. If no employment contract is concluded with the candidate by the controller, the application documents shall be automatically deleted two months after the announcement of the rejection decision, unless deletion precludes other legitimate interests of the controller. Further legitimate interest in this sense, for example, a burden of proof in a procedure under the General Equal Treatment Act).
The data subject can prevent our website from setting cookies at any time by means of making the appropriate adjustments in his/her internet browser settings and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via the internet browser itself or other software programmes. This is possible with all current internet browsers. If the data subject deactivates the setting of cookies in the internet browser used, then under certain circumstances not all the functions of our website will be fully usable.
b) Newsletter Tracking
The newsletters of Multi-Lite Lichttechnik Handelsgesellschaft mbH contain so called tracking pixels. A tracking pixel is a miniature graphic that is embedded in such emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. With the help of the embedded tracking pixel, Multi-Lite Lichttechnik Handelsgesellschaft mbH can detect whether and when an email was opened by a data subject and which links in the email were used by the data subject.
Such personal data collected via the tracking pixels contained in the newsletters shall be stored and evaluated by the controller in order to optimise the delivery of newsletters and to adapt the content of future newsletters better to the interests of the data subject. These personally identifiable data shall not be passed on to third parties. Data subjects are at any time entitled to withdraw the separate declaration of consent made via the double-opt-in procedure. After withdrawal, this personal data shall be deleted by the controller. A cancellation of receipt of the newsletter, shall be automatically interpreted by Multi-Lite Lichttechnik Handelsgesellschaft mbH as a revocation.
The data processor has integrated Google Analytics (with the anonymisation function) into this website. Google Analytics is a web analytics service. Web analysis is the acquisition, collection and evaluation of data concerning the behaviour of the website visitors. Among other things, a web analysis service collects data about which website a data subject has accessed the current website from (so-called referrer), which sub pages of the website were accessed or how often and for which length of time a sub page was viewed. Web analysis is mainly used to optimise a website and for carrying out a cost-benefit analysis of internet advertising.
The Google Analytics component is operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
For web analysis via Google Analytics, the controller uses the add-on "_gat. _anonymizeIp". By means of this add-on, the IP address of the internet connection of the data subject is shortened and made anonymous by Google if access to our websites is performed from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyse visitor flows to our website. Among other things, Google uses the data and information obtained to evaluate the use of our website in order to compile online reports for us that show activities on our website and to provide other services related to the use of our website.
Google Analytics places a cookie on the information technology system of the data subject. What cookies are, has already been explained above. By setting the cookie, Google makes it possible to analyse the use of our website. Each time you access one of the individual pages of this website, which is operated by the controller, and on which a Google Analytics component has been integrated, the internet browser on the information technology system of the data subject is automatically induced by the relevant Google Analytics component to transmit data to Google for the purpose of online analysis. Within the scope of this technical procedure, Google receives information about personal data, such as the IP address of the data subject, which Google uses, among other things, to trace the origin of the visitor and the clicks which subsequently enables commission settlements.
The cookie is used to store personal information, such as the access time, the location from which access was gained and the frequency of visits to our website by the data subject. Whenever you visit our website, personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. Personal data is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.
The data subject can prevent our website from setting cookies at any time (as already mentioned above) by means of making the appropriate adjustments in their internet browser settings and thus permanently object to the setting of cookies. Such a configuration of the internet browser settings would also prevent Google from placing a cookie on the information technology system of the data subject. Furthermore, a cookie already set by Google Analytics can be deleted at any time via the internet browser itself or other software programmes.
The controller has integrated Google AdWords into this website. Google AdWords is an internet advertising service that allows advertisers to place ads in both Google's search engine results and on the Google advertising network. Google AdWords allows advertisers to predefine specific keywords that allow advertisers to display an ad in Google's search engine results only when the user uses the search engine to retrieve a keyword relevant search result. In the Google advertising network, ads are distributed on topic relevant websites using an automatic algorithm and in accordance with the previously defined keywords.
Google AdWords is operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to promote our own website by way of displaying interest relevant advertising on the websites of third party companies, in the search engine results of the Google search engine and by displaying third party advertising on our website.
If a data subject arrives at our website via a Google ad, then Google stores a so called conversion cookie on the information technology system of the data subject. What cookies are, has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie shall be used to trace whether certain sub-pages have been viewed on our website, e.g. the shopping cart of an online shop. Through the conversion cookie, both we and Google can track whether a data subject, who came to our website via an AdWords ad, has for example completed or cancelled a purchase of goods.
The data and information collected by the conversion cookie is used by Google to create visitor statistics for our website. We use these visitor statistics to determine the total number of users that have been referred to us via AdWords ads, i.e. to determine the success or failure of each AdWords ad and to optimise our future AdWords ads. Neither our company nor other Google AdWords advertisers receive information from Google that could identify the data subject.
The conversion cookie is used to store personal information, such as the websites visited by the data subject. Thus, whenever you visit our website, personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. Personal data is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.
The data subject can prevent our website from setting cookies at any time (as already mentioned above) by means of making the appropriate adjustments in their internet browser settings and thus permanently object to the setting of cookies. Such a configuration of the internet browser settings would also prevent Google from placing a conversion cookie on the information technology system of the data subject. Furthermore, a cookie already set by Google AdWords can be deleted at any time via the internet browser itself or other software programmes.
Furthermore, the data subject has the option to object to interest related advertising from Google. To do this, the data subject must visit www.google.de/settings/ads from each of the internet browsers used and make the desired setting changes there.
The controller has integrated YouTube components into this website. YouTube is an internet video portal that allows video publishers to post video clips free of charge and for users to view, rate and comment on these videos free of charge. YouTube allows the publication and viewing of all types of videos, which include complete film and television programmes as well as music videos, trailers and videos made by users themselves.
YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time you access one of the individual pages of this website, which is operated by the controller and on which a YouTube component (YouTube video) has been integrated, the internet browser on the information technology system of the data subject is automatically induced by the relevant YouTube component to download the YouTube content of that component. Further information about YouTube can be found at: https://www.youtube.com/yt/about/de/. As part of this technical process, YouTube and Google are informed about which specific sub-page on our website has been visited by the data subject.
Insofar as the data subject is logged into YouTube at the same time as visiting our website, YouTube will recognise which specific sub-page of our website is visited by the data subject once the sub-page containing a YouTube video has been opened. This information is collected by YouTube and Google and linked to the YouTube account of the data subject.
YouTube and Google will always receive information from the YouTube component informing that the data subject has visited our website (when the data subject is logged into YouTube at the same time as when they access our website), regardless of whether or not the data subject clicks on a YouTube video. If such a transmission of this information to YouTube and Google is not desired by the data subject, he or she can prevent the transmission by logging out of their YouTube account before accessing our website.
f) Google Maps
Google Maps API is a map service of Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA. We use Google Maps API to display an interactive map and to create directions or to help with the search for a stationary market. When using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google on servers in the United States.
We use your data for the sending of information you have requested about our offer and other actions by us to the email address you provided. This is only done with your consent or a legal permission. The consent to sending are based on the Article 6 para. 1 lit. a 7 of the GDPR as well as § 7 para. 3 of the Law on Unfair Competition.
a) Subscription to our newsletter
On the website of Multi-Lite Lichttechnik Handelsgesellschaft mbH the users are given the opportunity to subscribe to the free newsletter of our company. Which personal data are transmitted to the data controller when the newsletter is ordered results from the input mask used for this purpose.
Multi-Lite Lichttechnik Handelsgesellschaft mbH informs its customers and business partners at regular intervals by means of a newsletter about offers of the company. The newsletter of our company can only be received by the data subject if (1) the data subject has a valid email address and (2) the data subject registers for the newsletter.
For legal reasons, a confirmation email will be sent to the email address entered by the data subject for the first time for newsletter mailing using the double-opt-in procedure. This confirmation email is used to check whether the owner of the email address as the data subject authorised the receipt of the newsletter.
When subscribing to the newsletter, we also store the IP address of the computer system used by the data subject at the time of registration, as well as the date and time of registration, as assigned by the Internet Service Provider (ISP). The collection of these data is necessary in order to understand the (possible) misuse of the email address of a data subject at a later date and therefore serves as legal safeguards for the controller.
The personal data collected in the context of registering for the newsletter shall be used exclusively to send our newsletter. Subscribers to the newsletter may also be notified by email if this is necessary for the operation of the newsletter service or registration, as might be the case in the event of changes to the newsletter or technical changes. There shall be no transfer of the personal data collected as part of the newsletter service to third parties. Subscription to our newsletter may be terminated by the data subject at any time. The consent to the storage of personal data that the data subject has given us for the sending of the newsletter may be revoked at any time. For the purpose of revoking the consent, there is a corresponding link in each newsletter. Furthermore, it is possible to unsubscribe from the newsletter at any time, directly on the website of the controller or to inform the controller in a different way.
b) Shipping due to the sale of goods and services
When you purchase goods or services from us, we may also send you information about our own similar goods and services without your consent to the email address provided.
c) Use of data for postal advertisements and your right to object
Furthermore, we reserve the right to use your data for advertising purposes, e.g. to send interesting offers and information about our products by letter. You can object to the storage and use of your data for this purpose at any time by sending us a message using one of the contact methods detailed below.
By Post: Multi-Lite Lichttechnik Handels GmbH, Senefelder-Ring 61, 21465 Reinbek to the attention of "Datenschutzbeauftragter"
a) Contact possibilities via the website
Due to legal regulations, the website of Multi-Lite Lichttechnik Handelsgesellschaft mbH contains information that enables quick electronic contact to our company as well as direct communication with us, which also includes a general address of so called electronic mail (email address). Insofar as the data subject contacts the controller by email or through a contact form, the personal data provided by the data subject shall be automatically saved. Such personal data transmitted to the controller by a data subject on a voluntary basis shall be stored for the purpose of processing or contacting the data subject. No disclosure of this personal data to third parties shall be carried out.
b) Registration on our website
By providing personal data, the data subject has the possibility to register on the website of the controller. The type of personal data transferred to the controller is determined by the input mask used for registration. The personal data entered by the data subject is collected and stored exclusively for internal use by the controller and for its own purposes. The controller may arrange for the data to be passed on to one or more processors, such as a courier service provider, who shall also use the personal data exclusively for internal purposes attributable to the controller.
The IP address, date and time of registration given by the internet service provider (ISP) of the data subject, shall also be saved by registration on the website of the controller. The storage of these data is based on the fact that this is the only way to prevent misuse of our services and these data also enable us to investigate crimes and copyright infringements if necessary. In this respect, the storage of such data is necessary in order to safeguard the controller. In principle, these data shall not be passed on to third parties unless there is a legal obligation to do so, or the passing on serves the requirements of criminal or legal proceedings.
The registration of the data subject, with the voluntary provision of personal data, is intended by the controller to offer the data subject content or services which, due to the nature of the matter, can only be offered to registered users. Registered persons are free to modify the personal data given at registration at any time or to delete it completely from the database of the controller.
The controller shall, at any time and on request, inform each data subject about the personal data held regarding that person at any time. It also corrects or deletes for the processing
For the operation as well as for the optimisation of our website as well as our services and the concluding of contracts, various service companies are engaged in the payment and delivery of products for us, e.g. logistics companies, website hosting, postal service providers or credit institutions. We pass on to these companies the data required for the fulfilment of the task (e.g. name, address) for the responsible use and execution of the contract.
Insofar as we are in advance, e.g. in the case of purchase on account, we reserve the right to obtain identity and credit information from specialised service companies (credit reference agencies) to safeguard our legitimate interests. For this purpose, we shall transfer your personal data required for a credit check to the following companies:
The information on creditworthiness may contain probability values (score values) calculated on the basis of scientifically recognised mathematical and statistical processes and when this is being calculated, address data, among other information, may be used. We use the information obtained on the statistical probability of a default for a balanced decision on the establishment, implementation or termination of the contractual relationship. Your protectable interests are taken into account in accordance with the relevant statutory provisions.
a) Right of confirmation
Every data subject has the right, as granted by the European guideline and regulatory body, to request confirmation from the controller as to whether personal data relating to him/her is being processed. If the data subject wishes to exercise this right of confirmation, he/she may at any time contact an employee of the controller.
b) Right to information
Any data subject has the right, as granted by the European guideline and regulatory body, to receive from the controller at any time a copy of the personal data relating to him or her that is used. In addition, the European guideline and regulatory body grants the data subject, access to the following information:
The data subject also has the right to know whether personal data has been transferred to a third country or to an international organisation. In such a case, the data subject is also entitled to obtain information on the relevant guarantees in connection with the transmission.
If the data subject wishes to exercise this right to information, he/she may at any time contact an employee of the controller.
c) Right to correction
Any data subject has the right, as granted by the European guideline and regulatory body, to demand the immediate correction of any inaccurate personal data concerning him or her. Furthermore and taking into account the purposes of processing, the data subject has the right to request that incomplete personal data be completed, with the inclusion of a supplementary declaration.
If the data subject wishes to exercise this right of correction, he/she may at any time contact an employee of the controller.
d) Right to erasure (“Right to be forgotten”)
Any data subject has the right, as granted by the European guideline and regulatory body, to demand that the data concerning him or her be deleted immediately, provided that one of the following reasons applies and insofar as the data processing is not necessary:
If one of the above reasons is correct and a data subject wishes to arrange for the erasure of personal data held by Multi-Lite Lichttechnik Handelsgesellschaft mbH, he/she may at any time contact an employee of the controller. The employee of Multi-Lite Lichttechnik Handelsgesellschaft mbH shall arrange that the erasure request be fulfilled immediately.
If the personal data were made public by the Multi-Lite Lichttechnik Handelsgesellschaft mbH and our company is responsible in accordance with Article 17 para. 1 of the GDPR to commit to the deletion of personal data, therefore, taking into account the available technology and implementation costs, Multi-Lite Lichttechnik Handelsgesellschaft mbH shall take appropriate measures, including technical means, to inform other data controllers who process the published personal data that the data subject has requested from these other data controllers the erasure of all links to such personal data or of copies or replications of such personal data, unless the processing is necessary. The employee of Multi-Lite Lichttechnik Handelsgesellschaft mbH shall make the necessary arrangements in the individual cases.
e) Right to restriction of processing
Any data subject has the right, as granted by the European guideline and regulatory body, to demand that the controller restrict the processing of such data if one of the following conditions is met:
If one of the abovementioned conditions is met and a data subject wishes to request the restriction of personal data stored by Multi-Lite Lichttechnik Handelsgesellschaft mbH, they can contact an employee of the controller at any time. The employee of Multi-Lite Lichttechnik Handelsgesellschaft mbH shall cause the restriction of processing.
f) Right to data portability
Any data subject has the right, as granted by the European guideline and regulatory body, to receive personal data relating to him or her provided by the data subject to a controller in a structured, established and machine readable format. In addition, the data subject has the right to transmit these data to another controller without hindrance by the current controller to whom the personal data has been made available, provided that the processing does not conflict with the given consent in accordance with Article 6 para. 1 lit. a of the GDPR or Article 9 para. 2 lit. a of the GDPR, that it also does not conflict with a contract in accordance with Article 6 para 1 lit. b of the GDPR and the processing is performed with the aid of automated procedures, provided that the processing is not necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
Furthermore, the data subject has the right to transfer data pursuant to Article 20 para. 1 of the GDPR, he or she has the right to demand that the personal data be transmitted directly by a controller, insofar as this is technically feasible and insofar as this does not affect the rights and freedoms of other persons.
To assert the right of data portability, the data subject may at any time contact an employee of Multi-Lite Lichttechnik Handelsgesellschaft mbH.
g) Right to object
Any data subject has the right, as granted by the European guideline and regulatory body, for reasons arising from his or her particular situation, to object at any time to the processing of personal data relating to him or her, as provided for in Article 6 para 1 lit. e or f of the GDPR This also applies to profiling based on these clauses.
Multi-Lite Lichttechnik Handelsgesellschaft mbH shall no longer process personal data in the event of an objection, unless we can prove that there are compelling legitimate reasons for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves the purpose of assertion ,exercise or defence of legal claims.
If Multi-Lite Lichttechnik Handelsgesellschaft mbH processes personal data in order to operate direct mail, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to Multi-Lite Lichttechnik Handelsgesellschaft mbH processing for direct marketing purposes, Multi-Lite Lichttechnik Handelsgesellschaft mbH shall no longer process the personal data for these purposes.
In addition, the data subject has the right, for reasons arising from his/her particular situation, to object against the processing of personal data concerning him/her, for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 of the GDPR, unless such processing is necessary for the fulfilment of a task in the public interest.
In order to exercise the right to object, the data subject can directly contact any employee of Multi-Lite Lichttechnik Handelsgesellschaft mbH or another employee. The data subject is also free to exercise his or her right to object to the use of the data for services provided by information societies, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.
h) Automated individual decision-making including profiling
Any data subject has the right, as granted by the European guideline and regulatory body, not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on him or her, or substantially impairs him or her in a similar manner where the decision, (1) is not necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is admissible under the laws of the Union or of the Member States to which the controller is subject and where such laws contain appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject, or (3) is made with the express consent of the data subject.
If the decision is (1) necessary for the conclusion or performance of a contract between the data subject and the controller or (2) is made with the express consent of the data subject, then Multi-Lite Lichttechnik Handelsgesellschaft mbH shall take appropriate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject, including at least the right to obtain the intervention of a person from the controller, to express his/her own position and to challenge the decision.
Should the data subject wish to assert his or her rights with regard to automated decision making, then he or she may at any time contact an employee of the controller.
i) Right to revoke consent under data protection law
Any data subject has the right, as granted by the European guideline and regulatory body, to revoke consent to the processing of personal data at any time.
Should the data subject wish to assert his or her right to right to revoke their consent, then he or she may at any time contact an employee of the controller.
Where the processing of personal data is based on Article 6 I lit. f of the GDPR, our legitimate interest is to carry out our business in favour of the well being of all our employees and the shareholders.
As a responsible company, we do not use automatic decision making or profiling.