Privacy Policy

Privacy Policy

Last updated: 30 September 2026

The protection of your personal data is important to us. Below we inform you, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), which data we process when you visit this website and in the course of initiating business, for what purposes and on what legal basis, and which rights you have. Our offer is aimed at business customers (except for remaining stock sold on site at our warehouse sale).

1. Controller

Rolux Leuchten GmbH
Margarete-Steiff-Straße 18, 28844 Weyhe, Germany
Represented by the Managing Director Bin Nie
Phone: +49 421 696791-0 · Fax: +49 421 696791-1
Email: verkauf@rolux-leuchten.com

Please send any data protection enquiries to these contact details.

2. Legal bases

We process personal data only where permitted by law, in particular on the basis of Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests) and, for access to information on your device, on the basis of Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). We delete data as soon as the purpose of storage no longer applies and no retention obligations prevent deletion.

3. Visiting this website and hosting

When you visit the website, technically necessary connection data is processed. This may include your IP address, date and time of the request, the page requested, browser and operating system data and the referrer. The processing serves to provide the website, keep it secure and analyse errors (Art. 6(1)(f) GDPR). Our legitimate interest is the secure and trouble-free operation of the website. Hosting and technical service providers may process this data on our behalf on the basis of a data processing agreement (Art. 28 GDPR). Log data is stored only as long as necessary for operation and security and is then deleted, unless statutory obligations or the investigation of specific security incidents require longer retention. The data is not combined with other data and no profiling takes place.

4. Cookies and similar storage technologies

Technically necessary cookies or similar storage technologies may be used for the website to function (e.g. session and security information). Where they are strictly necessary to provide a service you have expressly requested, no consent is required under Section 25(2) TDDDG. Any related processing of personal data is based on Art. 6(1)(f) GDPR or, where it serves to handle an enquiry, on Art. 6(1)(b) GDPR. The storage period depends on the respective function; session entries usually expire when the browser session ends. You can block or delete cookies in your browser; the functionality of the website may then be limited.

Services that require consent (e.g. web analytics or marketing) are only used with your prior consent, and we will update this policy accordingly.

5. Contacting us and contact form

If you contact us via the contact form, by email or by phone, we process your details and the content of your message in order to handle and answer your enquiry. In the contact form this may include: company, name, street and house number, town, email address, phone number, product of interest, subject and message. By ticking the privacy policy box you confirm that you have taken note of it and that your details may be processed to answer your enquiry. A security check (captcha) is used to protect against automated requests (spam) (Art. 6(1)(f) GDPR).

The legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual enquiries, otherwise Art. 6(1)(f) GDPR based on our interest in handling enquiries. Mandatory fields are marked; without this information we cannot process your enquiry. The data is deleted once the enquiry has been fully dealt with and there are no statutory retention obligations or legitimate reasons for further storage. Data is only passed on where necessary to handle the enquiry or where there is a legal obligation.

6. Customer and business data

Within a business relationship we process master and contact data of contact persons as well as order, delivery, invoice and payment data to perform the contract (Art. 6(1)(b) GDPR) and to comply with legal obligations (Art. 6(1)(c) GDPR). For this we may use service providers, e.g. for shipping and logistics, accounting, tax advice, payment processing and IT operations. Retention periods under German commercial and tax law (Section 257 HGB, Section 147 AO) are currently six years for commercial and business correspondence and eight years for accounting records; the data is deleted thereafter.

7. Job applications

If you apply to us, we process the application documents and information you submit solely to carry out the application process (Art. 6(1)(b) GDPR in conjunction with Art. 88 GDPR and Section 26 of the German Federal Data Protection Act, BDSG). The documents are deleted after the process has been completed, usually no later than six months after completion, unless you have consented to longer storage or there is a statutory retention obligation.

8. Fonts

For a consistent appearance we use the "Roboto" font. It is stored locally on our own web server and loaded from there. No connection to servers of Google or other third parties is established for this purpose, and no personal data is transmitted to third parties.

9. Google Maps

A Google Maps map (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) may be displayed on the "Contact" page. The map is only loaded after you click "Accept and show". Only then is data such as your IP address and usage data transmitted to Google, possibly also to Google LLC in the USA (see section 11). The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw your decision at any time with effect for the future by deleting the website data stored in your browser and not activating the map again.

10. External links

Our website contains links to external services, for example Instagram, Facebook and partner sites. No plugins of these providers are embedded. Only when you follow a link do you leave our website; the respective provider is responsible for any subsequent processing.

11. Recipients and transfers to third countries

Where necessary, recipients of your data are carefully selected processors bound by contract (Art. 28 GDPR) as well as logistics companies, tax advisors and authorities where required by law. Data is not passed on for advertising purposes.

Data is only transferred to countries outside the EU/EEA if there is an adequacy decision of the European Commission, appropriate safeguards exist (in particular standard contractual clauses under Art. 46 GDPR) or you have given your explicit consent (Art. 49(1)(a) GDPR). For the USA, the adequacy decision on the EU-U.S. Data Privacy Framework (Decision (EU) 2023/1795) applies to certified companies; the General Court of the European Union upheld it on 3 September 2025. An appeal against this judgment is pending.

12. Data security

We take appropriate technical and organisational measures in accordance with Art. 32 GDPR. Data transmitted between your browser and our website is encrypted via HTTPS (TLS).

13. Your rights

Subject to the GDPR, you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): You may object at any time, on grounds relating to your particular situation, to the processing of your data based on Art. 6(1)(f) GDPR. Where your data is processed for direct marketing, you may object at any time without giving reasons.

An informal message to the contact details given in section 1 is sufficient to exercise your rights. No solely automated decision-making, including profiling (Art. 22 GDPR), takes place.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the State Commissioner for Data Protection of Lower Saxony (Der Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany, www.lfd.niedersachsen.de.

14. Updates

We adapt this information when the services we use or the legal requirements change. The version published here applies. This English version is a translation for convenience; in case of doubt, the German version prevails.