Privacy Policy

Last updated: March 2026 · lemlux.eu

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection legislation is:

Email: [email protected]
Web: lemlux.eu

For all data protection enquiries, please contact us directly at the address above.

2. Principles of Data Processing

LEMLUX processes personal data only to the extent necessary to provide a functional website and to deliver our content and services. As a rule, personal data is processed only after the user’s consent has been obtained. Exceptions apply where prior consent is not practically obtainable and processing is permitted by law.

As a provider of LED lighting solutions for B2B customers and wholesale partners, we primarily process data relating to business customers, procurement contacts, and distribution partners.

3. Data We Collect

3.1 When You Visit Our Website

Each time our website is accessed, our system automatically collects data and information from the accessing device:

• Log data (IP address, date, time, pages visited) — for technical operation and security
• Device data (browser, operating system, screen resolution) — for display optimisation
• Referrer URL (previously visited website, if transmitted) — for traffic source analysis

3.2 When You Contact Us

If you contact us via the contact form or by email, the data you submit (name, company, email address, message) will be stored for the purpose of handling your enquiry and any follow-up correspondence. We will not share this information with third parties without your consent.

3.3 In the Context of Business Relationships

In connection with the initiation and fulfilment of B2B transactions, we process master data, contact data, and transactional data of contact persons at our business customers and partners (name, job title, company address, telephone, email, order data).

4. Legal Bases

• Contract initiation and performance → Art. 6(1)(b) GDPR
• Compliance with legal obligations (commercial law, accounting etc.) → Art. 6(1)(c) GDPR
• Legitimate interests (website operation, security) → Art. 6(1)(f) GDPR
• Marketing cookies and analytics tools → Art. 6(1)(a) GDPR (consent)

5. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the United States. We use Google Analytics with IP anonymisation (IP masking) activated, so that your IP address is truncated by Google within member states of the European Union before transmission.

Data is transferred to the United States. Google LLC is certified under the EU–U.S. Data Privacy Framework. Further information: https://policies.google.com/privacy

Opt-Out: You can prevent the storage of cookies by adjusting your browser settings. You can also prevent data collection by Google Analytics by downloading the browser plug-in at: https://tools.google.com/dlpage/gaoptout

Alternatively, you may withdraw your consent at any time via our cookie consent manager on this website.

6. Meta Pixel

This website uses the Meta Pixel, a conversion tracking tool operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

The Meta Pixel allows us to track the actions of visitors to our website and to measure the effectiveness of our advertising on Meta platforms (Facebook, Instagram). When you visit our website, the pixel collects data about your browser and device, the pages you view, and — where applicable — actions you take (e.g. viewing a product page or submitting a contact form). This data is transmitted to Meta.

Data may be transferred to Meta Platforms, Inc. in the United States. Meta is certified under the EU–U.S. Data Privacy Framework. Further information: https://www.facebook.com/privacy/policy/

Opt-Out: You can object to interest-based advertising in your Facebook account settings under “Ads”, or via our cookie consent manager on this website. If you are not a Facebook user: https://www.youronlinechoices.com

7. Cookies

Our website uses cookies — small text files stored on your device by your browser.

• Strictly necessary cookies: core website functionality and security — no consent required (Art. 6(1)(f) GDPR)
• Analytics cookies: Google Analytics tracking — consent required (Art. 6(1)(a) GDPR)
• Marketing cookies: Meta Pixel, retargeting — consent required (Art. 6(1)(a) GDPR)

You can manage or withdraw your cookie preferences at any time via our cookie consent banner or your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out prior to withdrawal.

8. Disclosure to Third Parties

We do not sell, trade, or otherwise transfer your personal data to outside parties, except in the following circumstances:

• Service providers: We engage carefully selected third-party service providers (e.g. hosting, IT support) who process data on our behalf under data processing agreements pursuant to Art. 28 GDPR.
• Analytics & advertising: Google Ireland Limited and Meta Platforms Ireland Limited as described in sections 5 and 6.
• Legal obligations: Where required to do so by law or to protect our legitimate interests in legal proceedings.

All third-party providers used by us are contractually obligated to treat your information as confidential and to comply with applicable data protection law.

9. Retention Periods

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law:

• Server log files: up to 7 days (security purposes)
• Contact enquiries: until the enquiry is resolved, max. 3 years
• Business / contract data: 10 years (statutory commercial and tax retention obligations)
• Analytics data (Google Analytics): 14 months (default retention in Google Analytics)
• Consent records: 3 years from date of consent

After the applicable retention period has expired, data is routinely deleted unless further storage is required for the establishment, exercise, or defence of legal claims.

10. Your Rights

Under the GDPR, you have the following rights with respect to your personal data:

• Right of access (Art. 15 GDPR): obtain confirmation of whether we process your data and, if so, a copy of it
• Right to rectification (Art. 16 GDPR): have inaccurate or incomplete data corrected
• Right to erasure (Art. 17 GDPR): request deletion of your data (“right to be forgotten”)
• Right to restriction (Art. 18 GDPR): restrict the processing of your data in certain circumstances
• Right to data portability (Art. 20 GDPR): receive your data in a structured, machine-readable format
• Right to object (Art. 21 GDPR): object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent (Art. 7(3) GDPR): withdraw consent at any time without affecting prior processing

To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request. You also have the right to lodge a complaint with a supervisory authority — in Germany, this is the data protection authority of the federal state in which LEMLUX is established.

11. Data Security

We use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. Our security measures are continually improved in line with technological developments.

Data transmission between your browser and our servers is encrypted using Transport Layer Security (TLS/HTTPS). Access to personal data within our organisation is restricted on a need-to-know basis.

12. Changes to This Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or the services we offer. The current version is always available on this page.

Material changes will be communicated through a prominent notice on our website or, where appropriate, directly by email.

This Privacy Policy was last updated in March 2026 and applies to all data processed through lemlux.eu from that date.