Introduction
This privacy policy applies to Lupine lighting systems GmbH ("Lupine lighting systems", "we", "us", or "our"). We take the protection of your personal data seriously and comply with applicable data protection laws, in particular the General Data Protection Regulation (Regulation EU 2016/679, "GDPR"), the Federal Data Protection Act (BDSG), and the Telemedia Act (Telecommunications-Telemedia-Data Protection Act – TTDSG).
This privacy policy informs you about the nature, scope and purpose of the collection and use of personal data when you visit our website https://www.lupinelights.com/ ("website").
Person responsible
Lupine lighting systems GmbH
Im Zwiesel 9
92318 Neumarkt
Germany
Email: info@lupine.de
Categories of personal data
We process the following categories of personal data when you use our website:
• IP address and device information
• Contact details (name, email address, postal address, telephone number)
• Order and payment data (e.g. billing address, purchase history)
• Communication content (e.g. emails or contact form entries)
• Consent preferences (e.g. cookie settings)
Purpose and legal basis of processing
We process your data for the following purposes and on the basis of the following legal bases:
• To provide and improve our services and website (Art. 6 (1) (f) GDPR)
• To process orders and fulfill contracts (Art. 6 (1) (b) GDPR)
• To answer inquiries and communications (Art. 6 (1) (a) or (f) GDPR)
• To fulfill legal obligations (Art. 6 (1) (c) GDPR)
• For marketing and analyses with your consent (Art. 6 (1) (a) GDPR in conjunction with Section 25 TTDSG)
Cookies and tracking technologies (TTDSG compliance)
We use cookies and similar technologies in accordance with Section 25 TTDSG.
We differentiate between:
• Technically necessary cookies, e.g. for session management and shopping cart functionality (legal basis: Art. 6 (1) (f) GDPR)
• Cookies that require consent and are used for analysis, marketing and personalization (legal basis: Art. 6 (1) (a) GDPR in conjunction with Section 25 TTDSG)
You can give or withdraw your consent at any time using our cookie consent tool.
Third-party services
Vimeo
We embed videos from Vimeo (Vimeo, Inc., 555 West 18th Street, New York, NY 10011, USA). Vimeo may process IP addresses and use Google Analytics. Privacy Policy: https://vimeo.com/privacy ; Google Privacy Policy: https://www.google.com/policies/privacy ; Google Analytics opt-out: http://tools.google.com/dlpage/gaoptout?hl=de .
YouTube
We embed videos from YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Privacy policy: https://www.google.com/policies/privacy/ ; Opt-out: https://adssettings.google.com/authenticated .
Google Maps
We use Google Maps (Google LLC). IP addresses and location data may be processed with your consent. Privacy Policy: https://www.google.com/policies/privacy/ ; Opt-out: https://adssettings.google.com/authenticated .
Facebook social plug-ins
We use Facebook plug-ins based on our legitimate interest (Art. 6 (1) (f) GDPR). Provider: Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Facebook may receive your IP address or interaction data. We have entered into a data processing agreement and standard contractual clauses (SCCs). Privacy Policy: https://www.facebook.com/about/privacy/ .
Data transfers to third countries
If we transfer personal data to service providers outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, e.g. through EU standard contractual clauses.
Data retention
We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of complying with any legal, contractual or regulatory obligations.
The specific retention periods are as follows:
• Order and transaction data (e.g. invoices, payment documents): Storage for 10 years in accordance with commercial and tax law regulations (§ 147 AO, § 257 HGB).
• Communication data (e.g. emails, contact form entries): Retention for 3 years after completion of the communication or inquiry, unless longer retention is required.
• Account user data: Retained until your account is deleted or requested to be deleted and then for a transition period of 3 months for possible legal disputes.
• Marketing consent and withdrawal records: Retained for 5 years as evidence of compliance with data protection obligations.
• Cookie consent records: Retained for 6 months or as required by applicable regulations.
After the retention period has expired, we will delete or anonymize your data unless further retention is necessary (e.g. for legal claims or tax obligations).
Your rights
You have the following rights under the GDPR:
• Right to information (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7 (3) GDPR)
Please note that these rights may be subject to certain conditions and limitations.
contact
To exercise your rights or ask questions about this privacy policy, you can contact us at the following address:
Lupine Lighting Systems GmbH
Im Zwiesel 9
92318 Neumarkt
Email: info@lupine.de
Right to complain
You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement.
Our responsible supervisory authority is:
Bavarian State Office for Data Protection Supervision
https://www.lda.bayern.de/
Changes to this privacy policy
We reserve the right to change this privacy policy at any time, particularly to reflect changes in the law or changes to our services.
Last updated: September 2025