I. Who is responsible for the processing and who can I contact?

The controller for the processing of your personal data (hereinafter: data) is

ALR&JO LTD

3 Carlton Court Gresham Road

Staines TW18 2BL 

You can find further contact details for the controller in the imprint.

If you have any questions, complaints or suggestions regarding data protection or if you want to obtain access to your personal data, please send an email to admin@lightingforyourhome.uk or a letter to the above address with the addition “Data Protection”.

II. Which data is processed?

1. Orders

We use data which you provide us with in the course of the order process (e.g. name, addresses, email addresses, bank details) to fulfil contracts or execute precontractual measures. We may also process the data you provide in order to inform you of other interesting products from our portfolio.

Why is this data processed?

Order processing: We process this data for purposes relating to accepting orders, shipping, billing, payment processing, customer service, debt collection and, where applicable, executing or defending against legal claims arising from the supply relationship. The legal basis is Article 6 (1)(b) GDPR. External service providers (call centre agencies) support us with order processing. These process your data exclusively according to our instructions and not for their own purposes. Should you fail to pay bills despite repeated reminders, we will, if necessary, transmit data to debt collection agencies for the purpose of fiduciary collection; the legal basis is also Article 6 (1)(f) GDPR.

Shipping of ordered goods: We cooperate with various transport companies in shipping the ordered goods. We forward the data required to deliver the ordered goods to these transport companies. If you order goods from third party vendors (additional purchase products), we may forward your data to these vendors for the purpose of direct shipping. Legal basis: Article 6 (1)(b) GDPR.

Credit check: We generally provide you with various payment options. If you choose an insecure payment method (e.g. purchase on account), we have a legitimate interest in protecting ourselves from possible defaults on payment. We may therefore obtain creditworthiness information from infoscore Consumer Data GmbH or Crif Bürgel GmbH before allowing you to use these payment methods. For this purpose, we will transmit the personal data required for a credit assessment and use the information received on the statistical likelihood of a payment default for a balanced decision on the justification, execution or termination of the contractual relationship. The credit check may include probability values (score values) calculated on the basis of scientifically recognised mathematical and statistical procedures, taking address data, among other things, into account. Your interests worthy of protection will be taken into account in accordance with legal requirements. We will allow you to use your desired payment method regardless of your score value. Legal basis: Article 6 (1)(f) GDPR.

Fraud prevention: The personal data you submit may be used in order to verify particularly unusual order processes. We have a legitimate interest in doing this because we wish to avoid payment defaults and to protect customers from misuse of their personal data. We carry out fraud prevention ourselves or with the help of external service providers. The latter process your data exclusively according to our instructions and not for their own purposes. Legal basis: Article 6 (1)(f) GDPR.

Advertising: We process your data for the purposes of sending email advertising, if you provided us with your email address when ordering, and print advertising. In this way, we make sure that you receive catalogues tailored to you in addition to the main catalogue. The legal basis is Article 6 (1)(f) GDPR. We have a legitimate interest in sending our customers direct advertising within the legally allowed scope.

2. Newsletter

You have the option to subscribe to a free newsletter. When you register for our newsletter on our website, the email address you provide will be transmitted to us. You also have the option of receiving a tailored, personalised email newsletter from us. We produce the latter on the basis of the data you provide us for this purpose via the input form.

Why is my data processed?

We process your email address for the purpose of regularly sending our newsletter. After subscribing to the email newsletter, you will receive an email from us with a link to verify your email address. After confirming your email address you may provide more data via a separate input form. We process the data entered here for the purpose of producing a tailored, personalised and sector-specific newsletter.

The legal basis is your consent, which you gave us when subscribing to the newsletter or a personalised newsletter (Article 6 (1)(a) GDPR). The legal basis for sending the newsletter after you purchase goods or services is Article 6 (1)(f) GDPR.

How do I unsubscribe from the newsletter? How long will the data be stored?

If in the future you no longer wish to receive the newsletter, you may withdraw your consent to receive the newsletter at any time via the unsubscribe link in the newsletter or via our unsubcribe form in the online shop under “Newsletter” (for further information on the right of withdrawal see IV.).

The data you provided when subscribing to the newsletter will be promptly deleted after you withdraw your consent or unsubscribe from the newsletter. If you are also a customer of ours, the storage periods given above under II.1 will apply.

Do I have to provide this data?

Our newsletter is a voluntary offer. However, you must provide your email address in order to receive the newsletter. Additional data is required if you wish to receive a tailored, personalised newsletter (e.g. profession/sector for the production of a sector-specific newsletter, surname to address the newsletter to you personally and location for sector-specific campaigns in your geographical area).

3. Online shop

3.1. Website

When you visit this website, we process your IP address, the date and time of your visit, information on the browser you are using, including language setting, and possibly your operating system, the address of the website from which you visited our website (referrer URL) and information on the files you call up. Your browser automatically transmits this data to your Internet service provider and the latter transmits it to us.

Why is this data processed?

We process this data so that you can load our website, for the purposes of analysis and guaranteeing the security of our systems, to optimise our website, and for statistical purposes. This data cannot be assigned to a specific person. The legal basis is Article 6 (1)(f) GDPR. We have a legitimate interest in ensuring that our website is correctly displayed on your screen and that we can determine and rectify the causes of disruptions.

How long will this data be stored? Do I have to provide this data?

This data will be stored in log files for a maximum of thirty days. The provision of this data is not mandatory and is also not required in order to conclude a contract. It would, however, not be possible for technical reasons for you to visit our website without this data being processed.

3.2 Cookies

What are cookies?

Cookies are small files containing an identification number. Cookies are stored on your computer or mobile device when you call up our website. When you call up our website, your computer or mobile end device can be recognised using this identification number. Cookies cannot run programs or transfer viruses to your computer. They are designed to make our services more user-friendly and more effective.

Which type of cookies does lightingforyourhome.uk use?

Cookies help us to design our website in a more user-friendly way. Some functions of our website cannot be offered without the use of cookies. These services require the browser to be recognised again after a page change. These cookies store and transmit, data such as the following:

• Language settings
• Items in the basket
• Login details

We also use cookies which allow us to analyse users’ surfing behaviour. The following data may be transmitted in this way:

• search terms entered
• frequency of page views
• use of website functions
• date and duration of the visit

The data collected from users in this way is pseudonymised by technological means. Therefore, assignment of the data to the requesting user is no longer possible. The data is not stored together with other data.

Why does lightingforyourhome.uk use cookies?

We use cookies in order to make our website more attractive to visitors and to make it possible or easier to use certain functions. We also use cookies in order to statistically measure use of our website. Analytics cookies tell us how the website is used so we can continuously optimise it. The legal basis is Article 6 (1)(f) GDPR. We have a legitimate interest in making our website user-friendly for you and improving the quality and content of our website.

How long will this data be stored?

Some cookies are deleted after the browser session ends (so-called transient cookies, especially session cookies). Other cookies remain on your device and allow us to recognise your computer on your next visit (so-called permanent cookies). You can find out how long they are stored in your web browser’s cookie settings.

Do I have to provide this data? How can I prevent the use of cookies?

The use of cookies is not mandatory. The data subject can prevent our website using cookies at any time by correspondingly adjusting the settings in his or her internet browser and thus vetoing the use of cookies. These settings must be changed for each browser and each end device. In addition, cookies already set can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. We wish, however, to point out that the functionality of our website may be restricted if you deactivate cookies.

3.4. Creating a customer account

You can create a customer account in our online shop for future orders (“register” - order and create account).

Why is this data processed?

Your customer data is processed here to simplify and accelerate future orders. You can log in with your login details in the online shop after registering. If you log in as a registered customer, your login details will be transmitted to us for the purpose of checking your identity. After you log in with your login details, the customer data we have stored on you will be transferred to any new orders. II.1. otherwise applies accordingly.

We may process the data you provide on registration on the basis of Article 6 (1)(b) GDPR, insofar as this is necessary for the fulfilment of a contract or to execute precontractual measures; clause II.1. applies here. We may also process data which you have voluntarily shared with us on registration according to Article 6 (1)(a) GDPR if you have consented to processing.

How long will this data be stored? Do I have to provide this data?

The data provided in the course of registration will be deleted as soon as you delete your customer account. If you have not logged in for more than two years since your last order, your registration will be deleted. We may be entitled to store it for longer according to II.1. The provision of personal data by registering is not legally or contractually required.

3.5. Contact form and email contact

We process data, which you have entered in our contact form or transmitted to us by email, to allow us to process and answer your query.

We may process data which you enter into our contact form according to Article 6 (1)(a) GDPR, provided that you have consented to processing. If you enter sensitive information into the “message” field containing particular categories of data (e.g. origin, political or religious convictions, union membership, health or sexual data), you also consent to the processing of this data. If you transmit data to us by email, the legal basis is Article (6)(1)(f) GDPR. If you are also a customer of ours, the legal basis is Article 6 (1)(b) GDPR.

This data will be deleted twelve months at the latest after we receive your query, unless we are entitled or obliged to store it for longer due to legal regulations in connection with Article 6 (1)(c) GDPR. If you are also a customer of ours, clause II.1. shall apply as regards storage periods.

The provision of this data is not mandatory and is not required in order to conclude a contract. The use of the contact form does require, however, that you provide an email address, because we cannot reply otherwise. If you provide further data, you do so voluntarily.

III. Is my data forwarded to third parties?

Some data may also be forwarded to the following recipients if this is necessary for the fulfilment of the contract (Article 6 (1)(b) GDPR), we are legally obliged to do so (Article 6 (1)(c) GDPR), or this is necessary in order to safeguard our legitimate interests (Article 6 (1)(f) GDPR):

• Banks and payment service providers, for payment processing
• Collection agencies
• Manufacturers, for the purpose of processing warranty claims
• Transport companies, postal service providers
• Prosecution authorities, courts, arbitration boards, auditors, lawyers or tax advisers
• Insurers, for processing any claims

We may use external service providers to process your data. We have chosen and commissioned these carefully, and they are bound by our instructions and are regularly checked. These service providers include call centre agencies, lettershops and printers, data collection and maintenance agencies, IT service providers and service providers for data carrier destruction. The legal basis is Article 28 GDPR where these service providers are order processors.

IV. Which rights do I have in relation to my data?

You may request information from us concerning whether and how we are processing your data under the conditions set down in Article 15 GDPR. You can demand that your data is corrected and perhaps completed according to Article 16 GDPR. You have the right to ask us to delete your data under the conditions set down in Article 17 GDPR or Article 18 GDPR. Article 20 GDPR gives you the right to receive your data transmitted on the basis of consent or a contract, if processing is taking place automatically. If you so wish and it is technically possible, we will transmit this data to a third party. Your rights may be restricted or excluded by law under particular conditions. You have the right to lodge a complaint with the competent data protection authority at any time.