Legal
Privacy Policy
Information pursuant to Section 5 DDG:
Lichtfaktor GmbH
Kasparstraße 9-11
50670 Cologne, Germany
Represented by:
Marcel Panne
Contact:
Telephone +49 221 / 177 320 88
E-mail: hello@lichtfaktor.com
Commercial register:
Entry in the commercial register.
Register court: Cologne
Registration number: HRB 72950
VAT ID:
VAT identification number pursuant to Section 27a of the German VAT Act (Umsatzsteuergesetz):
DE 278 755 339
Web design & development:
Design studio Büro Bloock, Cologne
Privacy Policy
1. Controller
The controller responsible for data processing on this website is:
Lichtfaktor GmbH
Kasparstraße 9-11
50670 Cologne, Germany
Represented by: Marcel Panne
Telephone: +49 221 17732088
E-mail: hello@lichtfaktor.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
2. Overview and legal bases
We process personal data only where this is necessary to provide the website, to handle enquiries or because you have given your consent. Personal data is any data with which you could be personally identified.
Depending on the processing, the legal bases are:
- Art. 6(1)(a) GDPR (consent),
- Art. 6(1)(b) GDPR (contract or pre-contractual steps, for example answering your enquiry),
- Art. 6(1)(f) GDPR (legitimate interest, for example a secure and error-free website),
- Section 25(1) TDDDG where we store information on your device or read it from there and you have consented, and Section 25(2) no. 2 TDDDG where this is strictly necessary for a service you have requested.
3. Hosting and server log files
Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. We have concluded with this hosting provider a data processing agreement under Art. 28 GDPR.
When you visit the website, the server automatically records information and stores it in server log files. This includes your IP address, the date and time of access, the page requested, the referrer URL (the page you visited before), browser type and version, operating system and the amount of data transferred.
This processing is necessary to deliver the website, to keep it stable and secure and to prevent abuse. The legal basis is Art. 6(1)(f) GDPR. Log data is not merged with other data and is stored only for as long as these purposes require.
4. Cookies and consent management (Borlabs Cookie)
Our website uses cookies and similar technologies. We set strictly necessary cookies without consent. All other services are loaded only once you have agreed in the cookie banner.
To manage your consent we use the “Borlabs Cookie” plugin from Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany. The plugin runs on our own server, and no data is sent to Borlabs for this purpose. It stores in a cookie and in our database which services you have accepted or declined, the time of your decision and the version of the consent. This lets us prove that you consented and respect your choice on later visits. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR and Section 25(2) no. 2 TDDDG.
We may also store a strictly necessary cookie that remembers the language of the website you have chosen.
You can change or withdraw your choice at any time in the cookie settings on this website. You can also set your browser to notify you when cookies are set, to allow cookies only in individual cases or to block them altogether, and to delete them when you close it. If cookies are disabled, the website may not work fully.
5. Contacting us
Contact form and callback request
If you write to us through the contact form or the callback request, we process the details you enter: your name and e-mail address and, if you provide them, your telephone number, country, request, budget and message. We also record which page of the website the enquiry was sent from.
The form sends your details to us as an e-mail. We do not store them in a separate database on the website. We use them to answer your enquiry and, where applicable, to prepare an offer. The legal basis is Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR (legitimate interest in handling enquiries). By ticking the privacy box you confirm that you have read this policy.
To protect against abuse, the form checks a security token and a hidden field. We also limit the number of submissions per visitor. For this, a check value that cannot be traced back is derived from the IP address and cached for ten minutes. The legal basis is Art. 6(1)(f) GDPR. No third-party service such as reCAPTCHA is used.
Contact by e-mail or telephone
If you contact us by e-mail or telephone, we process your contact details and the content of your enquiry in order to handle it (Art. 6(1)(b) or (f) GDPR).
Job applications
If you send us an application, we process your application documents and contact details to decide on working together (Art. 6(1)(b) GDPR in conjunction with Section 26 of the German Federal Data Protection Act, BDSG). Once the process has ended we delete the documents, after six months at the latest, unless you have agreed to a longer retention period.
Storage period
We delete your enquiry once it has been dealt with and no statutory retention obligations apply. If the enquiry leads to a business relationship, the retention periods under commercial and tax law apply.
6. Google Tag Manager, Google Analytics and Google Ads
On our website we use services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). They are loaded through Google Tag Manager and become active only once you have agreed in the cookie banner. Tag Manager runs in consent mode (Google Consent Mode): your choice for “Statistics” and “Marketing” is passed on to Google, and the services follow it.
Google Tag Manager and Google Analytics (Statistics)
Tag Manager is loaded only once you have agreed to the “Statistics” category. With Google Analytics 4 we measure which pages are viewed and how visitors use the website, for example how often a telephone number or e-mail address is clicked, how far visitors scroll on the contact page and whether the contact form is filled in or submitted. We use this to improve the website and its content.
Google Ads (Marketing)
If you have also agreed to the “Marketing” category, we use Google Ads for two purposes: conversion measurement records whether an enquiry or contact followed a click on one of our ads on Google. With remarketing, Google can show visitors to our website our ads later on other websites and in search. For this, Google stores identifiers (cookies) in your browser. Without your consent to “Marketing”, neither takes place.
When these services are used, your IP address and information about your visit are transmitted to Google. Data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission covers this transfer.
The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw it at any time with effect for the future (see section 4). Without your consent, the services are not loaded.
Further information: https://policies.google.com/privacy.
7. Videos (Vimeo and YouTube)
On some pages we show videos from Vimeo or YouTube. When the page loads, only a preview image from our own server is loaded, and there is no connection to the provider yet. Only once you have agreed to “External media” in the cookie banner and click the play button do we load the provider’s player and the video starts. If you have not agreed, clicking the play button opens the cookie settings.
From that point the provider receives your IP address and the information about which of our pages you visited, and may use cookies or similar technologies. If you are logged in with the provider, it can link the request to your profile. You can prevent this by logging out first. Data may be transferred to the USA in the process.
The legal basis is the consent you give in the cookie banner for “External media” (Art. 6(1)(a) GDPR, Section 25(1) TDDDG and, where data reaches the USA, Art. 49(1)(a) GDPR).
Vimeo
The provider is Vimeo.com, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA. We embed Vimeo with the “Do not track” setting so that Vimeo does not build visitor statistics about you. Vimeo’s privacy policy: https://vimeo.com/privacy.
YouTube
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the extended privacy mode (youtube-nocookie.com), in which YouTube stores information about you only when the video is played. Google’s privacy policy: https://policies.google.com/privacy.
8. Fonts
The fonts on this website are stored on our own server. No connection to font providers such as Google Fonts is made when you visit the site.
9. Your rights
You have the following rights against us regarding your personal data:
- access (Art. 15 GDPR),
- rectification (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- objection to processing (Art. 21 GDPR).
Right to object: Where we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you can object to the processing on grounds relating to your particular situation.
Withdrawal of consent: You can withdraw any consent you have given at any time with effect for the future. The lawfulness of processing up to the withdrawal is not affected.
To exercise your rights, an informal message to the address above or to hello@lichtfaktor.com is enough.
Right to lodge a complaint: You can complain to a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
10. Security and changes
For security reasons this site uses SSL or TLS encryption. You can recognise it by “https://” and the padlock symbol in your browser’s address bar. With encryption active, third parties cannot read the data you send to us.
We will update this privacy policy if the website or the legal requirements change.
Last updated: October 2026