Privacy Policy

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website (led2work.com). Personal data is any data that can be used to identify you. Detailed information on data protection can be found in the sections below.

Data collection on this website

Who is responsible for data collection? Data processing on this website is carried out by the website operator (see section 2 “Controller”).

How do we collect your data? You actively provide data, e.g. by filling in our contact form or placing an order. Other data is automatically collected by our IT systems when you visit the website (e.g. browser, operating system, time of page access, IP address).

What do we use your data for? To ensure the proper provision of the website, to handle enquiries and orders, and – subject to your consent – to analyse and improve our services.

What rights do you have? You have the right to obtain information, rectification, erasure, restriction and portability of your data at any time. You can also object to processing and lodge a complaint with the competent supervisory authority (see sections 4 and 10).

Controller within the meaning of the GDPR

Data protection officer

We have appointed a data protection officer for our company. You can reach them in writing at the above address with the addition “Data Protection Officer” or via email at datenschutz@led2work.com.

Scope

This privacy policy applies to the website led2work.com and all associated subdomains and sales channels (German, English, French, Italian, Spanish and the US branch).

External hosting at a German provider

This website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany. Personal data collected on this website is stored exclusively on servers located in Germany.

As the server location is within the European Union, no transfer to a third country takes place; processing is carried out directly under the protection of the GDPR and the German Federal Data Protection Act (BDSG).

Legal basis and data processing agreement

The host is engaged to fulfill our contractual and pre-contractual obligations (Art. 6(1)(b) GDPR) and to provide our online services securely, quickly and efficiently through a professional provider (Art. 6(1)(f) GDPR).

We have concluded a data processing agreement (DPA) pursuant to Art. 28 GDPR with Mittwald. The host only processes your data to the extent necessary to fulfill its service obligations and follows our instructions regarding this data.

Data protection

We take the protection of your personal data very seriously. We treat your data confidentially and in accordance with statutory data protection regulations (in particular GDPR, BDSG and TDDDG) and this privacy policy.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the “https://” in your browser's address bar and the lock symbol.

Right to object to data collection (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Art. 6(1)(e) or (f) GDPR. If your data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing.

Withdrawal of consent

Many data processing operations are only possible with your express consent. You may withdraw consent you have given at any time. An informal email notification to datenschutz@led2work.com is sufficient. The legality of processing carried out up to the time of withdrawal remains unaffected.

Right of access, rectification, erasure and restriction

You have the right to obtain information about your stored personal data, its origin and recipients and the purpose of processing free of charge at any time, as well as a right to rectification or erasure of this data (Art. 15, 16, 17 GDPR). You may also request restriction of processing under the conditions of Art. 18 GDPR.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilllment of a contract handed over to you or to a third party in a common, machine-readable format (Art. 20 GDPR).

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement. For us, the competent authority is:

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
Königstraße 10a · 70173 Stuttgart, Germany · Phone: +49 711 615541-0 · Email: poststelle@lfdi.bwl.de · www.baden-wuerttemberg.datenschutz.de

Cookies and local storage

Our website uses cookies and comparable technologies (local storage, session storage). Cookies are small text files stored on your device. We distinguish between:

• Strictly necessary cookies – required for the operation of the website (e.g. basket, login status, language and sales channel selection). Legal basis: § 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. You cannot disable these cookies without impairing the usability of the site.
• Optional cookies for analytics, comfort or marketing – set only with your express consent in accordance with § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. You can withdraw this consent at any time via the cookie banner.

Note: We currently do not use any optional tracking cookies. As soon as we activate analytics or marketing tools (e.g. Google Analytics, Google Ads, SearchHub), you will be informed via the consent banner and asked for your consent.

Server log files

The provider of the website automatically collects and stores information in so-called server log files, which your browser transmits to us automatically. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of server request
• IP address (usually anonymised)

This data is not merged with other data sources. Collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, server log files must be recorded. The storage period is generally no more than 7 days; afterwards the data is deleted or anonymised.

Enquiry by email or phone

If you contact us by email or telephone, your enquiry, including any personal data arising from it (name, enquiry, contact details), will be stored and processed by us for the purpose of handling your request (Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR). We do not share this data without your consent.

Order processing

When you place an order in our online shop, we collect the data required to process the contract: salutation, first and last name, billing and delivery address, email address, telephone number (optional), payment data and the products ordered. Legal basis is Art. 6(1)(b) GDPR (performance of contract).

Customer account

You may create a customer account with us. This is voluntary; without an account, orders are possible as a guest. In the customer account we store your master data, order history and wish lists. You can have your account deleted at any time by contacting us at datenschutz@led2work.com. Statutory retention obligations under commercial and tax law (in particular § 257 HGB, § 147 AO) remain unaffected.

B2B account / business customers

When you create a B2B account via our request form, we also collect company details (company name, address, VAT ID, commercial register number if applicable, industry, annual demand). This data serves the initiation of a contract and, if applicable, a credit/identity check. Legal basis: Art. 6(1)(b) GDPR and – insofar as a credit check is carried out – Art. 6(1)(f) GDPR (legitimate interest in avoiding payment defaults).

Payment processing

To process payments, we cooperate with various payment service providers. When you choose a payment method, the data required for that purpose is forwarded to the respective payment service provider. In that case, the privacy notices of the payment service provider also apply. Currently planned/active providers:

• PayPal – PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Privacy notices: paypal.com/us/webapps/mpp/ua/privacy-full
• Further payment providers will be added as they are activated.

Legal basis: Art. 6(1)(b) GDPR (performance of contract).

Shipping processing

To deliver the ordered goods, we pass the data required for delivery (name, delivery address, and where applicable telephone number and email address for shipment tracking) to the respective logistics service provider. Legal basis: Art. 6(1)(b) GDPR.

Contact form

If you submit enquiries via our contact form, the details from the form including the contact data you provide there (name, email address, telephone number, company, subject, message) will be stored by us for the purpose of processing the enquiry and for any follow-up questions. We do not share this data without your consent.

Processing of this data is based on Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if requested.

Retention period

The data you enter in the contact form remains with us until you request deletion, withdraw your consent to storage, or the purpose for data storage ceases to apply (e.g. after your enquiry has been processed). We generally store your enquiries for a maximum of 24 months. Mandatory statutory provisions – in particular retention periods – remain unaffected.

Current status

On led2work.com, no external analytics, tracking or advertising tools are currently active. As soon as we use such tools, we will inform you here and – where necessary – obtain your consent via the cookie banner.

Planned tools (will be updated when activated)

• Google Search Console – verification and reporting in Google Search Console (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). No cookies are set; aggregated anonymised search query data is processed. Legal basis: Art. 6(1)(f) GDPR.
• Google Ads / Google Conversion Tracking – after activation only with consent in accordance with § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.
• SearchHub – search improvement plugin (provider to be reviewed; data categories will be added here once activated).
• Shopware's own statistics – the statistics functions integrated in the Shopware back end (e.g. order evaluations) use only data already in our database; no transfer to third parties.

Third-country transfer and Schrems II

Should tools be used in future that involve a data transfer to third countries (in particular the USA), we will base such transfers on the European Commission's adequacy decision regarding the EU-U.S. Data Privacy Framework (July 2023). If the provider is not certified, we conclude EU Standard Contractual Clauses (SCC, Art. 46 GDPR) and carry out a Transfer Impact Assessment.

External links

On our website we link to social media profiles (in particular LinkedIn at linkedin.com/company/led2work). These links are pure links, not embedded plugins. No data is transmitted to LinkedIn before you actively click on the link. After clicking, the privacy notices of the respective provider apply.

Maps and directions

The directions sketch on our contact page is a static SVG graphic (own asset, hosted locally). No embedding of Google Maps, OpenStreetMap tiles or comparable services takes place. Only when you actively click a route button (“Open route in Google Maps” / “Apple Maps”) you are redirected to the respective provider; its privacy notices then apply.

Scope and purpose of data collection

If you apply to us on your own initiative or in response to a job advertisement, we process the personal data transmitted to us (name, contact details, CV, references, cover letter and other information where applicable) for the purpose of conducting the application procedure. Legal basis is § 26(1) BDSG in conjunction with Art. 88 GDPR or Art. 6(1)(b) GDPR (initiation of an employment relationship).

Retention period

In the event of rejection, your application documents will be deleted six months after the rejection has been sent, unless longer storage is required due to legal disputes (e.g. limitation period under the German General Equal Treatment Act).

Inclusion in the applicant pool

If we believe that you may be suitable for another position with us at a later date, we will request your express consent to include you in our applicant pool (Art. 6(1)(a) GDPR). You may withdraw your consent at any time by sending an email to personal@led2work.com.

Updates to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services in the privacy policy, e.g. when introducing new tools. The most recent version of the privacy policy applies to your next visit and can be accessed on the website at any time.

Dispute resolution (§ 36 VSBG)

The European Commission provides a platform for online dispute resolution (ODR): ec.europa.eu/consumers/odr. Our email address can be found in section 2 (Controller). We are not willing or obliged to participate in dispute resolution proceedings before a consumer arbitration body.

Status

This privacy policy was last updated on 16 June 2026.