Privacy Policy

1. General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified.

The operator of this site takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

No collection of personal data takes place on this website. Analysis tools, cookies and plug-ins are not used. If you still have any questions, please do not hesitate to contact us.

2. Objection to promotional emails

The use of all published contact data by third parties for advertising purposes is expressly prohibited. We reserve the right to take legal action in the event of unsolicited advertising being sent, e.g. through spam e-mails.

3. Visiting our website

By visiting the website, information about the access (date, time, page accessed) can be stored on the server. This does not represent an evaluation of personal data (e.g. name, address or e-mail address). If personal data is collected, this is only done – if possible – with the prior consent of the user of the website. The data will not be forwarded to third parties without the express consent of the user. We expressly point out that the transmission of data on the Internet (e.g. by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible. No liability can be accepted for damage caused by such security gaps.

Google Web Fonts

Our website uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.

For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offering. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR.

If your browser does not support web fonts, a standard font will be used by your computer.

You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/.

4. Contact

4.1. Contacting via email

If you contact us by e-mail, we only collect personal data (name, e-mail address, text of the message) to the extent that you make it available to us. The processing of the data mentioned serves only to process and answer your contact.

If your contact serves to carry out pre-contractual measures, such as advice on the basis of an interest in buying or preparing an offer, or if your contact concerns a contract that has been previously concluded between you and us, the data will be processed on the basis of Art. 6 Para. 1 lit. b GDPR.

If you contact us on another basis, the data will be processed on the basis of Article 6 (1) (f) GDPR due to our legitimate interest in processing and responding to your contact and request. You have the right to object to the processing of your personal data at any time for reasons relating to your specific situation based on Article 6 Paragraph 1 Letter f GDPR.

We only use your email address to process your request. If you have not agreed to further processing and use, your data will then be deleted in compliance with the statutory retention period.

4.2. Contacting via the contact form

If you use our contact form to contact us, we only collect personal data (name, e-mail address, message text) to the extent that you provide us. The processing of the data mentioned serves only to process and answer your contact.

If your contact serves to carry out pre-contractual measures, such as advice on the basis of an interest in buying or preparing an offer, or if your contact concerns a contract that has been previously concluded between you and us, the data will be processed on the basis of Art. 6 Para. 1 lit. b GDPR.

If you contact us on another basis, the data will be processed on the basis of Article 6 (1) (f) GDPR due to our legitimate interest in processing and responding to your contact and request. You have the right to object to the processing of your personal data at any time for reasons relating to your specific situation based on Article 6 Paragraph 1 Letter f GDPR.

We only use your e-mail address to process your request. If you have not agreed to further processing and use, your data will then be deleted in compliance with the statutory retention period.

5. Cookies

“We use so-called “cookies” on our websites.

Cookies are small data packets and do not cause any harm to your device. They are either temporarily stored on your device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted after your visit ends. Permanent cookies remain stored on your device until you delete them yourself or automatic deletion occurs through your web browser. Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies allow the integration of specific services from third-party companies within websites (e.g., cookies for processing payment services).

Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or video display). Other cookies may be used to analyze user behavior or for advertising purposes. Cookies that are necessary for carrying out the electronic communication process, providing certain functions you request (e.g., for the shopping cart function), or optimizing the website (e.g., cookies for measuring web audience) are stored based on Art. 6(1)(f) GDPR, unless another legal basis is specified.

We have a legitimate interest in storing necessary cookies for the technically flawless and optimized provision of our services. If consent has been requested for the storage of cookies and similar recognition technologies, the processing is based solely on this consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG); the consent can be revoked at any time. You can configure your browser to inform you about the setting of cookies and allow cookies only in individual cases, accept cookies for certain cases, or generally exclude them, as well as activate the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website. You can find information about which cookies and services are used on this website in our privacy policy.

Consent with Borlabs Cookie
For our website, we use the consent technology from Borlabs Cookie to obtain your consent to store certain cookies in your browser or to use certain technologies and to document this in compliance with data protection regulations. The provider of this technology is Borlabs GmbH, RĂĽbenkamp 32, 22305 Hamburg (hereinafter “Borlabs”). When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data is not passed on to the provider of Borlabs Cookie. The data collected will be stored until you request us to delete it, or until the Borlabs cookie is deleted or the purpose for data storage no longer applies. Mandatory legal retention periods remain unaffected. Details about the data processing of Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/. The use of Borlabs Cookie Consent Technology is to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.
 

6. Web Analysis and Advertising Programs

Google Tag Manager 
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, store cookies, or conduct independent analyses. It is solely used for the management and deployment of the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

The use of Google Tag Manager is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in a fast and uncomplicated integration and management of various tools on their website. If appropriate consent has been obtained, the processing is based solely on Art. 6(1)(a) GDPR and § 25(1) TTDSG, to the extent that consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined by TTDSG. Consent can be revoked at any time.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards in data processing in the USA. Each company certified under the DPF commits to adhering to these data protection standards. For further information, please refer to the following link from the provider: https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads allows us to display advertisements in the Google search engine or on third-party websites when the user enters specific search terms on Google (keyword targeting). Targeted advertisements can also be displayed based on user data available at Google (e.g., location data and interests). As website operators, we can quantify this data by analyzing, for example, which search terms led to the display of our advertisements and how many advertisements resulted in corresponding clicks.

The use of this service is based on your consent under Art. 6(1)(a) GDPR and § 25(1) TTDSG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards in data processing in the USA. Each company certified under the DPF commits to adhering to these data protection standards. For further information, please refer to the following link from the provider: https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt000000001L5AAI&status=Active


Google Conversion Tracking
We use Google Conversion Tracking on our website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Conversion Tracking allows Google and us to determine if the user has taken certain actions. For example, we can evaluate how often specific buttons on our website were clicked and which products were viewed or purchased most frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information that allows us to personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.

The use of this service is based on your consent under Art. 6(1)(a) GDPR and § 25(1) TTDSG. Consent can be revoked at any time.

For more information about Google Conversion Tracking, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=en.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards in data processing in the USA. Each company certified under the DPF commits to adhering to these data protection standards. For further information, please refer to the following link from the provider: https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Analytics 

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. This data is assigned to the respective end device of the user. An assignment to a user-ID does not take place. 

Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis. 

Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored. 

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: 

https://privacy.google.com/businesses/controllerterms/mccs/. 

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt000000001L5AAI&status=Active

Browser plug-in 
You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.


Contract data processing

We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.
 

7. Plugins

In some cases we use plug-ins. These plug-ins can be offered by different providers.

Use of YouTube by Google Ireland Limited

We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. You can find more information about YouTube on the YouTube website at https://www.youtube.com/t/impressum. You can find more information about Google Ireland Limited on the Google website at https://www.google.de/contact/impressum.html.

The function displays videos stored on YouTube in an iFrame on the website. The option “extended data protection mode” is generally always activated by us. As a result, YouTube does not store any information about visitors to the website before you watch a video. Only when you watch a video is information about it sent to YouTube and stored there. Your IP address can be used to display the content in your browser. Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transmission takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.

The processing of your personal data takes place on the basis of Article 6 Paragraph 1 Letter f GDPR from our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation.

You can find more information about the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy in YouTube’s data protection information at https://www.youtube.com/t/privacy or alternatively from Google at https://policies.google.com/privacy.

8. Rights of data subjects and duration of storage of personal data

In the following we disclose to you the rights of data subjects and the duration of the storage of personal data.

8.1. Duration of storage of personal data relevant to the processing of an order or the warranty

In the case of complete contract processing, the data will be stored for the duration of the warranty period. The data will then be stored, taking into account legal retention periods and in particular commercial and tax law retention periods, and will be deleted once the period has expired, unless you have given your consent to further processing and use.

8.2. Duration of storage of personal data relevant to processing a contact

The data of your contact will be stored after processing and its completion for the duration in accordance with statutory provisions. They will then be deleted, taking into account the statutory deadline, unless you have given your consent to further processing and use.

8.3. Rights of the data subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to correction, to deletion, to restriction of processing, to data portability.

In addition, according to Art. 21 Para. 1 GDPR, you have the right to object to the processing based on Art. 6 Para. 1 f GDPR and to processing for the purpose of direct advertising.

8.4. Right of appeal to the supervisory authority

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that your personal data is not being processed lawfully.

8.5. Right to object

If the personal data processing listed here is based on our legitimate interest in accordance with Article 6 Paragraph 1 lit. f GDPR, you have the right to object to this processing at any time for reasons that arise from your particular situation with effect for the future.

After an objection has been raised, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal

9. Note on the responsible body

The responsible body for data processing on this website is:

Safety Tax Free GmbH

Zeppelinstr. 33, 85748 Garching b. Munich

CEO: Chengyuan Zhai

HRB 225103, District Court of Munich

Email: info@sunlitsolar.de

The responsible body is the natural or legal person who, alone or together with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Scroll to Top