Privacy

Privacy policy

Information pursuant to Art. 13 GDPR on the processing of personal data on this website. NOTLUX is a brand of TRiALED GmbH.

1. Controller

2. Accessing the website and hosting

When you access this website, technically necessary connection data is processed, in particular IP address, time, requested address, amount of data transferred, referrer and information about the browser used. Processing serves the secure and stable provision of the website and defence against attacks. The legal basis is Art. 6(1)(f) GDPR.

The website is provided via the platform of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Workers). Cloudflare processes the connection data mentioned on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR and protects the website against attacks and overload. The data is processed in data centres close to the respective visitor; a transfer to the USA cannot be ruled out (see section 7). The domain is registered with IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, which also provides our email mailboxes. The connection to the website is encrypted via TLS (HTTPS).

3. Cookies and browser storage

We do not embed external fonts, maps, videos, social media plugins or advertising services; all content – including the 3D product view – is loaded via our own domain. On iPhone and iPad, the "View in your room" function opens Apple AR Quick Look directly on your device; the camera is used locally only and we receive no camera images.

Without your consent we do not set any cookies that are not strictly necessary. Your choice in the cookie notice is stored in the strictly necessary cookie "nlx_consent" (6 months) so the notice does not reappear on every page (Section 25(2) No. 2 TDDDG).

Only if you consent do we additionally set the cookie "nlx_vid" containing a random identifier (13 months). It lets us recognise whether you have visited before and analyse visits across several days. The cookie is read only by us and never shared with third parties. The legal basis is your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time via "Cookie settings" in the footer; the cookie is then deleted.

4. Visitor statistics

To understand which content is helpful, we run our own visitor statistics. The data is stored in a database (Cloudflare D1) located in the European Union, which we use under our data processing agreement with Cloudflare (section 2). No data is passed on to third parties for their own purposes and no external analytics or advertising services are used. We record the page and language, the referring domain, campaign parameters in the address (utm), device type, screen width, browser and operating system in broad categories, the country (from the browser language or network assignment), time on page and scroll depth, as well as interactions such as clicks on phone numbers, email addresses, datasheets and buttons, opened questions, search terms in the knowledge hub, use of the 3D view and the steps of the request form (without your contact details). IP addresses are not stored: together with a random value that is regenerated and deleted daily, they are turned into a non-reversible identifier so that several page views on the same day are not counted as new visitors. Recognition across several days is only possible with your consent (section 3).

The statistics can only be viewed by authorised persons (password-protected) and are deleted after 13 months. If your browser sends "Global Privacy Control" or "Do Not Track", we do not record your visits. The legal basis for the anonymous statistics is our legitimate interest in a needs-based design of the website under Art. 6(1)(f) GDPR.

5. Contact and quote requests

You can reach us by email, phone and via the request form on this website. When you contact us, we process your details – such as type of request, type of building, number of locations, name, company, email address, phone number, country, message and, where applicable, photos or documents – to handle your request and, where applicable, to prepare or perform a contract. The legal basis is Art. 6(1)(b) GDPR, and Art. 6(1)(f) GDPR for general enquiries. Requests from the form are transmitted encrypted to a service of our website at Cloudflare and forwarded from there to our mailbox by email; they are not stored there.

You can optionally attach photos or PDF documents to the form, for example of a luminaire, a status LED, a rating plate or an inspection report. Photos are scaled down in your browser before sending; embedded metadata such as location or camera data is removed in the process. The files are forwarded to us by email together with your request and are not stored on the web server. Please make sure that no people are recognisable in the photos. For a call-back request, name, phone number and country are sufficient; the email address is then optional.

So that we can assign requests correctly, the form also transmits the page of this website from which you opened it. Only if you have consented in the cookie notice does your browser additionally remember, for the duration of the session (sessionStorage, deleted when the tab is closed), the first page visited, the domain of the referring website and campaign parameters (utm); these are then also transmitted with the request. The legal basis for this is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR), which you can withdraw at any time via "Cookie settings".

Your details are deleted once they are no longer required. Where messages qualify as business letters, we retain them for the statutory period (for example six years under Section 257 of the German Commercial Code).

6. External links

Links to external websites are only accessed when you click on them. From that point on, the respective provider processes data under its own responsibility, possibly also outside the European Union.

7. Recipients and transfers to third countries

Recipients of your data are the responsible employees within TRiALED GmbH, Cloudflare as processor for providing the website, the request form and the visitor statistics (section 2) and IONOS as provider of the domain and email mailboxes.

Cloudflare, Inc. is based in the USA. For transfers to the USA there is an adequacy decision of the European Commission (EU-US Data Privacy Framework, Art. 45 GDPR), under which Cloudflare is certified; in addition, Cloudflare has included the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR) in its data processing agreement. Beyond this, we do not transfer data to countries outside the European Union or the European Economic Area.

8. Your rights

Within the statutory framework, you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Please contact info@notlux.de.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

9. Right to object

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

10. Obligation to provide data and automated decisions

You are not obliged to provide personal data. Without contact details, however, we cannot answer requests. No automated decision-making including profiling pursuant to Art. 22 GDPR takes place.

11. Security and updates

We use appropriate technical and organisational measures. This privacy policy will be updated when functions, service providers or legal requirements change.

Last updated: October 2026. The German version is legally binding.