Data protection
We are delighted that you have visited our website and that you are interested in our company and our products. The protection of your personal data is very important to us. Lighthouse® GmbH (hereinafter "Lighthouse®", "we" or "us") attaches great importance to the security of user data and compliance with data protection regulations.
The technical terms used in this privacy policy are to be understood as legally defined in Art. 4 GDPR.
It is generally possible to use our website without providing any personal data. If you wish to make use of special services of our company via our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we obtain the consent of the data subject.
You can visit our website without actively providing any personal information. However, we automatically store access data (server log files) such as the name of your Internet service provider, the operating system used, the website from which you visit us, the date and duration of the visit or the name of the requested file, as well as the IP address of the computer used for security reasons, e.g. to detect attacks on our websites, for a period of 60 days. This data is evaluated exclusively to improve our offer and does not allow any conclusions to be drawn about your person. This data is not merged with other data sources. The legal basis for the processing of the data is Art. 6 para. 1 lit. f) GDPR. We process and use the data for the following purposes: 1. provision of the Lighthouse® websites, 2. improvement of our websites and 3. prevention and detection of errors/malfunctions and misuse of the websites.
The data processing of this kind is carried out either to fulfill the contract for the use of the Lighthouse® websites or we pursue a legitimate interest in ensuring the functionality and error-free operation of the Lighthouse websites and adapting these websites to the requirements of the users.
In order to make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on our websites. The use of cookies serves our legitimate interest in making your visit to our website as pleasant as possible and is based on Art. 6 para. 1 lit. f) GDPR. Cookies are a standard Internet technology for storing and retrieving login and other usage information for all users of Lighthouse® websites. Cookies are small text files that are stored on your end device. Among other things, they enable us to save user settings so that our websites can be displayed in a format tailored to your device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to recognize your browser on your next visit (so-called persistent cookies).
You can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Furthermore, cookies can be deleted retrospectively in order to remove data that websites have stored on your computer. Deactivating cookies can lead to some restrictions in the functionality of the Lighthouse® websites.
Disable or remove cookies (opt-out)
Web browsers offer options for restricting and deleting cookies. You can find more information on this on the following websites:
Internet Explorer: https://support.microsoft.com/de-de/help/17442
Google Chrome: https://support.google.com/chrome/answer/95647?hl=de
In order to make your visit to our website attractive and to simplify the use of certain functions for you, we also use cookie-based Google programs. The use of these Google programs serves our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR to make your visit to our website clear, uncomplicated and as pleasant as possible for you. Google's data protection information can be found at https://policies.google.com/privacy?hl=de.
Google reCAPTCHA
We use the reCAPTCHA service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter Google). We use this service to ensure adequate data security when submitting forms. This service is used to recognize whether the input is made by a person or by automated machine processing. The following data is used: the IP address of the website visitor, the duration, date and time of the request, the identification data of your browser and operating system type used, the data relating to your Google account (if you are logged in), mouse movements on the reCAPTCHA areas and the tasks for which you have to identify images. This data is transmitted to a Google Inc. server and stored there. The deviating data protection provisions of Google Inc. apply. You can find more information on this here: http://www.google.de/intl/de/privacy
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookies about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
Google Ads Conversion Tracking
We use Google Ads Conversion Tracking on our website, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). If you reach our website via a Google ad, a so-called "conversion cookie" is set. This cookie loses its validity after 30 days and is not used for personal identification. If the user visits certain pages of this website, Google and we can recognize that the user clicked on the ad and was redirected to this page.
With the help of the conversion cookie, we receive statistical evaluations of the effectiveness of our Google ads that refer to our website. Because every click on an ad incurs costs for us, these clicks are recorded via conversion tracking. The evaluation is provided to us in the form of statistics via our tracking tool and serves to analyze the success of our online activities. We find out the total number of users who clicked on our ad and were redirected to a page with a conversion tag. However, we do not receive any information with which users can be personally identified.
The legal basis for the processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR, which we obtain via the consent management tool Usercentrics. Consent is voluntary and can be revoked at any time in the cookie settings.
Data transfer to third countries: It cannot be ruled out that personal data will be transferred to the USA through the use of Google Ads. In these cases, Google relies on the standard contractual clauses of the EU Commission and the adequacy decision for the EU-U.S. Data Privacy Framework. Please note that a residual risk in data protection in third countries cannot be excluded.
For more information on data processing by Google, please refer to the Google privacy policy: https://policies.google.com/privacy
Consent management with Usercentrics
We use the consent management tool "Usercentrics" (provider: Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany) to obtain consent for cookies and similar technologies in accordance with data protection regulations. When you visit our website, you will be shown a corresponding notice. Your selection is documented and can be adjusted at any time.
The legal basis for the use of Usercentrics is Art. 6 para. 1 lit. c GDPR (legal obligation to obtain consent) and Art. 6 para. 1 lit. f GDPR (legitimate interest in a legally compliant design of our website).
Prevent the storage of cookies
You can prevent the storage of cookies by selecting the appropriate settings on your browser software; however, please note that if you do this, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
Google Maps
We use Google Maps to display maps and create directions. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter Google). By using this website, you consent to the collection, processing and use of the automatically collected data and the data entered by you by Google, one of its representatives or third-party providers. You can find full details in the data protection center of google.de: Transparency and choices and privacy policy at https://policies.google.com/privacy?hl=de&gl=de.
Objection to data collection (opt-out)
If you do not want Google to receive data from your browser when you access the pages, you can find the link to the opt-out solution for Google Analytics here: http://tools.google.com/dlpage/gaoptout?hl=de. This plug-in prevents the browser from requesting the Analytics code so that Google does not receive any data when the page is accessed. The plug-in is only available for Microsoft Internet Explorer 11, Google Chrome, Mozilla Firefox, Apple Safari and Opera. According to Google, the browser blocks the Google Analytics script after installation. You can find more information on terms of use and data protection at http://www.google.com/analytics/terms/de.html or at https://policies.google.com/privacy?hl=de. As an alternative to this browser plug-in or for browsers on mobile devices, you can use the following link to the opt-out solution: Link: Deactivate Google Analytics
Retention period
We have used the Google Analytics data retention controls to determine how long data is stored at user and event level before it is automatically deleted from the Analytics servers. For this purpose, we have selected the following storage period: 14 months
IP anonymization
We would like to point out that on this website Google Analytics has been extended by the code "gat.anonymizeIp" to ensure an anonymized collection of IP addresses (so-called IP masking). As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA.
Google Tag Manager
This website uses Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter Google). This service allows website tags to be managed via an interface. The Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it will remain in place for all tracking tags if they are implemented with Google Tag Manager. You can find more details in the data protection center of google.de: Transparency and options as well as data protection regulations at https://policies.google.com/privacy?hl=de&gl=de.
We make offers (e.g. fan pages) available online on various social media platforms that provide information about Lighthouse® and give us the opportunity to get in touch with you. We would like to point out that we have no influence on the processing of your personal data on these platforms and that only the respective operator of the platform has full knowledge of the content of the transmitted data and its use.
As a rule, cookies are stored in your browser when you visit the respective platform. You may be affected by this data collection even if you are not registered on the respective platform. We do not know whether the data is transferred outside the European Economic Area.
The processing of personal data on the platforms by us is based on Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in being able to present Lighthouse® to the outside world in a variety of ways and to use the communication options with our customers as effectively as possible. Consent to data processing in accordance with Art. 6 para. 1 lit. a) GDPR may also be the legal basis if you have given this to the platform operator. You can obtain detailed information about the data processing of the platform operators on the respective objection options, the rights to information and specific information on the respective platforms via the following data protection notices of the respective operators:
LinkedIn
Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Specific information on LinkedIn company pages: When you visit our LinkedIn company page, LinkedIn processes your personal data. This data is transmitted to us anonymously by LinkedIn as part of LinkedIn Analytics. This anonymized data is statistical data of our subscribers.
Instagram
Provider: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Privacy Policy: https://help.instagram.com/155833707900388
Cookie information: https://help.instagram.com/1896641480634370?ref=ig
Specific information about Instagram profiles: When you visit our Instagram company page, Instagram processes your personal data. This data is transmitted to us anonymously by Instagram as part of Instagram Insights. This anonymized data is statistical data about our profile subscribers. In addition, we receive your user name from Instagram if you interact with us or our page, for example by liking or commenting on posts or following our page.
Contact form/enquiries
You have the option of sending us inquiries via the contact form on our website. Your details from the contact form (content of your request, subject of your request and date) including the contact details you provide there (name, surname and email) will be stored by us for the purpose of processing the request and in the event of follow-up questions. The legal basis for the collection and processing of the data is Art. 6 para. 1 lit. a) GDPR. We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.
E-mail contact
If you send us inquiries or information by e-mail, your details (e-mail address, content of your e-mail, subject of your e-mail and date/time) including the contact details you provide there (name, surname, telephone number if applicable, address) will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent. The legal basis for the collection and processing of data is Art. 6 para. 1 lit. a) GDPR. The user is advised that emails can be read or altered during transmission without authorization or detection. Lighthouse® uses software to filter unwanted emails (spam filter). The spam filter can reject e-mails if they have been falsely identified as spam due to certain characteristics. The data you enter will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.
Internal data transfer
We transfer your data internally to the administration and HR department in order to fulfill our contractual or legal obligations. Your data will only be transmitted or disclosed to the extent necessary for this purpose in compliance with the relevant data protection regulations.
Transmission to other recipients
We hereby inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual provisions (e.g. information on the contractual partner). Sometimes it may be necessary for a contract to be concluded for a data subject to provide us with personal data that must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company concludes a contract with them. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. If the processing of your data takes place outside the EEA, this transfer takes place in compliance with all applicable data protection laws and in particular in accordance with Art. 44 f. GDPR takes place. Transfer to a third country or an international organization A transfer to a third country or an international organization does not take place.
As a responsible company, we do not use automated decision-making or profiling.
We generally store your data for as long as this is necessary to provide our services or if this has been provided for by the European legislator or another legislator in laws or regulations to which the controller is subject.
In all other cases, we delete your personal data after the purpose has been fulfilled, with the exception of data that we must continue to store in order to fulfill legal obligations (e.g. we are obliged to retain documents such as contracts and invoices for a certain period of time due to retention periods under tax and commercial law).
Lighthouse® uses technical and organizational security measures to protect your data managed by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.
For security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator, this site uses SSL encryption (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL encryption is activated, the data that you transmit to us cannot be read by third parties. We would like to point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.
Art. 6(1)(a) GDPR serves as the legal basis for processing operations for which we have obtained consent for a specific processing purpose.
If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, with processing operations necessary for the supply of goods or the provision of any other service or consideration, the processing is based on Art. 6(1)(b) GDPR. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of inquiries about our products or services.
If we are subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 (c) GDPR.
If the processing of personal data is necessary in order to protect the vital interests of the data subject or of another natural person, the processing is based on Art. 6 (d) GDPR.
Finally, processing operations may be based on Art. 6 (f) GDPR. Processing operations are based on this legal basis if the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
This online offer is not aimed at minors under the age of 16. Persons who have not yet reached the age of 16 may not transmit any personal data to Lighthouse® without the consent of their legal guardian.
In accordance with Art. 15 GDPR, you have the right to request confirmation as to whether we are processing data concerning you. You can request information about this data as well as the further information listed in Art. 15 para. 1 GDPR and a copy of your data. In accordance with Art. 16 GDPR, you have the right to request the correction or completion of the data concerning you and processed by us. In accordance with Art. 17 GDPR, you have the right to demand the immediate erasure of data concerning you. Alternatively, you can request that we restrict the processing of your data in accordance with Art. 18 GDPR. In accordance with Art. 20 GDPR, you have the right to request the provision of the data you have provided to us and to request that it be transferred to another controller. You also have the right to lodge a complaint with the supervisory authority responsible for you in accordance with Art. 77 GDPR.
Some data processing operations are only possible with your express consent. You have the option of withdrawing consent you have already given at any time. All you need to do is send us an informal email to datenschutz@lighthouse.de. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
On our website you will find links to the websites of other providers. We would like to point out that we have no influence on the content of the linked websites and the compliance with data protection regulations by their providers.
We reserve the right to adapt this data protection notice at any time in the event of changes to our website and in compliance with the applicable data protection regulations so that it complies with the legal requirements.
We use artificial intelligence (AI) in certain areas of our agency work, in particular to support text creation, data analysis and internal processes. In doing so, we take care not to process any personal data or other sensitive information using AI. We therefore do not enter any personal data into AI systems. If the processing of personal data or information worthy of protection by AI is necessary, this is done exclusively in compliance with and in accordance with the legal requirements. In particular, we ensure that the data protection principles pursuant to Art. 5 GDPR are observed. Automated decision-making is also excluded. The final evaluation and approval of results is always carried out by our employees. The results are critically reviewed again to ensure that they also comply with the legal provisions. To ensure the safe and responsible use of AI, our employees are trained in the use of AI and informed about the legal requirements.
External AI services
To improve our services, we occasionally use external AI technologies/systems, which may also be provided by third-party providers. In doing so, we also ensure that only anonymized or pseudonymized data is transmitted and therefore no personal data is transmitted and processed for the providers.
When selecting external AI services, we also ensure that an order processing contract is concluded with them in accordance with the provisions of Art. 28 GDPR and that appropriate technical and organizational measures are taken to protect data. We also obtain contractual assurances that the data provided or entered by us will not be passed on to third parties and will not be used for training purposes or for other purposes of the provider.
Responsible body:
Lighthouse® GmbH
Kemptener Straße 39
88131 Lindau 08382 27730 -11
datenschutz@lighthouse.de
This privacy policy was created by Deutsche Datenschutzkanzlei - Office Bodensee
Stand August 2025.
Data protection notice for applicants
Data protection notice for suppliers