Data protection

Privacy Policy — STEJA lighting Jasinski & Szymendera GbR

Last updated: January 2026

I. Information about us as the data controller

Data controller:
STEJA lighting Jasinski & Szymendera GbR
Bredentiner Weg 4a
18273 Güstrow, Germany
Phone: +49 (0)3843 / 7289199
Email: info@stejalighting.de

Data Protection Officer:

Stefan Jasinski
Email: info@stejalighting.de

II. General information

We take the protection of your personal data very seriously. Personal data (hereinafter “data”) is processed by us only to the extent necessary and for the purpose of providing a secure and functional website, processing business relationships, and protecting legitimate interests.

Where we involve third parties in data processing, we ensure that they also act in compliance with data protection regulations.

III. Rights of data subjects

As a data subject, you have the following rights:

  • Access to the processed data, copies, and information on the processing (Art. 15 GDPR)

  • Rectification of inaccurate or incomplete data (Art. 16 GDPR)

  • Erasure or restriction of processing (Art. 17–18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Objection to the future processing of personal data (Art. 21 GDPR)

  • Lodging a complaint with a supervisory authority (Art. 77 GDPR)

IV. Data processing on our website

1. Server log files

When visiting our website, data such as browser type, operating system, IP address, date and time of access, and visited pages are automatically stored temporarily in order to ensure the security and functionality of the website.
Legal basis: Art. 6(1)(f) GDPR.

2. Cookies

We use cookies for functionality optimization and analysis (e.g., Google Analytics, Tag Manager).
Session cookies are deleted when the browser is closed. The use of non-essential cookies requires your consent.
Legal basis: Art. 6(1)(a) and (f) GDPR.

3. Social media & embedded content

  • Facebook, Instagram, YouTube: analysis, communication, and advertising via our company profiles.
    Legal basis: Art. 6(1)(f) GDPR or, where required, consent pursuant to Art. 6(1)(a) GDPR.

  • Further information is available from Facebook, Instagram, and YouTube.

4. Google services

  • Google Analytics (with anonymized IP, compliant with the Data Privacy Framework)

  • Google Tag Manager

  • Google Fonts

  • Google Maps

  • Google reCAPTCHA

  • Google AdWords

Legal basis: Art. 6(1)(f) GDPR, unless a contract or consent applies.
Users may withdraw consent or disable personalized analytics/advertising options in Google settings.

V. Data processing within B2B business relationships

1. Customer account / registration function

If you register in our B2B shop or create a customer account, the data you provide (e.g., name, address, email address, telephone number, payment details) is stored on the servers of the JTL shop system.

Storage is used solely to provide the customer account, process orders, and communicate with you.
Management and processing of this data is carried out exclusively by us.

2. Credit checks

Where necessary, we check the creditworthiness of customers via credit agencies (e.g., Creditreform).
Legal basis: Art. 6(1)(f) GDPR.

3. Shipping / logistics

For the delivery of goods, we transfer your address data to the commissioned shipping company (e.g., DPD).
Legal basis: Art. 6(1)(b) GDPR.

4. Accounting & payment processing

Our external accounting service processes personal data (e.g., invoice and customer data) exclusively on our instructions as a processor.
Legal basis: Art. 28 GDPR.

5. General contract processing (email, telephone, fax)

Orders, inquiries, or contracts handled outside the B2B shop (e.g., via email or telephone) are also processed by us for the purpose of contract performance. This particularly includes your contact details, billing and delivery address, and payment information.
Legal basis: Art. 6(1)(b) GDPR.

Data is stored only as long as necessary for order processing or to comply with statutory retention obligations.

VI. Note regarding B2B offerings

Our products and services are intended exclusively for business customers.
However, personal data of visitors is also processed when they access the website without registering.

VII. Updates

This Privacy Policy is valid as of January 2026 and is regularly updated to reflect new legal requirements and technical developments.