We appreciate your interest in our company. The management of Runlighton treats data protection with utmost importance. Using our website does not require you to disclose personal data. However, accessing specific services may involve processing your personal data. Where such processing is required and lacks another legal basis, we typically seek your consent.
Personal data (e.g., names, addresses, email addresses, telephone numbers) is processed in compliance with the General Data Protection Regulation (GDPR) and applicable national data protection statutes. This policy details the types of personal data we collect, its purposes, and your rights regarding this data.
As the data controller, Runlighton has established technical and organizational safeguards for personal data processed via this website. Note that internet-based data transmission may have security gaps, so absolute protection cannot be guaranteed. You may choose to transmit personal data by alternative means (e.g., by telephone).
This policy uses terms as defined in the GDPR. We aim for clarity and comprehensibility for the public, customers, and partners. Key terms are outlined below:
A. Personal data
Any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly (e.g., by name, identification number, location data, online identifier, or physical, physiological, genetic, mental, economic, cultural, or social identity).
B. Data subject
An identified or identifiable natural person whose personal data is processed by the controller.
C. Processing
Any operation performed on personal data, automated or not, such as collection, recording, organisation, storage, adaptation, retrieval, consultation, use, disclosure, alignment, combination, restriction, erasure, or destruction.
D. Restriction of processing
The marking of stored personal data to limit its future processing.
E. Profiling
Any form of automated processing of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location, or movements.
F. Pseudonymisation
The processing of personal data in such a manner that the data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures.
G. Controller
The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means are determined by Union or Member State law, the controller may be designated by that law.
H. Processor
A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
I. Recipient
A natural or legal person, public authority, agency, or another body to which personal data are disclosed. Public authorities receiving data in the framework of a particular inquiry are not considered recipients.
J. Third party
A natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons authorised to process data under the direct authority of the controller or processor.
K. Consent
Any freely given, specific, informed, and unambiguous indication of the data subject's wishes, by a statement or clear affirmative action, signifying agreement to processing.