This Privacy and Cookie Statement applies to Lightmakers B.V., and its affiliates (to the extent that they perform – jointly or not – the same processing activities), hereafter “Lightmakers”.
We set great store by the protection of your privacy. We therefore handle your personal data with the utmost care. In this Privacy and Cookie Statement we will inform you about the manner in which we handle your personal data. It applies to the processing of personal data of our customers, suppliers and interested parties, as well as their employees, and of visitors to our websites, including www.light-living.com.
What personal data do we process?
We process your personal data, for instance, in relation to the offering of goods or services. The personal data that we may collect for this purpose include:
(business) contact details, such as email address and phone number
(online) reading and clicking behaviour
When do we process your personal data?
We process your personal data in the following cases:
When processing is necessary for the performance of a contract or prior to entering into a contract. We may process your personal data when it is necessary for the performance of a contract or prior to entering into a contract. Such processing takes place for at least one of the following purposes:
taking and processing orders, including delivery of goods
creating a customer card (in the customer database)
invoicing and possible actions to recover a debt
When processing is necessary for the purposes of our legitimate interests We may process your personal data when the processing is necessary for the purposes of our legitimate interests, for instance:
to attract (new) customers
to handle or resolve disputes
to use the data for marketing purposes, such as sending a new letter and other marketing messages
improving and optimizing our services, including analyzing our marketing messages and use experience of the website
We will always weigh our legitimate interest against your privacy interest in this processing. Processing on this basis takes place only if our legitimate interest overrides yours.
When processing is necessary for compliance with a legal obligation We may process your personal data when it is necessary for compliance with a legal obligation, such as complying with tax laws when processing your order.
We may process your personal data on the basis of your consent. We will ensure that that consent meets the requirements of the GDPR. If the processing is based on consent, you may withdraw that consent at any time. You may do so by contacting us using the contact details at the bottom of this page.
We aim to process your personal data in a lawful and transparent manner. We will not process your personal data in a manner that is incompatible with the purpose for which they were collected. If we intend to process your personal data for any purpose other than that for which they were collected, we will provide you with additional information insofar as necessary.
If you do not provide us with certain data (despite a request to that effect) or if you withdraw your consent, we may not be able to perform an agreement entered into with you or we may not be able to comply with our legal obligations. We will of course inform you in good time in that case.
We do not intend to process special categories of personal data. If this nevertheless occurs, we will process it in accordance with applicable privacy regulations.
To whom do we disclose your personal data?
We may disclose your personal data to third parties. That will always be done in accordance with this Privacy and Cookie Statement and with the applicable laws and regulations. We will ensure that that is done correctly.
We may disclose your data to the following recipients:
a hosting service engaged by us
a cloud service for data storage
a service provider for developing and maintaining our applications and platforms
a supported service provider for sending marketing messages and optimising the website
carriers of our products
public authorities that have the right and authority to do so
external advisors (such as tax and legal advisors)
We have opted to name categories of recipients rather than individual companies, to avoid the need to frequently update this Privacy and Cookie Statement. Please contact us if you wish to receive more information on the specific recipients of your personal data.
How do we handle the transfer of your personal data to parties outside the EEA?
We and our data processors primarily process your personal data on secure servers located within the European Economic Area (“EEA”). However, it is possible that your personal data will be processed outside the EEA. In both cases we and our data processors have provided safeguards in accordance with European and Dutch privacy laws to process your personal data in a lawful manner.
In light of the continuous developments regarding the appropriate safeguards for international transfer of personal data, the safeguards provided by recipients may be subject to changes. We therefore refer to the privacy statements of those recipients for up-to-date information on the safeguards.
The following parties may process data outside the EEA:
Please contact us for further information on our specific safeguards when transferring your personal data outside the EEA.
How long do we store your personal data?
We do not store your personal data any longer than is necessary for the purpose for which they were collected and processed. Our storage periods are based on the following factors:
the scope, nature and sensitivity of the personal data
the potential damage as a result of unauthorised use or unauthorised disclosure of your personal data
the purposes for which we process your personal data
the possibilities of achieving those purposes in another manner
the applicable legal requirements
Data that must be stored for tax reasons are deleted after seven years.
How are your personal data protected?
We take all reasonable organisational and technical security measures to secure your personal data and protect them against loss, improper use and other unlawful processing. These security measures are described in our Baseline Security Document. This document, including the mitigation measures listed in it, is constantly evolving. In any case, we apply the following security measures:
password and access code via an authenticator
access to certain files on a need-to-know basis
splitting of authorisation into read access and user rights
Please contact us for further information on our current security measures.
What are your rights regarding your personal data?
You have the right to request access to your personal data. If you file such a request, we will provide you with a list of all your personal data in our possession, unless that is impossible due to overriding third-party interests.
You may furthermore request us:
to rectify or complete your personal data if you suspect that they contain inaccuracies or have been processed incorrectly
to erasure your personal data if you withdraw your consent, the data is no longer necessary or has been incorrectly processed
to restrict the processing of personal data
to transmit your personal data to another controller
A request may be submitted in writing, by e-mail or by post, using the contact details at the bottom of this page. We may then request you to provide additional information in order to verify your identity. In accordance with the law, we will process the requests within one month after receiving them. We will then inform you whether we will comply with the request or of the reasons, if any, for rejecting it.
What should you do if you have a complaint about the way we handle your personal data?
If you have a complaint or a question about the way we handle your privacy, you may contact us. Please provide us with as much relevant information as possible about your complaint or question.
We will consider your complaints and questions and respond to them within four weeks. We will make every effort to be of service to you. If you are nevertheless dissatisfied with the handling of your complaint, you may contact the supervisory authority (the Dutch Data Protection Authority) and file a complaint there if you wish.
Data are collected by means of cookies. Depending on the type of cookies, they may be personal data. The data (including data that are not personal data) that we may collect include:
duration of your visit
hyperlinks clicked on
location data on the basis of your IP address
connection data, such as your IP address
Purpose of the cookies
Necessary cookies are used to ensure that the website functions properly. In addition to necessary cookies, we also place analytics cookies and marketing cookies to gain insight into surfing behaviour and to improve our services. The analytics/statistics cookies are used to process anonymous data. They therefore cannot be traced to a person and do not affect your privacy. Marketing cookies allow us to see which other websites a visitor has visited. We use that information to show relevant ads. The data collected are not used for any other purpose.
A list of the cookies that are placed on our website is shown below:
Google reCAPTCHA sets a necessary cookie
(_GRECAPTCHA) when executed for the purpose of providing its risk analysis.
The cookie is set so Hotjar can track the beginning
of the user's journey for a total session count. It does
not contain any identifiable information.
The cookie is set so Hotjar can track the beginning
of the user's journey for a total session count. It does not contain any
This cookie is set to let Hotjar know whether that
visitor is included in the data sampling defined by your site's pageview
Session cookie set by cloudsuite. This cookie
remembers the end user so the user can be identified to improve service.
Cookie set by Cloudsuite. This cookie remembers
previous logins en settings
This cookie is associated with sites using Google
Tag Manager to load other scripts and code into a page. Where it is used it
may be regarded as Strictly Necessary as without it, other scripts may not
function correctly. The end of the name is a unique number which is also an
identifier for an associated Google Analytics account.
This cookie name is
associated with Google Universal Analytics. This cookie is used to
distinguish unique users by assigning a randomly generated number as a client
identifier. It is included in each page request in a site and used to
calculate visitor, session and campaign data for the sites analytics reports.
This cookie is set by
Google Analytics. It stores and update a unique value for each page visited
and is used to count and track pageviews.
This is a pattern type
cookie set by Google Analytics, where the pattern element on the name
contains the unique identity number of the account or website it relates to.
It is a variation of the _gat cookie which is used to limit the amount of
data recorded by Google on high traffic volume websites.
Used to check if the user’s browser supports cookies.
This LPV cookie is set to
keep us from tracking multiple page views on a single asset over a 30-minute
session. For example, if a visitor reloads a landing page several times over
a 30-minute period, this cookie keeps each reload from being tracked as a page
Refusing and deleting cookies
When you visit our website, a cookie notice is displayed that allows you
to decide to what extent our cookies are placed on your computer.
You may delete placed cookies via your browser settings. It is also
possible to delete all information previously stored using your browser
settings. The way in which you can do so differs per browser. You can find more
information in your browser’s Help function. The website may not function
optimally if you opt not to accept the cookies on the website.
Our website contains hyperlinks to
third-party websites that may have different terms and conditions for
processing your personal data. We are not liable for the processing of your
personal data through such third-party websites.
How do you
If you have any questions about this Privacy
and Cookie Statement or about the way we handle your privacy, you can reach us
in the following ways:
+31 (0)71 367 22 40
Light & Living
‘s Gravendijckseweg 8
2201 CZ Noordwijk, The Netherlands
Amendments to this Privacy and Cookie
We reserve the right to amend this Privacy and Cookie Statement from
time to time by placing a new version on our website. In the event of
significant changes, we will of course inform you in advance.
This Privacy and Cookie Statement was most
recently updated in March 2023.