Skip to Content
EN DE
0

Privacy Notice

We are pleased about your interest in our shop. Here we inform you which personal data we process, for what purpose and on what legal basis.

1. Controller

Halova GmbH
Gustav-Wagner-Straße 12
72760 Reutlingen
Email: info@halova.de
Managing directors: Marius Wagner, Moritz Weber

We have not appointed a data protection officer, as there is no legal obligation to do so. If you have questions about data protection, please contact info@halova.de.

2. Website access and server logs

When you access our website, our server automatically processes data transmitted by your browser: IP address, date and time, page accessed, amount of data transferred, referrer URL, browser and operating system. This data is technically necessary to deliver the website and to ensure its security.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and stable operation of the website. The logs are deleted after 15 days at the latest, unless they are needed to investigate a security incident.

Our website and our shop system (Odoo) are operated on a server at netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. A data processing agreement pursuant to Art. 28 GDPR exists with the provider.

3. Cookies and visitor statistics

We use cookies that are technically necessary for the operation of the shop:

  • session_id – keeps your session and your cart, lifetime 7 days
  • frontend_lang – stores your language selection, lifetime 1 year
  • tz – stores your time zone, for the duration of the session only
  • a cookie that stores your choice in the cookie notice

The legal basis is § 25(2) no. 2 TDDDG and Art. 6(1)(b) and (f) GDPR.

Visitor statistics of the shop system: Our shop system Odoo records which pages and products a visitor views, together with time, country and language. To recognise a visit, a pseudonymous identifier is used that is formed from the IP address, browser information and session; no separate cookie is set for this, and the IP address itself is not stored in the statistics. The data is stored exclusively on our own server and is not passed on to third parties. We use it to see which products are in demand and to be able to process enquiries and orders better. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in designing our offer according to demand. The data is automatically deleted after 60 days without a further visit; if a visit is linked to your customer account, the data is kept for as long as the account exists. You can object to this processing at any time.

We do not use any external analytics or advertising services (such as Google Analytics or Facebook Pixel).

4. Orders

When you order from us, we process the data you provide during the ordering process: name, address, email address, phone number and company if applicable, the goods ordered as well as payment and shipping information. We need this data to fulfil the purchase contract: processing the order, shipping the goods, handling payment and informing you about the status of your order.

The legal basis is Art. 6(1)(b) GDPR. Due to commercial and tax retention obligations, we store order and invoice data for up to ten years (Art. 6(1)(c) GDPR in conjunction with § 147 AO and § 257 HGB).

5. Customer account

You can voluntarily create a customer account. There we store your master data and your orders so that you can view them and complete future orders more quickly. The legal basis is Art. 6(1)(b) GDPR. You can have your account deleted at any time; data that must be retained by law will then be blocked and deleted after the retention periods expire.

6. Payment

PayPal: If you pay with PayPal, we pass the data required for payment processing (in particular name, address, email address, order amount) on to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. PayPal may carry out a credit check. The legal basis is Art. 6(1)(b) GDPR. Further information can be found in PayPal's privacy policy: https://www.paypal.com/de/legalhub/privacy-full

Prepayment by bank transfer: Your payment is processed via our house bank. We process the details from the transfer (name, IBAN, reference, amount).

7. Shipping

For delivery, we pass your name and delivery address on to the shipping company commissioned, DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn. We only pass on your email address or phone number if you have expressly agreed to this in the ordering process, so that the shipping provider can inform you about the delivery (Art. 6(1)(a) GDPR). You can withdraw this consent at any time.

8. Contact by email

If you contact us by email, we process your details to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry is related to a contract, otherwise Art. 6(1)(f) GDPR. We delete the data as soon as the enquiry has been dealt with and no retention obligations exist.

9. Notification list (LucidLight Controller)

If you sign up for the notification list on the LucidLight Controller page, we process your email address and the time of sign-up in order to inform you once by email when the product becomes available. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future, for example by an email to info@lucid-technology.de. After sign-up we send you a confirmation by email.

The data is stored in our customer management system (Odoo). We delete it once we have sent the launch notification or when you withdraw your consent, whichever comes first.

10. Fonts and web app demo

The fonts used on our website are loaded from our own server; no connection to Google servers is established.

The demo of the LucidLight web app runs entirely in your browser. Settings you make there are stored only locally in your browser and are not transmitted to us.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent given, with effect for the future (Art. 7(3)).

Right to object: Insofar as we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart.

12. Data security

Data transmitted between your browser and our server is encrypted via HTTPS.

As of: September 2026