Imprint & Privacy
Lightning Technologies GmbH
Elisabeth-Selbert-Str. 7
34225 Baunatal
Germany
Authorized to represent: Patrick Haede, Magnus Langanke and David Pflugpeil
Limitation of liability for internal content
The content of our website has been compiled with meticulous care and to the best of our knowledge. However, we cannot assume any liability for the up-to-dateness, completeness or accuracy of any of the pages.
Pursuant to section 7, para. 1 of the TMG (Telemediengesetz – Tele Media Act by German law), we as service providers are liable for our own content on these pages in accordance with general laws. However, pursuant to sections 8 to 10 of the TMG, we as service providers are not under obligation to monitor external information provided or stored on our website. Once we have become aware of a specific infringement of the law, we will immediately remove the content in question. Any liability concerning this matter can only be assumed from the point in time at which the infringement becomes known to us.
Limitation of liability for external links
Our website contains links to the websites of third parties (“external links”). As the content of these websites is not under our control, we cannot assume any liability for such external content. In all cases, the provider of information of the linked websites is liable for the content and accuracy of the information provided. At the point in time when the links were placed, no infringements of the law were recognisable to us. As soon as an infringement of the law becomes known to us, we will immediately remove the link in question.
Copyright
The content and works published on this website are governed by the copyright laws of Germany. Any duplication, processing, distribution or any form of utilisation beyond the scope of copyright law shall require the prior written consent of the author or authors in question.
Privacy Policy
1. Data protection, controller and data privacy officer
We would like to inform you about how we collect personal data when you use our website. Personal data is any data which relates to you personally, such as your name, address, e-mail addresses, and user behavior. The controller responsible for processing your personal data through this website is:
Lightning Technologies GmbH
Elisabeth-Selbert-Str. 7
34225 Baunatal
Germany
You can contact our data privacy officer using the email address "contact@sonic.tech" or our postal address, with the addition of ‘The Data Privacy Officer’.
2. Cookies
To make our website easier to use, we use functional cookies, in which we e.g. store your language settings. Using functional cookies represents a legitimate interest on our part. The legal basis of this is also Art. 6, Par. 1 lit. f GDPR. Cookies are small text files which are copied onto your hard drive and deleted again automatically according to the settings in your browser or after a defined period. Cookies cannot execute any programs or place viruses on your computer. They serve to make the website more user-friendly and effective as a whole.
You can set your browser at any time to permit or exclude the use of cookies, or to ask for your confirmation before using them, and to delete them automatically after the end of each session. If you do not authorize cookies, it may be that not all the features of this website will work properly. Information on tracking cookies can be found in Section 5 below.
3. Information on data transfer to the USA and other non-EU countries
Among other things, we use tools of companies domiciled in the United States or other from a data protection perspective non-secure non-EU countries. If these tools are active, your personal data may potentially be transferred to these non-EU countries and may be processed there. We must point out that in these countries, a data protection level that is comparable to that in the EU cannot be guaranteed. For instance, U.S. enterprises are under a mandate to release personal data to the security agencies and you as the data subject do not have any litigation options to defend yourself in court. Hence, it cannot be ruled out that U.S. agencies (e.g., the Secret Service) may process, analyze, and permanently archive your personal data for surveillance purposes. We have no control over these processing activities.
4. Personal details
(1) If you use our website for information only, without providing us with information, then we will only collect the personal data which your browser sends to our server. If you wish to view our website, we will collect the following information, which is technically necessary to display our website to you and to ensure it remains stable and secure (the legal basis is Art. 6 Par. 1 cl. 1 lit. f GDPR):
- IP address
- Date and time of enquiry
- Time zone difference from Greenwich Mean Time (GMT)
- Content of request (actual page)
- Access status / HTTP status code
- Quantity of data transmitted
- Website from which the request was sent
- Browser
- Operating system and its interface
- Language and version of browser software.
Logfile information is kept for a maximum of seven days for security reasons (such as the investigation of misuse and fraudulent activities), then it is deleted. Any data which needs to be kept for evidence purposes will not be deleted until the particular case has been resolved fully. The legal basis is Art. 6 Par. 1, lit. f GDPR.
(2) Personal data is only collected by us if and to the extent that you provide it to us on your own account, such as when making contact or submitting an application. We will handle this data confidentially and only use it for the original purpose for which it was sent, which is usually for processing and handling your enquiry. Your data is not usually given to third parties, unless we are obliged or legally allowed to, or if you have given us your consent, or if we have been ordered to do so by the authorities. If your enquiry relates to one of our group companies, then we will of course forward it to that company. If you contact us by e-mail, then your e-mail will be stored in our mail system. We may store your enquiry and the data associated with it in our CRM system. The e-mails themselves are not stored with their content encrypted. Our contact form is transport-encrypted using SSL/TLS, which you can recognize by the ‘https’ before the URL. Our mail server also uses conventional transport encryption protocols. The legal basis of this is Art. 6 Par. 1 lit. b GDPR.
5. Data protection in the application process
(1) In the event of an application, we process the data you provide us with voluntarily for the purpose of performing and handling the application process. The only people to receive the data are those involved in the application process in the human resources department, who may forward your application to other group companies if you have applied to them or if we believe that your application may be of interest to one of our group companies. The legal basis of this is Art. 6 Par. 1 lit. b GDPR.
(2) If we turn down your application, then we will not store your data for more than six months after the end of the application process. This storage period relates to the assertion of claims under the AGG (German Equal Treatment Act) and our associated legitimate interest in defending ourselves against such claims. The legal basis of this is Art. 6 Par. 1 lit. f GDPR.
(3) If you give your consent to be included in our applicant pool, then we can agree on a different period with you. You may revoke this consent at any time with future effect. The legal basis for that is Art. 6 Par. 1 lit. a GDPR.
6. Hosting with Amazon Web Services (AWS)
We are hosting our website with AWS. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter referred to as “AWS”).
When you visit our website, your personal data will be processed on AWS servers. This may also result in the transfer of personal data to the parent company of AWS in the United States. The transfer of data to the US is based on the EU’s standard contractual clauses. For details please consult: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/.
For more information, please see the AWS Data Privacy Policy: https://aws.amazon.com/de/privacy/?nc1=f_pr.
AWS is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in a depiction of our website that is as reliable as possible. If your respective consent was obtained, processing will occur exclusively based on Art. 6(1)(a) GDPR. This consent may be revoked at any time.
Execution of a contract data processing agreement
We have concluded a contract processing agreement with AWS. This is a contract mandated by data privacy laws that guarantees that AWS processes the personal data of our website visitors only based on our instructions and in compliance with the GDPR.
7. Vimeo Without Tracking (Do-Not-Track)
This website uses plugins of the Vimeo video portal. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
Whenever you visit one of our pages featuring Vimeo videos, a connection with the servers of Vimeo is established. In conjunction with this, the Vimeo server receives information about which of our sites you have visited. Vimeo also receives your IP address. However, we have set up Vimeo in such a way that Vimeo cannot track your user activities and does not place any cookies.
We use Vimeo to make our online presentation attractive for you. This is a legitimate interest on our part pursuant to Art. 6(1)(f) GDPR. If a respective declaration of consent was requested (e.g. concerning the storage of cookies), processing shall occur exclusively on the basis of Art. 6(1)(a) GDPR; the given consent may be revoked at any time.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission and, according to Vimeo, on “legitimate business interests”. Details can be found here: https://vimeo.com/privacy.
For more information on the handling of user data, please consult Vimeo’s data privacy policy at: https://vimeo.com/privacy
8. Your rights
(1)You have the right to find out whether we are processing your personal data at any time, according to Art. 15 GDPR. If we are, then we have other additional information duties as a result.
(2)You also have the right to have your data corrected pursuant to Art. 16 GDPR, deleted according to Art. 17 GDPR and for its processing to be limited pursuant to Art. 18 GDPR, provided no other legal regulations say otherwise.
(3)Of course, you can at any time revoke your consent to have your data processed according to Art. 6 Par. 1 lit. a or Art. 9, Par. 2 lit. a GDPR without providing reasons. This does not affect the legality of processing done up to that point.
(4)You also have the right to data portability according to Art. 20 GDPR.
(5)You also have, pursuant to Art. 21 GDPR, the right to object to the processing of your data, in particular processing on the basis of Art. 6 Par. 1 lit. e or f GDPR. Should you wish to exercise that right, please tell us the reason why you do not want us to keep processing your personal data the way we are. If your objection is justified, we will assess the case and either stop processing your data, amend the way we do it, or inform you of the compelling reasons we have for continuing to process it, these reasons being deemed worthy of protection.
(6)You also have the right to complain to the responsible regulatory authorities, which can be found here (https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html).
Last revision: January 2024