Privacy

Privacy policy

Information pursuant to Art. 13 GDPR on the processing of personal data on this website. NOTLUX is a brand of TRiALED GmbH.

1. Controller

2. Accessing the website and hosting

When you access this website, technically necessary connection data is processed, in particular IP address, time, requested address, amount of data transferred, referrer and information about the browser used. Processing serves the secure and stable provision of the website and defence against attacks. The legal basis is Art. 6(1)(f) GDPR.

The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes the data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. The connection to the website is encrypted via TLS (HTTPS).

3. Cookies and browser storage

We do not embed external fonts, maps, videos, social media plugins or advertising services; all content – including the 3D product view – is loaded from our own server. On iPhone and iPad, the "View in your room" function opens Apple AR Quick Look directly on your device; the camera is used locally only and we receive no camera images.

Without your consent we do not set any cookies that are not strictly necessary. Your choice in the cookie notice is stored in the strictly necessary cookie "nlx_consent" (6 months) so the notice does not reappear on every page (Section 25(2) No. 2 TDDDG).

Only if you consent do we additionally set the cookie "nlx_vid" containing a random identifier (13 months). It lets us recognise whether you have visited before and analyse visits across several days. The cookie is read only by us and never shared with third parties. The legal basis is your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time via "Cookie settings" in the footer; the cookie is then deleted.

4. Visitor statistics

To understand which content is helpful, we run our own visitor statistics on our server at IONOS. No data is transferred to third parties and no external services are used. We record the page and language, the referring domain, campaign parameters in the address (utm), device type, screen width, browser and operating system in broad categories, the country (from the browser language or network assignment), time on page and scroll depth, as well as interactions such as clicks on phone numbers, email addresses, datasheets and buttons, opened questions, search terms in the knowledge hub, use of the 3D view and the steps of the request form (without your contact details). IP addresses are not stored: together with a random value that is regenerated and deleted daily, they are turned into a non-reversible identifier so that several page views on the same day are not counted as new visitors. Recognition across several days is only possible with your consent (section 3).

The statistics can only be viewed by authorised persons (password-protected) and are deleted after 13 months. If your browser sends "Global Privacy Control" or "Do Not Track", we do not record your visits. The legal basis for the anonymous statistics is our legitimate interest in a needs-based design of the website under Art. 6(1)(f) GDPR.

5. Contact and quote requests

You can reach us by email, phone and via the request form on this website. When you contact us, we process your details – such as type of request, type of building, number of locations, name, company, email address, phone number, country and message – to handle your request and, where applicable, to prepare or perform a contract. The legal basis is Art. 6(1)(b) GDPR, and Art. 6(1)(f) GDPR for general enquiries. Requests from the form are transmitted encrypted to our server and forwarded to us by email.

Your details are deleted once they are no longer required. Where messages qualify as business letters, we retain them for the statutory period (for example six years under Section 257 of the German Commercial Code).

6. External links

Links to external websites are only accessed when you click on them. From that point on, the respective provider processes data under its own responsibility, possibly also outside the European Union.

7. Recipients and transfers to third countries

Recipients of your data are the responsible employees within TRiALED GmbH and IONOS as hosting provider. We do not transfer data to countries outside the European Union or the European Economic Area.

8. Your rights

Within the statutory framework, you have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Please contact info@notlux.de.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

9. Right to object

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

10. Obligation to provide data and automated decisions

You are not obliged to provide personal data. Without contact details, however, we cannot answer requests. No automated decision-making including profiling pursuant to Art. 22 GDPR takes place.

11. Security and updates

We use appropriate technical and organisational measures. This privacy policy will be updated when functions, service providers or legal requirements change.

Last updated: October 2026. The German version is legally binding.