Data Protection

Information About Processing of Personal Data

Data protection and information security are important parts of our corporate policy. We process personal data confidentially and only in accordance with applicable data protection law, including the GDPR and the German Federal Data Protection Act.

The exact data processed depends on the services, communication, or business relationship you request from us.

Controller and Data Protection Officer

You can reach the company data protection officer by post at the address above with the note "PERSONAL to the data protection officer Mr. Torsten Schmid" or by email at datenschutz@richter-lt.de.

Sources of Personal Data

We process personal and company-related data that we receive from you during a business relationship or its initiation. Where necessary and legally permitted, we may also use data received from third parties, financial service providers, or publicly accessible sources such as commercial registers, press, media, and comparable databases.

Purposes and Legal Bases

We process personal data under the GDPR for these purposes and legal bases:

• Contract performance and pre-contractual measures under Art. 6(1)(b) GDPR.
• Legitimate interests under Art. 6(1)(f) GDPR, including process optimization, direct customer contact, market and opinion research where permitted, legal claims, IT security, service development, credit-risk checks, and building or system security.
• Consent under Art. 6(1)(a) GDPR, for example where you expressly agree to a specific processing activity. Consent can be withdrawn at any time with future effect.
• Legal obligations under Art. 6(1)(c) GDPR, including tax, accounting, customs, and statutory documentation duties.

Categories of Personal Data

Depending on the context, we may process the following categories of data:

• Contact details such as name, address, telephone number, mobile number, email address, and communication identifiers.
• Project, contract, order, sales, payment, bank, account, and billing data.
• Information from public sources, information databases, or credit bureaus where legally permitted.
• Tax-relevant data, login and authentication data, and log data from IT services we provide.
• Video or image recordings where used for documented business or security purposes.

Use of This Website

When you access this website, technical access data may be processed to deliver the page securely. This can include the requested file, date and time of access, transferred data volume, browser and operating-system information, referrer URL, and IP address.

If you contact us by email or through a form, we process the information you provide to answer your request and, where applicable, to prepare or perform a business relationship.

This static NEXUS Verbindung landing page does not currently load HubSpot, marketing pixels, analytics cookies, or external web fonts. If tracking or third-party form tools are added later, this notice must be updated before publication.

Recipients and Transfers

Within Richter lighting technologies GmbH, only departments that need personal data for contractual, pre-contractual, legal, or legitimate business purposes receive access.

External service providers may be used for IT services, IT security, marketing, market research, payment processing, provision of products and services, or shipping logistics. Where a processor acts on our behalf, it is contractually bound under Art. 28 GDPR.

We may also transmit personal data to public bodies where legally required, such as tax authorities, customs authorities, or authorities involved in sanctions-list checks. Data may be transferred to affiliated Richter companies where necessary for the stated purposes.

If personal data is transferred outside the European Union or European Economic Area, we use appropriate safeguards, such as EU standard contractual clauses, unless an adequacy decision or another lawful transfer mechanism applies.

Storage Duration

We store personal data for the duration of the relevant contractual or business relationship and for as long as statutory retention obligations require. Billing and tax-relevant data may be kept according to commercial and tax retention periods under German law.

If data is no longer needed for contractual or legal purposes, it is deleted unless further processing is necessary to preserve evidence within statutory limitation periods. Data processed on the basis of consent is processed until consent is withdrawn.

Your Rights

You have the following rights regarding your personal data, subject to legal conditions and restrictions:

• Access under Art. 15 GDPR.
• Rectification under Art. 16 GDPR.
• Erasure under Art. 17 GDPR.
• Restriction of processing under Art. 18 GDPR.
• Data portability under Art. 20 GDPR.
• Objection under Art. 21 GDPR.
• Withdrawal of consent at any time with future effect.

To exercise your rights, contact Richter lighting technologies GmbH or the data protection officer using the contact details above.

You also have the right to lodge a complaint with a supervisory authority. The competent authority in Baden-Wuerttemberg is the State Commissioner for Data Protection and Freedom of Information, Lautenschlagerstr. 20, 70173 Stuttgart, Germany; postal address: Postfach 10 29 32, 70025 Stuttgart, Germany; email: poststelle@lfdi.bwl.de.

There is generally no legal obligation to provide personal data. However, data required to perform a contract, respond to a request, or meet a legal obligation may be necessary for us to provide the relevant service. No automated decision-making or profiling takes place.

Status: June 3, 2026.