Privacy Policy

This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data when using our website www.be-light.app.

1. Controller

BE LIGHT Now GmbH
Brunnenstraße 154
10115 Berlin
Email: we-care@be-light.app

No data protection officer has been appointed as there is no legal obligation to do so.

2. Legal Bases for Data Processing

We process personal data on the following legal bases:

  • Performance of a contract (Art. 6(1)(b) GDPR): Processing to fulfil contracts and pre-contractual inquiries.
  • Legitimate interest (Art. 6(1)(f) GDPR): Processing of log files for security and error analysis.
  • Consent (Art. 6(1)(a) GDPR): Processing via optional cookies and analytics.

3. Hosting & Technical Operation

This website is hosted via Netlify (Netlify, Inc., USA). When the website is accessed, technically necessary data (IP address, browser type, page accessed, date/time) is stored in server log files. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Netlify is certified under the EU-U.S. Data Privacy Framework.

4. Cookies & Cookie Consent

We set one technically necessary cookie (bl_consent) that stores your cookie consent decision. This cookie is required for the operation of the consent banner and is set without prior consent. It contains no personal data.

Further cookies (e.g. analytics cookies) are only set after your explicit consent. You can withdraw your consent at any time by deleting the cookies in your browser and reloading the page.

5. Google Analytics 4 (GA4)

Upon your consent, we use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to statistically analyse user behaviour on this website. IP addresses are anonymised before transmission. Legal basis: Art. 6(1)(a) GDPR (consent).

We have concluded a data processing agreement (DPA) with Google. Information on Google Analytics: policies.google.com/privacy. Opt out: Google Analytics Opt-out.

6. Contact Form

If you use our contact form, we process your details (name, email address, subject, message) to handle your inquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest). Form data is transmitted and stored via Netlify Forms. Netlify is certified under the EU-U.S. Data Privacy Framework. We delete this data once the inquiry has been fully processed.

7. Contact by Email

If you contact us by email, we process your details to handle your inquiry. Legal basis: Art. 6(1)(b) or (f) GDPR. We delete this data once the inquiry has been fully processed and no statutory retention obligations apply.

8. Retention Periods

Personal data is deleted once the purpose no longer applies or statutory retention obligations end:

  • Server log files: 6 months
  • Contact inquiries: upon completion of processing
  • Purchase data: 10 years (statutory tax retention obligation)

9. Data Transfers to Third Parties & Third Countries

Recipients: Netlify (hosting/forms), Google Analytics. Data is processed in the USA. Netlify and Google are participants in the EU-U.S. Data Privacy Framework.

No automated decision-making or profiling takes place.

10. Your Rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)

Please direct requests to: we-care@be-light.app

11. Consent and Withdrawal

Cookie consent can be adjusted in the cookie banner. You can withdraw your consent at any time by deleting the cookies in your browser and reloading the page.

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Berlin:
Der Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin
Email: mailbox@datenschutz-berlin.de
datenschutz-berlin.de

13. Data Security

This website uses SSL/TLS encryption (identifiable by HTTPS in the address bar). Data you transmit to us cannot be read by third parties.

14. Currency of This Policy

This Privacy Policy may be updated to reflect legal requirements or changes to our services. Last updated: April 2026.