Legal

Privacy policy

Information on the processing of personal data pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR).

Translation for convenience. The legally binding version is the German privacy policy. In case of discrepancies, the German wording prevails.

1 Controller

Controller: JRC Service UG (haftungsbeschränkt) — COLIGHT&SOUND
Waldstraße 13a, 13403 Berlin
Represented by: Managing Director Jörg Reschke
E-mail: info@colightsound.de
Telephone: +49 170 6666988

No data protection officer has been appointed, as the statutory requirements for doing so are not met. For any questions regarding data protection you can reach us using the contact details above.

2 Principles and legal bases

We process personal data only to the extent necessary to provide a functional website and our services. Processing takes place on the basis of Article 6 (1) (b) GDPR (performance of a contract and pre-contractual measures), Article 6 (1) (f) GDPR (legitimate interests) and, where applicable, Article 6 (1) (a) GDPR (consent).

This website uses no advertising services and does not carry out automated decision-making including profiling. Audience measurement is described in section 4, “Audience measurement with Google Analytics”.

3 Hosting and server log files

This website is hosted by an external service provider that processes data exclusively on our behalf and in accordance with our instructions. A data processing agreement pursuant to Article 28 GDPR is in place with the provider. We are happy to name the provider on request.

When you access the website, the provider's web server automatically records technical information in what are known as server log files: IP address, date and time of access, the page retrieved, the referring page, browser type and version, operating system, and the amount of data transferred.

This processing is carried out on the basis of Article 6 (1) (f) GDPR. Our legitimate interest lies in the technically secure and stable operation of the website and in the detection and analysis of faults and attacks. Server log files are deleted after 30 days at the latest.

4 Local storage in your browser

This website only sets cookies if you have consented to audience measurement with Google Analytics (see below). Independently of that, the following items are stored in your browser's local storage:

Language selection – so that the page appears in your chosen language on your next visit.
Cookie choice – so that your decision (accepted or declined) is respected on your next visit.
Saved plans – if you save a configuration in the “Save plan” area, the details you entered (equipment list, rack layout, radio channels, network specifications) are stored under a name you choose. No transmission to us takes place at that point; it happens only when you send a request. You can delete saved plans at any time using the button in that area.

These entries are strictly necessary for the service you have expressly requested. Storage is therefore exempt from consent pursuant to § 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). These entries contain no personal identifiers, are not transmitted to us or to third parties and remain exclusively on your device. You can delete them at any time via your browser settings.

The cart is held exclusively in your browser's working memory and is discarded when you close the page.

Audience measurement with Google Analytics

For audience measurement we use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics is only loaded after you have clicked “Accept” in the cookie notice. Without consent no contact with Google takes place. After consent the cookies _ga and _ga_X1418MTXCH are set, which allow your visit to be recognised. Google Signals, which would link visit data to Google accounts, is disabled. Advertising features and personalised advertising are disabled as well.

The following is transmitted: the page visited and its title, the time, events such as scrolling and clicks, screen resolution, browser, operating system and language setting, and a truncated IP address from which Google derives an approximate region. The IP address is not stored.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw your consent at any time: use the “Cookie notice” link in the footer to make your choice again and decline.

Transfer of data to the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework.

Data retention in Google Analytics is two months for event data and fourteen months for user data.

5 External fonts

To display fonts consistently we use the Bunny Fonts service. The provider is BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia.

When you access the website, your browser loads the required font files from the provider's servers. Your IP address is transmitted in the process. According to the provider, data is processed exclusively within the European Union, no personal data is logged and no cookies are set. No transfer to a third country takes place.

The legal basis is Article 6 (1) (f) GDPR. Our legitimate interest lies in a consistent and technically reliable presentation of our website. As no information is stored on or read from your device, consent pursuant to § 25 TDDDG is not required.

Further information is available at bunny.net/privacy.

6 Inquiries via cart and form

Using the cart on this website you can send us a non-binding rental inquiry. In doing so we process the data you enter: name, e-mail address and, optionally, preferred dates and location, together with the equipment list you have compiled including the selected tariff.

The legal basis is Article 6 (1) (b) GDPR, as processing takes place for the purpose of pre-contractual measures at your request. Providing a name and e-mail address is required in order to answer your inquiry; all other details are optional.

For the technical transmission of the form we use the Formspree service provided by Formspree, Inc., USA. The provider processes the data you transmit exclusively on our behalf and forwards it to our mailbox. A data processing agreement pursuant to Article 28 GDPR is in place with the provider. The transfer to the USA is based on the standard contractual clauses adopted by the European Commission pursuant to Article 46 (2) (c) GDPR.

Should the online dispatch route be unavailable, the website instead opens your local e-mail program with a prepared message. In that case no data is transmitted to a third party; dispatch takes place exclusively via your own e-mail provider.

7 Contact by e-mail and telephone

If you contact us by e-mail or telephone, we process your details in order to handle the inquiry. The legal basis is Article 6 (1) (b) GDPR where the inquiry relates to a contract, and otherwise Article 6 (1) (f) GDPR based on our legitimate interest in answering inquiries addressed to us.

8 Contract processing

If a rental contract is concluded, we process the data required for its performance: contact and billing details, delivery addresses, rental periods and the equipment provided. The legal basis is Article 6 (1) (b) GDPR and, with regard to statutory retention obligations, Article 6 (1) (c) GDPR.

10 Recipients and third-country transfers

Your data is transferred to third parties only where this is necessary for the performance of the contract, where we are legally obliged to do so, or on the basis of your express consent. Recipients may in particular be our hosting provider, the provider of the form service, transport service providers and tax advisers.

A transfer to third countries takes place only in the case described in section 6 and is safeguarded by standard contractual clauses.

11 Storage periods

We store personal data only for as long as is necessary for the respective purpose. Inquiries that do not lead to a contract are deleted after twelve months at the latest. For contract data, the statutory retention periods under commercial and tax law apply, generally six or ten years. Server log files are deleted after 30 days at the latest.

12 Your rights

You have the following rights in relation to the personal data concerning you:

Right of access pursuant to Article 15 GDPR
Right to rectification pursuant to Article 16 GDPR
Right to erasure pursuant to Article 17 GDPR
Right to restriction of processing pursuant to Article 18 GDPR
Right to data portability pursuant to Article 20 GDPR
Right to withdraw consent pursuant to Article 7 (3) GDPR, with effect for the future

Right to object

Where we process data on the basis of Article 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing. We will then no longer process the data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms.

An informal message to info@colightsound.de is sufficient to exercise your rights.

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement. The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin

13 Security and changes

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the browser address bar starting with “https://”. When encryption is active, the data you transmit to us cannot be read by third parties.

We adapt this privacy policy where changes to our services or to the legal situation make this necessary. The version available at the time of your visit applies.

Last updated: August 2026