Legal

Privacy policy

Information on the processing of personal data pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR).

Translation for convenience. The legally binding version is the German privacy policy. In case of discrepancies, the German wording prevails.

1 Controller

Controller: JRC Service UG (haftungsbeschränkt) — COLIGHT&SOUND
Waldstraße 13a, 13403 Berlin
Represented by: Managing Director Jörg Reschke
E-mail: info@colightsound.de
Telephone: +49 170 6666988

No data protection officer has been appointed, as the statutory requirements for doing so are not met. For any questions regarding data protection you can reach us using the contact details above.

2 Principles and legal bases

We process personal data only to the extent necessary to provide a functional website and our services. Processing takes place on the basis of Article 6 (1) (b) GDPR (performance of a contract and pre-contractual measures), Article 6 (1) (f) GDPR (legitimate interests) and, where applicable, Article 6 (1) (a) GDPR (consent).

This website uses no tracking, no analytics services, no advertising services and no profiling. Visitor behaviour is not analysed.

3 Hosting and server log files

This website is hosted by an external service provider that processes data exclusively on our behalf and in accordance with our instructions. A data processing agreement pursuant to Article 28 GDPR is in place with the provider. We are happy to name the provider on request.

When you access the website, the provider's web server automatically records technical information in what are known as server log files: IP address, date and time of access, the page retrieved, the referring page, browser type and version, operating system, and the amount of data transferred.

This processing is carried out on the basis of Article 6 (1) (f) GDPR. Our legitimate interest lies in the technically secure and stable operation of the website and in the detection and analysis of faults and attacks. Server log files are deleted after 30 days at the latest.

4 Local storage in your browser

This website does not use cookies in the technical sense. Two items are stored, however, in your browser's local storage:

Language selection – so that the page appears in your chosen language on your next visit.
Privacy notice – so that the notice does not reappear on your next visit once you have acknowledged it.
Saved plans – if you save a configuration in the “Save plan” area, the details you entered (equipment list, rack layout, radio channels, network specifications) are stored under a name you choose. No transmission to us takes place at that point; it happens only when you send a request. You can delete saved plans at any time using the button in that area.

These entries are strictly necessary for the service you have expressly requested. Storage is therefore exempt from consent pursuant to § 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). These entries contain no personal identifiers, are not transmitted to us or to third parties and remain exclusively on your device. You can delete them at any time via your browser settings.

The shopping cart is held exclusively in your browser's working memory and is discarded when you close the page.

Our own audience measurement

To understand which pages and offerings are used, we record a few technical events without cookies and without any external service: the page requested, the time, clicks on buttons, submitted forms, scroll depth, the selected language and the referring page. To distinguish one visit from another, your browser is given a random identifier held in session storage, which expires when you close the tab. We store no IP address, no name and no device identifier, so we cannot link the data to you as a person.

Evaluation takes place exclusively on our own server within the European Union. The legal basis is Article 6 (1) (f) GDPR; our legitimate interest lies in designing and improving our website in line with actual demand. The data is deleted after twelve months. As the identifier is required only for the current session, consent pursuant to § 25 TDDDG is not required.

5 External fonts

To display fonts consistently we use the Bunny Fonts service. The provider is BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia.

When you access the website, your browser loads the required font files from the provider's servers. Your IP address is transmitted in the process. According to the provider, data is processed exclusively within the European Union, no personal data is logged and no cookies are set. No transfer to a third country takes place.

The legal basis is Article 6 (1) (f) GDPR. Our legitimate interest lies in a consistent and technically reliable presentation of our website. As no information is stored on or read from your device, consent pursuant to § 25 TDDDG is not required.

Further information is available at bunny.net/privacy.

6 Enquiries via cart and form

Using the cart on this website you can send us a non-binding rental enquiry. In doing so we process the data you enter: name, e-mail address and, optionally, preferred dates and location, together with the equipment list you have compiled including the selected tariff.

The legal basis is Article 6 (1) (b) GDPR, as processing takes place for the purpose of pre-contractual measures at your request. Providing a name and e-mail address is required in order to answer your enquiry; all other details are optional.

For the technical transmission of the form we use the Formspree service provided by Formspree, Inc., USA. The provider processes the data you transmit exclusively on our behalf and forwards it to our mailbox. A data processing agreement pursuant to Article 28 GDPR is in place with the provider. The transfer to the USA is based on the standard contractual clauses adopted by the European Commission pursuant to Article 46 (2) (c) GDPR.

Should the online dispatch route be unavailable, the website instead opens your local e-mail program with a prepared message. In that case no data is transmitted to a third party; dispatch takes place exclusively via your own e-mail provider.

7 Contact by e-mail and telephone

If you contact us by e-mail or telephone, we process your details in order to handle the enquiry. The legal basis is Article 6 (1) (b) GDPR where the enquiry relates to a contract, and otherwise Article 6 (1) (f) GDPR based on our legitimate interest in answering enquiries addressed to us.

8 Contract processing

If a rental contract is concluded, we process the data required for its performance: contact and billing details, delivery addresses, rental periods and the equipment provided. The legal basis is Article 6 (1) (b) GDPR and, with regard to statutory retention obligations, Article 6 (1) (c) GDPR.

10 Recipients and third-country transfers

Your data is transferred to third parties only where this is necessary for the performance of the contract, where we are legally obliged to do so, or on the basis of your express consent. Recipients may in particular be our hosting provider, the provider of the form service, transport service providers and tax advisers.

A transfer to third countries takes place only in the case described in section 6 and is safeguarded by standard contractual clauses.

11 Storage periods

We store personal data only for as long as is necessary for the respective purpose. Enquiries that do not lead to a contract are deleted after twelve months at the latest. For contract data, the statutory retention periods under commercial and tax law apply, generally six or ten years. Server log files are deleted after 30 days at the latest.

12 Your rights

You have the following rights in relation to the personal data concerning you:

Right of access pursuant to Article 15 GDPR
Right to rectification pursuant to Article 16 GDPR
Right to erasure pursuant to Article 17 GDPR
Right to restriction of processing pursuant to Article 18 GDPR
Right to data portability pursuant to Article 20 GDPR
Right to withdraw consent pursuant to Article 7 (3) GDPR, with effect for the future

Right to object

Where we process data on the basis of Article 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing. We will then no longer process the data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms.

An informal message to info@colightsound.de is sufficient to exercise your rights.

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement. The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin

13 Security and changes

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the browser address bar starting with “https://”. When encryption is active, the data you transmit to us cannot be read by third parties.

We adapt this privacy policy where changes to our services or to the legal situation make this necessary. The version available at the time of your visit applies.

Last updated: August 2026