Privacy Policy

This Privacy Policy applies to our website lightray.io and our online shop. It explains which data we process, why we do so, and what rights you have. It is based on the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

The key points at a glance:

• For your order, we need your name, address, and email address. We never receive your card details.
• We use Google Analytics to improve our website.
• We do not sell your data.

Lightray Innovation GmbH, Steinackerstrasse 38, 8542 Wiesendangen, Switzerland. You can reach us by email.

When you access the website, our server processes technically necessary data such as your IP address, the date and time, the page accessed, and your browser. We need this data to deliver the website and protect it against attacks.

We determine your country from your IP address to show you the matching ordering and shipping information.

Some pages load software libraries from third-party providers. Embedded YouTube videos are loaded directly from YouTube in privacy-enhanced mode. YouTube may store data in your browser, at the latest when you play a video.

The legal basis under the GDPR is our legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR).

We use Google Analytics to see how visitors use the website and through which channels orders are placed. For this purpose, Google Analytics sets cookies. Google Analytics does not store IP addresses. We have disabled advertising features.

You can prevent this tracking by blocking cookies in your browser or by installing Google's browser add-on. The legal basis under the GDPR is our legitimate interest in improving our website (Art. 6(1)(f) GDPR).

When you place an order with us, we process your email address, your name, your shipping address and, if different, your billing address, your phone number (if provided), and the details of your order. We need this data to process your order, send you order and shipping confirmations, and contact you if there are any questions. We pass your phone number on to the delivery service so it can reach you with questions about the delivery.

Payments are processed by Stripe. You enter your card details directly with Stripe; they never reach our servers. Stripe processes some payment data under its own responsibility, e.g. to prevent fraud.

The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and compliance with statutory retention obligations (Art. 6(1)(c) GDPR).

If you order through Amazon or from one of our resellers, they are responsible for processing your data.

When you write to us, we process your information to handle your request. The legal basis is the handling of your request or the performance of a contract (Art. 6(1)(b) and (f) GDPR).

We use service providers that process data on our behalf:

• Website hosting, order processing, and sending order confirmations: USA
• Payment processing: EU and USA
• Warehousing and shipping: Switzerland and EU
• Web analytics, country detection, and embedded videos: USA
• Email: EU

Delivery is handled by the postal service in the destination country. If this country is outside Switzerland and the EU, we transfer your delivery data there because this is necessary to fulfill your order.

Under Swiss law, EU countries are considered to provide adequate data protection, as is the USA for companies certified under the Swiss-U.S. or EU-U.S. Data Privacy Framework. Otherwise, we rely on the European Commission's standard contractual clauses, which are also recognized by the Swiss Federal Data Protection and Information Commissioner (FDPIC).

We store personal data only for as long as we need it for the respective purpose or are required by law to retain it. We keep order data as business records for ten years.

You can request information about your data and have it corrected, deleted, or handed over to you. You can object to the processing and withdraw your consent at any time with effect for the future. To do so, send us an email. Statutory retention obligations may prevent deletion.

You also have the right to lodge a complaint with the FDPIC or, if you live in the EU, with the data protection authority of your country.

We update this Privacy Policy when our data processing or the legal situation changes. The version published on this page applies.