Privacy notice

This notice explains what happens to personal data when you use the website www.ilumiauto.com (the “Site”). It covers the Site only; the terms on which we sell are set out separately in our General Terms and Conditions of Sale.

The companies responsible for the Site and for the enquiries it sends are:

referred to together as “ILUMI GROUP”, “we” or “us”. Which company is responsible depends on the sales model and the entity named on your sales document, as described in §1 of our General Terms and Conditions of Sale.

For anything in this notice, including a request about your data, write to contact@ilumi.ch.

When you send us an enquiry through the “Ask” form, we receive:

1. your e-mail address, which the form requires so that we can answer you,
2. your name, if you give it — the field is optional,
3. the message you write,
4. which part you were looking at when you asked, so that the answer is about the right item,
5. any photographs or PDF documents you attach yourself.

Nothing on the Site asks for a postal address, a telephone number, a payment card or any identity document. There is no checkout on this website: orders, invoicing and delivery are arranged afterwards, directly with us.

The form contains one hidden field that a person never sees. If it is filled in, the message is treated as automated spam and discarded; in that case we record the IP address it came from, so that we can block repeated abuse.

Our servers keep ordinary access logs: the IP address, the time, the address requested, the response code and the browser’s user-agent string. These are a by-product of serving a web page and are used to keep the service running and to investigate faults and abuse.

With your consent, we use Google Analytics 4 to understand how the Site is used. It records which pages are viewed, the approximate location (country and city, derived from the IP address, which Google Analytics does not store), the type of device, browser and language, and how the visitor arrived — for example from a search engine or a link on another site. Google Analytics loads only after you click “Accept” in the cookie banner; until then, and if you click “Reject”, nothing is sent to it.

We do not use advertising pixels, fingerprinting, profiling or automated decision-making on this Site.

To answer your enquiry. Without an e-mail address we cannot reply, so this is processing necessary to take steps at your request before entering into a contract, and to perform it afterwards.

To keep the Site working and secure — the access logs and the anti-spam measure described above. Our legitimate interest in running a service that is available and not abused.

To produce visitor statistics with Google Analytics — only with your consent (Article 6(1)(a) GDPR). You can withdraw it at any time with “Cookie settings” at the bottom of every page; withdrawal does not affect statistics collected before it.

To meet obligations that the law places on us, for example accounting and tax record-keeping once an enquiry becomes an order.

We do not use your data to send marketing unless you ask us to.

Your enquiry reaches ILUMI GROUP’s own customer-service system and is handled by our staff.

We use service providers who process data on our behalf and only on our instructions: our hosting provider, and the providers of the mail and messaging systems through which we answer you.

If your enquiry becomes an order, the data needed for that order is shared with the carrier who delivers it and with our accountants, to the extent that the law and the delivery require. The carriers we work with are listed in §6 of our General Terms and Conditions of Sale.

We do not sell personal data and we do not share it for anyone else’s marketing.

Some parts of the Site are served by other companies. When your browser loads them, it contacts those companies directly and they receive your IP address and the usual request data:

1. Google Fonts — the typefaces used on the Site are requested from Google’s servers,
2. Google Maps — the Contact page shows a map of our offices, embedded from Google. Google may set its own cookies when the map loads,
3. DigitalOcean — hosting and the content-delivery network from which the photographs are served.
4. Google Analytics — only after you accept it in the cookie banner. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as our processor; see the Google Privacy Policy (https://policies.google.com/privacy),
5. Google reCAPTCHA — the sign-in step of the returns portal, the contact form and the “Ask” dialog on part pages are protected by reCAPTCHA v3, which runs invisibly. When one of these forms is on the page, your browser loads Google’s script and Google receives your IP address and data about how you interact with the page; when you submit the form, Google returns a score that we use only to tell people from automated scripts. Google may set its own cookies. The reCAPTCHA service is subject to the Google Privacy Policy (https://policies.google.com/privacy) and Terms of Service (https://policies.google.com/terms),

The Contact page also offers WhatsApp links. Opening one starts a conversation in WhatsApp, and the message and your telephone number are then handled by WhatsApp under its own terms and privacy policy.

These providers act under their own privacy notices, which we cannot change. If you prefer not to involve them, you can write to contact@ilumi.ch instead of using the map or WhatsApp.

The Site sets no advertising cookies of its own.

If you accept statistics in the cookie banner, Google Analytics sets the cookies _ga and _ga_<ID> on this domain. They tell one visit from another and expire automatically. If you reject, they are not set; if you later withdraw consent under “Cookie settings”, they are deleted.

Your choice itself is kept in your browser’s local storage (not in a cookie) so that the banner does not ask again on every page.

The Google Maps frame on the Contact page and Google reCAPTCHA on the forms may set cookies belonging to Google, as described in section 5.

Enquiries and the correspondence that follows them are kept for as long as the matter is open and afterwards for as long as we may need them to deal with questions, complaints or claims arising from it.

Where an enquiry leads to a sale, the documents that accounting and tax law require us to keep are kept for the period that law prescribes.

Google Analytics statistics are kept for the retention period set in our Google Analytics account and are then deleted automatically.

Access logs are kept for a short period for operational and security purposes and are then discarded.

The Site is hosted in the European Union, in Frankfurt am Main, Germany.

ILUMI GROUP has companies in Switzerland, Germany and Poland, and your enquiry may be handled by staff in any of them. Switzerland is recognised by the European Commission as providing an adequate level of protection for personal data.

Where any transfer outside the European Economic Area or Switzerland is involved, it takes place on the basis of an adequacy decision or of appropriate safeguards required by law.

Google may process Google Analytics data in the United States. Such transfers rely on the EU–US Data Privacy Framework, in which Google LLC participates, and on the standard contractual clauses approved by the European Commission.

Depending on where you live, data-protection law — the GDPR in the European Economic Area, the Federal Act on Data Protection in Switzerland — gives you the right to:

1. ask what personal data we hold about you and receive a copy of it,
2. have inaccurate data corrected,
3. have data erased where there is no longer a reason for us to keep it,
4. ask us to restrict how we use it, or object to our use of it where we rely on a legitimate interest,
5. receive data you gave us in a structured, machine-readable form,
6. withdraw consent at any time, where we asked for consent — which does not affect what was done before you withdrew it.

Write to contact@ilumi.ch and we will answer within the period the applicable law allows.

If you believe we have handled your data wrongly, you may also complain to the data-protection supervisory authority in your country of residence.

The Site is addressed to people buying vehicle parts and is not directed at children. We do not knowingly collect data from children.

We may update this notice, for example when the law changes or when the Site begins to use a service it does not use today. The version published here is the one that applies.