This Privacy and Cookie Statement is drafted by Atlas Technologies B.V., a private company with limited liability organized and existing under the laws of the Netherlands, having its corporate seat at Eindhoven and its official address at (5708 JZ) Helmond, at the Automotive Campus 30, registered with the Dutch trade register of the Chamber of Commerce under number 67264298 under the tradename Lightyear (“Lightyear”, or “we” or “us”).
This Privacy and Cookie Statement is applicable to the processing of all personal data of Users who visit the website of Lightyear www.lightyear.one (‘Website’) according to the norms of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“General Data Protection Regulation” or “GDPR”).
At Lightyear, protecting your privacy is in our best interest. This privacy statement is meant to give you insight regarding the personal data we collect from you when you browse on the Website and how we process it.
When processing your personal data, Lightyear adheres to the GDPR principles:
- Fairness and transparency: Lightyear is transparent about how your personal data is handled, informing you about which data are specifically collected and processed, the purposes they are collected for, and all parties receiving your data;
- Lawfullness: Lightyear only processes personal data under one of the valid legal grounds provided by Article 6(1) GDPR, as explained below;
- Purpose limitation: Lightyear restricts data processing to purposes specified to you beforehand and does not further processes them for any incompatible purpose;
- Data minimisation: Lightyear only processes data which are necessary to the purposes for which they are processed for;
- Accuracy: Lightyear rigorously checks that the personal data collected from you is accurate and updated and corrects or deletes them in case of inaccuracies;
- Storage limitation: Lightyear stops processing and deletes personal data once they accomplished their purpose, unless such data need to be stored for compliance with legal authorities;
- Integrity and confidentiality: Lightyear takes the protection of your data seriously by implementing practices and safeguards to keep your data safe and confidential.
What kinds of personal data does Lightyear process?
Lightyear collects and processes various types of personal data in order to offer you high quality services. The kinds of data vary by different interactions, but never exceeds the data you have explicitly provided.
Data provided by you:
- Identification data: IP address, name, surname, nationality.
- Contact details: e-mail address, correspondence address, telephone number.
- Information included in résumes: social status (student/employee/self-employed/unemployed), work experience, skills, academic education, qualifications, accomplishments, lifestyle, habits etc.
The goal of processing and its legal basis
There are numerous purposes why we (need to) process your personal data. Examples of such purposes are:
- Compliance with legal obligations (art. 6 paragraph 1(c) GDPR).
- Performance of a contract (art. 6 paragraph 1(b) GDPR). E.g. reservation requests.
- Legitimate interests pursued by us E.g. evaluating the metadata of visitors of the Website for purposes of further improvement (please also refer to our cookie statement).
- Purposes for which you have given consent, in accordance with art. 6 paragraph 1(a) E.g. providing you with our newsletter, evaluating job applications, and organizing visits at Lightyear’s facility.
You are not obliged to make your personal data available. However, it is possible that certain functions of our Website require the availability of personal data. If you do not make your personal data available in these cases, this may result in some functions on our Website not working or not working properly.
How do we process your personal data?
We process the personal data you provide us according to the principles of lawfulness, fairness and transparency. To that end, we will process the data only when there is a legal basis as mentioned in the latter paragraph.
What kind of rights is the data subject entitled to?
According to the GDPR, you have certain rights concerning your personal data collected and processed by us. These rights enable you to retain control over the information concerning you, preventing unlawfulness or inaccuracy, and ensure transparency and trust between you and us.
If you wish to receive more information about the exercise of your rights, please contact our legal department at the link provided at the end of the document.
- Right to access (Art. 15 GDPR): you are entitled to ask us information regarding the processing of your personal data, such as which kind of data was stored, how it was collected and the purposes for processing.
- Right to rectification (Art. 16 GDPR): you are entitled to ask us for the rectification/completion of inaccurate/incomplete personal data concerning you.
- Right to erasure (Art. 17 GDPR): you are entitled to ask us of the erasure of personal data concerning you without undue delay where one of the following grounds applies:
- data are no longer needed for the purposes they were collected and processed for;
- you withdraw your consent previously provided for processing operations;
- data have been unlawfully processed;
- data have to be erased in the light of a legal obligation we are subject to.
- Right to restriction of processing (Art. 18 GDPR): you are entitled to ask us for the restriction of processing of personal data concerning you where one of the following grounds applies:
- the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data;
- personal data have been unlawfully processed and you request the restriction of their use instead of erasure;
- personal data are no longer needed to be processed by the Controller and the data subject requires them for the establishment, exercise or defence of legal claims;
- Right to data portability (Art. 20 GDPR): if the personal data processing had either consent or contractual performance as a legal basis, you are entitled to receive the personal data concerning you, in electronic format and have the right to transmit those data to another controller.
- Right to object (Art. 21 GDPR): you are entitled to object to the processing of your personal data based on Article 6(1)(f) of the GDPR (‘legitimate interests’) at any time. Lightyear reserves the right to keep processing data under compelling legitimate interests. You are entitled to object to processing for direct advertising at any time, which will cease upon request.
- Right to complain to the Data Protection Authority (Art. 77 GDPR): you are entitled to lodge a complaint with the Data Protection Authority of your country if you believe that any processing of your personal data by Lightyear is infringing the GDPR norms.
What are cookies?
A cookie is a small text file that a website saves on your computer or mobile device when you visit the website. It enables the website to remember your actions and preferences (such as login, language, font size and other display preferences) over a period of time, so you do not have to keep re-entering them whenever you come back to the website or browse from one page to another.
What kind of cookies does lightyear use?
We use different forms of cookies for different purposes. Non-fundamental cookies require your explicit consent, for which we ask you every time you access the website without pre-existing cookies. The following type of cookies can be used:
- Fundamental cookies: cookies necessary for proper functioning of our website. They store the details of your browsing session, including your login, last activity and date of last visit;
- Analytics cookies: cookies gathering information for purposes of maintenance and improvement of our website. They collect data such as number of visitors and most viewed pages;
We collect the following cookies:
|Cookie name||Type of cookie||Duration|
|Google Analytics||analytics||2 years|