Portal lsc-led.de and the LSC LED Doc iOS app · Last updated: 25 September 2026
This policy explains, as required by Art. 13 and 14 GDPR, what personal data the portal lsc-led.de and the LSC LED Doc app process. The portal is a work tool of the LED Solutions Center for staff and partners: service, installation and maintenance reports, job planning, calendar and messages. Customers use it to sign reports via a link. The German Datenschutzerklärung is the authoritative version.
Contact for this portal: LED Solutions Center, In der Alting 4, 90596 Schwanstetten, phone +49 9170 94398-0, email service.lsc@sharp.eu. The data protection officer can be reached at the Munich address, marked “Attn. Data Protection Officer”.
The portal runs on a server of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, in a data centre in the EU. IONOS processes the data only on our behalf (Art. 28 GDPR). All connections use HTTPS/TLS.
To deliver pages and fend off attacks (for example by limiting sign-in attempts per IP address), the server processes technically necessary data: IP address, time, requested address and browser identifier. We do not keep a permanent access log of every request. Legal basis: Art. 6(1)(f) GDPR.
We only use strictly necessary cookies; no consent is needed for these. There is no tracking and there are no analytics or advertising cookies.
The browser’s local storage only holds display preferences, such as the last opened tab.
For an account we store the username, display name, role and permissions, the password only as a salted hash, the two-factor key if two-factor sign-in is enabled, and optionally a PIN for the wall calendar. Security events (sign-in, failed sign-in, password change, deletion request) are logged with time, username and IP address to detect misuse. Legal basis: Art. 6(1)(b) and (f) GDPR.
Reports contain what you enter: project, end customer, site, engineers and working hours, the customer’s contact person, device and serial numbers, notes, photos and signatures. They document the work done for the customer and are kept as long as needed for that and for statutory retention periods. Deleted reports stay in the bin for 30 days and are then removed for good. To help with typing, the portal remembers names and companies already used. Legal basis: Art. 6(1)(b), (c) and (f) GDPR.
Job planning records who works on which project when, and holidays and sick days. Staff can upload a sick note (photo or PDF). Sick-leave information is health data (Art. 9 GDPR); the sick note is visible only to the uploader, managers and administrators. Anyone who may see the calendar sees only the entry “sick” or “holiday”, not the note itself. A sick note is deleted together with its calendar entry. Legal basis: Art. 6(1)(b) and (c) GDPR; for health data Art. 9(2)(b) GDPR with § 26(3) BDSG.
Messages and attached files are stored on our server and visible to the members of the conversation. To show who is online, the app reports its status about once a minute; this is kept in memory only. Legal basis: Art. 6(1)(b) GDPR.
If you allow notifications, we store your iPhone’s device token with your username, app version and language. Notifications are delivered through the Apple Push Notification service and may include an excerpt of the message. You can turn them off at any time in iOS Settings. Legal basis: Art. 6(1)(a) GDPR.
Signed-in users can ask an AI assistant questions. The text of your message (at most 4,000 characters) and a conversation identifier are sent to an external AI service (ai.crm-iot.com). On the start page your browser loads a chat window from that service, which also passes your IP address to it. Please do not enter customer data or health data there. Use is voluntary. Legal basis: Art. 6(1)(f) GDPR.
When you use address search or the location feature in the app, our server sends the search text or coordinates to the Nominatim service of the OpenStreetMap Foundation (Cambridge, United Kingdom) to find the address; your IP address is not passed on. We do not record location in the background. Maps in the calendar and planner are loaded by your browser directly from tile.openstreetmap.org, which passes your IP address to the OpenStreetMap Foundation. The UK is covered by an EU adequacy decision. Legal basis: Art. 6(1)(f) GDPR.
Customers can sign reports through a personal link. We store the name, the signature, any comment, and the time, IP address and browser identifier as proof of signing, together with the signed document. The link is valid for at most 7 days. Legal basis: Art. 6(1)(b) and (f) GDPR.
If you use text or barcode recognition in the report form, your browser loads the needed libraries from cdn.jsdelivr.net and language data from tessdata.projectnaptha.com. This passes your IP address to those providers, which may process it outside the EU (for example in the USA). Legal basis: Art. 6(1)(f) GDPR.
The App Store link is a plain link. Data reaches Apple only once you tap it.
Data is backed up nightly and transferred over an encrypted connection to a backup server. Backups on the portal server itself are kept for 7 days. For analysis and Excel exports, report and planning data is also copied into an internal database that cannot be reached from the internet.
Within the company, only people who need access for their work have it. External recipients are only the service providers named above. We do not sell data and do not use it for advertising.
You can request deletion of your account in the app under Profile → Delete my account, or by writing to us. You are signed out at once and the account is removed after 7 days; signing in again within that period cancels the request. Reports you created remain as business records.
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18) and data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time for the future. You may also lodge a complaint with a supervisory authority (Art. 77), for example the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.