1. Data protection declaration
Welcome and thank you on behalf of the Lichtgitter Group (Lichtgitter) for visiting our website and for your interest in our Company and in our products.
Lichtgitter respects your privacy
For us, the protection of your privacy in the processing of personal data, together with the security of all business data, is an important concern which we take account of in our business procedures. We apply confidentiality in our processing of the personal data collected when you visit our websites.
Data protection and the security of information are established in our Company policy.
1.1 Data protection at a glance
1.1.1 General information
Below, you will find some pointers giving a straightforward summary of what happens to your personal data when you visit this website. “Personal data” means all of the data by which you can be personally identified. Please read our Data protection declaration, which is included in this text; it will provide you with extensive information about the whole subject of data protection.
1.1.2 Data logged on this website
Who is responsible for the logging of data on this website?
The processing of data on this website is carried out by the website operator. You can find the corresponding contact details in the editorial for this website.
How do we collect your data?
Firstly, your data is logged by the fact of your sharing the information with ourselves. This may relate, for example, to data which you have entered on a contact form.
Secondly, further data is collected by our IT systems automatically – or after you have given your consent – when you visit our website. This consists primarily of technical data (e.g. Internet browser, operating system or the time of day of your visit to our website). This data will be collected automatically as soon as you enter this website.
For what purpose do we utilise your data?
A portion of the data is collected in order to ensure error-free presentation of our website. Other data may be utilised in order to analyse your user habits.
Which rights do we hold in respect of your data?
You are entitled at any time to receive information, free of charge, about the origin, the recipients and the purpose of the storage of your personal data. You are also entitled to require that this data should be amended or erased. If you have given your consent for the processing of your data, you can revoke that consent at any time with effect for the future. Under certain circumstances, you also have the right to require that the processing of your personal data should be restricted. You also hold the right to complain to the competent supervisory body.
At any time, you can contact the address given in our editorial to find out about this matter, and any other matters concerning the topic of data protection.
1.1.3 Analytical tools and third providers` tools
When you visit this website, your surfing habits can be statistically analysed. This is primarily applied using cookies and “analysis programs”.
You can obtain detailed information concerning these analysis programs in the following Data protection declaration.
1.1.4 Hosting und Content Delivery Networks (CDN)
External hosting
This website is hosted by an external service provider (a hoster). The personal data which is logged onto this website is stored on the hoster’s servers. This type of information will primarily consist of IP addresses, contact enquiries, meta-data and communication data, contractual data, contact data, names, website visits and other data as generated via a website.
The reason for using a hoster is in order to ensure the fulfilment of contracts in relation to our potential and existing customers (refer Article 6, paragraph 1, clause (b), GDPR, by a professional provider (refer Article 6, paragraph 1, clause (f), GDPR).
Our hoster will process your data only to the extent required in order to fulfil its service obligations, and will follow our instructions concerning the data.
Negotiation of a contract for contracted processing
In order to ensure processing which is compliant with data protection requirements, we have negotiated a contract for contracted processing with our hoster.
1.2 General details and nabdatory information
1.2.1 Data protection
The operators of this website take the protection of your personal data as a very serious matter. We treat your personal data confidentially, and in accordance with statutory data protection regulations and the provisions of this Data protection declaration itself.
Various personal data will be logged when you use this website. “Personal data” means the data by which you can be personally identified. This Data protection declaration explains which data we collect, and the purpose for which we use it. It also explains how and for what purpose this takes place.
We should point out that the transmission of data over the Internet (e.g. in the process of sending emails) may be prone to security gaps. It is not possible to achieve seamless protection of data from interference by third parties.
1.2.2 References to responsible office
The responsible offices for the processing of data on this website are:
Lichtgitter GmbH
Siemensstraße 1
48703 Stadtlohn
Tel.: +49/2563/911-0
Lichtgitter GFK GmbH & Co. KG
Siemensstraße 1
48703 Stadtlohn
Tel.: +49/2563/911-0
Lichtgitter Blechprofilroste GmbH & Co. KG
Neckarwiesen 20
72172 Sulz
Tel.: +49/7454/9582-0
Lichtgitter Treppen GmbH & Co. KG
Schönower Str. 6
16306 Casekow
Tel.: +49/33331/7971-0
info@lichtgitter.com
A responsible office is the individual person or the corporation who/which decides either alone or in conjunction with others as to the purposes and the methods for the processing of personal data (e.g. names, email addresses etc) .
1.2.3 Data protection officer (legal requirement)
A Data protection officer is appointed and can be contacted on the email address of datenschutz@lichtgitter.com. Any posted letters should be sent with the heading – on the envelope – of “Data protection: personal/confidential” to the following address:
Mr. Lukas Ellerkamp
Lichtgitter GmbH
Siemensstraße 1
48703 Stadtlohn
1.2.4 Revoking your consent for data processing
Many data-processing procedures can be conducted only subject to your express consent. You are entitled at any time to revoke consent that was given in the past. All you need to do is to send us an informal message by email. This revocation will not alter the legitimacy of any data processing which may have taken place before the time of the revocation.
1.2.5 Right of contestation of data logging in particular cases, and right of contestation of direct advertising (Article 21, GDPR)
IF DATA PROCESSING IS CONDUCTED ON THE BASIS OF ARTICLE 6, PARAGRAPH 1, CLAUSES (E) OR (F), GDPR, THEN YOU HAVE THE RIGHT AT ANY TIME TO FILE AN OBJECTION, FOR REASONS RELATING TO YOUR PARTICULAR CIRCUMSTANCES, TO THE PROCESSING OF YOUR PERSONAL DATA; AND THE SAME APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. IN THIS DATA PROTECTION DECLARATION, YOU CAN FIND THE RESPECTIVE LEGAL BASIS THAT SUPPORTS ANY GIVEN INSTANCE OF PROCESSING. IF YOU FILE AN OBJECTION, WE WILL DISCONTINUE PROCESSING OF YOUR RESPECTIVE PERSONAL DATA UNLESS WE ARE ABLE TO INDICATE MANDATORY, JUSTIFIED REASONS FOR THE PROCESSING WHICH TAKE PRIORITY OVER YOUR INTERESTS, RIGHTS AND FREEDOMS OR WHERE THE PROCESSING IS CONDUCTED FOR THE SUBSTANTIATION, FOR THE EXERCISE OR FOR THE DEFENCE OF LEGAL ENTITLEMENTS (CONTESTATION CORRESPONDING TO ARTICLE 21, PARAGRAPH 1, GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURSUIT OF DIRECT ADVERTISING, THEN YOU HAVE THE RIGHT AT ANY TIME TO FILE A CONTESTATION AGAINST THE PROCESSING OF THE PERSONAL DATA RELATING TO YOURSELF FOR PURPOSES OF SUCH ADVERTISING; AND THE SAME APPLIES IN RESPECT OF PROFILING, TO THE EXTENT THAT IT RELATES TO SUCH DIRECT ADVERTISING. IF YOU FILE A CONTESTATION, THEN FROM THAT POINT IN TIME ONWARDS YOUR PERSONAL DATA WILL NO LONGER BE USED FOR PURPOSES OF DIRECT ADVERTISING (CONTESTATION CORRESPONDING TO ARTICLE 21, PARAGRAPH 2, GDPR).
1.2.6 Right of contestation in relation to competent supervisory body
In the event of infringements of GDPR, the data subject holds the right of appeal to a supervisory body, especially in the member State of your regular residence, place of work or the venue in which the alleged infringement took place. The right of appeal is applicable irrespective of any other rights of recourse in relation to the authorities or to the Courts.
1.2.7 Right for the transmission of data
You have the right to have any data – which we have processed by automated media on the grounds of your consent or in order to fulfil a contract – sent to yourself or to a third party in a currently used, electronically readable format. Should you require that your data be directly transmitted to any other data manager, this will take place only to the extent that is technically feasible.
1.2.8 SSL- or TLS-encryption
For security reasons, and in order to protect any confidential content in the process of transmission – such as in the case of orders or enquiries which you sent to ourselves in our capacity as a website operator – this website makes use of SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address line changes from “http://” to “https://”, together with the symbol of a lock on your browser line.
If SSL and/or TLS encryption is activated, then the data which you send to ourselves cannot be accessed by any third parties.
1.2.9 Notification, erasure, amendment
Within the framework of applicable legal provisions, you are entitled at any time to receive information, free of charge, as to your personal data on store, the origin and the recipients of your data, the purpose for which the data is processed and – in some cases – the right to have the data amended or erased. At any time, you can contact the address given in our editorial to find out about this matter, and any other matters concerning the topic of data protection.
1.2.10 Right for restriction of processing
You also have the right to require that the processing of your personal data should be restricted. At any time, you can contact the address given in our editorial to find out about this issue. You hold the right for restriction of processing in the following cases:
- If you dispute the correctness of your personal data as stored with ourselves, we will normally need some time in order to check up. While we are checking up, you have the right to require that the processing of your personal data should be restricted.
- If the processing of your personal data was/is unjustifiable, then you may require restriction (in place of erasure) of the processing of your data.
- Once we no longer need your personal data, although you require it for purposes of exercising, defending or substantiating legal claims, you are entitled to have the processing of your personal data restricted rather than having your data erased.
- If you have filed a contestation corresponding to Article 21, Paragraph 1, GDPR, then your interests and our own interests have to be weighed up against each other. While it remains uncertain whose interests take precedence, you have the right to require that the processing of your personal data should be restricted.
If you have restricted the processing of your personal data, then such data – apart from the fact of its being on store – can be processed only subject to your consent or for the purposes of substantiating, exercising or defending legal claims or for the protection of the rights of another individual or of another corporation, or because the European Union or a member State hold an important public interest.
1.2.11 Contestation of advertisement emails
The utilisation of contact details (as published in the context of the requirement for an editorial) for purposes of advertising and information material which has not been expressly solicited is hereby contested. The operators of the website pages expressly reserve the right to take legal action in the event of the unsolicited transmission of advertising information, for example by means of spam emails.
1.3 Data logged on this website
1.3.1 Cookies
Our Internet pages use “cookies”. Cookies are small text files and are harmless in relation to your terminal. They are stored on your terminal either temporarily for the period of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically erased at the end of your visit. Permanent cookies remain stored on your terminal until you erase them yourself or until they are automatically erased by your web browser.
In some cases, it is also possible for cookies from third-party companies to be stored on your terminal when you visit our website (third-party cookies). These enable ourselves or yourself to use certain services from the third-party company (e.g. cookies for the processing of payment services).
Cookies have various functions. Numerous cookies are technically necessary, because certain website functions would not operate without them (e.g. the shopping basket function or the display of videos). Other cookies are used to analyse user habits or to display advertising.
Cookies which are required in order to carry out the electronic communication procedure (required cookies) or for the provision of certain functions which you require (functional cookies, such as those for the shopping basket function, for example) or for the optimisation of the website (e.g. cookies in place in order to gauge the “footfall” to the website on the part of the public), are stored as permitted by Article 6, Paragraph 1, clause (f), GDPR, unless any other legal consideration is declared. The website operator holds a justified interest in having cookies stored with the aim of optimising its provision of services free of technical errors. Where consent for the storage of cookies has been requested, then the storage of such cookies will take place exclusively on the basis of the above-mentioned consent (refer Article 6, Paragraph 1, clause (a), GDPR); such consent can be revoked at any time.
You can set your browser to notify you of the setting of any cookies, and to enable cookies only in individual instances, to reserve the acceptance of cookies for certain types of case, or to exclude them altogether. You can also activate the automatic erasure of cookies when your browser is closed. The functionality of this website may be restricted if cookies are deactivated.
If cookies are used by third-party companies or for analytical purposes, we will send you separate notification of the fact in line with this Data protection declaration, and – if appropriate – will ask for your consent.
1.3.2 Server log files
The provider of the website automatically collects and stores information in “server log files” which are automatically sent to ourselves by your browser. These files are as follows:
- Browser type and browser version
- Employed operating system
- Referrer URL
- Accessing computer’s host name
- Clock time of server request
- IP address
This data is not merged with other data sources.
This data is collected on the basis of Article 6, Paragraph 1, clause (f), GDPR). The website operator holds a justified interest in having its website presented and optimised free of technical errors – and for that purpose it is necessary to collect the server log files.
1.3.3 Contact form
If you send enquiries to ourselves by means of the contact form, then the information you disclose on the enquiry form, together with the contact data you indicate there, will be stored for purposes of processing your enquiry and in order to deal with any follow-up questions you may raise with us. We will not pass on any of this data without your consent.
This data is processed on the basis of Article 6, Paragraph 1, clause (b), GDPR, if your enquiry relates to the fulfilment of a contract or if it is necessary in order for pre-contractual procedures to be completed. In all other cases, the requirement for processing arises from our justified interest in the efficient handling of enquiries addressed to ourselves (refer Article 6, Paragraph 1, clause (f), GDPR) or your consent (Article 6, Paragraph 1, clause (a), GDPR), if that was requested.
The data which you will have entered on the contact form will remain with ourselves until you require that it should be a raised, until you revoke your consent for its storage or until the purpose for the storage of the data has lapsed (e.g. once the handling of your enquiry has been completed). This does not affect mandatory legal requirements – particularly those concerning storage periods.Wenn Sie uns per Kontaktformular Anfragen zukommen lassen, werden Ihre Angaben aus dem Anfrageformular inklusive der von Ihnen dort angegebenen Kontaktdaten zwecks Bearbeitung der Anfrage und für den Fall von Anschlussfragen bei uns gespeichert. Diese Daten geben wir nicht ohne Ihre Einwilligung weiter.
1.3.4 Enquiry by email, by telephone or by fax
If you contact us by email, by telephone or by fax, then your enquiry, together with all personal data obtained from it (name, enquiry) will be stored and processed with ourselves for purposes of handling your visit. We will not pass on any of this data without your consent.
This data is processed on the basis of Article 6, Paragraph 1, clause (b), GDPR, if your enquiry relates to the fulfilment of a contract or if it is necessary in order for pre-contractual procedures to be completed. In all other cases, the requirement for processing arises from our justified interest in the efficient handling of enquiries addressed to ourselves (refer Article 6, Paragraph 1, clause (f), GDPR) or your consent (Article 6, Paragraph 1, clause (a), GDPR), if that was requested.
The data which you will have sent to us on the contact form will remain with ourselves until you require that it should be erased, until you revoke your consent for its storage or until the purpose for the storage of the data has lapsed (e.g. after the purpose of your enquiry has been dealt with). This does not affect mandatory legal requirements – particularly those concerning storage periods.
1.4 Analysis tools and Advertising
1.4.1 Google-Tag-Manager
This website uses Google Tag Manager. Google Tag Manager is a solution enabling marketers to manage website tags via an interface. The tool tag manager itself (which operates the tags) is a cookie-free domain and does not log any personal data. The tool generates the release of other tags which may in turn gather data, under certain circumstances. Google Tag Manager does not access this data. If any deactivation has been implemented at domain level or at cookie level, then this remains in place for all tracking tags which are implemented by means of Google Tag Manager.
Google Tag Manager’s Conditions of use and Data protection provisions will provide you with further information. You can find this information on: https://www.google.de/tagmanager/use-policy.html
1.4.2 Google Analytics
This website uses the functions of the Google Analytics web analysis service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses “cookies”. These are text files which are stored on your computer and which enable an analysis of your utilisation of the website. The information generated by the cookie with regard to your use of this website is normally transferred to a Google server located in the USA, where it will be stored.
The storage of Google Analytics cookies and the use of this analysis tool are conducted on the basis of Article 6, Paragraph 1, clause (f), GDPR). The website operator has a justified interest in analysing user habits in order to optimise not only its Web service but also its advertising. where corresponding consent has been requested (e.g. consent for the storage of cookies), processing is conducted exclusively on the basis of Article 6, Paragraph 1, clause (a), GDPR); such consent can be revoked at any time. The website operator has a justified interest in analysing user habits in order to optimise not only its Web service but also its advertising. where corresponding consent has been requested (e.g. consent for the storage of cookies), processing is conducted exclusively on the basis of Article 6, Paragraph 1, clause (a), GDPR); such consent can be revoked at any time.
IP anonymisation
On this website, we have activated the IP anonymisation function. By this means, your IP address is reduced by Google within European Union member States or in other States signatory to the European Economic Area treaty before it is sent to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA, and – once there – it will be reduced. On behalf of the operator of this website, Google will make use of this information in order to analyse your use of the website, in order to compile reports concerning website activities and in order to provide further services relating to website utilisation and Internet utilisation for the website operator. The IP address which will have been sent over from your browser in the context of Google Analytics will not be merged with any other Google data.
Browser plug-in
You can prevent the storage of your cookies by applying a corresponding setting in your browser software; however, we should inform you that – if you do this – you may not be able to access the full extent of this website’s functions. You can also prevent the logging of data generated by the cookie (which relates to your use of the website, including your IP address) from being sent to Google, and prevent this data from being processed by Google, if you download and install the browser plug-in which is available from the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Contestation of datalogging
You can prevent your data from being logged by Google Analytics if you click on the following link. An opt-out cookie will be set; it prevents your data from being logged upon future visits to this website: deactivate Google Analytics.
You can find further information concerning the handling of user data at Google Analytics in Google’s Data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de.
Contracted processing
We have negotiated a contracted processing contract with Google, and we apply the full extent of the German data-protection authorities’ strict rules concerning the use of Google Analytics.
Demographic characteristics with Google Analytics
This website uses Google Analytics’ “demographic characteristics” function. This enables the preparation of reports containing information about website visitors’ age, gender and interests. This data is obtained from Google’s interest-based advertising and from third-party providers’ visitor data. This data cannot be attributed to any defined individual. And you can deactivate this function at any time by adjusting the display settings in your Google account, or you can apply a blanket prohibition of the Google Analytics’ gathering of your data as described in the subsection on “Contestation of datalogging”
Duration of storage
User-level and event-level data which is stored with Google, and which is connected with cookies, user codes (e.g. user ID) or advertising IDs (e.g. double-click cookies, Android advertising ID) will be anonymised and/or erased after 14 months. For the corresponding details, please follow the following link: https://support.google.com/analytics/answer/7667196?hl=de
1.4.3 Use of GA Audiences
On this website, GA Audiences – which is a web analysis service of the provider, Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) – gathers and stores data from which utilisation profiles will be produced, combined with the use of pseudonyms. On this website, GA Audiences – which is a web analysis service of the provider, Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) – gathers and stores data from which utilisation profiles will be produced, combined with the use of pseudonyms. On the basis of this technology, users who have already visited our website pages and online services will see our own targeted advertising on external webpages of the Google Partner network. For this purpose, your computer will receive the setting of a cookie by means of which there will be analysis of user habits upon visiting the website, potentially followed by targeted product recommendations and interest-based advertising. No personal data will be stored or processed by the setting of the cookie. If you would rather not receive any interest-based advertising, then you can deactivate Google’s corresponding use of cookies by following the instructions on https://www.google.de/settings/ads/onweb#display_optout.
1.5 Newsletter
1.5.1 Newsletter information
If you would like to obtain the newsletter which is offered on the website, we will need you to send us an email address together with details enabling us to verify that you are the holder of the quoted email address and that you consent to receiving the newsletter. No further data will be collected, or only on a voluntary basis. We utilise this data exclusively for purposes of sending you the information you requested; we do not pass it on to any third parties.
The data which has been entered into the newspaper registration form will be processed exclusively subject to your consent (refer Article 6, Paragraph 1, clause (a), GDPR). At any time, you can revoke the consent previously given for the storage of data and of your email address and given for the use of that data for the dispatch of the newsletter, typically by using the “unsubscribe” link in the newsletter. This revocation does not affect the legitimacy of the data-processing procedures that have already been conducted.
The data which you have deposited with ourselves for purposes of obtaining the newsletter will be stored by ourselves until you unsubscribe from the newsletter from ourselves, or from the newsletter service provider, and will be deleted following the newsletter’s removal from the newsletter distribution list. This does not affect any data which has been stored with ourselves for other purposes.
After you have unsubscribed from the newsletter distribution list, your email address may be stored with ourselves or with the newsletter service provider on a blacklist in order to prevent future mailings. The data on the blacklist will be utilised exclusively for that purpose and will not be merged with any other data. This serves not only your interests but also our interests in complying with the statutory legal rules concerning the dispatch of newsletters (justified interest as defined for purposes of Article 6, Paragraph 1, clause (f), GDPR). There is no time limit upon storage on the blacklist. You can contest storage to the extent that your interests take precedence over our justified interest.
1.6 Plugins und Tools
1.6.1 Google Maps
This website uses the Google Maps service via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
In order to use the functions of Google maps it is necessary to store your IP address. This information is normally transferred to a Google server located in the USA, where it will be stored. The provider of this website page has no control over such data transmission.
Google maps is used in the interests of the appropriate representation of our online services and for ease of location of the sites which we indicate on the website. This constitutes a justified interest as defined by Article 6, Paragraph 1, clause (f), GDPR). If corresponding consent was requested, then processing will be conducted exclusively on the basis of Article 6, Paragraph 1, clause (a), GDPR); such consent can be revoked at any time.
You can find further information concerning the handling of user data in Google’s Data protection declaration: https://policies.google.com/privacy?hl=de.
1.6.2 Google reCAPTCHA
On this website, we use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). The primary purpose of this function is to distinguish whether an input was performed abusively by an individual person or using machine-generated, automated processing. This service covers the sending (to Google) of the IP address and, in certain cases, further information which Google needs for the reCAPTCHA service, and is conducted in accordance with Article 6, Paragraph 1, clause (f), GDPR, in pursuance of our justified interest in the securing of direct, individual responsibility on the Internet and in avoiding abuse and spam. The process of using Google reCAPTCHA may also entail the forwarding of personal data to the servers of Google LLC. in the USA.
To cover the eventuality that personal data is forwarded to Google LLC, whose head office is in the USA, Google LLC has given us certification of the USA/European “privacy shield” convention, which guarantees adherence to the level of data protection applicable in the EU. An up-to-date certificate can be seen at this site: https://www.privacyshield.gov/list
You can find further information concerning Google reCAPTCHA and Google’s Data protection declaration by visiting: https://www.google.com/intl/de/policies/privacy/
1.7 Own services
1.7.1 Handling of applicants`data
We offer you the opportunity to apply to be employed by ourselves (e.g. by email, by post or using the online application form). Please find, below, some information concerning the extent, the purpose and utilisation of your personal data as logged in the context of the application process. We guarantee that the logging, the processing and the utilisation of your data will be conducted in accordance with currently applicable data protection regulations and with all other statutory provisions, and that your data will be treated with strict confidentiality.
Extent and purpose of data logging
If you take the step of sending us an application, we will process your related personal data (e.g. contact and communications data, application-related documents, memos in the context of application-related discussions, etc) to the extent that this is necessary in order to reach a decision concerning a relationship of employment. The legal basis for this is §26, Federal German data protection regulations (new version) (establishment of a relationship of employment), refer Article 6, Paragraph 1, clause (b), GDPR (establishment of contracts in general) and – provided you have given the corresponding consent – Article 6, Paragraph 1, clause (a), GDPR. Such consent can be revoked at any time. Within our Company, your personal data will be forwarded exclusively to the individuals who are involved in the processing of your application.
If your application has been successful, then the data which you submitted on the basis of §26, Federal German data protection regulations (new version) and on the basis of Article 6, Paragraph 1, clause (b), will be stored in our data processing systems for purposes of operating the relationship of employment.
Duration of storage of data
If we are unable to offer you a position, if you decline to accept the offer of a position or if you withdraw your application, then we reserve the right to store the data which you supplied in consideration of our justified interests (refer Article 6, Paragraph 1, clause (f), GDPR) for up to 6 months following termination of the application procedure (decline or withdrawal of application) with ourselves. Thereafter, the data will be erased and the physical application documents will be destroyed. The particular purpose of such storage is for evidentiary purposes in the event of a legal dispute. Should it be apparent that the data is still required after the expiry of a six-month period (e.g. due to a legal dispute which is either imminent or pending), then erasure will take place only once the purpose of any further storage has lapsed.
Storage for a longer period may also take place if you have issued corresponding consent (refer Article 6, Paragraph 1, clause (a), GDPR), or if erasure is counter-indicated in the context of statutory obligations to continue storage.