Privacy Policy

PRISMA respects your privacy and is committed to processing personal data responsibly and in accordance with applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”).

This Privacy Policy explains how personal data may be collected and processed when you visit our website, contact us or apply for a position within the PRISMA Group.


1. Data Controller

The controller responsible for the operation of this website is:

PRISMA Lighting B.V.
Gustav Mahlerplein 2

1082 MA Amsterdam

The Netherlands

Email: info@prisma-lighting.com
Telephone: +31 20 799 7300

Where personal data are processed in connection with a specific PRISMA group company, that company may act as an independent controller or, where applicable, together with another PRISMA entity.

In particular, for recruitment activities, the PRISMA company offering the relevant position will normally be responsible for processing applicant data.


2. Data Protection Contact

For questions regarding the processing of your personal data or the exercise of your data protection rights, please contact:

Email: privacy@prisma-lighting.com


3. Personal Data We Process

Depending on how you interact with our website, we may process information such as:

  • IP address and technical connection information;

  • browser type, operating system and device information;

  • date and time of website access;

  • pages and resources accessed;

  • information submitted through contact forms;

  • name, email address, telephone number and company;

  • correspondence with PRISMA;

  • cookie and consent information;

  • analytics information where permitted and consented to; and

  • application and recruitment information where you apply for a position.

4. Website Operation and Server Log

4. Website Operation and Server Logs

When you access our website, certain technical information may be processed automatically to provide the website, maintain its security, detect technical problems and protect our IT infrastructure.

Depending on the circumstances, processing may be based on our legitimate interests pursuant to Article 6(1)(f) GDPR, particularly our legitimate interest in operating a secure and reliable corporate website.

Server log information is retained only for as long as reasonably necessary for these purposes unless longer retention is required to investigate security incidents or comply with legal obligations.


5. Contacting PRISMA

If you contact us by email, telephone or through a website contact form, we process the information you provide in order to respond to your inquiry.

Depending on the nature of the communication, processing may be based on:

  • Article 6(1)(b) GDPR where the communication relates to a contract or steps prior to entering into a contract;

  • Article 6(1)(f) GDPR where processing is necessary for legitimate business communication; or

  • Article 6(1)(c) GDPR where processing is necessary to comply with a legal obligation.


6. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Technically necessary technologies may be used where required for the operation, security and functionality of the website.

Analytics, personalization, marketing or other non-essential technologies will only be activated where a valid legal basis exists and, where required by applicable law, after you have provided your consent.

You can find further information in our Cookie Policy and can review or change your choices through Cookie Settings.


7. Analytics and Third-Party Services

Where our website uses analytics or third-party services, such as [Google Analytics / Matomo / LinkedIn / YouTube / Vimeo / Google Maps – confirm actual services], personal data may be transferred to the relevant service provider.

Non-essential services requiring consent will not be activated until the required consent has been obtained.

Detailed information about individual providers, purposes, retention periods and potential international data transfers will be provided in our Cookie Policy and/or consent management platform.


8. International Data Transfers

PRISMA operates internationally. In certain circumstances, personal data may therefore be transferred to PRISMA group companies, service providers or business partners located outside the European Economic Area.

Where such transfers are not covered by an adequacy decision, PRISMA will implement appropriate safeguards as required under applicable data protection law, such as the European Commission's Standard Contractual Clauses, where applicable.

Additional safeguards may be implemented where required.


Job Applicant Privacy Notice


9. Application Data

When you apply for a position within PRISMA, we may process personal data including:

  • name and contact information;

  • CV/resume;

  • education and professional qualifications;

  • employment history;

  • skills and experience;

  • certificates and references;

  • salary expectations;

  • preferred work location;

  • correspondence relating to your application;

  • interview notes and recruitment assessments;

  • work authorization information where relevant;

  • information voluntarily provided by you during the recruitment process; and

  • other information necessary to assess your suitability for the relevant position.

Please do not provide sensitive personal information unless it is necessary for your application or specifically requested and legally permitted.


10. Purposes of Recruitment Processing

We process applicant information primarily to:

  • receive and manage applications;

  • assess qualifications and suitability;

  • communicate with applicants;

  • organize and conduct interviews;

  • compare candidates;

  • make recruitment decisions;

  • prepare an employment relationship;

  • meet legal and regulatory obligations; and

  • establish, exercise or defend legal claims where necessary.

Depending on the applicable jurisdiction and circumstances, processing may be based on Article 6(1)(b) GDPR, Article 6(1)(f) GDPR, Article 6(1)(c) GDPR and relevant national employment and data protection legislation.

Where special categories of personal data are processed, an appropriate legal basis under Article 9 GDPR and applicable national law will be identified.


11. Which PRISMA Company Processes Your Application?

The PRISMA legal entity advertising the position will generally act as the controller for the recruitment process.

Where central HR, management or recruiting functions are provided by another PRISMA group company, applicant information may be shared with that company where necessary for recruitment purposes.

Your application will only be accessible to individuals who reasonably require access for the recruitment process, such as HR personnel, responsible managers and relevant members of the hiring team.


12. Applications for Other PRISMA Positions

We will not automatically retain or use your application for unrelated future vacancies where separate consent is legally required.

If we would like to retain your profile for a PRISMA talent pool or consider you for other positions, we may ask you separately for your consent.

You may withdraw such consent at any time with effect for the future.


13. Recruitment Service Providers

We may use external recruitment platforms, applicant tracking systems, recruitment agencies, IT providers or other service providers.

Where such providers process personal data on our behalf, appropriate contractual and data protection arrangements will be implemented.


14. Applicant Data Retention

Application information will be retained only for as long as necessary for the recruitment process and for any subsequent period required or permitted under applicable employment, anti-discrimination, limitation and data protection laws.

Because PRISMA recruits through different legal entities and jurisdictions, the precise retention period may differ according to the country in which the relevant position is located.

If you consent to inclusion in a talent pool, your information may be retained for the period specified when your consent is requested.


15. Recipients of Personal Data

Depending on the relevant processing activity, personal data may be disclosed to:

  • authorized employees of PRISMA group companies;

  • IT and hosting providers;

  • recruitment service providers;

  • professional advisers;

  • public authorities where required by law; and

  • other service providers where necessary for legitimate business operations.

We do not sell your personal data.


16. Retention of Personal Data

Personal data will be retained only for as long as required for the purposes described in this Privacy Policy, unless applicable law requires or permits a longer retention period.

Retention periods are determined according to the purpose of processing, applicable legal requirements and legitimate requirements concerning the establishment, exercise or defense of legal claims.


17. Your Rights

Subject to the requirements and limitations of applicable law, you may have the right to:

  • request access to your personal data;

  • request correction of inaccurate information;

  • request deletion of personal data;

  • request restriction of processing;

  • object to certain processing based on legitimate interests;

  • receive certain personal data in a portable format;

  • withdraw consent at any time where processing is based on consent; and

  • lodge a complaint with a competent data protection supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Requests concerning these rights can be sent to:

privacy@prisma-lighting.com


18. Automated Decision-Making

PRISMA does not use solely automated decision-making producing legal or similarly significant effects in relation to website visitors or job applicants unless expressly communicated to the individual and permitted by applicable law.


19. Security

PRISMA implements appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.


20. Changes to This Privacy Policy

We may update this Privacy Policy where our processing activities, technologies or legal requirements change.

The current version will always be available on this website.


Last updated: September 2026



Back

Back