Data protection policy


The protection of your personal data during collection, processing and use during your visit to our homepage is of very serious concern to us. All personal data, such as your name, address, telephone number, e-mail address, account number, etc., as well as all information that can be traced back to you, are referred to as personal data. This also includes the IP address that is automatically transmitted when you visit a website. This is technically absolutely necessary.

We want you to know what data we collect and when, and how we use it. We have adopted technical and organisational measures to ensure that we and any external service providers commissioned by us comply with data protection regulations. In particular, we also take into account the European Union's (EU's) General Data Protection Regulation (GDPR) to be implemented from 25 May 2018. 

Personal data is automatically collected on this website only to a technically necessary extent.

Below you will find information about what data is collected during your visit to our homepage and how it is used.

If you wish to assert your rights (see below), please contact us as the data controller on this website - for contact details please refer to Legal notice.

For fundamental questions or concerns regarding data protection, please contact our external data protection officer (DPO) in writing at datenschutz(at)etol.de. Please enter our company name in the subject line so that the external DPO can assign this more easily.

 

Collection and processing of data


Website access


When accessing our website, we collect the following information as far as possible: browser used, internet provider, device manufacturer (for mobile use), type of device (desktop, mobile phone or tablet), access channel (e.g. direct, search engine, Facebook) and location (country/state only).For this we use Google Analytics (see below) with anonymisation of the IP address. We do not store any other connection data. Due to the anonymisation of the IP address, the information cannot be traced back to the user and is therefore no longer considered "personal".

Storage serves internal system-related purposes, essentially for the security of the availability of our website, among other things in accordance with § 100 of the Telecommunications Act - TKG (malfunction and misuse of telecommunications systems).The basis for this processing is also Art. 6 para. 1(b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.

Please note that the telecommunications service provider is also obliged to store the IP address.

This information is not passed on to other recipients (exception: inquiries from law enforcement authorities on the basis of existing legal bases).Due to the anonymisation, because we do not store the IP address, this traffic data is not relevant to data protection.

We always delete logged website visits after a maximum of 10 weeks.

If we want to use the transmitted IP address for further purposes, this will be explained in more detail below.


Duty to provide information in accordance with Art. 13 of the GDPR

The General Data Protection Regulation obliges us to provide appropriate information each time personal data is collected directly from the data subject. For our website, we gather personal data from you and would therefore like to inform you accordingly. This gathering takes place, for example, if we 

           gather your IP address for the technical provision of the website

           use a tracking tool that uses the IP address

•           receive your input in a contact module for communication with us.


Basic procedure:

Insofar as you make personal data available to us, we use this only to answer your inquiries and for technical administration. An exception is your anonymised IP address for statistical evaluation.

Your personal data will only be passed on or otherwise transmitted to third parties if this is necessary for the purpose of contract processing - in particular passing on order data to suppliers - if this is necessary for billing purposes, if we are legally obliged to do so within the framework of order processing by subcontractors or if you have given your prior consent. You have the right to revoke your consent with future effect at any time.

Stored personal data will be deleted if you revoke your consent to storage, if knowledge of it is no longer necessary to fulfil the purpose pursued by storing it, i.e. if the process is completed and there are no legal deletion periods contradicting this, or if its storage is inadmissible for other legal reasons. If the data cannot be deleted for technical reasons, we will make it anonymous so that a personal reference can no longer be established in the future.

All collection and processing by this website is the responsibility of our company. 

Additional detailed information can be found under the following points.  


Contact form

You can contact us via our website (contact form).After you have selected the area in which you are interested, the type of contact (establishing contact or sending information material) and further details, an e-mail is generated from this on our web server without intermediate storage, which - depending on your selection (interest) - is transmitted unencrypted to an internal area. Please do not transmit any confidential information this way!

If you wish to be contacted, we collect the mandatory fields of first name, surname, telephone number and e-mail address. If you only wish to receive information without contacting us, providing your telephone number is voluntary.

We use this information exclusively to process your request. This requires the process described above. Should it be necessary for the processing of your order, we will involve further departments for the processing of your order, taking into account the applicable legal regulations (e.g. in the context of order processing).If your details have been transmitted for the purpose or in the context of a business relationship with us, we store your contact data in our internal systems. Your actual request can also be kept in internal systems (e.g. ticketing system, e-mail system) to enable internal processing. 

Since we assume an unlimited business relationship, we will only delete or make this data anonymous upon request (see your right to deletion later) or if the purpose for data storage no longer applies, provided that there are no legal retention periods or deletion periods to the contrary.

By submitting your personal data to us, you agree to the processing of your data in accordance with this data protection declaration (consent pursuant to Art. 6 para. 1(a) GDPR).As far as your data is necessary for the fulfilment of a business relationship ("contract"), this is the legal basis of the processing.


Cookies

This website uses cookies in several places. These are small text files stored on your computer and saved by your browser. They can have various different functions: Cookies enable the user to use the internet more comfortably. By setting these, the internet obtains a kind of memory - the website remembers, for example, that a user has already called it up before and makes it unnecessary to re-register for an encrypted page. Cookies also make it possible to determine complex usage and surfing behaviour. You can save information on usage behaviour and transmit this to the user. As a result, the use of cookies enables the creation of a profile that must be viewed critically in terms of data protection law.

Cookies are mainly used in the area of online marketing for displaying personalised advertising. Targeting is the term used to describe activities that are intended to enable target group-oriented advertising to be displayed on websites. A continuation of this advertising strategy is so-called retargeting, in which a provider/advertiser marks the customer by means of a tracking cookie when visiting the company's own homepage and then follows the customer as they browse the internet and regularly places its own advertising as a banner on external sites in order to remind the customer specifically of its own products.

We do not use cookies for targeting on our website.

Furthermore, you can configure your browser to inform you about the use of cookies so that you can decide to accept or reject each cookie. Alternatively, your browser can automatically accept cookies under certain conditions or can always reject them, and you can also tell it to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.

Cookies, which are necessary to carry out the electronic communication process or to provide certain functions desired by you, are stored on the basis of Art. 6 para. 1(f) GDPR ("Processing for the protection of legitimate interests").The website owner has a legitimate interest in storing cookies for the technically correct and optimal delivery of their services. If other cookies (such as those used to analyse your surfing behaviour) are also stored, they will be treated separately in this Privacy Policy.


Links to other websites

Our website contains links to external websites of third parties over whose contents we have no influence. Therefore, we cannot accept any responsibility for their content. Individual providers or operators of the linked pages are always responsible for their content. The linked sites were checked for any legal violations at the time they were linked. Illegal content was not apparent at the time the links were created. Continuous monitoring of the content of linked pages is not, however, reasonable without specific indications of legal violations. Upon notification of violations, we will remove such links immediately. Please note the data protection declarations of the third parties on whose site the link is provided.

 

Your rights - Rights of the data subject under the GDPR

Arts. 12 - 23 GDPR regulate the rights of the data subject, i.e. your rights regarding the handling of your personal data. These essentially oppose us:

           Right to information no later than the time of collection in accordance with Art. 13 GDPR,
             with which we comply through this data protection declaration.

           Right to information according to Art. 15 GDPR

           Right to cancellation according to Art. 17 GDPR

           Right to limitation of processing according to Art. 18 GDPR

           Right of appeal according to Art. 21 GDPR

           As far as applicable: Right to data portability according to Art. 20 GDPR

We will assist you in asserting your rights in accordance with the GDPR and other legislation.

For inquiries regarding the exercise of your rights, please contact the entity listed in Legal notice. Please understand that we can only provide personal information in the interest of other persons' rights if you can identify yourself appropriately. Therefore, we prefer the following path:

Upon written request we will be happy to comply with your request. You will receive a registered letter with the corresponding documents. Due to possible inquiries we ask you for your contact data to be included (email and/or telephone). 

You also have a right of appeal to the competent supervisory authority. The responsible authority is usually the data protection officer of the federal state in which our company is based - for us this is the data protection officer of Baden-Württemberg. A list of data protection officers and their contact details can be found in the following link:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Web analytics

By using our website, you consent to the use of the listed web analysis programs which, in addition to the "legitimate interest" according to Art. 6 para. 1(f) GDPR, are the legal basis for the processing. By activating an objection link or by an appropriate browser configuration you can assert your objection for the future. 

We do not use the data to identify the website visitor, rather for statistical purposes, basically, in order to optimise our website. Among other things, it is important to us to know how anonymous visitors move around our website. The IP address is always shortened in such a way that it is no longer possible to identify the person concerned.

The data will only be passed on if a service provider is involved in the procurement or evaluation of the information within the framework of order processing in accordance with Art. 28 GDPR.

Due to the anonymisation of the IP addresses, no "personal data" is available from this point in time.

 

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”).Google Analytics uses cookies, which are text files that are stored on your computer and which help analyse your use of the website. As a rule, the cookie-generated data regarding your use of this website will be forwarded to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of Art. 6 para. 1(f) GDPR. The website operator has a legitimate interest in analysing (anonymised) user behaviour in order to optimise both its website and its advertising.

The EU data protection requirements require IP anonymisation by shortening the IP address, which we have also set up accordingly. This takes place technically within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before any further transmission takes place. An agreement on order processing has been concluded with the service provider Google in the EU member state.

The full IP address will only be transferred to a Google server in the USA and shortened in exceptional cases. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. You can prevent the storage of cookies by making the appropriate setting through your browser software; we would point out, however, that this may mean you will not be able to enjoy full use of all the functions of this website. You can also prevent disclosure to Google and processing by Google of the data generated by cookies about your use of the website (incl. your IP address), by downloading and installing the browser plugin available via the following link: (http://tools.google.com/dlpage/gaoptout?hl=de)

You can prevent data collection by Google Analytics by clicking on the following link. This sets an opt-out cookie which prevents the future collection of your data when visiting this website: 

Deactivate Google Analytics

 

For more information on Terms of Use and Privacy please visit http://www.google.com/analytics/terms/en.html or under https://www.google.de/intl/de/policies/<.

 

Security warning:

We endeavour to take all possible technical and organisational measures to store your personal data in such a way that it is not accessible to third parties. In the case of communication via an unencrypted e-mail, we cannot guarantee complete data security, so we recommend an encrypted path or the post for confidential information.

 

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the enquiries you send to us as site operator. You can recognise an encrypted connection by the fact that the browser's address line changes from http:// to https:// and by the lock symbol in the browser line. 
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.