With this data protection declaration, we inform you in accordance with the provisions of the Basic Data Protection Regulation (BDPR) about the type, scope and purpose of the processing of personal data in connection with our Internet offer. According to Art. 4 No. 1 BDPR, "personal data" means any information relating to an identified or identifiable natural person (data subject); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
This website is a service of the company
It is responsible for data protection
DATA PROTECTION OFFICER
ecolaw.de Society for Data Security & Data Protection mbH
represented by the managing director, Mr Florian König
Roseggerstrasse 1, D-38440 Wolfsburg
Phone +49 (0)5361 27 29 293
Fax +49 (0)5361 27 29 296
Data protection (a) ecolaw.de
registered in the commercial register of the Braunschweig local court under HRB 203444
The State Commissioner for Data Protection and Freedom of Information, Königstrasse 10 a, 70173 Stuttgart, Tel.: 0711/615541-0, FAX: 0711/615541-15, Mail: firstname.lastname@example.org
Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will be treated in accordance with the relevant statutory data protection regulations, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 June 2016/679 on the protection of personal data in the internal market (Data Protection Directive). April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (the Basic Data Protection Regulation - BDPR), the Federal Data Protection Act (FDPA) and other data-related laws [e.g. the Telemedia Act (TMG)].
According to the BDPR According to these legal principles, data processing and use is in particular only permissible if
(a) the data subject has given his consent to the processing of personal data relating to him for one or more specified purposes
(b) processing is necessary for the performance of a contract to which the data subject is party or in order to implement pre-contractual measures taken at the request of the data subject;
(c) processing is necessary for compliance with a legal obligation to which the controller is subject;
(d) processing is necessary to protect the vital interests of the data subject or of another natural person;
(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(f) processing is necessary in order to protect the legitimate interests of the controller or of a third party except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
Accordingly, we use and process your personal data only within the permissible framework of the contract implementation or if you have given your informed consent.
As a matter of principle, we do not pass on your personal data including your address and e-mail address to third parties. Excluded from this are our service partners who require the transmission of data for the processing of the contractual relationship or if we have expressly pointed this out. In these cases, however, the scope of the transmitted data is always limited to the required minimum.
ANONYMOUS DATA COLLECTION
In principle, you can visit our website without telling us who you are. We only learn the name of your internet service provider, the website from which you visit us and the pages of our website that you visit. This information is evaluated for statistical purposes only. As an individual user, you will remain anonymous in principle, and of course your personal data will not be merged with this information, unless you have expressly consented to this or one of the cases listed below applies.
COLLECTION OF PERSONAL DATA
Personal data is only collected by us if you provide it voluntarily and of your own accord. This can be done, for example, when placing an order or for the execution of a contract, a survey or when registering for services where registration with personal data should be necessary (e.g. for orders, special promotions, competitions, newsletter dispatch or similar). In such cases, we only collect the data that we are legally authorised to collect and that is absolutely necessary for the fulfilment of the services you request (this would normally be your name, your address, your telephone number and your e-mail address, for example, when you register for the newsletter only your e-mail address). If we collect personal data from you (e.g. via a contact or order form), you only have to provide the required data. The mandatory data fields are marked with an "asterisk". All additional data provided by you is purely voluntary and does not have to be disclosed by you. If you nevertheless provide this data, you give us your consent with your disclosure that we may also store and process this data for the purpose stated in each case; in some cases we also request your express consent for data protection purposes, which require express consent, which you can of course give voluntarily, is not bound to any further requirements and can be revoked at any time in the future.
For the highest possible security of your data, it will be transmitted in encrypted form using SSL encryption. This is to prevent misuse of the data by third parties. Your data will be stored and processed by us only on servers within the European Union. A transfer to third countries does not take place on principle, unless we are entitled and/or obliged to do so on the basis of a legal regulation or you have expressly consented to this in advance. However, these cases are then also clearly marked in each case.
PASSING ON TO THIRD PARTIES
We pass on personal data to third parties (processors or other third parties) only to the extent necessary and only under one of the following conditions:
- The data subject has consented to the disclosure
- The disclosure is intended to fulfil contractual obligations or pre-contractual measures at the instigation of the data subject
- We are legally obliged to pass on
- The passing on is based on justified interests of us or a third party
If you use our contact form, you will be asked to provide your name and e-mail address so that we can get in touch with you personally. Further information can be given voluntarily. The data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a BDPR on the basis of your voluntarily given consent. All personal data collected in connection with the contact form will be deleted after completion of your request, unless storage is necessary for the documentation of other processes.
DELETION AND LIMITATION OF COLLECTED DATA
We delete the personal data processed by us in accordance with the provisions of Art. 17 BDPR or restrict the processing of personal data in accordance with the provisions of Art. 18 BDPR. Unless otherwise regulated in this data protection declaration in individual cases, personal data will be deleted if this data is no longer necessary for the purposes for which it was collected or otherwise processed and there is no legal obligation to retain it. If personal data are required for other and legally permissible purposes, they will not be deleted but their processing will be restricted and not processed for other purposes. This applies, for example, to personal data that must be retained by us for commercial or tax law reasons. Thus documents according to § 257 paragraph 1 No. 2 and 3 HGB as well as § 147 paragraph 1 No. 2, 3, 5 AO are kept for 6 years, documents according to § 257 paragraph 1 No. 1 and 4 HGB as well as § 147 paragraph 1 No. 1, 4, 4a AO for 10 years.
DELETION AND LIMITATION OF COLLECTED DATA
As a person affected, you have the right:
to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details of such data;
in accordance with Art. 16 DSGVO, to demand without delay the correction of incorrect or incomplete personal data stored by us;
pursuant to Art. 17 DSGVO to demand the deletion of your personal data stored with us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
pursuant to Art. 18 DSGVO, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing pursuant to Art. 21 DSGVO;
in accordance with Art. 20 DSGVO, to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request its transfer to another responsible party;
in accordance with Art. 21 DSGVO, to object to the processing of your personal data if there are reasons for doing so that arise from your particular situation or if the objection is directed against direct advertising and the legal basis for the processing of the personal data is a legitimate interest in accordance with Art. 6 para. 1 sentence 1 letter f DSGVO.
in accordance with Art. 7 para. 3 DSGVO, to revoke your consent, once granted, at any time vis-à-vis us. As a result, we may no longer continue to process the data based on this consent in the future and
complain to a supervisory authority pursuant to Art. 77 DSGVO. As a rule, you can turn to the supervisory authority of your usual place of residence or workplace or to our office.
If you wish to assert rights of data subjects, you can contact us at the above-mentioned e-mail address or our data protection officer at the above-mentioned e-mail address.
Google's basic statements on data protection at Analytics can be found here [https://www.google.com/analytics/learn/privacy.html?hl=de].
GOOGLE WEB FONTS
This Internet offer uses external fonts from Google, so-called web fonts, to display fonts. To do this, your browser loads the required web font into the browser cache when you call up the website. If your browser does not support this function, a standard font is used by your computer to display the website. This service records your IP address, which of our web pages you have visited and possibly other data required by Google for the provision of the web fonts. The information generated about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on our or Google's behalf.
INTEGRATION OF SERVICES AND CONTENTS OF THIRD PARTIES
It can happen that within this online offer third party content, such as videos from YouTube, map material, RSS feeds or graphics from other websites are integrated. This always presupposes that the providers of these contents (hereinafter referred to as "third-party providers") are aware of the IP address of the users. Without the IP address, they would not be able to send the content to the browser of the respective user. The IP address is therefore necessary for the display of this content. We make every effort to use only such content whose respective providers use the IP address only to deliver the content. However, we have no influence on this if the third-party providers store the IP address for statistical purposes, for example. As far as we are aware of this, we inform the users about it.