With this privacy policy, we inform you about the nature, scope and purpose of processing personal data on our website in accordance with the GDPR (Data Protection General Regulation). With regard to personal data and/or its processing , we refer to Article 4 of the GDPR. Personal data is all data that has a personal connection to you, such as name, address, email address or user behavior.
Responsible under Article 4 of the GDPR:
ECO EFX Solutions GmbH
Hamburger Strasse 180
22083 Hamburg
Germany
0049-40-298 23460
info[at]ecoefxsol.com
Processing your data as part of our company's core activities
We process your personal data transferred to us within the framework of the contractual and pre-contractual relationships that exist between us. The scope, nature, purpose and necessity of the processing depends on the underlying contractual relationship. To do this, we store and process your data in the computer systems we use. The data we process includes all data provided for the purpose of your use of contractual or pre-contractual services and required to process your request or the contract concluded between us Be.
This may include, in particular, the following data:
Processing is limited to those data that are necessary and appropriate to respond to requests and/to fulfill a contract concluded between you and us. The personal data will only be passed on to third parties if this is necessary for the purpose of providing the service or in the context of the organisation of our company in order to process financial accounting as well as to comply with legal obligations. In this case, only those data that are necessary and appropriate to comply with the contract or to process financial accounting and compliance with legal obligations will be transferred to external service providers. We process it in accordance with your instructions or legal requirements. Legal basis: The processing of your personal data as well as the transfer to third parties takes place in accordance with Article 6 (1) lit. (b) GDPR and serves to fulfill the contract between you and us. Moreover, we will only pass on data to third parties if there is a legal obligation to do so, Article 6 (1) lit. (c) GDPR or if there is a legitimate interest in this, Article 6 (1) lit f. GDPR. This is the case, for example, where this is necessary to prosecute our claims. Deletion: Your data are deleted as soon as the data no longer to fulfil contractual or statutory fiduciary duty, as well as for the handling of any warranty and similar obligations are required. The statutory retention obligations remain unaffected thereof.
Transfer of data to third countries
The adoption of the European General Data Protection Regulation (GDPR) has created a unified basis for data protection in Europe. Your data is therefore primarily processed by companies for which GDPR is used. If the processing is carried out by the services of third parties outside the European Union or the European Economic Area, they must have the special requirements of Article 44 ff. GDPR. This means that processing is based on special guarantees, such as the official finding of an EU data protection level or compliance with officially recognised special contractual obligations, which is officially recognised by the EU Commission, The so-called "standard contract clauses." For US companies, submission to the so-called "Privacy Shield," the data protection agreement between the EU and the US, meets these requirements.
Web hosting and Creation From log files
We use us to maintain our online presence of an Internet service provider, on whose server the website is stored (hosting) and which makes our site available on the Internet. In this case, the Internet service provider processes contact data, content data, contract data, usage data, inventory data as well as meta and communication data on our behalf. Legal basis: The Internet service provider processes the aforementioned data on our behalf, Article 28 GDPR. The data processing takes place on the basis of our legitimate interest in the efficient and secure provision of our website, Article 6 (1) lit. f) GDPR.
If you only use our website informationally, only those personal data that the browser you use transmits to its server will be collected by our Internet service provider. This is the following data:
This data, together with other personal data, will not be stored by you.
The aforementioned data is stored as log files on the servers of our Internet service provider. This is necessary to display the website on the device you are using, as well as to ensure stability and security. In the above purposes lies our legitimate interest in data processing. Legal basis: The data processing takes place on the basis of our legitimate interest in the efficient and secure provision of our website, Article 6 (1) lit. f) GDPR. Duration: The above data for the provision of our website is stored for a period of 7 days and then deleted.
Cookies
Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters stored and stored on the device you use. Cookies do not transmit viruses or run programs. Rather, they are primarily used to exchange information between the device you use and our website in order to make our website more user-friendly and effective for you. A distinction must be drawn between temporary (transient) cookies and persistent cookies. Transient cookies include session cookies in particular.
• Session cookies: We use so-called cookies to recognize multiple use of an offer by the same user (e.g. if you have logged in to determine your login status). When you revisit our site, these cookies provide information to automatically recognize you. The information obtained in this way is used to optimise our offerings and to give you easier access to our site. If you close the browser or you log out, the session cookies will be deleted.
• Persistent cookies: These are automatically deleted after a specified duration, which may differ depending on the cookie. In your browser's security settings, you can delete cookies at any time.
• Third-party cookies (third-party cookies): According to your wishes, you can configure your browser setting, such as Reject the acceptance of third-party cookies or all cookies. However, we would like to point out that you may not be able to use all the functions of this website. Read more about these cookies in the respective third-party privacy policy.
The cookies are used to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. In particular, these cookies may store information about voice settings or log-in information.
In addition, we also use cookies on our website, which allow an analysis of your visit to our website. In particular, these cookies may store information about entered search terms, frequency of page views or use of website functions. These cookies allow us to understand how frequently and in what type of website and its functions are used. They serve to improve the quality and user-friendliness of our website, especially the content and functions. This allows us to continuously optimize our offer. The data collected in this way is pseudonymised by technical precautions. Therefore, it is not possible to assign the data to your person. The data will not be stored together with any other personal data concerning you.
In the above purposes lies our legitimate interest in data processing. The legal basis for this is Article 6 (1) of a lite. f GDPR.
Because the cookies are stored on your computer, you as a user also have full control over the use of cookies. You can use your browser's security settings to determine whether cookies are stored at all. For example, you cannot accept cookies from the outset or only on demand, or you can specify that cookies will be deleted after each close to your browser.
You can find out the details in the respective instructions of your browser manufacturer. or at www.aboutcookies.org /or www.allaboutcookies.org
Contradiction and "opt-out": If cookies are disabled for our website, you may no longer be able to use all the functions of the website to the full.
You can use third-party cookies for advertising purposes via an opt-out via this American website (https://optout.aboutads.info) or this European Website (http://www.youronlinechoices.com/de/praferenzmanagement).
Or
The help feature in the menu bar of most web browsers explains how to stop your browser from accepting new cookies, how to let your browser know when you receive a new cookie or how to get all the cookies you have already received Delete and lock for everyone else.
Please do the following:
On Internet Explorer:
1. Select the "Internet Options" point in the Extras menu.
2. Click on the "Privacy" sedab.
3. Now you can make the security settings for the Internet ons. Set whether and which cookies should be accepted or rejected.
4. With "OK," you confirm your setting.
In Firefox:
1. Select the Settings point in the Extras menu.
2. Click on "Privacy."
3. In the drop-down menu, select the "Create by custom settings" entry.
4. Now you can choose whether cookies should be accepted, how long you want to keep these cookies and add exceptions, which websites you always or never want to allow to use cookies.
5. With "OK," you confirm your setting.
In the Google Chrome:
1. Click on the Chrome menu in the browser's toolbar.
2. Select "Settings."
3. Click "Show Advanced Settings."
4. Under "Privacy," click "Content Settings."
5. Under "Cookies," you can make the following settings for cookies:
• Delete cookies
• Block cookies by default
• Delete cookies and website data by default after the browser has been renewed
• Allow exceptions for cookies from certain websites or domains
Memory permanently/erasure
We will delete or block your personal data as soon as the purpose of the storage has been achieved or is omitted, unless its further retention is necessary for evidentiary purposes or is contrary to the statutory retention obligations. This includes, for example, commercial retention obligations of business letters in accordance with § 257 (1) of the German Civil Code (HGB) (6 years) as well as tax retention obligations under § 147 (1) AO of documents (10 years). . Any additional storage will only take place if we are given up on this by national or European rules. In this case, the data will be blocked or deleted if the storage period prescribed in the relevant regulations has expired, unless we need your data to fulfill a contract concluded between us or if this is the case. Assertion, exercise or defence of legal claims.
Details of the contact intake options we have provided
If you contact us via e-mail, social media, telephone, fax, post, our contact form or anything else, providing us with personal data such as your name, telephone number or e-mail address or further information about your person or Concern for your request, this data will be stored and processed in our company for the processing of your request. Legal basis: If you have submitted your request via our contact form, the legal basis for processing your data is Article 6 (1) lit. a GDPR. If you submit your request in the context of contractual or pre-contractual relations with us, the legal basis for processing your data is Article 6 (1) lit. b. GDPR. Unless your request falls within any of the above categories, our legitimate interest in processing your data is to respond to your request properly and in your interest, Article 6 (1) lit. f GDPR. Deletion: The personal data we collect will be deleted if it is no longer required. We check the requirements every 2 years. You can also revoke data processing at any time.
Registration
You have the option to register on our website and create a user account in order to be able to access specific content on our website. This requires the disclosure of personal data resulting from the input mask. The data requested there includes, in particular, your name, password and e-mail address. This data is stored and processed by us to give you access to your user account. The data can be changed or deleted by you at any time. The data will not be passed on to third parties unless they are used to process the contract. In order to protect you and us from abusive registrations, we store the IP address used in registration, as well as the date and time of registration. This data will not be shared with third parties. Legal basis:We process your data on the basis of Article 6 (1) lit. b GDPR for the purpose of providing your user account. Deletion: The personal data, as well as IP address, date and time will be stored until the purpose for this is omitted. The data collected as part of the registration process will take place as soon as the corresponding account is deleted or changed on our website: You can delete your account at any time or delete it by the above for processing Demanding those responsible.
Insist a Automated decision-making
We do not use automatic decision-making or profiling
Contact via contact form/email/fax/post
Newsletter
We regularly send out a newsletter to inform our customers and business partners and interested parties about our offers and related news. You have the opportunity to register for our newsletter on our website and to enter the newsletter as part of the registration process. When you sign up for our newsletter, it is mandatory to provide your e-mail address. We store the e-mail address in order to be able to send you the newsletter. The disclosure of further data, such as address or name, is voluntary and will be used to address you personally. As soon as you register for our newsletter, you will receive a confirmation email to the e-mail address stored at the time of registration in the so-called double-opt-in procedure. This email contains a link. When you click on this link, you confirm that you want to receive the newsletter. This ensures that your email address was not misused by a third party when you signed up. For the same reason, we store the date and time of registration, as well as the IP address assigned to you when you sign up. We do not disclose the aforementioned data to third parties. Legal basis: The legal basis for processing your data is Article 6 (1) lit. a GDPR. Deletion: The E-Mail address will be deleted either, if you 1 month after sending the confirmation E-mail in the double-opt-in proceed have not clicked on the confirmation link, or directly after you have unsubscribed from our newsletter. Withdrawal: You can at any time revoke your consent to receive the newsletter and unsubscribe from the subscription of the newsletter. We offer following options, which you can explain the revocation:
Shipping by shipping service providers
We have commissioned the following shipping service providers to send our newsletter: Tilda Publishing Ltd. Republic of Ireland (Registration number 671800). You can view its privacy policy here: https://tilda.cc/privacy. The shipping service provider is based outside the EU. It is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law. The shipping service provider can use your data in pseudonymous form, i.e. without assigning to a user, to optimize or improve its own services, e.g. for the technical optimization of the shipment and presentation of the newsletters or for statistical purposes Use. However, the shipping service provider is not entitled to write to you or share your data with third parties. Legal basis: The shipping service provider is based on our legitimate interests in the proper sending of the newsletter in accordance with Article 6 (1) lit. f GDPR and acting for us under an order processing contract in accordance with Article 28 (3) p. 1 GDPR.
Evaluation of user behaviour
If you have consented to this, we will evaluate your user behaviour when sending the newsletter. For this purpose, our newsletter includes tracking pixels as well as tracking links. This allows us to see if and when you opened the newsletter and if and which links you clicked on in the newsletter. Purpose: We evaluate the newsletter as described above in order to be able to measure a statistical analysis of the success or failure of our newsletter. Legal basis:The legal basis for processing your data is Article 6 (1) lit. a GDPR. Preventing: You can revoke your consent to receive the newsletter at any time via the above options. Deletion:We will delete your data after revocation has taken place.
Your rights under the GDPR
According to the GDPR, you are entitled to the following rights, which you can assert at any time with the person responsible for the person responsible for this Privacy Statement:
Revocation
Pursuant to Article 7 (3) of the GDPR, you have the right to revoke your consent to the processing of your data at any time. The revocation you have declared does not alter the legality of the processing of your personal data until the revocation.
Right to object
For reasons arising from your particular situation, you have the right to object at any time to the processing of the personal data concerning you, which is due to a balance of interest (Article 6 (1) of a split GDPR). This is particularly the case where data processing is not required to fulfil a contract. If you exercise your right to object, please explain the reasons. We will no longer process your personal data unless we can prove to you that compelling reasons for data processing are worthy of protection.
Regardless of what is said above, you have the right at all to object to the processing of your personal data for the purposes of advertising and data analysis.
Please address your objection to the contact address provided above by the person responsible.
YouTube Videos
Google ReCAPTCHA
Google Maps
Presence on social media
• Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Privacy Policy: https://www.facebook.com/about/privacy/ ,
Opt-Out: https://www.facebook.com/settings?tab=ads
And
http://www.youronlinechoices.com
PrivacyShield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active .
• Google + (Google Ireland Limited, Registernr.: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) – Privacy Policy: https://policies.google.com/privacy, opt-out: https://adssettings.google.com/authenticated , Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .
• Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)-Privacy Policy : https://twitter.com/de/privacy,opt-out: https://twitter.com/personalization, Privacy Shield : https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active .
• LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) – Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Cookie Policy and Opt-Out : https://www.linkedin.com/legal/cookie-policy, Privacy Shield of the US company LinkedIn Inc.: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active .
Social media plug-ins
Twitter/ X
Google Plus
Our website uses functions of the network LinkedIn. Provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Every time you access one of our pages, which contains functions of LinkedIn, a connection is established to servers of LinkedIn. LinkedIn is informed that you have visited our website with your IP address. If you click on the "Recommend" button of LinkedIn and are logged into your account on LinkedIn, LinkedIn is able to assign your visit to our website to you and your user account. We would like to point out that
The fact that we, as the provider of the pages, have no knowledge of the content of the transmitted data as well as its use by LinkedIn.
For more information, see LinkedIn's privacy policy at:
Google Analytics
In addition to the above-mentioned analysis reports, Google Analytics 4 also offers, among other things the following functions:
Name: _ga
Value: 2.1326744211.152331725887362-5
Purpose: By default, analytics.js uses the _ga cookie to store the user ID. Basically, it is used to distinguish website visitors.
Expiry date: after 2 years
Name: _gid
Value: 2.1687193234.152331725887362-1
Purpose: The cookie is also used to distinguish website visitors
Expiry date: after 24 hours
Name: _gat_gtag_UA_<property-id>
Value: 1
Intended use: Used to reduce the request rate. If Google Analytics is provided via Google Tag Manager, this cookie is named _dc_gtm_ <property-id>.
Expiry date: after 1 minute
Note: This list cannot claim to be complete, as Google continually changes its choice of cookies. GA4 also aims to improve data protection. Therefore, the tool offers some options for controlling data collection. For example, we can set the storage period ourselves and also control data collection.
Here we show you an overview of the main types of data used by Google Analytics are collected:
Heatmaps: Google creates so-called heatmaps. Heatmaps show exactly the areas you click on. This gives us information about where you are on our site.
Session duration: Google refers to the time that you spend on our site without leaving the site. If you have been inactive for 20 minutes, it ends session automatically.
Bounce rate: A bounce is when you only view one page on our website and then leave our website again.
Account creation: When you create an account or order on our website Google Analytics collects this data. Location: IP addresses are not logged or stored in Google Analytics. However, shortly before the IP address is deleted, derivatives for location data are used.
Technical Information: Technical information includes, but is not limited to, your Browser type, your internet provider or your screen resolution.
Source of origin: Google Analytics or we are of course also interested in which website or advertising you came to our site from.
Other data includes contact details, any reviews, playing media (e.g. when you play a video via our site), sharing content via social media or adding it to your favorites. The list does not claim to be complete and only serves as a general guide to data storage by Google Analytics.
3. The data will be stored for how long and where Google has their servers spread all over the world. You can read exactly where the Google data centers are located here: https://www.google.com/about/datacenters/locations/?hl=de. Your data is distributed on different physical storage media. This has the advantage that the data can be accessed more quickly and is better protected against manipulation. Every Google data center has appropriate emergency programs for your data. For example, if Google's hardware fails or natural disasters paralyze servers, the risk of service disruption at Google remains low. The retention period of the data depends on the properties used. The storage period is always determined specifically for each individual property. Google Analytics offers us four options for controlling storage duration:
There is also the option that data will only be deleted if you no longer visit our website within the period chosen by us. In this case, the retention period will be reset each time you visit our website again within the specified period.
Once the specified period has expired, the data will be deleted once a month. This retention period applies to your data linked to cookies, user recognition and advertising IDs (e.g. cookies from the DoubleClick domain). Report results are based on aggregated data and are stored independently of user data. Aggregated Data is a fusion of individual data into a larger unit.
4. How can I erase my data and/ or prevent the storage of my data Under European Union data protection law, you have the right to access, update, delete or restrict your data. You can prevent Google Analytics 4 from using your data using the browser add-on to deactivate Google Analytics JavaScript (analytics.js, gtag.js). You can download and install the browser add-on at https://tools.google.com/dpage/gaoptout?hl=de. Please note that this add-on only deactivates data collection by Google Analytics. If you generally want to deactivate, delete or manage cookies, you will find the relevant links to the relevant instructions for the most popular browsers under the “Cookies” section.
5. Legal The use of Google Analytics requires your consent, which we obtained with our cookie popup. This consent constitutes according to Art. 6 Para. 1 lit. a GDPR (Consent) represents the legal basis for the processing of personal data, as may occur when collected by web analytics tools. In addition to consent, we have a legitimate interest in analyzing the behavior of website visitors and thus improving our offering technically and economically. With the help of Google Analytics, we recognize errors on the website, identify attacks and improve profitability. The legal basis for this is Article 6 Paragraph 1 Letter f GDPR (legitimate interests). However, we only use Google Analytics if you have given your consent. Google also processes your data in the USA, among other places. Google is an active participant in the EU-US Data Privacy Framework, which regulates the correct and secure transfer of personal data from EU citizens to the USA. More information can be found at https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.
Google also uses so-called standard contractual clauses = Article 46, paragraphs 2 and 3 GDPR). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the resolution and the corresponding standard contractual clauses here: https://eur- lex.europa.eu/eli/dec_impl/2021/914/oi?locale=de
The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/
We hope we were able to provide you with the most important information about data processing by Google Analytics. If you want to find out more about the tracking service, we recommend these two links: https://marketingplatform.google.com/about/analytics/terms/de/ and https://support.google.com/analytics/answer/6004245?hl=de. If you want to find out more about data processing, please use the Google data protection declaration at https://policies.google.com/privacy?hl=de.
Cloudflare
We use Cloudflare from Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) to make our website faster and more secure. Cloudflare uses cookies and processes user data. Cloudflare, Inc. is an American company that offers a content delivery network and various security services. These services are between the user and our hosting provider. We will try to explain in more detail what this all means below. A Content Delivery Network (CDN), like the one provided by Cloudflare, is nothing more than a network of connected servers. Cloudflare has servers like this distributed around the world to get websites to your screen faster. To put it simply, Cloudflare creates copies of our website and places them on their own servers. When you now visit our website, a load balancing system ensures that the largest parts of our website are delivered from the server that can display our website to you the fastest. The data transfer route to your browser is significantly shortened by a CDN. This means that the content of our website is delivered to you by Cloudflare not only from our hosting server, but from servers from all over the world. The use of Cloudflare is particularly helpful for users from abroad, as the site can be delivered from a nearby server. In addition to quickly delivering websites, Cloudflare also offers various security services, such as DDoS protection or web applications Firewall on.
Safety measures
We also take state-of-the-art technical and organisational security measures to comply with data protection laws and to prevent accidental or intentional manipulation, partial or complete loss, Destruction or against unauthorized access of third parties.