The operator of this website - hereinafter referred to as the operator - attaches the utmost importance to protecting the privacy of its website visitors - hereinafter referred to as users. The processing of all data provided to the operator is carried out exclusively in strict compliance with the General Data Protection Regulation (EU DSGVO) and all other data protection laws or provisions of a data protection nature applicable in the member states of the EU. This applies in particular to the processing of personal data.
Person responsible for data processing
Responsible for the processing in the sense of the data protection regulations is:
Econic One GmbH
Alfred-Herrhausen-Allee 3-5
65760 Eschborn
Telephone: +49 6196 783 3013
E-mail: customercare@econicone.com
Definitions
This data protection declaration uses legal terms defined in Art. 4 DSGVO. Accordingly, personal data is any information relating to at least one identifiable natural person (Art. 4 No. 1 DSGVO). The term processing includes every practically conceivable type of use in connection with personal data (Art. 4 No. 2 DSGVO), i.e. from collection to destruction.
Data processing during website call-up
The associated store application is provided via the web service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. The Operator shall also comply with the EU GDPR and all other data protection laws or regulations of a data protection nature applicable in the Member States of the EU. In addition, the Operator has concluded an order processing agreement with Shopify. This is a contract in which Shopify undertakes to protect the transmitted data, to process it in accordance with the data protection provisions on behalf of the operator of this website and, in particular, not to pass it on to third parties. Users can obtain further information on data processing by the operator athttps://help.shopify.com/de/manual/your-account/privacy.
Every time a web page is accessed, data is collected and stored in the log files of the server and the web application. The following usage data is collected: Internet protocol address (IP address) of the user, date and time of the call, the call (request), the response status (HTTP status code), URL of the website through which the call came to the current website or file (referer), browser type and version, and the operating system of the user.
The log files are stored to ensure the functionality of the website and the web application. In addition, the data is used for statistical evaluations to optimize the website in the interest of the user and to ensure the security and stability of the information technology systems. The data processing is based on legitimate interests within the meaning of Art. 6 para. 1 p. 1 f.) DSGVO. The operator guarantees that the data will not be merged with other data sources. The log files are stored separately from the user's personal data collected via form entries. The deletion of the log files is carried out according to general principles (see "General information on the deletion of data").
Data processing by cookies and other technologies
This website uses so-called "cookies". Cookies are small text files that are stored on the web server of the operator or the user's platform (PC, tablet, smartphone, etc.) and contain data that allows the website to recognize and identify the user's Internet browser.
This website uses cookies that are necessary for the operation of the website. These cookies are stored on the user's platform for the duration of the visit to the website and are regularly deleted automatically as soon as the user closes the browser (so-called session cookies). In such a cookie, the only information stored is a characteristic string of characters that allows the browser to be uniquely identified when the website is accessed again (so-called session ID).
This website also uses cookies and technologies that help the operator to improve the website and operate it economically. Details of the associated technologies (e.g. Google Analytics) are explained in detail below. The use of these technologies makes it easier for the user to use this website. These technologies require the storage of cookies and are only activated after prior explicit consent of the user via the privacy settings, whereby the consent can be revoked at any time via the button ("Edit settings").
Data processing via cookies is based on legitimate interests within the meaning of Art. 6 para. 1 p. 1 f.) DSGVO. The user can prevent or restrict the storage of cookies at any time via the corresponding settings of his internet browser. Cookies that have already been stored can be deleted at any time via the Internet browser. The operator points out that this option may limit the usability of the website.
Data processing by JavaScript libraries
This website uses JavaScript libraries of external operators. The use of JavaScript libraries enables the usability of individual functionalities of this website in the first place, which in turn makes it easier for the user to use this website.
It cannot be ruled out that personal data will be transmitted to the external operators when the website is called up. The data processing is based on legitimate interests within the meaning of Art. 6 para. 1 p. 1 f.) DSGVO. Users can prevent the transfer by installing a JavaScript blocker such as the browser plugin "NoScript" (https://noscript.net) or disabling JavaScript through browser settings. The operator points out that this option may limit a usability of the website.
Data processing in connection with orders
In the form query in connection with an order, unless the user is already registered and logged in, in addition to the order data, the following data is mandatory: name, address, telephone number, e-mail address. In addition, the date and time of the order and the general data registered by website access (see "Data processing for website access") will be collected. The data is stored exclusively for the purpose of processing the order and fulfilling the (pre-)contractual obligations.
Data will only be passed on to third parties if and insofar as this is necessary for the fulfillment of the operator's (pre-)contractual obligations or on the basis of the operator's legitimate interests in the economic and effective processing of the order and payment process.
If the user selects a payment via a payment service of the operator Paypal, the order data will be forwarded to the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 (Luxembourg). Reference is made to the privacy policy of Paypal in addition:https://www.paypal.com/de/webapps/mpp/ua/privacy-full. When selecting a payment method offered via the payment service "Klarna", payment processing is carried out via the Swedish payment service provider Klarna AB, Sveavägen 46, 111 34 Stockholm. We refer to the privacy policy of Klarna in addition:https://www.klarna.com/de/datenschutz.
On our website we offer, among other things, payment by credit card (Visa, MasterCard, American Express). Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland (hereinafter "Stripe") is responsible for processing this payment option. If you pay by credit card, the payment is processed by the payment service provider "Stripe", to whom we pass on the information provided during the ordering process together with information about your order (name, address, account number, bank code, credit card number, if applicable, invoice amount, currency and transaction number). Your data will only be passed on for the purpose of payment processing. Neither we nor third parties have access to your account data. The transfer of your data to Stripe Payments Europe Ltd is based on Art. 6 (1) a DSGVO (consent) and Art. 6 (1) b DSGVO (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.
For details on payment with Stripe, please refer to Stripe's T&Cs and Privacy Policy at: https://stripe.com/de/terms
If the user selects included or additional insurance services, the order and item data will be forwarded to the Belgian insurance service provider Quover SA/NV, Rue de Commerce, 31 1000 Brussels (Belgium). Reference is made to the privacy policy of Quover in addition:https://www.qover.com/terms-and-policies.
The delivery of the goods takes place via the shipping service provider to be added. Reference is made to the privacy policy of the service provider supplementary: Dachser, UPS, DPD or DHL. The user's e-mail address will only be passed on to the parcel service provider in connection with shipment tracking and after the user's express consent.
The data processing of the mandatory requested data is based on Art. 6 para. 1 p. 1 b.) and Art. 6 para. 1 p. 1 f.) DSGVO, otherwise additionally from Art. 6 para. 1 p. 1 a.), 7 DSGVO. The transfer of data to third parties is based on Art. 6 para. 1 p. 1 b.) and Art. 6 para. 1 p. 1 f.) DSGVO. The deletion of data is carried out according to general principles (see "General information on the deletion of data"). Information material and calculator from “Jobrad” is from the third-party provider “JobRad GmbH, Heinrich-von-Stephan-Str. 13, 79100 Fribourg. Data protection declaration: https://www.jobrad.org/datenschutz.html.
Google Analytics
This website uses functions of the web analytics service Google Analytics. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland - hereinafter referred to as Google. Google Analytics also uses so-called "cookies", which are stored on the user's platform and enable an analysis of the website visit. The data generated by the cookie is usually transferred to a Google server and stored there.
Google uses the data on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity. The Internet protocol address (IP address) transmitted by Google Analytics will not be merged with any other data held by Google.
The operator must also comply with the EU Data Protection Regulation (DSGVO) and all other data protection laws or provisions of a data protection nature applicable in the member states of the EU. It is not excluded that in the process data processing takes place outside the scope of application of EU law. Athttps://www.google.com/settings/ads/,Users can make settings to restrict data processing. In addition, the operator has concluded an order processing agreement with Google. This is a contract in which Google undertakes to protect the transmitted data, to process it in accordance with the data protection provisions on behalf of the operator of this website and, in particular, not to pass it on to third parties.
The operator of this website uses Google Analytics only with activated IP anonymization. This means that the transmitted Internet Protocol address (IP address) is truncated by Google before transmission within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the unabbreviated IP address be transmitted to a Google server and shortened there.
The data processing is based on legitimate interests within the meaning of Art. 6 para. 1 p. 1 f.) DSGVO. The data is required to enable the correct display of the website and to continuously optimize the website for the benefit of the user. Incidentally, use only takes place after prior consent in accordance with Art. 6 para. 1 p. 1 a.), 7 DSGVO (see "Data processing by cookies and other technologies").
The User can prevent or restrict the storage of cookies at any time via the corresponding settings of his Internet browser. The Operator points out that this option may limit a usability of the Website. In addition, the User can prevent data processing by downloading and installing the browser plugin available at the following link:https://tools.google.com/dlpage/gaoptout?hl=de. Users can find more information on data processing athttp://www.google.com/analytics/terms/de.html or athttps://www.google.de/intl/de/policies/.
Data processing and Newsletter registration
The operator of this website sends newsletters only with the consent of the recipient or based on a legal permission. If the newsletter contents are specifically described in the newsletter registration, they are covered by the user's consent. Otherwise, the newsletters contain promotional information about products, offers or services of the operator of this website. The user can revoke his consent to receive the newsletter at any time and free of charge. Each newsletter contains a clearly perceptible link to revoke the newsletter.
The data processing of the mandatory requested e-mail address is based on Art. 6 para. 1 p. 1 a.), 7 DSGVO in conjunction with § 7 para. 2 No. 3 UWG or on the basis of the legal permission pursuant to § 7 para. 3 UWG. The deletion of data is carried out in accordance with general principles (see "General information on the deletion of data").
Using the Facebook Pixel
We use the "Custom Audiences" remarketing function of Facebook Ireland Limited Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland "Facebook") on our website. Facebook Ireland and we are jointly responsible for the collection of your data that takes place when the service is integrated and the transmission of this data to Facebook.
The basis for this is an agreement between us and Facebook Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://www.facebook.com/legal/controller_addendum. According to this, we are particularly responsible for fulfilling the information obligations in accordance with Art. 13, 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service and for complying with the obligations in accordance with Art. 33 , 34 GDPR to the extent that a personal data breach affects our obligations under the Joint Processing Agreement.
Facebook Ireland is responsible for enabling the rights of data subjects in accordance with Art. 15 - 20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the service and the obligations under Art. 33, 34 GDPR, insofar as a violation of the Protection of Personal Data affects Facebook Ireland's obligations under the Joint Processing Agreement.
The purpose of the application is to target visitors to the website with interest-based advertising on the social network Facebook. For this purpose, the Facebook remarketing tag was implemented on the website. This tag is used to establish a direct connection to the Facebook servers when you visit the website. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. If you visit the social network Facebook, you will then be shown personalized, interest-based Facebook ads. Your data may be transmitted to the USA.
There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum. Cookies or comparable technologies are used with your consent on the basis of Section 15 (3) sentence 1 TMG in conjunction with Article 6 (1) (a) GDPR. Your personal data will be processed with your consent on the basis of Article 6 Paragraph 1 Letter a GDPR.
You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation. You can find more information about the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook's data protection information at https://www.facebook.com/about/privacy/.
Usage of YouTube
We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”) affiliated company. The function displays videos stored on YouTube in an iFrame on the website. The option "Extended data protection mode" is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about it sent to YouTube and stored there. Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transmission takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.
Cookies or comparable technologies are used on the basis of Article 15, Paragraph 3 1 TMG. The processing of your personal data takes place on the basis of Article 6 Paragraph 1 Letter f GDPR from our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation. You can find more information about the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy in YouTube's data protection information at https://www.youtube.com/t/privacy.
Instragram
As the operator of the Instagram page, we (State Capital Erfurt Municipal Administration, Fischmarkt 1, 99084 Erfurt, Germany) together with the operator of the social network Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland) are responsible within the meaning of Art 4 No. 7 of the General Data Protection Regulation (GDPR).
When you visit our Instagram page, personal data is processed by those responsible. In the following we will inform you about what data is involved, how it is processed and what rights you are entitled to in this regard. As the person responsible for this page, we have made agreements with Facebook which, among other things, regulate the conditions for using the Instagram page. The terms of use of Instagram and the other conditions and guidelines listed there at the end are decisive. We would like to point out that you use this Instagram page and its functions at your own risk. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).
Data processing of the contact form
When the user contacts us via the contact form, only the e-mail address is compulsorily requested. In addition, the date and time of entry as well as the general data registered by website access (see "Data processing for website access") are collected. In addition to the voluntary information, the data is stored exclusively for the purpose of processing the contact request and for the fulfillment of (pre-)contractual obligations.
The data processing of the mandatory requested data is based on Art. 6 para. 1 p. 1 b.) and Art. 6 para. 1 p. 1 f.) DSGVO, otherwise additionally on Art. 6 para. 1 p. 1 a.), 7 DSGVO. The deletion of data is carried out according to general principles (see "General information on the deletion of data").
Data processing after contacting us by e-mail or telephone
When the user contacts us by mail or telephone, the e-mail address or telephone number is compulsorily collected. In addition to other voluntary information, the data is stored exclusively for the purpose of processing the contact and for the fulfillment of (pre-)contractual obligations.
The data processing of the mandatory requested data is based on Art. 6 para. 1 p. 1 b.) and Art. 6 para. 1 p. 1 f.) DSGVO, otherwise additionally on Art. 6 para. 1 p. 1 a.), 7 DSGVO. The deletion of data is carried out according to general principles (see "General information on the deletion of data").
General principles for the deletion of data
Personal data will generally be deleted immediately after the purpose for which it was stored has been fulfilled, insofar as the statutory retention periods do not stipulate extended retention (cf. §§ 257 Para. 1 HGB: 6 years, 147 Para. 1 AO: 10 years) or retention is required for evidentiary purposes. Proper deletion is checked on an annual basis. If the data is not deleted because it is required for other and legally permissible purposes, its processing is restricted.
Security measures of the operator
The Operator shall, in accordance with Article 32 of the GDPR and taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the data processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of the data subjects, take appropriate organizational, contractual and technical measures on an ongoing basis to ensure that the provisions of data protection law are complied with and to protect the data that are the subject of data processing against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. The operator has already taken the protection of personal data into account in the technical development and design of the website (Art. 25 DSGVO). The security measures include, in particular, the encrypted transmission of data between the user's browser and the operator's server.
Rights of the user
The user has the right to request information at any time as to whether and which of the user's personal data is being processed (Art. 15 DSGVO). Upon request, the User's personal data must be surrendered in a structured, common and machine-readable format (Art. 20 DSGVO).
Furthermore, the user has the right to have incorrect or incomplete personal data corrected (Art. 16 DSGVO) and - under the conditions of Art. 18 DSGVO - the right to restrict processing.
Unless processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest
or for the assertion, exercise or defense of legal claims, the user may also request the erasure of his personal data (Art. 17 DSGVO).
Consents to data processing within the meaning of Art. 6 para. 1 p. 1 a.), 7 DSGVO can be revoked by the user at any time with effect for the future. If the data processing is based on Art. 6 para. 1 p. 1 f.) DSGVO, the User may object to the data processing with effect for the future, unless the Operator can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the User, or the processing serves to assert, exercise or defend legal claims of the Website Operator (Art. 21 DSGVO).
If the user is of the opinion that the processing of his personal data violates data protection regulations, he may lodge a complaint with the competent supervisory authority (Art. 77 DSGVO). The supervisory authority responsible for the operator of this website is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden.
