Privacy Notice

1. General information

1.1 What is personal data

Personal data is any information that discloses or may disclose the identity of the user. We adhere to the policy of data avoidance. As far as possible, we refrain from collecting personal data.

1.2 Handling of personal data

Personal data is used only for the purpose of establishing the contract, formulating its content, implementing or handling the contractual relationship (Art. 6 I S. 1 b DSGVO). In addition, personal data will only be processed if we have received your consent (Art. 6 I S. 1 a DSGVO). As a matter of policy, they will not be passed on to third parties. The data will only be passed on to the shipping company commissioned with the delivery for the fulfilment of the contract, insofar as this is necessary for the delivery of ordered goods. To complete payments, the necessary payment data will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider. The processing of your personal data takes place exclusively within the EU, unless otherwise stated below.

1.3 Usage data

When visiting the website, general technical information is collected. That includes the used IP address, time, duration of the visit, browser type and, if applicable, the source page. This usage data is registered in a log file for technical reasons and can be used and stored for the purpose of statistical evaluation. There is no link between this usage data and your other personal data.

1.4 Registration data

Registration is required for the full use of the functions of our website. The registration data is collected through your corresponding entries and used for the specifically stated purpose according to your consent (Art. 6 I S. 1 a DSGVO).

1.5 Duration of storage

We store your personal data after the end of the purpose for which the data was collected, only as long as this is necessary due to legal (especially tax) regulations.

2. Your rights

2.1 Information

You can request information from us as to whether we are processing personal data about you and, if this is the case, you have the right to be informed about this personal data and to receive the further information mentioned in Art. 15 DSGVO.

2.2 Right of rectification

You have the right to correct your incorrect personal data and to request the completion of incomplete personal data, in accordance with Art. 16 DSGVO.

2.3 Right of deletion

You have the right to claim the immediate deletion of personal data. We are obliged to delete them immediately, especially if one of the following reasons applies:

Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
You revoke your consent on which the processing of your data was based and there is no other legal basis for the processing.
Your data have been processed unlawfully.
The right of deletion does not exist insofar as your personal data is necessary for the assertion, exercise or defence of our legal claims.

2.4 Right of limitation of processing

You have the right to request the limitation of the processing of your personal data if:

you doubt the accuracy of the data and we therefore check the accuracy,
the processing is not legal and you refuse to delete it and instead demand the restriction of use
we no longer need the data, but you need the data to assert, exercise or defend legal claims,
you have filed an opposition to the processing of your data and it is not yet clear whether our legitimate reasons outweigh your reasons.

2.5 Right of data transferability

You have the right to receive your personal data in a structured, common and machine-readable format and you have the right to transfer this data to another controller without any hindrance from us, provided that the processing is based on consent or a contract and that the processing is carried out by us using automated procedures.

2.6 Right of withdrawal

If the processing of your personal data is based on consent, you have the right to revoke this consent at any time.

2.7 General and right of appeal

The exercise of your rights mentioned above is basically free of charge for you. You have the right to contact the responsible supervisory institution, the State Data Protection Commissioner, directly in the event of complaints.

3. Data security

3.1 Data security

All data on our website is protected by technical and organisational measures against loss, destruction, access, modification and distribution.

3.2 Sessions and cookies

For the operation of our website we may use cookies or server-side sessions in which data can be stored. Cookies are files that a website stores on your hard drive in order to automatically recognize this computer the next time you visit the website and thus to be able to adapt the use of the website to you. Some of the used cookies are deleted after the browser session ends. These are so-called session cookies. Other cookies remain on your terminal device and enable the browser to be recognised when you visit our website later (permanent cookies). You can configurate the settings of your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Please note that you may not be able to use some functions of this website if cookies are deactivated. We ensure that no personal data is taken from sessions or through cookies and that cookies are only used if technically necessary for the website. This means that the balance of interests shows that there are no overriding interests on your part that conflict with this (Art. 6 I p. 1 f DSGVO).

4. Newsletter

If you register for our newsletter, we will use the data required for this purpose or separately provided by you to send you our e-mail newsletter on a regular basis. You can unsubscribe from the newsletter at any time and can either be done by sending us a message via the contact options given in the imprint or via the link provided for this purpose in the newsletter.

5. Services of third party providers

5.1 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google and operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), collects and stores data via this web-analytics-service, from which usage profiles are created using pseudonyms. The created user profiles in this way are used to evaluate visitor behaviour in order to design and improve the services presented on this website. Google Analytics uses “cookies”, which are small text files placed on your computer, to help the website analyzing how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, in the event that IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before. Only in exceptional cases the full IP address will be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google. The user profiles maintained under a pseudonym are also not merged with the personal data of the user without its explicit and separately declared consent of the user. You can refuse the use of cookies by selecting the appropriate settings on your browser, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de).
You can view Google’s privacy policy at http://www.google.de/intl/de/policies/privacy/. Further information on terms of use and data protection can be found at: http://www.google.com/analytics/terms/de.html or via http://www.google.com/intl/de/analytics/privacyoverview.html. We inform you that on this website Google Analytics has been extended by the code “anonymizeIp” in order to guarantee an anonymized collection of IP addresses (so-called IP-Masking).

5.2 Social media links

We have our own social media pages at the third-party providers that can be reached via links from this website. By using these links you will be directed to the respective websites of the third party providers (e.g. Facebook, Twitter, Google+). As soon as you have called up the page of the third party providers, you are in the area of responsibility of the respective third party provider, so that their data protection declaration or their declarations on the use of data also apply. We have no influence on this, but to avoid unnecessary data transfer, we recommend that you log out of the respective third-party provider before using a link, so that the use of the link does not lead to the creation of user profiles by the third-party provider.

5.3 Google Web Fonts

In addition, we use so-called Web Fonts from Google to provide you with a uniform font on our website. These are automatically stored in your browser cache when you call up one of our pages to enable the desired layout. If your browser does not support the Web Fonts used, a standard font of your computer may be used. This does not affect any user interests that outweigh this technical necessity (Art. 6 I p. 1 f DSGVO). You can view Google’s privacy policy here: https://www.google.com/policies/privacy/. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq.

5.4 LiveChat Drift

Data collection through the use of live chat. This website uses Drift, a live chat software from Drift, Inc. (https://www.drift.com). Drift uses, among other things, “cookies”, text files that are stored on your computer and that allow a personal conversation in the form of a real-time chat on the website with you. Your data transmitted in the live chat is stored on servers of Drift, Inc. in the USA. By using the live chat, you consent to this transmission. The privacy policy of Drift, Inc. privacy policy can be found here: https://www.drift.com/privacy-policy/

5.5 Hotjar

On our website we use Hotjar, an analysis software of Hotjar Ltd. (“Hotjar”) (http://www.hotjar.com, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta, Europe). With Hotjar we have the opportunity to measure and evaluate your clicks, mouse movements etc. on our website. The information generated by the “tracking code” and “cookie” about your visit to our website is transmitted to the Hotjar servers in Ireland and stored there. Cookies from Hotjar can remain valid for up to 365 days. The following information is collected:

Specific data about your end device

The following information is collected in relation to your end device and your browser:
IP address of the terminal device (it is collected and stored in anonymous form);
Resolution of the screen/display of the terminal device screen;
terminal device type (individual terminal device identification features), operating system, and browser type;
geographical location (country only);
preferred language when displaying the Hotjar-based web page.

User Interactions

Mouse events (movements, position and clicks);
log data

Randomly, Hotjar’s servers record information that is collected from our website and Hotjar’s website automatically. Among other things, the following data is recorded:

referring domain;
visited pages;
geographic location (country only);
preferred language when viewing the website;
date and time when the website pages were accessed.

This information is used by Hotjar to evaluate your use of our website, to generate reports on usage, and for other services related to website usage and internet analysis of the website.

Hotjar also uses the services of third parties such as Google Analytics and Optimizely. These may store information that your browser sends during your visit to the website (e.g. cookies or IP requests). You can find more detailed information in the privacy policy of these services.

If you do not want a recording, you can disable it by setting the DoNotTrack header in your browser. You can also prevent Hotjar from recording the data by clicking on the following link and following the instructions there: https://www.hotjar.com/opt-out.

You can view Hotjar’s privacy policy at https://www.hotjar.com/privacy.

Contact

To contact us regarding data protection, you are welcome to use the following contact options. Responsible in the sense of the DSGVO:

ECORETAIL GmbH
Fraunhoferstrasse 8
53121 Bonn

Phone: +49 (0) 228-763 781-0
Fax: +49 (0) 228-763 781-99