Thank you for your interest in our company. The use of our website is generally possible without the provision of any personal data. If a data subject wants to use special services of our company through our website, the processing of personal data may be required. With this data protection declaration we would like to inform the public of the way we collect, use and process personal data as well as of the extent to which we do so and for what purpose. Furthermore, this data protection declaration makes data subjects aware of their rights.
1) personal data
Personal data is information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”). A natural person is considered to be identifiable if he/she can be identified directly or indirectly, especially by associating him/her to an identifier such as a name, to an identification number, to location data, to an online identifier or to one or more specific characteristics that reflect the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
2) data subjects
A data subject is any identified or identifiable natural person whose personal data is processed by the entity responsible for its processing.
Processing refers to any procedure carried out with or without the assistance of automated processes or any series of procedures in connection with personal data such as collecting, recording, organising, sorting, adapting or changing, retrieving, accessing, using, disclosing through transmission, dissemination or another form of provision, comparing or linking, restricting, deleting or destroying data.
4) restriction of processing
The restriction of processing refers to the labelling of stored personal data with the aim of restricting its future processing.
Profiling refers to any form of automated processing of personal data such that this personal data is used to evaluate certain personal aspects that relate to a natural person, in particular in order to analyse or predict aspects that relate to work performance, economic situation, health, personal preferences, interests, reliability, behaviour, place of abode or change of location of this natural person.
Pseudonymisation refers to the processing of person data such that the personal data, without additional information, can no longer be traced back to a specific data subject, provided this additional information is stored separately and technical and organisational measures are taken to ensure that the personal data cannot be traced back to an identified or identifiable natural person.
7) responsible entity or entity responsible for processing
A responsible entity or an entity responsible for processing is the natural or legal person, authority, facility or other institution which, alone or jointly with others, makes a decision regarding the purpose and means of processing of personal data. If the purposes and means of this processing are stipulated by EU law or the law of the Member States, then the responsible entity or certain criteria of its appointment can be specified under EU law or the law of the Member States.
8) order processor
An order processor refers to a natural or legal person, authority, facility or other institution which processes personal data on behalf of the responsible entity.
A recipient is a natural or legal person, authority, facility or other institution to which personal data is disclosed, regardless of whether they are a third party or not. Authorities which may obtain personal data as part of a specific investigation mandate under EU law or the law of the Member States are not considered recipients.
10) third party
A third party is a natural or legal person, authority, facility or other institution except for the data subject, the responsible entity, the order processor and the persons who, under the direct responsibility of the responsible entity or the order processor, is authorised to process personal data.
Consent refers to any informed statement of intent made voluntarily and unequivocally by the data subject in certain cases in the form of a declaration or any other clear affirmative act with which the data subject communicates that they consent to the processing of their personal data.
The responsible entity within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States and other data protection regulations is:
Manfred Fehrenbach and Matthias Fehrenbach
III. Name and address of the data protection officer The data protection officer of the responsible entity is: Lothar Dieter c/o Eutect GmbH Filsenbergstr. 10 72144 Dusslingen Germany Tel: 07072-92890-21 Email: datenschutz(at)eutect.de
As a matter of principle, we process personal data of our users only to the extent necessary to provide a functioning website as well as our content and services.
In as far as we seek the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as a legal basis. In the processing of personal data that is required to fulfil a contract whose contracting party is the data subject, Art. 6 para. 1 lit. b of the GDPR serves as a legal basis. This also applies to processing required to implement pre-contractual measures. In as far as the processing of personal data is required to comply with a legal obligation that our company is subject to, Art. 6 para. 1 lit. c GDPR serves as a legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as a legal basis. If the processing of personal data is required to protect a legitimate interest of our company or a third party and if the interests, basic rights and fundamental freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as a legal basis.
The personal data of the data subject is deleted or blocked as soon as the purpose of the storage ceases to apply. Furthermore, data may be stored if this is laid down by the European or national legislators in EU regulations, laws or other rules that the responsible entity is subject to. The data is also blocked or deleted if a data retention period stipulated by the mentioned standards expires, unless there is a requirement for further storage of the data for the purpose of contract conclusion or contract performance. VII. Transmission of data to third parties Your data is not passed on to third parties for any purpose other than those listed below. We pass on your personal data to third parties only if:
VIII. Description and scope of data processing
Whenever our website is accessed, our system automatically collects data and information from the computer system of the computer doing the accessing. In that case, the following data is collected: (1) Information about browser type and version (2) The user’s operating system (3) The user’s internet service provider (4) The user’s IP address (5) Date and time of access (6) Websites from which the user’s system reaches our website (7) Websites which are accessed via our website from the user's system The log files contain IP addresses or other data which can identify a user. This may be the case if the link to the website from which the user reaches the website, or the link to the website the user moves to, contains personal data. This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f GDPR.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this to happen, the IP address of the user must remain stored for the duration of the session. The log files are stored to ensure the functionality of the website. In addition, this data helps us improve the website and safeguard the security of our IT systems. In this context, the data is not analysed for marketing purposes. These purposes are also what our legitimate interest in the data processing in accordance with Art. 6 para. 1 lit. f GDPR is based on.
The data is deleted as soon as it is no longer required to fulfil the purpose of its collection. With regard to data collection for the provision of the website, this is the case when the session has ended. With regard to the storage of data in log files, this is the case after no later than seven days. The data can no longer be stored after that time. In this case, the IP addresses of the users are deleted or altered such that the accessing client can no longer be identified.
The collection of data for the provision of the website and the storage of the data in log files is essential for the running of the website. There is no option to object on the part of the user.
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.
We can be contacted via the email address provided. In this case, the personal data of the user transmitted with the email is stored. In this context, the data is not passed on to third parties. The data is used exclusively for the processing of the conversation.
The legal basis for the processing of the data that are transmitted in the course of making contact is Art. 6 para. 1 lit. f GDPR. If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
The personal data is processed to facilitate communication. When we are contacted by email, this is where the required legitimate interest in the processing of the data lies.
The data is deleted as soon as it is no longer required to fulfil the purpose of its collection. With regard to personal data from the contact form and those that was transmitted by email, this is the case when the communication with the user has ended. The communication has ended when the circumstances make it clear that the relevant matter has been resolved, except where its storage is necessary under civil, commercial or tax law in accordance with Art. 6 para. 1 lit. c GDPR. The additional personal data collected during the submission process will be deleted within seven days.
The user can withdraw his/her consent to the processing of personal data at any time. When the user contacts us by email, the user can object to the storage of his/her personal data at any time. In such a case, the conversation cannot be continued. In this case, all personal data that was stored in the course of making contact will be deleted.
You have the option to sign up for a newsletter or our news feed. In the news feed you have the option to select a bookmark, which you can add to the toolbar, for example. The following data is collected: We make a form available that allows you to sign up for our newsletter. The form collects the following data: Gender Surname Email address In addition, the following data is collected when you sign up:
When you register you will need to enter a randomly generated code. This verifies that you are not a robot. Once you have signed up, you will receive an email asking you to provide confirmation. This confirmation is required so that nobody can sign up using someone else’s email address. The newsletter signing up processes are logged in order to be able to show that the signing up process complies with the legal requirements. This includes the storage of the time of registration and the time of confirmation as well as the IP address. Similarly, changes to the data stored with the service provider are also logged.
The sending of the newsletter and the associated performance measurement is based on the consent of the recipients in accordance with Art. 6 para. 1 lit. a, Art. 7 GDPR in conjunction with section 7 para. 2 no. 3 UWG (law against unfair competition). The logging of the registration process is based on our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR. Our interest focuses on the use of a user-friendly and secure newsletter system, which both serves our business interests and is in line with user expectations and also allows us to prove consent.
The newsletter serves to manage our image and the dissemination of up-to-date information about our company to interested users.
If we have obtained your email address in connection with the sale of a product and service and if we use the email address to directly advertise similar goods or services and if you have not objected to the use of the email address and if it was clearly and explicitly pointed out to you when you submitted the email address and in every newsletter that you can object to its use without you incurring transmission costs other than the basic rate, the legal basis for the sending is section 7 para. 3 UWG (law against unfair competition).
When users have unsubscribed from the newsletter / news feed, the data is deleted, except where its storage is necessary under civil, commercial or tax law pursuant to Art. 6 para. 1 lit. c GDPR.
You can terminate your subscription to the newsletter at any time, i.e. revoke your consent. There is a termination link at the end of each newsletter. We may store the email address associated with the terminated newsletter for up to three years before deleting it on the basis of our legitimate interests, in order to be able to give proof of previously given consent. The processing of this data is limited to the possible defence against claims. An individual request for cancellation is possible at any time, provided that at the same time the existence of a previous consent is confirmed.
We have an online presence on social media networks where we communicate with customers, prospective customers and users and inform them about our services. When users access these networks and platforms, the terms of business and the data processing guidelines of the respective operators apply. Unless otherwise specified in our data protection declaration, we process the data of users when they communicate with us on the social networks and platforms (e.g. publish posts on our online pages or send us messages). There is a hyperlink on our website that takes you to our Facebook page. When you click on it, Facebook receives the information that your browser has accessed the relevant page on our website even if you do not have a Facebook account or do have an account but are not currently logged into Facebook. This information (including your IP address) is directly transmitted by your browser to a Facebook server in the USA and stored there. This means that even if a user is not a member of Facebook, there is still a possibility that Facebook finds out the IP address and stores it. If you are logged into Facebook, Facebook is able to directly associate the visit to our Facebook page with your Facebook account. When you interact on the Facebook page, such as by using the “LIKE” or “SHARE” button, the relevant information is also transmitted directly to a Facebook server and stored there. The information is posted on Facebook and can be seen by your Facebook friends. Facebook can use this information for the purposes of advertising, market research and the needs-based design of Facebook pages. To do this, Facebook creates usage, interest and relationship profiles, to evaluate your use of our website with regard to the adverts shown to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services related to Facebook use. If you do not want Facebook to associate the data collected via our website with your Facebook account, then you must log out of Facebook before visiting our website. For information about the purpose and scope of data collection and its further processing and use of data by Facebook, as well as your applicable rights and settings options for protecting your privacy, please consult the data protection policy (https://www.facebook.com/about/privacy/) of Facebook.
The legal basis is Art. 6 para. 1 lit. f GDPR. We have a presence on Facebook in order to communicate with customers, prospective customers and users and to give them an alternative way of finding out about our company and our services. Therein also lies the purpose.
This website uses Google Analytics, a web analysis service of Google LLC (“Google”). Google Analytics uses "cookies", which are text files placed on your computer to help the website analyse how you use the website. In this context, pseudonymised user profiles are created and cookies are used. The cookie generates the following information about your use of this website
The information generated by the cookie about your use of the website will usually be transmitted to and stored by Google on servers in the USA. You can find more information about how Google Analytics handles user data in the data protection declaration of Google or in the Google Analytics help centre. We use the “activation of the IP anonymisation” feature on this website. This means that your IP address will be stored by Google in shortened form within Member States of the European Union or in other states that are contracting parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the US and shortened there. Google will use this information on behalf of the operator of this website to analyse your use of the website, compile reports on website activity and provide the website operator with other services related to website usage and internet activity. The IP address sent by your browser as part of Google Analytics will not be associated by Google with any other data.
The legal basis is Art. 6 para. 1 lit. f GDPR.
The purpose is the design of our web pages in line with needs and their continuous improvement.
The users' personal data will be deleted or anonymised after 14 months.
You can prevent the installation of the cookies by selecting the appropriate settings in the browser; please note, however, that in this case it is possible that you will not be able to use all the features of our website. You can additionally prevent the collection of data produced by the cookie and associated with your use of the website (including your IP address), its transmission to, and its processing by Google, by downloading and installing a browser plugin available from Google: https://tools.google.com/dlpage/gaoptout?hl=de As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent data collection by Google Analytics by clicking on this link. This sets an opt-out cookie, which prevents the future collection of your data when visiting this website: The opt-out cookie is only valid for this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you have to set the opt-out cookie again.
of our customers, prospective customers and business partners for the purpose of contractual performance, service provision and customer care, marketing, advertising and market research.
If your personal data is processed you are a data subject within the meaning of the GDPR. You have the following rights vis-à-vis the responsible entity:
In accordance with Art. 15 GDPR, you can request a confirmation from the responsible entity about whether your personal data is processed by us. If this is the case, you can request the following information from the responsible entity: (1) the purposes for which the personal data is processed; (2) the categories of personal data which is processed; (3) the recipients or categories of recipients to whom the relevant personal data was disclosed or will be disclosed; (4) the planned duration of storage of your personal data or, if no specific information can be provided, criteria for determining the duration of storage; (5) the existence of a right to correction or deletion of your personal data, a right to restricting its processing by the responsible entity or a right of objection against its processing; (6) the existence of a right to appeal to a supervisory authority; (7) all available information about the source of the data, if the personal data was not collected from the data subject; (8) the existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 GDPR and – at least in these cases – relevant information about the logic involved as well as the implications and the intended effects of such processing for the data subject. You have the right to request information about whether your personal data is transmitted to a third country or an international organisation. In this context, you can request to be informed of the appropriate safeguards in accordance with Art. 46 GDPR relating to the transmission.
In accordance with Art. 16 GDPR you have the right vis-à-vis the responsible entity to correction and/or completion if the personal data concerning you is incorrect or incomplete. The responsible entity must perform the correction immediately.
You can request that the responsible entity immediately deletes your personal data, and the responsible entity is obliged to immediately delete this data if one of the following reasons applies: (1) Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed. (2) You revoke your consent which the processing in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR was based on, and there is no other legal basis for its processing. (3) You file an objection against its processing in accordance with Art. 21 para. 1 GDPR and there are no overriding legitimate reasons for its processing, or you file an objection against its processing in accordance with Art. 21 para. 2 GDPR. (4) Your personal data was processed unlawfully. (5) The deletion of your personal data is required to meet a legal obligation under EU law or the law of the Member States the responsible entity is subject to. (6) Your personal data was collected in relation to the services offered by the information society in accordance with Art. 8 para. 1 GDPR.
Where the responsible entity has made the personal data public and is obliged in accordance with Art. 17 para. 1 GDPR to delete the personal data, the responsible entity, taking into account available technology and the cost of implementation, will take reasonable steps, including technical steps, to inform responsible entities which are processing the personal data that the data subject has requested the deletion by such responsible entities of any links to, or copy or replication of, this personal data.
The right to deletion does not apply if the processing is required (1) to exercise the right to freedom of expression and information; (2) to comply with a legal obligation which requires processing by EU or Member State law which the responsible entity is subject to or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the responsible entity; (3) for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i as well as Art. 9 para. 3 GDPR; (4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR in so far as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing, or (5) to assert, exercise or defend legal claims.
You may request the restriction of the processing of your personal data under the following conditions: (1) if you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the data; (2) the processing is unlawful and you oppose the deletion of the personal data and request the restriction of its use instead; (3) the responsible entity no longer needs the personal data for the purposes of the processing, but you need it to assert, exercise or defend legal claims, or (4) if you have objected to processing in accordance with Art. 21 para. 1 GDPR and it is not yet certain whether the legitimate grounds of the responsible entity override yours. Where processing of your personal data has been restricted, this data, with the exception of storage, may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State. If processing of data was restricted pursuant to the above points, you will be informed by the responsible entity before the restriction of processing is lifted.
If you have asserted the right of correction, deletion or restriction of processing to the responsible entity, the responsible entity must communicate any correction or deletion of personal data or restriction of processing to each recipient to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to request that the responsible entity informs you about those recipients.
You have the right to receive your personal data which you have provided to a responsible entity, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another responsible entity without hindrance from the responsible entity to which the personal data was provided, in so far as: (1) the processing is based on consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract in accordance with Art. 6 para. 1 lit. b GDPR and (2) the processing of data was carried out in automated form. In exercising your right to data portability, you also have the right to have the personal data transmitted directly from one responsible entity to another, if this is technically feasible. This must not impact the freedoms and rights of other persons. The right to data portability does not apply to processing that necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the responsible entity.
You have the right to object, on grounds relating to your particular situation, to the processing of your personal data at any time based on Art. 6 para. 1 lit. e or f GDPR; this includes profiling based on those provisions. The responsible entity will no longer process your personal data unless the responsible entity shows that is has compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the assertion, exercise or defence of legal claims. Where your personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes, which includes profiling in as far as this is related to such direct marketing. Where you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes. In the context of the use of information society services - notwithstanding Directive 2002/58/EC - you may exercise your right to object by automated means using technical specifications.
You have the right to revoke the declaration of consent regarding data protection at any time. The revocation of consent does not affect the lawfulness of processing based on consent before its revocation.
You have the right not to be subjected to a decision solely based on automated decision-making – including profiling – which affects you legally or has another similar significant impact. This does not apply if the decision (1) is necessary for entering into or performing a contract between you and a responsible entity, (2) is authorised by regulations of the Union or Member State law which the responsible entity is subject to and which also lay down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is based on your explicit consent. The above decisions, however, are not based on special categories of personal data referred to in Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR apply and suitable measures to safeguard your rights and freedoms and legitimate interests are in place. In the cases mentioned in sections (1) and (3), the responsible entity will implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain intervention by a person on the part of the responsible entity, to express your point of view and to contest the decision.
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, place of work or place of the alleged violation if you believe that the processing of personal data relating to you violates the GDPR. The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.
This data protection declaration is currently valid and was last updated in May 2018. Because of the development of our website and its offerings or because of changed legal or regulatory requirements, it may become necessary to change this data protection declaration. You can access the most recent version of the data protection declaration on our website at any time.