Data Protection Information
The protection of your personal data (hereinafter: "data") and your privacy during your visit to our websites is very important to us. For this reason we would like to inform you in the following about the handling of your data.
We reserve the right to adapt the content of this data protection information from time to time. We therefore recommend that you review our data protection information at regular intervals.
Our sites use SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Responsible for data processing in the sense of data protection law:
Elbgoods GmbH (hereinafter: "We", "us")
Telefon: +49 (0) 40 309 938 81
2. Contact Data of the Data Protection Officer
If you have any questions or comments on data protection in connection with our websites, please contact our data protection officer:
3. Personal Data
Personal data are all information relating to an identified or identifiable natural person ("data subject"). An identifiable person is one who can be identified directly or indirectly, in particular by assignment to an identifier. For example, a name, an identification number, location data, an online identification or other special features that express the physical, physiological, genetic, psychological, economic, cultural or social identity of the person concerned may be used as an identification.
4. Purposes and Legal Bases of the Processing of Personal Data
We undertake to comply with all data protection regulations when handling the data of visitors to our websites. We process data exclusively to the extent necessary and permitted by data protection law.
a. Informational use of our websites
You can visit our websites without providing any personal information. If you use our websites for information purposes only, we do not collect any personal data. An exception is data transmitted by your browser to enable you to visit the websites and information transmitted to us by the cookies we use.
For the purpose of technically providing the Websites, we may need to process certain automatically submitted information from you in order for your browser to display our Websites and for you to use the Websites. This information is automatically collected each time you visit our websitea and stored in server log files. These log files contain the following information: Browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of the server request, IP address.
These data are not combined with other data sources. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this the IP address of the user must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website. In addition, the data serves us to optimize our websites and to ensure the security of our information technology systems. Our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f GDPR also lies in these purposes.
The collection of data is mandatory for the operation of our websites. Consequently, there is no possibility of objection.
If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a user-friendly and efficient design of the page visit.
b. Contact Requests
For questions of any kind, we offer you the opportunity to contact our customer service (e.g. via contact form, email or telephone or) on the basis of Art. 6 para. 1 lit. f GDPR. If you provide us with your personal data, this is voluntary. When using our contact form, it is necessary that you provide us with the personal data requested in the respective mandatory fields (e.g. first and last name, email address) so that we can process your request. The purpose of collecting your personal data is to identify you and to answer your inquiry. It is in our economic interest to be able to contact potential new customers.
The personal data transferred to us in the case of enquiries will be stored until your enquiry is answered and then deleted, unless we are obliged to store it for a longer period due to retention periods.
c. Messages (newsletters etc.)
With the following information we inform you about the contents of our messages as well as the registration and transit procedure and your right of objection. By subscribing to our messages you agree to the receipt and the described procedures.
Contents of messages: The possible contents of our messages result from the selection made by you within the scope of the registration form; in principle, we offer to send you information and offers on the following topics: Events, job offers, equipment, pricing and availability, tenders, event services, news etc.
Double opt-in and logging: Subscription to our messages takes place in a so-called double opt-in procedure. This means that after registration you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can log in with other email addresses. Subscriptions to messages are logged in order to be able to prove the registration process in accordance with legal requirements. This includes the storage of the login and confirmation time, as well as the IP address. The changes to your data stored with the shipping service provider are also logged.
Credentials: To subscribe to messages, it is necessary that you provide us with your email address as well as your first and last name. For some services we might need additional information.
If you have consented to receiving messages, we will use your personal data (e.g. name and email address) to send you our messages.
We process your data for the dispatch of messages and the personalization of the address on the following legal basis: If you have given us your consent, in accordance with Art. 6 para. 1 lit. a GDPR;
If you have provided us with your email address in connection with the purchase of goods or services or if we send you personalised advertising, in order to safeguard our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR in connection with this. Section 15 (3) TMG in conjunction with 7 para. 3 UWG; our legitimate interest is based on our economic interests in the implementation of advertising measures and target group-oriented advertising.
Cancellation/Revocation - You can cancel the receipt of our messages at any time, i.e. revoke your consent. You will find a "unsubscribe" link to cancel the messages at the end of each message. We may store the email addresses we have unsubscribed for up to three years on the basis of our legitimate interests before we delete them for the purpose of sending the messages in order to be able to prove a previously given consent. The processing of these data is limited to the purpose of a possible defence against claims. An individual application for cancellation is possible at any time, provided that at the same time the former existence of a consent is confirmed.
The registration procedure is recorded on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR. We are interested in the use of a user-friendly and secure message system that serves both our business interests and the expectations of users and also allows us to provide proof of consent. The data you provide us for the purpose of subscribing to messages will be stored by us until you unsubscribe from the messages and deleted after you unsubscribe from the messages.
Our websites use the services of MailChimp for sending messages. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. MailChimp is a service with which the dispatch of newsletters can be organized and analyzed. If you enter data for the purpose of message subscription (e.g. email address), these are stored on the servers of MailChimp in the USA. MailChimp is certified according to the "EU-US-Privacy Shield", an agreement between the European Union (EU) and the USA, which is intended to ensure compliance with European data protection standards in the USA: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active
With the help of MailChimp we can analyze our campaigns. When you open an email sent with MailChimp, a file contained in the email (so-called web beacon) connects to the MailChimp servers in the USA. This allows you to determine whether a message has been opened and which links have been clicked on. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). This information cannot be assigned to the respective message recipient. They are used exclusively for statistical analysis of campaigns. The results of these analyses can be used to better adapt future messages to the interests of the recipients. If you do not want MailChimp to analyze your data, you must unsubscribe from the messages. For this purpose, we provide a corresponding unsubscribe link in every message.
The data will be processed on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time by cancelling the messages. The legality of the data processing processes already carried out remains unaffected by the revocation.
The data stored by you for the purpose of message subscription will be stored by us until you unsubscribe from the messages and will be deleted from our servers as well as from the servers of MailChimp after you unsubscribe from the messages.
Further details can be found in the data protection regulations of MailChimp at: https://mailchimp.com/legal/terms/.
5. Right to object
In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data on the basis of a legitimate interest on our part or that of a third party, pro-vided that there are reasons for this which arise from your particular situation or the ob-jection is directed against general or direct advertising tailored to you. In the latter case, you have a general right of objection, which we will implement without specifying a partic-ular situation.
If you wish to exercise your right of revocation or objection, please send us an email to firstname.lastname@example.org or contact the Controller by other means (cf. paragraph 1).
6. Transfer of data to third parties / Recipients of the data
We do not pass your data on to third parties unless you have instructed us to do so. For the fulfillment of some services it may be necessary to share some of your data (e.g. contact data) with third parties. Sometimes we use service partners, e.g. MailChimp. Our service providers are obliged by us in writing according to the strict requirements of the GDPR and may not process the data for any other purpose. If necessary, we have concluded order processing contracts with our service providers in accordance with Art. 28 GDPR.
7. Google Analytics
To improve and further develop our offers and services, we use Google Analytics, a web analysis service of Google LLC, on the basis of Art. 6 Para. 1 lit. f GDPR. "("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the websites analyze how users use the site. The information generated by the cookie about your use of our websites is usually transferred to a Google server in the USA and stored there. Our websites use IP anonymization. For this reason, Google will generally cut your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA (an appropriate level of data protection is available according to Art. 45 para. 1 GDPR through Google's participation in the Privacy Shield) and shortened there. We have also concluded an order processing agreement with Google LLC (USA) in accordance with Art. 28 GDPR. On our behalf, Google will use this information strictly in accordance with our instructions in order to evaluate your use of the websites, to compile reports on the activities of the websites and to provide us with further services connected with the use of the websites and the Internet.
As an alternative to the browser plug-in or within browsers on mobile devices, please click the following link to set an opt-out cookie that will prevent future collection by Google Analytics within our websites (this opt-out cookie only works in this browser and only for this domain, if you delete your cookies in this browser, you must click the following link again): Disable Google Analytics.
The analysis cookie is used to improve the quality of our websites and its content. Through the analysis cookies we learn how the websites are used and can thus continuously optimize our offer. For these purposes, our legitimate interest also lies in the processing of personal data in accordance with Art. 6 para. 1 lit. f GDPR.
Our websites use the "demographic features" function of Google Analytics. This allows reports to be created that contain information on the age, gender and interests of sites visitors. This data comes from interest-related advertising by Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described under "Objection to data collection".
8. Use of social plugins from third parties
In each case, we use the following third-party plug-ins on our websites on the basis of Art. 6 para.1 lit. f GDPR; our legitimate interest is principally to offer you an appealing websites and, if necessary, to network our content and marketing campaigns with the respective platforms. Responsibility for data protection-compliant operation must be guaranteed by the respective provider.
Our websites use social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). The plugins can be identified by one of the Facebook logos (white "f" on blue tile or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and appearance of Facebook Social Plugins can be viewed here: http://developers.facebook.com/plugins.
When you visit a page on our websites that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the websites. We therefore have no influence on the extent of the data that Facebook collects with the help of this plugin and therefore inform you according to our level of knowledge: By integrating the plugins, Facebook receives the information that you have called up the corresponding page of our Internet presence. If you are logged in to Facebook, Facebook can assign your visit to your Facebook account. If you interact with the plugins, for example by pressing the Like button or making a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. If you are not a member of Facebook, it is still possible for Facebook to obtain and store your IP address.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights and setting options for the protection of your privacy can be found in Facebook's data protection information: http://www.facebook.com/policy.php.
If you are a Facebook member and would like to prevent or at least restrict Facebook from collecting data about you via our website and linking it to your membership data stored on Facebook, you must log out of Facebook before visiting our website.
It is also possible to block Facebook social plugins with add-ons for your browser, for example with the "Facebook Blocker".
Facebook is certified under the EU-U.S. Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Our pages include functions of the Twitter service. These functions are offered by Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. By using Twitter and the "Retweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter.
Twitter is certified under the EU-U.S. Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active
Our websites use so-called social plug-ins ("plug-ins") of the social network Google+, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). The plug-ins can be identified, for example, by buttons with the "+1" character on a white or colored background. An overview of the Google plug-ins and their appearance can be found here: https://developers.google.com/+/plugins.
When you visit a page of our websites that contains such a plug-in, your browser establishes a direct connection to Google's servers. The content of the plug-in is transmitted by Google directly to your browser and integrated into the page. The integration gives Google the information that your browser has called up the corresponding page of our website, even if you do not have a Google+ profile or are not currently logged in to Google+. This information (including your IP address) is transmitted directly from your browser to a Google server in the USA and stored there.
Google is certified under the EU-U.S. Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
If you do not want Google to associate the data collected via our websites directly with your profile on Google+, you must log out of Google+ before visiting our website.
Our websites use the "LinkedIn" button of the LinkedIn social network, operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA. The "LinkedIn" button is indi-cated by the "in" highlighted in blue. If you activate the plug-in on one of our websites with a click, the browser establishes a direct connection to LinkedIn's servers. The connection transfers the content of the plug-in to your browser and integrates it into the displayed website. Furthermore, LinkedIn will inform you that you have visited our website. If you are logged in to LinkedIn while visiting our websites through your personal account, LinkedIn may associate this visit to the website with your user account. If you wish to prevent data transmission to your LinkedIn account, you must log out of your LinkedIn account before visiting our websites.
LinkedIn Corporation is certified under the EU-U.S. Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active
We would like to inform you here about the processing of personal data about the function of the XING Share button.
On our websites we use components (videos) from YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA, a company of Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA. Here we use the option" - extended data protection mode -" provided by YouTube. According to YouTube, in " - extended data protection mode -", data is only transmitted to the YouTube server (in particular your IP address and the URLs of the Internet pages specifically visited by us) when you play the video. If you are logged in to YouTube at the same time, this information will be associated with your YouTube account and may be processed by YouTube.
You can prevent or at least restrict data processing through YouTube by logging out of your member account before visiting our website.
YouTube is certified at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Further information on data processing and privacy protection by YouTube (Google) can be found at https://www.google.de/intl/de/policies/privacy/.
g. Facebook Pixel
Our websites uses the visitor action pixel of Facebook, Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") for conversion measurement.
This enables visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized.
The collected data is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage guidelines. This allows Facebook to serve ads on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the site operator.
If you do not have a Facebook account, you can disable Facebook usage-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.
h. Sitecore Experience Platform
Some of our websites use the Sitecore Experience Platform, a service of Sitecore Holding II A/S, to continuously improve the customer-friendliness of our website.
Our websites use plugins of the video portal Vimeo. The provider is Vimeo Inc. 555 West 18th Street, New York, New York 10011, USA.
If you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. The Vimeo server will be informed which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA.
If you are logged in to your Vimeo account, you allow Vimeo to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account.
9. Google Web Fonts
Our sites use so-called web fonts provided by Google to uniformly display fonts. When you call up a page, your browser loads the required Web fonts into your browser cache to display texts and fonts correctly.
To do this, the browser you are using must connect to Google's servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
If your browser does not support web fonts, a default font is used by your computer.
Google is certified under: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
10. Google Maps
Our pages use the map service Google Maps via an API. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. Google is certified under: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
The use of Google Maps is in the interest of an appealing representation of our online offers and at an easy findability of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
You can find more information on the handling of user data in Google's data protection declaration: https://www.google.de/intl/de/policies/privacy/.
11. Rights of the data subject
You have the following rights regarding your data processed by us:
- the right of access with regard to data stored by us in accordance with Art. 15 GDPR;
- if necessary, the right to rectification with regard to personal data stored by us in accordance with Art. 16 GDPR;
- the right to have your personal data stored by us erased and forgotten in accordance with Art. 17 GDPR;
- the right to restrict or block the processing of your personal data in accordance with Art. 18 GDPR;
- if applicable, right to data portability in accordance with Art. 20 GDPR;
- the right to object to the processing of your personal data in accordance with Art. 21 GDPR;
- the right to withdraw any consents granted pursuant to Art. 7 para. 3 GDPR;
- the right of appeal to a supervisory authority pursuant to Art. 77 GDPR.
12. Legal or contractual provision of data
You are under no legal or contractual obligation to provide us with your data. Please note, however, that the provision of some data is necessary in order to provide you with the services offered on the website. For example, we need your IP address to display our websites in your browser.
13. Automated decision making
We dispense with automatic decision making or profiling.