ECO°COOL GmbH, Schiffshören 9, 27572 Bremerhaven, Germany
0. Preliminary remark: data protection according to the DSGVO.
The protection of your data is an important concern for us, which we strive for very intensively.
The following provides the legal background to the following data protection information in advance:
The authoritative law on data protection is the General Data Protection Regulation (DSGVO). Article 1 (1) of the GDPR stipulates that the wide range of requirements for data processors is intended to protect the right to the protection of personal data as laid down in Article 8 of the European Charter of Fundamental Rights, while at the same time ensuring the free movement of personal data within the European Union. It follows from this twofold direction of protection of data protection law that neither the fundamental right to protection of personal data nor the principle of free movement of data is entitled to priority over the other protected interest in each case. Rather, a balanced relationship between the two protective goals must be sought in each individual case. Data protection and the free movement of data are thus not opposites according to the basic concept of the GDPR, but complementary.
The legal obligations of a company operating a website include, among other things, providing the natural persons affected by the data processing operations on a website with comprehensive information about what data is being collected, what is being done with the data, on what basis this is happening, and what rights a person has. We would like to comply with this legal requirement from Art. 13 DSGVO in the following.
I. Terminology, Transparent Information
In the following text, legal terms such as "controller", "data processing", "processor", etc. are also used.
These legal terms are defined in Art. 4 No. 1 - 26 DSGVO. From our point of view, these legal definitions are generally understandable when read carefully. We will therefore rely on the legal terminology in the following.
In formulating the following text, we have endeavored to use clear and simple language. Should you nevertheless have difficulties in understanding, we welcome your queries and comments (cf. contact details under II.).
II. Responsibility for data processing
The person responsible for data processing (Art. 4 No. 7 DSGVO) is:
Name: ECO°COOL GmbH
General Manager: Dr. Florian Siedenburg
Address of the company: Schiffshören 9, 27572 Bremerhaven, Germany
Telephone: 0471 98 69 2-000
III. data protection officer
We have a data protection officer. The contact details of our data protection officer can be found below:
Telephone: 0471 98 69 2-000
IV. Overview of the data processing procedures
|1. Web presence||Own presentation||Art. 6 Abs. 1 lit. f) DSGVO|
|2. Google Webfont||Own presentation||Art. 6 Abs. 1 lit. f) DSGVO|
|3. Google Maps||Own presentation||Art. 6 Abs. 1 lit. f) DSGVO|
|4. Application Management||Vertragsanbahnung||Art. 6 Abs. 1 lit. b) DSGVO|
|5. Contact form||Contacting||Art. 6 Abs. 1 lit. b) DSGVO|
|6. Newsletter||Marketing||Art. 6 Abs. 1 lit. a) DSGVO|
|7. reCAPTCHA||Security||Art. 6 Abs. 1 lit. f) DSGVO|
|8. YouTube||Own presentation||Art. 6 Abs. 1 lit. f) DSGVO|
V. The data processing procedures in detail
Below you will find the data processing procedures in detail and in detail.
1. Web site
We operate our web presence under the URL https://ecocool.de/ for the purpose of our own presentation. Here, data of the website visitors are processed as follows.
Each time a website is called up, a so-called http request is sent to the website operator's web server by the browser installed on a particular end device. As a result, certain data is automatically transmitted from the web server to the browser of the end device. This data processing is necessary in order to be able to display an Internet page at all. In addition to the IP address, the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), and the requesting provider are among the data processed as standard when displaying websites.
The legal basis for the explained data processing process is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in data processing is to ensure the integrity, confidentiality and availability of the data processed via these web pages.
2. google web fonts
We use Google WebFonts on our site. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: Google). WebFonts enable an optimal display of the contents of this website on different browser types (especially fonts). When the WebFonts are called up, the IP addresses of the website visitors are transmitted to Google, together with the information that these IP addresses are on our website. The permissibility of the transmission of your IP address to Google servers in the USA results from the reasons stated under VII.
The legal basis for the explained data processing process is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in the use of Google WebFonts is a uniform and appealing presentation of our online offers.
For more information, please visit:
3. google maps
The legal basis for this data processing is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in using Google Maps is to show visitors to our websites where our business premises are spatially located.
For more information, please visit:
4. application management
On our websites you will find job advertisements and our related invitation to submit applications in writing or by e-mail. We process the personal data sent to us by applicants for the purpose of handling the application process or initiating a contract. Processing may also take place electronically, which is particularly the case when application documents are submitted by e-mail or via our contact form, for example. If we subsequently conclude an employment, training or internship contract with the data subject, the transmitted data will be processed for the purpose of handling the employment relationship. If no employment contract is concluded with the applicant, the application documents will be stored for as long as is necessary for defense in possible proceedings under the General Equal Treatment Act (AGG) (currently up to six months).
The legal basis for the data processing is Art. 6 para. 1 lit. b) DSGVO.
5. contact form
Our website contains the possibility of electronic contact via a contact form. If a website visitor contacts us via the form, the first name, last name, e-mail address and the actual request are transmitted and stored by us. Furthermore, the company, postal address, telephone and fax can be entered. This is the data we need to make an offer to conclude a purchase contract for our products.
If the request contains a binding order with a delivery address, this will be stored and transmitted to logistics and shipping companies.
The legal basis for data processing in connection with the contact form is Art. 6 para. 1 lit. b) DSGVO.
Via the newsletter button you have the possibility to enter your e-mail address. Hereby you give your consent that we send you the newsletter. If you enter your e-mail address and click on Send, we will first send you another e-mail to the address entered with a confirmation link. Only when you click on this confirmation link will you be added to the list of newsletter recipients (so-called double-opt-in procedure). We carry out the procedure described above with the help of our IT service provider netactive GmbH, Barkhausenstraße 4, 27568 Bremerhaven and our mailing service provider Cleverreach, GmbH & Co. KG, Muehlenstr. 43, 26180 Rastede.
For your right of withdrawal in connection with the newsletter registration, see below, XII.
To protect the requests via contact form, we use the service reCAPTCHA from Google. This application makes it possible to distinguish whether the input is made by a human or abusive, by automated machine processing. During the query, the IP address and possibly other data is transmitted to Google and further used. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The legal basis for the data processing is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in implementing reCAPTCHA is to maintain the functionality of the website by preventing abusive access.
Further information can be found at:
The legal basis for this data processing is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in using YouTube is to present our services and our company to visitors to our websites.
For more information, please visit:
VIII. Recipients / categories of recipients
The IP addresses of website visitors are transmitted to the web service provider (IV., 1.).
Because of the integration of Google Webfonts (IV., 2.), Google Maps (IV., 3.), reCAPTCHA (IV., 7.) and You Tube (IV., 8.), the IP addresses are transmitted to Google.
The data collected in the contact form (IV., 5.) will - if an order for the delivery of goods is placed with it - be transmitted to retailers and/or shipping companies.
The e-mail address collected for newsletter dispatch (IV., 6.) is transmitted to our mailing and IT service provider for dispatch.
IX. Third country reference
Your personal data will not be transferred to countries outside the European Union. This does not apply to data that arises in connection with the applications Google Webfonts, Google Maps, reCAPTCHA and YouTube, which may also be transmitted to Google or YouTube servers in the USA.
Data protection is also guaranteed for this transfer to the USA. Google is listed in the so-called privacy-shield. You can find the entry in the privacy-shield here.
X. Storage period
Your IP address and the so-called log files, which are stored when the web server is called up, are subject to log rotation, i.e. a storage period of 14 days (IV., 1.).
The storage period of the IP address when using the application Google Webfonts, Google Maps, reCAPTCHA and You Tube (IV., 2., 3., 7., 8.) can be found in the privacy notices of Google and You Tube.
We currently store applicant data for 6 months to defend against claims under the AGG (IV., 4.).
We store the data entered in the contact form, if applicable, for as long as it is necessary for the implementation of the corresponding contractual relationship (IV., 5.).
We store the e-mail address for the newsletter dispatch until you unsubscribe from the newsletter (IV., 6.).
In all other respects, the statutory storage periods apply in accordance with the German Commercial Code and the German Fiscal Code. After expiration of the aforementioned storage periods, the data will be deleted.
XI. Data subject rights
You have the right to request information about your data processed by us free of charge at any time (Art. 15 DSGVO). You have the right to request that incorrect data concerning you be corrected (Art. 16 DSGVO). You have the right to request the deletion of data concerning you. This right is not unconditional, it is necessary that one of the following reasons applies: The personal data are no longer necessary for the purposes for which they were collected or otherwise processed; the data subject withdraws consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) and there is no other legal basis for the processing; the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing; or the data subject objects to the processing pursuant to Article 21(2); the personal data have been processed unlawfully; erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject; the personal data have been collected in relation to information society services offered pursuant to Article 8(1). You have the right to request the restriction of processing in accordance with Article 18 DSGVO. You have the right to data portability in accordance with Art. 20 DSGVO.
XII. Revocability of consent
If you have registered for the newsletter on our website, then you have the right at any time to revoke your associated consent to data processing free of charge and without giving reasons. To do this, you can click on the unsubscribe link in every newsletter e-mail or on the unsubscribe field on the website. The legality of the processing carried out up to the time of the revocation is of course not affected by the revocation.
XIII. Right of complaint
You have the right to complain to a supervisory authority (Art. 77 DSGVO), e.g. the supervisory authority responsible for ECOCOOL.
The State Commissioner for Data Protection and Freedom of Information
Ms. Dr. Imke Sommer
XIV. Legal Obligations for Data Processing
As far as can be seen, there is no legal obligation to process data. We are of the opinion that a mere web service provider is not a processor and therefore we are not obliged to inform about its obligations according to the StPO and laws on data retention.
There is no profiling in the sense of Art. 4 No. 4 DSGVO.
Status: June 19, 2018