Privacy policy

Privacy policy

ECO°COOL GmbH, Schiffshören 9, 27572 Bremerhaven, Germany

 

0. Preliminary remark: data protection according to the DSGVO.

The protection of your data is an important concern for us, which we strive for very intensively.

The following provides the legal background to the following data protection information in advance:

The authoritative law on data protection is the General Data Protection Regulation (DSGVO). Article 1 (1) of the GDPR stipulates that the wide range of requirements for data processors is intended to protect the right to the protection of personal data as laid down in Article 8 of the European Charter of Fundamental Rights, while at the same time ensuring the free movement of personal data within the European Union. It follows from this twofold direction of protection of data protection law that neither the fundamental right to protection of personal data nor the principle of free movement of data is entitled to priority over the other protected interest in each case. Rather, a balanced relationship between the two protective goals must be sought in each individual case. Data protection and the free movement of data are thus not opposites according to the basic concept of the GDPR, but complementary.

The legal obligations of a company operating a website include, among other things, providing the natural persons affected by the data processing operations on a website with comprehensive information about what data is being collected, what is being done with the data, on what basis this is happening, and what rights a person has. We would like to comply with this legal requirement from Art. 13 DSGVO in the following.

 

I. Terminology, Transparent Information

In the following text, legal terms such as "controller", "data processing", "processor", etc. are also used.

These legal terms are defined in Art. 4 No. 1 - 26 DSGVO. From our point of view, these legal definitions are generally understandable when read carefully. We will therefore rely on the legal terminology in the following.

In formulating the following text, we have endeavored to use clear and simple language. Should you nevertheless have difficulties in understanding, we welcome your queries and comments (cf. contact details under II.).

 

II. Responsibility for data processing

The person responsible for data processing (Art. 4 No. 7 DSGVO) is:

Name: ECO°COOL GmbH

General Manager: Dr. Florian Siedenburg

Address of the company: Schiffshören 9, 27572 Bremerhaven, Germany

Telephone: 0471 98 69 2-000

E-mail: infowhatever@ecocool.de

 

III. data protection officer

We have a data protection officer. The contact details of our data protection officer can be found below:

E-mail: datenschutzwhatever@ecocool.de

Telephone: 0471 98 69 2-000

 

IV. Overview of the data processing procedures

Processing	Purpose	Legal basis
1. Web presence	Own presentation	Art. 6 Abs. 1 lit. f) DSGVO
2. Google Webfont	Own presentation	Art. 6 Abs. 1 lit. f) DSGVO
3. Google Maps	Own presentation	Art. 6 Abs. 1 lit. f) DSGVO
4. Application Management	Vertragsanbahnung	Art. 6 Abs. 1 lit. b) DSGVO
5. Contact form	Contacting	Art. 6 Abs. 1 lit. b) DSGVO
6. Newsletter	Marketing	Art. 6 Abs. 1 lit. a) DSGVO
7. reCAPTCHA	Security	Art. 6 Abs. 1 lit. f) DSGVO
8. YouTube	Own presentation	Art. 6 Abs. 1 lit. f) DSGVO

 

V. The data processing procedures in detail

Below you will find the data processing procedures in detail and in detail.

 

1. Web site

We operate our web presence under the URL https://ecocool.de/ for the purpose of our own presentation. Here, data of the website visitors are processed as follows.

Each time a website is called up, a so-called http request is sent to the website operator's web server by the browser installed on a particular end device. As a result, certain data is automatically transmitted from the web server to the browser of the end device. This data processing is necessary in order to be able to display an Internet page at all. In addition to the IP address, the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), and the requesting provider are among the data processed as standard when displaying websites.

The legal basis for the explained data processing process is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in data processing is to ensure the integrity, confidentiality and availability of the data processed via these web pages.

 

2. google web fonts

We use Google WebFonts on our site. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: Google). WebFonts enable an optimal display of the contents of this website on different browser types (especially fonts). When the WebFonts are called up, the IP addresses of the website visitors are transmitted to Google, together with the information that these IP addresses are on our website. The permissibility of the transmission of your IP address to Google servers in the USA results from the reasons stated under VII.

The legal basis for the explained data processing process is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in the use of Google WebFonts is a uniform and appealing presentation of our online offers.

For more information, please visit:

https://developers.google.com/fonts/faq

https://www.google.de/intl/de/policies/privacy/

 

3. google maps

We use Google Maps on our websites. We use Google Maps to make it easier to find our business premises. This involves calling up map content from Google servers. Unfortunately, we do not know at present whether Google logs this server request and uses it further. However, we assume that Google's privacy policy applies in this regard. Therefore, your IP address will probably be stored for a period of several months in any case. Incidentally, the same also applies to JavaScript elements that might be loaded from Google servers for the purposes of browser compatibility (e.g. with IE9).

The legal basis for this data processing is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in using Google Maps is to show visitors to our websites where our business premises are spatially located.

For more information, please visit:

https://www.google.de/intl/de/policies/privacy/

 

4. application management

On our websites you will find job advertisements and our related invitation to submit applications in writing or by e-mail. We process the personal data sent to us by applicants for the purpose of handling the application process or initiating a contract. Processing may also take place electronically, which is particularly the case when application documents are submitted by e-mail or via our contact form, for example. If we subsequently conclude an employment, training or internship contract with the data subject, the transmitted data will be processed for the purpose of handling the employment relationship. If no employment contract is concluded with the applicant, the application documents will be stored for as long as is necessary for defense in possible proceedings under the General Equal Treatment Act (AGG) (currently up to six months).

The legal basis for the data processing is Art. 6 para. 1 lit. b) DSGVO.

 

5. contact form

Our website contains the possibility of electronic contact via a contact form. If a website visitor contacts us via the form, the first name, last name, e-mail address and the actual request are transmitted and stored by us. Furthermore, the company, postal address, telephone and fax can be entered. This is the data we need to make an offer to conclude a purchase contract for our products.

If the request contains a binding order with a delivery address, this will be stored and transmitted to logistics and shipping companies.

The legal basis for data processing in connection with the contact form is Art. 6 para. 1 lit. b) DSGVO.

 

6. newsletter

Via the newsletter button you have the possibility to enter your e-mail address. Hereby you give your consent that we send you the newsletter. If you enter your e-mail address and click on Send, we will first send you another e-mail to the address entered with a confirmation link. Only when you click on this confirmation link will you be added to the list of newsletter recipients (so-called double-opt-in procedure). We carry out the procedure described above with the help of our IT service provider netactive GmbH, Barkhausenstraße 4, 27568 Bremerhaven and our mailing service provider Cleverreach, GmbH & Co. KG, Muehlenstr. 43, 26180 Rastede.

For your right of withdrawal in connection with the newsletter registration, see below, XII.

 

7. reCAPTCHA

To protect the requests via contact form, we use the service reCAPTCHA from Google. This application makes it possible to distinguish whether the input is made by a human or abusive, by automated machine processing. During the query, the IP address and possibly other data is transmitted to Google and further used. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

The legal basis for the data processing is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in implementing reCAPTCHA is to maintain the functionality of the website by preventing abusive access.

Further information can be found at:

https://developers.google.com/recaptcha/

https://policies.google.com/privacy?hl=de

 

8. YouTube

We use videos on our websites to clearly present our services using examples for advertising campaigns. Videos are a great way to better convey content and make it more understandable. Since local hosting of videos is not powerful enough, we use the option of external video providers such as YouTube. The provider is You Tube LLC, 901 Cherry Ave, San Bruno, CA 94066 USA. The integration of the videos results - for technical reasons - in calls to the YouTube servers. For the associated use of data from your browser or terminal device, we refer to the privacy policy of YouTube.

The legal basis for this data processing is Art. 6 para. 1 lit. f) DSGVO. Our legitimate interest in using YouTube is to present our services and our company to visitors to our websites.

For more information, please visit:

https://policies.google.com/privacy?hl=de&gl=de

 

VII. Cookies

VIII. Recipients / categories of recipients

The IP addresses of website visitors are transmitted to the web service provider (IV., 1.).

Because of the integration of Google Webfonts (IV., 2.), Google Maps (IV., 3.), reCAPTCHA (IV., 7.) and You Tube (IV., 8.), the IP addresses are transmitted to Google.

The data collected in the contact form (IV., 5.) will - if an order for the delivery of goods is placed with it - be transmitted to retailers and/or shipping companies.

The e-mail address collected for newsletter dispatch (IV., 6.) is transmitted to our mailing and IT service provider for dispatch.

 

IX. Third country reference

Your personal data will not be transferred to countries outside the European Union. This does not apply to data that arises in connection with the applications Google Webfonts, Google Maps, reCAPTCHA and YouTube, which may also be transmitted to Google or YouTube servers in the USA.

Data protection is also guaranteed for this transfer to the USA. Google is listed in the so-called privacy-shield. You can find the entry in the privacy-shield here.

 

X. Storage period

Your IP address and the so-called log files, which are stored when the web server is called up, are subject to log rotation, i.e. a storage period of 14 days (IV., 1.).

The storage period of the IP address when using the application Google Webfonts, Google Maps, reCAPTCHA and You Tube (IV., 2., 3., 7., 8.) can be found in the privacy notices of Google and You Tube.

We currently store applicant data for 6 months to defend against claims under the AGG (IV., 4.).

We store the data entered in the contact form, if applicable, for as long as it is necessary for the implementation of the corresponding contractual relationship (IV., 5.).

We store the e-mail address for the newsletter dispatch until you unsubscribe from the newsletter (IV., 6.).

In all other respects, the statutory storage periods apply in accordance with the German Commercial Code and the German Fiscal Code. After expiration of the aforementioned storage periods, the data will be deleted.

 

XI. Data subject rights

You have the right to request information about your data processed by us free of charge at any time (Art. 15 DSGVO). You have the right to request that incorrect data concerning you be corrected (Art. 16 DSGVO). You have the right to request the deletion of data concerning you. This right is not unconditional, it is necessary that one of the following reasons applies: The personal data are no longer necessary for the purposes for which they were collected or otherwise processed; the data subject withdraws consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) and there is no other legal basis for the processing; the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing; or the data subject objects to the processing pursuant to Article 21(2); the personal data have been processed unlawfully; erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject; the personal data have been collected in relation to information society services offered pursuant to Article 8(1). You have the right to request the restriction of processing in accordance with Article 18 DSGVO. You have the right to data portability in accordance with Art. 20 DSGVO.

 

XII. Revocability of consent

If you have registered for the newsletter on our website, then you have the right at any time to revoke your associated consent to data processing free of charge and without giving reasons. To do this, you can click on the unsubscribe link in every newsletter e-mail or on the unsubscribe field on the website. The legality of the processing carried out up to the time of the revocation is of course not affected by the revocation.

 

XIII. Right of complaint

You have the right to complain to a supervisory authority (Art. 77 DSGVO), e.g. the supervisory authority responsible for ECOCOOL.

This is:

The State Commissioner for Data Protection and Freedom of Information

Ms. Dr. Imke Sommer

Arndtstraße 1

27570 Bremerhaven

 

XIV. Legal Obligations for Data Processing

As far as can be seen, there is no legal obligation to process data. We are of the opinion that a mere web service provider is not a processor and therefore we are not obliged to inform about its obligations according to the StPO and laws on data retention.

 

XV. Profiling

There is no profiling in the sense of Art. 4 No. 4 DSGVO.

Status: June 19, 2018