DE | EN | TR

We appreciate your visit to our website. We take the protection of your personal data seriously and want you to feel safe and comfortable when visiting our website.

In the case of mere informational use of the website, we only collect the personal data that your browser transmits to our server and that is technically necessary for the presentation of our website and to ensure stability and security.

If you have consented accordingly or if we are legally authorized to do so, we collect personal data from you as a user of the website in order to provide you with content on the website on the one hand and to offer you further services on the other, such as contacting you via a contact form, ordering our newsletter, etc.

Responsible party

We, the companies of the ECE Group:

ECE Group GmbH & Co. KG

ECE Marketplaces GmbH & Co. KG

ECE Work & Live GmbH & Co. KG

ECE Group Services GmbH & Co. KG

GB Services GmbH

ECE Real Estate Partners G.m.b.H.

 

Joint address:

Heegbarg 30

22391 Hamburg

Germany

E-Mail: privacy(at)ece.com

are jointly responsible for the protection of your personal data in the context of processing on our website (Article 26 of the General Data Protection Regulation).

To ensure that you can easily and reliably exercise your data protection rights within the scope of this joint responsibility, we have agreed that you can assert your data protection rights against any ECE company.

 

Contact details of the data protection officer:

To the Data Protection Officer of the ECE Group

Heegbarg 30

22391 Hamburg

Or by mail to datenschutz(at)ece.com

 

a) Legal basis for data processing on our website

(1) Based on your consent (Art. 6 para. 1 a DSGVO)

Insofar as you have given us consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. Consent given can be revoked at any time. The revocation of consent does not affect the lawfulness of the data processed until the revocation.

(2) For the fulfillment of contractual obligations (Art. 6 para. 1 b DSGVO).

In part, the processing of your data is also carried out for the fulfillment of a contract concluded with you at your request or for the fulfillment of a pre-contractual measure, such as within the scope of a service obligation existing towards you. Further details on the data processing purposes in this regard can be found in the relevant contractual documents and conditions of participation.

(3) Within the framework of the balancing of interests (Art. 6 para. 1 f DSGVO)

Where necessary, we process your data to protect our legitimate interests or the legitimate interests of third parties. These are, for example:

  • Use of cookies (more details on this below).
  • Assertion of legal claims and defense in legal disputes
  • Ensuring stability and security

 

b) Purposes of data processing on our website

Insofar as we process your personal data on our website, this is done for the purposes outlined below:

  • Technical provision of the website and monitoring of its functionality
  • Contacting you via the contact form
  • Sending and registration of newsletters
  • Statistical analysis of the use of the website
  • Collection of your device data (through the use of cookies)

 

c) Data processing on our website

We process your personal data on our website in different ways:

 

(1) Hosting and log files

The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services, which we use for the purpose of operating this online offer.

In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer pursuant to Art. 6 para. 1 lit. f DSGVO in conjunction with Art. 28 DSGVO. Art. 28 DSGVO (conclusion of order processing contract).

We, respectively our hosting provider, collect on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO, we collect data about each access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful Retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

The IP address is stored for security reasons (e.g. for the clarification of abuse or fraud) for 14 days and then deleted. Data whose further storage is required for evidentiary purposes is exempt from deletion until the respective incident is finally clarified (e.g. further log file information).

Each time you access our website, your browser automatically sends certain information to the website server to enable communication between your browser and the server. This information is stored in a so-called log file. This is, for example, information about

  • the type and version of the browser you are using,
  • the operating system you are using
  • the website from which you came to the current page,
  • the host name (IP address) of your computer and
  • the time at which the page was accessed.


In addition, we use the information transmitted by your browser to our servers in anonymous form - i.e. without it being possible to draw conclusions about you - to analyze and improve our services. In this way, we can, for example, discover possible errors or determine on which days and at what times our websites are particularly heavily used.

 

(2) Newsletter and contact

The newsletter (e.g. press distribution list) contains news, offers and further information about ECE products/services. By subscribing to the newsletter, you will receive personalized information about the products and services in accordance with the consent you have given in each case.

With your registration for the newsletter, you will receive a newsletter tailored to you (if the newsletter is "personalized", "individualized" or "personally tailored"). For this purpose, we evaluate your click behavior on our websites or within the newsletter in order to compile the information relevant to you.


Recipients:

The data is forwarded to our customer management platform, to which service providers may also have access in order to support and carry out the newsletter. The platform service provider may receive access to personal data from a third country (countries outside the European Economic Area). So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded with these service providers as suitable guarantees. Further information can be found here https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de


Deletion / Revocation:

If you no longer wish to receive the newsletter, you can object to receiving the newsletter at any time and unsubscribe accordingly. To do so, click on the link contained in each newsletter, you will then be guided through the unsubscribe process, or send us your revocation by e-mail.

If your profile has not been verified as part of the so-called double opt-in process, your profile will be deleted.


Legal basis:

Art. 6 (1) a DSGVO (consent).

When you contact us, e.g. via one of our contact forms or by e-mail, the data you provide (e.g. your e-mail address, possibly your name, your telephone number, etc.) will be processed by us in order to process your request and, if necessary, to contact you. We delete the data accruing in this context when it is no longer required for the aforementioned purpose, provided that the deletion does not conflict with any statutory retention obligations. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f DSGVO. If you provide us with personal data of another person, you must first take the necessary data protection measures for this, e.g. obtain the required prior consent of this person and inform him or her of the purpose for which you are transferring the data to us.

 

(3) Use of cookies

(a) General

When you visit our website, we use data collection technologies such as cookies, tags, and pixels in your browser to collect specific information about your current browsing session. These technologies are often commonly referred to as "cookies" on other websites. Cookies also allow our website to remember your actions and preferences (such as login information, language, font size, and other display preferences) for a period of time so that you do not have to keep re-entering them the next time you visit or navigate from one page to the next. We use cookies for a variety of purposes. Different requirements and legal bases apply to the use of these cookies, depending on their purpose.

 

(b) Types and purposes of cookies

The following types of cookies must be distinguished:

 

(aa) "TECHNICALLY REQUIRED" cookies - website functionality and administration:

We use "technically necessary" cookies to operate our website. This includes storing a personal identification number for you, the visitor to our website, for administrative and identification purposes. This allows us to provide you with a consistently positive service. We store data such as your saved language preferences. These cookies are set for the duration of your browser session. Without these cookies, you will not be able to view the full scope of our website.

A technical necessity is given, for example, with regard to ensuring the following functionalities / achieving the following purposes:

  • User input - Even if user input is stored, e.g. in online forms that span several web pages, this storage may be considered necessary.
  • Login - Login status, e.g. in a community, is expected of a user and may therefore be considered essential.
  • User security - When using cookies for security purposes, in addition to their necessity, their purpose must also be considered. Above all, necessary measures that serve to protect users and their data (e.g., the prevention of so-called brute force attacks) are permissible.
  • Language selection - The storage of the language selection on an international website is also expected by users and is considered necessary.
  • Cookie opt-in - Cookies that store cookie consent are also essential so that the "cookie banner" does not reappear each time the website is accessed.
  • Multimedia content playback - Provided that the cookies are essential for playback, they may be used
  • Load balancing - Cookies that serve to evenly distribute the load (load balancing) of a website are considered essential.


The use of technical cookies on our website is possible without your consent. For this reason, technical cookies cannot be individually disabled or enabled. However, you have the option to generally deactivate cookies in your browser at any time (see below under (cc)).


Legal basis:

Art. 6 (1) b DSGVO (situation similar to a contract).

 

(bb) "FUNCTIONAL and performance cookies to improve and perform the website.

We use "functional cookies" to continuously improve the performance of our website. This includes data that we collect from you for the following purposes:

Web analytics - based on your browsing behavior, we analyze data to improve the functionality and design of our website.

Advertising effectiveness - based on the way you access our website, we measure the effectiveness of our advertising by analyzing the click-through rate of our advertising. In this way, we optimize the effectiveness of ads that we place on external websites.

Error management - we measure errors on our websites in order to promptly correct errors or other problems.

Design testing - we use A/B or multivariate testing to ensure that users of our website experience a consistent view of the website during one session and during sessions that may follow.

Performance cookies collect information about how our websites are used to consequently improve their attractiveness, content and functionality. These cookies help us determine, for example, whether and which subpages of our website are visited and which content users are particularly interested in. In particular, we record the number of times a page is accessed, the number of sub-pages accessed, the time spent on our website, the order of the pages visited, which search terms led you to us, the country, region and, if applicable, the city from which access is made, as well as the proportion of mobile devices accessing our websites. Furthermore, we record movements, "clicks" and scrolling with the computer mouse in order to understand which areas of our website are of particular interest to users. As a result, we can tailor the content of our website more specifically to the needs of our users and optimize our offering.

The IP address of your computer transmitted for technical reasons is automatically anonymized and does not allow us to draw any conclusions about the individual user.

 

"ADVERTISEMENT cookies":

Functional and performance cookies are so-called "absolutely necessary" cookies according to the ePrivacy Directive 2002/58 EC, which do not require your consent.

However, you can decide for yourself whether to give your consent to the use of these cookies. You give this consent by clicking on the "Ok" button on the website in a banner that links to this consent text. By clicking on the "OK" button, you give your consent for data to be stored on your terminal device (e.g. by setting cookies) or for data to be retrieved from your terminal device. The data collected in this way (tracking data) is processed on the one hand for purposes in which the website operator has a legitimate interest and your interest in not carrying out the further processing does not outweigh the legitimate interests of the website operator.

If you have given your consent, you can object to the use of functional and performance cookies at any time by adjusting your cookie settings accordingly.


Legal basis:

Art. 6 (1) f DSGVO (legitimate interest).

 

(cc) Cookies requiring consent (marketing cookies):

We use "marketing cookies" from our advertising partners to ensure that our advertising messages are displayed to you at the right time in the right place. These cookies are permanent cookies, but they have a time limit. They contain a personal identifier that can be used to assign surfing behavior to individual users. In addition, we use these cookies to ensure that advertising is not displayed to individual users indefinitely and to measure the effectiveness of our advertising campaigns. The identifiers stored by these cookies are provided by our partners. We cannot use the same identifiers in our systems. In addition, we use these cookies to display advertisements that are relevant to your location, for example, to inform you of locations near you where the product you are viewing is available.

"Marketing cookies" are only set if you have given your prior consent to do so. You declare this consent by clicking on the corresponding "OK" button of the cookie banner on the website

However, you can also revoke the consent given at any time here:

You can also manage cookies used for online advertising via the tools developed in many countries as part of self-regulatory programs, such as the US-based https://www.aboutads.info/choices/ or the EU-based https://www.youronlinechoices.com/de/praferenzmanagement/.


Legal basis:

Art. 6 (1) a DSGVO (consent).

The providers/service providers may transfer the data to the USA as part of this further processing. The European Court of Justice has determined with regard to the USA that this is a country with an insufficient level of data protection. In this context, there is a particular risk that your data will be processed by American institutions/authorities for control and monitoring purposes without you having an adequate legal remedy against this.

 

(c) Management and deletion of all cookies

Of course, you can set up your browser so that it generally does not store our cookies on your terminal device. The help function in the menu bar of most web browsers explains how to prevent your browser from accepting new cookies, how to have your browser notify you when you receive a new cookie, or even how to delete all cookies you have already received and block them from all further use.

Please note that a general deactivation of cookies may lead to functional limitations of our website.

To do this, please proceed as follows:


In Internet Explorer:

1. in the "Tools" menu, select "Internet Options".

Click on the "Privacy" tab. 3.

3. now you can make the security settings for the Internet zone. Here you set whether and which cookies should be accepted or rejected.

4. confirm your settings with "OK".

 

In Firefox:

1. select the Settings item in the "Tools" menu.

Click on "Privacy". 3.

3. in the drop-down menu, select "create according to custom settings".

4. now you can set whether cookies should be accepted, how long you want to keep these cookies and add exceptions, which websites you always or never want to allow to use cookies.

5. confirm your setting with "OK".

 

In Google Chrome:

1. click on the Chrome menu in the browser toolbar.

2. now select "Settings". 3.

Click on "Show advanced settings". 4.

4. under "Privacy", click "Content settings". 5.

5. Under "Cookies", you can set the following settings for cookies:

  • Delete cookies
  • Block cookies by default
  • Delete cookies and website data by default after exiting the browser.
  • Allow exceptions for cookies from specific websites or domains


Insofar as you wish to delete individual cookies set in your browser or want to find out which service providers / suppliers have set cookies in your browser, you can also do this / find out via a "preference manager". Such a manager is available, for example, at www.youronlinechoices.com.

 

(d) Cookies/pixels/tags used on our website

(aa) Google Analytics

If you have consented to the use of Google Analytics, this website uses Google Analytics, a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

 

Scope of processing

Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there in anonymized form.

We use the function 'anonymizeIP' (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

During your visit to the website, the following data is collected, among other things:

  • The pages you visit, your "click path".
  • achievement of "website goals" (conversions, e.g. newsletter sign-ups, downloads, purchases)
  • Your user behavior (for example, clicks, dwell time, bounce rates)
  • Your approximate location (region)
  • Your IP address (in shortened form)
  • Technical information about your browser and the end devices you use (e.g., language setting, screen resolution)
  • your internet service provider
  • the referrer URL (via which website/ via which advertising medium you came to this website)
  • Purposes of the processing


The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

We also use the technical extension "Google Signals", which enables cross-device tracking. This makes it possible to associate a single website visitor with different end devices. However, this only happens if the visitor has logged into a Google service when visiting the website and has also activated the "personalized advertising" option in their Google account settings. Even then, however, no personal data or user profiles become accessible to us; they remain anonymous for us.

If you do not wish to use "Google Signals", you can deactivate the "personalized advertising" option in your Google account settings.

The recipient of the data is

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

as an order processor. We have concluded an order processing agreement with Google for this purpose. Google LLC, based in California, USA, and, if applicable, US authorities may access the data stored by Google.A transfer of data to the USA cannot be ruled out.

 

Storage period

The data sent by us and linked to cookies are automatically deleted after a maximum of 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google, by

a. Not giving your consent to the setting of the cookie or

b. downloading and installing the browser add-on to disable Google Analytics HERE.

 

Legal basis and revocation option

for this data processing is your consent, Art.6 para.1 p.1 lit.a DSGVO. You can revoke your consent at any time by accessing the cookie settings and changing your selection there.

For more information on Google Analytics terms of use and data protection at Google, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.

User terms and conditions: https://www.google.com/analytics/terms/de.html, overview of data protection: https://www.google.com/intl/de/analytics/learn/privacy.html, and privacy policy: https://www.google.de/intl/de/policies/privacy.

Additional information is located here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de.

Other recipients: We pass on the collected data for processing to the respective internal departments as well as to other affiliated companies within the ECE Group or to external service providers, order processors (e.g. platform, hosting, support and analysis service providers) in accordance with the required purposes (to perform web analysis).


Legal basis:

Art. 6 (1) f DSGVO (legitimate interest).

 

(bb) Google reCAPTCHA

On this website, we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish whether an input is made by a natural person or is abused by machine and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in determining individual ownership on the Internet and the prevention of abuse and spam. The use of Google reCAPTCHA may also involve the transmission of personal data to the servers of Google LLC. in the USA.

Further information on Google reCAPTCHA as well as Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

 

(cc) Google Tag Manager

We use "Google Tag Manager" on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Tag Manager allows us as marketers to manage website tags through one interface. The Google Tag Manager tool that implements the tags is a cookie-less domain and does not itself collect any personal data. Google Tag Manager takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

Third-party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland

Further information on data protection can be found on the following Google web pages:

 

Recipient:

Third-party provider information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded with this service provider as suitable guarantees. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de


Legal basis:

Art. 6 (1) f DSGVO (legitimate interest).

 

(dd) Google Ads Conversion

We use the offer of Google Ads Conversion to draw attention to our attractive offers with the help of advertising media (so-called Google Ads) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. In this way, we pursue the interest of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.

These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your end device. These cookies usually lose their validity after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values.

These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers' websites. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.

 

(ee) Google Ads Remarketing

We use the remarketing function within the Google Ads service. With the remarketing function, we can present users of our website with advertisements based on their interests on other websites within the Google advertising network (in Google Search or on YouTube, so-called "Google Ads" or on other websites). For this purpose, the interaction of the users on our website is analyzed, e.g. which offers the user was interested in, in order to be able to display targeted advertising to the users on other sites even after they have visited our website. For this purpose, Google stores cookies on the end devices of users who visit certain Google services or websites in the Google display network. These cookies are used to record the visits of these users. The cookies are used to uniquely identify a web browser on a specific end device and not to identify a person.

Cookies used: more information can be found in the "Cookies" section.


Recipients:

More information about Google's privacy policy can be found here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at https://www.networkadvertising.org.

Transfers to third countries are possible. So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded as suitable guarantees. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de.

 

Cancellation/Revocation:

You can prevent participation in this tracking procedure in various ways:

(a) by adjusting your browser software settings accordingly; in particular, the suppression of third-party cookies will result in you not receiving third-party ads;

b) by installing the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin;

c) by disabling the interest-based ads of the providers that are part of the "About Ads" self-regulatory campaign, through the link https://www.aboutads.info/choices, with this setting being deleted when you delete your cookies;

d) by permanent deactivation in your browsers Firefox, Internetexplorer or Google Chrome at the link https://www.google.com/settings/ads/plugin,

e) by means of the corresponding cookie setting. We would like to point out that in this case you may not be able to use all functions of this offer in full.

Lifetime of cookies: up to 180 days (this only applies to cookies set via this website).


Legal basis:

Art. 6 (1) a DSGVO (consent).

 

(ff) Facebook Custom Audiences (for websites) / Conversion - Facebook Pixel

This website uses the so-called "Facebook Pixel" and the Conversions API of the social network "Facebook" of Facebook Inc. ("Facebook") for the following purposes:

A. Facebook (Website) Custom Audiences

We use the Facebook Pixel and the Conversions API for remarketing purposes in order to be able to address you again within 180 days. This allows users of the website to be shown interest-based advertisements ("Facebook Ads") when they visit the social network "Facebook" or other websites that also use the method. In this way, we pursue the interest of showing you advertising that is of interest to you in order to make our website or offers more interesting for you.

B. Facebook Conversion

In addition, with the help of the Facebook Pixel and the Conversions API, we want to ensure that our Facebook Ads correspond to the potential interest of users and do not have a harassing effect. With the help of the Facebook Pixel and the Conversions API, we can track the effectiveness of the Facebook Ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook Ad (so-called "conversion").

Due to the marketing tool used (Facebook Pixel and Conversions API), your browser automatically establishes a direct connection with Facebook's server as soon as you have agreed to the use of cookies requiring consent. Through the integration of the Facebook Pixel and the use of the Conversions API, Facebook receives the information that you have accessed our website or clicked on an ad from us. If you are registered with a Facebook service, Facebook can assign the visit to your account.

The processing of data by Facebook takes place within the framework of Facebook's data usage policy. Specific information and details about the Facebook Pixel and Conversions API and how it works can also be found in Facebook's help section.

Cookies used: You can find more information in the "Cookies" section.


Recipient:

Shared Responsibility:

We are jointly responsible with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook) for the collection and transfer of data as part of this process. This applies for the following purposes:

The creation of individualized or appropriate ads, as well as for their optimization,

The delivery of commercial and transactional messages (e.g. via Messenger).

The following processing operations are therefore not included in the joint processing:

Processing that occurs after collection and transmission is the sole responsibility of Facebook.

The creation of reports and analyses in aggregated and anonymized form is carried out as part of commissioned processing and is therefore our responsibility.

For joint responsibility, we have concluded a corresponding agreement with Facebook, which can be accessed here: https://www.facebook.com/legal/controller_addendum. This sets out the respective responsibilities for fulfilling the obligation under the GDPR with regard to joint responsibility.

The contact details of the responsible party, as well as Facebook's data protection officer, can be accessed here: www.facebook.com/about/privacy

We have agreed with Facebook that Facebook can be used as a point of contact for the exercise of data subject rights. This does not affect the competence of the data subject rights.

More information on how Facebook processes personal data, including its legal basis and further information on data subject rights can be found here: https://www.facebook.com/about/privacy . We transfer the data within the scope of shared responsibility on the basis of legitimate interest pursuant to Art. 6 (1) f DSGVO.

Information on the data security conditions can be found here. https://www.facebook.com/legal/terms/data_security_terms and on processing based on standard contractual clauses can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum.


Additional Recipients:

We also pass on the collected data for processing to the respective internal departments as well as to other affiliated companies within the ECE Group or to external service providers, order processors (e.g. platform, hosting, support and analysis service providers) in accordance with the required purposes (to perform the ad playout and analysis).


Deletion/ objection:

You can find the deactivation of the "Facebook Custom Audiences" function under Cookie Settings.

the cookie settings can be found here.

For logged-in users, deactivation is possible at https://www.facebook.com/settings/?tab=ads#

Lifetime of cookies: up to 180 days after the last interaction (this only applies to cookies set via this website).


Legal basis:

Legal basis: Art. 6 (1) a DSGVO.

 

(4) Data processing in the context of registration via the LOGIN offer

Retailer Login

Via the so-called Retailer Login, you, as a business partner of ECE, create a tenant account, which serves to simplify the execution of the rental contract obligations. When creating the tenant account, the data that ECE needs to contact the customer is collected: Name, e-mail address, telephone number, company name, telephone number if applicable, address data.

 

(5) Use of social media plugins

So-called social plug-ins ("plug-ins") from social networks are used on our websites, in particular the "Share" or "Share with friends" button of the provider "Facebook", whose website facebook.com is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland is responsible for the German website facebook.de. The plug-ins are usually marked with a Facebook logo. In addition to Facebook, we use plug-ins from "Twitter" (provider: Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103) and "Pinterest" (provider: Pinterest Inc., 808 Brannan Street San Francisco, CA 94103, USA).

For data protection reasons, we have deliberately decided against using direct plug-ins from social networks on our websites. Therefore, when you visit our websites, no data is automatically transmitted to social networks such as Facebook, Twitter or Pinterest. Only when you actively click on the respective button yourself does your internet browser establish a connection to the servers of the respective social network, i.e. by clicking on the respective button (e.g. "Share", "Share" or "Share with friends"), you consent to your internet browser establishing a connection to the servers of the respective social network and transmitting usage data to the respective operator of the social network.

The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user.

The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and link to the page, for example, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the data protection declarations of these providers provided below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.

Addresses of the respective plug-in providers and URL with their privacy notices:

a) Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/policy.php; further information on data collection: https://www.facebook.com/help/186325668085084, https://www.facebook.com/about/privacy/your-info-on-other#applications as well as https://www.facebook.com/about/privacy/your-info#everyoneinfo.

b) Twitter, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacy.

c) Pinterest Inc, 808 Brannan Street San Francisco, CA 94103, USA, https://about.pinterest.com/privacy/.


Transfers to third countries are possible. So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded as suitable guarantees. Further information can be found here: ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de.

 

(a) Facebook plugin

Plugins of the social network Facebook (Facebook Inc. 1601 S. California Ave, Palo Alto, CA 94304, USA) may be integrated on our website. You can recognize the Facebook plugins by the Facebook logo or the "Like button" or "Like me" on our page. You can find an overview of the Facebook plugins here:

https://developers.facebook.com/docs/plugins/

When you visit our pages, a direct connection between your browser and the Facebook server is established by you actively pressing the plugin button. The confirmation of the social media plugin is done by your active decision. As a result, ECE itself does not come into possession of personal data.

The visit to our website and the visit to the Facebook fan page may thereby be tracked by Facebook if the user has a user account with Facebook. In this regard, we have no influence on the transmission of information to Facebook. If you do not want Facebook to be able to assign the visit to our pages to your Facebook user account, please log out of Facebook. You can find more information on this in Facebook's privacy policy at

https://de-de.facebook.com/policy.php

By each call of web pages operated by us and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the data subject is automatically caused by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE can be retrieved. Within the scope of this technical procedure, Facebook receives knowledge of which specific sub-page of our website is visited by the data subject.

We use Facebook fan pages for which we are jointly responsible with Facebook Ireland Limited:

In joint responsibility with Facebook, we analyze how you use our fan page (page insights). The information required under the GDPR on data processing in the context of Page Insights can be obtained from Facebook; currently by name in Facebook's privacy notices at https://www.facebook.com/privacy/explanation.

Facebook also provides you with the relevant contents of the joint responsibility processing agreement concluded between Facebook and us pursuant to Article 26 of the GDPR; currently at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

As part of the Page Insights, we ourselves only receive anonymized statistics - we have no access to personal data processed by Facebook. The processing of anonymized data by us is based on legal requirements that allow us to process personal data because we have an overriding legitimate interest in gaining a better understanding of the interests of visitors to our Fanpage (Art. 6 (1) f) DSGVO).

We offer various community functions on our fanpages that allow you to interact with other users, for example by posting on our Wall, leaving comments or liking or sharing posts. Please note that these areas are publicly accessible and any personal information that you post in them or provide when registering can be viewed by others. We cannot control how other users of our Fanpage use this information. In particular, we cannot prevent unsolicited messages from being sent to you.

We collect all data entered in the context of the community functions in order to be able to provide you with the community functions as intended. Without this data, we are not able to provide you with the corresponding community functions. This data is processed on the basis of statutory provisions that allow us to process personal data insofar as it is necessary for the use of a service or the fulfillment of a contract (e.g. Section 15 (1) TMG; Article 6 (1) b) DSGVO), or because we have an overriding legitimate interest in making the use of our offer as easy and efficient as possible (Article 6 (1) f) DSGVO).

Content posted in community areas can be stored for an unlimited period of time. If at any time you wish to have posted content removed, please send us an e-mail to this effect to datenschutz(at)ece.com.

 

(b) Instagram plugin

Our website uses so-called social plugins ("plugins") from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera".

If you call up a page of our website that contains such a plugin, a direct connection to the servers of Instagram is established by you actively clicking on this plugin button. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged into Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there.

If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts. For the purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and setting options for protecting your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/

If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (https://noscript.net/).

 

Use of YouTube

We have integrated YouTube videos into our online offer, which are stored on https://www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in the next paragraph will be transferred. We have no influence on this data transmission.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the aforementioned data is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy:

https://www.google.de/intl/de/policies/privacy. Transfers to third countries are possible. So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded as suitable guarantees. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de.

 

(d) LinkedIn Insight Tag

Our website uses the conversion tool "LinkedIn Insight Tag" from LinkedIn Ireland Unlimited Company. This tool creates a cookie in your web browser, which enables the collection of, among other things, the following data: IP address, device and browser properties, and page events (e.g. page views). This data is encrypted, anonymized within seven days, and the anonymized data is deleted within 90 days. LinkedIn does not share personal data with ECE, but provides anonymized reports on website audience and ad performance. In addition, LinkedIn offers the possibility of retargeting via the Insight Tag. ECE can use this data to display targeted advertising outside of its website without identifying you as a website visitor. For more information on data protection at LinkedIn, please refer to the LinkedIn privacy notices.

LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To deactivate the Insight tag on our website ("opt-out"), click here.

 

(e) Notes when using apps

Apps are regularly made available for download on third-party sites (such as iTunes, Google, Apple Store, Google Play Store, etc.). If, according to the applicable terms of use of such a provider, ECE becomes your contractual partner for the purchase of the app, we process the data provided to us by the third-party provider to the extent necessary for the performance of the contract so that you can download the app to your mobile device.

Our app uses the following permissions for the purposes listed behind it, which gives it access to certain functions of your mobile device:

  • Location - Our Apps may use location data from your mobile device to show you news from your region. You can disable access to location data at any time in the settings of your mobile device.

 

3. COMMON PRINCIPLES FOR PROCESSING YOUR DATA ON OUR WEBSITE

a) Recipients of the data

Only those internal offices or organizational units as well as other companies affiliated with us under company law will receive your data if this is necessary to fulfill our contractual and legal obligations or if we need the data in the context of processing and implementing our legitimate interest.

Your data will be passed on to external recipients in connection with the processing of contracts, if we are obliged to provide information, report or pass on data in order to fulfill legal requirements, if you have given us permission to pass on data to third parties, or to external service providers who act as order processors on our behalf or perform functions for us (e.g. IT service providers, data centers, data shredders or courier services, marketing, recruiting, newsletters, security, credit services, logistics, printing services, telecommunications, parking services and financial service providers).

If you have expressly consented, we also share your photo data with third-party companies. These are, for example, Facebook, Instagram and other social media networks used by ECE, but also social media agencies and other third parties. Of course, this does not happen if you have not given your express consent to the transfer of the photo data.

 

b) Duration of storage

Based on your consent for the performance of a contract or for the exercise of legitimate interests, your personal data will be stored. However, if you revoke your consent or object to the data processing or the purpose of processing has ceased to exist, the images and other personal data will be deleted from the ECE computer systems or removed from the websites and social media pages of the shopping centers managed by ECE within a reasonable period of time, unless their - temporary - further processing is required due to statutory retention obligations.

Furthermore, ECE has no influence on the publication at external online media. Already printed print/offline media containing the images or the other personal data may continue to be used for the above purposes even after revocation. In the case of publication of a group photo or video, the revocation of an individual customer does not in principle lead to their removal. Apart from that, the images or the other personal data will be deleted promptly after receipt of the revocation, subject to statutory or legal retention obligations. If a transfer to third parties has been initiated by ECE, the recipients will be informed accordingly to the extent required by law; however, it is pointed out that regularly not all recipients can be notified of a deletion due to the special nature of the Internet.

 

c) Transfer of your data to a third country

We transfer your data to entities located in countries outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries), which act as order processors for us (e.g. IT service providers or data centers). In the context of the use of Google Analytics, we transfer your anonymized IP address to the USA. In addition, your data may be transferred to providers of social media plugins; for further details, please refer to their privacy policy.

If there is no EU Commission decision on an adequate level of data protection for the country in question, we conclude contracts in accordance with EU data protection requirements that ensure that your rights and freedoms are adequately protected and guaranteed. We will be happy to provide you with corresponding detailed information upon request.

Otherwise, we do not transfer your personal data to countries outside the EU or the EEA or to international organizations.

 

d) Your rights as a person affected by the collection of data

If you exercise your rights under this section, in accordance with applicable law, we will communicate the rectification or erasure of your personal data or the restriction of processing implemented in accordance with your request to all recipients to whom the personal data have been disclosed, unless such communication is impossible or involves a disproportionate effort.

If you wish to exercise your rights and/or receive all relevant information, please contact us using the contact details provided in Section 10. We will respond within 1 month of receiving your request at the latest. In accordance with applicable law and the information below, you have the right to request access to your personal data, its correction, deletion or portability (e.g. transfer of your personal data to another service provider) of your personal data processed by us, as well as the restriction of processing.

 

(1) Right to information

You are entitled at any time to request information free of charge about, among other things, your data processed by us, the processing purposes, the categories of recipients, the planned storage period or, in the case of third country transfer, the appropriate guarantees. You are also entitled to receive a copy of your data.

 

(2) Correction of your personal data

Under applicable law, you are entitled to correct your personal data that you have shared with us. Through your settings on the Services, you can update your account information, change your profile settings, order/unsubscribe to messages from us, and set your preferences regarding sharing on the Services, including location-based features.

If you have registered for our Services in writing or by email, please contact us in writing or by email using the contact information provided in Section 10 to correct your personal information.

 

(3) Deletion of your personal data

You may request us to delete your personal data at any time, in writing or by e-mail using the contact details provided in Section 10. If you request us to do so, we will delete all personal data held about you without delay, provided that the purpose of processing has ceased to apply and no statutory or legal retention obligations prevent deletion. In this case, we will block the data.

 

(4) Restriction of processing

If you request us to restrict the processing of your personal data, in writing or by e-mail via the contact details mentioned in Section 10, e.g. if you question the correctness, lawfulness or necessity on our part to process your personal data, we will reduce the processing of your personal data to the minimum necessary (storage) and, if required, use it only to establish, exercise or enforce legal claims or to protect the rights of other natural or legal persons and for other legal reasons. If the restriction is lifted and we process your personal data again, you will be notified of this without delay.

 

(5) Portability of your personal data

You have the right to receive your personal data which you have provided to us on the basis of consent or a contract and which is processed automatically. If you request us to do so in writing or by email using the contact details provided in Section 10, we will provide you with your personal data in a commonly used, machine-readable format without undue delay after receiving your request. Upon request, we will transfer your personal data to external parties (data controllers) that you name in your request, provided that this request does not violate the rights or freedoms of third parties and is technically feasible.

 

(6) Revocation of your consent / rights of withdrawal

You may revoke your consent at any time without giving reasons. Please contact us by e-mail or letter (for contact details, see section 10). We will no longer process your personal data for the purposes for which you gave your consent and will block it accordingly. The revocation of your consent does not affect the lawfulness of the processing based on your consent prior to its revocation.

 

(7) Rights of objection

You also have the right to object at any time, on grounds relating to your particular situation, to the processing by us of data relating to you which is carried out on the basis of Article 6(1)(e) (performance of a task in the public interest) or Article 6(1)(f) DSGVO (legitimate interest of the controller); this also applies to profiling based on these provisions. In this case, we will no longer process the data relating to you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of such data for the purpose of such marketing. If you object to processing for direct marketing purposes, this data will no longer be processed for these purposes.

Please address any revocations to the address given under item 10.

 

(8) Complaint to the competent data protection authority

You have the right to lodge a complaint about our data processing with a supervisory authority.

 

(9) Amendment of our data protection provisions

We reserve the right to occasionally adapt this data protection statement so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection statement, e.g. when introducing new services. The new data protection statement will then apply to your next visit.

 

(10) Questions about data protection

If you have any questions about data protection or would like to exercise your rights as outlined above, please contact us using the data below:

 

ECE Group Services GmbH & Co. KG

Heegbarg 30

22391 Hamburg

data protection(at)ece.com

 

Hamburg, 14.10.2021