We are pleased about your visit to our website and your interest in our center. We take the protection of your personal data seriously and would like you to feel safe and comfortable when visiting our web pages.
Basic information about the collection and processing of personal data on our website
As a matter of principle, you can visit this website without us requiring any personal data from you. We are merely informed about which IP address has called up which page when, based on a system stored on our website (see below), which ensures an anonymization of the IP addresses. This means that there may be an evaluation for purely statistical purposes but the individual visitor remains anonymous.
In exceptional cases, your personal data are collected and processed through the website. Personal data include all information which refers to an identified or identifiable person, such as your name and your address.
If you have given your corresponding consent and we are authorised to do so by law, we collect personal data from you as a user of the website to provide you with contents on the website on the one hand and offer additional services on the other hand, such as the sending of a newsletter.
We, the companies of the ECE Group:
ECE Group GmbH & Co. KG
ECE Marketplaces GmbH & Co. KG
ECE Work & Live GmbH & Co. KG
ECE Group Services GmbH & Co. KG
GB Services GmbH
ECE Real Estate Partners G.m.b.H.
are jointly responsible for the protection of your personal data in the connection with the processing on our website (Art. 26 of the General Data Protection Regulation).
In order to ensure that you can easily and reliably exercise your data protection rights within the scope of this joint responsibility, we have agreed that you can assert your data subject rights described in section 9 against each individual ECE company.
Contact details of the data protection officer:
Data Protection Officer of the ECE Group
Or by email to: datenschutz(at)ece.com
3. Legal basis for data processing on our website
We process personal data in conformity with the provisions of the European General Data Protection Regulation (GDPR) and the national data protection provisions in accordance with the following legal bases:
a.) Based on your consent (Article 6 Para 1 a EU GDPR)
If you have given us your consent to process personal data for certain purposes, the lawfulness of this processing is given on the basis of your consent. Any consent given may be withdrawn at any time. The withdrawal of the consent does not affect the lawfulness of the data processed up to the withdrawal.
b.) For the performance of contractual obligations (Article 6 Para 1 b EU GDPR)
The processing of your data is partly also carried out for the performance of a contract entered into with you at your request or to take any steps prior to the entering into the contract, such as within the framework of a service obligation existing vis a vis you. Further details concerning these data processing purposes can be taken from the respectively relevant contractual documents and terms and conditions of participation.
c.) Within the framework of a balancing of interests (Article 6 Para 1 f EU GDPR)
As far as necessary, we process your data to protect our legitimate interests or legitimate interests of third parties. These are, eg:
• Assertion of legal claims and defence in legal disputes
4. Purpose of the data processing on our website
As a matter of principle, you can use our website without entering any personal data. Insofar as we collect your personal data on our website, this is carried out for the following purposes:
Technical provision of the website and monitoring of its functions
Contacting through the contact form
Mailing of newsletters
Statistical analysis of the use of the website
5. How do we collect personal data?
We collect your personal data on our website in different ways:
5.1 Hosting and log files
We have instructed so-called hosting providers to make available the following services: infrastructure and platform services, computing capacity, memory and database services, security services as well as technical maintenance services, which we use for the purpose of operating this online offering.
We and / or our hosting providers collect, on the basis of our legitimate interest within the meaning of Article 6 Para 1 lit. f. GDPR in an efficient and safe provision of this online offering data about every access to the server on which this online offering is hosted (so-called server log files). The access data include the name of the retrieved website, file, date and time of retrieval, data volume transferred, notification of a successful retrieval, browser type plus version, the operating system of the user, referrer URL (the previously visited website), IP address and the requesting provider.
Log file information is stored for security reasons (eg to investigate abuses or fraud) and is immediately erased if the retention purpose no longer applies. Data whose further retention is necessary for reasons of evidence are exempted from erasure pending the final clarification of the respective incident.
Whenever you access our website, your browser sends automatically certain information to the server of the website in order to allow communication between your browser and the server. This information is stored in a so-called log file. This includes, for instance, information about
– the type and version of the browser used by you,
– the operating system used by you,
– the website from which you have come to the current page,
– the host name (IP address) of your computer as well as
– the time of the access.
Subject to any statutory duties of retention, we erase or anonymise your IP address after you have left the website, unless otherwise provided for in this Data Privacy Statement and provided that this is legally admissible.
Apart from that, we use the information transmitted by your browser to our server in anonymised form – without any inferences about you being possible – to analyse and improve our services. In this way we are able to identify, for instance, possible errors or we can determine the days and times during which our websites have a particularly high number of visitors.
5.2. Press mailing list and newsletters
With the entry into the press mailing list and / or newsletters and/or Love to Food-Blog you declare your consent that we may send you the most recent press releases and / or newsletters directly by email.
If you want to receive the press releases or newsletters, we collect your name as well as your email address. Additional data are not collected. These data are only used for the mailing of the press releases and / or newsletters and are not shared with third parties.
Your consent to the storage of your data as well as their use to mail the press releases and / or newsletters can be withdrawn by you at any time. The withdrawal may be made via a link under the individual press releases or newsletters, on the website (Unsubscribe press mailing list / unsubscribe newsletter) or by informing the above mentioned contacts.
This website uses Google Analytics, an internet analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files which are stored on your computer and permit an analysis of the use of the website by you. The information generated through the cookie about your use of this website is transferred as a rule to a server of Google in the USA and stored there. Because of the activation of the IP anonymization on this website, your IP address is, however, first truncated within member states of the European Union and signatory states of the Agreement on the European Economic Area. The full IP address is only transferred in exceptional cases to a server of Google in the USA and truncated there. Google will use this information based on instructions by the operator of this website, to evaluate your use of the website, compile reports about the website activities and provide further services related to the website and internet utilisation for the website operator. The IP address transmitted within the framework of Google Analytics from your browser is not combined with other data of Google. You can avoid the storage of the cookies by a corresponding setting in your browser software; however, we would like to point out that in this case you may possibly not be able to use all the functions of this website to their full extent. Furthermore, you can avoid the collection of the data generated by the cookie and referring to your utilisation of the website (including your IP address) for Google and the processing of these data by Google by downloading and installing the browser plugin under the following link. Current link:
You can avoid the collection by Google Analytics by clicking on the following link. It sets an opt out cookie which prevents the future collection of your data when visiting this website:
Deactivate Google Analytics
More detailed information on the terms and conditions of use and data protection can be found on www.google.com/analytics/terms/de.html/ and/or on https://www.google.de/intl/de/policies/. We would like to point out that Google Analytics has been extended on this website by the code “gat._anonymizeIp()”, in order to ensure an anonymised collection of IP addresses (so-called IP masking).
5.4 Retailer Login
Using the retailer login, you create a tenant account as a business partner of ECE, which simplifies the execution of the rental agreement obligations. When the tenant account is created, the data required by ECE to contact the customer is collected: Name, e-mail address, telephone number, company name, telephone number if applicable, address data.
5.5. Use of YouTube plugins
We use the provider YouTube, amongst others, for the integration of videos. YouTube is operated by YouTube LLC with headquarters in 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google Inc. with headquarters in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
On some of our internet pages we use plugins of the provider YouTube. If you call up our website with web pages provided with such a plugin, the connection to the YouTube servers is established and the plugin is displayed. The YouTube server receives data about the websites you have visited. If you are logged in as a member of YouTube, YouTube allocates this information to your personal user account. When using the plugin e.g. by clicking the start button of a video, this information is likewise allocated to your user account. You can avoid this allocation by unsubscribing from your YouTube user account as well as other user accounts of the companies YouTube LLC and Google Inc. before using our website and erasing the corresponding cookies of these companies. Further information on data processing and data protection by YouTube (Google) can be found under www.google.de/intl/de/policies/privacy/
5.6 Facebook pixel
Within our online offer, due to our legitimate interests in analysis, optimization and operation of our online offer, the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is used for these purposes. Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law. On the one hand, the Facebook pixel enables Facebook to determine the visitors of our online offer as a target group for the presentation of ads (so-called "Facebook ads"). Accordingly, we use the Facebook Pixel to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offer or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences").
With the help of the Facebook pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of users and do not appear to be annoying. With the help of the Facebook Pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Facebook ad (so-called "conversion"). The Facebook pixel is directly integrated by Facebook when you call up our websites and can store a so-called cookie on your device. If you then log in to Facebook or visit Facebook when logged in, the visit to our online offer will be noted in your profile. The data collected about you is anonymous to us, so we cannot draw conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook as well as for our own market research and advertising purposes. If we should transmit data to Facebook for comparison purposes, this data is encrypted locally in the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of comparing the data with the data similarly encrypted by Facebook.
5.7 LinkedIn Insight Tag
LinkedIn members can control the use of their personal information for promotional purposes in their account settings. To disable ("opt-out") the Insight tag on our website, click here.
6. Recipients of the data
Internal bodies and / or organisational units as well as other companies affiliated to us receive your data only if they need such data to fulfil their contractual and statutory obligations or we need the data within the framework of the processing and enforcement of our legitimate interest.
Any sharing of your data with external recipients is carried out in connection with the contractual performance, insofar as we are obliged to inform, notify or share data in order to meet statutory provisions, if you have given us your consent to the transfer to third parties or external service providers who act on our instructions as contract processors or take over functions for us (eg IT service providers, data centres, data destruction companies or courier services).
7. Transfer of your data to a third country
We transfer your data to bodies in states with a registered office outside the European Union (EU) and / or the European Economic Area (EEA) (so-called third countries) which act for us as contract processors (eg IT service providers or data centres). Within the framework of the use of Google Analytics we transmit your truncated IP address to the USA. Furthermore, there can be a transfer of your data to providers of social media plugins; further details can be taken from the latter’s data privacy statement.
If there is no decision of the EU Commission about an adequate level of protection in a specific country, we enter into contracts in accordance with the EU data protection provisions which ensure that your rights and freedoms are adequately protected and guaranteed. On request, we can provide you with more detailed information.
Apart from that, we do not transfer your personal data to countries outside the EU and / or the EEA or to international organisations.
8. Duration of data retention
We comply with the principles of data avoidance and data minimisation. We, therefore, store your personal data, if we collect them at all, only as long as this is necessary to achieve the purpose of data processing or as provided for by the different retention periods stipulated by the legislator. If the respective purpose no longer exists, in the event of withdrawal of your consent and / or expiration of the statutory retention period, the corresponding data are blocked or erased routinely and in accordance with the statutory provisions.
9. Your rights as a data subject concerned by the data collection
If you exercise your rights in accordance with this section in conformity with the applicable law, we will inform all recipients to whom personal data have been transferred about the rectification or erasure of your personal data made at your request or the restriction of processing, provided that such notification is not impossible or does not involve a disproportionately high effort.
If you exercise your rights and / or would like to have all relevant information, please contact us using the contact details referred to in Clause 12. No later than within one month of receipt of your request we will reply. In accordance with the applicable law and the following statements you are entitled to demand information about your personal data, their rectification, erasure or portability (eg transfer of your personal data to another service provider) of your personal data processed by us as well as a restriction of processing.
9.1 Right to access
You are entitled to access at any time, free of charge, your data processed by us, the processing purposes, the categories of recipients, the planned duration of retention or in the event of transfer to a third country the appropriate guarantees, amongst others. Moreover, you are entitled to receive a copy of your data.
9.2 Rectification of your personal data
According to the applicable law, you are entitled to rectify your personal data that you have shared with us. Through your settings in the services you can update your account information, change your profile settings, subscribe to / unsubscribe to news from us and set your preferences concerning the sharing of the services, and other site-based functions.
If you have registered in writing or by email for our services, please contact us in writing or by email using the contact details in Clause 12, in order to rectify your personal data.
9.3 Erasure of your personal data
You can ask us at any time in writing or by email using the contact details in Clause 12 to erase your personal data. If you request us to do so, we will immediately erase all personal data stored in respect of your person, if the processing purpose no longer applies and no statutory or legal duties of retention oppose the erasure. In the latter case we will block the data.
9.4 Restriction of processing
If you request us, in writing or by email using the contact details in Clause 12, to restrict the processing of your personal data, eg when you question the accuracy, lawfulness or necessity of our processing your personal data, we will reduce the processing of your personal data to the necessary minimum (retention) and use them, if needed, only to establish, exercise or enforce legal claims or to protect the rights of other natural persons or legal entities as well as on other legal grounds. If the restriction is withdrawn and we process your personal data again, we will inform you immediately.
9.5 Portability of your personal data
You have the right to receive your personal data that you have made available to us in conformity with a consent or a contract and which are processed in an automated manner. If you request us to do so in writing or by email using the contact details in Clause 12, we will make your personal data immediately available to you upon receipt of your request in a common, machine-readable format. On request, we will transmit your personal data to external bodies (data controllers) designated by you in your request, provided that such request does not infringe the rights or freedom of third parties and is technically feasible.
9.6 Withdrawal of your consent / rights of withdrawal
You may withdraw your consent at any time without stating any reasons. Please contact us by email or letter (contact details see Clause 12). We will no longer process your personal data for the purposes for which you have granted your consent and will block them accordingly. The withdrawal of your consent does not affect the lawfulness of the processing based on your consent prior to the withdrawal.
9.7 Rights of withdrawal
Moreover, you have the right, for reasons which result from your special situation, to oppose at any time the processing of data relating to you which have been made available to us based on Article 6 Para 1 lit. e (performance of a task carried out in the public interest) or Article 6 Para 1 lit. f GDPR (legitimate interest of the controller); this also applies to any profiling based on these provisions. In this case we no longer process the data concerning you, unless we can produce prove coercive protectable reasons for the processing which override your interests, rights and freedoms or if the processing serves the assertion, exercise or defence of legal claims.
If your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of such data for the purpose of such marketing. If you object to the processing for direct marketing purposes, the data are no longer processed for such purposes.
Please direct any withdrawals to the address specified under Clause 12.
10. Complaint to the competent data protection authority
You have the right to submit a complaint about our data processing. Please direct it to:
Hamburg Commissioner for Data Protection and Freedom of Information
11. Amendment to our data privacy provisions
We reserve the right to amend this Data Privacy Statement from time to time so that it complies at all times with the respectively up to date legal requirements or to implement changes in respect of our services in the Data Privacy Statement, eg at the launch of new services. For your next visit the new Data Privacy Statement will then apply.
12. Questions on data privacy
If you have any questions on data privacy or would like to exercise your rights in accordance with Clause 9, we kindly ask you to contact us as follows:
Data Protection Officer of the ECE Group