We appreciate your visit to our website. We take the protection of your personal data seriously and want you to feel safe and comfortable when visiting our website.
In the case of mere informational use of the website, we only collect the personal data that your browser transmits to our server and that is technically necessary for the presentation of our website and to ensure stability and security.
If you have consented accordingly or if we are legally authorized to do so, we collect personal data from you as a user of the website in order to provide you with content on the website on the one hand and to offer you further services on the other, such as contacting you via a contact form, ordering our newsletter, etc.
1. responsible party
We, the companies of the ECE Group:
ECE Group GmbH & Co. KG
ECE Marketplaces GmbH & Co. KG
ECE Work & Live GmbH & Co. KG
ECE Group Services GmbH & Co. KG
GB Services GmbH
ECE Real Estate Partners G.m.b.H.
are jointly responsible for the protection of your personal data in the context of processing on our website (Article 26 of the General Data Protection Regulation).
To ensure that you can easily and reliably exercise your data protection rights within the scope of this joint responsibility, we have agreed that you can assert your data protection rights against any ECE company.
Contact details of the data protection officer:
To the data protection officer of the ECE Group
Or by e-mail to datenschutz(at)ece.com
2. legal basis for data processing on our websitea)Based on your consent (Art. 6 para. 1 a DSGVO)
Insofar as you have given us consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. Consent given can be revoked at any time. The revocation of consent does not affect the lawfulness of the data processed until the revocation.
b) For the fulfillment of contractual obligations (Art. 6 para. 1 b DSGVO).
In part, the processing of your data is also carried out for the fulfillment of a contract concluded with you at your request or for the fulfillment of a pre-contractual measure, such as within the scope of a service obligation existing towards you. Further details on the data processing purposes in this regard can be found in the relevant contractual documents and conditions of participation.
c) Within the framework of the balancing of interests (Art. 6 para. 1 f DSGVO).
Where necessary, we process your data to protect our legitimate interests or the legitimate interests of third parties. These are, for example:
- Assertion of legal claims and defense in legal disputes
- Ensuring stability and security
3. data processing on our website
We process your personal data on our website in different ways:
(a) Hosting and log files.
The hosting services we use serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services, which we use for the purpose of operating this online offer.
In doing so, we, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer pursuant to Art. 6 para. 1 lit. f DSGVO in conjunction with Art. 28 DSGVO. Art. 28 DSGVO (conclusion of order processing contract).
We, respectively our hosting provider, collect on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO, we collect data about each access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.
The IP address is stored for security reasons (e.g. for the clarification of abuse or fraud) for 14 days and then deleted. Data whose further storage is required for evidentiary purposes is excluded from deletion until final clarification of the respective incident (e.g. further log file information).Every time you visit our website, your browser automatically sends certain information to the website server to enable communication between your browser and the server. This information is stored in a so-called log file. This includes, for example, information about
- the type and version of the browser you are using,
- the operating system you are using
- the website from which you came to the current page,
- the host name (IP address) of your computer and
- the time at which the page was accessed.
In addition, we use the information transmitted by your browser to our servers in anonymous form - i.e. without it being possible to draw any conclusions about you - to analyze and improve our services. In this way, we can, for example, discover possible errors or determine on which days and at what times our websites are particularly heavily used.
b) Newsletter and contact
The newsletter (e.g. press distribution list) contains news, offers and further information about ECE products/services. By registering for the newsletter, you will receive personalized information about the products and services in accordance with the consent you have given in each case.
With your registration for the newsletter, you will receive a newsletter tailored to you (if the newsletter is "personalized", "individualized" or "personally tailored"). For this purpose, we evaluate your click behavior on our websites or within the newsletter in order to compile the information relevant to you.
The data is forwarded to our customer management platform, which may also be accessed by service providers to support and execute the newsletter. The platform service provider may receive access to personal data from a third country (countries outside the European Economic Area). So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded with these service providers as suitable guarantees. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de
Deletion / Revocation:
If you no longer wish to receive the newsletter, you can object to receiving the newsletter at any time and unsubscribe accordingly. To do so, click on the link contained in each newsletter, you will then be guided through the unsubscribe process, or send us your revocation by e-mail.
Unless your profile has been verified as part of the so-called double opt-in process, your profile will be deleted.
Art. 6 (1) a DSGVO (consent).
When you contact us, e.g. via one of our contact forms or by e-mail, the data you provide (e.g. your e-mail address, your name if applicable, your telephone number, etc.) will be processed by us in order to process your request and, if necessary, to contact you. We delete the data accruing in this context when it is no longer required for the aforementioned purpose, provided that the deletion does not conflict with any statutory retention obligations. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f DSGVO. If you provide us with personal data of another person, you must first take the necessary data protection measures for this, e.g. obtain the required prior consent of this person and inform him or her of the purpose for which you are transferring the data to us.
(2) Types and purposes of cookies
The following types of cookies must be distinguished:
(a) "Necessary" cookies - website functionality and administration:
We use "necessary" cookies to operate our website. This includes storing a personal identification number for you, the visitor to our website, for administration and identification purposes. This allows us to provide you with a consistently positive service. We store data such as your saved language preferences.These cookies are set for the duration of your browser session. Without these cookies, the full scope of our website cannot be displayed to you.
A technical necessity is given, for example, with regard to ensuring the following functionalities / achieving the following purposes:
- User input - Even if user input is stored, e.g. in online forms that span several web pages, this storage may be considered necessary.
- Login - Login status, e.g. in a community, is expected of a user and may therefore be considered essential.
- User security - When using cookies for security purposes, in addition to their necessity, their purpose must also be considered. Above all, necessary measures that serve to protect users and their data (e.g., the prevention of so-called brute force attacks) are permissible.
- Language selection - The storage of the language selection on an international website is also expected by users and is considered necessary.
- Cookie opt-in - Cookies that store cookie consent are also essential so that the "cookie banner" does not reappear each time the website is accessed.
- Multimedia content playback - Provided that the cookies are essential for playback, they may be used
- Load balancing - Cookies that serve to evenly distribute the load (load balancing) of a website are considered absolutely necessary.
The use of technically necessary cookies on our website is possible without your consent. For this reason, technical cookies cannot be individually disabled or enabled. However, you always have the option to generally deactivate cookies in your browser (see below under (c)).
§ Section 25 (2) No. 2 TTDSG, Art. 6 (1) b DSGVO (necessity for the fulfillment of the contract)).
(b) Statistics and performance cookies to improve and perform the website.
We use statistics cookies to continuously improve the performance of our website. This includes data we collect from you for the following purposes:
- Web analytics - based on your browsing behavior, we analyze data to improve the functionality and design of our website.
- Advertising effectiveness - based on the way you access our website, we measure the effectiveness of our advertising by analyzing the click-through rate of our advertising. In this way, we optimize the effectiveness of ads that we place on external websites.
- Error management - we measure errors on our websites in order to promptly fix errors or other problems.
- Design testing - we use A/B or multivariate testing to ensure that users of our website experience a consistent view of the website during one session and during sessions that may follow.
Performance cookies collect information about how our websites are used in order to consequently improve their attractiveness, content and functionality. These cookies help us to determine, for example, whether and which subpages of our website are visited and which content users are particularly interested in. In particular, we record the number of times a page is accessed, the number of subpages accessed, the time spent on our website, the order of the pages visited, which search terms led you to us, the country, region and, if applicable, the city from which access is made, as well as the proportion of mobile devices accessing our websites. Furthermore, we record movements, "clicks" and scrolling with the computer mouse in order to understand which areas of our website are of particular interest to users. As a result, we can tailor the content of our website more specifically to the needs of our users and optimize our offering.
The IP address of your computer transmitted for technical reasons is automatically anonymized and does not allow us to draw any conclusions about the individual user.
Legal basis and revocation options:
§ 25 (1) p. 1 TTDSG, Art. 6 (1) a DSGVO (consent).
The use of so-called statistics and performance cookies is based on your consent. You give your consent by clicking on the "OK" button on the website in a banner that links to this consent text. By clicking on the "OK" button, you give your consent for data to be stored on your terminal device (e.g. by setting cookies) or for data to be retrieved from your terminal device.
If you have given your consent, you can object to the use of "statistics" or "performance" cookies at any time by adjusting your cookie settings accordingly.
You can find the cookie settings here.
In some cases, your data will be processed by service providers outside the EEA, for example in the USA, due to the statistical and performance cookies used. There is no corresponding level of data protection there and thus a higher risk for your data. In this case, it is possible, for example, that the transferred data will be processed by local authorities. In order to approximate the level of data protection, so-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded with these service companies as suitable guarantees. Your consent to the use of the statistics or performance cookies also includes your consent to the transfer of certain personal data to third countries, including the USA, in accordance with Art. 49 (1) (a) DSGVO.
(c) Marketing cookies
We use marketing cookies from our advertising partners (so-called third-party cookies) to ensure that our advertising messages are displayed to you at the right time and in the right place. These cookies are permanent cookies, but they have a time limit. They contain a personal identifier that can be used to assign surfing behavior to individual users. In addition, we use these cookies to ensure that advertising is not displayed to individual users indefinitely and to measure the effectiveness of our advertising campaigns. The identifiers stored by these cookies are provided by our partners. We cannot use the same identifiers in our systems. In addition, we use these cookies to display advertisements relevant to your location, for example, to inform you of locations near you where the product you are viewing is available.
§ Section 25 (1) TTDSG, Art. 6 (1) a DSGVO (consent).
Marketing cookies are only set if you have previously given your consent to this. You declare this consent by clicking on the corresponding "OK" button of the cookie banner on the website.
However, you can also revoke the consent given at any time under Cookie Settings. You can find these here.
You can also manage cookies used for online advertising via tools developed in many countries as part of self-regulatory programs, such as the US-based https://www.aboutads.info/choices/ or the EU-based http://www.youronlinechoices.com/uk/your-ad-choices.
In some cases, your data is processed by service providers outside the EEA, for example in the USA, due to the marketing cookies used. There is no corresponding level of data protection there and thus a higher risk for your data.In this case, it is possible, for example, that the transmitted data will be processed by local authorities. In order to align the level of data protection, so-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded with these service companies as suitable guarantees. Your consent to the use of the comfort cookies also includes your consent to the transfer of certain personal data to third countries, including the USA, in accordance with Art. 49 (1) (a) DSGVO.
(3) Management and deletion of all cookies.
Of course, you can set up your browser so that it generally does not place our cookies on your terminal device. The help function in the menu bar of most web browsers explains how to prevent your browser from accepting new cookies, how to have your browser notify you when you receive a new cookie, or even how to delete all cookies you have already received and block them from all further use.
Please note that a general deactivation of cookies may lead to functional restrictions of our website.
To do so, please proceed as follows:
In Internet Explorer:
1. select "Internet Options" in the "Tools" menu.
Click on the "Privacy" tab. 3.
3. now you can make the security settings for the Internet zone. Here you set whether and which cookies are to be accepted or rejected.
4. confirm your setting with "OK".
1. select the Settings item in the "Tools" menu.
Click on "Privacy". 3.
In the drop-down menu, select the entry "Create according to user-defined settings". 4.
5. confirm your setting by clicking "OK".
In Google Chrome:
1. click on the Chrome menu in the browser toolbar.
2. now select "Settings".
Click on "Show advanced settings". 4.
4. under "Privacy", click "Content settings". 5.
5. Under "Cookies", you can set the following settings for cookies:
- Delete cookies
- Block cookies by default
- Delete cookies and website data by default after exiting the browser.
- Allow exceptions for cookies from specific websites or domains.
Insofar as you want to delete individual cookies set in your browser or want to find out which service providers / suppliers have set cookies in your browser, you can also do this / find out via a "preference manager". Such a manager is available, for example , at www.youronlinechoices.com.
(4) Cookies/pixels/tags used on our website
(a) Google Analytics
Insofar as you have given your corresponding consent in the cookie banner, Google Analytics UA and Google Analytics 4 are used on this website. These are web analytics services provided by Google LLC. The responsible party for users in the EU and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Scope of processing
With regard to the Google Analytics UA analysis tool, we use the 'anonymizeIP' function (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your website visit, Google Analytics UA and Google Analytics 4 collect the following data, among others:
- The pages you visit, your "click path".
- Achievement of "website goals" (conversions, e.g. newsletter sign-ups, downloads, purchases)
- Your user behavior (for example, clicks, dwell time, bounce rates)
- Your approximate location (region)
- Your IP address (in shortened form)
- Technical information about your browser and the end devices you use (e.g., language setting, screen resolution)
- your internet service provider
- the referrer URL (via which website/advertising medium you came to this website)
Purpose of processing
The reports provided by Google Analytics UA and Google Analytics 4 are used to analyze the performance of our website and the success of our marketing campaigns.
Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
According to the contract, your data will be used on servers located within the EU. However, it cannot be ruled out that data may also be transferred to the USA. In this case, we have concluded an agreement with Google Ireland Ltd.including the EU standard contractual clauses and in this way ensure that the level of data protection is also appropriate in the case of data processing on servers in the USA (Art. 46 DSGVO). You can find more information on this topic here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en. Furthermore, when activating the tool, you expressly declare your consent to the data transfer (Art. 49 (1) DSGVO).
Other recipients: We pass on the collected data for processing to the respective internal bodies as well as to other affiliated companies within the ECE Group or to external service providers, order processors (e.g. platform, hosting, support and analysis service providers) in accordance with the required purposes (to perform web analysis).
The data sent by us and linked to cookies are automatically deleted after a maximum of 2 months. The deletion of data whose retention period has been reached occurs automatically once a month.
In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google, by
a. Not giving your consent to the setting of the cookie or
b. downloading and installing the browser add-on to disable Google Analytics HERE.
Legal basis and revocation option
The legal basis for this data processing is your consent, § 25 para. 1 TTDSG, Art.6 para.1 p.1 lit.a DSGVO. You can revoke your consent at any time by accessing the cookie settings and changing your selection there.
Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de
(b) Google reCAPTCHA
Purpose / Information:
On this website, we also use the so-called reCAPTCHA cookie of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish whether an entry is made by a natural person or abused by machine and automated processing and is consequently essential for secure use of the website, so it is a so-called necessary cookie (see above). The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google.
Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
In accordance with the contract, your data will be used on servers located within the EU. However, it cannot be ruled out that data may also be transferred to the USA. In this case, we have concluded an agreement with Google Ireland Ltd.including the EU standard contractual clauses and in this way ensure that the level of data protection is also appropriate in the case of data processing on servers in the USA (Art. 46 DSGVO). You can find more information on this topic here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en. In addition, when activating the tool, you expressly declare your consent to the data transfer (Art. 49 (1) DSGVO).
Cookie use is based on § 25 para. 2 no. 2 TTDSG, Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in determining individual ownership on the Internet and preventing abuse and spam.
(c) Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The tool itself (which implements the tags) is a cookie-less domain and does not store any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.
Further information on data protection can be found on the following Google web pages:
Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.
In accordance with the contract, your data is used on servers with a location within the EU. However, it cannot be ruled out that data may also be transferred to the USA. In this case, we have concluded an agreement with Google Ireland Ltd. including the EU standard contractual clauses and in this way ensure that the level of data protection is also appropriate in the case of data processing on servers in the USA (Art. 46 DSGVO). You can find more information on this topic here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en. In addition, when activating the tool, you expressly declare your consent to the data transfer (Art. 49 (1) DSGVO).
Storage period :
§ 25 para. 2 no. 2 TTDSG, Art. 6 (1) f DSGVO (legitimate interest).
(d) Google Ads Conversion
We use the offer of Google Ads Conversion to draw attention to our attractive offers with the help of advertising media (so-called Google Ads) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. In this way, we pursue the interest of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your end device. These cookies usually lose their validity after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values.
These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers' websites. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Ads Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.
Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
According to the contract, your data will be used on servers located within the EU. However, it cannot be ruled out that data may also be transferred to the USA. In this case, we have concluded an agreement with Google Ireland Ltd., including the EU standard contractual clauses, and in this way ensure that the level of data protection is also appropriate in the case of data processing on servers in the USA (Art. 46 DSGVO). You can find more information on this topic here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en. In addition, when activating the tool, you expressly declare your consent to the data transfer (Art. 49 (1) DSGVO).
Storage period :
Legal basis and revocation option:
Your consent is required for this data processing, § 25 para. 1 TTDSG, Art.6 para.1 p.1 lit.a DSGVO. You can revoke your consent at any time by calling up the cookie settings and changing your selection there.
You can find the cookie settings here.
(e) Google Ads Remarketing
We use the remarketing function within the Google Ads service. With the remarketing function, we can present users of our website with advertisements based on their interests on other websites within the Google advertising network (in Google Search or on YouTube, so-called "Google Ads" or on other websites). For this purpose, the interaction of the users on our website is analyzed, e.g. which offers the user was interested in, in order to be able to display targeted advertising to the users on other sites even after they have visited our website. For this purpose, Google stores cookies on the end devices of users who visit certain Google services or websites in the Google display network. These cookies are used to record the visits of these users. The cookies are used to uniquely identify a web browser on a specific end device and not to identify a person.
Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
In accordance with the contract, your data will be used on servers located within the EU. However, it cannot be ruled out that data may also be transferred to the USA. In this case, we have concluded an agreement with Google Ireland Ltd., including the EU standard contractual clauses, and in this way ensure that the level of data protection is also appropriate in the case of data processing on servers in the USA (Art. 46 DSGVO). You can find more information on this topic here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en. Furthermore, when activating the tool, you expressly declare your consent to the data transfer (Art. 49 (1) DSGVO).
Up to 180 days (this only applies to cookies set through this website).
Legal basis and revocation options:
Your consent is required for this data processing, § 25 para. 1 TTDSG, Art.6 para.1 p.1 lit.a DSGVO. You can revoke your consent at any time by calling up the cookie settings [[and changing your selection there.
You can find the cookie settings here.
(f) Facebook Custom Audiences (for websites) / Conversion - Facebook Pixel
This website uses the so-called "Facebook Pixel" and the Conversions API of the social network "Facebook" of Meta Platforms Inc ("Facebook") for the following purposes:
(aa) Facebook (Website) Custom Audiences
We use the Facebook Pixel and the Conversions API for remarketing purposes in order to be able to address you again within 180 days. This allows users of the website to be shown interest-based advertisements ("Facebook Ads") when visiting the social network "Facebook" or other websites that also use the method. In this way, we pursue the interest of displaying advertising that is of interest to you in order to make our website or offers more interesting for you.
(bb) Facebook Conversion
In addition, with the help of the Facebook Pixel and the Conversions API, we want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. With the help of the Facebook Pixel and the Conversions API, we can track the effectiveness of the Facebook Ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook Ad (so-called "conversion").
The processing of data by Meta Platforms takes place within the framework of the Facebook data usage policy. Specific information and details about the Facebook Pixel and Conversions API and how it works can also be found in the help section of the Facebook website.
We are jointly responsible with Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland for the collection and transfer of data as part of this process. This is for the following purposes:
- The creation of individualized or appropriate advertisements, as well as for their optimization.
- The delivery of commercial and transactional messages (e.g. via Messenger).
- The following processing operations are therefore not covered by joint processing:
- Processing that takes place after collection and transmission is the sole responsibility of Meta Platforms Ireland Ltd.
- The preparation of reports and analyses in aggregated and anonymized form is carried out as part of a commissioned processing and is therefore our responsibility.
We have concluded a corresponding agreement with Meta Platforms Ltd. for joint responsibility, which can be accessed here: https://www.facebook.com/legal/controller_addendum. This sets out the respective responsibilities for fulfilling the obligation under the GDPR with regard to joint responsibility.
The contact details of the data controller, as well as the data protection officer of Meta Platforms Ireland Ltd. can be found here: https://www.facebook.com/about/privacy.
We have agreed with Meta Platforms Ireland Ltd. that Meta Platforms Ireland Ltd. may be used as a contact point for the exercise of data subject rights. This is without prejudice to the competence of the data subject rights.
Further information on how Meta Platforms processes personal data, including its legal basis and further information on data subject rights can be found here: https://www.facebook.com/about/privacy. We transfer data under shared responsibility on the basis of legitimate interest pursuant to Art. 6 (1) f DSGVO.
Information on data security conditions is located here. https://www.facebook.com/legal/terms/data_security_terms and on processing operations based on standard contractual clauses is located here: https://www.facebook.com/legal/EU_data_transfer_addendum.
We also share the collected data for processing with the respective internal bodies as well as with other affiliated companies within the ECE Group or with external service providers, processors (e.g. platform, hosting, support and analytics service providers) according to the required purposes (to perform ad playout and analysis).
Lifetime of the pixels:
Up to 180 days after the last interaction (this only applies to pixels set via this website).
Legal basis and revocation options:
Your consent is required for this data processing, § 25 para. 1 TTDSG, Art.6 para.1 p.1 lit.a DSGVO. You can revoke your consent at any time by calling up the cookie settings and changing your selection there.
You can find the cookie settings here.
For logged-in users, deactivation is possible at https://www.facebook.com/settings/?tab=ads#.
d) Data processing in the context of registration via the LOGIN offer/Retailer Login
Via the so-called Retailer Login, you as a business partner of ECE create a tenant account, which serves to simplify the execution of the rental contract obligations. When creating the tenant account, the data that ECE needs to contact the customer is collected: Name, e-mail address, telephone number, company name, telephone number if applicable, address data.
e) Use of social media plugins
So-called social plug-ins ("plug-ins") from social networks are used on our websites, in particular the "Share" or "Share with friends" button of the provider "Facebook", whose website facebook.com is operated by Meta Platforms Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. Meta Platforms Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland is responsible for the German website facebook.de. The plug-ins are usually marked with a Facebook logo. In addition to Facebook, we use plug-ins from "Twitter" (provider: Twitter, Inc., 1355 Market St, Suite 900, San Francisco, CA 94103) and "Pinterest" (provider: Pinterest Inc., 808 Brannan Street San Francisco, CA 94103, USA).
For data protection reasons, we have deliberately decided against using direct plug-ins from social networks on our websites. Therefore, when you visit our websites, no data is automatically transmitted to social networks such as Facebook, Twitter or Pinterest. Only when you actively click on the respective button yourself does your internet browser establish a connection to the servers of the respective social network, i.e. by clicking on the respective button (e.g. "Share", "Share" or "Share with friends"), you consent to your internet browser establishing a connection to the servers of the respective social network and transmitting usage data to the respective operator of the social network.
The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user.
The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and link to the page, for example, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.
For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the data protection declarations of these providers provided below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.
Addresses of the respective plug-in providers and URL with their privacy notices:
a) Meta Platforms Inc, 1601 S California Ave, Palo Alto, California 94304, USA; www.facebook.com/policy.php; further information on data collection: https://www.facebook.com/help/186325668085084, https://www.facebook.com/about/privacy/your-info-on-other#applications as well as https://www.facebook.com/about/privacy/your-info#everyoneinfo.
b) Twitter, Inc, 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy.
c) Pinterest Inc, 808 Brannan Street San Francisco, CA 94103, USA, https://about.pinterest.com/privacy/.
Transfers to third countries are possible. So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded as suitable guarantees. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de
(a) Facebook plugin Plugins of the social network Facebook (Meta Platforms Inc. 1601 S. California Ave, Palo Alto, CA 94304, USA) may be integrated on our website. You can recognize the Facebook plugins by the Facebook logo or the "Like button" or "Like me" on our page. You can find an overview of the Facebook plugins here: https://developers.facebook.com/docs/plugins/
When you visit our pages, a direct connection between your browser and the Facebook server is established by you actively pressing the plugin button. The confirmation of the social media plugin takes place through your active decision. As a result, ECE itself does not come into possession of personal data.
By each call of web pages operated by us and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the information technology system of the data subject is automatically caused by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE.
It can be retrieved. Within the scope of this technical procedure, Facebook receives knowledge of which specific sub-page of our website is visited by the data subject.
We use Facebook fan pages for which we are jointly responsible with Meta Platforms Ireland Limited:
Meta Platforms Ireland Ltd. also provides you with the relevant contents of the joint responsibility processing agreement concluded between Meta Platforms Ireland Ltd. and us pursuant to Article 26 of the GDPR; currently at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
As part of the Site Insights, we ourselves only receive anonymized statistics - we have no access to personal data processed by Meta Platforms Ireland Ltd. The processing of anonymized data by us is based on legal requirements that allow us to process personal data because we have an overriding legitimate interest in gaining a better understanding of the interests of visitors to our Fanpage (Art. 6 (1) f) DSGVO).
We offer various community functions on our fanpages that allow you to interact with other users, for example by posting on our Wall, leaving comments or liking or sharing posts. Please note that these areas are publicly accessible and any personal information that you post in them or provide when registering can be viewed by others. We cannot control how other users of our Fanpage use this information. In particular, we cannot prevent unsolicited messages from being sent to you.
We collect all data entered as part of the community functions in order to provide you with the community functions as intended. Without this data, we are not able to provide you with the corresponding community functions. This data is processed on the basis of legal regulations that allow us to process personal data insofar as it is necessary for the use of a service or the fulfillment of a contract (e.g. Art. 6 (1) b) DSGVO), or because we have an overriding legitimate interest in making the use of our offer as easy and efficient as possible (Art. 6 (1) f) DSGVO).
Content posted in community areas can be stored for an unlimited period of time. If at any time you wish to have any posted content removed, please send us an email to this effect to datenschutz(at)ece.com.
(2) Instagram plugin
Our website uses so-called social plugins ("plugins") from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera".
If you call up a page of our website that contains such a plugin, a direct connection to the servers of Instagram is established by you actively clicking on this plugin button. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged into Instagram.This information (including your IP address) is transmitted from your browser directly to a server of Instagram in the USA and stored there.
If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed there to your contacts. For the purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and setting options for protecting your privacy, please refer to Instagram's data protection information: https://help.instagram.com/155833707900388/
If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (https://noscript.net/).
f) Use of YouTube
We have integrated YouTube videos into our online offer, which are stored on www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in the next paragraph will be transferred. We have no influence on this data transmission.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the aforementioned data is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
https://www.google.de/intl/de/policies/privacy. Transfers to third countries are possible.
So-called standard contractual clauses pursuant to Art. 46 DSGVO have been concluded as suitable guarantees. Further information can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_de.
g) LinkedIn Insight Tag
Our website uses the conversion tool "LinkedIn Insight Tag" of LinkedIn Ireland Unlimited Company. This tool creates a cookie in your web browser that enables the collection of, among other things, the following data: IP address, device and browser properties, and page events (e.g., page views). This data is encrypted, anonymized within seven days, and the anonymized data is deleted within 90 days. LinkedIn does not share personal data with ECE, but provides anonymized reports on website audience and ad performance. In addition, LinkedIn offers the possibility of retargeting via the Insight Tag. ECE can use this data to display targeted advertising outside of its website without identifying you as a website visitor. For more information on data protection at LinkedIn, please refer to the LinkedIn privacy notices.
LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To deactivate the Insight tag on our website ("opt-out"), click here.
e) Notes on the use of apps
Our Apps use the following permissions for the purposes listed behind it, which gives it access to certain features of your mobile device:
- Location - Our Apps may use location data from your mobile device to show you news from your region. You can disable access to location data at any time in your mobile device settings.
4. COMMON PRINCIPLES FOR THE PROCESSING OF YOUR DATA ON OUR WEBSITE
a) Recipients of the data
Only those internal departments or organizational units as well as other companies affiliated with us under company law will receive your data if this is necessary to fulfill our contractual and legal obligations or if we need the data in the context of processing and implementing our legitimate interest.
Your data will be passed on to external recipients in connection with the processing of the contract, insofar as we are obliged to provide information, report or pass on data in order to comply with legal requirements, you have given us permission to pass on data to third parties, or to external service providers who act as order processors on our behalf or perform functions for us (e.g. IT service providers, data centers, data shredders or courier services, marketing, recruiting, newsletters, security, credit services, logistics, printing services, telecommunications, parking services and financial service providers).
b) Duration of storage
Based on your consent, for the performance of a contract or for the exercise of legitimate interests, your personal data will be stored. However, if you revoke your consent or object to data processing or the purpose of processing has ceased to exist, personal data will be deleted from the ECE computer systems within a reasonable period of time, unless their - temporary - further processing is required due to statutory retention obligations.
Furthermore, ECE has no influence on the publication at external online media. Already printed print/offline media containing the images or the other personal data may continue to be used for the above purposes even after revocation. In the case of publication of a group photo or video, the revocation of an individual customer does not in principle lead to their removal. Apart from that, the images or the other personal data will be deleted promptly after receipt of the revocation, subject to statutory or legal retention obligations. If a transfer to third parties has been initiated by ECE, the recipients will be informed accordingly to the extent required by law; however, it is pointed out that regularly not all recipients can be notified of a deletion due to the special nature of the Internet.
c) Your rights as a person affected by data collection
If you exercise your rights under this section, in accordance with applicable law, we will communicate the rectification or erasure of your personal data or the restriction of processing implemented in accordance with your request to all recipients to whom the personal data have been disclosed, unless such communication is impossible or involves a disproportionate effort.
If you wish to exercise your rights and/or receive all relevant information, please contact us using the contact details provided in Section 10. We will respond within 1 month of receiving your request at the latest. In accordance with applicable law and the information below, you have the right to request access to your personal data, its correction, deletion or portability (e.g. transfer of your personal data to another service provider) of your personal data processed by us, as well as the restriction of processing.
(1) Right of access
You are entitled to request information free of charge at any time about, among other things, your data processed by us, the processing purposes, the categories of recipients, the planned storage period or, in the case of third country transfer, the appropriate safeguards. You are also entitled to receive a copy of your data.
(2) Correction of your personal data
Under applicable law, you are entitled to correct your personal data that you have shared with us. Through your settings on the Services, you can update your account information, change your profile settings, order/unsubscribe to messages from us, and set your preferences regarding sharing on the Services, including location-based features.
If you have registered for our Services in writing or by email, please contact us in writing or by email using the contact information set forth in Section 10 to correct your Personal Data.
(3) Deletion of your personal data
You may request us to delete your personal data at any time, in writing or by e-mail using the contact details provided in Section 10. If you request us to do so, we will delete all personal data held about you without delay, provided that the purpose of processing has ceased to apply and no statutory or legal retention obligations prevent deletion. In this case, we will block the data.
(4) Restriction of processing
If you request us to restrict the processing of your personal data, in writing or by e-mail via the contact details mentioned in Section 10, e.g. if you question the correctness, lawfulness or necessity on our part to process your personal data, we will reduce the processing of your personal data to the minimum necessary (storage) and use it, if required, only to establish, exercise or enforce legal claims or to protect the rights of other natural or legal persons and for other legal reasons. If the restriction is lifted and we process your personal data again, you will be notified of this without delay.
(5) Portability of your personal data
You have the right to receive your personal data which you have provided to us on the basis of consent or a contract and which is processed automatically. If you request us to do so in writing or by email using the contact details provided in Section 10, we will provide you with your personal data in a commonly used, machine-readable format without undue delay after receiving your request. Upon request, we will transfer your personal data to external parties (data controllers) that you name in your request, provided that this request does not violate the rights or freedom of third parties and is technically feasible.
(6) Revocation of your consent / rights of withdrawal
You may revoke your consent at any time without giving reasons. Please contact us by e-mail or letter (for contact details, see section 10). We will no longer process your personal data for the purposes for which you gave your consent and will block it accordingly. The revocation of your consent does not affect the lawfulness of the processing based on your consent prior to its revocation.
(7) Rights of objection
You also have the right to object at any time, on grounds relating to your particular situation, to the processing by us of data relating to you which is carried out on the basis of Article 6(1)(e) (performance of a task in the public interest) or Article 6(1)(f) DSGVO (legitimate interest of the controller); this also applies to profiling based on these provisions. In this case, we will no longer process the data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of such data for the purpose of such marketing. If you object to the processing for direct marketing purposes, this data will no longer be processed for these purposes.
Please address any revocations to the address given under item 10.
(8) Complaint to the competent data protection authority
You have the right to lodge a complaint about our data processing with a supervisory authority.
We reserve the right to occasionally adapt this data protection statement so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection statement, e.g. when introducing new services. The new data protection statement will then apply to your next visit.
(10) Questions about data protection
If you have any questions about data privacy or would like to exercise your rights as outlined above, please contact us using the details below:
To the Group Data Protection Officer
ECE Group Services GmbH & Co. KG