Adatvédelem

I. Controller; data protection officer

As defined by the General Data Protection Regulation and other national data protection laws of Member States as well as other legal provisions on data protection, the controller is:

ECOM Electronic Components Trading GmbH
Siemensstr. 9
D-85221 Dachau
Telephone: +49 8131 5695-0
Fax: +49 8131 5695-500
Email: info@ecom-trading.net

The controller's data protection officer can be reached by email at datenschutz@ecom-trading.net as well as under the following postal address:

CB ADDATA GmbH
Christian Bößl
Reitmeierfeld 23
94099 Ruhstorf a.d. Rott, Germany
Phone: +49 8531 978 447 0

II. General information on data processing

1. Scope of processing personal data

We principally process our users' personal data only as far as this is required for providing a functioning website as well as for our contents and services. Processing the personal data of our users is regularly effected only following consent by the user. Exceptions apply in those cases in which it is not possible to obtain any prior consent due to factual grounds and in which the processing of data is permitted by statutory provisions.

2. Legal basis for processing personal data

As far as we obtain consent from the data subject for processing operations concerning personal data, the legal basis for it is laid down in Article 6 paragraph 1 sentence 1 point (a) of the European Union's General Data Protection Regulation (GDPR).

For processing personal data required for the performance of a contract whose contracting party is the data subject, the legal basis for it is laid down in Article 6 paragraph 1 sentence 1 point (b) GDPR. This also applies for processing operations which are required for the implementation of pre-contractual measures.

As far as the processing of personal data is required for meeting a legal obligation our enterprise is subjected to, the legal basis for it is laid down in Article 6 paragraph 1 sentence 1 point (c) GDPR.

In the event that vital interests of the data subject or of another natural person require the processing of personal data, the legal basis for it is laid down in Article 6 paragraph 1 sentence 1 point (d) GDPR.

If processing is required to safeguard a legitimate interest by our enterprise or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first mentioned interest, the legal basis for it is laid down in Article 6 paragraph 1 sentence 1 point (f) GDPR.

3. Erasure of data and storage period

The personal data of the data subject are erased or made unavailable as soon as the purpose of storage no longer applies. Moreover, storage may be effected if this has been provided for by the European or national legislator in Union law regulations, laws or other provisions which the controller is subjected to. Data are also erased or made unavailable if a storage period expires which had been specified by the indicated standards, unless the necessity of further storage of the data exists for any contract conclusion or contract performance.

4. Data protection for job applications and during application processing

We collect and process the personal data of job applicants for the purpose of processing applications. This processing may be performed electronically, in particular if an applicant has transmitted his or her application documents electronically, for example by email. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the relevant statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be deleted automatically six months after the rejection of the application provided the affected person has not agreed to a longer period of retention and there no other legitimate interests of the controller that may conflict with the deletion. Such a legitimate reason would be, for example, providing evidence in legal proceedings related to the General Act on Equal Treatment (AGG).

III. Provision of the website and creation of log files

1. Description and scope of data processing

Every time our internet site is accessed, our system automatically records data and information from the accessing computer system.

The following data are collected in this case:

  • User's browser type/version;
  • User's operating system;
  • IP-address/internet service provider of the user;
  • Date/time of day of access;
  • Websites from which the user's system gets to our internet site;
  • Websites which are accessed by the user's system via our website.

The data are stored in our system log files. There is no storage effected of these data together with other personal data of the user.

2. Legal basis for data processing

The legal basis for temporary storage of data and log files is laid down in Article 6 paragraph 1 sentence 1 point (f) GDPR.

3. Purpose of data processing

Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. To this end, the user's IP address must remain stored for the duration of the session.

Storage in log files is effected to ensure the website's functionality. Moreover, the data help us optimise the website and ensure the security of our IT systems. In this context, there will be no analysis of data for marketing purposes.

These purposes also establish our legitimate interest in data processing in accordance with Article 6 paragraph 1 sentence 1 point (f) GDPR.

4. Period of storage

Data are erased once they are no longer required for achieving the purpose of their collection. In the event of data collection for provision of the website, this will be the case when the respective session is terminated.

In the event of data storage in log files, this will be the case after seven days at the latest. Any further storage in excess thereof is possible. In that case, the users' IP addresses are erased or altered so that it is no longer possible to allocate the accessing client.

5. Possibility of objection and elimination

Collection of data for providing the website and the storage of data in log files is absolutely essential for the operation of the internet site. Accordingly, no possibility of objection exists on the user's part.

IV. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files stored to the user's computer system in the internet browser or by the internet browser. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters enabling a clear identification of the browser when the website is accessed again.

The users' data thus collected are pseudonymised by means of technical measures. Accordingly, it is no longer possible to allocate the data to the accessing user. The data are not stored together with other personal data of the users.

Upon access to our website, users will be informed, by an info banner, about the use of cookies for purposes of analysis and they are referred to this Data Protection Statement.

This website uses the following types of cookies whose scope and function is explained in the following:

  • Transient cookies

Transient cookies are automatically erased when you close the browser. These include especially the session cookies. They save a so-called session ID by means of which different inquiries by your browser may be allocated to the joint session. Your computer may thus be recognized when you return to our website. Session cookies are erased when you log out or close the browser.

  • Persistent cookies

Persistent cookies are automatically erased after a preset period of time which may differ depending on the cookie. You may erase the cookies at any time in your browser's security settings.

2. Legal basis for data processing

The legal basis for processing personal data with the use of cookies is laid down in Article 6 paragraph 1 sentence 1 point (f) GDPR.

3. Purpose of data processing

We are using cookies to make our website more user-friendly. Some elements of our internet site require, in particular, that the accessing browser can be identified even after a page change.

4. Period of storage; possibility of objection and elimination

Cookies are stored on the user's computer and transmitted by it to our site. Accordingly, you as the user also have full control over the use of cookies. By changing the settings in your internet browser, you may deactivate or restrict the transmission of cookies. Cookies stored already may be erased at any time. This may also be done in an automated manner if you specify the maximum storage period in your browser settings. If cookies for our website are deactivated, it is possible that not all functions of the website can be fully used.

The following links help you to provide the settings for the rejection or acceptance of cookies in the most frequently used browsers:

Where we use cookies for statistical or marketing purposes, we will do so only with your consent (Section 6 (1)(a) GDPR).

V. Online shop

1. Obligatory registration

It is a prerequisite for ordering in our online shop that you are registered as a customer with us and that your account was activated.

2. Orders

2.1 Description and scope of data processing

2.1.1 Data collection upon registration

If you decided, for the registration, on setting up a personalised customer account, the data entered into the appropriate input screen are transmitted to us and stored. No online registration is possible without filling out the fields designated as mandatory data. Furthermore, we store the user's IP address as well as the date and time of day of access. By sending off the digital application form, you initiate the setup of a personalised, code word protected customer account. Such an application first requires a manual check of the transmitted data and after that the activation of your customer account.

2.1.2 Data collection following registration

After the registration has been effected, your personal customer number will be assigned and stored. Additionally, your purchases will be stored (date, item, item number, quantity, price, currency, type of transaction).

2.2 Legal basis for data processing

With your registration, you consent to the processing of your data which is why the legal basis of such data processing is Article 6 paragraph 1 sentence 1 point (a) GDPR.

2.3 Purpose of data processing

With your customer account, you may conveniently use your stored data for additional orders without the need to enter the data repeatedly. Furthermore, you may look at the data of your already concluded orders and your open or also any recently sent orders; you may also correct/manage the data you had specified within the scope of your registration.

2.4 Period of storage

Data are erased once they are no longer required for achieving the purpose of their collection. This is the case for the data collected during the registration process if the registration on our internet site is cancelled or modified.

2.5 Right to withdraw; elimination claim

As a user, you may erase your shop account at any time or modify the data stored about yourself. This may be done via the customer area on our website, by email to info@ecom-trading.net or by a message (e.g. fax or letter) to the contact data indicated in I. of this Statement.

3. Data transmission regarding contract handling

In order to process your order, we are collaborating with the service provider(s) indicated below who support us wholly or in parts regarding the performance of contracts concluded. In accordance with the following information, certain personal data are transmitted to these service providers. Within the scope of payment processing, we forward your payment data to the mandated bank if this is required for payment processing. If payment service providers are used, we will explicitly advise you thereof below. Within the scope of contract handling, we will pass on the personal data collected by us to the transport company commissioned with the delivery – as far as this is required for the delivery of goods. The legal basis for passing on the data in this case is Article 6 paragraph 1 sentence 1 point (b) GDPR.

3.1 Payment transactions; PayPal

Payment transactions via common means of payment are exclusively effected via an encrypted SSL or TLS connection.

On our website we offer you, inter alia, to make payments via PayPal. Provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").

If you select to make payment via PayPal, the payment data you had entered will be transmitted to PayPal.

Transmission of your data to PayPal is effected on the basis of Article 6 paragraph 1 sentence 1 point (a) GDPR (consent) and Article 6 paragraph 1 sentence 1 point (b) GDPR (processing for the performance of a contract).

Additional information regarding data protection laws can be found in the data protection statement by PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

You are able to withdraw, at any time, your consent to data processing or object to the data processing. An objection has no effect on the validity of data processing operations in the past.

3.2 Dispatch service provider

The delivery of our goods to you is effected by the dispatch service provider selected or specified in the ordering process.

We will pass on your email address to the dispatch service provider prior to the delivery of the goods for the purpose of coordinating a delivery date or for a notification of delivery in accordance with Article 6 paragraph 1 sentence 1 point (a) GDPR if you had explicitly consented to this in the ordering process. Otherwise, we only pass on the recipient's name and the delivery address to the dispatch service provider for the purpose of delivery – in accordance with Article 6 paragraph 1 sentence 1 point (b) GDPR. Such transfer is only effected if required for the delivery of goods. In that case, it is not possible to provide for any prior coordination of the delivery date with the dispatch service provider or for a notification of delivery.

Consent may be revoked, at any time, effective for the future vis-à-vis the above designated controller or vis-à-vis the dispatch service provider. An objection has no effect on the validity of data processing operations in the past.

VI. Blog functions

1. Description and scope of data processing

You may post public comments in our blog in which we publish a variety of text contributions on IT topics. Your comment together with your specified name will be published with the text contribution. However, indication of your name is optional. Indication of your email address is mandatory. When you post a comment, we will continue to store your IP address. Comments are not checked prior to publication. We reserve the right to delete comments if third parties object to them as being unlawful.

2. Legal basis for data processing

Legal bases for processing the data are Article 6 paragraph 1 sentence 1 point (a) and (f) GDPR.

3. Purpose of data processing

Storage of your IP address is necessary for us so that we will be able to defend us against any liability claims in cases of any possible publication of unlawful content. We will need your email address in order to contact you if a third party should object to your comment as being unlawful.

4. Period of storage

The comments and any data connected with them are stored and will remain on our website until the comment has been fully erased or had to be erased for legal reasons. Your IP address will be erased after seven days.

5. Possibility of withdrawal and elimination

The user may withdraw, at any time, his or her consent to the processing of personal data or object to the storage of his or her personal data. Objection may be declared to info@ecom-trading.net by email.

VII. Product recommendations for similar goods; direct marketing by letter

1. Product recommendations for similar goods

1.1 Description and scope of data processing

In addition to our use for contract handling, we also use your email address – which you specified in connection with the purchase of goods or services – for the purpose of informing you regularly by way of direct marketing via email about similar proprietary goods. This is irrespective of whether you registered for the newsletter or not.

1.2 Legal basis for processing

Article 7 paragraph 3 of the Law against Unfair Competition (UWG) is the legal basis for sending product recommendation emails as the result of the sale of goods or services.

1.3 Purpose of data processing

Collecting the users' email address serves the purpose of sending the product recommendation emails.

1.4 Period of storage

Data are erased once they are no longer required for achieving the purpose of their collection.

1.5 Right of objection and elimination

You may object, at any time, to the use of your email address for sending you product information – without incurring for this any costs other than the transmission costs according to the basic rates. You may state your objection by clicking on the link provided in every product recommendation email or by email to info@ecom-trading.net.

2. Direct marketing by letter

2.1 Description and scope of data processing

We will use the postal address (in addition to your name) you provided in connection with the purchase of goods or services to regularly inform you in the form of letters by way of direct marketing (e.g. to send you interesting offers and information regarding our products).

2.2 Legal basis for processing

The legal basis for direct marketing by letter in this case is Article 6 paragraph 1 sentence 1 point (f) GDPR.

2.3 Purpose of data processing

The collection of your name and your address also serves to provide you with direct marketing by letter. In accordance with recital (47) of the GDPR, processing personal data for the purpose of direct marketing may be considered processing serving a legitimate interest. It is to be taken especially into account in this context that a customer relationship exists between yourself and us by reason of your purchase and that we thus have a legitimate interest to inform you in the future about any current offers.

2.4 Period of storage

Data are erased once they are no longer required for achieving the purpose of their collection.

2.5 Right to object

You may object, at any time, to this form of direct marketing by letter. You may state your objection by email to info@ecom-trading.net or by a message (e.g. fax or letter) to the contact data indicated in I. of this Statement.

VIII. Forms and email contact

1. Description and scope of data processing

Upon your contact with us by means of a form on our website or by email, the data which you advised (your email address and possibly other data which you indicated) are transmitted to us and stored by us. In this context, there is no transmission of data to third parties. The data are exclusively used for processing the conversation.

2. Legal basis for data processing

If the user's consent is available, the legal basis for processing the data in this case is Article 6 paragraph 1 sentence 1 point (a) GDPR.

The legal basis for processing the data transmitted within the course of making contact is also laid down in Article 6 paragraph 1 sentence 1 point (f) GDPR.

If making contact is aimed at the conclusion of a contract, an additional legal basis for processing is laid down in Article 6 paragraph 1 sentence 1 point (b) GDPR.

3. Purpose of data processing

Processing personal data from the input screen is solely used for processing the making of contact. The other personal data processed during the sending operation of the completed form serve to prevent any misuse of the contact form.

4. Period of storage

After storage is no longer necessary, we will erase the data resulting in this context, or we restrict processing if there are statutory retention obligations.

5. Possibility of objection and elimination

The user may withdraw, at any time, his or her consent to the processing of personal data or object to the storage of his or her personal data. In that case, all personal data are erased which had been stored in the course of having made contact.

6. Use of Google reCAPTCHA

Our website uses the reCAPTCHA service by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data if you have your habitual residence in the European Economic Area or Switzerland. Google Ireland Limited is therefore the company affiliated with Google which is responsible for processing your data and for compliance with applicable data protection laws. The request serves to distinguish whether the input was made by a human or automatic machine processing. For this purpose your input will be transmitted to Google and used by them further. In addition, the IP address and any other data required by Google for the reCAPTCHA service will be transferred to Google. This data will be processed by Google within the EU and potentially also in the USA. Processing is carried out on the basis of Article 6(1)f) GDPR due to our legitimate interest in protecting our website from automated spying, misuse and SPAM. On grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you and carried out in accordance with Article 6(1)(f) GDPR. You can find more detailed information on Google reCAPTCHA and the associated data protection declaration at https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.

IX. Web analysis tool, Google Analytics

1. Scope of processing personal data

This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies" – text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie regarding your use of this website is generally transferred to a Google server in the U.S.A. and stored there. In case of the activated IP anonymisation on this website, however, your IP address is beforehand truncated by Google within the Member States of the European Union or in other contracting states which are party to the Agreement on the European Economic Area. The full IP address is transferred only in exceptional cases to a Google server in the U.S. and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, compile reports about website activities and provide further services to the website operator which are connected with the website and internet use.

The IP address transmitted from your browser within the scope of Google Analytics will not be merged with other data by Google.

This website uses Google Analytics with the extension "_anonymizeIp()". IP addresses are thereby processed in a truncated manner; any referencing to persons can thus be excluded. As far as there is any personal reference regarding the data collected about you, such reference will thus be immediately excluded and the personal data accordingly promptly erased.

2. Legal basis for processing personal data

The legal basis for processing the users' personal data is laid down in Article 6 paragraph 1 sentence 1 point (f) GDPR.

3. Purpose of data processing

We are using Google Analytics to be able to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our online presence and develop it to make it more interesting for you as the user. For the exceptional cases in which personal data are transmitted to the U.S.A., Google subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

4. Period of storage

The data are erased as soon as they are no longer required for our recording purposes. At Google Analytics, this is the case after 14 months.

5. Possibility of objection and elimination

5.1 Browser setting

You may prevent storage of the cookies by a corresponding setting of your browser software; please be advised, however, that you might possibly not be able to use the complete functions of this website to their full extent.

5.2 Browser AddOn

Moreover, you may prevent any recording of the data (including your IP address) generated by the cookie and with reference to your use of the website to Google as well as processing the data by Google such that you download and install the browser AddOn available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

5.3 Opt-out cookie

Alternatively to the browser plugin or in browsers on mobile devices, please click on the following link to set an opt-out cookie which prevents, in the future, any recording by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain; if you erase your cookies in this browser, you have to click again on this link): deactivate Google Analytics

6. Information from third party provider

Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 1 4361001

User terms and conditions: http://www.google.com/analytics/terms/de.html,

Overview regarding data protection: http://www.google.com/intl/de/analytics/learn/privacy.html,

Data protection statement: http://www.google.de/intl/de/policies/privacy.

7. Analysis across multiple devices

This website additionally uses Google Analytics for an analysis – across multiple devices – of visitors' flows, the analysis being performed via a user-ID. In your customer account – under "My data", "personal data" – you can deactivate your use analysis across multiple devices.

8. Demographic characteristics

This website uses the function "demographic characteristics" of Google Analytics. Reports may thus be prepared which include statements on the age, gender and interests of the visitors to the website. Such data come from interest-specific advertisements by Google as well as from visitor data by third party providers. Such data cannot be assigned to any specific person. You may deactivate this function, at any time, via the advertisement settings in your Google account, or you may generally prohibit the collection of your data by Google Analytics as presented in the item "Objection to data collection".

9. Use of the Google Tag Manager

Our website uses the Google Tag Manager from Google LLC. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you are ordinarily resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google responsible for processing your data and for compliance with the applicable data protection legislation. This application manages JavaScript tags and HTML tags which are used in particular to implement tracking and analysis tools. The data processing serves to facilitate the needs-based design and optimisation of our website. The Google Tag Manager itself neither stores cookies nor processes personal data. It does, however, enable the triggering of further tags which may collect and process personal data. You can find more detailed information on the terms and conditions of use and data protection at https://www.google.com/intl/de/tagmanager/use-policy.html

X. Online advertising; Google AdWords conversion

1. We are using the offer by Google AdWords to draw attention to our attractive offers with the help of advertising means (so-called Google AdWords) on external websites. In relation to the data of advertising campaigns, we are able to determine how successful the individual advertising measures are. We thus pursue the objective of showing you advertising which is of interest for you and designing our website to be more interesting for you as well as realising a fair calculation of advertising costs.

2. These advertising means are delivered by Google via so-called "Ad Servers". To this end, we use Ad Server cookies by means of which certain parameters are able to measure success, such as flash of adverts or clicks by the users. If you arrive at our website via a Google advertisement, Google AdWords will save a cookie on your PC. These cookies generally become invalid after 30 days and are not intendeds to identify you personally. For this cookie are generally stored as analysis values the unique cookie ID, the number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) as well as opt-out information (marking that the user no longer wants to be approached).

3. These cookies enable Google to recognize your internet browser. If a user visits specific pages of the website of an AdWords client and if the cookie saved on his or her computer has not yet expired, Google and the client can detect that the user clicked on the advert and was routed to this page. Every AdWords client is allocated another cookie. Cookies thus cannot be traced back via the websites of AdWords clients. We do not collect and process any personal data ourselves in the indicated advertising measures. Google merely makes statistical analyses available to us. On the basis of these analyses, we are able to see which advertising measures employed are particularly efficient. We do not obtain any further data from the use of the advertising means; in particular, we cannot identify the users on the basis of such information.

4. Due to the marketing tools applied, your browser automatically sets up a direct connection with the Google server. We have no influence on the scope and further use of the data collected due to Google's use of this tool and we thus inform you according to our state of knowledge: By means of the inclusion of AdWords conversion, Google obtains the information that you accessed the corresponding part of our internet presence or that you clicked on one of our advertisements. If you are registered with a Google service, Google can allocate the visit to your account. Even if you are not registered with Google or are not logged in, there is the possibility that the provider finds out your IP address and stores it.

5. There are various way for you to prevent participation in this tracking procedure: a) due to a corresponding adjustment of your browser software; in particular, the suppression of third-party cookies will bring about that you do not get any advertisements from third-party providers; b) by deactivating the cookies for conversion tracking by setting your browser such that cookies are blocked by the domain "www.googleadservices.com", https://www.google.de/settings/ads, with this setting being erased when you erase your cookies; c) by deactivation of the providers' interest-specific advertisements which are a part of the self-regulation campaign "About Ads" via the link http://www.aboutads.info/choices, with this setting being erased when you erase your cookies; d) by permanent deactivation in your browsers Firefox, Internet explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. Please be advised that, in this case, you might possibly be unable to use all functions of this internet presence to the full extent.

6. The legal basis for processing the data in this case is Article 6 paragraph 1 sentence 1 point (f) GDPR. You will find additional information on data protection at Google:

http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you may access the website of the Network Advertising Initiative (NAI) at

http://www.networkadvertising.org. Google subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

XI. Plug-ins and tools

1. Google fonts

1.1 On this website, we are using the offer of Google Fonts for a uniform presentation of typefaces provided by Google. This is used for an attractive display of our internet presence and constitutes a legitimate interest within the meaning of Article 6 paragraph 1 sentence 1 point (f) GDPR.

1.2 Due to your visit to the website, Google receives the information that you accessed the corresponding page of our website. Also, the data specified under III. of this Statement are transmitted. This is done irrespective of whether Google provides a user account which you are logged into, or whether there is no user account. If you are logged in with Google, your data are allocated directly to your account. If you do not want any allocation of your profile with Google, you have to log out before activating the button. Google saves your data as user profiles and uses them for purposes of advertisement, market research and/or the demand-driven design of its website. Such an evaluation is especially effected (even for users not logged in) to provide demand-oriented advertisement and to inform other users of the social network about your activities on our website. You have a right to object to the development of such user profiles; to exercise this right, you must address Google.

1.3 In the provider's data protection statements you will obtain further information regarding the purpose and extent of the collection of data and their processing by the provider. There, you will also obtain further information on your pertinent rights and settings options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the U.S.A. and subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

2. Google Maps

2.1 On this website, we are using the offer of Google Maps. We are thus able to present you with interactive maps directly in the website and enable you to comfortably use the map function. This presents a legitimate interest within the meaning of Article 6 paragraph 1 sentence 1 point (f) GDPR.

2.2 Due to your visit to the website, Google receives the information that you accessed the corresponding page of our website. Also, the data specified under III. of this Statement are transmitted. This is done irrespective of whether Google provides a user account which you are logged into, or whether there is no user account. If you are logged in with Google, your data are allocated directly to your account. If you do not want any allocation of your profile with Google, you have to log out before activating the button. Google saves your data as user profiles and uses them for purposes of advertisement, market research and/or the demand-driven design of its website. Such an evaluation is especially effected (even for users not logged in) to provide demand-oriented advertisement and to inform other users of the social network about your activities on our website. You have a right to object to the development of such user profiles; to exercise this right, you must address Google.

2.3 In the provider's data protection statements you will obtain further information regarding the purpose and extent of the collection of data and their processing by the plug-in provider. There, you will also obtain further information on your pertinent rights and settings options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the U.S.A. and subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

XII. Social media buttons

Our website uses social media buttons of social networks. This serves to safeguard our predominantly legitimate interests – within the scope of weighing up interests – in the optimum marketing of our range of offers in accordance with Article 6 paragraph 1 sentence 1 point (f) GDPR. In order to increase the protection of your data when visiting our website, these buttons are not integrated into the website unrestrictedly as plug-ins but by using an HTML link. This inclusion ensures that when a page of our web presence is accessed which includes such buttons, no connection will yet be made with the servers of the provider of the respective social network.

If you click on one of the buttons, a new window of your browser will open up and access the site of the respective service provider where you may use e.g. the like or share button (if necessary after input of your login data).

In the providers' data protection notices, please find information regarding the purpose and extent of the data collection and any further processing and use of the data by the providers on their websites, as well as a possibility for contacts, as well as your pertinent rights and settings options to protect your privacy:

XIII. Rights of the data subject

If your personal data are processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the controller:

  • Right of access (Article 15 GDPR)
  • Right to rectification (Article 16 GDPR)
  • Right to erasure (Article 17 GDPR)
  • Right to restriction of processing (Article 18 GDPR)
  • Right to information (Article 19 GDPR)
  • Right to data portability (Article 20 GDPR)
  • Right to object (Article 21 GDPR)
  • Right to withdraw the declaration of consent under data protection laws (Article 7 paragraph 3 GDPR)
  • Right to lodge a complaint with a supervisory authority (Article 77 GDPR)