Privacy

Data Protection (Privacy) Information

§1 Information on the Collection of Personal Data

1. The following is to inform you of the collection of personal data while using our website. Personal data is all data that can be attributed to you personally such as name, address, email addresses, user behaviour.
2. The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is the company elobau GmbH & Co KG, Zeppelinstr. 44, D-88299 Leutkirch, Germany, info@elobau.de (see our Legal Notice).
   Our data protection officer is contactable at datenschutz@elobau.de or our postal address with the addition “the data protection officer”.
3. In the event in which you contact us by email, we will store the data you communicate (your email address, your name and your telephone number, as the case may be) in order to answer your questions. We will erase the data collected in this connection once their storage is no longer required or we restrict the processing if statutory compulsory retention periods apply. The legal basis depends on the type of your request. If it is about the purchase of any of our products or the use of our services, Art. 6 (1)(b) GDPR is the appropriate legal basis. If you desire general information from us, you give us your consent to data processing pursuant to Art. 6 (1)(a) GDPR in sending us your request.
4. If we resort to contracted service providers for individual functions of our offer or if we wish to use your data for advertising purposes, we will inform you below of the respective processes in detail. In doing so, we also inform you of the criteria determined for the storage period.

§2 Legal Basis for Processing

Our company applies Art. 6 (1)(1)(a) GDPR as legal basis for processing procedures for which we obtain the consent for a specific processing purpose. If the processing of personal data is required to perform a contract to which the data subject is a party, as e.g., in cases of processing procedures required for the delivery of goods or the provision of any other service or return service, the processing is based on Art. 6 (1)(1)(b) GDPR. The same is applicable to such processing procedures required for the performance of pre-contractual measures such as in cases of requests regarding our products or services. If our company is subject to a legal obligation requiring the processing of personal data such as e.g., the satisfaction of tax obligations, the processing is based on Art. 6 (1)(1)(c) GDPR. In rare cases, the processing of personal data may become required to protect vital interests of the data subject or another natural person, Art. 6 (1)(1)(d) GDPR. Finally, processing procedures could as well be based on Art. 6 (1)(1)(f) GDPR. Processing procedures that are not covered by any of the aforementioned legal bases rest on this legal basis if processing is required to safeguard a legitimate interest of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the data subject prevail.

§3 Transfer of Data

There will not be any transfer of your personal data to third parties for purposes other than the ones listed below. We transfer your personal data to third parties only if you gave your express consent pursuant to Art. 6 (1)(1)(a) GDPR, the transfer is required for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worth being protected in the avoidance of the transfer of your data in case that there is a legal obligation to carry out the transfer pursuant to Art. 6 (1)(1)(c) GDPR as well as that this is legally permitted and required for the transaction of contractual relationships with you pursuant to Art. 6 (1)(1)(b) GDPR.

§4 Your Rights

1. In your dealings with us, you have the following rights concerning personal data relating to you:
   • Right of access to information;
   • Right of rectification or erasure;
   • Right to restriction of processing;
   • Right to object to the processing;
   • Right to data portability.
2. Moreover, you have the right to complain with a data protection supervisory authority about our processing of your personal data.

§5 Collection of Personal Data when Visiting our Websites

1. 1. Our website is hosted on the servers of the company
   ALL-INKL.COM – Neue Medien Münnich
   Hauptstraße 68
   02742 Friedersdorf
   We entered into an agreement on data processing pursuant to Art. 28 GDPR with the service provider.
   In case of use of the website for information purposes only i.e., if you do not register or transfer information to us in any other manner, we only collect the personal data your browser transmits to our server. If you want to view our website, we collect the following data we need for technical reasons to show you our website and to ensure the stability and security (legal basis is Art. 6 (1)(1)(f) GDPR):
   • IP addresses;
   • Date and time of the requests;
   • Time zone difference to Greenwich Mean Time (GMT);
   • Content of the request (specific page);
   • Access status/http status code;
   • Data volume transferred each time;
   • Website from where the request arrives;
   • Browsers;
   • Operating system and its surfaces;
   • Language and version of the browser software.
2. In addition to the data listed above, cookies are stored on your computer when you use our website. Cookies are small text files, which are stored on your hard drive assigned to the browser you use and which the entity placing the cookie (we in this case) uses to obtain specific information. Cookies cannot run any programmes or transfer viruses to your computer. Their purpose is to make the web offer more user-friendly and more effective altogether.
3. Use of cookies:
   • a) This website uses the following types of cookies, the scope and functions of which are explained below: – Transient cookies (see b) – Persistent cookies (see c).
   • b) Transient cookies are erased in an automated manner once you close the browser. They include, but are not limited to the session cookies. They store a so-called session ID used to assign various requests of your browser to the common session. This makes it possible to recognise your computer again when you return to our website. The session cookies are erased when you log out or close the browser.
   • c) Persistent cookies are erased in an automated manner after a determined period that can differ depending on the cookie. You may erase the cookies in the security settings of your browser at any time.
   • d) To allow us – elobau.com – adjusting to your personal needs and your use, we also use the so-called local storage technology (also known as “local data” and “local storage”) in addition to cookies. With this technology, data is stored locally in the web cache of your browser, which persist also after closing the browser window or exiting the programme – unless you erase the cache content –and can be read. Local Storage enables elobau.com to store your preferences in using the request list of elobau.com on your computer and your corresponding use.
     Cookies are necessary in some cases to enable the functionality of our website operation. The legal basis for such necessary cookies is Art. 6 (1)(f) GDPR. We have a legitimate interest in presenting our company via this website. All other cookies will only be placed upon the consent in the consent banner. The legal basis is Art. 6 (1)(a) GDPR. (Name, purpose, functioning, storage period) of such cookies are set out below.

§6 Contact Forms

If you send us your requests using the contact form, we will store and process your data provided in the contact form, including the contact data indicated there, on our systems for the processing of the request, and to be able to answer follow-up questions, if any. Your data will be used for the specific purpose of answering and processing your question on an exclusive basis. In this context, data processing is made pursuant to Art. 6 (1)(1)(a) GDPR based on your voluntarily given consent. You may object to this procedure at any time (right of withdrawal).

§7 Other Functions and Offers of our Website

1. In addition to the use of our website for pure information purposes, we offer various services you may use if interested. As a rule, this requires that you provide further personal data, which we need to provide the respective service and which are subject to the aforementioned data processing principles.
2. In some cases, we use external service providers to process your data. We selected and contracted them carefully and they are bound by our instructions and monitored on a regular basis.
3. In the case of our service providers or partners having their places of business in a state outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

§8 Objection to or Withdrawal of the Consent for the Processing of Your Data

1. If you have given consent to the processing of your data, you may withdraw it at any time. Such a withdrawal affects the permissibility of the processing of your personal data once you notify us.
2. To the extent we base the processing of your personal data on the weighing of interests, you may raise an objection against the processing. This is the case if the processing is not particularly required to fulfil a contract with you, which we outline in each of the following descriptions of the functions. If you raise such an objection, we ask for the statement of the reasons for which we should not process your personal data in the manner we do it. In case of a justified objection, we assess the situation of facts and will either discontinue or adjust the data processing or illustrate our compulsory reasons worth being protected on the basis of which we continue the processing.
3. As a matter of course, you may object to the processing of your personal data for purposes of advertisement and data analysis at any time. For your objection to advertisement, you can inform us using the following contact data: datenschutz@elobau.de.

§9 Newsletter

1. You may subscribe to our newsletter in which we will inform you of our current interesting offers by giving your consent. The promoted goods and services are specified in the statement of consent.
2. To register for our newsletter, we use the so-called double ​opt-​in procedure. This means that after your registration, we send an email to the email address you provided, in which we ask you to confirm that you request the receipt of our newsletter. If you do not confirm your registration within 30 days, your information will be blocked and erased automatically. Moreover, we store the IP addresses used and the time of the registration and confirmation. The purpose of this procedure is to document your registration and to be able to clarify a possible misuse of your personal data, as the case may be.
3. The only compulsory information for sending you the newsletter is your email address. The provision of other, specifically marked data is made on a voluntary basis and is used to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 (1)(1)(a) GDPR.
4. You may withdraw your consent to receiving the newsletter at any time and unsubscribe from the newsletter. You may communicate the withdrawal by clicking the link provided in each newsletter email, by email to datenschutz@elobau.de or by notice using the contact data indicated in the legal notice.
5. Please note that in sending out the newsletter, we evaluate your user behaviour. For such evaluation, the distributed emails contain so-called web beacons or tracking pixels, respectively, representing one-pixel picture files. The data is collected in a pseudonymised manner only i.e., the IDs are not linked with your other personal data, thus excluding any direct assignability to a person. The data is collected to optimise the contents and the distribution date. Furthermore, such tracking is not possible if you disabled the display of pictures by your email programme in your default settings. If so, the newsletter will not be shown to you completely and you may not be able to use all functions. If you allow the display of the pictures manually, the tracking as mentioned above will take place.

§10 Use of Our Application Portal

We operate an application portal run by way of the persis (https://www.persis.de) system. Persis has its place of business in Germany. All data are processed on servers in Germany.

In the portal, you are asked to provide the following personal data as mandatory information: title, first name, second name, street address, postal code, place and country, telephone number and email address for contacting. To be able to process the application, you have to submit a curriculum vitae. This is a minimum requirement to allow the processing of your application. All other data is voluntary information. The legal basis is Art. 6 (1)(1)(b) GDPR

Recipients or categories of recipients of personal data: human resources department as well as direct supervisor of the job you applied for, executive board. There will be no transfer of data to third parties, except our service providers in connection with the processing. As a candidate, you will receive information pursuant to Art. 13 GDPR on the use of data in the application process.

§11 Google Products

We use various products of the company Google Ireland Ltd.; Gordon House, Barrow Street, Dublin 4, Ireland, which are described in more detail as follows.

As it cannot be excluded that Google processes personal data at their headquarters in the USA too, we approached both the company proper and our appropriate supervisory authority with the aim of enabling data transfer to the USA in conformity with the law.

For the time being, the data transfer is at least partially still based on the EU-US Privacy Shield. On 5 August 2020, however, Google communicated that they intended to prepare standard contract clauses in conformity with data protection law.

For the current state of affairs, please consult Google’s privacy information: https://policies.google.com/privacy?hl=de#infosharing

11.1. Google Analytics

Our website uses the Google Analytics analysis service. This web analysis service is operated by the company Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google). We use Google Analytics to evaluate your use of our website and to prepare reports on user activities. This analysis tool works based on cookies. A cookie is a text file transmitted to and stored on the user’s hard drive on the occasion of the visit of a website to enable an analysis of your use of the website. As a rule, the information stored by the cookie is transferred to and stored on a server of Google in the USA. In the process of IP anonymisation, your IP address is previously truncated by Google in a member state of the EU or another contracting state of the European Economic Area. On our instructions, Google will use the transferred information to prepare a report on the use of the website. We entered into a contract with Google based on a template of the supervisory authorities. If you want to prevent the use of cookies, you may do so locally by changing your settings of the browser used on your computer (e.g. Safari, Internet Explorer, Opera, Firefox etc.) i.e., the programme to open and show websites. Moreover, you may prevent the collection and processing of your data by Goole’s cookie by downloading and installing a browser plugin offered by Google, which can be found following this link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can prevent the recording by Google Analytics by clicking the link below. Then, a so-called opt-out cookie will be placed preventing the future recording of your data when you visit this website:

Disable Google Analytics

For more information on the terms of use and data privacy of Google and Google Analytics, please follow this link http://www.google.com/analytics/terms/de.html as well as: https://www.google.de/intl/de/policies/.

The legal basis for the processing of your data is Art. 6 (1)(1)(a) GDPR. Consent via the consent banner.

Information on cookies:

Categorisation for consent: Marketing
Cookies used (lifetime in brackets): _ga (2 years), _gid (1 day), _gat_UA-* (1 minute),_utma (2 years), _utmb (30 minutes), _utmc (session), _utmt (10 minutes), _utmz (6 months)

11.2 Google Tag Manager

We use the Google Tag Manager of the company Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The Google Tag Manager is a cookie-free domain and does not record any personal data. The tool makes sure that other components are triggered, which in their turn could record data, as the case may be. The Google Tag Manager does not access such data. In case of deactivation on domain level or on cookie level, this will maintain its effect on all tracking tags implemented together with the Google Tag Manager.

11.3 Google Remarketing via Double Click

We use the remarketing function of the company Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose of this function is to show visitors of the website interest-related ads in the context of the Google advertising network Double Click. To that end, the browser of the website visitor stores cookies that enable the recognition of the visitor once he/she views websites that are part of Google’s advertising network. Then, ads can be presented to the visitor on those websites relating to contents the visitor viewed previously on websites using the Google remarketing function.

The legal basis for the processing of your data is Art. 6 (1)(1)(a) GDPR. Consent via the consent banner (activation by Google Analytics).

11.4 Google Safeframe

We use the marketing function “Google Safeframe” of the company Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Safeframe stores and processes information about your user behaviour on our website. To that end, Google Safeframe uses cookies, among other things, i.e., small text files stored locally in the buffer memory of your web browser on your terminal device enabling us to conduct an analysis of your use of our website.

We use Google Safeframe for marketing​ and optimisation purposes, in particular, to analyse the use of our website and to improve individual functions and offers as well as the user experience on a continuous basis. By way of the statistical evaluation of the user behaviour, we can improve our offer and present it in a more interesting arrangement for you as the user.

For more information on the third-party provider concerning data protection, please consult the following website: https://policies.google.com/privacy?hl=de&gl=de

The legal basis for the processing of your data is Art. 6 (1)(1)(a) GDPR. Consent via the consent banner (activation by Google Analytics).

Google Adwords Conversion

1. We use the offer of Google Adwords in order to attract attention to our offers on external websites with the assistance of advertising tools (so-called Google Adwords). We can determine in relation to the data of the advertising campaigns how successful the individual advertising measures are. We do so as we are interested in showing you ads of interest to you, presenting our website in a more interesting arrangement for you and achieving a fair calculation of advertising costs.
2. Google delivers the said advertising tools by means of so-called “ad servers”. In this connection, we use ad server cookies, which enable the measurement of specific parameters for success measurement such as the pop-up of ads or clicks by the users. If you come to our website via a Google ad, Google Adwords stores a cookie on your computer. As a rule, such cookies lose their validity after 30 days and are not intended to identify you personally. In connection with that cookie, the unique cookie ID, the number of ad impressions per placement (frequency), last impression (relevant for post-​view conversions), as well as opt-​out information (tag to show that the user no longer wishes to be approached) are generally stored as analysis values.
3. Such cookies enable Google to recognise your web browser again. If a user visits specific pages of the website of an Adwords customer and the cookie stored on his/her computer has not expired yet, Google and the customer can recognise that the user clicked the ad and was redirected to that page. Each Adwords customer is assigned another cookie. According to Google, cookies can therefore not be traced via the websites of Adwords customers. As far as we are concerned, we do not use the mentioned advertising tools to collect and process any personal data. We just receive statistical evaluations from Google. Based on those evaluations, we can recognise which of the advertising tools we employed are particularly effective. We do not receive any further data from the use of the advertising tools and, in particular, we cannot identify the users with that information.
4. Owing to the employed marketing tools, your browser establishes a connection to Google’s server automatically. We have no influence on the volume and the further processing of the data collected by Google using this tool and therefore we inform you in accordance with our state of information: By way of incorporation of AdWords Conversion, Google receives the information that you accessed the corresponding part of our website or clicked any of our ads. If you are registered with a service of Google, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider finds out and stores your IP address.
5. The legal basis for the processing of your data is Art. 6 (1)(1)(a) GDPR. Consent via the consent banner (activation by Google Analytics).

§12 Referrals to Websites of Third Parties

On this website, referrals to third-party websites are offered in the form of links. They include but are not limited to, our Facebook site, our profiles in XING, LinkedIn and Instagram, as well as our YouTube channel.

Data will be transferred to the link destination only when you click any of the links. This is a technical requirement. The technical data include, but are not limited to: your IP address, the time at which you clicked the link, the page where you clicked the link, information on your web browser. If you do not wish the transfer of such data to the link destination, do not click the link.

§13 SSL Encryption

This website uses SSL encryption (Secure Socket Layer) for the transfer of data of your browser to our server and to servers providing the files we incorporate on our website.

SSL is used to transfer data in an encrypted condition. The data cannot be altered and the sender can be identified.

You can recognise the existence of the SSL encryption if there is the prefix “https” in front of the website address you call up in the browser.

§14 Comment Function

Some of the pages or articles come with a voluntary comment function for users wishing to communicate their opinion about the respective page or an article. After a positive review, the comment is released and appears for the public on the page where the comment was submitted. There is no entitlement to release of a comment. The commenting person has to indicate a name, which can be a pseudonym. Likewise, the commenting person has to indicate an email address. This is required to inform him/her in respect of the status of his/her comment and also in particular if he/she asked a question in the comment and waits for an answer. That email address is not disclosed to the public, is not passed on to third parties, and is not evaluated manually. The IP address of the commenting person is stored in anonymised form only. The comment is stored on a permanent basis until you (or an administrator) erase(s) it. The email address indicated for the comment is stored for the only purpose of informing you in case of an answer to your comment. Any additional data provided in connection with the comment will be published with the comment. If you are requested to provide a name, you may choose to use a pseudonym.

The legal basis is Art. 6 (1)(a) GDPR. In submitting the voluntary comment, you give us your consent to publication.

§15 Other Tools of Third-Party Providers

15.1 YouTube Videos

We incorporate YouTube videos on our website, which are stored on the servers of the provider YouTube and which can be played from our website based on an embedding feature. The embedding of the videos is made with an activated option for extended data protection settings.

If you did not give your consent to the use of the YouTube videos in the consent banner and if you try to view a YouTube video, you will be redirected to the consent banner for your release.

If you have given your consent to the use of the YouTube videos in the consent banner, YouTube/Google will receive the information that you accessed the corresponding website of our online offer. In the process, YouTube cookies and DoubleClick cookies will be stored on your computer and data could be transferred to Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA, as the YouTube operator.

According to the current status, when playing videos stored on YouTube, at least the following data will be transferred to Google Inc. as the YouTube operator and operator of the DoubleClick network: IP address and cookie, the specific address of the page accessed on our website, system date and time of access, identifier of your browser.

The transfer of such data is made irrespective of whether you have a Google user account that you used to log in or whether you do not have any user account. If you are logged in as mentioned above, Google could assign such data directly to your account. If do not wish the assignment to your profile, you have to log out prior to activating the play button for the video.

YouTube or Google Inc., respectively, store such data as user profiles and uses them for the purposes of advertising, market research and/or adequate configuration of their websites. Such an evaluation is made in particular (also for users not logged in) in order to present adequate advertising and to inform other users of your activities on our website. You have the right to object to the creation of such user profiles; if you wish to exercise this right, you have to contact Google as the operator of YouTube.

For more information on the purpose and volume of the collection of data and their processing by Google, please consult this website: https://policies.google.com/privacy?hl=de#infosharing

The legal basis for the processing of your data is Art. 6 (1)(1)(a) GDPR. Consent via the consent banner.

Disable YouTube

15.2 Google Maps

1. On this website, we use the offer of Google Maps. In doing so, we can show you interactive maps directly on the website, thus enabling you to use the map function in a comfortable manner.
2. If you did not give your consent to the use of Google Maps in the consent banner and if you try to access Google Maps, you will be redirected to the consent banner for your release of the use.
   If you have given your consent to the use of Google Maps in the consent banner, Google will receive the information that you accessed the corresponding website of our online offer. In the process, Google Maps cookies will be stored on your computer and data could be transferred to Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA, as the Google ​Maps operator.
   This is made irrespective of whether Google provides a user account that you used to log in or whether there is no user account. If you are logged in with Google, your data will be assigned directly to your account. If you do not wish the assignment to your Google profile, you have to log out prior to activating the button. Google will store your data as user profiles and uses them for the purposes of advertising, market research and/or adequate configuration of its website. Such an evaluation is made in particular (even for users who are not logged in) in order to present adequate advertising and to inform other users of the social network of your activities on our website. You have the right to object to the creation of such user profiles; if you wish to exercise this right, you have to contact Google.
3. For more information on the purpose and the volume of the collection of data and their processing by the plug-in provider, please consult the privacy policies of the provider. There you will also receive additional information on your rights in this respect and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.
   The legal basis for the processing of your data is Art. 6 (1)(1)(a) GDPR. Consent via the consent banner.

Disable Google Maps

15.3 Web Fonts

We use external fonts of the company Monotype, 600 Unicorn Park Drive, Woburn, MA 01801 and Monotype GmbH, Werner-​Reimers-Strasse 2–4, 61352 Bad Homburg (Monotype). The incorporation of these web fonts is made by way of a server call, which is generally a server of Monotype in the European Union. In doing so, information is transferred to the server as to which of our websites you visited. This is required for invoicing (licence model). The collected data are used for invoicing purposes only and will not be passed on to any third party. For more information, please consult the data protection information of Monotype, which you can access here: https://www.monotype.com/legal/privacy-policy

The legal basis for the processing of your data is Art. 6 (1)(1)(f) GDPR. Legitimate interest of the website operator.
(uniform display on all devices and browsers as well as short loading times)

§16 Security Information

We secure our website and other IT systems by way of adequate technical and organisational measures against loss, destruction, unauthorised access, unauthorised alteration or unauthorised distribution of your data. In practice, however, absolute protection against all risks is not possible in every case despite the highest level of caution. Due to the fact that in communications via email we cannot guarantee complete data security, we recommend sending confidential information by post.

§17 WordPress

We use WordPress as the content management system for our website. WordPress uses functional (necessary) cookies to ensure the login process for editors and administrators.

In particular, in case of the attempt of logging in to the administration surface of WordPress, a cookie is placed known as wordpress_test_cookie. That cookie is used for the active session only and is erased once you close the browser.

The cookie is not used to evaluate users.

The legal basis is Art. 6 (1)(f) GDPR (legitimate interest: ensuring the login process).

§18 Modifications of this Data Protection Information

If required, please obtain information about this Data Protection Information, in particular, if you disclose personal data.

Revision of: 13 September 2020