According to Article 4 No. 1 of the GDPR (General Data Protection Regulation), personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, your address, your e-mail address, your telephone number or even your IP address. Information that does not help to identify you, e.g. anonymised data and information, is not personal data.
Collection and processing of personal data
a) Protocol data/server log files
When you access this website
- the IP address
- the host name of the accessing computer
- the browser type/browser version
- the operating system used
- the referrer URL
- and the time of the server request and stored in a log file.
b) Data in the online contact form
If you use the online form to contact us, the following data will be stored
- the subject
- Your surname and first name
- your e-mail address
- and, if applicable, the content of your message (comment) are collected and processed.
Overriding interest as legal basis
The legal basis for the storage of the log data is Article 6 para. 1 lit. f) GDPR. It is stored for 7 days solely for the purpose of ensuring the proper operation of the server. This interest in the operational security of the server outweighs any interests in the immediate deletion of the above data. As a website visitor, you also have a similar interest in being able to access and use a website that is as secure as possible.
Consent as the legal basis
Without your consent - apart from the automatically stored log data (see above) - no personal data about you will be collected or stored. Only you decide whether or not to disclose personal data for the purpose of contacting you.
If you provide such data about yourself, you thereby give your consent to its storage and use in accordance with data protection law. The personal data you provide will be used exclusively to answer your enquiry or to send you the requested information or offers.
You can revoke your consent to the processing of data at any time with effect for the future.
Our internet pages use so-called "cookies". Cookies are small text files and do not cause any damage to your terminal device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.
In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behaviour or display advertising.
Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies, e.g. for the shopping basket function) or to optimise the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 (1) lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies has been requested, the storage of the cookies in question is based exclusively on this consent (Art. 6 para. 1 lit. a GDPR); consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.
TECHNICALLY NECESSARY COOKIES
Technically necessary cookies ensure the basic functionality of the website. This ensures smooth navigation and use. This information is therefore required to provide you with our online services. The legal basis for the integration of these cookies is Art 6 para 1 lit f GDPR.
Cookie name: PHPSESSID
Purpose of the cookie: Retains the user's states for all page requests.
Cookie name: be_typo_user
Purpose of the cookie: This cookie is a standard session cookie of TYPO3. It stores the session ID in case of a user login. In this way, the logged-in user can be recognised and granted access to protected areas.
Cookie name: cookieconsent_status
Duration: 1 year
Cookie purpose: Stores the user's consent status for cookies on the current domain.
Cookie name: dp_cookieconsent_status
Duration: 1 year
Purpose of the cookie: Contains the selected cookie settings.
These cookies allow us to keep statistics about visits to our website. For example, the number of visits to the different areas of the website and the frequency of visits can be used to improve navigation, services and offers for the user. These cookies are processed on the basis of your consent.
Cookie name: _ga
Provider: Google Analytics / Google Tag Manager
Duration: 2 years
Cookie purpose: Used to reduce request rates.
Cookie name: _gid
Provider: Google Analytics
Cookie purpose: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
Cookie name: _gat
Provider: Google Analytics
Duration: 1 minute
Purpose of the cookie: Used by Google Analytics to limit the request rate.
Third-party services are also integrated on our website and provided by these third parties on their own responsibility. Cookies are therefore recorded and transmitted to the respective third party. So not only we process the cookies, but also the companies that provide these functions and cookies. Please note that for the use of your data beyond our processing, the responsibility lies with these companies and it takes place without our involvement.
Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. In doing so, pseudonymous user profiles of the users can be created from the processed data.
We only use Google Analytics with IP anonymisation activated. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the user's browser will not be merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of the data generated by the cookie and related to their use of the online offer to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
The users' personal data is deleted or anonymised after 14 months.
In addition to this website, we operate our own Facebook page (so-called "fan page") for advertising, marketing and information purposes and in order to be able to contact visitors to the fan page (usually interested parties, customers, applicants, etc.) directly.
We use aggregated evaluations of usage data of the fan page (so-called "insights data"), which are not personally identifiable, for the purpose of optimising the fan page content.
The legal basis for the processing of this data is Art. 6 para. 1 lit. f) GDPR and the underlying legitimate interest in providing an effective information and communication opportunity for visitors to the Fanpage.
The primary responsibility for the collection and processing of Insights data lies with Facebook. The details of this responsibility and the rights to which you are entitled as a data subject (cf. below) can be found at https://www.facebook.com/legal/terms/page_controller_addendum.
General information on the handling of personal data by Facebook can be found in the Facebook data policy, available at https://www.facebook.com/about/privacy.
You can assert your rights as a data subject against us or directly against Facebook. However, as a precautionary measure, we would like to point out once again that we cannot collect, process or view any personal insights data (see above) and also have no knowledge or insight into the circumstances of any processing by Facebook. For the assertion of corresponding data subject enquiries and information rights, please contact Facebook Ireland Ltd. directly, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
In order to protect your personal data from misuse, EKW GmbH takes all current technical and organisational security measures at its disposal.
In accordance with the Basic Data Protection Regulation, you have the right to information about your stored data. Upon request, EKW as provider will inform you whether and which personal data about you has been stored. If you have any questions about the collection and processing of your personal data on the website, you can contact the provider at any time by post at
Phone: +49 6351 409 0 or
if applicable, by e-mail at firstname.lastname@example.org.
In addition, you have other rights, such as the right to correct, block or delete the data collected, the right to restrict processing, the right to lodge a complaint with a supervisory authority and the right to data portability.
Finally, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data carried out on the basis of Article 6(1)(f) GDPR.