Privacy Statement
Responsible party pursuant to data protection laws, in particular the EU General Data Protection Regulation (GDPR), is
ETTINGER GmbH
Telephone: +49 8104 66 23 88
Fax: +49 8104 66 23 99
E-Mail: info@ettinger.de
Delivery Address: Ottostrasse 5, 85649 Hofolding, Germany
Mailing Address: Postfach 11 61, 85647 Brunnthal, Germany
Company registration number: HRB 68 867 München
Managing Directors: Werner Ettinger, Roland Ettinger
VAT registration number: DE 129 341 982
Tax ID: 143/134/80446
Your rights as the data subject
You can exercise the following rights at any time using the contact details of our data protection officer:
- Information on your data stored by us and the processing thereof (Art. 15 GDPR),
- Rectification of inaccurate personal data (Art. 16 GDPR),
- Deletion of your data stored by us (Art. 17 GDPR),
- Restriction of the data processing, provided that we may not delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data with us (Art. 21 GDPR) and
- Data portability, provide that you have consented to the data processing or have entered into a contract with us (Art. 20 GDPR).
If you have given us consent, you may withdraw it at any time, which will remain in effect in the future.
You can contact a supervisory authority with a complaint at any time, e.g. the supervisory authority of the state of your residence or the authority that oversees us as the responsible party.
You’ll find a list of supervisory authorities (for the non-public area) with their respective addresses at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Collecting general information during a visit to our website
Type and purpose of the processing
When you access our website – i.e. if you do not register or submit information – information of a general nature will be collected automatically. This information (server log files) contains the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.
It is processed in particular for the following purposes:
- Ensuring an unproblematic website connection
- Ensuring seamless use of our website
- Analysis of system security and stability as well as
- For additional administrative purposes.
We will not use your data to draw conclusions about your person. This type of information will be statistically analysed by us if necessary to optimise our website and its underlying technology.
Legal basis
The processing occurs according to Art. 6 Para. 1 (f) GDPR, based on our legitimate interest in improving the stability and functionality of our website.
Recipients
Recipients of the data may be technical service providers, who work on the operation and maintenance of our website as the processor.
Retention period
The data will be deleted as soon as they are no longer required for the reason they were collected. This is generally the case, after the respective session has ended, for data that are used to make the website available.
Mandatory or required provision
The provision of the aforementioned personal data is neither legally nor contractually mandatory. Without the IP address however, the service and functionality of our website are not guaranteed. Furthermore, individual services can be unavailable or limited. For this reason, an objection is excluded.
Cookies
Type and purpose of the processing
Like many other websites, we use so-called ‘cookies’. Cookies are small date recordsuse that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.
With cookies, we receive certain information such as IP address, type of browser and operating system used.
Cookies cannot be used to start programs or to transmit viruses to a computer. Based on the information contained in cookies, we can facilitate your navigation of our site and properly display our webpages for you.
The data collected by us will not be shared with third parties under any circumstances nor will a link to personal data be created without your consent.
Of course, you can view our website without cookies. Internet browser are regularly configured to accept cookies. In general, you can disable the use of cookies via your browser settings at any time. Please use your Internet browser’s help function to learn how to change these settings, and keep in mind that individual features of our website may not work if you have disabled the use of cookies.
Legal basis:
The required cookies are collected on the basis of our legitimate interest in providing a user-friendly design for our website and in documenting consent in accordance with Art. 6 Para. 1 (f) GDPR in conjunction with an assessment in accordance with Section 25 Para. 2 of the German Telecommunications Telemedia Data Protection Act (TTDSG).
Legal basis for the collection of cookies that are not technically required: The storing of information on your device or access to information that is already stored on your device is voluntary, based solely on your consent in accordance with Section 25 Para. 1 TTDSG. If personal data are processed beyond this scope, the provision of your data is also voluntary, based solely on your consent in accordance with Art. 6 Para. 1 (a) GDPR. You can grant or withdraw this consent via the ‘Cookie Preferences’, which you will find in the Service section.
Recipients:
Recipients of the data may be technical service providers who work on the operation and maintenance of our website as the processor. For this purpose, we have entered into corresponding data-processing contracts with the providers. Further recipients are, in each case, the providers of the tools used.
Mandatory or required provision:
The provision of the aforementioned personal data with respect to required cookies is neither legally nor contractually mandatory. However, the service and functionality of our website are not guaranteed without this data. Furthermore, individual services may be unavailable or limited.
Of course, you can view our website without technically required cookies. Internet browsers are regularly configured to accept cookies. In general, you can disable the use of cookies via your browser settings at any time.
Please keep in mind that individual features of our website may not work if you have disabled the use of cookies.
Profiling:
With the assistance of tracking tools, the browsing behavior of the website visitors can be evaluated and their respective interests can be analyzed. For this analysis, we create a pseudonymous user profile.
Retention period and cookies used (cookei and opt-out instructions):
If you allow us to use cookies, via your browser settings or consent, the following cookies may be utilized on our web pages:
Technically required cookies:
Name | Purpose | Retention period |
cookie-preference | Stores the fact that you have selected cookies | 1 month |
timezone | Stores the time zone in which you are located | 1 month |
session- | Stores the shop session key | 12 hours |
biloba-ad-google-gtagjs | Stores the shop session key | 24 hours |
Cookies that are not technically required:
Name | Purpose | Retention period |
youtube-video | Stores whether YouTube videos may be played back | 1 month |
sib_cuid | Used by Brevo for the marketing purposes | 1 month |
In the following sections, we provide you with information concerning how these cookies can (also) pertain to personal data.
In your browser settings, you can delete individual cookies or the entire set of cookies. You will also find information and instructions on how to delete these cookies or prevent them from being saved in advance. The following links provide the information you’ll need for the respective browser providers:
- Mozilla Firefox: https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored
- Internet Explorer: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=en
- Opera: https://www.opera.com/o/ie-simple
- Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=en_US
Using Google Analytics
Type and purpose of the processing
This website uses Google Analytics, a web analytics service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA (hereinafter: ‘Google’). Google Analytics uses so-called ‘cookies’, i.e. text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website is typically transmitted to a Google server in the U.S. and stored there. However, due to the activation of IP anonymisation on these websites, your IP address will be truncated beforehand by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the U.S. and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, summarise reports on website activities and provide other services related to website and Internet usage to the website operator. The IP address transferred from your browser as part of Google Analytics will not be combined with other data from Google.
The data processing purposes are the website-use analysis and the summary of reports on activities on the website. Based on the use of the website and the Internet, other related services will be provided.
Legal basis
The storing of information on your device or access to information that is already stored on your device is voluntary, based solely on your consent in accordance with Section 25 Para. 1 TTDSG. If personal data are processed beyond this scope, the provision of your data is also voluntary, based solely on your consent in accordance with Art. 6 Para. 1 (a) GDPR.
Recipients
The recipient of the data is Google as the processor. For this, we have entered into the corresponding data-processing contract with Google.
Retention period
The deletion of the data occurs as soon as they are no longer necessary for our recording-keeping purposes. . See the retention periods defined in the cookie table.
Third country transfers
Google processes your data in the United States of America on the basis of an adequacy decision. Google LLC is certified in accordance with the Data Privacy Framework
Mandatory or required provision
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional limitations on the website.
Revocation of consent
Profiling
With the assistance of the tracking tool Google Analytics, the browsing behaviour of the website visitors can be evaluated and their respective interests can be analysed. For this analysis, we create a pseudonymous user profile.
Google AdWords
Type and purpose of the processing
Our website uses Google Conversion Tracking. The operating company of the Google AdWords services is Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. If you have reached our website via a Google advertisement, Google Adwords will place a cookie on your computer. The conversion tracking cookie is used when a user clicks on an ad from Google.
If the user visits certain pages on our website, and the cookie has not expired, we and Google can recognise that the user clicked on the ad and was redirected to this page. Every Google AdWords customer receives a different cookie. Thus, cookies cannot be tracked by the websites of AdWords customers. The information gathered by the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. The customers see the total number of users who clicked on their advertisement and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users.
Legal basis
The storing of information on your device or access to information that is already stored on your device is voluntary, based solely on your consent in accordance with Section 25 Para. 1 TTDSG. If personal data are processed beyond this scope, the provision of your data is also voluntary, based solely on your consent in accordance with Art. 6 Para. 1 (a) GDPR.
Recipients
Whenever you visit our website, your personal information, including your IP address, is transferred to Google in the U.S. This personal information is saved by Google. Google may transfer such personal data collected through the technical process to third parties.
We do not receive information from Google that could identify the data subject.
Retention period
These cookies lose their validity after 30 days and are not used for personal identification.
Third country transfers
Google processes your data in the United States of America on the basis of an adequacy decision. Google LLC is certified in accordance with the Data Privacy Framework.
Revocation of consent
If you do not want to participate in the tracking, you can reject the required cookie use – for example via a general browser setting that disables the automatic use of cookies or configures your browser to block cookies from the domain ‘googleleadservices.com’.
Please note that you should not delete the opt-out cookies as long as you do not want to save measurement data. If you have deleted all your cookies in the browser, you must use the respective opt-out cookie again.
Mandatory or required provision
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional limitations on the website.
Embedded YouTube videos
Type and purpose oft he processing:
We embed YouTube videos on some of our web pages. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter ‘YouTube’). If you visit a page with a YouTube plugin, a connection to YouTube’s servers will be established and YouTube will be informed which pages you visit. If you are logged into your YouTube account, YouTube will be able to associate your browsing behavior with you personally. You can avoid this by logging out of your YouTube account before accessing the page.
If a YouTube video is started, the provider uses cookies that collect information about user behavior. You can find out more information about the purpose and scope of the data collection and its processing by YouTube in the privacy policies of the provider. There, you will also find more information about your rights in this regard and settings options to protect your privacy (https://policies.google.com/privacy).
Legal basis:
Third country transfers:
Mandatory or required provision:
Registration on our website
Type and purpose of the processing
With the registration to use our personalised services, some personal data such as name, address, contact and communication information (e.g. phone number and e-mail address) are collected. If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the ability to change or delete the data entered during registration at any time. At any time, we will also provide you with information on the personal data about you that we have saved.
Legal basis
The data entered during registration are processed on the basis of our legitimate interest (Art. 6 Para. 1 (f) GDPR). Our legitimate interest is to facilitate an uncomplicated means for you to contact us and to process your order. If the registration fulfills the obligations of a contract, whose contractual party is the data subject, or serves to implement pre-contractual measures, the additional legal basis for the data processing is Art. 6 Para. 1 (b) GDPR.
Recipients
Recipients of the data may be technical service providers, who work on the operation and maintenance of our website as the processor.
Retention period
Data are only processed in this context provided that this is necessary for the aforementioned purposes on the basis of the defined legal basis and no statutory retention obligations prohibit the deletion. These retention periods are 6 or 10 years for reasons relating to proper accounting and tax law requirements. To contact us in this regard, please use the contact information provided at the end of this privacy statement.
Mandatory or required provision
The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot give you access to our content and services.
Commentary function
Type and purpose of the processing
When users leave comments on our website, the time of their creation and the username selected by the website visitor are saved. This is for our security, as we may be prosecuted for any illegal content on our website, even if it was created by users.
Legal basis
The processing of the data entered as a comment occurs on the basis of a legitimate interest (Art. 6 Para. 1 (f) GDPR).
With the commentary feature, our aim is to provide you with an uncomplicated way to interact. The information you enter will be stored for the purpose of processing the request as well as possible follow-up inquiries.
Recipients
Recipients of the data may be processors.
Retention period
The data will be deleted as soon as they are no longer required for the reason they were collected. This is generally the case, when the communication with the user has ended and the company can see from the circumstances that the respective issue has been clarified.
Mandatory or required provision
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot guarantee you access to our commentary function.
Job applications
Type and purpose of the processing: You can submit your application documents to us via e-mail or via job portals. We will process the data you provide solely to assess your professional competence and to get in touch with you.
Legal basis:
Processing occurs in order to implement pre-contractual measures at the request of the data subject for the purposes of establishing an employment relationship (Art. 6 Para. 1 (b) GDPR).
Recipients:
Within the companies, the departments that obtain access to your data are those that require such access in order to fulfill contractual, legal and supervisory obligations and to pursue legitimate interests.
Retention period:
In the event that your application is rejected, your data will be deleted six months after the decision has been announced. If an employment relationship is established, the application documents will be retained by us for the period of employment as a minimum.
Mandatory or required provision:
The provision of the personal data is neither legally nor contractually mandatory. However, it is not possible to process the application if such data are not provided.
Newsletter
Type and purpose of the processing
Your data will be used exclusively to send you the newsletter you subscribed for via e-mail. We request your name so that we can address you personally in the newsletter and identify you as needed should you want to exercise your rights as a data subject.
To receive the newsletter, providing your e-mail address is sufficient. When you subscribe to our newsletter, the data you provide will be used exclusively for this purpose. Subscribers can also be notified by e-mail about circumstances that are relevant to the service or registration (such as changes to the newsletter offer or technical matters).
We need a valid e-mail address to complete your registration. In order to verify that a registration is actually made by the owner of an e-mail address, we utilise the ‘double opt-in’ procedure. To this end, we log the newsletter subscription request, when a confirmation e-mail is sent and the receipt of the requested reply. Additional data is not collected. The data will be used exclusively for sending the newsletter and will not be shared with third parties.
Legal basis
Based on your express consent (Article 6 (1) a DSGVO), we will send you our newsletter on a regular basis or comparable information via e-mail to your specified e-mail address.
The consent to save and use your personal data for the newsletter may be withdrawn at any time and remain in effect in the future. Every newsletter contains a corresponding link, and you can also unsubscribe on this website at any time or inform us of your cancellation via the contact option indicated at the end of this privacy statement.
Recipients
We use a service provider for the dispatch, who acts as our processor.
Retention period
Data are only processed in this context provided that the corresponding consent has been given. The data will be deleted thereafter.
Mandatory or required provision
The provision of your personal data is voluntary, based solely on your consent. Unfortunately, we cannot send you our newsletter without your consent.
Contact form
Type and purpose of the processing
The data you enter are used for individual communication with you. A valid e-mail address and your name are required for this communication, which serves to organize your inquiry and the respective subsequent reply. Providing additional information is optional.
Legal basis
The processing of the data entered in the contact form occurs on the basis of a legitimate interest (Art. 6 Para. 1 (f) GDPR).
By providing the contact form, our aim is to facilitate an uncomplicated means for you to contact us. The information you enter will be used to process the inquiry and saved for possible follow-up questions.
If you contact us to request an offer, the processing of the information provided in the contact form will occur in order to implement pre-contractual measures (Art. 6 Para. 1 (b) GDPR).
Recipients
Our website is maintained by a service provider who acts as our processor.
If you send us an inquiry regarding an offer, service providers we employ may receive data for these purposes if they need the data to perform their services.
Retention period
The data will be deleted no later than 6 months after processing the inquiry.
Provided that we enter into a contract together, we will use the statutory retention periods in the German Commercial Code (Handelsgesetzbuch) and delete your data according to the respective stipulated deadlines.
Mandatory or required provision
The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, e-mail address and the reason for your inquiry.
Algolia Search
This website uses Algolia search technology via an API. The technology is provided by Algolia, Inc., 589 Howard Street, Suite 5, San Francisco, CA 94105, USA. Your IP address and search request must be saved in order to use the Algolia search functions. This information will generally be transmitted to an Algolia server in Europe or the USA where it will be saved. The provider of this site has no influence over this data transmission. We have agreed standard contractual clauses with the provider.
Purpose of processing
The use of the Algolia search is in the interests of ensuring our online offerings are easy to access and find.
Legal basis:
The legal basis for the collection and storing of information on your device or access to information that is already stored on your device is voluntary, based solely on your consent in accordance with Section 25 Para. 1 TTDSG. If personal data are processed beyond this scope, the provision of your data is also voluntary, based solely on your consent in accordance with Art. 6 Para. 1 (a) GDPR.
Period for which personal data is stored:
The data will be stored on the Algolia server for a period of 90 days.
Mandatory or required provision:
The provision of the aforementioned personal data is not legally or contractually prescribed. However, without this data the service and the functionality of our website may be restricted or unavailable. For further information about how user data is handled, please refer to the Algolia privacy policy:
https://www.algolia.com/policies/privacy.
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (such as SSL) via HTTPS.
Appointed processors
The following organisations, companies or people were commissioned with data processing by the operator of this website:
onacy GmbH
Revision of our privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. Your next visit will be subject to the new privacy policy.
Questions for the data protection officer
If you have any questions pertaining to data protection, please send us an e-mail or contact the person responsible for data protection in our organization:
Data Privacy Officer of ETTINGER GmbH
c/o activeMind AG Management- und Technologieberatung
Potsdamer Str. 3
80802 München
Phone: 089 919 294-900
E-mail: ettinger@activemind.de
Information on your right to object according to Art. 21 GDPR
Case-specific right to object
You have the right at any time, for reasons that arise from your particular situation, to object to the processing of personal data pertaining to you, which occurs pursuant to 6(1)(f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision in accordance with Art. 4(4) GDPR.
If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing is for the purpose of enforcing, carrying out or defending legal claims.
Recipient of an objection
The objection can be made in any form. Simply send us a letter or e-mail with “Objection” in the subject line, your name, address or other identifiers, and address it to:
ETTINGER GmbH
Postfach 11 61,
85647 Brunnthal
E-Mail: ettinger@activemind.de