We at elbkind GmbH take the protection of the personal data of visitors to our website, our customers, business partners, etc. very seriously. With our data protection declaration we would like to inform you about the type, scope and purpose of the processing of personal data within the scope of our website, its functions and contents as well as about our external internet profiles, e.g. our other social media profiles. We collect, process and use your personal data in accordance with the contents of these data protection regulations and the applicable data protection regulations, in particular the DSGVO. We therefore ask you to read the following explanations carefully.
I. Definitions used
The terms used in this data protection declaration are defined in more detail in Art. 4 of the Basic Data Protection Ordinance (hereinafter “DSGVO”) as follows.
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as “user” or “data subject” or “you”); an identifiable natural person is one who can be identified directly or indirectly, in particular by assignment to an identification such as a name, an identification number, location data, an online identification (e.g. cookie) or to one or more special features that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
“Processing” means any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data. The term goes a long way and covers practically every handling of data.
“Pseudonymisation” means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
“Profiling” means any automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or relocation of that natural person.
“Responsible” means the natural or legal person, authority, institution or other body that alone or together with others decides on the purposes and means of processing personal data. In this case, us.
“Processor” means a natural or legal person, authority, institution or other body processing personal data on behalf of the data controller.
“Recipient” means any natural or legal person, authority, institution or other body to which personal data is disclosed, whether or not it is a third party.
II. Name and address
Person in charge
The person responsible as defined by the DSGVO pursuant to Art. 4 para. 7 and other national data protection laws of the member states as well as other data protection provisions is:
CEOs: S. Rymar, M. Königs, T. Spörer
22767 Hamburg, Germany
Phone: +49-(0)40-696 323 600
Company details: www.elbkind.de/impressum
Contact details of the data protection officer of the responsible person elbkind GmbH has appointed a data protection officer who can be contacted as follows:
Data Protection Officer –
22767 Hamburg, Germany
Phone: +49-(0)40-696 323 600
E-mail: firstname.lastname@example.orgIII. Collection of personal data, purposes
Basically, we process the personal data of the users of our Internet offer, as far as this is necessary to provide a functional website as well as our contents and services, in particular to answer contact inquiries and communication with users, security measures as well as a range measurement/marketing and provision of a newsletter for mobile end devices.
Personal data in the sense of this data protection regulations are all information that refer to an identified or identifiable natural person (see point I above). These include in particular
Inventory data such as name or address
Contact details such as e-mail address or telephone number
Content data such as text input, comments, photographs and videos
Usage data such as visited websites, our sub-pages, interest in certain contents, access times
Meta/communication data such as system and device and software information, IP address.
Provision of the website
In the case of merely informational use of the website, we collect in particular the personal data that your browser transmits to our server. This is the following data that is technically necessary for us to display the content of our website in a functional manner and to guarantee stability and security as well as for troubleshooting. The following data can be stored by us:
Date and time of access
Time zone difference to Greenwich Mean Time (GMT)
The website that the user has called up within our website
Websites from which the user’s system reaches our website
Websites accessed by the user’s system via our website
Access status/HTTP status code
The amount of data transferred in each case
Website from which the request comes
Information about the browser type and the version and language used
Operating system and its interface
Internet service provider of the user
Screen resolution of the user
The data is stored in log files to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest in data processing pursuant to Art. 6 para. 1 lit. f DSGVO also lies in these purposes. This data is not stored together with other personal data of the user.
On our website, we offer to send our newsletter with the latest information about us and various social media topics (e.g. Facebook, Google, etc.) directly onto your mobile phone at regular intervals, usually weekly. We use the WhatsApp instant messaging service of WhatsApp Inc, 650 Castro Street, Suite 120-219, Mountain View, California, 94041; USA. For the newsletter service, only the costs of your mobile phone provider are incurred.
a) How do I receive the newsletter?
If you would like to receive the newsletter, the following steps are required:
You have installed the Messenger WhatsApp on your mobile phone
Click “Go” on our “News” page.
Save the mobile phone number displayed there under your contacts and assign a name of your choice, e.g. elbkind Newsletter
Send the WhatsApp message “Ahoi” to this contact
After receiving this message you will receive our newsletter at regular intervals.
b) How do I unsubscribe from the newsletter?
To unsubscribe from our newsletter, please use WhatsApp to send the message “Stop” to the contact you created. You will then receive confirmation that you have unsubscribed from the newsletter. If you are interested in receiving information offered via our newsletter again in the future, you can subscribe to the newsletter at any time by using the WhatsApp message “Ahoi”.
c) Personal data
In this respect, we point out that the sender has neither exact knowledge nor influence on data processing by WhatsApp Inc.
You can revoke your consent at any time by sending the message “STOP” in accordance with the procedure set out under b).
We use the technical service provider WhatsBroadcast GmbH, Schwanthalerstraße 32, 80336 Munich, Germany, as our contract processor for the processing of your personal data on the basis of our legitimate interest pursuant to Art. 6 Para. 1 lit. f DSGVO. We have concluded a contract with the processor for order processing in accordance with Art. 28 DSGVO to ensure compliance with the protection of your data. The data protection declaration of WhatsBroadcast GmbH can be viewed here:
The dispatch service provider is basically permitted to use the data of the newsletter recipients in pseudonymous form and thus without assignment to a user for statistical purposes and to optimise or improve its own services.
If you have merely subscribed to our newsletter, your personal data will be stored with us and our contract processor for as long as this is necessary for the purpose of sending the newsletter. To have all your stored data with our service provider removed, send a message with the text “DELETE ALL DATA” via WhatsApp to the contact you have created according to a) above.
In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk in the browser you use and through which certain information flows to the place that sets the cookie (here by us). A cookie usually contains, in addition to the information described in III. No. 2, further information about the age of the cookie, its duration and an alpha-numeric identifier. Cookies cannot run programs or transmit viruses to your computer. They serve to make our website more user-friendly and effective.
Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted when you close your browser. These store a so-called session ID with which different requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website without having closed your browser.
Cookies are referred to as “permanent” or “persistent” if they remain stored on your computer even after you close your browser. Such cookies may, for example, store the websites you visited during your last visit and your interests in order to carry out a range analysis or marketing.
The distinction between first and third party cookies is the information as to who sets the cookie. A first-party cookie is stored by us as the operator of the website on your computer; a third party cookie is stored by another service provider such as Google Analytics (see also No. 4 below).
If you do not wish cookies to be saved, you can set your browser so that it informs you each time cookies are saved and you only allow this storage in individual cases. However, we would like to point out that when cookies are deactivated, the functionality of our website may be limited.
The following links will show you how to deactivate cookies in different browsers, for example:
Cookie settings in Safari web: https://support.apple.com/kb/PH21411?locale=it_IT&viewlocale=en_US
Cookie settings in iOS: https://support.apple.com/en-us/HT201265
Cookie settings in Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform=Desktop&hl=en
Cookie settings in Internet Explorer / Microsoft Edge: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Cookie settings in Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences#w_how-do-i-change-cookie-settings
Person responsible – Cookies
Cookies enable our systems to recognize the user’s device and to make possible presettings available immediately. As soon as a user accesses the platform, a cookie is transferred to the hard drive of the user’s computer. Cookies help us to improve our website and to offer you a better service tailored to your needs. They enable us to recognize your computer when you return to our website and thereby:
Store information about your preferred activities on the site to tailor our site to your individual interests. This includes, for example, advertising that corresponds with your personal interests.
Speed up the processing of your requests.
This is done by assigning an identification number to the cookie (“cookie ID”) rather than by assigning it to you personally. The cookie ID is not combined with your name, your IP address or similar data that would enable the cookie to be assigned to you.
Cookies of Google LLC – Use of Google Analytics
d) We only use Google Analytics with the extension “_anonymizeIp()”. As a result, IP addresses are processed further in a shortened form, so that a personal relationship can be ruled out. As far as the data collected about you is personal, it will be excluded immediately and the personal data will be deleted immediately.
e) For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.The legal basis for the processing of personal data with Google Analytics is Art. 6 Par. 1 S. 1 lit. f DSGVO.
f) Third party information: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Tel: +1 650 253 0000, Fax: +1 650 253 0001, E-Mail: email@example.com. User conditions: http://www.google.com/analytics/terms/de.html, Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy.
Further information on data use by Google, possible settings and objections can be found in Google’s data protection declaration (https://policies.google.com/technologies/ads) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).
With regard to the period for which users’ personal data is stored, we have selected the shortest period of 14 months for anonymization or deletion on Google.
If you contact us by e-mail, telephone or via our social media channels (private message or comments), we will process the data you provide us on the legal basis of Art. 6 para. 1 lit. b DSGVO in order to process your request. We may also use an organizational tool or customer relationship management software (CRM software) in which we store your data when processing your contact.
Your data will be deleted as soon as the purpose has been achieved, i.e. communication with you has been completed and the data is no longer required. In addition to any applicable legal retention periods, a check is made every 24 months as to whether it is still necessary to store your data.
2. When contacting us by e-mail, we would like to point out that a transmission of your message via the Internet may be viewed.
When contacting us via our social media channels, we point out that the respective social media provider also processes the information you share with us. The terms and conditions, data protection information and data processing guidelines of the respective social media platform operator therefore apply.
4. If you wish to send us documents/data for the purpose of an application, please also note the data protection information for applicants.
VI. Legal basis for the processing of personal data
In accordance with Art. 13 DSGVO, we inform you of the legal basis on which our data processing is based.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Ordinance (DSGVO) serves as the legal basis.
In the processing of personal data required for the performance of a contract to which the data subject is a party, Article 6(1)(b) DSGVO serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for processing.
VII. No disclosure of your personal data
We do not pass on your personal data to third parties unless you have consented to the data being passed on or we are entitled or obliged to pass on data due to legal regulations and/or official or court orders. In particular, this may involve providing information for law enforcement, security purposes or the enforcement of intellectual property rights.
VIII. Data integrity
All information that you transmit to us is stored on servers within the European Union, unless this data protection declaration specifically refers to a possible storage in other third countries (e.g. above III. 3. c) or IV. 3.). Unfortunately, the transmission of information via the Internet is not completely secure, which is why we cannot guarantee the security of the data transmitted to our website via the Internet. However, we protect our website and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. In particular, your personal data is transmitted in encrypted form. We use the SSL (Secure Socket Layer) coding system.
IX. Data erasure and storage time
The data processed by us will be deleted or their processing restricted in accordance with Articles 17 and 18 DSGVO. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended use and no other obligation to store data has been provided by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
In case the logfile data (see III. 2. above) is stored, it will for security reasons (e.g. to clarify misuse or fraud) only and at the latest be deleted after 7 days. Further storage of data for evidence purposes is possible. Such data are excluded from deletion until the respective incident has been finally clarified. Usually the IP addresses of the users are then deleted or alienated in such a way that an assignment of the calling client is no longer possible.
X. Your rights
You have the following rights towards us with regard to personal data concerning you:
Right to information according to Art. 15 DSGVO,
Right to correction, completion according to Art. 16 or deletion according to Art. 17 DSGVO,
The right to restrict processing in accordance with Article 18 DSGVO,
The right to object to processing under Article 21 of the DSGVO,
Right of future revocation of any consent given pursuant to Art. 7 para. 3 DSGVO,
Right to receive the data or the transferability according to Art. 20 DSGVO.
You also have the right to complain to a data protection supervisory authority about our processing of your personal data.
XI. Data protection and third party websites
XII. Social Media
Integration of YouTube videos
a) We integrate the videos of the platform “YouTube” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in the “extended data protection mode”, i.e. no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in III. 2. be transmitted. We have no influence on this data transmission.
b) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in § 2 (1) of this declaration will be transmitted. This is independent of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
c) Further information on the purpose and scope of data collection and processing by YouTube can be found in their data protection declaration, https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated. There you will also find further information about your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
a) On this website we use “Google Web Fonts” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The implementation of “Google Web Fonts” enables a special display of the fonts provided by Google (http://www.google.com/webfonts/). For this purpose, your browser retrieves the required font (web font) from Google when you visit our website and saves it in your browser cache. This is necessary so that your browser can also display an optically improved representation of our texts. If your browser does not support this function, your browser will use a standard font for display.
b) Further information on the purpose and scope of data collection and its processing by the plugin provider Google can be found in the data protection declarations of the provider. They will also provide you with further information about your rights in this regard and setting options to protect your privacy:
Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Integration of Google Maps
a) On this website we use “Google Maps” of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.
b) By visiting the website, Google receives the information that you have called up the corresponding subpage of our website. In addition, the data specified in § 2 (1) of this declaration will be transmitted. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
c) Further information on the purpose and scope of data collection and its processing by the plugin provider Google can be found in the data protection declarations of the provider. They will also provide you with further information about your rights in this regard and setting options to protect your privacy:
Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
We reserve the right to change these data protection regulations at any time with effect for the future. An up-to-date version is available on the website. Please visit the website regularly and inform yourself about the applicable data protection regulations.