Privacy
Copyright
All rights to this website (including texts, pictures, illustrations, audio files, multimedia applications, databases and image sequences) are property of ecoprog GmbH. This does not include the pictures described in the photo credit in the legal notice.
The website may only be used for private purposes within the framework of the narrow confines of copyright regulations. Furthermore, a permanent or temporary copying, processing, disclosure or storage of the website in whole and in part is only allowed with a prior written approval of ecoprog GmbH.
Copyright © 2018 ecoprog GmbH
Disclaimer
The information presented on this website has been carefully examined by ecoprog GmbH and drawn up to the best of our knowledge. It is regularly updated. Please note, however, that no guarantee can be assumed for the completeness, topicality, quality and correctness of the information provided. Any of the data can be modified, supplemented or deleted without prior notice. No responsibility can be assumed for damages arising from trust placed in the contents of this website or their use.
No liability will be assumed for external links.
Copyright and other protective rights
Any use whatsoever of this copyrighted website, the information and illustrations provided, or any extract thereof, requires the previous approval of ecoprog GmbH in all cases.
Should you suspect an infringement of your copyright or other protective rights to have originated from this website we kindly request you to inform us by post or email so that corrective measures can immediately be taken. Please note: The more time-intensive procedure involved when instructing a lawyer to serve notice with subsequent costs for the service provider does not correspond with the actual or assumed intention of the latter.
Data Privacy Policy
(last updated on 25 May 2018)
I. Responsibility
The following company is responsible in accordance to the meaning of the EU General Data Protection Regulation, the German Data Protection Act and other applicable data protection legislation:
ecoprog GmbH
Krefelder Str. 18
50670 Köln
Tel. +49 (0) 221 788 03 88 0
Fax +49 (0) 221 788 03 88 10
info(at)ecoprog.com
www.ecoprog.com
II. General data processing regulations
We only collect and use personal data of our users/client to a necessary extent in order to provide a functioning website, content and services as well as to process orders. Collection and use of personal data of our users only happens after their consent, except in cases, where a previous consent cannot be obtained for factual reasons or when legal provisions allow for processing of the data.
III. Provision of website and creation of log files
Each time you visit our website, our system automatically collects data and information from the computer system you use for visiting our website.
This includes the following data:
- Information on browser type and version
- The user’s operating system
- The user’s internet service provider
- The user’s IP address
- The date and time of the visit
The legal basis for the temporary storage of data is GDPR Art. 6 para. 1 lit. f.
The system must temporarily store the IP address so that the website can be delivered to the user’s computer. In doing so, the IP address of the user has to be stored throughout the visit.
Data is stored in log files in order to secure the operability of the website. We furthermore use the data to optimise our website and guarantee the safety of our IT systems. We do not use this data for marketing purposes.
These purposes also are our legitimate interest for data processing according to GDPR Art. 6 para. 1 lit. f.
For safety reasons (e.g. for fighting misuse and fraud), log file information is saved for 7 days at the longest and deleted afterwards.
Collecting the data to provide the website and saving the data in log files is mandatory for operating the website. The user does therefore not have the option to object to this.
IV. Use of cookies
Cookies are small text files or other memory units[AKeG1] that store information on terminal devices and read out information from terminal devices in order to save, for instance, the log-in status in a user account, the content of a shopping cart in an online shop, the contents called up or used settings of an online offer. Moreover, cookies can be used for different purposes, e.g. purposes of functionality, security and convenience of online offers as well as production of flow of visitors analyses.
Notes on declaration of consent: We use cookies in compliance with the legal requirements. We therefore seek the users‘ prior consent unless this is not legally required. The consent in particular is not required if the storage and readout of the data, thus also including cookies, are imperative in order to provide the users with a telemedia service (that is our online offer) they explicitly requested. Absolutely necessary cookies normally include cookies with functions that serve the display and operability of the online offer, load balance, security, storage of the users’ preferences and choices, or similar purposes associated with the provision of the primary and secondary functions of the online offer requested by the users. The revocable permission is clearly communicated to the users, comprising the information of the respective cookie usage.
Notes on data protection legal bases: On which legal foundation of data protection regulation we will process the personal data with the help of cookies depends on whether or not we request the users’ consent. If the users give consent, the declared consent represents the legal basis for processing their data. Otherwise the data processed with the help of cookies will be further processed on the basis of our legitimate interests (with regard to, for example, economic operation of our online offer as well as improvement of its usability) or, if this takes place in the framework of performance of our contractual obligations in case the usage of cookies is necessary in order to fulfill our contractual obligations. To which specific purposes we will process the cookies, we will elucidate in the course of this data protection declaration or in the context of our consent and processing procedures.
Storage period: With regard to the storage period, the following types of cookies are distinguished:
Temporary cookies (also called session cookies): Temporary cookies will be deleted, at the latest, once a user has left an online offer and closed his/her terminal device (e.g. browser or mobile application).
Permanent cookies: Permanent cookies will remain stored also after closure of the terminal device. Thus, for instance, the log-in status can be saved, or preferred contents can be displayed directly if the user returns to a website accessed before. The users’ data collected with the help of cookies can also be used for audience measurement. If we do not communicate any explicit specifications concerning the type and storage period of cookies to the users (for instance in the context of obtaining consent), users should assume cookies to be permanent and the storage period to last up to two years.
General information on revocation and opt-out: Users may revoke their declared consent at any time and furthermore appeal against the processing in accordance with the legal requirements in Article 21 of GDPR. Users may also declare their objection via their browser settings, for example by deactivating the use of cookies (although this might limit the functionality of our online services). Objection against the use of cookies for online marketing purposes can also be declared through the websites https://optout.aboutads.info and https://www.youronlinechoices.com/.
Legal bases: Consent (Article 6 (1 S.1) (a) of GDPR).
Further information on processing procedures, processes and services:
Processing of cookie data on the basis of consent: For the purpose of cookie-consent-management, we are implementing a procedure within the scope of which the users’ consent to the use of cookies and, respectively, the processes and providers mentioned in the context of the cookie-consent-management process can be obtained as well as managed and revoked by the users. Here, the declaration of consent will be saved so it does not have to be retrieved again and the consent can be accounted for in compliance with the legal obligation. The storage can take place on the server side and/or in a cookie (a so-called opt-in cookie, or with the help of comparable technologies) in order to be able to allocate the consent to a user or to his/her device respectively. Subject to individual information on the providers of cookie-management services, the following notes must be observed: The storage period of the consent can be up to two years. On this occasion, a pseudonymous user identifier is created and stored along with the time of giving consent, information on the scope of consent (for example pertaining to the categories of cookies and/or service providers) as well as the browser, system and device used; legal bases: Consent (Article 6 (1 S.1) (a) of GDPR).
Milleponde Cookie: Cookie-consent-management; service provider : millepondo services GmbH & Co. KG, Falkenburgstr. 31-33, -50935 Köln; website: www.millepondo.de Data protection declaration: https://www.millepondo.de/datenschutz/
Further information: An individual user-ID, the language as well as the type of consent, and the time of giving consent will be stored on the server side and in the cookie on the users’ device
V. Ordering products and services
We process our clients’ data for order transactions through our website and by sending them order forms in order to enable them to select and order their chosen products and services as well as to secure payment and delivery/execution. Our users and clients may subscribe to market monitors, which we regularly send them as emails. Clients may also access our online archive by entering their user name and password.
The processed data is inventory data (name and address as well as contact details of users), communication data, contractual data (e.g. services used, names of contact persons), payment details, technical communication details (information on devices, IP addresses) as well as usage data (access times).
Processing takes place based on GDPR Art. 6 para. 1 lit. b (handling of orders, performance of a contract) and c (statutory archiving). The data marked as required is obligatory for establishing and fulfilling the contract. We will only disclose this data to third parties within the framework of delivery, payment or as part of legal allowances and duties towards legal advisers and authorities. The data will only be processed in third countries if this is necessary for fulfilling the contract (e.g. upon customer request for delivery or payment).
Processing takes place with the purpose of providing contractual services within the framework of an (online) order, subscription management, access to online archives, billing, delivery, and customer service.
The data will be deleted after the expiration of legal warranty obligations and comparable obligations; necessity of data retention will be reviewed every 3 years. In the case of statutory archiving, data is deleted after the expiration of these obligations (commercial obligation to retain data ends after 6 years; fiscal obligation to retain data ends after 10 years).
If the data is necessary for fulfilling a contract or for executing pre-contractual measures, the data can only be deleted early if it does not conflict with contractual or legal obligations.
VI. Registering for a trial subscription
Interested users may register for a free trial subscription. For this, we collect and process the user’s name, company and email address. During registration, we also collect the following data: IP address of the user’s computer as well as date and time of the registration. The purpose of processing this data is to be able to send you the market monitors for free and as an email. For the period of the trial subscription, the user is also granted trial access to our online archive.
GDPR Art. 6 para. 1 lit. a is the legal basis for processing the data after the users registered for a trial subscription and have given their consent to data processing.
Collecting the user’s name and email address has the purpose of being able to deliver the market monitors. Storing the user name and the password enables the trial access to our online archive.
The data will be deleted as soon as they are no longer needed for the purposes mentioned above. Name and email address as well as login details for the trial access to the online archive will therefore be stored as long as the trial subscription is active. Afterwards, the data will be deleted, unless the user has ordered products or services (that are not free of charge) or subscribed to our newsletter.
The user may terminate the trial subscription at any time. Each email sent to the user contains a link for this. To terminate the trial subscription, you may also write an email to info(at)ecoprog.com or contact the relevant person responsible.
When terminating the trial subscription, you may also withdraw your consent for storing the personal data collected during the registration process.
VII. Email correspondence
You may contact us by using the provided email address. In this case, we will store your personal data that is transferred within the email. In this context, we will not pass on the data to third parties. The data will only be used for processing and answering the contact request.
GDPR Art. 6 para. 1 lit. f is the legal foundation for processing the data that is transferred by sending us an email. If the email aims at concluding a contract, GDPR Art. 6 para. 1 lit. b serves as an additional legal foundation for data processing.
The only purpose of processing the personal data is to handle the contact request, which at the same time is the legitimate interest for processing the data.
The data will be deleted as soon as they are no longer needed for the purpose mentioned above. For the data you sent us with your email, this is the case when the respective conversation has been completed. A conversation is completed when the circumstances indicate that the respective issue has been resolved once and for all.
If you contact us by email, you may withdraw your consent to storing your personal data at anytime. If this is the case, we will not be able to continue our conversation.
You may withdraw your consent to use your personal data at any time, by writing us an email to info(at)ecoprog.com. All personal data we have stored in the course of your contact request will then be deleted.
VIII. Newsletter
On our website, you may subscribe to our free newsletter, providing information on, amongst others, new publications, studies etc. When registering for this, the data from the input screen (name, company and email address) will be transferred to us. You may also decide to subscribe to our newsletter within the framework of orders (by an explicit opt-in). Furthermore, the following data will be collected during your registration: IP address of the computer you use as well as date and time of the registration.
For processing your data, we will ask for your consent and refer to this Data Privacy Policy during registration.
We are using the double opt-in process. We will first send a confirmation email to the address you provided us with, which requests you to confirm your registration. The registration will only be activated if you click on the activation link in the confirmation email.
If you purchase products or services through our website and provide your email address, we may use this in the future for sending you a newsletter. In this case, the newsletter will only include direct advertising for relevant ecoprog products or services.
For delivering our newsletter, we are using the software “rapidmail” by German company rapidmail GmbH. Your data will therefore be passed on to rapidmail GmbH. In this case, rapidmail GmbH is the data processor (under GDPR Art. 28) and we have entered into a data processing agreement with the company. rapidmail GmbH is not allowed to use your data for other purposes than delivering the newsletter. rapidmail GmbH may not pass on or sell your data. The data will only be used for delivering our newsletter.
GDPR Art. 6 para. 1 lit. a is the legal basis for processing the data after the users subscribed to the newsletter and have given their consent to data processing. UWG § 7 para. 3 is the legal basis for sending the newsletter after products or services were sold.
Collecting the user’s email address has the purpose of delivering the newsletter. The data will be deleted as soon as they are no longer needed for the purpose as described above. The user’s name and email address will thus be stored as long as the newsletter subscription is active.
The user may unsubscribe from the newsletter at any time. If the newsletter is sent to you after you purchased ecoprog products or services, you may revoke your consent to the newsletter delivery when you enter your email address and also revoke your consent to data storage after each newsletter delivery.
Each newsletter contains a link for unsubscribing and for revoking your consent to data storage. You may also unsubscribe/revoke your consent by writing an email to info(at)ecoprog.com or contacting the responsible person in another way.
By unsubscribing, you may also revoke your consent to storing the personal data that was collected during your registration.
IX. Application process
The application process requires that applicants disclose all personal data to us that is necessary for their assessment and selection. What kind of information is necessary arises from the job description or, in the case of online forms, the specifications given there.
In general, the required data include basic personal and family information, such as name, address, contact possibility, as well as documents attesting the qualifications necessary for the post. On request we will be pleased to inform you which data need to be submitted.
If made available, applicants can use an online form to submit their application documents. According to the state of the art, the data will be transferred to us in encrypted form. Applicants can also send us their applications via email. Please note that emails on the internet in general are not transmitted in encrypted form. Though, as a general rule, emails are encoded in transit, this is not the case on the servers sending and receiving them. Therefore we cannot accept any responsibility for the transmission path of the application between sender and receipt on our server.
For the purposes of recruitment, submission of applications, and selection of applicants, we may use, in compliance with the statutory provisions, applicant management and recruitment software as well as third-party platforms and services.
We welcome applicants to contact us concerning the submission type of the application or to send us their applications by mail.
Processing special categories of data: As far as personal data within the meaning of Article 9 (1) of GDPR (for example health-related data such as severe disability or ethnic origin) is requested from applicants in the course of the application process so that the person responsible or the person concerned is able to exercise his/her rights arising from labour law and social security and protection legislation and to observe his/her duties in this regard, these data will be processed in accordance with Article 9 (2) (b) of GDPR, in the case of protection of the vital interests of the applicants or other persons in accordance with Article 9 (2) (c) of GDPR, or for purposes of health provision or occupational medicine, for evaluation of the employee’s work ability, for medical diagnostics, for care or treatment in the health or social sectors or for health care and social security schemes management in accordance with Article 9 (2) (h) of GDPR. In the case of submission of special categories of data on the basis of voluntary agreement, these data will be processed on the basis of Article 9 (2) (a) of GDPR.
Deleting of data: In the case of a successful application, the data supplied by the applicants may be further processed by us for the purposes of the employment relationship. Otherwise, if the application for a job offer is not successful, the applicants’ data will be deleted. The applicants’ data will also be deleted if the applicants withdraw their applications which they are entitled to do at any time. The deletion of the data, subject to the applicants’ justified revocation, is carried out after a period of six months at the latest, so we can respond to possible follow-up questions concerning the application and meet our obligations of proof arising from the directives on equal treatment of applicants. Invoices for possible reimbursement of travel expenses will be archived in compliance with tax-law provisions.
Inclusion in a pool of applicants: Inclusion in a pool of applicants (if offered) will take place on the basis of consent. The applicants will be informed that their consent to be included in the talent pool is voluntary and does not have any influence on the ongoing application process, and that they may revoke their consent at any time for the future.
Types of data processed: Inventory data (e.g. names, addresses); contact data (e.g. email addresses, telephone numbers); content data (e.g. entries in online forms); applicant details (e.g. personal details, mail and contact addresses, application documents and included information such as, for instance, cover letter, curriculum vitae, certificates as well as any additional information, disclosed by applicants with regard to a specific job or voluntarily, relating to the applicants personally or to their qualifications).
Persons concerned: Applicants.
Purposes of the processing: Application process (conclusion and possible later execution as well as possible later termination of the employment relationship).
Legal bases: Application process as a pre-contractual or contractual relationship (Article 6 (1) (b) of GDPR)).
X. Social Media
LinkedIn Plugin
Our website uses functions of the network LinkedIn, provided by the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Each time you visit one of our sites containing LinkedIn functions, a connection to the LinkedIn servers will be set up.
LinkedIn gets the information that you have visited our website pages with your respective IP address. If you click on the LinkedIn “Recommend” button and log onto the LinkedIn page with your existing account, LinkedIn is able to assign your visit to our website to your user account. As a provider of our website, we are neither aware of the content of the transferred data nor in what way LinkedIn uses it. Find further information on this in LinkedIn’s privacy policy here:
https://www.linkedin.com/legal/privacy-policy
XI. Google Analytics
We are using Google Analytics, a web analytics service by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google uses cookies. The information these cookies generate on your use of this site (browser type/version, operating system, HTTP referrer (website you visited before you went to our site), host name of the computer you use (IP address), time of the server inquiry) is transferred to a Google server in the USA, where it is saved.
The information is used to analyse the use of the website, generate reports on the website activities and to provide services connected to website use and Internet use for purposes of market research and to design these websites in a way that demands are met. This information may also be passed on to third parties, if this is required by law or if third parties were assigned to process this data. By no means, your IP address will be combined with other data from Google. Furthermore, we have expanded Google Analytics on this website by the code “anonymizeIP”. This means that your IP address will be shortened and therefore anonymised. Google deletes the last 8 bits of the IP address before saving the collected data. Only in exceptional cases, complete IP addresses are sent to a Google server in the USA and shortened there.
GDPR Art. 6 para. 1 lit. a is the legal basis for processing the data. Our legitimate interest is the analysis, optimisation and the efficient operation of our website.
The data we collect through using cookies will be deleted automatically after 14 months. Data that has reached this maximum retention period will be deleted automatically once a month.
By changing the settings in your browser, you may prevent the installation of cookies. However, this may limit your use of certain functionality of this website.
You may also prevent Google from collecting the data on your website use (including your IP address) the cookie generates and from processing this data by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to this browser add-on, and especially for browsers on mobile end devices, you may prevent Google Analytics from collecting the data by clicking on this link. This will set an opt-out cookie that prevents the future collection of your data when visiting this website. The opt-out cookie is only valid for this browser and only for our website and will be stored on your device. When deleting the cookies in this browser, you must set a new opt-out cookie.
You will find further information on the protection of data privacy in connection with Google Analytics in the Google Analytics help section (https://support.google.com/analytics/answer/6004245?hl=de).
XII. Rights of the data subject
When we process your personal data, you become a data subject according to the terms of the GDPR and thus have the right:
- (under GDPR Art. 15) to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;
- (under GDPR Art. 16) to request the correction of incorrect or incomplete personal data stored by us;
- (under GDPR Art. 17) to demand the deletion of your personal data stored by us, unless the processing is necessary to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- (under GDPR Art. 18) to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you refuse to delete it and we no longer need the data, but if you need it to assert, exercise or defend legal claims or if you have filed an objection to the processing under GDPR Art. 21;
- (under GDPR Art. 20) to receive the personal data you have provided us in a structured, current and machine-readable format or to request its transfer to another person responsible;
- (under GDPR Art. 3 para. 3) if our data processing is based on your consent, you have the right to revoke your consent to us at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future;
- (under GDPR AR. 77) you have the right to complain to a supervisory authority. For this purpose, you may usually contact the supervisory authority at your residence or the one responsible for the location of our registered office.
XIII. Right to object
If your personal data is processed on the basis of legitimate interests according to GDPR Art. 6 para. 1 p. 1 lit f, you have the right to object to the processing of your personal data (under GDPR Art. 21), as far as this is based on reasons resulting from your personal situation or if this objection aims at direct advertising. In the latter case, you have a general right to objection, which will be implemented by us without the need to claim a personal situation.
If you want to exercise your right to objection or revoking, please write an email to info(at)ecoprog.com.
XIV. Data protection contact person
If you have any questions concerning the collection, the processing or the use of your personal data or have requests in terms of obtaining information on your data, in order to correct, block or delete your data, please contact:
Mark Döing
ecoprog GmbH
Krefelder Str. 18
50670 Köln
Tel. +49 (0) 221 788 03 88 0
Fax +49 (0) 221 788 03 88 10
info(at)ecoprog.com
www.ecoprog.com
