We take the protection of your personal data very seriously. Therefore, we handle your data responsibly in all data processing procedures and observe the statutory provisions regarding data protection, in particular the provisions of the EU General Data Protection Regulation (GDPR) and of the German Federal Data Protection Act (Bundesdatenschutzgesetz (BDSG)).
This data privacy statement gives, in particular, an overview of the following information:
• Which of your data are processed via our website (hereinafter also referred to as “offer”?
• In what manner, to what extent, for what purposes and on what legal basis are these data used?
• What security measures are taken to protect your data?
• How can you object to individual data processing operations via our website?
• How can you obtain access to the information provided to us and, if necessary, assert further data subject rights against us?
2. Who is your contact (controller) for your data protection concern?
Controller within the meaning of the data protection regulation is:
e.solutions GmbH ("e.solutions")
85055 Ingolstadt, Germany
Phone: +49 8458 3332-100
Fax: +49 8458 3332-333
Data protection officer: Dr. Carlo Piltz
Joachimsthaler Str. 34
10719 Berlin, Germany
Phone: +49 30 / 2332 895 0
Fax: +49 30 / 2332 895 11
Please send all inquiries concerning data protection and the assertion of data subject rights (see below in this data privacy statement) to the address stated above for the attention of our data protection officer.
3. On what legal basis may data processing be performed on our website?
If and when we obtain your consent to the processing of personal data, Article 6(1)(a) GDPR serves as the legal basis.
For the processing of personal data necessary for the performance of a contract to which you as the data subject are a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.
If and when the processing of personal data is necessary for compliance with a legal obligation which we as the controller are subject to, Article 6(1)(c) GDPR serves as the legal basis.
In case that vital interests of you or another natural person necessitate the processing of personal data, Article 6(1) (d) GDPR serves as the legal basis.
If the processing is necessary for the purposes of the legitimate interests pursued by us or a third party and your interests, fundamental rights and freedoms as the data subject do not override the first-mentioned interests, Article 6(1) (f) GDPR serves as the legal basis for the processing.
The concrete legal basis applicable to the respective processing can be found in the corresponding passage of this data privacy statement.
4. What technical access data/server log files are collected and stored when you use our offer?
We (and our webspace provider, respectively) collect and store your data on every access to the offer (called server log files and system and usage data, respectively). Access data include the following:
name of the called website, file, date and time of the call, transferred amount of data, report on successful retrieval, browser type incl. version, your operating system, referral URL (previously visited page), IP address, and accessing provider.
The legal basis for the storage of these data and the log files is Article 6(1) (f) GDPR.
We use the log data only for statistical evaluations for the purpose of operation, security, and optimisation of our offer. However, we reserve the right to subsequently examine the log data if there are concrete indications of the legitimate suspicion of illegal use. These purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR. In this context, no evaluation for marketing purposes takes place.
The data will be erased as soon as they are no longer required to accomplish the purpose of their collection. In the case of collection of the data for the provisioning of the website, this is the case when the respective session is terminated. If the data are stored in log files, this will be the case after 14 days at the latest. A longer storage than that is possible. In this case, the users’ IP addresses will be erased or alienated so that the calling client can no longer be allocated. Moreover, in the case of misuse or, for example, a hacker attack, the data will be stored until the circumstances have been finally clarified.
Collection of the data for the provisioning of the website and storage of the data in log files is absolutely necessary for the operation of the website.
5. How do we handle your data when you use our offer?
Personal data are pieces of information with the help of which a person is determinable, i.e., data that can be traced back to a person. This includes the name, e-mail address, or phone number. However, also data on preferences, hobbies, memberships, or which websites were visited are rated among personal data.
We only collect, use, and pass on personal data if and when this is permitted by law or you consent to data collection.
Please note that in individual cases we are – by order of the competent authority – entitled to furnish particulars about data, provided that this is required for criminal prosecution purposes, to enable the police forces of the German federal states to prevent crimes, to fulfil the statutory tasks of the constitution protection authorities of the German federal government and the German federal states, the Federal Intelligence Service, or the Military Counter-Intelligence Service, or to assert rights to intellectual property. The legal basis for that is Article 6(1)(c) GDPR.
If and when you contact us (e.g., by phone or e-mail), your data will be stored for the purpose of handling your request and in case any follow-up questions arise.
The legal basis for the processing of the data transmitted in the course of the sending of an e-mail is Article 6(1)(f) GDPR. If contacting is aimed at concluding a contract, an additional legal basis for the processing is Article 6(1)(b) GDPR.
The sole purpose of the processing of the personal data from the contacting is the handling of your request. In the case of contacting by e-mail, this is also the necessary legitimate interest in the data processing. The data will be erased as soon as they are no longer required to accomplish the purpose of their collection. This is the case when the respective conversation with the user has been completed. The conversion is completed when it can be understood from the circumstances that the relevant issue has been finally cleared up.
Right to object
The user may at any time object to the processing of their personal data, to the address stated above. In such a case, the conversation cannot be continued. In this case, any and all personal data stored in the course of the contacting will be erased.
7. What security measures have been taken to protect your data?
We implement up-to-date technical measures to ensure data security, in particular to protect your personal data against hazards during data transmission and disclosure to third parties. These measures are each adjusted to the current state of the art.
The databases of our offer are protected by physical and technical measures as well as procedural measures restricting access to the information to specifically authorised persons in accordance with this data privacy statement. The information system of our offer is located behind a software firewall to prevent access from other networks that are connected with the Internet. Only employees and authorised persons who need this information to fulfil a specific task are granted access to personal information. Employees and authorised persons are trained with regard to security and data protection practices.
We use the standardised SSL encryption technology for the collection and transmission of data via our offer.
When our offer is used, “cookies” are deployed.
This offer deploys cookies to the following extent:
• Transient cookies (temporary use)
Transient cookies are erased automatically when you close your browser. These are in particular the session cookies, which store a “session ID” by means of which different requests of your browser can be assigned to one session. This allows us to recognize your computer when you return to our website. The session cookies are erased when you log out or close the browser.
The legal basis for the use of the transient cookie is Article 6(1)(f) GDPR. Our legitimate interests are the provisioning of our website and the use of a cookie required for that.
• Necessary cookies
The legal basis for necessary cookies is Article 6(1)(f) GDPR. Our legitimate interests are the display of our website contents and, in order to comply with legal requirements, to track whether you gave your consent to the use of certain cookies.
• Persistent cookies (use limited in time)
Persistent cookies are erased automatically after a specified period of time, which may differ for the various cookies. You may erase the cookies at any time in the security settings of your browser.
The legal basis for the use of persistent cookies is the consent you have given in accordance with Article 6(1)(a) GDPR.
• Third-party cookies for website analysis
You may configure the browser settings according to your preferences and refuse, for example, third-party cookies or all cookies. Please note, however, that in this case you may be unable to use all functions of this website.
The legal basis for the use of third-party cookies is the consent you have given in accordance with Article 6(1)(a) GDPR.
9. Use of analysis tools: What happens to my data?
General information on the collaboration with the service provider Google LLC: The information acquired by the Google analysis tool is transmitted to Google headquartered in the USA. Google is self-certified under the EU US Privacy Shield to ensure appropriate protection of your personal data in accordance with EU law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI). For further information on data privacy at Google’s, go to https://policies.google.com/privacy?hl=en.
Provided that you gave your consent, this website uses Google Analytics, a web analysis service by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, “Google”). Google Analytics uses persistent and third-party cookies. This website uses Google Analytics with the "_anonymizeIp()” extension. Thus, IP addresses are processed in a shortened form. The information generated by Google Analytics cookies about your use of this website is usually transmitted to and stored by Google on a server in the USA. Since we activated IP anonymisation on this website, your IP address will be truncated by Google within the EU member states or other EEA states. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. For data transmission to the USA, Google is certified under the EU US Privacy Shield (see under “General information on the collaboration with the service provider Google LLC”). Furthermore, with the help of Google Analytics we also set a cookie that memorizes if and, if yes, when you gave your consent to collection by Google Analytics. Another recipient of the personal data obtained using Google Analytics is our service provider BOOHM (Guido Bliss, Justinianstrasse 1, 50679 Köln, Germany), who controls and analyses marketing campaigns for us.
Google Analytics allows the creation of statistics of the website usage and its sources. Google will use this information to analyse the usage of our online offer, to compile reports on the activities within this online offer. In doing so, pseudonymous usage profiles of the users will be generated from the processed data. The retention period agreed with Google regarding user and event data linked to cookies, user IDs, and advertising IDs is 26 months from the date on which you gave your consent. We use Google Analytics for statistical purposes, for example, to track how many users have clicked a certain element or piece of information. Furthermore, this website uses the “Demographics” function of Google Analytics. This allows for compiling reports containing information about the age, sex, and interests of the site visitors. These data originate from interest-based advertising by Google and visitor data of third-party suppliers. You may deactivate this function at any time in the display settings of your Google account or generally prohibit processing of your data by Google Analytics.
Right to revoke
You may revoke your consent with effect for the future by downloading and installing the plug-in available at the following link: tools.google.com/dlpage/gaoptout. Moreover, you may change your settings at (https://adssettings.google.com/anonymous?hl=en-GB&sig=ACi0TCgjQOtZZmsnhor-F-jUaLKUXPozB-azrbC60G1nlIid6ZBXp9mJfsSLCyW2C06i4JsWIeRrQw2CyV7laWP2gtjISjDTv8QM7RXXbZBM5xM64a1uc) or on the deactivation page of the NAI (Network Advertising Initiative) http://www.networkadvertising.org. Alternatively, you may also deactivate Google cookies on the Digital Advertising Alliance website by using the following link: http://optout.aboutads.info/?c=2#!/. Finally, you may prevent the storage of cookies in the general settings of your browser.
As an alternative to the installation of the browser plug-in, especially in internet browsers of mobile terminal devices, you may prevent collection by Google Analytics by clicking the following button:
This stores an “opt-out cookie” on your device, which will prevent collection of your data by Google Analytics in the future when you visit our website, and with which you can also revoke your consent.
Please note that, if you erase cookies in your browser settings, this might result in the opt-out cookie by Google Analytics being erased as well so that you have to reactivate it if necessary.
With your consent, we use Google Ads by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, “Google”) to measure the efficiency of individual advertisements, offers, and functions. For this purpose, a persistent third-party cookie is set as soon as you click on a Google ad. This cookie allows us to determine whether you return to the website with the concrete offer within the validity of the cookie of 45 days. The advertising material is provided by Google via “Ad Servers”. To this end, we use Ad Server cookies, which enable us to measure certain parameters, such as how often the advertisements are shown or the number of clicks by users, for the purposes of performance measurement. The information obtained through Google Ads cookies serve for the creation of statistics. We establish the total number of users who clicked on an ad and were redirected to a website with a conversion tracking tag. We use the remarketing function within the Google Ads service. The remarketing function allows us to present to users of our website advertisements based on their interests on other websites within the Google advertising network (in the Google search or on YouTube, commonly called “Google ads”, or on other websites). For this purpose, the users’ interaction on our website is analysed, for example, which offers the user was interested in, to enable us to show the users targeted advertising on other sites even after their visit to our website. For this, Google stores a number in the browsers of users visiting certain Google services or websites in the Google display network. These users’ visits are acquired via the ID stored in the “cookie”. This ID serves for the unambiguous identification of a web browser on a certain terminal device. Furthermore, with the help of Google Ads we also set a cookie that memorizes if and, if yes, when you gave your consent to collection by Google Ads. The retention period agreed with Google regarding user and event data linked to cookies, user IDs, and advertising IDs is 45 days. Another recipient of the personal data obtained using Google Ads is our service provider BOOHM (Guido Bliss, Justinianstrasse 1, 50679 Köln, Germany), who controls and analyses marketing campaigns for us.
Within the framework of the usage of Google Ads, personal data might be transmitted to the servers of Google LLC in the USA. For data transmission to the USA, Google is certified under the EU US Privacy Shield (see under “General information on the collaboration with the service provider Google LLC”).
The legal basis of data processing is your consent (Art. 6(1)(a) GDPR), which you can give in our cookie banner.
Right to revoke
You may revoke your consent to the collection and transmission of data to Google by preventing the respective activation of corresponding technical settings in your browser. Please note, however, that in this case you may be unable to use all functions of this website to their full extent. Furthermore, you may adjust the settings for Google ads. To do this, please go to the website https://support.google.com/ads/answer/7395996?hl=en and turn off ad personalisation. Please note that these settings might not have an effect on all your terminal devices and browsers. For further information, please refer to https://support.google.com/ads/answer/2662922?hl=en. Moreover, you may change the settings at (https://adssettings.google.com/anonymous?hl=en-GB&sig=ACi0TCgjQOtZZmsnhor-F-jUaLKUXPozB-azrbC60G1nlIid6ZBXp9mJfsSLCyW2C06i4JsWIeRrQw2CyV7laWP2gtjISjDTv8QM7RXXbZBM5xM64a1uc) or on the deactivation page of the NAI (Network Advertising Initiative) http://www.networkadvertising.org. Alternatively, you may also deactivate Google cookies on the Digital Advertising Alliance website by using the following link: http://optout.aboutads.info/?c=2#!/.
Google Tag Manager
To integrate tracking codes and associated code fragments (“tags”), we use the Google Tag Manager, operat-ed by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, “Google”). Google is self-certified under the EU US Privacy Shield to ensure appropriate protection of your personal data in accordance with EU law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI). For further information on data privacy at Google’s, go to https://policies.google.com/privacy?hl=en. Basically, the Google Tag Manager is not used to process personal data. When you call our website, however, your data about the access to the Google servers (called server log files and system and usage data, respectively) are transmitted to Google and stored there for 14 days. These access data may include the following without limitation: name of the called website, file, date and time of the call, transferred amount of data, report on successful retrieval, browser type incl. version, your operating system, referral URL (previously visited page), IP address, and accessing provider. For further information, go to https://support.google.com/tagmanager/answer/9323295.
The legal basis for integrating the Google Tag Manager and for data transfer to Google is Article 6(1)(f) GDPR. Integrating the Google Tag Manager significantly facilitates the implementation of tags and is therefore abso-lutely necessary for the operation of the website.
Provided that you gave your consent, this website uses the Adform online marketing tool by Adform Germany GmbH (Großer Burstah 50-52, 20457 Hamburg, Germany, “Adform”). Adform deploys persistent third-party cookies to place ads relevant to the users, to improve the reports on the campaign performance, or to prevent that a user sees the same ads several times. Adform recognises via a cookie ID which ads are placed in which browser and can thus prevent that they are shown several times. Moreover, with the help of cookie IDs Adform can recognize “conversions” referring to ad requests. This is the case, for example, if the user sees an Adform ad and later calls the advertiser’s website with the same browser and buys something there. Due to the deployed marketing tools, your browser automatically establishes a direct connection to the Adform server. Due to the inclusion of the Adform cookie, Adform obtains the information that you called the respective part of our Internet presence or clicked on one of our ads. Moreover, the deployed Adform cookies allow us to understand whether you carry out certain actions on our website after you have called or clicked (conversion tracking) one of our ads on another platform via Adform. Adform uses this cookie to understand the content with which you interacted on our website in order to be able to send you targeted advertising later. Furthermore, with the help of Adform we also set a cookie that memorizes if and, if yes, when you gave your consent to collection by Adform. The retention period agreed with Adform regarding user and event data linked to cookies, user IDs, and advertising IDs is 60 days. For further information on Adform, please refer to https://site.adform.com/ and on data protection at Adform Germany GmbH in general: https://site.adform.com/privacycenter/overview. Another recipient of the personal data obatined using Adform is our service provider BOOHM (Guido Bliss, Justinianstrasse 1, 50679 Köln, Germany), who controls and analyses marketing campaigns for us.
The legal basis of data processing is your consent (Art. 6(1)(a) GDPR), which you can give in our cookie banner.
Right to revoke
You may revoke your consent to the collection and transmission of data to Adform by deactivating Adform cookies in your browser at https://site.adform.com/privacycenter/platform-privacy/opt-out/. Moreover, you may also revoke your once given consent by adjusting the respective cookie settings. Please note that in this case you may be unable to use all functions of this website to their full extent. Moreover, you may manage the settings on the deactivation page of the NAI (Network Advertising Initiative) http://www.networkadvertising.org or deactivate them on the Digital Advertising Alliance website http://optout.aboutads.info/?c=2#!/.
IAB Europe / CMP Domain
Some cookies may only be used by website operators with the website visitors’ consent. To enable us to record who gave their consent and who did not, and to record and manage for what concretely a consent was given, we use the consent management tool provided by consentmanager.net. This tool is based on the IAB Europe standard, which entails that IAB Europe A.I.S.B.L. (Rond-Point Rob-ert Schumanplein 11, 1040 Brussels, Belgium) processes data on your cookie banner settings. IAB Europe A.I.S.B.L. sends signals with information on cookie banner settings from our website to the consent management tool. The legal basis for data processing is our legitimate interest (Art. 6(1)(f) GDPR) in recording and managing which selection decisions users made in the cookie banner and sending this information from our website to the consent management tool by means of a signal, in order to comply with the statutory provisions with regard to the setting of cookies. The data pro-cessed with the help of IAB Europe are stored as long as this is necessary for the recording and management of settings made in the cookie banner.
10. Data subject rights
On request, e.solutions will give you information about the personal data concerning you stored at e.solutions pursuant to Art. 15 GDPR at any time. Moreover, you may have your personal data rectified pursuant to Art. 16 GDPR, erased pursuant to Art. 17 GDPR, or restrict their processing pursuant to Art. 18 GDPR by e.solutions at any time. Pursuant to Art. 20 GDPR you have the right to have delivered to you or a third party data that we process automatically based on your consent or to perform a contract in a commonly used and machine-readable format. If you demand direct transmission of the data to another controller, this will only be done if it is technically feasible. Excluded from erasure are only those data which e.solutions requires to accomplish yet outstanding tasks or to assert existing rights and claims and data that must be kept by e.solutions due to statutory regulations. Such data will be blocked, however.
Moreover, pursuant to Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority.
If you gave e.solutions your consent to the processing of personal data within the framework of the usage of e.solutions’ services, you may revoke this consent at any time pursuant to Art. 7(3) GDPR. The revocation may be sent by e-mail to the following e-mail address: firstname.lastname@example.org or in writing to the address stated above. The effects of the revocation are restricted to the storage and usage of personal data that may not be stored and used even without your consent due to legal permissions. Such a revocation will affect the admissibility of the processing of your personal data after you have expressed it to us. Please note, however, that in this case processing of the relevant data will possibly no longer be realizable in the future.
If and when the processing of your personal data is based on the weighing of interests, you may object to the processing pursuant to Art. 21 GDPR. This is the case especially if the processing is not required to perform a contract with you. If you lodge such an objection, please state the reasons why we should not process your personal data as we do. In the case of your justified objection, we will examine the facts and either stop or adapt the data processing or present to you our compelling legitimate grounds due to which we will continue the processing. If you exercise your right to object, the controller will no longer process your personal data unless compelling legitimate grounds for the processing apply which override your interests, rights, and freedoms of the data subject or the processing serves for the establishment, exercise, or defence of legal claims.
Of course, you may object to the processing of your personal data for advertising and data analysis purposes at any time. To inform us about your objection to advertising, please use the following e-mail address: email@example.com or the address stated above.