Data protection policy
Data protection policy
Thank you for visiting our website. The protection of your personal data enjoys top priority at Joh. Wilh. von Eicken GmbH. At this point, we would like to inform you about how (and for what purpose) personal data is used when visiting our website.
1. Responsible body
This website and the services offered by www.von-eicken.com are provided by
Joh. Wilh. von Eicken GmbH
Drechslerstr. 1-3, 23556 Lübeck, Germany
Register court: District Court of Lübeck
Registration number: German Commercial Register No.: HRB 12093
Executive Director: Joh. W. von Eicken · Marc von Eicken
Telephone: +49 451 8 90 06-0
Telefax: +49 451 8 90 06-199
hereinafter “von Eicken”.
2. Key information
2.1. Von Eicken takes the protection of your personal data very seriously and ensures its own strict compliance with the rules set out under the data protection laws of the Federal Republic of Germany, the German Telemedia Act and the data protection regulations of the European Union (hereinafter: “data protection regulations”).
2.2. Von Eicken has obligated its employees accordingly to comply with said data protection regulations.
2.3. The following statement provides you with an overview of how Von Eicken guarantees this protection, as well as what kind of data is collected and for which purpose.
3. Personal data
According to GDPR, personal data refers to individual details about the personal or factual circumstances of a specific or identifiable natural person. These details can include, for example, your name or contact details – such as your telephone number, address and email address.
4. The collection of personal data
In order to contact us, the following data about you will be collected and stored:
General contact details for individuals registering an interest in being contacted:
• Last name
• Email
• Company
• Telephone
• Message
• Consent to the data protection clause
hereinafter referred to as “personal data”)
5. Purpose of collecting personal data
5.1. Personal data is collected, processed and used by Von Eicken exclusively for the following purposes:
• Establishing contact
• Enabling the provision of services
• Processing your request
5.2. For any purpose other than those purposes listed above, Von Eicken shall only use your personal data if, in accordance with the GDPR, it is necessary to safeguard the legitimate interests of a third party or to counter any threats to state or public security, or to pursue the prosecution of criminal offences.
5.3. Personal data is stored and processed exclusively on servers located within the European Union.
6. Google Analytics
Analytics uses so-called “cookies”, text files that are stored on your computer and that allow the analysis of the website’s use by you. The information generated by the cookie regarding your use of this website is typically transmitted to a Google server in the USA and stored there.
However, if IP anonymisation has been activated on this website, your IP address will be truncated by Google beforehand within the Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and truncated there. IP anonymisation is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of this website, to compile reports on website activity and to provide other services relating to website activity and internet usage vis-a-vis this website operator.
The IP address transmitted from your browser by Google Analytics will not be merged with other Google information. You can prevent the storage of cookies through a corresponding setting in your browser software; however, we would like to point out that, in this case, you may not be able to use all the functions of this website to their full extent. Furthermore, you may prevent Google’s collection of the data generated by the cookie and related to your use of the website (including your IP address) – as well as the processing of this data by Google – by downloading and installing the browser plug-in available via the following link.
Please note that on this website Google Analytics has been extended by the code “gat._anonymizeIp ();” in order to ensure the anonymous collection of IP addresses (known as IP-Masking).
7. Embedded YouTube Videos
Our site uses YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for the purpose of embedding video files. Typically, when you visit an embedded video page, your IP address will be sent to YouTube and cookies will be installed on your machine. However, we have included our YouTube videos using the enhanced privacy mode (in which case, YouTube will still contact Google's DoubleClick service, but personal data will not be evaluated as per Google's Data Protection Policy). Subsequently, YouTube does not store any information about visitors unless they watch the video. By clicking on the video, your IP address will be sent to YouTube and YouTube will know that you have watched the video. If you are logged into YouTube, this information will also be associated with your user account (you can prevent this by logging out of YouTube before accessing the video).
We possess no knowledge of (nor can we influence) the collection and use of your data by YouTube. For more information, please see the YouTube Data Protection Policy available at www.google.com/intl/en/policies/privacy/. Furthermore, we refer you to the general handling and deactivation of cookies on our general presentation in this Data Protection Policy.
8. Data Protection Policy governing the use of MATOMO
This website uses the open source web analytics service Matomo. Matomo uses so-called “cookies”. These are text files that are stored on your computer and that allow the analysis of the website’s use by you. To this end, the information generated by the cookie about your use of this website is stored on our server. The IP address is anonymised before being stored.
The information generated by the cookie regarding the use of this website will not be disclosed to third parties. You can prevent the storage of cookies through a corresponding setting in your browser software; however, we would like to point out that, in this case, you may not be able to use all the functions of this website to their full extent.
If you do not consent to the storage and use of your data, you can disable this here. In such a case, an opt-out cookie is deposited in your browser that prevents Piwik from saving usage data. If you delete your cookies, this will also result in the Piwik opt-out cookie being deleted. The opt-out cookie must be reactivated when visiting our site again in future.
9. Data minimisation
The legislature has dictated a variety of storage obligations and retention periods. According to the principles of data avoidance and data minimisation, personal data is only stored by Von Eicken for as long as necessary, or as required by law. If the underlying purpose no longer applies or the retention period ends, Von Eicken will block or delete the data.
10. Data security
In order to prevent unauthorised access to (or the disclosure of) data, to ensure the accuracy of data, and to safeguard its legitimate use, Von Eicken has adopted a range of technical and organisational procedures. However, no electronic communication is completely secure, meaning that any data and information you voluntarily submit to Von Eicken could be accessed by third parties by means of unlawful data gathering. The disclosure of information by third parties as a result of errors and / or any unauthorised access during data transmission shall not be the responsibility of Von Eiken.
11. Changes to the data protection provisions
In order to ensure that our data protection policy always complies with the latest statutory requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection policy must be adapted due to new or revised services, for example in the event of new services being launched. The new data protection policy will then take effect on your next visit to our website.
12. Public Procedural Directory (Öffentliches Verfahrensverzeichnis)
Von Eicken will gladly provide you with the Public Procedural Directory (Öffentliches Verfahrensverzeichnis) in accordance with GDPR. Please contact the Data Protection Officer at Von Eicken in this regard.
13. Data Protection Officer
Should data protection questions arise, please contact the Data Protection Officer at Von Eicken (datenschutzbeauftragter(at)von-eicken.com).
14. Rights of the data subject
The data subject shall have the following rights:
- Right to the disclosure of information (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to objection (Article 21 GDPR)
- Right to cancellation (Article 17 GDPR)
- Right to the restriction of processing (Art. 18 et seq. GDPR)
- Right to data portability (Article 20 GDPR)
Rights of the data subject
If personal data concerning you is processed, you shall have, in line with the DSGVO and in accordance with Art. 15-20 GDPR, the following rights vis-a-vis the data controller:
I. Right to the disclosure of information
In accordance with Art. 15 (1) GDPR, you may request confirmation from the data controller as to whether personal data concerning you is being processed by us. If such processing has taken place, you may request the disclosure of information from the data controller concerning the following points:
A. The purposes for which your personal data has been processed;
B. The categories of personal data being processed;
C. The recipients or the categories of recipients to whom your personal data has been (or will be) disclosed;
D. The planned duration of storage for your personal data or, if specific information is not available, the criteria for determining said duration of storage;
E. The existence of a right to the correction or deletion of the data subject’s personal data, or to the limitation of its processing by the data controller, or the right to object to such processing;
F. The existence of a right of appeal to a supervisory authority;
G. All available information on the source of the data, if said personal data has not been collected from the data subject itself;
H. The existence of automated decision-making apparatus – including profiling – pursuant to Art. 22 (1) and (4) GDPR and, at least in these cases, any meaningful information regarding the logic involved and the scope and intended impact of such processing vis-a-vis the data subject.
You have the right to request information about whether the personal data relating to you has been transferred to a third country or an international organisation. In connection herewith, you may request to be informed of the appropriate guarantees in line with Art. 46 GDPR with regard to such a transfer.
II. Right to rectification
In accordance with Art. 16 GDPR, you have the right to the rectification and / or completion of your personal data vis-a-vis the data controller, if your processed personal data is deemed incorrect or incomplete. The data controller must make the correction without undue delay.
III. Right to the restriction of processing
In line with the following conditions, you may, in accordance with Art. 18 et seq. GDPR demand the restriction of the processing of your personal data:
A. If you contest the accuracy of your personal data for a period of time that enables the data controller to verify the accuracy of your personal information;
B. The processing is unlawful, and you reject the deletion of your personal data and instead request the restriction of its use by the data controller;
C. The data controller no longer requires your personal data for the underlying purpose of processing, but you need it in order to assert, exercise or defend legal claims; or
D. If you have objected to said processing in line with Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the data controller outweigh your own reasons.
If the processing of your personal data has been restricted, this data may only be used – aside from its storage – with your consent or for the purpose of asserting, exercising or defending legal claims, or the protection of those rights of another natural or legal person, or for reasons of important public interest maintained by the European Union or a Member State. If the restriction of processing is attributable to the above provisions, you will be informed by the data controller before said restriction is lifted.
IV. Right to deletion
a) Deletion obligation
You may demand that the data controller deletes your personal data without delay, and the data controller is required by law to delete that information immediately, as long as one of the following is true:
1. Your personal data is no longer required for the purposes that led to its collection or processing respectively.
2. You revoke your consent, upon which the data processing was based as per Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, and to the extent that no other legal basis for said processing applies.
3. Pursuant to Art. 21 (1) GDPR, you object to said processing and such an objection to data processing is not superseded by a justifiable interest to do so, or if you object to such processing under Art. 21 (2) GDPR.
4. Your personal data was unlawfully processed.
5. The deletion of your personal data is necessary, in order to comply with a legal obligation under EU or national law, to which the data controller responsible for data processing must adhere.
6. Your personal data was collected in relation to the services of an information society being offered in accordance with Art. 8 (1) GDPR.
b) Information to third parties
If the data controller has released your personal data and is obligated to delete it in accordance with Art. 17 (1) GDPR, taking due account of the available technology and the costs of its implementation, he or she shall take appropriate measures, including any technical steps, to inform those data controllers tasked with the processing of your personal data that you, as the data subject, have demanded the deletion of all links to said personal data as well as any copies or replications thereof.
c) Exceptions
A right to deletion does not exist if the processing is necessary:
1. to exercise a right to freedom of expression and information;
2. to fulfil a legal obligation which requires its processing under the law of the European Union or of a Member States to which the data controller is subject, or to execute a task deemed to be in the public interest, or to exercise an official capacity for authority delegated to the data controller;
3. for reasons of public interest within the field of public health as per Art. 9 (2) h and i, as well as Art. 9 (3) GDPR;
4. for archiving purposes of public interest, for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 (1) GDPR, to the extent that the law referred to in (a) is likely to render impossible (or seriously affect) the attainment of those objectives being pursued by said processing, or
5. to assert, exercise or defend legal claims.
V. Right to information
If you have exercised the right of rectification, deletion or restriction of processing vis-a-vis the data controller, he / she shall be obligated to notify all recipients to whom your personal data has been sent regarding your demand for its rectification, deletion or restricted processing, unless: this proves to be impossible or otherwise involves a disproportionate amount of effort. In accordance with Art. 19 GDPR, you shall have the right to be informed of these recipients.
VI. Right to data transferability
In accordance with Art. 20 GDPR, you have the right to receive the personal data that you have provided to the data controller in a structured, standardised and machine-readable format. You shall also have the right to submit this information to another person without impedance by the data controller, to whom said personal information has been provided, to the extent that
1. its processing is based on your consent in accordance with Art. 6 (1) a GDPR or Art. 9 (2) a GDPR or a contract in accordance with Art. 6 (1) b GDPR and
2. processing is managed using automated methods.
In exercising this right, you also have the right to ensure that your personal data is transmitted directly from one data controller to another data controller, to the extent that this is technically feasible. The freedoms and rights of other individuals may not be affected. The right to data portability does not apply to the processing of personal data deemed necessary for the performance of a task that is in the public interest, or in the exercising of an official authority that has been delegated to the data controller.
VII. Right to objection
For reasons arising from your particular situation, you shall have the right, at any given time, to object to the processing of your personal data pursuant to Art. 6 (1) e or f GDPR; this shall also apply to any profiling based on these provisions. The data controller shall no longer process your personal data unless he or she can demonstrate compelling legitimate grounds for its processing that outweigh your own interests, rights and freedoms, or if said processing is essential for the purposes of asserting, exercising or defending legal claims. If your personal data is processed for the purposes of direct marketing, you shall have the right to object, at any given time, to the processing of your personal data for such advertising; this shall also apply to profiling measures, insofar as these are associated with such direct advertising efforts. Should you object to the processing of your personal data for direct marketing purposes, your personal data will no longer be processed in this regard. You shall also be free, in connection with the use of information society services and notwithstanding Directive 2002/58 / EC, to exercise your right of objection by means of automated procedures that involve the use of technical specifications.
VIII. Right to revoke your declaration of consent regarding data protection
You shall have the right to revoke your declaration of consent to the processing of your personal data at any time. Said revocation of your consent does not affect the legality of any processing carried out on the basis of your consent up until the point in time of revocation.
IX. Automated decisions in individual cases including profiling
You shall have the right to not be the subject of a decision based solely on automated processing – including profiling – which will have a legal (or similar) effect on your person. This does not apply if the decision in question
A. is required for the conclusion or performance of a contract between you and the data controller,
B. is permitted under European Union or Member State legislation to which the data controller is subject, and where such legislation contains appropriate measures aimed at safeguarding your rights, freedoms and legitimate interests, or
C. is made with your express consent.
However, such decisions may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2) a or g GDPR applies and reasonable measures have been taken to protect your rights, freedoms and legitimate interests. With regard to the cases mentioned in (1) and (3), the data controller shall take appropriate measures to protect your rights, freedoms and legitimate interests, including (at the very least) your right to facilitate the intervention of an individual with the data controller, to express your own position and to challenge any ensuing decision.
14. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a pertinent supervisory authority, in particular in the Member State where you have your place of residence, employment or in the place where an alleged infringement has taken place, if you believe that the processing of your personal data is in direct contravention of the General Data Protection Regulation. The respective supervisory authority with whom your complaint is lodged shall inform the complainant regarding the status and outcome of said complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
Additional Information
Your trust is important to us. We would therefore like to be available to you at any time to answer any questions you may have about the processing of your personal data. Should you have any questions that you feel this data protection policy does not answer, or if you would like more detailed information about a particular item, please do not hesitate to contact us by email at any time. (mail to: info(at)von-eicken.com)