1. Controller’s contact details
This website is a service of EiKO-Europe GmbH
76751 JOCKGRIM, Germany
Tel.: +49 (0) 7271 7607-0
fax: +49 (0) 7271 7607-29
For all questions relating to data protection laws, please directly contact the Data Protection Officer using the contact details specified below.
2. Contact details of the Data Protection Officer
EiKo’s Data Protection Officer can be reached at:
EiKo-Europe GmbH, Datenschutzbeauftragter,
76751 Jockgrim, Germany
+49 (0) 7271 7607-0
3. Collection of personal data in connection with the use of the website
You can visit EiKo’s website without telling us who you are. EiKO collects data upon accessing its service (so-called server log files). The access data includes: the name of the accessed website, the file, the date and time of the access, the quantity of data transferred, a notification of successful access, the browser type and version, the user’s operating system, the referrer URL (the previously visited page), the IP address and the requesting provider. We only use the log data for statistical evaluations for the purpose of the operation, security and optimization of the website. However, EiKO reserves the right to subsequently examine the log data if there is a justified suspicion of unlawful use based on specific indications.
This service uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, i.e. text files which are stored on the user’s computer and make it possible to analyze your use of the website. Since we have installed the AnonymizeIp plug-in on our website, the IP address of the users will be truncated by Google within Member States of the European Union or in other contracting states of the Treaty on the European Economic Area. In exceptional cases the IP address will be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use that information to evaluate the use of the website by the users in order to prepare reports on the website activities and to provide other services to the website operator associated with the use of the website and the use of the Internet. The IP address provided by your browser within the framework of Google Analytics will not be combined with any other Google data. Users can prevent the storage of the cookies by setting their browser software accordingly. However, if they do so they may not be able to use all the functions of this website to their full extent. Users can also prevent the recording of the data generated by the cookie that relates to their use of the website (including their IP address) to Google and the processing of that data by Google by downloading and installing the browser plug-in available through the following link: https://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser add-on or in browsers on mobile devices, you can click on this link in order to prevent recording by Google Analytics on this website in the future, in which case an opt-out cookie will be installed on your end device. If you delete your cookies you must click on the link again.
4. The legal basis for the processing
The above processing activities are based on Article 6 Para. Letter f of the GDPR on the protection of legitimate interests as well as – as far as the installation of cookies is concerned – on Article 6 Para. 1 Letter a of the GDPR – Consent.
The above-mentioned personal data may, in certain cases, be accessed by our service providers who work on the maintenance and updating of the website. The IP address may be transmitted to Google, LLC.
6. Export and processing of the data in countries outside the European Economic Area
With the exception of the IP address, there will be no exporting of personal data into countries outside the EEA. The data export to Google is based on a contract processing agreement in conjunction with the EU standard contractual clauses. These are available at: .......[A1]
7. Duration of the data processing
With the exception of the IP address in truncated form, we do not store any personal data of the users of our website after the end of the actual use.
8. The necessity of the data collection
The collection of the IP address is not legally required or contractually prescribed for the use of the website. If we do not collect your IP address we will not be able to analyze your user behavior on our website.
9. Rights of the data subjects
You have the following rights and entitlements with respect to the controller under the GDPR:
· The right to information (Article 15 GDPR)
· The right to rectification (Article 16 GDPR)
· The right to erasure (Article 17 GDPR)
· The right to restriction of the processing (Art. 18 GDPR)
· The right to data portability (Article 20 GDPR)
You can withdraw any consent to data processing that you may have granted at any time, in part or in whole, with effect for the future.
11.Right of the data subject to object pursuant to Article 21 GDPR
Pursuant to Article 21 GDPR, the data subject has the right to object at any time, with effect for the future, on grounds relating to said data subject’s particular situation, to the processing of the personal data relating to the data subject that occurs on the basis of Article 6 Para. 1 Letter f of the GDPR.
The controller will then no longer process the personal data of the data subject unless the controller can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject or the processing serves the purpose of the establishment, exercise or defense of legal claims.
The data subject may object to the processing of the data for the purposes of direct marketing at any time with effect for the future. In the event of an objection the controller must refrain from any further processing of the data for the purposes of direct marketing.
12.Right to lodge a complaint with a supervisory authority
The data subject has the right to lodge a complaint with a supervisory authority under Article 77 GDPR. Pursuant to that provision, and without prejudice to any other administrative or judicial remedy, any data subject may lodge a complaint with a supervisory authority, in particular in the Member State of the data subject’s habitual residence, place of work or place of the alleged infringement, if the data subject considers that the processing of the personal data relating to said data subject infringes the GDPR.
The following data protection supervisory authority is competent for EiKo:
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Königstraße 10a, 70173 Stuttgart, Germany, firstname.lastname@example.org,0711 / 61 55 41 – 0, online complaints form: https://www.baden-wuerttemberg.datenschutz.de/online-beschwerde/
Please feel free to contact us first, as many matters can be cleared up with a simple phone call.
Eiko Europe GmbH
13. CREDIT CARD PAYMETS
13.1. Description and Scope of Data Processing
We use GiroSolution GmbH as the payment service provider on our internet shop portal. By means of an interface to its “GiroCheckout” system, GiroSolution GmbH ensures for us the system-side connection of our shop portal to the following payment methods:
e) credit cards
g) direct debit
i) Immediately transfer
Depending on the payment method, the following data will be passed on to GiroSolution GmbH via GiroCheckout and then to the respective payment system and its service provider for the processing of payments:
a) Last and first name
c) E-mail address
d) Information regarding the age of majority at giropay ID - Age Verification (the date of birth will not be forwarded)
e) Confirmation of account details at giropay ID - Account Verification (IBAN and the BIC as well as the first and last name of the associated account holder)
Further information can be found in the General Terms and Conditions of GiroSolution GmbH (www.girosolution.de).
13.2. Legal Basis for Data Processing
The legal basis for data processing and for the transfer of data to the aforementioned third parties is Art. 6 Para. 1 lit. b of the GDPR. Another legal basis for data processing is Art. 6 Para. 1 lit. f of the GDPR.
13.3. Purpose of Data Processing
The transmission of the data and the processing of the data is necessary in order to be able to carry out the transaction payment made by you on our shop portal with the payment method chosen by you and thus to be able to conclude the transaction.
The connection of many different payment methods is complex and costly. Therefore, we use a service provider for the technical connection, on which our legitimate interest in the aforementioned data processing by GiroSolution GmbH pursuant to Art. 6 Para. 1 lit. f of the GDPR is based.
13.4. Duration of Storage
The data will be deleted as soon as it is no longer necessary for achieving the purpose of its collection. In regard to the aforementioned data, the purpose has been achieved if the contract has been settled and there are no claims for restitution, i.e. after expiry of the statutory warranty or granted warranty periods. The data will be deleted unless a statutory provision requires the retention of the data beyond this date.
13.5. Objection and Erasure
The collection of the data for the provision of the website and the storage of the data in log files is essential for the operation of the website. Therefore, there is no possibility for the user to object to the collection and storage of such data.