Data protection

Outline/Directory

A. Name and contact details of the controller

B. Contact details of the data protection officer

C. Scope of the processing of personal data, purpose of the processing

1. Calling up our website and creating log files

2. Contact (contact forms, e-mail)

3. Website visitor statistics Matomo in case of consent

4. Applications

5. Newsletter "Jobalarm"

6. Postal advertising (letter post)

7. Download information (pdf)

8. Trader login

9. Links

10. Youtube videos

11. Language selection, web fonts

12. Consent Box

D. Rights of the data subjects

A. Name and contact details of the controller

The person responsible for data processing within the meaning of the General Data Protection Regulation and other provisions of data protection law is:

ERO GmbH
represented by the Managing Directors Michael Erbach, Karl-Heinz Erbach
Am ERO-Werk 1
55469 Simmern
Phone: +49 6761 - 9440-0
Fax: +49 6761 - 9440-1099
E-mail: mail@ero.eu

B. Contact details of the data protection officer

ERO GmbH
Data Protection Officer

Am ERO-Werk 1

55469 Simmern
Phone: +49 6761 - 9440-0
Fax: +49 6761 - 9440-1099
E-mail: datenschutz@ero.eu

C. Scope of the processing of personal data, purpose of the processing

1. Calling up our website and creating log files

a) Description of data processing,
storageWhenever our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

- Information about the browser type and version used
- the user's operating system
- the user's IP address
- date and time of access
- websites from which the user's system accesses our website (referrer URL)
- the subpages of our homepage accessed by the user
- name of the file accessed
- notification of whether the access was successful

This data is deleted from the system's log files after 7 days, unless its further processing is exceptionally necessary to protect our legitimate interests (e.g. to block IP addresses, file criminal charges). If such an exceptional case exists, the data will be deleted as soon as it is no longer required for this purpose. This data is not stored and/or merged with other personal data of the user.

b) Purpose & legal basis of data processing

The data mentioned under a) are collected in order
to enable delivery of the website to the user's computer. The legal basis for this is Art. 6 para. 1 lit. f DSGVO. The temporary collection of the IP address to display the pages called up by the user is technically necessary for this and represents a legitimate interest on our part within the meaning of Art.6 para.1 sentence 1 f DSGVO, which is not opposed by any overriding interests of the user.
- To ensure the security of our web server and the trouble-free operation of our website, e.g. monitoring to prevent or detect hacker attacks;

The aforementioned purposes represent a legitimate interest on our part within the meaning of Art.6 para.1 sentence 1 f DSGVO, which is not opposed by any overriding interests of the user.

c) Passing on/recipient of the dataThe
data collected is stored with our web hosting provider. This provider works on our behalf and provides us with storage space for our website. In addition, our web hosting provider provides other related services, e.g. stores the associated data processing operations, and ensures that the website is accessible on the Internet. The service provider is located in the European Union or in a country of the European Economic Area. The data collected in accordance with a) will not be transmitted to third parties unless this is necessary in the event of attacks on our IT, see b) above, for example in the context of filing a criminal complaint with the law enforcement authorities.

d) Possibility of objection
The collection of the IP address is necessary for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object. With regard to the other personal data processed in accordance with 1 a), you have the right to object to the processing at any time for reasons arising from your particular situation, cf. the further information under section D.

 

2. Contact (contact forms, e-mail)

a) Description of data processing, purpose, storage

It is possible to contact us via the e-mail addresses given by us in the imprint and on the sub-pages. We then record the personal data transmitted with the e-mail. The data is used and stored for the purpose of answering the enquiry, e.g. if you contact us about a used machine that we present on our website or you apply as a supplier. We use our own e-mail server for this purpose.

If you contact us via one of our contact forms, your message will be stored on our mail server. This forwards your message internally to a specific e-mail address assigned to the respective contact form together with the contact person of our company. After reviewing your message, it will be processed directly or forwarded to the relevant department / person within our company for a response and stored on our local IT system.

The security questions (captcha) that may be built into the end of our contact forms are intended to prevent our contact form and the accessibility of the website from being jeopardised by spam / bots etc. The captcha does not send any data to third parties, but runs exclusively on our web server. The captcha does not send any data to third parties, but runs exclusively on our web server.

If your communication is a business letter within the meaning of the German Commercial Code (HGB), we are obliged to store it for 6 years (from the end of the calendar year in which the business letter was received) in accordance with § 257 HGB.

If your communication is part of or initiates contractual negotiations, we process your data for this purpose, e.g. if you contact us about a used machine or request a factory tour; in this case, we may also be obliged to store the correspondence for 6 years (from the end of the calendar year in which the business letter was received) in accordance with § 257 HGB. When requesting a factory tour, we require the information on the participant group size or type for the organisation of the factory tour (selection of a suitable guide, topics, person limitation, date selection, admission of the group at the factory entrance, assignment of the group to the name of the enquirer, identification of the enquirer for contractual and insurance reasons).

Otherwise, the data transmitted by e-mail / contact form will be deleted as soon as they are no longer required to achieve the purpose for which they were collected, unless,

-we need them for the assertion, exercise and defence of legal claims, or

-we have another legitimate interest in processing them and your interests worthy of protection do not outweigh this;

-insofar as they are part of our backup: we are not able to delete the data from backups and are also not required to do so due to the security of processing, integrity and confidentiality of the data to be ensured in accordance with Article 32 of the GDPR; the backup data carriers are regularly transferred and the data deleted as a result.

b) Legal basis for data processing
The legal basis for this is Art. 6 para. 1 lit. f DSGVO (contact requests of a general nature). Our legitimate interest is to view and respond to contact enquiries. If the contact is aimed at the conclusion of a contract, e.g. purchase of a used machine, factory tour, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. This also applies if the communication relates to an already concluded contract.

c) Recipient

Contact forms: For technical reasons, our web host has access to the messages sent via the contact form and is therefore an external recipient. This service provider works on our behalf and provides us with storage space for our website and stores the associated data processing operations. This service provider has been carefully selected and commissioned by us, is bound by our instructions and is regularly monitored. The service provider is based in the European Union or in a country of the European Economic Area.

In addition, the employees of our company responsible for processing the transmitted content are internal recipients of the message. If the message also concerns a third party, e.g. another company which must be involved in order to clarify a transmitted complaint or similar, your message may be forwarded to this company.

d) Possibility to objectIf
the enquiry does not relate to a contract that has already been concluded or is being negotiated, the user may object to the use of his/her personal data at any time. In such a case, the communication cannot be answered. Section D applies in addition.

 

3. Use of the tracking tool "Matomo" in the case of granted consent

a) Description and scope of data processing, storage, deletion

The Matomo tool is deactivated when you visit our website. If you consent to its use, we record your anonymised surfing behaviour when you visit our website and then evaluate it statistically. We use the tool "Matomo" for this purpose. This is an open source software that we have stored on the web server we have rented. The software is set in such a way that we process your IP address in a shortened form.

We have adapted the Matomo tool so that it does not use "cookies" to analyse surfing behaviour. Cookies are text files that can be stored in the internet browser when you call up a website. Cookies contain a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again or after a page change (calling up different sub-pages).

Matomo uses so-called fingerprinting in addition to JavaScript. This means that the tool can collect further information such as the browser used, browser version, operating system, screen resolution, language setting or similar in order to recognise you as a visitor.

The information collected by Matomo is stored on the web server rented by us, via which the website can be accessed. We can view the data collected online and have statistical analyses sent to us (reports on website activities). The data is deleted after 18 months. The reports created are stored by us for 36 months and then deleted.

 

b) Purpose of data processing, disclosure
The processing of personal data of website visitors enables us to analyse the surfing behaviour of our website visitors. This enables us to determine which information/which sub-pages of our website are of particular interest to website visitors and which website content is of little interest. In addition, we can see how quickly and how often newly created website content is read. The evaluation enables us to align the website content with the presumed special user interest determined in this way and to optimise it in this respect. (hereinafter also referred to as "legitimate interest of our company in data processing"). The data will not be passed on to third parties.

 

c) Legal basis for the data processing

According to Article 5(3) of EU Directive 2002/58/EC, the storage of information or access to information already stored in the user's terminal equipment is only permitted if consent is given. If consent is given, we collect and analyse the information collected. If this data is personal, its processing is also permitted on the basis of the consent given, cf. Art. 6(1)(a) DSGVO.

 

d) How to revoke the consent, other activities:

4. Applications

a) Description of the data processing, storage, purpose

You can apply to us online, by mail and by e-mail.

When you call up our homepage subpage "Careers", we process the data collected by the call-up, see the information under B 1 of this data protection declaration. In addition, we will process the data that you send us with your application in order to check your suitability for the job to be filled and to carry out the application process. In the course of the application process, further personal data may be collected from you personally, from generally accessible sources or from former employers and trainers for information purposes.

You can access current job advertisements on our careers site and apply directly online. While filling out the form, you can check if the information is correct, make changes if necessary, and submit various attachments. We always need some information to check whether you are suitable for the advertised position or to contact you. These are marked as mandatory fields.

The entry of data is legally non-binding. They will only be stored temporarily to prevent data loss. Only by clicking the button "send", will you transmit the application to us. We will immediately confirm the receipt electronically. We also record and store the date and time of the application receipt. Your application will be stored in our applicant management tool.

Applications received by mail are scanned and, like applications received by e-mail, are also recorded in our applicant management tool with the data provided.

If you submit an unsolicited application that does not relate to a specific position, we may use your application documents in the context of staffing decisions for all positions under consideration, and record your data in our applicant management tool. The applicant management tool we use has a role / authorization concept. This limits the access rights of individual ERO employees to the applicant data. We also check in advance which employees require access to an applicant's data. These are only those whose involvement is necessary to carry out the application process, e.g. the applicant's future supervisor, specialist decision-maker, HR manager. These persons receive a notification that your application has been received and can view it electronically. We use our applicant management tool for internal communication and can organize the entire application process, e.g. invite you to an interview, request further documents, etc. We use the contact data you provide for this purpose.

We will regularly delete and destroy your applicant data after a period of 12 months from receipt of your application, but not before all application processes, for which your application documents have been used up to that point, have been completed and a period of 12 months has elapsed since then. Furthermore, no deletion will take place if you have given us consent for further storage and this has not yet been revoked.

In the event of a rejection, we will delete the data you have submitted within 12 months of sending the rejection and destroy any paper application documents, unless you have given us permission to store it for a longer period.

If you are awarded the position during the application process, the data from the applicant management system will be transferred to our HR management system.

If you give us your consent to further process your applicant data in order to use your data for the examination of other positions to be filled in the future, we will store the data in accordance with the consent given until you revoke it. To declare  your revocation, simply send a meaningful e-mail to personal@ero.eu.

A justified revocation has no influence on data processing operations that have already taken place. We will delete and destroy your applicant data in the regular manner upon declaration of revocation, or after a period of 12 months from receipt of your application, but not before all application procedures for which your application documents have been used to that point, have been completed and a period of 12 months has elapsed since then.

b) Legal basis for the data processing

The legal basis for the processing of your personal data in the application procedure is Article 6 para. 1 sentence 2 letter B GDPR, § 26 para. 1 BDSG. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible. Should the data be required for legal prosecution after the conclusion of the application process, if applicable, data processing may be carried out on the basis of the requirements of Art. 6 GDPR, in particular to safeguard legitimate interests pursuant to Art. 6 para. 1 letter f) GDPR. Our interest then consists in the assertion or defense of claims.

If you give us consent to process your applicant data to fill other positions, the legal basis for data processing is Art. 6 para. 1 p. 2a, b, f GDPR, section 26 para. 1 and para. 2 BDSG

c) Disclosure, recipients

If you use our career site to submit your application, the data you enter there will be temporarily stored on our behalf by the operator of the applicant management tool or its web hosting service provider. Your data is stored in the applicant management tool and processed by us. The storage space required for this is provided to us by the operator of the applicant management tool or its web hosting service provider. This provider stores the associated data processing operations on our behalf.

After receipt of your application, your applicant data will be viewed and further processed in our company as mentioned under a) (internal recipients are the respective ERO employees responsible for this).

In the event of your consent to the processing of your applicant data for filling other positions, the data will be duplicated for further storage in the applicant management tool. In this respect, what has been said under a) - c) applies accordingly. This will only be made accessible to the respective specialist managers.

There will be no data processing in a third country.

d) Possibility of objection, revocation

You may object at any time to the storage of data required for legal prosecution, processed on the basis of Art. 6 Para. 1 letter f GDPR, cf. section D.

You may revoke your consent to the further processing of your applicant data at any time, cf. section 4 a).

 

5. Newsletter "Jobalarm"

a) Description of the data processing, storage

You can subscribe to our free "Jobalarm" newsletter via our careers page. This will inform you when a new job ad is posted that matches your search criteria. Search criteria are, for example, "location / career level or  company division". In order to receive the newsletter, we need your consent.

To obtain this consent, we use the so-called double opt-in procedure.

When you provide us with the desired search criteria and your e-mail address, we record and store the following in each case

·         Your IP address

·         Date and time of registration

·         The search criteria you specified;

Your preliminary registration will be transmitted to us and stored in our applicant management tool. We will then send you an e-mail requesting confirmation that the request to receive the Jobalarm newsletter originates from you as the owner of the specified e-mail account. If you do not confirm your subscription within 24 hours, your data will be blocked and deleted within four days. Your request will be transmitted to us with the data you have provided and stored in our applicant management tool.

The entry of your e-mail address on our careers page is a mandatory field. In addition, we record and store in each case:

·         Date as well as time of sending the confirmation email.

·         Storage of the texts used for registration and confirmation as the content of the declarations of consent.

After receiving your confirmation, we will store your e-mail address for the purpose of sending you the requested information.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. If you unsubscribe from the newsletter, the collected data will be restricted for further processing and will only be used to prove the legitimate sending and to defend against possible legal claims. After the expiration of the statute of limitations, the data will be deleted, unless the content constitutes a business letter according to § 257 HGB.

b) Purpose & legal basis of the data processing

Your e-mail address and any other data you may have provided will be stored in order to send you the newsletter. The legal basis for this is Art. 6 para. 1 letter a GDPR (consent).

The storage of your IP address as well as the time of the request/sending of the confirmation email has the purpose of proving your request and, if necessary, to be able to clarify a possible misuse of your personal data. The legal basis for the processing of this data is Art. 6 para. 1 letters a and f) and Art. 7 para. 1 GDPR.

We also record when the newsletter information was sent to you. This is done on the legal basis of Art. 6 para. 1 letter f) GDPR. Our legitimate interest is to record this for our legal defense, e.g. to check the accusation of unauthorized sending after revocation, as well as for marketing reasons. We do not believe that there are any overriding interests on your part to the contrary.

c) Passing on/recipients of the data

We use our cloud-based applicant management system to send the newsletter. The search criteria you specify on our careers page and your e-mail address are hereby made accessible to the operator of the applicant management tool commissioned by us. He works on our behalf, is located in the European Union, provides us with storage space for the career site and the applicant management tool, and storage for the data processing operations associated with this.

d) Possibility of objection and elimination

You can revoke your consent to receive the newsletter at any time.

You can object at any time to the processing of data that we base on Article 6 para. 1 sentence 1 letter f GDPR, see here under b), cf. section D and Art. 21 GDPR.

6. Postal advertising (letter post)

a) Description of data processing, storage, purpose, disclosure, recipientIf you
provide us with your name and postal address, we will store these for the possible future sending of postal advertising (letter post) about our products & services, our company and for sending Christmas mail. The data may be made available to an external service provider during franking and dispatch, which may be carried out by an external service provider. This service provider acts according to our instructions and on our behalf. This service provider is based in the European Union.  No other data will be passed on to third parties. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected or you have objected to the processing.

b) Legal basis for data processing, possibility of objection

The legal basis for the data processing mentioned under a) is Art. 6 para. 1 lit. f DSGVO. Sending product information by letter post is a legitimate interest of our company. You can object to this use of your personal data at any time. In such a case, we will discontinue the sending of letter post advertising. Section D applies in addition.

 

7. Download information (pdf)

You can download information documents, our brochures etc. via our website, view them afterwards and / or save them on your end device. In doing so, we only temporarily record the data mentioned under C 1 (log files). The information mentioned under C 1 also applies in other respects.

 

8. Dealer area

a) Description of data processing, storage, purpose

Only after logging into the dealer area is it possible for the account holder to use certain functionalities, e.g. to submit electronic warranty or guarantee claims, to search for spare parts for machines and assemblies, to call up availabilities and prices for all articles offered and to submit enquiries about spare parts:

aa)

The login is enabled via the previously communicated login data. All data processed via this is stored in an encrypted, non-viewable and non-changeable database of the web server. The data is exclusively maintained in the local ERP system of ERO GmbH and automatically uploaded from here to the database of the web server.

The account holder can apply for guarantee or warranty services in the dealer area for goods and services named by him which he has purchased from us and upload documents and images for this purpose as proof and to explain the process. The applications stored on the web server via the dealer area are then transmitted to our local ERP system and processed further. The status of the processing of the transaction is displayed in the dealer area. Requests for spare parts are answered electronically or by the desired communication channel and the electronic or written communication is stored on our local IT system.

The storage period of the data collected in each case depends on the extent to which the user has used the functionalities offered in the trader area and whether the account holder is an active customer of our company. If our business relationship with the account holder ends, the merchant login will be blocked and the data stored on the web server for this purpose will be deleted within 12 months. Deletion of the dealer access / dealer account or part of the data contained therein does not result in the deletion of data relating to legally relevant or tax-relevant processes, e.g. communication between you and us regarding warranty claims made, services requested or similar. These will continue to be stored in our local ERP system and retained in accordance with the following regulations.

If your communication is a business letter within the meaning of the German Commercial Code (HGB), we are obliged to store it for 6 years (from the end of the calendar year in which the business letter was received) in accordance with § 257 HGB.

If your communication is part of or initiates the performance of a contract or contract negotiations, we will process your data for this purpose, e.g. if you contact us about a warranty claim or a replacement part; then we may also be obliged to keep correspondence for 6 years ( from the end of the calendar year in which the business letter was received) in accordance with § 257 of the German Commercial Code.

Furthermore, the data transmitted via the trader login will be deleted as soon as they are no longer required to achieve the purpose for which they were collected, unless,

- we are legally obliged to store / retain them (e.g. § 147 AO, § 257 HGB),

- we need them for the assertion, exercise and defence of legal claims, or

- we have another legitimate interest in processing them and your interests worthy of protection do not outweigh this;

- insofar as they are part of our backup: we are not able to delete the data from backups and are also not required to do so due to the security of processing, integrity and confidentiality of the data to be ensured in accordance with Article 32 of the GDPR; the backup data carriers are regularly transferred and the data deleted as a result.

 

bb)

When logging into the merchant area, we use a security token that assigns a hash value to the user when logging in. This expires as soon as the user logs out. The hash value linked to the user serves to authenticate the user when calling up further functionalities within the merchant area and ensures the provision of the functionalities in accordance with the authorisations granted to the company and the respective user. In order to provide the action requested by the respective user, e.g. downloading article data / submitting a warranty claim or similar, the system installed on the web server used by us for operating the dealer area records who has used or initiated which action / function and when. This information is also stored in order to ensure the security of the dealer area and to be able to prove the respective initiated interactions.

 

b) Purpose & legal basis of data processing

The legal basis for the processing of data pursuant to section a) is Art. 6 para. 1 lit. f ) , lit c) and lit. b) DSGVO:

- Art. 6 para. 1 lit. b) DSGVO: Use of the dealer area incl. authentication of the trader, processing of warranty and guarantee claims, processing of spare parts requests, order requests.

- Art. 6 para. 1 lit. c) DSGVO: Retention obligations according to § 147 AO, § 257 HGB

- Art. 6 para. 1 lit. f ) DSGVO: Processing of the user's actions incl. time, hash value to clarify a possible misuse of the data, to prove the actions / communication carried out via the trader area. There are no overriding interests of the data subject worthy of protection.

c) Disclosure / Recipient of the data

We use the web server and our own IT system (ERP) for the use of the trader area as well as the further processing steps. No data stored on the merchant account is passed on to third parties unless this is necessary to process the enquiry.

d) Possibility of objection

With regard to the personal data processed pursuant to Art.6 para.1 sentence 1 f DSGVO, you as the data subject have the right to object to the processing at any time for reasons arising from your particular situation, cf. the further information under section D.

Unless the use of the Merchant Area is the subject of an agreement between the Account Holder (Merchant) and us, the Account Holder may at any time opt out of further use of the Merchant Area.

 

9. Links

a) Description of the data processing, storage period, deletion

We have included external links to other websites, to social media platforms and, where applicable, internal links to subpages of our website on the homepage and subpages of our homepage. If you as a user use the external links, you will leave our website. The linked page will open in a separate browser window.

You can recognise the external links by the fact that they are underlined in a highlighted colour, e.g. links to our job offers, or are linked to a graphic / symbol, a photo or a video still, e.g. graphic "Instagram", Facebook and LinkedIn.

The forwarding by means of the external link only takes place if you actively click on it. In this case, our web server transmits your IP address and, as a rule, the name of our website as the transmitting page to the operator of the third-party site. This makes your IP address visible to the operator of the third party site. They will use your IP address to display the content of the page there. We record which URLs the user has requested.

We have no concrete knowledge of this and no influence on whether and to what extent the third-party provider will still use your IP address for other purposes. Please refer to the data protection information of the respective website operator for more information. It is technically possible to use various methods (e.g. cookies, beacons, fingerprinting, reading out advertising or device IDs) to collect further data on website visitors and to share this data with third parties if necessary. It is possible that you can be identified by the third-party provider on the basis of additional information available there, e.g. on the basis of a user account created with the third-party provider, an e-mail address stored with the third-party provider, on the basis of additional information from cookies used by the third-party provider.

 

b) Purpose & legal basis of data processing

The transmission of your IP address to the third-party provider is technically necessary in order to carry out the forwarding to the linked external website (purpose of data processing). The integration of such links expands our range of information or serves advertising purposes. This is a legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO, which is not opposed by any overriding interests of the user. The legal basis for the data processing mentioned under a) is Art. 6 para. 1 lit. f DSGVO.

The user is free to decide for himself whether to use the displayed links. This is not necessary for the conclusion of a contract.

c) Disclosure, recipient

Your IP address, shortened in accordance with C 1, and the requested third-party URL, if any, are stored as part of the log files with our web hosting provider. This provider works on our behalf and provides us with storage space for our website. In addition, our web hosting provider provides other related services, see section C 1 c) of this information. The service provider is based in the European Union or in a country of the European Economic Area. The data collected in accordance with a) will not be transmitted to other third parties unless this is necessary in the event of attacks on our IT, see above under section C 1 b), for example in the context of filing a criminal complaint with the law enforcement authorities.

d) Possibility of objection
The transmission of the user's IP address is mandatory for forwarding to the desired linked third-party site. Consequently, there is no possibility for the user to object. If data processing is not desired, the link must not be activated. Furthermore, the user can object to the collection of the requested data, cf. section D.

 

10. Youtube videos

a) Description of the data processing, storage period, deletion

Videos stored on the YouTube portal are accessible on our website, usually within our YouTube channel. We have integrated the videos in such a way that YouTube cookies are not automatically sent to the browser of the website visitor or existing cookies can be read by YouTube. Initially, only a preview image of the videos can be seen. When the website visitor clicks on the video, he or she is automatically redirected to our YouTube channel. Through this, your personal data is collected and processed by the video platform operators. This 2nd click constitutes consent to the establishment of the connection to the YouTube platform, the transmission of your IP address and data processing by YouTube.

Further information on the data processing operations of the video platform operators can be found here:

YouTube : Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland

https://policies.google.com/privacy?hl=en&%5Dgl=de

https://www.youtube.com/howyoutubeworks/user-settings/privacy/

It is possible that this will result in data being transferred to servers of the Google Group in the USA.

There may also be a link to your Youtube usage account, provided you are logged in there. If you do not wish this, you must log out before use.

The Google Analytics tracking tool can be accessed via the iFrame in which the video is called up. This is an own tracking of the respective platform operator, to which we as website operator have no access. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some Internet browsers. You can also prevent the collection of data generated by Google Analytics and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=en

We only collect the information on the use of the website mentioned in section C 1, cf. there the further information on data processing, storage, purpose, legal basis.

 

b) Storage

We do not gain access to the personal data that Youtube collects. We only store the data mentioned under C 1 a), last paragraph.

 

c) Purpose, legal basis

We would like to send you videos of our products and other service information. The legal basis for the processing of your data by us is your consent, Art. 6 para. 1 lit. a DSGVO.

 

d) Recipient, disclosure

The data mentioned under C 1 a) last paragraph is stored with our web hosting provider. This provider works on our behalf and provides us with storage space for our website. In addition, our web hosting provider provides further services in connection with this, e.g. it stores the associated data processing operations and ensures that the website is accessible on the Internet. This service provider has been carefully selected and commissioned by us, is bound by our instructions and is regularly monitored. The service provider is based in the European Union or in a country of the European Economic Area. The collected data will not be transmitted to third parties unless this is necessary in the event of attacks on our IT, see above under C 1 b), for example in the context of filing a criminal complaint with the law enforcement authorities.

Your IP address is transmitted to the portal for the purpose of establishing a connection to Youtube.

 

e) Revocation, objection and removal options

With regard to the data mentioned under C 1 a), which is processed in accordance with Art.6 para.1 sentence 1 f DSGVO, you have the right to object to the processing at any time for reasons arising from your particular situation, cf. the further information under point D.

The consent given can be revoked vis-à-vis Youtube,

https://policies.google.com/privacy?hl=en&%5Dgl=de

https://www.youtube.com/howyoutubeworks/user-settings/privacy/

 

11. language selection, web fonts

a) Language selection

After accessing our website, it is possible to manually select a different language version. By default, our website is displayed in German. The language setting is changed via URL links (links to a subpage of our website), which then make the homepage accessible to the website visitor in the desired language version. Cookies or similar tools are not used for this purpose.

 

b) Web fonts

We use server-side web fonts, i.e. no information is transmitted to the font provider when the fonts on our website are called up.

 

12. Consent Box

We use a consent box to obtain your consent to certain processes.

The legal background to this is Article 5(3) of EU Directive 2002/58/EC. According to this, the storage of information or access to information that is already stored in the user's terminal equipment is only permitted if consent is given. You can give us this consent for the processes mentioned in the consent box. Further information can be found in the relevant section of this privacy policy.

If personal data is also processed as a result of the procedure, we also request your consent for this, which can be revoked at any time.

Every decision made in this regard (refusal / granting of consent for the use of a certain tool together with data processing) is stored by us in a cookie in your browser. This cookie records which selection decision you have made. Our system reads this cookie during your visit to the website and uses the tools to which you have consented. The cookie is called "ero-gdpr-consent", has a lifetime of 30 days and does not pass on any data to third parties. This is a first-party cookie.

 

D. Rights of the data subject

As a data subject, you have the following rights in relation to personal data relating to you:

● a right to free information pursuant to Article 15 of the GDPR

● a right of rectification or erasure pursuant to Article 15 or Article 16 of the GDPR, as the case may be

● a right to restriction of processing pursuant to Article 18 of the GDPR

● a right to object to processing pursuant to Article 21 of the GDPR

● a right to data portability pursuant to Article 20 of the GDPR

● a right to revoke consent granted under data protection law in accordance with Article 7(3) DSGVO

● a right not to be subject to automated decisions pursuant to Article 22 of the GDPR

You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

If you have any questions regarding the processing of your data or the exercise of your rights, you can contact us as the data controller or our data protection officer, see the contact information under A. of this text.