The protection of personal data and the responsible handling of information that you entrust to us are important and special concerns for us. Efficient-Consumer-Response ECR-Solutions Servicegesellschaft mbH (ECR) processes personal data only in accordance with the statutory regulations, in particular Regulation (EU) 2016/679 (General Data Protection Regulation, “DSGVO”) and the Federal Data Protection Act (BDSG).
In the following, you will find the legally required information according to Art. 13 DSGVO as well as explanations on your rights as a data subject of such data processing according to Art. 12 et seq. DSGVO in conjunction with §§ 32ff. BDSG. Furthermore, we inform you about the protection of your privacy on the terminal equipment you use within the terms of § 25 TTDSG.
This data protection policy informs you about the processing of personal data regarding
- the use of our website (https://ecr-solutions.de/) and the use of so-called “cookies” (see point 2)
- the use of our website as a registered user (see point 3)
- the use of data in hte context of direct advertising by our company (see point 4)
- the application for a job at ECR (see point 5)
- other business relationships, in particular with commercial customers, service providers and suppliers (see point 6)
- the use of Openstreetmap, integrated into our website on the page “Directions” (see point 7)
1. General
a) Responsible
Efficient-Consumer-Response ECR-Solutions Servicegesellschaft mbH (“ECR”, “we”, “us”, “our”) is responsible for the data processing described below. You can contact us at our postal address P.O. Box 1120, 26181 Edewecht, or by e-mail at info [at] ecr-solutions.de.
b) Data Protection Officer
The data protection officer for our company is:
Rechtsanwalt Dr. Bernd Schmidt
PLANIT // LEGAL Rechtsanwaltsgesellschaft mbH
Jungfernstieg 1
20095 Hamburg
E-Mail: mail@planit.legal
c) Your Data Subject Rights
As a user / data subject of our company’s data processing, you have a right to confirmation as to whether we are processing data related to your person and, if so, under the respective legal conditions, the right to information about this personal data (Art. 15 DSGVO), a right to correction of your incorrect data (Art. 16 DSGVO), a right to deletion (Art. 17 DSGVO) and a right to restriction (blocking) of your data (Art. 18 DSGVO).
In the event that your personal data is processed on the basis of Art. 6(1)(e) or (f) DSGVO, you may object to such processing on grounds relating to your particular situation, subject to the requirements of Art. 21(1) DSGVO.
You may object to the processing of your personal data for direct marketing purposes at any time and without giving reasons with effect for the future (Art. 21 (2) DSGVO).
If you have provided us with personal data, you may request the transfer of the data under the legal conditions (Art. 20 DSGVO).
If the processing is based on consent within the meaning of Art. 6 S. 1 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO, you may revoke your consent at any time for the future (Art. 7 para. 3 DSGVO).
You have the right to address the competent data protection supervisory authority (Art. 77 DSGVO).
If you have any questions or complaints regarding data protection at ECR, you can contact our external data protection officer at any time using the contact details provided above.
d) Storage Time and Deletion of Your Personal Data
We delete your personal data
- as soon as they are no longer required for the processing purposes explained below,
- in the event of an objection pursuant to Art. 21 (1) DSGVO, no compelling reasons worthy of protection on the part of our company stand in the way of deletion
- or if, in the case of revocation of consent, no other legal basis for the processing exists
If and as long as a deletion conflicts with legal retention obligations, we limit the processing of your data to this archiving purpose (so-called data blocking) and delete your data upon expiry of the retention period. Typical retention periods under German commercial and tax law are six years at the end of the year for business letters (including emails) and ten years at the end of the year for accounting-related transactions.
e) Categories of Recipients of Your Data
We may transfer your personal data for the purposes explained in sections 2 et seq. of this privacy policy to service providers that we commission with certain, purpose-specific data processing (e.g. hosting and email delivery services) on the basis of order processing contracts pursuant to Art. 28 DSGVO.
f) Data Transfer to Third Countries
We may transfer your personal data to recipients in countries outside the European Union and the European Economic Area, in particular the USA. If, as in the case of the USA, the level of data protection there does not correspond to the level of data protection within the EU, we agree with the recipient on the standard contractual clauses of the European Union and any additional measures required to ensure an adequate level of data protection.
g) Automated Decision Making
We do not process your personal data for automated decision-making that has legal effect on you or similarly significantly affects you.
2. Data Processing When Using our Website
a) Internet Connection Data
You can use our website at https://ecr-solutions.de/ without registering as a user. In this case, we process the internet connection data that your browser automatically transmits to our server. This data is your IP address and other usage data (e.g. date and time of the connection, name of the page visited, amount of data transferred and the requesting provider). We need this information to enable you to use our website, for example by adapting the website to the needs of your terminal device. The legal basis for this data processing is our legitimate interest in ensuring the security and usability of our website, in accordance to Art. 6 (1) lit. f DSGVO. We store the personal data in question for a period of six months.
b) Access and Storage on Your Terminal Device (“Cookies”)
We use so-called “cookies” on our website. Cookies are text files that are stored on your terminal device. User-related pseudonymous data can be stored in these files and such information can be read. Set cookies are deleted at the end of the session, i.e., when the browser is closed.
Currently, we only use technically necessary cookies to save the language setting as soon as a language other than German is selected. The legal basis for this data processing is our legitimate interest in providing our website, Art. 6 para. 1 lit. f DSGVO. If you are a registered user and the data processing serves the fulfilment of our obligations from the contract concluded with you, the legal basis is Art. 6 para. 1 lit. b DSGVO. The provision of personal data is not required by law or contract or necessary for the conclusion of a contract. Data subjects are not obliged to provide the personal data by changing the language setting.
3. Data Processing when Using our Website as a Registered User
If you register as a user on our website, we collect your master data for the purpose of documenting the conclusion of the contract for the use of the platform and for setting up and providing your personal user account. Furthermore, we collect, store and process your contact data in order to be able to contact you by post, e-mail, telephone and SMS in order to provide our contractual services.
In order to fulfil our contractual obligations, we may send you letters and e-mails and/or contact you by telephone for the duration of your contractual relationship.
The legal basis for this data processing is the contract you have concluded with us, Art. 6 (1) lit. b DSGVO. We process your personal data for this purpose for the duration of your contractual relationship.
We may disclose your personal data to technical service providers that we use on the basis of order processing agreements pursuant to Art. 28 DSGVO.
4. Data Processing for the Purpose of Direct Marketing
We may process your contact details for direct marketing purposes within the meaning of Art. 21 (2) DSGVO.
Your telephone number will only be used for advertising purposes if you have consented to this in accordance with Art. 6 Para. 1 lit. a, Art. 7 DSGVO. We process your e-mail address for advertising purposes if you have consented to this in accordance with Art. 6 Para. 1 lit. a, Art. 7 DSGVO or, if the requirements of § 7 Para. 3 UWG are fulfilled, in order to pursue our legitimate interest in direct e-mail marketing to existing customers, Art. 6 Para. 1 lit. f DSGVO. If we process your personal data for postal advertising purposes, this is done based on our legitimate interest in postal direct advertising, Art. 6 (1) lit. f DSGVO.
If you have consented to our processing your data for advertising purposes, you may revoke your consent at any time with effect for the future.
If you receive e-mail advertising from our company as an existing customer (Section 7 (3) UWG), you can object to this use at any time without incurring any costs other than the transmission costs according to the basic rates.
You are also free to object to our processing of your personal data for direct marketing purposes at any time and without giving reasons for the future (Art. 21 para. 2 DSGVO).
To send your revocation or your objection, please use our contact details mentioned above under point 1 a). In the case of e-mail advertising, you can alternatively use the unsubscribe link contained in our e-mail advertising.
5. Data Processing in the Event of Your Application for a Job at ECR
You have the option of finding out about vacancies at ECR on our website or elsewhere and submitting your application to us by e-mail and via the website’s contact form.
As part of the application process, the personal data you submit (including your name, contact details, qualifications, and other application documents) will be processed for the purpose of assessing and deciding whether to recruit an applicant. Without providing personal data, an application cannot be considered. Your application documents and the personal data contained therein will be passed on internally to the responsible and decision-making employees. The legal basis for this is § 26 para. 1 BDSG.
If you start an employment relationship with us, we will further process the data for the implementation of this contract (§ 26 para. 1 BDSG). If you do not start employment with us, your personal data will be deleted within six months of the end of the application process. If you give your consent, we will also store your data in order to inform you about new vacancies. The legal basis for this data processing is your consent (see Section 26 (2) BDSG).
6. Data Processing in the Context of Business Relationships
You have the option of finding out about vacancies at ECR on our website or elsewhere and submitting your application to us by e-mail and via the website’s contact form.
As part of the application process, the personal data you submit (including your name, contact details, qualifications, and other application documents) will be processed for the purpose of assessing and deciding whether to recruit an applicant. Without providing personal data, an application cannot be considered. Your application documents and the personal data contained therein will be passed on internally to the responsible and decision-making employees. The legal basis for this is § 26 para. 1 BDSG.
If you start an employment relationship with us, we will further process the data for the implementation of this contract (§ 26 para. 1 BDSG). If you do not start employment with us, your personal data will be deleted within six months of the end of the application process. If you give your consent, we will also store your data in order to inform you about new vacancies. The legal basis for this data processing is your consent (see Section 26 (2) BDSG).
7. Openstreetmap
On the Directions page there is a plugin that shows a map from Openstreetmap. This service is operated by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom, Company Registration Number: 05912761. Openstreetmap is a web service for displaying interactive (land) maps in order to visually present geographical information. By using this service, you will be shown our location and it will be easier for you to find us. For this purpose, a connection is established between your browser and the servers of openstreetmap.org – as if you were visiting the openstreetmap.org website and transmitting data to openstreetmap. Openstreetmap also uses service providers to whom data is also transmitted via the website call-up. Details about the data processing by Openstreetmap can be found at: https://wiki.osmfoundation.org/wiki/Privacy_Policy
The legal basis is our legitimate interest in making it easier for interested parties to contact us (Art. 6 para. 1 lit. f DSGVO). The provision of data for this service is not required by law or contract or necessary for the conclusion of a contract. The website visitors are also not obliged to provide the personal data. Failure to provide the data has no consequences for the website visitor.