The protection of personal data and the responsible handling of information that you entrust to us are important and particularly important to us. Efficient-Consumer-Response ECR-Solutions Servicegesellschaft mbH (ECR) only processes personal data in accordance with the statutory provisions, in particular Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and the Federal Data Protection Act (BDSG).

Below you will find the legally required information pursuant to Art. 13 GDPR as well as explanations of your rights as a data subject of such data processing pursuant to Articles 12 ff. GDPR in conjunction with Sections 32 ff. BDSG. We would also like to inform you here about the protection of your privacy on the terminal equipment you use within the meaning of Section 25 TTDSG.

This privacy policy informs you about the processing of personal data regarding

• the use of our website (https://ecr-solutions.de/) and the use of so-called "cookies" (under section 2)
• the use of our website as a registered user (under section 3)
• the possible use of data for direct marketing by our company (under section 4)
• applying for a job (under point 5)
• other business relationships, in particular with commercial customers, service providers and suppliers (under section 6)
• the use of Openstreetmap, integrated into our website on the “Directions” page (under section 7)

1. General

a) Responsible person

Efficient-Consumer-Response ECR-Solutions Servicegesellschaft mbH (“ECR”, “we”, “us”, “our”) is responsible for the data processing described below. You can contact us at our postal address PO Box 1120, 26181 Edewecht, or by email at info [at] ecr-solutions.de.

b) Data Protection Officer

Our company’s data protection officer is:
Attorney Dr. Bernd Schmidt
PLANIT // LEGAL Rechtsanwaltsgesellschaft mbH
Jungfernstieg 1
20095 Hamburg
E-Mail: mail@planit.legal

c) Your rights as a data subject

As a data subject of our company's data processing, you have the right to confirmation as to whether we process personal data relating to you and, if this is the case, under the respective legal requirements, the right to information about this personal data (Art. 15 GDPR), the right to rectification of your incorrect data (Art. 16 GDPR), the right to erasure (Art. 17 GDPR) and the right to restriction (blocking) of your data (Art. 18 GDPR).

If your personal data is processed on the basis of Art. 6 (1) (e) or (f) GDPR, you can object to this processing under the conditions of Art. 21 (1) GDPR for reasons arising from your particular situation.

You can object to the processing of your personal data for direct marketing purposes at any time and without giving reasons with effect for the future (Article 21 paragraph 2 GDPR).

If you have provided us with personal data, you can request the transfer of the data under the legal requirements (Art. 20 GDPR).

If the processing is based on consent within the meaning of Art. 6 S. 1 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR, you can revoke your consent at any time for the future (Art. 7 Para. 3 GDPR).

You have the right to contact the competent data protection supervisory authority (Article 77 GDPR).

If you have any questions or complaints regarding data protection at ECR, you can contact our external data protection officer at any time using the contact details provided above.

d) Storage period and deletion of your personal data

We delete your personal data,

• as soon as they are no longer necessary for the processing purposes explained below,
• in the event of an objection pursuant to Art. 21 Para. 1 GDPR, there are no compelling legitimate reasons on the part of our company that prevent the deletion
• or in the event of withdrawal of consent there is no other legal basis for the processing.

If and as long as legal retention obligations prevent deletion, we limit the processing of your data to this archiving purpose (so-called data blocking) and delete your data when the retention period expires. Typical retention periods under German commercial and tax law are six years at the end of the year for business letters (including emails) and ten years at the end of the year for accounting-related transactions.

e) Categories of recipients of your data

We may transfer your personal data for the purposes explained under sections 2 ff. of this data protection declaration to service providers whom we commission to carry out certain, purpose-specific data processing on the basis of order processing agreements in accordance with Art. 28 GDPR (e.g. hosting and e-mail sending services).

f) Data transfer to third countries

We may transfer your personal data to recipients in countries outside the European Union and the European Economic Area, in particular in the USA. If, as in the case of the USA, the level of data protection there does not correspond to the level of data protection within the EU, we will agree with the recipient on the standard contractual clauses of the European Union and, if necessary, additional measures required to ensure an appropriate level of data protection.

g) Automated decision-making

We do not process your personal data for automated decision-making that produces legal effects concerning you or similarly significantly affects you.

2. Data processing when using our website

a) Internet connection data

You can use our website at https://ecr-solutions.de/ without registering as a user. In this case, we process the internet connection data that your browser automatically transmits to our server. This data is your IP address and other usage data (e.g. date and time of access, name of the page accessed, amount of data transferred and the requesting provider). We need this information to enable you to use our website, for example by adapting the website to the needs of your device. The legal basis for this data processing is our legitimate interest in ensuring the security and usability of our website, Art. 6 Para. 1 lit. f GDPR. We store the personal data in question for a period of six months.

b) Access and storage on your device (“cookies”)

We use so-called "cookies" on our website. Cookies are text files that are stored on your device. User-related pseudonymous data can be stored in these files and such information can be read out. Cookies that have been set are deleted when the session ends, i.e. when the browser is closed.

We currently only use technically necessary cookies to save the language setting as soon as a language other than German is selected. The legal basis for this data processing is our legitimate interest in providing our website, Art. 6 Para. 1 lit. f GDPR. If you are a registered user and the data processing serves to fulfill our obligations from the contract concluded with you, the legal basis is Art. 6 Para. 1 lit. b GDPR. The provision of personal data is not required by law or contract or necessary for the conclusion of a contract. Data subjects are not obliged to provide the personal data by changing the language setting.

3. Data processing when using our website as a registered user

If you register as a user on our website, we collect your master data for the purpose of documenting the conclusion of the contract for the use of the platform and for setting up and providing your personal user account. We also collect, store and process your contact details in order to be able to contact you by post, email, telephone and SMS to provide our contractual services.

In order to fulfil our contractual obligations, we may send you letters and emails and/or contact you by telephone during the term of your contractual relationship.

The legal basis for this data processing is the contract you have concluded with us, Art. 6 Paragraph 1 Letter b GDPR. We process your personal data for this purpose for the duration of your contractual relationship.

We may disclose your personal data to technical service providers whom we use on the basis of order processing agreements in accordance with Art. 28 GDPR.

4. Data processing for direct marketing purposes

We may process your contact details for direct marketing purposes within the meaning of Art. 21 paragraph 2 GDPR.

Your telephone number will only be used for advertising purposes if you have consented to this in accordance with Art. 6 Para. 1 lit. a, Art. 7 GDPR. We will process your e-mail address for advertising purposes if you have consented to this in accordance with Art. 6 Para. 1 lit. a, Art. 7 GDPR or, if the requirements of Section 7 Para. 3 UWG are met, to pursue our legitimate interest in direct e-mail marketing to existing customers, Art. 6 Para. 1 lit. f GDPR. If we process your personal data for the purposes of postal advertising, this is done on the basis of our legitimate interest in direct postal advertising, Art. 6 Para. 1 lit. f GDPR.

If you have consented to our processing of your data for advertising purposes, you can revoke your consent at any time with effect for the future.

If you receive e-mail advertising from our company as an existing customer (Section 7 Paragraph 3 of the German Act Against Unfair Competition), you can object to this use at any time without incurring any costs other than the transmission costs according to the basic rates.

You are also free to object to our processing of your personal data for direct marketing purposes at any time and without giving reasons for the future (Article 21 paragraph 2 GDPR).

To send your revocation or objection, please use the contact details provided above under point 1 a). In the case of email advertising, you can alternatively use the unsubscribe link included in our email advertising.

5. Data processing in the event of your application to ECR

You have the opportunity to find out about vacancies at ECR on our website and to send us your application by email and via the contact form on the website.

As part of the application, the personal data you submit (including your name, contact details, qualifications and other application documents) will be processed for the purpose of reviewing and deciding on the hiring of an applicant. An application cannot be considered without providing personal data. Your application documents and the personal data they contain will be passed on internally to the responsible and decision-making employees. The legal basis is Section 26 Paragraph 1 of the Federal Data Protection Act.

If you start an employment relationship with us, we will continue to process the data for the implementation of this contract (Section 26 Paragraph 1 BDSG). If you do not start employment with us, your personal data will be deleted within six months after the application process has ended. If you give your consent, we will also store your data in order to inform you about new vacancies. The legal basis for this data processing is your consent (see Section 26 Paragraph 2 BDSG).

6. Data processing in the context of other business relationships

If you contact us as an interested party, supplier, service provider or other business partner (e.g. by email, the website contact form or other electronic channels), we will process your personal data (e.g. contact details or correspondence) to the extent that this is necessary to process your request (legitimate interest according to Art. 6 paragraph 1 lit. f GDPR) or to initiate or carry out the respective business transaction (Art. 6 paragraph 1 lit. b GDPR) and will store the data if necessary within the scope of statutory retention periods.

The same applies if you are an employee of a prospective customer, supplier, service provider or other business partner and we receive your personal data in this context; the legal basis in this case is our legitimate interest in initiating or conducting the business relationship with your employer (Art. 6 paragraph 1 letter f GDPR).

7. Google Maps

We use Google Maps to display maps and create route plans. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you use the Google Maps map, e.g. by clicking on our locations listed there, to the best of our knowledge information about your use (in particular the IP address of your computer) can be transferred to a Google LLC server in the USA and stored there. The processing of personal data using technically necessary cookies and your IP address is based on the legal basis of Art. 6 Paragraph 1 Clause 1 Letter f of GDPR in the interest of making our website as optimal as possible for you. We have no influence on the further processing of data by Google LLC. Please also read the Google Maps terms of use if you wish to use the service. The terms of use for Google Maps can be found at: https://www.google.com/intl/de_de/help/terms_maps/ .

Detailed information on Google's privacy policy can also be found at: https://policies.google.com/privacy . If you do not agree to data processing by Google LLC, please refrain from using the map or deactivate the Java Script function in your browser to receive a limited view.