Privacy Policy
1. Privacy Overview
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For more detailed information on data protection, please refer to our privacy policy listed below.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the "Notice on the Responsible Party"section of this privacy policy.
How do we collect your data?
Your data is collected in part by you providing it to us. This could be data you enter into a contact form, for example.
Other data is collected automatically or with your consent when you visit the website through our IT systems. These are primarily technical data (e.g., internet browser, operating system, or time of page view). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure the website is displayed correctly. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to obtain information free of charge about the origin, recipients, and purpose of your stored personal data at any time. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you can withdraw this consent at any time for the future. Additionally, you have the right to request the restriction of processing your personal data under certain circumstances. Furthermore, you have the right to file a complaint with the relevant supervisory authority.
For more information on privacy-related questions, you can contact us at any time.
2. Hosting
We host the content of our website with the following provider:
Webflow
The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103,USA (hereinafter referred to as Webflow). When you visit our website, Webflow collects various log files, including your IP addresses.
Webflow is a tool for building and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for the display of the page, for providing specific website functions, and for ensuring security (necessary cookies).
For details, please refer to Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy.
Theuse of Webflow is based on Art. 6, para. 1, lit. f GDPR. We have a legitimateinterest in ensuring the reliable display of our website. If consent has beenrequested, the processing is solely based on Art. 6, para. 1, lit. a GDPR and §25 para. 1 TTDSG, if the consent covers the storage of cookies or access toinformation on the user's device (e.g., device fingerprinting) as defined bythe TTDSG. Consent can be withdrawn at any time.
Datatransfer to the USA is based on the standard contractual clauses of the EUCommission. Further details can be found here: https://webflow.com/legal/eu-privacy-policy.
The company is certified under the "EU-US Data Privacy Framework" (DPF).The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards when processing data in theUSA. Any company certified under the DPF commits to adhering to these data protection standards. More information is available from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000TT9jAAG&status=Active.
Data Processing Agreement
We have signed a Data Processing Agreement (DPA) for the use of the above-mentioned service. This legally required contract ensures that the provider processes our website visitors' personal data only according to our instructions and in compliance with the GDPR.
3. General information and Mandatory Information
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.
When you use this website, various personal data is collected. Personal data is information that can be used to identify you personally. This privacy policy explains which data we collect and how we use it. It also explains how and for what purpose this happens.
We point out that data transmission over the internet (e.g., when communicating by email) may have security vulnerabilities. Complete protection of data from third-party access is not possible.
Note on the Responsible Party
The responsible party for data processing on this website is:
Magnus Deiss
ENDEKO GmbH
70190 Stuttgart
Schubartstraße 8
Phone: +49 (0) 0711 24878396
E-mail: contact@endeko.com
The responsible party is the natural or legal person who alone or jointly withothers decides on the purposes and means of processing personal data (e.g.,names, email addresses, etc.).
Retention Period
Unless otherwise specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you submit a legitimate deletion request or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial retention periods); in this case, the data will be deleted after these reasons no longer apply.
General Information on the Legal Bases of DataProcessing on This Website
If you have consented to data processing, we process your personal data based onArt. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, if special categories of data are processed according to Art. 9 para. 1 GDPR. If you have expressly consented to the transfer of personal data to third countries, the data processing will also be based on Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), the data processing will also be based on § 25 para. 1 TTDSG.Consent can be withdrawn at any time. If your data is necessary for the fulfillment of a contract or the performance of pre-contractual measures, we process your data based on Art. 6 para. 1 lit. b GDPR. Additionally, we process your data if it is necessary for the fulfillment of a legal obligation based onArt. 6 para. 1 lit. c GDPR. Data processing may also occur based on ourlegitimate interest under Art. 6 para. 1 lit. f GDPR. The applicable legalbases for each case are explained in the following sections of this privacy policy.
Recipients of Personal Data
As part of our business activities, we work with various external entities. In some cases, it is necessary to transfer personal data to these external entities. We only share personal data with external parties if this is necessary for the fulfillment of a contract, if we are legally obliged to do so(e.g., transfer of data to tax authorities), if we have a legitimate interest in the transfer (Art. 6 para. 1 lit. f GDPR), or if another legal basis permits the transfer. When using processors, we only transfer personal data based on a valid data processing agreement. In the case of joint processing, a joint processing agreement is signed.
Revocation of your consent to the processing of data
A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.
Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)
In the event that data are processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to at any time object to the processing of your personal data based on grounds arising from your unique situation. This also applies to any profiling based on these provisions. To determine the legal basis on which any processing of data is based, please consult this data protection declaration. If you log an objection, we will no longer process your affected personal data, unless we are in a position to present compelling protection-worthy grounds for the processing of your data that outweigh your interests, rights and freedoms or if the purpose of the processing is the claiming, exercising or defence of legal entitlements (objection pursuant to Art. 21(1) GDPR).
If your personal data is being processed in order to engage in direct advertising, you have the right to object to the processing of your affected personal data for the purposes of such advertising at any time. This also applies to profiling to the extent that it is affiliated with such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes (objection pursuant to Art. 21(2) GDPR).
Right to log a complaint with the competent supervisory agency
In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.
Information about, rectification and eradication of data
Within the scope of the applicable statutory provisions, you have the right to demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data at any time. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.
Right to demand processing restrictions
You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:
- In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
- If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data instead of demanding the eradication of this data.
- If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
- If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.
SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.
If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
4. Data Collection on This Website
Cookies
Our website uses so-called "cookies." Cookies are small data packets and do not harm your device. They are either temporarily stored for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them or they are automatically deleted by your web browser.
Cookies may come from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies allow the integration of certain services from external companies within websites (e.g., cookies for processing payment services).
Cookies serve various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or displaying videos). Other cookies may be used to analyze user behavior or for advertising purposes.
Cookies that are necessary for the execution of electronic communication processes, the provision of certain functions you desire (e.g., for the shopping cart function), or for optimizing the website (e.g., cookies for measuring web traffic), are stored based on Art. 6 para. 1 lit. f DSGVO, unless otherwise stated. The website operator has a legitimate interest in storing necessary cookies for the error-free and optimized provision of its services.If consent is requested for storing cookies and similar recognition technologies, the processing will only take place based on this consent (Art. 6para. 1 lit. a DSGVO and § 25 para. 1 TTDSG); consent may be revoked at anytime.
You can configure your browser to notify you when cookies are being set, allow cookies only on a case-by-case basis, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Which Cookies and Services are Used on This Website?
You can find detailed information about which cookies and services are used onthis website in this privacy policy.
Contact form
If you send inquiries via our contact form, your details from the inquiry form, including the contact details you provide there, will be stored with us for the purpose of processing your request and in case of follow-up questions. These data will not be shared without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b DSGVO, provided your inquiry relates to the fulfillment of a contract or is necessary for pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling the inquiries directed to us(Art. 6 para. 1 lit. f DSGVO) or on your consent (Art. 6 para. 1 lit. a DSGVO)if it was requested; the consent can be revoked at any time.
The data you enter in the contact form will remain with us until yourequest its deletion, revoke your consent for storage, or the purpose forstoring the data no longer applies (e.g., after completing the processing ofyour inquiry). Mandatory legal provisions – particularly retention periods –remain unaffected.
Inquiries via E-mail, Phone, or Fax
If you contact us by e-mail, phone, or fax, your inquiry, including allpersonal data arising from it (name, inquiry), will be stored and processed forthe purpose of handling your request. These data will not be shared withoutyour consent.
The processing of this data is based on Art. 6 para. 1 lit. b DSGVO,provided your inquiry is related to the fulfillment of a contract or necessaryfor pre-contractual measures. In all other cases, the processing is based onour legitimate interest in effectively handling the inquiries directed to us(Art. 6 para. 1 lit. f DSGVO) or on your consent (Art. 6 para. 1 lit. a DSGVO)if it was requested; the consent can be revoked at any time.
The data you send us via contact inquiries will remain with us until you request its deletion, revoke your consent for storage, or the purpose for storing the data no longer applies (e.g., after completing the processing of your matter). Mandatory legal provisions – particularly legal retention periods– remain unaffected.
Consent via Finsweet Cookie ConsentOur website uses the consent technology from Finsweet Cookie Consent to obtain your consent for storing certain cookies on your device or to use specific technologies and to document this in compliance with data protection regulations. The developer of this technology is Finsweet.com, website: https://www.finsweet.com/cookie-consent/.
The cookie tool places a cookie in your browser to assign the consents granted or their revocation. The data collected in this way will be stored until you request its deletion, delete the consent manager provider cookie yourself, or the purpose for storing the data no longer applies. Mandatory legal retention requirements remain unaffected.
The use of our cookie tool is to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c DSGVO.