Privacy Policy

1. Overview of Data Protection

We take your privacy seriously and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website, ecd-international.com. The term “personal data” refers to any information that can personally identify you. For further details, please refer to our comprehensive Data Protection Declaration below.

Data Collection on Our Website

  • Controller of Data Processing: The party responsible for processing data on this website is the operator, whose contact details are provided in the “Contact Information” section below.
  • How We Collect Data:
    • Directly from You: Data may be collected when you provide information via forms, such as our contact form.
    • Automatically: Technical data (e.g., web browser, IP address, device type) is collected automatically through IT systems during your visit.
  • Purpose of Data Processing:
    • To provide a smooth user experience and ensure website functionality.
    • To analyze visitor interactions and optimize our offerings.
  • Your Rights:
    • Access, Rectification, Deletion: You can request access to, correction of, or deletion of your data at any time.
    • Revocation of Consent: If data processing is based on your consent, you can revoke it at any time for future processing.
    • Objection Rights: You may object to certain data processing activities, including direct marketing.
    • Data Portability: Upon request, you can receive your data in a machine-readable format or request transfer to another controller.
    • For any inquiries, contact us using the details in the “Contact Information” section.

2. Hosting and Content Delivery Networks (CDN)

Our website is hosted by an external service provider (host) who processes personal data on our behalf, such as IP addresses, contact requests, and other data generated through the website. The host is used for secure, fast, and efficient online service delivery, as per Art. 6(1)(b) GDPR (fulfilling contracts with our customers) and Art. 6(1)(f) GDPR (legitimate interest in a reliable online presence). We have a Data Processing Agreement (DPA) with our host to ensure compliance with GDPR.

3. Contact Information and Data Protection Officer

  • Controller:
    ECD International Holding GmbH
    Tübinger Strasse 12-16
    D-70178 Stuttgart
    Phone: +49 (0) 711 21842 0
    Email: info@ecd-international.com
  • Data Protection Officer:
    Hannes Werthmann
    ECD International Holding GmbH
    Tübinger Str. 12-16
    70178 Stuttgart
    Germany
    Phone: +49 (0) 160 99219747
    Email: h.werthmann@ecd-international.com

4. Revocation and Objection Rights

  • Revocation of Consent: You can revoke previously granted consent to data processing at any time by sending an informal notification via email. This revocation will affect future data processing only.
  • Right to Object: You may object to the processing of your data on grounds related to your unique situation if the processing is based on Art. 6(1)(e) or Art. 6(1)(f) GDPR. If your personal data is processed for direct advertising, you can object at any time to the use of your data for such advertising.

5. Data Collection Methods

  • Cookies: We use cookies to enhance your experience on our website. You can manage your cookie preferences via our cookie consent tool, Borlabs Cookie, and through your browser settings. Cookies are stored based on Art. 6(1)(f) GDPR (legitimate interest in website functionality) and, where necessary, based on your consent under Art. 6(1)(a) GDPR.
  • Server Log Files: For technical functionality and security, we collect data such as IP addresses, browser details, and access times, as per Art. 6(1)(f) GDPR.

6. Analysis Tools

This website uses Google Analytics, a web analysis service provided by Google Ireland Limited. Google Analytics uses cookies to analyze visitor interactions. To comply with GDPR, we have enabled IP anonymization, meaning that your IP address will be shortened before it is processed by Google. The legal basis for using Google Analytics is our legitimate interest in website optimization, Art. 6(1)(f) GDPR. If you provide consent, this processing will be based on Art. 6(1)(a) GDPR.

Google Analytics Opt-out: You can opt out of Google Analytics tracking by using a browser add-on (available here) or by adjusting your settings in the cookie consent tool.

7. Third-Party Tools and Plugins

  • YouTube Integration: We use YouTube videos in “extended data protection mode,” meaning YouTube does not store data on visitors until they play a video. Playing a video connects you to YouTube’s servers, which may store cookies on your device.
  • Google Maps: Google Maps is used to provide a consistent, high-quality browsing experience. It may involve the processing of your IP address. This service is used based on our legitimate interest in an attractive website, Art. 6(1)(f) GDPR. For more information on Google’s data handling, refer to Google’s Privacy Policy.

8. Contact Requests and Forms

When you submit inquiries via our contact form or other communication channels, we collect and store the data you provide (e.g., name, email) solely for responding to your inquiry. This processing is based on Art. 6(1)(b) GDPR (performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). Your data will be retained until you request deletion or the purpose for retention no longer exists, subject to legal retention requirements.

9. Your Rights Under GDPR

  • Right to File a Complaint: You have the right to lodge a complaint with a supervisory authority, such as the Data Protection Authority of Baden-Württemberg, if you believe your rights have been violated.
  • Data Security Measures: We use SSL/TLS encryption to protect data transmission on our website, ensuring secure connections. Further security measures are in place to prevent unauthorized access and ensure data integrity.

10. Data Retention Periods

Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. Specific retention periods are outlined in applicable regulations; for example, contract-related data is generally stored for six years under German commercial law.

11. International Data Transfers

We use international data transfer mechanisms, such as Standard Contractual Clauses, to ensure adequate protection for data transferred outside the EEA, in accordance with Art. 44-50 GDPR. For more information on these mechanisms, please contact us.

12. Updates to This Policy

This Privacy Policy may be updated periodically. We will post any changes on this page, so please review it regularly to stay informed. Significant changes will be communicated to you directly, if possible.

13. Rejection of Unsolicited Advertising

We object to the use of contact information provided in this policy for the purpose of sending unsolicited advertising or promotional material. We reserve the right to take legal action against any party sending unsolicited advertising.