Privacy Policy

Only the original German version is legally binding.
You can read the German version here: Datenschutzerklärung

Status: August 2025 - This Privacy Policy applies to the online shop www.eputec-tools.com.

Who We Are

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection laws is:

EPUTEC Drucklufttechnik GmbH
Haidenbucherstraße 1
86916 Kaufering
Germany

Tel.: +49 8191 915119-0
info@eputec.de
www.eputec-tools.com

Contacting the Data Protection Officer

The data protection officer of the controller is:

DataCo GmbH
Sandstr. 33
80335 Munich
Germany

Tel.: +49 89 7400 45840
www.dataguard.de

General Information on Data Processing

On this page, we inform you about the processing of your personal data on the website. How we collect and use your personal data depends on how you interact with us or which services you use. We only collect, use, or share your personal data if we have a legitimate purpose and a legal basis for doing so.

What Do We Mean by Legal Basis?

Consent (Art. 6 para. 1 sentence 1 lit. a GDPR): You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. Please contact the data protection officer at the contact details below.

Contract (Art. 6 para. 1 sentence 1 lit. b GDPR): We need to use your data to fulfill a contract you have with us. Alternatively, it is necessary to use your data because you have requested it or taken certain steps before entering into this contract.

Legal Obligation (Art. 6 para. 1 sentence 1 lit. c GDPR): We must use your data to comply with the law.

Vital Interests (Art. 6 para. 1 sentence 1 lit. d GDPR): Processing your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.

Public Task (Art. 6 para. 1 sentence 1 lit. e GDPR): Processing your data is necessary for the performance of a task carried out in the public interest or because it is covered by a statutory function, e.g., for a legal function.

Legitimate Interests (Art. 6 para. 1 sentence 1 lit. f GDPR): Processing your data is necessary to support a legitimate interest that we or another party have, only if your own interests do not override.

Please note that we may not be able to provide you with our webshop if your data is processed as part of fulfilling a contract or legal obligation and you do not provide the requested data.

Your Rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights vis-à-vis the controller:

1. Right of Access (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right of access to this data and to the following information:

Purposes of processing
Categories of personal data
Recipients or categories of recipients
Planned storage duration or the criteria for determining this duration
The existence of rights to rectification, erasure, restriction, or objection
Right to lodge a complaint with the competent supervisory authority Where applicable, the origin of the data (if collected from a third party)
Where applicable, the existence of automated decision-making including profiling with meaningful information about the logic involved, the scope, and the expected effects
Where applicable, transfer of personal data to a third country or international organization

2. Right to Rectification (Art. 16 GDPR)

If your personal data is incorrect or incomplete, you have the right to request immediate correction or completion of the personal data.

3. Right to Restriction of Processing (Art. 18 GDPR)

If one of the following conditions is met, you have the right to request restriction of the processing of your personal data:

You contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data.
In the event of unlawful processing, you refuse the erasure of the personal data and instead request the restriction of the use of the personal data.
We no longer need your personal data for processing purposes, but you require your personal data for the establishment, exercise, or defense of legal claims.
After you have objected to the processing, for the duration of the examination as to whether our legitimate grounds override yours.

4. Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR)

If one of the following reasons applies, you have the right to request the immediate erasure of your personal data:

Your data is no longer necessary for the purposes for which it was originally collected.
You withdraw your consent and there is no other legal basis for processing.
You object to the processing and there are no overriding legitimate grounds for the processing, or you object pursuant to Art. 21 para. 2 GDPR.
Your personal data has been unlawfully processed.
Erasure is required to fulfill a legal obligation under Union or Member State law to which we are subject.
The personal data was collected in relation to information society services offered in accordance with Article 8 para. 1 GDPR.

Please note that the above reasons do not apply insofar as processing is necessary:

For exercising the right of freedom of expression and information;
For compliance with a legal obligation or for the performance of a task carried out in the public interest to which we are subject;
For reasons of public interest in the area of public health;
For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes;
For the establishment, exercise, or defense of legal claims.

5. Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format or to request the transfer to another controller.

6. Right to Object to Certain Data Processing (Art. 21 GDPR)

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 sentence 1 lit. e or f GDPR. This also applies to profiling based on these provisions.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling insofar as it is related to such direct marketing.

7. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

A list of the locally competent supervisory authorities in Germany can be found on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Sharing of Data and International Transfers

As explained in this privacy policy, we use various service providers who assist us in providing our services and ensuring the security of your data. When we use these service providers, it is necessary for us to share your personal data with them.

We have entered into agreements with all service providers to whom we transfer your data, obliging them to protect your data.

If your personal data is transferred outside the EU, we ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an "adequate" data protection standard according to the European Commission, or by applying another safeguard, such as an extended contractual agreement, i.e., the Standard Contractual Clauses (SCCs) adopted by the European Commission.

For example, if we use US service providers, we rely on either the SCCs or the EU-US Data Protection Framework, depending on the provider. You can request a copy of the SCCs we have concluded with our service providers by sending an email to the address provided in this privacy policy.

Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing

Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

Information about the browser type and version used
The user's operating system
The user's internet service provider
Date and time of access

This data is stored in the log files of our system. The IP addresses of the user or other data that would allow the data to be assigned to a user are not affected. This data is not stored together with other personal data of the user.

2. Purpose of Data Processing

Storage in log files is carried out to ensure the functionality of the website. In addition, the data helps us to optimise the website and ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.

3. Legal Basis for Data Processing

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 sentence 1 lit. f GDPR.

4. Duration of Storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.

In the case of storage of data in log files, this is the case after no more than seven days. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or anonymised so that an assignment of the accessing client is no longer possible.

5. Possibility of Objection

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. The user may object. Whether the objection is successful must be determined as part of a balancing of interests.

Use of Cookies

1. Description and Scope of Data Processing

When you visit our website, we use technical tools for various functions, especially cookies, which may be stored on your device. When you access our website and at any time thereafter, you have the choice to allow cookies in general or to select which individual additional functions you wish to enable. You can make changes in your browser settings or via our consent manager.

Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you use, so that the entity setting the cookie can receive certain information. Below, we describe the types of cookies we use:

We use technically necessary cookies that are required for the technical structure of the website. Without these cookies, our website cannot be displayed (fully correctly), or support functions are not possible.

The following data is stored and transmitted by technically necessary cookies:

Language settings
Log-in information
Entered search terms
Use of website functions

We also use cookies on our website that are not technically necessary. Technically unnecessary cookies are considered text files that do not solely serve the functionality of the website but also collect other data.

By setting technically unnecessary cookies, the following data is processed:

Date and time of website access

2. Purpose of Data Processing

The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

We require technically necessary cookies for the following applications:

Remembering search terms
Functionality of the website

The use of technically unnecessary cookies is for the purpose of improving the quality of our website, its content, and thus our reach and profitability. By setting these cookies, we learn how the website is used and can continuously optimise our offering. In particular, these cookies serve the following purposes:

Google Ads Conversion Tracking enables us to track user activities such as purchases or registrations after an ad click.

3. Legal Basis for Data Processing

For the storage of information on the end user's device and/or access to information already stored on the end user's device, the provisions of the Telecommunications-Digital Services Data Protection Act (TDDDG) apply. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, the storage and access to cookies on your device is based on § 25 para. 2 no. 2 TDDDG. This storage and access to information on your device is intended to facilitate your use of our website and to offer you our services as you wish. Some functions of our website do not work without the use of these cookies and could therefore not be offered. The cookies are generally deleted after the session ends (e.g. logging out or closing the browser) or after a specified period. Information about different storage periods for cookies can be found in the following sections of this privacy policy.

If cookies are used that are not technically necessary, this is based on your explicit consent, which you can give via the cookie banner. The basis for the storage and access to information in this case is § 25 para. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a), Art. 7 GDPR. You can withdraw your consent at any time with effect for the future or grant it again later by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by making the appropriate settings in your browser software. Please note that the browser settings you make always only apply to the browser you are using. If personal data is processed following the storage of and access to information on your device, the provisions of the GDPR apply. Information on this can be found in the following sections of this privacy policy.

4. Objection and Deletion

You can withdraw your consent to the use of cookies at any time and manage your consent preferences at the following link: https://www.eputec-tools.com/ in the footer under “Cookie Settings”.

Registration

1. Description and Scope of Data Processing

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input form and transmitted to us and stored. The data is not passed on to third parties.

The following data is collected during the registration process:

Email address
Surname
First name
Address
Telephone/mobile number
Date and time of registration
Salutation, company, department, VAT ID

During the registration process, the user's consent to the processing of this data is obtained.

2. Purpose of Data Processing

User registration is necessary to fulfil a contract with the user or to carry out pre-contractual measures.

3. Legal Basis for Data Processing

The legal basis for processing the data is, if the user has given consent, Art. 6 para. 1 sentence 1 lit. a GDPR. If registration serves to fulfil a contract to which the user is a party or to carry out pre-contractual measures, the additional legal basis for processing the data is Art. 6 para. 1 sentence 1 lit. b GDPR.

4. Duration of Storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For data collected during the registration process to fulfil a contract or to carry out pre-contractual measures, this is the case when the data is no longer required for the performance of the contract. Even after the contract has been concluded, it may be necessary to store personal data of the contracting party in order to comply with contractual or legal obligations.

5. Possibility of Withdrawal in the Case of Consent

As a user, you have the option at any time to cancel your registration. You can have the data stored about you changed at any time.

Specifically, you can request deletion in the following ways: Write us an email at info@eputec.de or by post to the following address: EPUTEC Drucklufttechnik GmbH, Haidenbucherstraße 1, 86916 Kaufering.

If the data is required to fulfil a contract or to carry out pre-contractual measures, early deletion of the data is only possible if there are no contractual or legal obligations preventing deletion.

Webshop

We offer a webshop on our website. For this, we use the following webshop software: Shopware from the provider shopware AG, Ebbinghoff 10, 48624, Schöppingen, Germany (hereinafter referred to as Shopware).

Further information can be found in the provider’s privacy policy:
https://de.shopware.com/datenschutz/

The website and webshop are hosted on external servers by a service provider commissioned by us. Our service provider is: Timme Hosting

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The stored information is:

Information about the browser type and version used
The user’s operating system
The user’s internet service provider
Date and time of access

This data is not merged with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of their website – for this, the server log files must be recorded. We have concluded a data processing agreement with the relevant service provider, obliging them to protect user data and not to pass it on to third parties.

The server location of the website is geographically in Germany.

Payment Options

1. Description and Scope of Data Processing

We offer our customers various payment options for processing their orders. Depending on the payment method, customers are redirected to the platform of the respective payment service provider. After completion of the payment process, we receive the customers’ payment data from the payment service providers or our house bank and process this data in our systems for the purposes of invoicing and accounting.

Payment via Amazon Pay

It is possible to process the payment transaction with the payment service provider Amazon Pay. Amazon Pay enables online payments to third parties by using the payment and shipping information stored in your Amazon account.

The European operating company of Amazon Pay is Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg.

If you already have an Amazon.de customer account, you can pay immediately using the payment method stored there – either by direct debit or credit card. For this, you must log in to your Amazon account.

Further information and your order overview for payments via Amazon Pay can be found at https://pay.amazon.de/. When paying via Amazon Pay, all personal data provided to or collected by Amazon Pay is primarily processed by Amazon Pays s.c.a. and secondarily by Amazon EU SARL, Amazon Services Europe SARL, and Amazon Media EU SARL, all three located at 5, Rue Plaetis L 2338, Luxembourg.

Further information on the processing of your data by Amazon in the context of Amazon Pay can be found in the Amazon Pay privacy policy at: https://pay.amazon.com/de/help/201751600

Payment via PayPal

It is possible to process the payment transaction with the payment service provider PayPal. PayPal offers, in addition to a direct payment method, purchase on account, direct debit, credit card, and instalment payment.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.

If you select PayPal as your payment method, your data required for the payment process will be automatically transmitted to PayPal. This includes, in particular, the following data:

Name
Address
Email address
Telephone/mobile number
IP address
Bank details
Card number
Expiry date and CVC code
Number of items
Item number
Data on goods and services
Transaction amount and tax charges
Information on previous purchasing behaviour

The data transmitted to PayPal may be passed on by PayPal to credit reference agencies. This transmission is intended for identity and credit checks. PayPal may also pass your data on to third parties if this is necessary to fulfil contractual obligations or if the data is to be processed on behalf of PayPal. When transferring your personal data within companies affiliated with PayPal, the Binding Corporate Rules approved by the competent supervisory authorities apply. You can find these here: https://www.paypal.com/de/webapps/mpp/ua/bcr

Other data transfers may be based on contractual safeguards. For further information, please contact PayPal. All PayPal transactions are subject to PayPal’s privacy policy, which you can find at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full/.

Payment in Advance

If you have chosen payment in advance, we do not process any data other than the data transmitted by your bank. This is only used to verify receipt of payment.

Other Payment Options

We also offer payment by the following methods: credit card, invoice purchase B2B, bank transfer/SEPA transfer, Pay now, Twint, iDEAL, eps, Przelewy24, KBC/CBC Payment Button.

2. Purpose of Data Processing

The transmission of payment data to payment service providers is for the purpose of processing the payment, e.g. when you purchase a product and/or use a service.

3. Legal Basis for Data Processing

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR, as the processing of the data is necessary for the execution of the concluded purchase contract.

4. Duration of Storage

All payment data and data relating to any chargebacks are only stored for as long as they are required for payment processing and any handling of chargebacks and debt collection as well as for combating misuse. In addition, payment data may be stored beyond this if and as long as this is necessary to comply with statutory retention periods or to pursue a specific case of misuse. Your personal data will be deleted at the end of the statutory retention periods, i.e. after a maximum of 10 years.

5. Exercising Your Rights

Shipping Service Providers

1. Description and Scope of Data Processing

If you order products or services on our website that require a shipping service provider for delivery, you will receive your order and shipping confirmation via your email address, and, depending on the shipping service provider, notification that your shipment has arrived and/or notification of parcel announcement and possible delivery options.

The data is transmitted to the following service providers:

DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany
General Logistics Systems Germany GmbH & Co. OHG, GLS-Germany-Str. 1-7, 36286 Neuenstein, Germany
Hermes Germany GmbH, Essener Straße 89, 22419 Hamburg, Germany
UPS Europa SA, Ave Ariane 5, Brussels, B-1200, Belgium
Schenker Deutschland AG, Thyssenstr. 43, 86368 Gersthofen, Germany

The data regularly transmitted includes:

Name
Address
Email address

2. Purpose of Data Processing

The purpose of processing personal data is to enable shipping service providers to inform recipients about the shipping status by email and thus increase the likelihood of successful delivery.

3. Legal Basis for Data Processing

The legal basis for transmitting the email address to the respective shipping service provider and its use is your consent in accordance with Art. 6 para. 1 lit. a GDPR. The legal basis for transmitting your address data (first name, surname, address) to the respective shipping service provider is Art. 6 para. 1 sentence 1 lit. b GDPR, as the processing of the data is necessary for the execution of the concluded purchase contract.

4. Duration of Storage

The transmitted data is deleted by the respective shipping service provider once the parcel has been delivered.

5. Possibility of Objection

The notification service by the shipping service provider can be cancelled by the affected user at any time. For this purpose, each email contains a corresponding opt-out link.

Email Contact

1. Description and Scope of Data Processing

On our website, it is possible to contact us via the provided email address. In this case, the personal data transmitted with the email will be stored. The data is used exclusively for processing the conversation.

2. Purpose of Data Processing

In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data.

3. Legal Basis for Data Processing

The legal basis for processing the data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in optimally responding to your enquiry sent by email. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

4. Duration of Storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the relevant matter has been conclusively clarified. Any personal data additionally collected during the sending process will be deleted at the latest after a period of seven days.

5. Possibility of Objection

If the user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

Contact Form

1. Description and Scope of Data Processing

Our website contains a contact form that can be used for electronic communication. If a user makes use of this option, the data entered in the input mask is transmitted to us and stored. At the time the message is sent, the following data is stored:

Email address
Surname
First name
Telephone/mobile number
Salutation
Date and time

2. Purpose of Data Processing

The processing of personal data from the input mask of the contact form or via the provided email address serves solely to process the contact request. The other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

3. Legal Basis for Data Processing

The legal basis for processing the data transmitted in the course of sending an email is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in optimally responding to your enquiry sent via the contact form. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

4. Duration of Storage

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the relevant matter has been conclusively clarified. Any personal data additionally collected during the sending process will be deleted at the latest after a period of seven days.

5. Possibility of Objection

If the user contacts us via the input mask in the contact form, they may object to the storage of their personal data at any time.

Specifically, you can submit your objection in the following ways: Write us an email at info@eputec.de or by post to the following address: EPUTEC Drucklufttechnik GmbH, Haidenbucherstraße 1, 86916 Kaufering.

All personal data stored in the course of contacting us will be deleted in this case.

Application by Email

1. Description and Scope of Data Processing

You can send us your application by email. In doing so, we collect your email address and the data you provide in the email.

2. Purpose of Data Processing

The processing of personal data from your application email serves solely to process your application.

3. Legal Basis for Data Processing

The legal basis for processing your data is the initiation of a contract at the request of the data subject, Art. 6 para. 1 sentence 1 lit. b Alt. 1 GDPR and § 26 para. 1 sentence 1 BDSG.

4. Duration of Storage

After completion of the application process, the data will be stored for up to 6 months. After the 6 months have expired, your data will be deleted at the latest. In the case of a legal obligation, the data will be stored in accordance with the applicable regulations.

Corporate Appearances

Instagram

Instagram, part of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland

On our company page, we provide information and offer Instagram users the opportunity to communicate.

If you perform an action on our Instagram company profile (e.g. comments, posts, likes, etc.), you may thereby make personal data (e.g. your real name or photo from your user profile) public. However, as we generally or largely have no influence on the processing of your personal data by Instagram, we cannot make binding statements about the purpose and scope of the processing of your data.

We use our company profile on social networks for communication and information exchange with (potential) customers. In particular, we use the company profile for: product information, advertising, information about services, customer contact.

The publications via the company profile may contain the following content:

Information about products
Information about services
Advertising
Customer contact

Each user is free to publish personal data through activities.

If we process your personal data to evaluate your online behaviour, offer you competitions, or conduct lead campaigns, this is based on your explicit declaration of consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

The legal basis for processing personal data for the purpose of communication with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest is to respond to your enquiry optimally or to provide the requested information. If the contact aims to conclude a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. The data generated by the company profile is not stored in our own systems.

For information on the processing of your personal data by Instagram and the corresponding options for objection, please refer to: Instagram: https://help.instagram.com/519522125107875

YouTube

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States

On our company page, we provide information and offer YouTube users the opportunity to communicate. If you perform an action on our YouTube company profile (e.g. comments, posts, likes, etc.), you may thereby make personal data (e.g. your real name or photo from your user profile) public. However, as we generally or largely have no influence on the processing of your personal data by YouTube, we cannot make binding statements about the purpose and scope of the processing of your data.

We use our company profile on social networks for communication and information exchange with (potential) customers. In particular, we use the company profile for: products, advertising, information about services, customer contact.

The publications via the company profile may contain the following content:

Information about products
Information about services
Advertising
Customer contact

Each user is free to publish personal data through activities.

For information on the processing of your personal data by YouTube and the corresponding options for objection, please refer to: YouTube: https://policies.google.com/privacy?gl=DE&hl=en

Use of Corporate Appearances in Professional Networks

LinkedIn

1. Scope of Data Processing

On our page, we provide information and offer users the opportunity to communicate. The company profile is used for applications, information/PR, and active sourcing. We have no information about the processing of your personal data by the companies jointly responsible for the company profile. Further information can be found in LinkedIn’s privacy policy: https://de.linkedin.com/legal/privacy-policy

If you perform an action on our company profile (e.g. comments, posts, likes, etc.), you may thereby make personal data (e.g. your real name or photo from your user profile) public.

2. Legal Basis for Data Processing

3. Purpose of Data Processing

Our company profile serves to inform users about our services. Each user is free to publish personal data through activities.

4. Duration of Storage

The data generated by the company profile is not stored in our own systems.

5. Exercising Your Rights

You can object to the processing of your personal data, which we collect in the course of your use of our company presence, at any time and exercise your rights as a data subject as set out in the "Your Rights" section of this privacy policy. To do so, simply send us an informal email to the email address stated in this privacy policy. Further information on exercising your rights can be found here: LinkedIn: https://www.linkedin.com/legal/privacy-policy

Integrated Services of Third Parties

We use various service providers to deliver the services we offer via the website. If such services are required for additional services, enhanced functions, or additional purposes, your personal data will only be transferred to service providers if you give your consent.

You can withdraw your consent to the use of integrated third-party services at any time and manage your consent settings here: https://www.eputec-tools.com/ in the footer under “Cookie Settings”.

Use of Google Analytics 4 (GA 4)

1. Scope of Processing Personal Data

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google). Google Analytics analyses, among other things, how website visitors use our site. Google sets cookies on your device. During your visit, user behaviour is recorded as “events”. This may result in personal data being stored and evaluated, including:

First visit to the website
Interaction with the website, usage path
Clicks on external links
Video usage
File downloads
Ad impressions and clicks
Scroll behaviour (if scrolled to the end of the page)
Searches on the website
Language selection
Page visits
Location (region)
Your IP address (in truncated form)
Technical information about your browser and the devices you use (e.g. language setting, screen resolution)
Your internet provider
Referrer URL

By default, IP anonymisation is activated in GA 4. This means that your IP address is truncated by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. Google states that the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

Further information on the processing of data by Google can be found here: https://policies.google.com/privacy

2. Purpose of Data Processing

The use of GA 4 serves us to evaluate the use of our online presence and to generate reports on activities on our website. The reports are used to analyse the performance of our website and to target advertising to people who have already shown initial interest by visiting the site.

3. Legal Basis for Processing Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR.

4. Duration of Storage

After 2 months, your personal data will be deleted. This deletion takes place automatically once a month.

5. Revocation, Objection, and Removal Options

You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can withdraw your consent via our cookie consent tool. You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supported browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com/) in your browser.

Further information on objection and removal options with Google can be found at: https://policies.google.com/technologies/partner-sites

You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

With the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.de/

Use of YouTube

1. Scope of Processing Personal Data

We use the plugin operated by Google from YouTube, YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA and its representative in the Union, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google).

We use the YouTube plugin to embed videos from YouTube on our online presence. When you visit our online presence, your browser establishes a connection with the servers of YouTube. This may result in personal data being stored and evaluated, especially user activity (in particular, which pages were visited and which elements were clicked) as well as device and browser information (in particular, IP address and operating system). We have no influence over the content of the plugin. If you are logged into your YouTube account during your visit, YouTube can assign your visit to our online presence to this account. By interacting with this plugin, the corresponding information is transmitted directly to YouTube and stored there.

Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

2. Purpose of Data Processing

The use of the YouTube plugin serves to improve user-friendliness and provide an appealing presentation of our online presence.

3. Legal Basis for Processing Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Revocation and Removal Options

You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supported browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com/) in your browser.

With the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.de/ Further information on objection and removal options with Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Tag Manager

1. Scope of Processing Personal Data

We use Google Tag Manager (https://www.google.com/intl/de/tagmanager/) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google).

With Google Tag Manager, tags from Google services and third-party providers can be managed and bundled on an online presence. Tags are small code elements on an online presence that, among other things, serve to measure visitor numbers and behaviour, track the impact of online advertising and social channels, use remarketing and targeting, and test and optimise online presences. When a user visits the online presence, the current tag configuration is sent to the user's browser. It contains instructions on which tags should be triggered. Google Tag Manager ensures the triggering of other tags, which may in turn collect data. For information on this, please refer to the passages on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data.

Further information on Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/faq.html and in Google’s privacy policy: https://policies.google.com/privacy?hl=de

2. Purpose of Data Processing

The purpose of processing personal data lies in the consolidated and clear management as well as efficient integration of third-party services.

3. Legal Basis for Processing Personal Data

The legal basis for processing users’ personal data is generally the user’s consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of Storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law. According to Google, advertising data in server logs is anonymised by deleting parts of the IP address and cookie information after 9 or 18 months.

5. Revocation and Removal Options

You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the “Do Not Track” function of a supported browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com/) in your browser.

With the following link, you can deactivate the use of your personal data by Google: https://adssettings.google.de/

Further information on objection and removal options with Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Integration of the Trusted Shops Trustbadge

To display our Trusted Shops quality seal and any collected reviews, as well as to offer Trusted Shops products to buyers after an order, the Trusted Shops Trustbadge is integrated on this website.

This serves to safeguard our overriding legitimate interests in optimal marketing by enabling secure shopping in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided as part of order processing by a CDN provider (Content Delivery Network). Trusted Shops GmbH also uses service providers from the USA. An appropriate level of data protection is ensured. Further information on data protection at Trusted Shops GmbH can be found here: https://www.trustedshops.de/impressum/#datenschutz

When the Trustbadge is accessed, the web server automatically saves a so-called server log file, which also contains your IP address, date and time of access, amount of data transferred, and the requesting provider (access data), and documents the access. Individual access data is stored for the analysis of security anomalies in a security database. The log files are automatically deleted at the latest 90 days after creation.

Further personal data will be transferred to Trusted Shops GmbH if, after completing an order, you decide to use Trusted Shops products or have already registered for their use. The contractual agreement between you and Trusted Shops applies. For this purpose, personal data is automatically collected from the order data. Whether you as a buyer are already registered for product use is checked using a neutral parameter, the cryptologically hashed email address. The email address is converted into this hash value, which cannot be decrypted by Trusted Shops, before transmission. After checking for a match, the parameter is automatically deleted.

This is necessary for the fulfilment of our and Trusted Shops’ overriding legitimate interests in providing the buyer protection linked to the specific order and the transactional review services in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Further details, including information on objection, can be found in the Trusted Shops privacy policy linked above and in the Trustbadge.

This privacy policy was created with the support of DataGuard.