Privacy Policy

Thank you for your interest in Erik Sterck GmbH and our website https://www.eriksterck.de (hereinafter referred to as "website"). The protection of your privacy and the legally compliant collection, processing and use of your data is very important to us.

Please see below how we collect, process and use your data.

1. CONTROLLER / SERVICE PROVIDER

1.1 The controller in accordance with Article 4(7) of the General Data Protection Regulation (hereinafter referred to as "GDPR") and service provider within the meaning of the German Act for Telecommunications Media Services (Telemediengesetz) is Erik Sterck GmbH, Römerstrasse 99, 71229 Leonberg, Germany, email: info(at)eriksterck.de (hereinafter referred to as "us" or "we").

1.2 You can contact our external data protection officer as follows: Jordan & Wagner Rechtsanwaltsgesellschaft mbH, Dr Arnd-Christian Kulow, Alexanderstr. 8A, 70184 Stuttgart, Germany, phone: +49 (0) 711 2554 0460, email: arnd.kulow@jordan-ra.com.

2. DATA COLLECTION, PROCESSING AND USE WHEN YOU VISIT OUR WEBSITE

2.1 When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you want to view our website, we collect the following data that we need from a technical point of view to display our website and to ensure stability and security:

• Name of your internet service provider
• IP address assigned to you
• Address of the website from which you visit our website
• Browser used and, if applicable, your computer’s operating system
• Amount of data transferred in each case
• Subpages of our website you have visited
• Date and time of your visit

2.2 We and our IT service providers, including our host provider, whose servers are located within the European Union, have access to the data. We have concluded an order processing contract with our host provider in accordance with Art. 28 GDPR.

2.3 The data mentioned above is processed by us for the following purposes:

• Ensuring a smooth connection to the website
• Ensuring a convenient use of our website
• Analysing system security and stability
• Other administrative purposes

2.4 For security reasons, log file information (e.g. to investigate misuse or fraud) is stored for a maximum of ten days and then deleted or anonymised. Data whose further storage is required for evidence purposes is excluded from deletion until final clarification of the respective incident.

2.5 The legal basis for data processing is Art. 6(1) clause 1(f) GDPR. Our legitimate interest follows from the data collection purposes listed above. Reference is made to the right of withdrawal in accordance with section 13 of this privacy policy.

2.6 We also use cookies when you visit our website. You can find more details on this in section 5 of this privacy policy.

3. COLLECTION, PROCESSING AND USE OF THE DATA YOU PROVIDE WHEN USING OUR WEBSITE

3.1 Your data is collected when you contact us, e.g. by email or via a contact form. The data you provide when contacting us will be processed and used exclusively for the purpose of responding to your enquiry and for any follow-up questions.

3.2 Data processing for the purpose of contacting us is carried out in accordance with Art. 6(1) clause 1(b) GDPR.

4. HOSTING

Our web server is operated by Hetzner Online GmbH. The personal data transmitted by you when you visit our website is therefore processed by Hetzner Online GmbH on our behalf.

Hetzner Online GmbH
Industriestraße 25
91710 Gunzenhausen
Germany

5. USING OUR SERVICES

5.1 If you wish to make use of our services, it is necessary for the conclusion of the contract that you provide your personal data that we require for the processing of your order in accordance with Art. 6(1) clause 1(b) GDPR. We process the data you provide to process your order.

5.2 With your consent, we will also add you to our database of potential customers and store your data for any further orders. You can withdraw your consent to storing your customer data at any time. In this case, we will delete the corresponding data immediately after we are no longer authorised or obliged to store it.

5.3 Due to commercial and tax law requirements, we are obliged to store your address as well as payment and order data for a period of ten years. However, we restrict processing after two years, i.e. your data will only be used to comply with legal obligations.

6. COOKIES

6.1. The first time you visit our website from one of the devices you use, you will be informed that cookies may be loaded onto your device when you use our website. If you continue to use our website after having received this information, you hereby declare your consent to our use of permanent cookies.

6.2 Cookies are alphanumeric identifiers that are transferred to the hard drive of your end device when you access our website. They enable recognising your browser when you visit our website at a later date and are primarily used to make your website visit more convenient and personalised, e.g. by recognising the language used, and to protect the website from
hacker attacks.

This website uses the following types of cookies, the scope and function of which are explained below:

    Transient cookies (s. 6.4)

6.4 Transient cookies are automatically deleted when you close the browser. These include session cookies in particular that store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables recognising your computer when you return to our website. Session cookies are deleted when you log out or close the browser.

6.5 You can delete cookies at any time in the security settings of your browser. The help function in the menu bar of most web browsers provides information on how to set up your browser so that new cookies are never accepted, only set after notification and by you or always set automatically.

7. OWN WEB FONTS

For the standardised display of fonts, this website currently only uses web fonts on its own servers, without accessing Google LLC servers.

8. EMAIL NEWSLETTER

When you register for our email newsletter (hereinafter referred to as "newsletter"), we collect your email address and any additional data you provide. We use this data exclusively for sending the respective newsletter for the purposes specified when registering for this newsletter. As we follow the double opt-in process, your newsletter registration will only be completed when you click on the link provided in the confirmation email, thereby confirming your consent to the newsletter being sent to you. You can withdraw your consent to receiving our newsletter at any time. You can also unsubscribe via the link at the end of each newsletter. The legal basis for sending the newsletter is Art. 6(1) clause 1(a) GDPR, Art. 7(2) German Unfair Competition Act (UWG).

Our newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails that are sent in HTML format to enable log file recording and log file analysis. This enables analysing the success or failure of online marketing campaigns. Based on the embedded tracking pixel, we know whether and when an email was opened by its
recipient and which links in the email were clicked by this person.

Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by us in order to optimise our newsletter send-outs and to better adapt the content of future newsletters to the interests of the respective subscriber. This personal data is not passed on to third parties. Newsletter subscribers are entitled at any time to revoke the
separate declaration of consent given via the double opt-in procedure. Once consent has been withdrawn, this personal data will be deleted by us. Unsubscribing from the newsletter constitutes a withdrawal of consent.

9. REGISTERING FOR OUR EVENTS

9.1. Description and scope of data processing

You have the option of registering for information and customer events via our website. To do so, you can enter your personal details in dedicated registration forms. Information that is mandatory for registration is marked with an asterisk "*", i.e. you cannot register without providing this information. All other information is voluntary and not required for attending our events.

Different data is requested depending on the type of event. The following data is processed depending on the event:

• First name, last name
• Phone number
• Email address
• Title
• Date of birth
• Position/department
• Organisation/company
• Billing address

It is also possible to subscribe to our newsletter as part of an event booking (please see our information on sending newsletters under "Email newsletter" in this privacy policy).

9.2. Legal basis for data processing

The legal basis for the processing of the data is, in addition to Art. 6(1) clause 1(b) GDPR (for mandatory information), your consent in accordance with Art. 6(1) clause 1(a) GDPR.

9.3 Purpose of data processing

We process your data solely for the purpose of organising the event which you have registered to attend.

9.4 Storage duration

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. This is generally the case after five years. In accordance with Art. 6(1) clause 1(c) GDPR, longer storage periods may result from retention and documentation obligations under tax and commercial law, as well as from regulations that apply to our company.

9.5. Right to object and withdraw

You can withdraw your consent at any time. We will then only process your data insofar as this is necessary for the fulfilment of the contract with you and/or there are additional retention obligations.

10. LINKS TO OTHER WEBSITES

Our website may contain links, including icons, to websites of other providers, e.g. LinkedIn, Xing, TikTok or YouTube. If you click on such a link on our website, we unfortunately no longer have any influence on the collection, processing and use of your data by third parties. We can therefore not accept any responsibility for this.

11. GOOGLE ANALYTICS 4, GOOGLE TAG MANAGER, GOOGLE ADS AND GOOGLE MAPS

11.1 We use the web analysis service Google Analytics 4 of Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland ("Google") on our website to analyse its use and optimise it. We use Google cookies for this purpose. Processing may also take place outside the European Union (EU) or the European Economic Area (EEA).

11.2 If and to the extent that you are affected by personal data processing, the legal basis is your consent (Art. 6(1)(a) GDPR).

11.3 The decision for and basis of use are rooted in the adequacy decision of the European Commission for the EU-U.S. Data Privacy Framework of 10 July 2023, according to which certified companies expressly guarantee the same level of protection as the GDPR (https://ec.europa.eu/commission/presscorner/detail/en/ip_23_3721, as of 2 July 2024). Google is certified (https://policies.google.com/privacy/frameworks?hl=en-US, as of 2 July 2024).  

11.4 Alternatively, the following also applies to third country transfers: In order to guarantee the level of data protection in a third country, EU standard contractual clauses are in place with the provider.

11.5 Google acts as a data processor for Google Analytics in accordance with the data
processing conditions for Google Ads.

11.6 We use tags on websites and an SDK (Software Development Kit) for mobile apps to be able to utilise Google's analytics products. Based on the measurement data collected, we can better understand the needs of our users and, if necessary, provide them with a personalised experience and relevant advertising. Google Tags use cookies or app instance IDs to measure user interactions. These identifiers provide information about user behaviour. However, no personally identifiable information is sent to Google Analytics, which includes the data listed here: https://support.google.com/analytics/answer/7686480?sjid=17481075517372667980-EU, as of 2 July 2024. We observe the best practices issued by Google (https://support.google.com/analytics/answer/6366371?sjid=8400269439226520164-EU&hl=en#zippy=%2Cthemen-in-diesem-artikel%2Cin-this-article, as of 2 July 2024).

11.7 For Google's privacy policy, please see here: https://policies.google.com/privacy?hl=en, as of 2 July 2024.

11.8 The systems, applications, people, technologies, processes and data centres behind many of Google products, including Google Analytics, are ISO 27001 certified, please see here, https://support.google.com/analytics/answer/3407084?sjid=17481075517372667980-EU as of 2 July 2024. For information on ISO 27001 please see here: https://www.iso.org/standard/27001?sjid=17481075517372667980-EU.

11.9 In Google Analytics, your interactions on our website are primarily captured using our own cookies. You can deactivate cookies or delete them individually. Google Analytics also supports an optional browser add-on (https://tools.google.com/dlpage/gaoptout/?sjid=17481075517372667980-EU). If you install and activate it, your data will not be collected by Google Analytics when you visit websites. However, the add-on only deactivates data collection by Google Analytics. If Google Analytics for Apps SDK or Google Analytics for Firebase SDK is used on a website or in an app, an app instance ID is captured in Google Analytics. This is a randomly generated number that identifies an individual app installation. If a user resets their advertising ID under Android or iOS, the app instance ID is also reset.

11.11 IP anonymisation takes place by setting the last octet to zeros. In principle, all IP addresses collected from users in the EU are deleted in Google Analytics before they are recorded via EU domains and servers. IP address data is used to derive location data in accordance with section 11.10 and then deleted immediately. The location identified by the IP address applies.

11.12 The data retention period on Google's servers is one year. We delete your data from Google Analytics on request by sending your ID to Google Analytics User Deletion API or using the User Explorer report. However, aggregated data linked to you, such as page URLs visited, will not be deleted. We have the option of retrieving event data for your ID via the User Explorer report or the User Activity API. This enables analysing and exporting data at event level for individual users.

11.13 Our website uses Google Ads in conjunction with Google Analytics 4 and the data it collects. The provisions set out for Google Analytics 4 apply accordingly. Anonymous statistics are compiled by using cookies to record the traffic from activated Google Ads to our website. You can deactivate this function in the advertising settings and change your settings for this cookie. 

11.14 Our website uses Google Maps to display maps and/or show directions. If you use the plugin shown, data such as your IP address and data relating to the use of our website may be collected and stored on Google servers and cookies may be set. The privacy policy under section 11.7 applies.

12. DATA TRANSFERS

12.1 Your personal data will not be transferred to third parties for purposes other than those listed below.

12.2. We only pass on your personal data to third parties in the following cases:

• You have given your express consent in accordance with Art. 6(1) clause 1(a) GDPR.
• The disclosure in accordance with Art. (1) clause 1(f) GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.
• There is a legal obligation for the disclosure in accordance with Art. 6(1) clause 1(c) GDPR.
• It is legally permissible and in accordance with Art. 6(1) clause 1(b) GDPR necessary for the processing of contractual relationships with you.

13. RIGHTS OF DATA SUBJECTS

You have the following rights:

• In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification or erasure of personal data, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details.
  
  
• In accordance with Art. 16 GDPR, you have the right to immediately request the correction of incorrect or incomplete personal data stored by us.
• In accordance with Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
• In accordance with Art. 18 GDPR, you have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to erase it and we no longer need the data, you, however, need it to assert, exercise or defend legal claims or have lodged an objection to the processing in accordance with Art. 21 GDPR.
• In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.
• In accordance to Art. 7(3) GDPR, you have the right to withdraw your consent once given to us at any time. In consequence, we may no longer continue the data processing that was based on this consent in the future.
• In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

14. NO AUTOMATED DECISION-MAKING

We do not carry out automated decision-making based on the data collected.

15. VALIDITY AND AMENDMENT OF THIS PRIVACY POLICY

This privacy policy is currently valid, as of July 2024. As we develop our website further or changes in legal or regulatory requirements can occur, it may become necessary to amend this privacy policy. You can access and print out the current privacy policy at any time and will find it under the "Privacy Policy" tab on our website.