Privacy policy

Controller

The controller responsible for processing data on this website is:

Email: info@eefholding.de
Telephone: +49 152 16629391

Hosting and delivery

We use IONOS to host and deliver this website. The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

When you visit the website, connection and access data that are technically necessary are processed. These may include your IP address, the date and time, pages and files accessed, browser and device details, the previously visited page, status messages and traffic information. These data are used to deliver content, analyse errors and protect against abusive access and attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide a secure and functioning website. IONOS acts as a processor. Information about processing on our behalf under Article 28 GDPR can be found in the IONOS information on the data processing agreement.

According to the information provided by IONOS about its Webhosting product, visitor data are stored for eight weeks and IP addresses are anonymised at the point of collection. IONOS states that no visitor data are transferred to third countries outside the EU for this product. Further information can be found in the privacy information for IONOS Webhosting.

Further information about data processing by IONOS can be found in the privacy policy of IONOS.

Contact by form, email or telephone

When you contact us, we process the information you provide, in particular your name, contact details and the content of your enquiry, to respond to your request and clarify any follow-up questions. When you use the contact form, your name, email address and message, together with any company and telephone details you provide voluntarily, are transmitted to us and stored to handle your enquiry. Our email and telephone links open the corresponding application on your device.

If your enquiry relates to a contract or pre-contractual measures, the legal basis is Article 6(1)(b) GDPR. We process other enquiries on the basis of Article 6(1)(f) GDPR. Our legitimate interest is to handle your communication appropriately. Technical communications service providers may process the data where necessary to transmit and handle the message.

We delete the information once your enquiry has been fully handled and further retention is no longer necessary. Statutory retention obligations and the need to safeguard or defend legal claims may prevent earlier deletion.

Form delivery with Web3Forms

We use Web3Forms, a service provided by Web3Creative based in India, to deliver our contact form submissions. When you submit the form, the data entered — your name, email address, message and any company and telephone details provided voluntarily — are transmitted to Web3Forms, processed there and forwarded to us by email. Technical information such as the IP address, time and origin of the enquiry may also be processed. Transmission to the service is encrypted using HTTPS.

The processing serves to deliver your enquiry and protect against spam and abuse. The legal bases stated in the previous section apply to handling your enquiry. Technical delivery and abuse prevention are based on Article 6(1)(f) GDPR; our legitimate interest is to provide a reliable and secure way to contact us.

Web3Creative processes form data as a processor and uses additional service providers. According to the provider, the IP address and email address in particular may be transmitted to CleanTalk or Akismet for spam checks. Processing may also take place outside the EU and the European Economic Area, particularly in India and the USA. For such transfers to third countries, the Data Processing Agreement of Web3Forms provides for EU standard contractual clauses. It also lists the subprocessors used.

According to the Web3Forms privacy policy, form submissions are stored for a maximum of three years from submission and then deleted automatically, unless a shorter period applies depending on the plan or the data are deleted earlier. Messages received by us are subject to the deletion rules for contact enquiries described above. Further information can be found in the Web3Forms privacy policy.

Cookies and audience measurement

This website does not set its own analytics or marketing cookies and does not use embedded services to track users for advertising purposes. The website also does not access local browser storage for such purposes.

IONOS provides statistical analyses of website visits through WebAnalytics. According to IONOS, tracking and logging are enabled by default. WebAnalytics does not use cookies and anonymises IP addresses immediately after transmission. The analyses are used for statistical analysis and technical optimisation of the website. Where personal data are processed, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is to optimise our website technically. Further information can be found in the privacy information for IONOS WebAnalytics.

Fonts, images and external links

The Jost font and the images used on the website are delivered together with the website. Loading the font does not establish a connection to Google Fonts or any other external font provider.

Our location details link to Google Maps. No map is embedded. You only open Google’s external service when you click the link. Data processing there is subject to the Google privacy policy.

Other external links, for example to image sources or information provided by IONOS, also lead to third-party services. The respective operator is responsible for data processing on those destination websites.

Data security

We implement appropriate technical and organisational measures under Article 32 GDPR to protect personal data against loss, unauthorised access and unlawful processing. These measures are based on the risks of the respective processing and the state of the art.

When you access our website using HTTPS, data transmission between your browser and the web server is encrypted using TLS. You can recognise an encrypted connection by the address beginning with “https://” and your browser’s security indicators.

Ordinary email transmission is not necessarily encrypted end to end. Please only send particularly confidential information after agreeing a suitable transmission method with us. Complete protection against access by third parties cannot be guaranteed when communicating over the internet.

General retention and deletion

Unless a different retention period is specified in this privacy policy, we store personal data only for as long as necessary for the respective processing purpose. Once that purpose no longer applies, the data are deleted unless statutory retention obligations or other legal reasons require continued storage.

If data must continue to be retained, particularly under tax or commercial law, we restrict their use to the required retention purpose. The legal basis for complying with such statutory obligations is Article 6(1)(c) GDPR. Once the relevant periods expire, the data are deleted unless there is another legal reason for retention. Storage for the establishment, exercise or defence of legal claims remains possible to the extent necessary.

Your rights

Subject to the statutory requirements, you have the following rights:

• Access under Article 15 GDPR: You can obtain information about whether we process personal data about you, which data we process, for what purposes and to which recipients they are disclosed. You can also request a copy of your personal data.
• Rectification under Article 16 GDPR: You can request the correction of inaccurate data and the completion of incomplete data.
• Erasure under Article 17 GDPR: You can request the deletion of your data, for example when they are no longer necessary for the original purpose. Statutory retention obligations and other legal exceptions may prevent deletion.
• Restriction under Article 18 GDPR: You can request the restriction of processing, for example when you contest the accuracy of your data while that accuracy is being verified.
• Data portability under Article 20 GDPR: If processing is based on your consent or a contract and is carried out by automated means, you can receive the data you have provided in a structured, commonly used and machine-readable format. Where technically feasible, you can also request direct transmission to another controller.
• Objection under Article 21 GDPR: You can object to processing based on legitimate interests on grounds relating to your particular situation. Details can be found in the following section.

Where processing is based on your consent, you can withdraw that consent at any time with effect for the future under Article 7(3) GDPR. This does not affect the lawfulness of processing carried out before withdrawal. To exercise your rights, you can contact us using the contact details above.

We will inform you of the action taken without undue delay, generally within one month of receiving your request. For complex or numerous requests, this period may be extended by up to two further months. We will inform you of this and the reasons within the first month.

Requests are generally handled free of charge. For manifestly unfounded or excessive requests, we may charge a reasonable fee or refuse to act, subject to the conditions of Article 12(5) GDPR. If there are reasonable doubts about your identity, we may request additional information necessary to confirm it.

Right to object

If your data are processed on the basis of Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint

Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority, particularly in the Member State of your habitual residence, place of work or the place of the alleged infringement. The authority responsible for our registered office inFrankfurt am Mainis the Hessian Commissioner for Data Protection and Freedom of Information. Information about contact options and complaints can be found at datenschutz.hessen.de.

Provision of your data

Processing technical connection data is necessary to make the website available to you. Contacting us is voluntary; without the information necessary to handle your enquiry, we may be unable to answer it. We do not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.