Website data protection notice

Data protection information
The following notice provides an overview of the personal data that ELTEN GmbH (“ELTEN” or “we”) collects when you visit our website, the purposes for which we collect them, and how we will use them.

The legal basis for our processing
Article 6(1)(a) of the EU General Data Protection Regulation (“GDPR”) serves as the legal basis to the extent that we obtain your consent to process your personal data.
Article 6(1)(b) GDPR serves as the legal basis to the extent that our processing of your personal data is necessary for the performance of a contract to which you are party. This also applies to processing which is necessary in order to take steps at your request prior to entering a contract.
Article 6(1)(c) GDPR serves as the legal basis to the extent that our processing of your personal data is necessary to fulfil a legal obligation to which we are subject.
Article 6(1)(f) GDPR serves as the legal basis to the extent that our processing of your personal data is necessary for the purposes of ELTEN’s legitimate interests.

Erasure of data / storage period
We will erase your personal data as soon as the purpose for which they were stored no longer applies. We may also store your personal data if the European or national legislator has provided for this in EU regulations or any other laws or regulations to which we are subject. We will also erase your personal data when a storage period prescribed by the above-mentioned standards expires unless we need to continue storing the data for the purpose of concluding or performing a contract.

Creation of log files
Each time you access ELTEN’s website, we will automatically and temporarily store information transmitted by your browser. We will record the browser type and version, the operating system used, the name and URL of the file which is accessed, the reference URL (the previously visited page), the accessing computer’s host name (its IP address), and the date and time of the server enquiry in the log file created for this purpose. We will not merge these data with other data sources. Our storage and processing of these data serve exclusively for system security and the optimisation of our Internet offering. Our legal basis for this is Article 6(1)(f) GDPR. Our legitimate interests are to be able to offer you an optimised Internet offering and to secure the system. We will not transmit your personal data to any third parties and will erase them after seven days.

Making contact
Our website will enable you to inform yourself about various questions concerning ELTEN, or to contact us. You can contact us via the contact form, by phone, or by arranging a call back. We will collect data such as your name, e-mail address, and telephone number when you contact us. We will store your details in our customer relationship management (“CRM”) system or in a comparable enquiry system. Or you can contact us via the e-mail address we have provided. In this case, we will store any personal data which you transmit with your e-mail.

We will process these data in accordance with Article 6(1)(b) GDPR on the basis that they are necessary for the performance of the service we have offered. If your contact with us does not concern either steps at your request prior to entering a contract or a contract which you have already concluded with us, we will process your personal data in accordance with Article 6(1)(f) GDPR based on our legitimate interest in processing your request via this channel. We will erase your data once the purpose has been fulfilled unless we still require them in order to perform a contract or for steps at your request prior to entering a contract.

Your personal data will not be transferred to recipients in non-EU countries. Your rights against us are set out in the section below entitled “Rights of the data subject”.

If your enquiry relates to the activities of any of our subsidiaries or associated or managing companies, and this is necessary in order to process your enquiry efficiently, we may transfer your data to the company concerned. The legal basis for this is Article 6(1)(f), read in conjunction with Recital 48, GDPR as we have a legitimate interest in the transfer for internal administrative purposes.

Newsletters
We distribute newsletters, e-mails, and other electronic notifications containing advertising information (“Newsletters”). The Newsletters contain information about our products, offers, and promotions and about our company. You only need to provide your e-mail address in order to subscribe to the Newsletters. You can therefore generally receive the newsletter under a pseudonym. However, we ask if you wish to enter a name so that we can personalise the Newsletters.
We use the Mailchimp marketing platform operated by the US vendor, Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA, to distribute the Newsletters. You can read the Mailchimp marketing platform’s privacy policy here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp has self-certified under the Privacy Shield Principles and thereby guarantees that it will comply with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). We have appointed this marketing platform pursuant to a processing agreement in accordance with Article 28(3), first sentence, GDPR. The platform uses your data to optimise its own service, e.g. to optimise its distribution and presentation of the Newsletters technically and for statistical purposes. However, it does not use our Newsletter recipients’ data to write to them itself or to pass the data on to third parties.
It will use a procedure known as “double opt-in” to register you for our Newsletters. This means that, after you have registered, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary to prevent anyone from using other people’s e-mail addresses to register. We log registrations for the Newsletters so that we can prove that the registration process complies with the legal requirements. This includes storing your registration and confirmation times and your IP address. Any changes to data stored by the marketing platform are also logged.
The Newsletters contain a so-called “web beacon”, i.e. a pixel-sized file which is retrieved from the marketing platform’s server when you open a Newsletter. This retrieval initially collects technical information, including about your browser and system, your IP address, and the time of the retrieval. We use this information to improve our services technically, using technical data and data on target groups and their reading behaviour, based on their retrieval locations (which can be determined using their IP addresses) and access times. We also use statistical surveys to determine whether Newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be linked to individual Newsletter recipients. However, neither we nor the marketing platform have any intention to observe individual users. We instead use the surveys to analyse our users’ reading habits and to adapt our content to them, or to distribute different content according to our users’ interests.
We distribute Newsletters, perform statistical surveys and analyses, and log the registration process based on your consent in accordance with Article 6(1)(a) GDPR. We obtain such consent, with reference to this data protection notice, during the registration process. You can withdraw your consent at any time. It is unfortunately not possible to withdraw distribution through the marketing platform and the statistical analysis separately. You will find a link to withdraw your subscription to the Newsletters at the end of each Newsletter. Withdrawal of your consent will not affect the lawfulness of any processing that has taken place based on your consent before its withdrawal. If you withdraw your declaration of consent, your data will be erased unless there is a need to continue to store it, e.g. to meet legal requirements. Other rights available to you are set out in the section below entitled “Rights of the data subject”.

Protected dealer area
Authorised dealers can gain access to a protected area on the ELTEN website, in they are provided with product images, additional product information, and data sheets. Data from your input screen will be transmitted to us and stored if you register for the protected dealer area. The data will comprise your freely selected username, surname, e-mail address, date of birth, street, postcode, and location. Collection of these data serves to identify you as a dealer and to enable your access to the protected dealer area. Our processing of these data is based on our legitimate interests in accordance with Article 6(1)(f) GDPR.

Job applications
You can apply for an advertised position on our website. You will need to provide personal data in the form of application documents which you can then e-mail to our human resources department. We will need these data to carry out the application procedure. We will process these data for the purposes of an employment relationship in accordance with section 26 (1), first sentence, of the German Federal Data Protection Law (Bundesdatenschutzgesetz, BDSG).

We will erase the data no later than six months after completion of the application procedure unless we still require it in order to carry out the employment relationship.

Other rights available to you are set out in the section below entitled “Rights of the data subject”.

Registration for seminars and other events
You can register on our website for basic, compact, advanced, and expert seminars for the technical trade or specialised trade for craftsmen, seminars for orthopaedic shoemakers and technicians, seminars for industry safety experts from the PPE sector, and other events. We will need contact details for yourself or the person to be registered as the seminar participant. If you want to book hotel accommodation through us, we will need the number of participants and their arrival and departure dates and will transmit these data to the relevant hotel so that it can make a reservation. We will process the data in accordance with Article 6(1)(b) GDPR on the basis that the data are necessary for the performance of the service we have offered. We will delete your personal data immediately after fulfilment of the purpose or after expiry of any applicable statutory retention periods, e.g. under the German Commercial Code (Handelsgesetzbuch, HGB) or Tax Code (Abgabenordnung, AO). If your enquiry relates to the activities of any of our subsidiaries or associated or managing companies, and this is necessary in order to process your enquiry efficiently, we may transfer your data to the company concerned. The legal basis for this is Article 6(1)(f), read in conjunction with Recital 48, GDPR as we have a legitimate interest in the transfer for internal administrative purposes.

Other rights available to you are set out in the section below entitled “Rights of the data subject”.

Cookies
Our website uses so-called “cookies” in several places. Cookies are small text files that are stored on your computer and saved by your browser. We use them to determine the frequency of use and the number of users of our website, so that we can make our website presence more user-friendly and effective. We use so-called “session cookies”, which are only stored while you are using the website and are then automatically erased, and “persistent cookies”. A persistent cookie’s content is limited to an identification number to record information about users who repeatedly access a website. Such cookies are designed to recognise you as a user and, if applicable, to offer you optimised user access.

Cookies do not contain viruses and will not damage your computer. You can prevent cookies from being stored by setting your browser preferences accordingly. If you do not accept cookies, this may restrict your use of some functions on our website.

Session cookies:
We need to use session cookies in order to provide you access to our website. This represents a legitimate interest for us. The legal basis for our processing of your personal data using session cookies is Article 6(1)(f) GDPR. You can object to our use of session cookies, but please note that we cannot offer some functions on our website without cookies. We will only store your personal data for the duration of your use of our website and will then erase it. Other rights available to you are set out in the section below entitled “Rights of the data subject”.

Persistent cookies:
Persistent cookies are automatically erased after a predetermined period of time, which may vary depending on the cookie. You can erase the cookies at any time in your browser’s security settings. Using cookies enables us to track your user behaviour and improve our service to you. They should also enable you to surf our website in an optimised way. Persistent cookies can be distinguished according to whether they are technically necessary or not. When they are technically necessary, their legal basis is Article 6(1)(f) GDPR. Our use of cookies which are not technically necessary is subject to your consent. These cookies are only set when you have actively given your consent and the legal basis for our processing will then be Article 6(1)(a) GDPR. You can withdraw your consent at any time. Withdrawal of your consent will not affect the lawfulness of any processing that has taken place based on your consent before its withdrawal. You can set your Internet browser so that our cookies cannot be stored on your device or so that cookies already stored are erased. If you do not accept cookies, this may restrict your use of some functions on our website.

With your consent, we also integrate cookies from third-party providers. In this case, the corresponding data packages from third parties are stored in your browser or transmitted to them. You can also generally prevent the use of third-party cookies by adjusting your browser settings accordingly. The legal basis for our processing of your personal data using third-party cookies is Article 6(1)(a) GDPR. You can also withdraw your consent in this case at any time. Withdrawal of your consent will not affect the lawfulness of any processing that has taken place based on your consent before its withdrawal.

Other rights available to you are set out in the section below entitled “Rights of the data subject”.

You can access our cookie banner here to change your last settings:
cookie banner settings

Performance & analytics cookies:
Tracking cookies ensure that companies can use tools, including optimisation tools, to analyse user behaviour on their websites. The aim of these tracking cookies is therefore web analysis or A/B testing to optimise campaigns or user experience.

We use the following performance & analytics cookies:

Google Analytics
Our website uses Google Analytics, a web analytics service offered by Google LLC from California, USA. Google Analytics uses cookies which are stored on your computer to enable us to analyse your use of our website. The information generated by the cookies about your use of our website is usually transferred to a Google server in the USA and stored there. We use the “anonymizeIp” code extension to activate IP anonymisation on our website. By using this extension, your IP address will be shortened by Google within member states of the European Union and other countries which are parties to the Agreement on the European Economic Area.

Google will use this information exclusively on our behalf for the following purposes: to evaluate your use of the website, to compile reports on website activities, and to provide further services to the website operator in connection with use of the website and the Internet. The shortened IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google data.

The legal basis for this processing will be your consent in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time, and we will then erase your personal data immediately. Withdrawal of your consent will not affect the lawfulness of any processing that has taken place based on your consent before its withdrawal. Other rights available to you are set out in the section below entitled “Rights of the data subject”.

Further information is available in Google’s data protection information at: https://policies.google.com/privacy.

Google Fonts
Our website uses Google Fonts, a service offered by Google LLC (“Google”) from California, USA to ensure uniform representation of fonts. When you open a page, your browser will load the required Google fonts into your browser cache to display texts and fonts correctly. Your browser will connect to our servers, on which the Google fonts are stored. This will not result in your IP address or the address of the page you have opened being transmitted to Google.

We use Google Fonts in the interests of a uniform and attractive presentation of our online offerings. The legal basis for this processing will be your consent in accordance with Article 6(1)(a) GDPR. You have the right to object to this processing of your data. Other rights available to you are set out in the section below entitled “Rights of the data subject”.

Further information on Google Fonts can be found at: https://developers.google.com/fonts/faq and in the Google data protection notice at https://www.google.com/policies/privacy/.

Google Maps
This website uses Google Maps to display interactive maps and to provide directions. Google Maps is a map service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA. Using Google Maps will result in information about your use of this website, including your IP address and the start address you enter in the route planning function, being transmitted to Google in the USA.

We use Google Maps for the purpose of providing directions. The legal basis for this processing will be your consent in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time, and we will then erase your personal data immediately. Withdrawal of your consent will not affect the lawfulness of any processing that has taken place based on your consent before its withdrawal. Other rights available to you are set out in the section below entitled “Rights of the data subject”.

Further information about Google Maps is available at https://cloud.google.com/maps-platform/ and in the Google data protection notice: https://www.google.com/policies/privacy/.

Matomo
Our website uses the Matomo web analysis service provided by InnoCraft Ltd. from New Zealand. Matomo is an open source software for statistical analysis of visitor access. We use cookies for this purpose. The cookies will generate information about your use of our website, and we will collect, store, and process this information on our server in Germany and will not transfer it to any third parties. Your IP address will be automatically anonymised by making parts of it unrecognisable.

The legal basis for this processing will be your consent in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time. Withdrawal of your consent will not affect the lawfulness of any processing that has taken place based on your consent before its withdrawal. Other rights available to you are set out in the section below entitled “Rights of the data subject”.

Further information about InnoCraft Ltd. and Matomo is available at https://www.innocraft.com/#aboutus.

Marketing cookies:
Marketing cookies are generally third-party cookies which are used to identify users across different websites with the aim of delivering advertising which is relevant to them.

We use the following marketing cookies:

DoubleClick by Google
Our website uses the DoubleClick by Google online marketing tool. DoubleClick uses cookies to show advertisements that are relevant to users, to improve campaign performance reports, and to prevent users from seeing the same advertisements several times. Google uses a cookie ID to track which advertisements are running in which browser and can thereby stop them from being shown more than once. DoubleClick may also use cookie IDs to track so-called “conversions” related to advertisement requests. An example is when a user sees a DoubleClick advertisement and later visits the advertiser’s website using the same browser and buys something.

Your browser will automatically establish a direct connection with the Google server, due to the marketing tools used. We have no influence on the scope and further use of the data collected by Google using these tools and are therefore providing this information to the best of our knowledge. Through its integration of DoubleClick, Google will receive information that you have viewed a part of our website or have clicked on an advertisement from us. If you are registered with one of Google’s services, Google will be able to link the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and store your IP address.

The legal basis for this processing will be your consent in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time, and we will then erase your personal data immediately. Withdrawal of your consent will not affect the lawfulness of any processing that has taken place based on your consent before its withdrawal. Other rights available to you are set out in the section below entitled “Rights of the data subject”.

Further information on DoubleClick by Google is available at https://www.google.de/doubleclick and http://support.google.com/adsense/answer/2839090, and on data protection at Google in general at https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

Security
ELTEN cannot guarantee the security of data transmission on the Internet. Since messages via e-mail are not encrypted, we cannot exclude the possibility of third parties gaining knowledge of them. We therefore recommend that you send confidential information exclusively by post.

Controller
The controller within the meaning of the GDPR is:

ELTEN GmbH
Ostwall 7 – 13
47589 Uedem
E-mail: datenschutz@elten.com

Rights of the data subject
If your personal data are processed, you will be a data subject within the meaning of the GDPR and will be entitled to the rights against us which are described below. In principle, you should address any demand to the above-mentioned controller.

Access:
You have the right at any time to receive from us free access to and confirmation about any stored personal data concerning you and a copy of such data.

Rectification:
You have the right of rectification and/or completion if personal data concerning you are inaccurate or incomplete.

Restriction of processing:
You have the right to demand a restriction of processing where one of the following applies:
You contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data.
The processing is unlawful, and you oppose erasure of the personal data and request restriction of their use instead.
We no longer need the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defence of legal claims.
You have objected to processing pursuant to Article 21(1) pending verification whether our legitimate grounds override yours.

Erasure:
You have the right to have personal data concerning you erased immediately if one of the following reasons applies and insofar as the processing is not necessary:
The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
You withdraw the consent on which the processing was based and there is no other legal ground for the processing.
You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
The personal data have been unlawfully processed.
The personal data must be erased for compliance with a legal obligation in EU law or a member state law to which we are subject.
The personal data have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

Data portability:
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us. In exercising this right, you also have the right to have the personal data transmitted directly from us to another controller, where technically feasible and provided that the freedoms and rights of other persons are not affected.

Right to object:
You have the right to object at any time to processing of personal data concerning you which is carried out “only” based on the legitimate interests of ourselves or third parties (in accordance with Article 6(1)(f) GDPR). In the event of an objection, we will cease to process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or unless the processing serves the establishment, exercise or defence of legal claims.

Withdrawal of consent:
You have the right to withdraw your declaration of consent under data protection law at any time. Withdrawal of your consent will not affect the lawfulness of any processing that has taken place based on your consent before its withdrawal.

To exercise your rights, please contact the above-mentioned controller, as this is also where we will put your rights into practice. However, you can also contact our data protection officer, especially if your request needs a higher level of confidentiality:
The ELTEN GmbH data protection officer
c/o migosens GmbH
Wiesenstr. 35
45473 Mülheim an der Ruhr

Tel: +49 (0) 208-99395110
Fax: +49 (0) 208-99395119

dsb-elten@migosens.net

Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence or place of work, or of the place of the alleged infringement, if you consider that any processing of personal data relating to you infringes the GDPR.

Our presence in social networks
Elten GmbH maintains publicly accessible professional company profiles on various social networks. We use these profiles to publish and distribute our company’s content, offers, and product recommendations and they help us to promote direct communication with our customers and other interested people.
Using any of these networks will trigger several data processing procedures. The data will be processed even if you do not yourself have a profile on this network. If you visit one of our profiles, your personal data will be processed and possibly stored not only by us but also by the operator of the relevant network. The personal data may include your name, age, e-mail address, photographs, and other information which you have voluntarily shared in the networks, as well as information about your user behaviour and your interactions with the contents of the relevant profile. Your IP address may also be collected under certain circumstances. You are not obliged to provide us with your personal data in order to visit our company profiles. However, this may be necessary if you wish to use individual functionalities on our profiles (such as commenting on articles or contacting us).

We have no influence over any data processing on the part of operators which may be triggered by your visits to social networks, and you should note that such processing may differ between individual networks and that we may not be able to trace it (e.g. the setting of cookies). Please see the individual data protection declarations made by the operators of the social networks for further information regarding their collection and storage of your personal data and the purpose, type, and scope of their processing of such data. These are available as follows:
The data policy for Facebook, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, is available at: https://www.facebook.com/policy.php
The data policy for Instagram, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, is available at: https://help.instagram.com/519522125107875
The privacy policy for YouTube, which is operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is available at: https://policies.google.com/privacy?hl=en
The privacy policy for Xing, which is operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, is available at: https://privacy.xing.com/en/privacy-policy
The privacy policy for LinkedIn, which is operated by LinkedIn Ireland Limited Company, Wilton Place, Dublin 2, Ireland, is available at: https://www.linkedin.com/legal/privacy-policy
The privacy policy for Twitter, which is operated by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103 USA, is available at: https://twitter.com/en/privacy

If you use our presence in social networks to contact us (e.g. through private messages, commenting on or sharing contributions or reactions to them), we will process the data you provide us solely for the purpose of contacting you and will not merge it with any other data which is available to us. The legal basis for our collecting this data will therefore be Article 6(1)(b) GDPR. If your contact with us does not concern either steps at your request prior to entering a contract or a contract which you have already concluded with us, we will process your personal data in accordance with Article 6(1)(f) GDPR based on our legitimate interest in processing your request via this channel.

We will erase your personal data as soon as the purpose for which they were stored no longer applies or you require us to erase them. We may also store your personal data if the European or national legislator has provided for this in EU regulations or any other laws or regulations to which we are subject. We will also erase your personal data when a storage period prescribed by the above-mentioned standards expires unless we need to continue storing the data for the purpose of concluding or performing a contract. Please refer to the data protection notices mentioned above for information as to how long the various social network operators will store your personal data.

Further information about Facebook and Instagram:
The Facebook and Instagram social networks are both operated by Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). We are jointly responsible with Facebook in accordance with Article 26 GDPR for data processing on the Facebook and Instagram fan pages using Facebook’s Page Insights service. We use statistics provided by Facebook to make our contributions more attractive and effective. For example, we use statistics regarding distribution by age and gender to improve our targeting, and statistics regarding users’ preferred visiting times to improve the timing of our contributions. Information about the types of devices used by the visitors enables us to adapt the look and design of our contributions to their devices. This data processing is based on our legitimate interests in accordance with Article 6(1)(f) GDPR. You can object to this data processing on the part of Facebook at any time by ceasing to subscribe to our Facebook page: by selecting the “Unlike this page” and/or “Unfollow this page” functions, you will release your user profile’s connection to our fan page.

Information about your ability to object to the above-mentioned data processing procedures is available here:
https://www.facebook.com/settings?tab=ads
and here:
https://www.youronlinechoices.com

Information about our agreement with Facebook is available at: https://www.facebook.com/legal/terms/page_controller_addendum.
A summary of this agreement and further information about Facebook’s Page Insights service are available here:
https://www.facebook.com/legal/terms/information_about_page_insights_data