Privacy
Thank you for visiting our website and your interest in our website.
This data protection declaration applies to all websites, applications and/or tools of EcoTube HOME & GARDEN GmbH in connection with the website at www.ecotube-home.de. EcoTube HOME & GARDEN GmbH, represented by the managing director Stefan Pyttlik, Schwanthaler Str. 12, 80336 München, Germany (hereinafter referred to as "EcoTube HOME & GARDEN GmbH" or "we" or "us") collects and processes your data as a controller.
The protection of your privacy is important to us. The data protection declaration listed here complies with the guidelines of the GDPR and the BDSG as well as the Telemedia Act. It is intended to inform about the nature, purpose and use of personal data by the website operator ecotube HOME & GARDEN GmbH.
Although our site is equipped with various security measures, it is not possible to guarantee complete protection of your data, since security gaps on the Internet cannot be excluded. If you have any concerns regarding the collection of your data, you can contact the data protection officer appointed by our company at the following e-mail address: datenschutz@ecotube-home.de
If you have any general questions or suggestions regarding data protection or general concerns, please contact us:
EcoTube HOME & GARDEN GmbH
Stefan Pyttlik
Schwanthaler Str. 12
80336 Munich
Tel: +49 (0) 89-693100496
Home Page: www.ecotube-home.de
Email: info@ecotube-home.de
When processing personal data, ecotube HOME & GARDEN GmbH observes the relevant legal provisions on data protection and data security in the relevant countries as well as internal data protection regulations.
Purpose and legal basis for the collection and processing of your personal data
We only collect and use personal data of our users to the extent that this is necessary for the provision of a functional website as well as the contents and services or if this is necessary due to the contact or use of our services, e.g. ordering or use of our shop. The collection and use of personal data of our users is only done on a regular basis with the consent of the user. An exception applies in cases where the processing of the data is absolutely necessary because of legal regulations or technical reasons.
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) lit. a EU General Data Protection Regulation (GDPR) as the legal basis for the processing of personal data.
The processing of personal data required for the fulfillment of a contract to which the data subject is a party shall be governed by Article 6(1) lit. b GDPR as legal basis. This also applies to processing operations which are necessary for carrying out pre-contractual measures.
Personal data will only be transmitted to third parties if there is a need within the scope of the contract. For example, third parties may be payment service providers or logistics companies. Further transmission of the data does not take place or only if you have expressly agreed to it.
Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR as legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR as the legal basis for processing. Our legitimate interest in the processing of the personal data of the data subject lies in the provision of a functional website.
Registration on this website
To use certain functions, you can register on our website. The transmitted data are used exclusively for the purpose of using the respective offer or service. Mandatory information requested during registration must be provided in full. Otherwise we will refuse the registration.
In case of important changes, for example for technical reasons, we will inform you by e-mail. The e-mail will be sent to the address specified when you registered.
The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a GDPR). A revocation of your already granted consent is possible at any time. For the revocation, an informal notification by e-mail is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.
We store the data collected during registration during the period you are registered on our website. Your data will be deleted if you cancel your registration. Legal retention periods remain unaffected.
Presentation of personal data collected and processed
When you use our website, technical data such as the
- IP address of your network,
- Date, time, time zone and
- Status of the requested file,
- information about the website you came to our site from,
- your browser type and
- the version of your operating system
will be send to us and stored.
This means that information of your used terminal is recorded as log files on a server.
Here too, the data collected serve only to improve our offer. The operator may only store, issue or subsequently access server log files for a longer period of time and check them if this is permitted within the legal framework (e.g. if illegal activities are suspected).
The data including the IP addresses of the user are also stored in the log files of our system. This data is not stored together with other personal data of the user.
The legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f GDPR. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
In the case of the storage of non-anonymized data in log files, these are usually deleted or alienated or irrevocably anonymized after 14 days, so that an assignment of the calling client is no longer possible.
If you provide us with personal information about this website, you must give your explicit consent. The data is only used for the specified purpose.
Deletion or restriction of the processing of personal data
We delete your personal data or restrict their processing as soon as they are no longer necessary for the purpose for which they were collected or otherwise processed.
This is usually the case as follows:
- Quotation data: 1 year (customer feedback),
- Contract documents: 10 years,
- IP data: 3 years (regular limitation),
- Legal matters: 6 years (§ 50 BRAO)
- Claims: 10 years
If there is a tax retention period (voucher data) for certain data processed for the processing of sales contracts, the retention period amounts to 6 or 10 years. During this time, the processing of the data is restricted. The obligation to keep records begins at the end of the calendar year in which the offer was made or the contract was fulfilled.
Storage may therefore also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. A restriction or deletion of the data takes place even if a storage period prescribed by the aforementioned standards expires, unless there is a necessity for further storage of the data for a conclusion of a contract or fulfillment of a contract.
Revocation of your consent to data processing
You can revoke your already given consent at any time. An informal e-mail notification is sufficient for the revocation. The legality of the data processing carried out before the revocation remains unaffected by the revocation.
Transmission of personal data
We transmit your data to processors involved in the processing, with whom we have concluded corresponding data protection agreements.
Your personal data will be disclosed to the following companies within the EU within the framework of the legal powers:
- Postal service providers, freight forwarders, shipping service providers
- IT service provider in the context of maintenance and software maintenance
- Service provider for credit checks, debt collection and dialogue marketing
- Google Inc. (www.google.de/settings/ads/onweb)
- PayPal (Europe) S.á.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
- Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden
- Sofort GmbH, Theresienhöhe 12, 80339 Munich
If your personal data is to be transmitted to a third country, this is always done in compliance with the GDPR regulations. When transmitting your personal data, Articles 44 to 49 GDPR and corresponding data protection agreements are taken into account or the EU Commission has made an adequacy decision for the respective target country. If a processor is located in a third country, the personal data will be transmitted at any time in compliance with the provisions of Art. 44 to 49 GDPR. A related addition will be made in the corresponding agreement on order processing.
Bank and payment details
Your bank and payment details (credit card details), which you enter when purchasing in the ecotube HOME & GARDEN GmbH online shop, are neither collected, processed nor stored in the ecotube HOME & GARDEN GmbH IT systems. The processing of payments takes place exclusively on EDP systems and is the technical and legal responsibility of our respective payment service providers. The following payment service providers are currently used by us for credit card and instant transfer processing:
PayPal
Our website allows payment via PayPal. The payment service provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If you pay with PayPal, the payment data you have entered will be transmitted to PayPal.
Your data is transmitted to PayPal on the basis of Art. 6 Paragraph 1 lit. a GDPR (consent) and Art. 6 Paragraph 1 lit. b GDPR (processing to fulfill a contract). You can revoke your already given consent at any time. Data processing operations in the past remain effective in the event of a revocation.
Klarna
Our website enables payment via Klarna. The payment service provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.
When paying with Klarna (Klarna checkout solution), Klarna collects various personal data from you. Details can be found in Klarna's data protection declaration at: https://www.klarna.com/de/datenschutz/.
Klarna uses cookies to optimize the Klarna checkout solution. This optimization represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. Cookies are small text files that your web browser saves on your device. Klarna cookies remain on your device until you delete them. Details on the use of Klarna cookies can be found at: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.
The transfer of your data to Klarna takes place on the basis of Art. 6 Paragraph 1 lit. a GDPR (consent) and Art. 6 Paragraph 1 lit. b GDPR (processing to fulfill a contract). You can revoke your already given consent at any time. Data processing operations in the past remain effective in the event of a revocation.
Instant bank transfer
Our website allows payment via "Sofortüberweisung." The payment service provider is Sofort GmbH, Theresienhöhe 12, 80339 Munich.
With the help of the "Sofortüberweisung" procedure, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin to meet our obligations.
When paying by “Sofortüberweisung”, your PIN and TAN are transmitted to Sofort GmbH. The payment provider logs into your online banking account, automatically checks your account balance and makes the transfer. An immediate confirmation of the transaction follows. Your sales, the credit line of your overdraft facility and the existence of other accounts and their stocks are also automatically checked after logging in.
In addition to PIN and TAN, the transmission to Sofort GmbH also includes payment data and personal data. Your personal data include your first and last name, address, telephone number (s), email address, IP address and any other data required for payment processing. This data transfer is necessary in order to establish your identity beyond any doubt and to prevent attempted fraud.
The transfer of your data to Sofort GmbH takes place on the basis of Art. 6 Paragraph 1 lit. a GDPR (consent) and Art. 6 Paragraph 1 lit. b GDPR (processing to fulfill a contract). You can revoke your already given consent at any time. Data processing operations in the past remain effective in the event of a revocation.
You can find details on payment with immediate transfer at: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.
Consent to forwarding the email address to postal service providers for delivery and shipment tracking
By confirming the data protection declaration in the online shop, you consent to your e-mail address being passed on to the postal service provider for tracking purposes. These use this to offer you the tracking of your order and to be able to keep you informed about the whereabouts of your ordered goods and the exact delivery time.
Contact by email or contact form
You can contact us on our website using the email address provided. In this case, the user's personal data transmitted with the email will be saved.
If you have given your consent, the legal basis for processing the data is Article 6 (1) (a) GDPR. You can revoke your consent at any time with future effect. An informal e-mail notification is sufficient for the revocation. The lawful processing carried out up to that point remains unaffected by the revocation.
With regard to the revocation of this consent, we refer to your rights set out in the further course of this data protection declaration.
In this context, the data will not be regularly passed on to third parties without your prior consent. The data will only be used to process the conversation in the context of your request.
The processing of the personal data from the establishment of contact by email serves us only to process the establishment of contact or follow-up questions. This is also where the necessary legitimate interest in processing the data lies.
The legal basis for the processing of the data that is transmitted in the course of sending an email is Article 6 (1) (f) GDPR. Our legitimate interest lies in answering your request.
If the aim of the email contact is to conclude a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR.
Data transmitted via the contact form will remain with us until you ask us to delete it, revoke your consent to storage or there is no longer any need to store data. Mandatory statutory provisions - in particular retention periods - remain unaffected.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified and no future inquiries or future correspondence are to be expected.
Google Analytics
Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Google Analytics uses "cookies." These are small text files that your web browser saves on your device and that enable website usage to be analyzed. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA.
Google Analytics cookies are set on the basis of Art. 6 Para. 1 lit.f GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, if necessary, advertising.
IP anonymization
We use Google Analytics in conjunction with the IP anonymization function. It ensures that Google shortens your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and abbreviates it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by Google Analytics is not merged with other Google data.
Browser plugin
The setting of cookies by your web browser can be prevented. However, this could limit some functions of our website. You can also prevent the collection of data relating to your website usage including your IP address and subsequent processing by Google. You can do this by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to our website: Deactivate Google Analytics.
You can find details on how user data is handled by Google Analytics in Google's data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de.
Order processing
In order to fully comply with the statutory data protection requirements, we have concluded an order processing contract with Google.
Demographic characteristics in Google Analytics
Our website uses the “demographic characteristics” function of Google Analytics. It can be used to create reports that contain statements on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. You can do this via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the section “Objection to data collection”.
Google AdWords and Google Conversion Tracking
Our website uses Google AdWords. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States.
AdWords is an online advertising program. We work with conversion tracking as part of the online advertising program. After clicking on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that your web browser stores on your device. Google AdWords cookies lose their validity after 30 days and are not used to personally identify users. Google and we can tell from the cookie that you clicked on an ad and were redirected to our website.
Every Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. Conversion cookies are used to create conversion statistics for AdWords customers who use conversion tracking. Adwords customers find out how many users clicked on their ad and were redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that enables users to be personally identified. If you do not want to participate in tracking, you can object to its use. Here the conversion cookie must be deactivated in the user settings of the browser. This means that there is no inclusion in the conversion tracking statistics.
“Conversion cookies” are saved on the basis of Article 6 (1) (f) GDPR. As a website operator, we have a legitimate interest in analyzing user behavior in order to optimize our website and our advertising.
You can find details on Google AdWords and Google Conversion Tracking in Google's privacy policy: https://www.google.de/policies/privacy/.
With a modern web browser you can monitor, restrict or prevent the setting of cookies. Deactivating cookies can limit the functionality of our website.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses an SSL or. TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the "https: //" address line of your browser and by the lock symbol in the browser line.
Designation of the responsible body
The responsible body for data processing on this website is:
EcoTube HOME & GARDEN GmbH
Stefan Pyttlik
Schwanthaler Str. 12
80336 Munich
The responsible body decides alone or jointly with others on the purposes and means of processing personal data (e.g. names, contact details, etc.).
Right to lodge a complaint with the competent supervisory authority
As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority with regard to data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
The supervisory authority responsible for EcoTube HOME & GARDEN GmbH is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
Online form available at https://www.lda.bayern.de/de/kontakt.html
Email: poststelle@lda.bayern.de
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. It is made available in a machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done if it is technically feasible.
Right to information, correction, blocking, deletion
According to the EU General Data Protection Regulation, you have the following rights:
If your personal data is processed, you have the right to receive information about the data stored about you (Art. 15 GDPR).
If incorrect personal data is processed, you have the right to correction (Art. 16 GDPR).
If the legal requirements are met, you can request the deletion or restriction of processing and object to processing (Articles 17, 18 and 21 GDPR).
If you request a restriction, it may be that the initiation or processing of the business transaction is no longer possible (e.g. the deletion of parts of the contact data, can prevent communication with you or prevent the conclusion of a contract).
If you have consented to the data processing or if there is a data processing contract and the data processing is carried out using automated procedures, you may have the right to data portability (Art. 20 GDPR).
You have the right to revoke your data protection declarations of consent at any time for the future. Withdrawing your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of withdrawal.
If we process your data on the basis of our predominantly legitimate interest, you can object to the storage of your personal data at any time. Your personal data will no longer be processed unless there are compelling legitimate interests that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
You have the right to free information about your stored personal data, the origin of the data, their recipients and the purpose of the data processing and, if necessary, the right to correct, block or delete this data at any time within the framework of the applicable legal provisions. You can contact us at any time using the contact options listed above if you have any further questions on the subject of personal data.
Data protection officer
On the subject of data protection, please contact the following contact:
Phone: +49 89 693 100 496
Email: datenschutz@ecotube-home.de
Change of data protection declaration
As the person responsible, we reserve the right to change the data protection declaration at any time with regard to applicable data protection regulations. The current status is March 2021.