Thank you for visiting our website and for your interest in our company, our services and our products. Transparency about data protection and data security for our website visitors is very important to us. We take the protection of your personal data very seriously in all our business processes. For your further visit to our website, we would like to inform you about when we store which data and how we use them – naturally taking into account the German Data Protection Regulation (DS-GVO) and the German Federal Data Protection Act.
1. Who is responsible for protecting your data?
epoq internet services GmbH, Willy-Brandt-Str. 3, in 76275 Ettlingen (company, us or we) is responsible for the processing and security of the data collected on this website.
In general, it is not necessary for you to provide personal data in order to use our website. However, for individual services it may be necessary in order for us to provide our services. For this purpose, we then collect, use and process personal data from you. Of course, this only takes place within the legal framework, insofar as this is necessary and you have consented to it.
2. What data do we store from you?
2.1 Anonymous data collection
When you access our website, our web servers automatically collect information of a general nature. This includes
- the type of web browser and the operating system used,
- the domain name of the Internet service provider,
- the IP address of the computer you are using,
- the website from which you visit us,
- the pages you visit on our site and the date and duration of your visit.
This is exclusively information that does not allow any conclusions to be drawn about your person. We or third parties commissioned by us evaluate this data only for statistical purposes and only in anonymous form to optimise our website, to increase user-friendliness, effectiveness and security.
We use so-called “cookies” in various places on our website. Cookies are small text files that are stored by the web browser on your computer or mobile device. Cookies do not harm your computer or contain viruses and are automatically deleted when they expire. Some cookies expire when you end your internet session, others are stored for a certain period of time.
- Internet Explorer
- Mozilla Firefox
- Google Chrome
- Adobe (plug-in for flash cookies)
2.3 Where and how do we collect and process your data?
In addition to the automatically collected data, we also process data that you provide to us voluntarily. We currently collect the following data using the tools listed:
General contact form: Name, email address, phone number, company, subject and your message so that we can contact you in case of questions or regarding information about your request.
Form for making appointments for trade fairs: Name, email address, company, phone, details of the desired date, the subject and your message so that we can contact you to coordinate the date.
Newsletter subscription form: Your email address, name, salutation and company so that we can send you the epoq newsletter you have ordered.
Form for subscribing to free shop optimisation tips: Your e-mail address so that we can send you the tips.
Form for downloading documents: Your e-mail address so that we can send you the requested documents and contact you regarding information on your request.
If you have given us your personal data when purchasing a service, we will inform you about similar products and services by e-mail. You can stop these notifications at any time and free of charge by clicking on a link in the relevant email or message (see point 9 for more information).
3. To whom do we make this data available?
The protection of your personal data is our first concern. Therefore, we store all information that you provide to us by entering it on our website on servers in Germany. Only the technically responsible departments within our company have access to the data in order to process your enquiries and requests. We will not sell, rent or otherwise make your data available to third parties. Personal data will only be transferred to state institutions and authorities within the framework of mandatory national legal provisions. Our employees are bound to the strictest secrecy and confidentiality, including data secrecy and telecommunications secrecy.
4 Which tools do we use to measure reach?
4.1 Google Analytics
You can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set which will prevent future collection of your data when visiting this website. You can find the link here.
4.2 Google Adwords Remarketing
4.3 Google AdWords conversion tracking
4.4 Facebook, Custom Audiences and Facebook marketing services
Within our website, we use the so-called “Facebook Pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are a resident of the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook is certified under the Privacy Shield agreement and thus offers a guarantee of compliance with European data protection law. With the help of the Facebook pixel, it is possible for Facebook to determine the visitors to our website as a target group for the display of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our offers or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “Custom Audiences”).
With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect. With the help of the Facebook pixel, we can also track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”). The Facebook pixel is directly integrated by Facebook when our website is accessed and can save a so-called cookie on your device. If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our website will be noted in your profile. The data collected about you is anonymous for us, so it does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook and for its own market research and advertising purposes. If we should transmit data to Facebook for matching purposes, this data is encrypted locally on the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of matching data that has also been encrypted by Facebook. Furthermore, when using the Facebook Pixel, we use the additional function “extended matching”, whereby data for the formation of target groups (“Custom Audiences” or “Look Alike Audiences”) are transmitted to Facebook in encrypted form.
We use marketing features on our website provided by HubSpot Inc. (“HubSpot Inc.”), 25 First Street, 2nd Floor, Cambridge, MA 02141, USA or HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland (collectively “HubSpot”), which allows us, with your consent, to create a user profile of you in order to serve personalised and interest-based ads on our website. We also use HubSpot to send individual, topic-related emails. However, this too only with your consent.
Through the integration of HubSpot, a connection to HubSpot’s servers is established when you visit our website, as soon as you call up content provided by HubSpot. HubSpot can assign this information (e.g. IP address, any data entered in forms) to your user profile, if one has already been created.
The use is for the purpose of individualised advertising via HubSpot. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. Furthermore, we have concluded an order processing contract with HubSpot. Insofar as the data is transferred to HubSpot Inc. in individual cases, this is done in accordance with Decision (EU) 2016/1250 (“EU-US Privacy Shield”). In addition, the order processing agreement contains EU standard data protection clauses pursuant to Art. 46 (2) (d) DSGVO to which HubSpot Inc. submits.
4.6 epoq Tracking
This website uses a tracking tool developed in-house. The information obtained from this is used to optimise the website.
The personal data (IP addresses) collected by epoq are transferred to German servers. The IP address transmitted by your browser is not merged with other data. Before this data is processed, the IP address is anonymised. The procedure is similar to that of Google Analytics – the last octet is deleted.
Furthermore, epoq uses so-called “cookies”, which are stored on your computer and which enable an analysis of the use of this website by visitors. The information thus obtained about your use of this website is transmitted to servers in Germany and Ireland.
Which social networks do we use?
We do not currently use any plugins from social networks.
6. epoq Newsletter
We use Mailchimp to send out our newsletter. Mailchimp belongs to “The Rocket Science Group”, which has submitted to the regulations of the EU-US Privacy Shield.We have satisfied ourselves that MailChimp has indeed complied with the self-certification according to EU-US Privacy Shield. MailChimp also publicly commits itself to comply with these principles. The current certification is up to date according to our audit.
A data transfer to this newsletter provider in the USA thus takes place in accordance with the legal permissibility regulations pursuant to Article 45 DS-GVO in conjunction with Article 46 (5) S. of the EU Privacy Shield. Art. 46 (5) p. 2 DS-GVO). The GDPR provides for the continued application of the adequacy decisions already adopted. For the EU-US Privacy Shield, the Commission has determined the adequacy of the level of data protection (C(2016) 4176 final). The email address is stored for the sole purpose of sending the owner of the email address an email in which the owner can confirm membership of the email list (“double opt-in”). Once the email address has been confirmed, it is stored permanently with the list provider until the email address is deleted by the owner of the email address or by us as the list operator.
7. How do we protect your data?
To ensure the security of your data on our website and systems, we use appropriate technical and organisational measures to protect your data from loss, destruction, unauthorised access and manipulation.
8. Which supervisory authority is responsible for us?
The supervisory authority responsible for data protection for us is the State Data Protection Commissioner in Baden-Württemberg.
9. What rights of access and objection do you have?
Upon request, we will be happy to inform you in writing whether and what personal data we have stored about you. If, despite our constant efforts to ensure that your data is up to date and correct, we have stored incorrect information, we will be happy to correct your data. Under certain conditions, you also have the right to block and delete your personal data stored with us.If you generally do not wish to receive any advertising information and offers, either by post, by e-mail, by SMS, by fax or by telephone, or if you wish to object to any consent you have given, you can also write to us or send us an e-mail (firstname.lastname@example.org) at any time. If we have doubts about your identity, we may ask you to send us clarifying information (e.g. a blackened copy of your identity card with your first and last name, address and date of birth).
Our data protection declaration is regularly revised and updated in order to comply with the applicable legal data protection provisions.Last update: 16.08.2018
11. Duty to inform website visitors according to Art. 13 DS-GVO
1. Name and contact details of the data protection officer (Art. 13 para. 1 b DS-GVO)
For all questions about the processing of your personal data in our company, suggestions or complaints, you are welcome to contact our data protection officer. Please send an e-mail or a postal message to the above addresses:
personal assumption of the function by Mr. Thorsten Jordan
2. Purpose and legal basis of data processing (Art. 13 para. 1 c DS-GVO)
Processing and handling of contact and appointment requests (Art. 6 para. 1 f DS-GVO*)
Handling and processing of newsletter subscription requests (Art. 6 para. 1 f DS-GVO*)
Handling and processing of support requests (Art. 6 para. 1 f DS-GVO*)
Technical operation of the website (Art. 6 para. 1 f DS-GVO*)
Optimisation of the website offer by evaluating website usage data (Art. 6 para. 1 f DS-GVO*)
3. Interests of the data controller in weighing up interests (Art. 13 para. 1 d DS-GVO)*
Assertion of legal claims and defence in legal disputes
Ensuring IT security and the IT operation of the company
Prevention of criminal offences
Measures for business management and further development of services and products
4. Recipients or categories of recipients of the personal data (Art. 13 para. 1 e DS-GVO)
Plugin manufacturers, reach measurement providers, hosting providers.
5. Transfer to third countries (Art. 13 para. 1 f DS-GVO)
There is a transfer of data to the USA.
6. Storage period in accordance with statutory retention obligations (Art. 13 para. 2 a DS-GVO)
As a rule, personal data is deleted within ten years of the end of the contractual relationship or earlier if a prospective customer does not become a customer or if the prospective customer himself initiates deletion.
7 Right to information, correction, deletion, restriction, data portability and objection (Art. 13 para. 2 b DS-GVO)
As a data subject, you have the right to information, correction and deletion of your data and to restriction of processing, as well as a right to data portability at any time. To do so, please contact the data controller using the contact details provided.
8. Right of objection (Art. 21. para. 1 DS-GVO)
Insofar as the processing of your data is carried out to protect legitimate interests, you have the right to object to this processing at any time by contacting us using the contact details provided, if reasons arise from your particular situation that conflict with this data processing. We will then stop this processing unless it serves overriding interests worthy of protection on our part.
7. Right of revocation (Art. 13. para. 2 c DS-GVO)
If you have consented to the processing of your data, you have the right to revoke this consent at any time for the future. The lawfulness of the processing until the revocation is not affected by this. To do so, please contact the responsible office using the contact details provided.
9. Right of complaint (Art. 13 para. 2 d DS-GVO)
As a data subject, you may contact the competent State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg at any time in the event of a complaint.
10. Existence of a necessity to provide personal data (Art. 13 para. 2 e DS-GVO)
The collected data are necessary for the technical operation of the website, the processing of contact and appointment requests for newsletter subscription requests and support requests. The optimisation of our website by means of reach measurement tools is based on legitimate interests.