Privacy policy

1. Data protection at a glance

General information

The following information provides a brief overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. Detailed information about data protection can be found in the privacy policy below.

Data collection on this website

Who is responsible for collecting data on this website?

Data on this website is processed by the website operator. Their contact details are provided in the “Information about the controller” section of this privacy policy.

How do we collect your data?

Some data is collected when you provide it to us, for example by entering information in a contact form.

Other data is collected by our IT systems automatically or with your consent when you visit the website. This is primarily technical data, such as your browser, operating system or the time you access a page. It is collected automatically when you enter this website.

What do we use your data for?

Some data is collected to ensure the website operates correctly. Other data may be used to analyse how you use the website.

What rights do you have regarding your data?

You have the right to obtain information free of charge at any time about the origin, recipients and purpose of your stored personal data. You also have the right to request rectification or erasure. If you have consented to data processing, you may withdraw that consent at any time with future effect. Under certain circumstances, you also have the right to request restriction of processing. You additionally have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time about these rights or any other data protection questions.

Analytics tools and third-party tools

When you visit this website, your browsing behaviour may be analysed statistically, primarily using analytics software.

Detailed information about this software is provided in the privacy policy below.

2. Hosting and content delivery networks (CDNs)

External hosting

This website is hosted by an external service provider. Personal data collected on this website is stored on the provider’s servers. This may include IP addresses, contact enquiries, metadata and communication data, contract data, contact details, names, website access records and other data generated through a website.

We use this hosting provider to fulfil contracts with potential and existing customers (Article 6(1)(b) GDPR) and in the interests of providing our online services securely, quickly and efficiently through a professional provider (Article 6(1)(f) GDPR).

Our hosting provider processes your data only to the extent necessary to fulfil its service obligations and follows our instructions regarding that data.

We use the following hosting provider:

ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68
02742 Friedersdorf

Data processing agreement

We have concluded a data processing agreement with our hosting provider to ensure data is processed in accordance with data protection requirements.

3. General information and mandatory disclosures

Privacy policy

The operators of this website take the protection of your personal data very seriously. We treat it confidentially and in accordance with statutory data protection requirements and this privacy policy.

Various personal data is collected when you use this website. Personal data is information that can identify you personally. This privacy policy explains what data we collect, what we use it for, and how and why it is processed.

Please note that transmitting data over the internet, for example by email, may involve security vulnerabilities. Complete protection against access by third parties is not possible.

Information about the controller

The controller responsible for data processing on this website is:

KOCI Elektromaschinen GbR
Zittauer Strasse 12
02796 Kurort Jonsdorf
+49 035844 764400
info@e-koci.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names or email addresses.

Retention period

Unless this privacy policy specifies a different retention period, we retain your personal data until the purpose of processing no longer applies. If you make a valid erasure request or withdraw consent to processing, your data will be deleted unless we have other legally permissible grounds for retaining it, such as tax or commercial retention obligations. In that case, deletion takes place once those grounds cease to apply.

Information about data transfers to the USA

Our website includes tools from companies based in the USA. When these tools are active, your personal data may be transferred to those companies’ US servers. Please note that the USA is not considered a safe third country under EU data protection law. US companies are required to disclose personal data to security authorities without affected individuals being able to take legal action against this. It therefore cannot be ruled out that US authorities, such as intelligence services, may process, analyse and permanently store data held on US servers for surveillance purposes. We have no control over these processing activities.

Withdrawal of consent to data processing

Many processing operations require your express consent. You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Right to object in particular circumstances and to direct marketing (Article 21 GDPR)

Where processing is based on Article 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data, including profiling based on those provisions. The applicable legal basis is stated in this privacy policy. If you object, we will no longer process the personal data concerned unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or processing is necessary for establishing, exercising or defending legal claims (objection under Article 21(1) GDPR).

Where personal data is processed for direct marketing, you have the right to object at any time to processing for that purpose, including related profiling. If you object, your personal data will no longer be used for direct marketing (objection under Article 21(2) GDPR).

Right to complain to the competent supervisory authority

If the GDPR is infringed, data subjects have the right to complain to a supervisory authority, particularly in the Member State of their habitual residence, place of work or the alleged infringement. This right is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive data we process automatically on the basis of your consent or a contract in a commonly used, machine-readable format, or to have it provided to a third party. If you request direct transfer to another controller, this will take place only where technically feasible.

SSL or TLS encryption

This website uses SSL or TLS encryption for security and to protect the transmission of confidential content, such as orders or enquiries sent to us as the website operator. You can recognise an encrypted connection by the browser address changing from “http://” to “https://” and by the padlock symbol in the address bar.

When SSL or TLS encryption is active, the data you send us cannot be read by third parties.

Access, erasure and rectification

Under applicable law, you have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of processing, as well as a right to rectification or erasure where applicable. You may contact us at any time about this or other questions concerning personal data.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data. You may contact us at any time to do so. This right applies in the following cases:

  • If you contest the accuracy of personal data we hold, we usually need time to verify it. During this verification period, you have the right to request restriction of processing.
  • If processing was or is unlawful, you may request restriction instead of erasure.
  • If we no longer need your personal data but you require it to establish, exercise or defend legal claims, you may request restriction instead of erasure.
  • If you have objected under Article 21(1) GDPR, your interests must be weighed against ours. Until it is established whose interests prevail, you may request restriction of processing.

Where processing is restricted, your data may, apart from storage, be processed only with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

Data collection on this website

Cookies

You can manage your [borlabs-cookie type=”btn-cookie-preference” title=”» Cookie settings” element=”link”/] here.

Our website uses cookies. Cookies are small text files that do not harm your device. They are stored either temporarily for a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted after your visit. Persistent cookies remain until you delete them or your browser removes them automatically.

Third-party cookies may also be stored on your device when you visit our website. They enable us or you to use certain services provided by third parties, such as payment processing.

Cookies have different functions. Many are technically necessary because certain website functions would otherwise not work, such as shopping baskets or video playback. Others are used to analyse user behaviour or display advertising.

Cookies required for electronic communications (necessary cookies), for certain functions you request (functional cookies, such as shopping baskets), or for website optimisation (such as audience measurement) are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is stated. The website operator has a legitimate interest in storing cookies to provide technically reliable and optimised services. Where consent is requested, the relevant cookies are stored solely on that basis (Article 6(1)(a) GDPR); consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set, allow them only in individual cases, reject certain cookies or all cookies, and delete cookies automatically when the browser closes. Disabling cookies may restrict this website’s functionality.

Where third-party cookies or analytics cookies are used, we will inform you separately in this privacy policy and request consent where applicable.

Cookie consent with Borlabs Cookie

Our website uses Borlabs Cookie consent technology to obtain and document your consent to storing certain cookies in your browser in accordance with data protection requirements. The provider is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (referred to below as Borlabs).

When you visit our website, a Borlabs cookie is stored in your browser recording the consent you have given or withdrawn. This information is not passed on to the Borlabs Cookie provider.

The collected data is retained until you request deletion, delete the Borlabs cookie yourself, or the purpose of storage no longer applies. Mandatory statutory retention periods remain unaffected. Details of Borlabs Cookie’s processing are available at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

Borlabs Cookie consent technology is used to obtain legally required consent for cookies. The legal basis is Article 6(1), first sentence, point (c) GDPR.

Server log files

The website provider automatically collects and stores information in server log files that your browser transmits to us. This includes:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not combined with other data sources.

The legal basis for collecting this data is Article 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring the technically correct presentation and optimisation of the website, which requires server log files.

Contact form

If you send an enquiry using the contact form, we store the information you provide, including contact details, to process the enquiry and any follow-up questions. We do not pass this information on without your consent.

Processing is based on Article 6(1)(b) GDPR if your enquiry relates to fulfilling a contract or taking pre-contractual steps. In other cases, it is based on our legitimate interest in effectively handling enquiries (Article 6(1)(f) GDPR), or your consent (Article 6(1)(a) GDPR) where requested.

We retain information entered in the contact form until you request deletion, withdraw consent to storage, or the purpose of storage no longer applies, for example when your enquiry has been dealt with. Mandatory statutory provisions, particularly retention obligations, remain unaffected.

Plugins and tools

YouTube

This website embeds videos from YouTube. The website is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page containing embedded YouTube content, a connection is made to YouTube’s servers. YouTube is informed which of our pages you have visited.

YouTube may also store cookies on your device or use comparable recognition technologies, such as device fingerprinting. This enables it to obtain information about visitors to this website, including for video statistics, usability improvements and fraud prevention.

If you are logged into your YouTube account, YouTube can associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of presenting our online services attractively. This constitutes a legitimate interest under Article 6(1)(f) GDPR. Where consent is requested, processing is based solely on Article 6(1)(a) GDPR; consent may be withdrawn at any time.

Further information about the handling of user data is available in YouTube’s privacy policy: https://policies.google.com/privacy?hl=de.

Adobe Fonts

This website uses Adobe web fonts to display certain typefaces consistently. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).

When you access this website, your browser loads the required fonts directly from Adobe to display them correctly on your device. This connects your browser to Adobe’s US servers, informing Adobe that this website was accessed from your IP address. Adobe states that no cookies are stored when providing the fonts.

Storage and analysis are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in consistent typography. Where consent is requested, for example for storing cookies, processing is based solely on Article 6(1)(a) GDPR; consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details are available here: https://www.adobe.com/de/privacy/eudatatransfers.html.

Further information about Adobe Fonts is available at: https://www.adobe.com/de/privacy/policies/adobe-fonts.html.

Adobe’s privacy policy is available at: https://www.adobe.com/de/privacy/policy.html

Google Maps

This website uses Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Using Google Maps requires your IP address to be stored. This information is generally transferred to and stored on a Google server in the USA. The website provider has no control over this transfer.

Google Maps is used to present our online services attractively and make locations shown on the website easy to find. This constitutes a legitimate interest under Article 6(1)(f) GDPR. Where consent is requested, processing is based solely on Article 6(1)(a) GDPR; consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details are available here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

Further information about user data is available in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

OpenStreetMap

We use the OpenStreetMap (OSM) mapping service. The provider is the OpenStreetMap Foundation (OSMF), 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom.

When you visit a page containing OpenStreetMap, your IP address and other information about your use of the website are passed to the OSMF. OpenStreetMap may store cookies in your browser or use comparable recognition technologies.

Your location may also be recorded if you have enabled this in your device settings, for example on your mobile phone. The website provider has no control over this transfer. Details are available in OpenStreetMap’s privacy policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy.

OpenStreetMap is used to present our online services attractively and make the locations shown easy to find. This constitutes a legitimate interest under Article 6(1)(f) GDPR. Where consent is requested, for example for storing cookies, processing is based solely on Article 6(1)(a) GDPR; consent may be withdrawn at any time.