Privacy Policy

The controller responsible for data processing is:
ELKOM-Elektroheizplatten-Technik GmbH
Oberbecksener Str. 80
32547 Bad Oeynhausen
Germany

elkom@elkom.de 
Tel: +49 5731 7782-0

We appreciate your interest in our website. Protecting your personal data is very important to us. Below, we provide detailed information on how we handle your data.

1. Access data and hosting

You may visit our website without providing any personal information. Every time a page is accessed, the web server automatically stores a server log file, which contains information such as the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data). These access data are evaluated exclusively for the purpose of ensuring the smooth functioning of the site and improving our services. This serves to safeguard our legitimate interests in the proper presentation of our services in accordance with Article 6(1)(f) of the GDPR. All access data are deleted no later than seven days after the end of your visit to the site.

Hosting

Some of the services required for hosting and displaying the website are provided by our service providers on our behalf as part of a data processing agreement. Unless otherwise stated in this Privacy Policy, all access data and data collected via forms on this website are processed on their servers. If you have any questions about our service providers or the legal basis for how we work with them, please use the contact details provided in this Privacy Policy.

2. Data processing for contact and customer communication

Contacting us

When you contact us (such as via the contact form, live chat tool or email), we collect the personal data you voluntarily provide in order to process your enquiry, in accordance with Article 6(1)(b) of the GDPR. Mandatory fields are marked as such, as we require this information to respond to your query. The specific data collected can be seen in the respective input forms. Once your enquiry has been fully resolved, your data will be deleted unless you have expressly consented to its further use in accordance with Article 6(1)(a) of the GDPR or we have reserved the right to use your data for other purposes that are legally permitted and about which we inform you in this privacy notice.

Once your customer enquiry has been fully resolved, your data will be restricted from further processing and deleted after the statutory retention periods required under tax and commercial law, in accordance with Article 6(1)(c) of the GDPR, unless you have expressly consented to the further use of your data in accordance with Article 6(1)(a) of the GDPR or we have reserved the right to use your data for other purposes permitted by law, as explained in this privacy policy.

3. Cookies and other technologies

General information

To make our website more attractive and to enable the use of certain features, we use technologies including cookies on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of your browser session – that is, when you close your browser (known as session cookies). Other cookies remain on your device and allow us to recognise your browser the next time you visit (persistent cookies).

Privacy on end devices

When using our online services, we deploy strictly necessary technologies to deliver the telemedia service you have explicitly requested. In these cases, the storage of or access to information on your device does not require your consent.

For all other (non-essential) features, we require your consent to store information on your device or to access information already stored on your device. Please note that if you do not give consent, parts of the website may not function fully. Any consent you give will remain in place unless and until you adjust or reset your preferences via your browser settings.

Subsequent data processing by cookies and other technologies
We use technologies that are essential for the functionality of specific features of our website (such as remembering your preferences). These technologies collect and process your IP address, the time of your visit, device and browser information, and data on how you interact with our website (e.g. preferences). This serves to protect our legitimate interests in optimising the presentation of our services, in line with Article 6(1)(f) of the GDPR.

We also use technologies to comply with legal obligations (such as to document your consent to the processing of your personal data) and for web analytics and online marketing. Further information, including the relevant legal foundation for data processing, is provided in the sections below.

Cookie settings
You can find the settings for managing cookies in your browser via the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have given your consent to the use of these technologies in accordance with Article 6(1)(a) of the GDPR, you can withdraw your consent at any time by contacting us via the method provided in this Privacy Policy.

4. Use of cookies and other technologies

We use the following cookies and third-party technologies on our website. Unless otherwise specified for individual technologies, this is done based on your consent in accordance with Article 6(1)(a) of the GDPR. Once the purpose of the technology no longer applies and its use has ended, the data collected in connection with it will be deleted. You can withdraw your consent at any time with future effect. For more information on your right to withdraw consent, see the section ‘Cookies and other technologies’. Additional details, including the legal basis for how we work with third-party providers, are included in the description of each individual technology. If you have questions regarding specific providers or our relationship with them, please contact us using the details provided in this notice.

Use of Google services

We use the technologies listed below provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). Information collected automatically via these technologies is generally transferred to a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, where it is stored. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement entered into for the respective technology between the joint controllers in accordance with Article 26 of the GDPR. Further information on Google’s data processing can be found in Google’s privacy policy.

Our service providers are based in and/or use servers in countries outside the EU and the EEA for which the European Commission has determined, by decision, that an adequate level of data protection exists.

Our service providers are based in and/or use servers in countries outside the EU and the EEA. No adequacy decision has been made by the European Commission for these countries. Our relationship with them is based on the standard data protection clauses of the European Commission. 

Google Analytics

For website analytics, Google Analytics automatically collects and stores data (such as IP address, time of visit, device and browser details, and your interactions with our website), which is used to create pseudonymised usage profiles. Cookies may also be used for this purpose. When users access our website from within the EU, their IP address is stored on an EU-based server to determine their approximate location and is then immediately deleted before traffic is forwarded to Google’s servers elsewhere. The data processing is carried out on the basis of a data processing agreement with Google.

If you do not provide consent under Article 6(1)(a) of the GDPR for the use of Google Analytics, no cookies will be stored or accessed on your device, and no data processing as described above will take place. However, pings containing limited data (user agent, consent behaviour, screen resolution, IP address) may be sent to Google for behaviour and conversion modelling to address data gaps in analytics. 

5. Contact options and your rights

5.1 Your rights

As a data subject, you have the following rights:

  • in accordance with Article 15 of the GDPR, the right to obtain access to your personal data processed by us, to the extent specified therein;
  • in accordance with Article 16 of the GDPR, you have the right to request the immediate rectification of inaccurate personal data stored by us or the completion of your personal data;
  • in accordance with Article 17 of the GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary
    • for exercising the right to freedom of expression and information;
    • for compliance with a legal obligation;
    • for reasons of public interest; or
    • for the establishment, exercise or defence of legal claims;
  • in accordance with Article 18 of the GDPR, the right to request the restriction of processing of your personal data where
    • you contest the accuracy of the data;
    • the processing is unlawful but you oppose the erasure of the data;
    • we no longer need the data, but you require it for the establishment, exercise or defence of legal claims; or
    • you have objected to the processing pursuant to Article 21 of the GDPR;
  • in accordance with Article 20 of the GDPR, the right to receive your personal data, which you have provided to us, in a structured, commonly used, machine-readable format, or to request its transfer to another controller;
  • in accordance with Article 77 of the GDPR, the right to lodge a complaint with a supervisory authority. You may normally contact the supervisory authority at your usual place of residence or work, or at the location of our registered office.

Right to object

Insofar as we process personal data to safeguard our overriding legitimate interests within the context of a balance of interests, as outlined above, you have the right to object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. Where the processing is carried out for other purposes, you only have the right to object if there are grounds relating to your particular situation.

Once you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

This does not apply where the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

5.2 Contact options

If you have any questions regarding the collection, processing or use of your personal data, or if you wish to request information about your data or the correction, restriction or deletion of your data, or to withdraw any consent you have given or to object to a particular use of your data, please contact us directly using the details provided in our legal notice.