PRIVACY POLICY

This data protection declaration is intended to inform you about the nature, scope and purpose of the collection and use of personal data by eps holding gmbh.
As a rule, it is possible to use this website without providing personal data. If a service of our company is used via our website, a processing of personal data could be possible. We use your personal data in compliance with the applicable data protection regulations. In the following, we explain what data we collect, how we use it and what rights you have regarding to the use of your data.

§ 1 Name and address of the responsible person and the data protection officer

The data collection and processing on this website is carried out by eps holding gmbh as the website operator. You can find our contact details in the legal notice.

§ 2 The responsible person according to the General Data Protection Regulation (GDPR) is:

eps holding gmbh
Fraunhoferstr. 22
82152 Martinsried
Germany
Tel.: +49 89 904 211 700
Fax: +49 89 904 211 710
E-Mail: datenschutzbeauftragter@eps.net
Website: www.eps.net

Registered office: Martinsried
Registration court: Local court Munich, HRB 187176
Managers: Okan Tombulca

The operational data protection officer of eps holding gmbh is available at said address Dr. Daniel Kerscher, Fraunhoferstr. 22, 82152 Martinsried, Germany, resp. at a datenschutz-beauftragter@eps.net.
Any person may contact our data protection officer directly at any time about data protection.

Data processing in general:

§ 3 Definitions

Our data protection declaration is based on terms used within the GDPR under Art. 4 GDPR. The terms used are explained in advance below. We use the following terms, among others, in this data protection declaration:

a) Personal data
Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person, identity of that natural person.

b) Data subjects (Persons affected)
A data subject is any identified or identifiable natural person whose personal data are processed by the controller.

c) Processing
Processing means any operation or set of operations which is performed upon personal data, whether by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.

e) Profiling
Profiling is any form of automated processing of personal data which consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.

f) Pseudonymization
Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.

g) Controller
Controller means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.

h) Processor
Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

i) Recipient
Recipient means a natural or legal person, public authority, agency, or other body to whom personal data are disclosed, whether a third party. However, public authorities that may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients; the processing of such data by the said authorities shall be carried out in accordance with the applicable data protection rules in accordance with the purposes of the processing.

j) Third party
Third party means any natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.

k) Consent
Consent of the data subject is any freely given specific, informed, and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.

Scope of the processing of personal data
The processing of personal data is limited to data that is required to operate a functional website and for the provision of content and services. The processing of personal data of our users is based on the purposes agreed or on a legal basis (GDPR). We only collect personal data that is necessary to implement and process our tasks and services or if you provide data voluntarily.

Your rights (rights of the persons affected)
You have the right to request information about any of your personal data we process. In particular, you have the right to request information about the purpose of the processing, the categories of personal data, the categories of recipients who will have access or were disclosed with your data, the duration periods for saving the personal data, whether there is a right to adjust/correct, erase, restrict or object, transmission of data , the source of your data if not collected through us and if we use automatic decision-making technologies including profiling.
Additionally, you have the right to revoke a previously granted consent to use your personal data at any time.
If you believe that the processing of your personal data is inconsistent or contradicts the applicable data protection laws, you have the possibility to lodge a complaint with the data protection office.

§ 4 Legal basis of data processing

We process your personal data only for the purposes stated in this privacy policy:
– you have given your express consent in accordance with Art. 6 I lit. a DSGVO,
– processing is necessary for the performance of a contract with you pursuant to Art. 6 I lit. b DSGVO – the same applies to processing operations that are necessary for the performance of pre-contractual measures, for example in the case of enquiries about our products or services.
– the processing is necessary for compliance with a legal obligation pursuant to Art. 6 I lit. c DSGVO, such as for compliance with tax obligations.
– the processing of personal data if vital interests of the data subject or another natural person make such processing necessary pursuant to Art. 6 I lit. d DSGVO. This would be the rare case, for example, if a visitor to our company were to be injured and as a result his or her name, age, health insurance data or other vital information were to be passed on to a doctor, hospital or other third party.
– Furthermore, processing operations could be based on Art. 6 I lit. f DSGVO. Processing operations which are not covered by any of the legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden. Such processing operations are permitted to us because they were specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller. (Recital 47 sentence 2 DSGVO)

§ 5 Description and scope of data processing

1. Newsletter
Based on your consent, we will regularly send you our newsletter or comparable information by e-mail to the e-mail address you have provided.
If you subscribe to our newsletter, you will receive an email containing a hyperlink immediately after signing up. By clicking on said link you confirm your subscription (double opt in method). If you do not click on the link within, we will delete your e-mail address from our temporary list and no subscription will be made.
Subscribers may also be informed by e-mail of circumstances relevant to the service or registration (for example, changes to the newsletter service or technical circumstances).
The data is used exclusively for sending the newsletter and is not passed on to third parties.
The processing of their data within the scope of this service is based on their express consent pursuant to Art. 6 I lit. a DSGVO. You can revoke your consent at any time with effect for the future in accordance with Art. 7 III DSGVO. You will find a link to this effect in each newsletter.

2. Newsletter tracking
Our newsletters contain tracking pixels. A tracking pixel is a miniature graphic that is embedded in such e-mails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, we may see if an e-mail was opened by a data subject, and which links contained in the e-mail were called up by the data subject.
Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by the controller in order to optimize the newsletter dispatch and to better adapt the content of future newsletters to the interests of the data subject. This personal data will not be disclosed to third parties. Data subjects are entitled at any time to revoke the separate declaration of consent given in this regard via the double opt in procedure. After a revocation, this personal data will be deleted by the data controller. We automatically interpret a withdrawal from the receipt of the newsletter as a revocation.

3. Contact option via our website
Due to legal regulations, our website contains information that enables a quick electronic contact to our company as well as a direct communication with us.
If you contact us by e-mail or contact form regarding questions of any kind, you give us your voluntary consent for the purpose of contacting you. The processing is therefore based exclusively on your consent in accordance with Art. 6 Para. 1 lit. a DSGVO.
For this purpose, it is necessary to provide a valid e-mail address. This is used for the assignment of the enquiry and the subsequent response to it. The provision of further data is optional. The information you provide will be stored for the purpose of processing the enquiry and for possible follow up questions. Once your enquiry has been dealt with, your personal data will be automatically deleted. This personal data will not be passed on to third parties.

4. Cookies
Analysis and optimization of our website through cookies and tracking pixels.
Like many other websites, we also use so called cookies and tracking pixels. These are used to optimize our website, further develop services and for marketing purposes.
Cookies are small text files that are transferred from a website server to your hard drive. This automatically provides us with certain data such as IP address, browser used, operating system and your connection to the Internet. Cookies cannot be used to run programs or deliver viruses to a computer. The information contained in cookies allows us to facilitate your navigation and enable the correct display of our website. Through the stored and returned information, the respective web application recognizes that you have already called up and visited the website with the browser of your end device. We use this information to optimally design and display our website according to your preferences. Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.
Tracking pixels are small graphics on websites that enable log file recording and log file analysis. Tracking pixels write information to the cookie file in the users browser when they visit the website. The use of pixels allows us to show you targeted information and content.

Our cookies and pixels used are divided into 4 categories:
1. technically necessary cookies and pixels
2. analytical cookies
3. marketing cookies
4. social media cookies
Legal basis for the processing of data through cookies is Article 6 (1) lett. f GDPR.

5. Technically necessary cookies and pixels
Technically necessary cookies serve the technically flawless operation of our website. They ensure the stability of the website, offer a secure login, save the progress of your order, your login data, and your shopping cart.

The data collected from you in this way is pseudonymised by technical precautions so that it is no longer possible to assign the data to you. The data is not stored together with other personal data of yours. When you access our website, you will be informed by an information banner about the use of cookies and referred to this data protection information. In this context, you will also be informed how to prevent the storage of cookies in your browser settings.

The processing of your aforementioned data is necessary to protect our legitimate interests pursuant to Art. 6 I lit.f DSGVO and is justified by a weighing of interests in our favor. Without the use of this data, some functions of our website cannot be offered. For these, it is necessary that the browser is recognized even after a page change. We also have a legitimate interest in processing your aforementioned data, accordingly, namely promoting sales of our own products by operating our own websites in a functional manner. Your legitimate interest in not having your aforementioned data used for this purpose does not outweigh this legitimate interest of ours, as we use this data appropriately for the processing purpose described and you also have an interest in using our website in a customer-friendly manner.

You have the right to object at any time to the processing of your data that is based on a balance of interests, if there are grounds for doing so that arise from your particular situation. Please see § 11.

6. Analytical cookies
We also use cookies on our website that allow us to analyze users browsing behavior. Analytical cookies enable us to analyze the website so that we can measure and improve the performance of our pages. In this context, we use cookies for so called reach measurement. With the help of these cookies, we create statistical profiles that cannot be traced back to the individual person, but only to groups. These are used to analyze visitor and click behavior as well as demographic characteristics of website visitors. The data collected from you in this way is pseudonymised by technical precautions so that it is no longer possible to assign the data to you. The data is not stored together with any other personal data about you. When you access our website, you will be informed by an information banner about the use of cookies and referred to this data protection information. In this context, you will also be informed how to prevent the storage of cookies in your browser settings.
This processing of your aforementioned data is based on your prior consent pursuant to § 6 I lit.a DSGVO.
You have the right to revoke your consent at any time with effect for the future without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation. The easiest way to revoke your consent is to set the corresponding opt out cookie/pixel via our cookie and pixel list available here.

7. Marketing Cookies
Marketing cookies help us to provide you with personalized advertisements on and off our website.
In this context, we also use cookies for the purpose of retargeting or lookalike retargeting. Here, the cookie with the corresponding information allows the recognition of the users browser and a corresponding retargeting on external websites. Furthermore, statistical twins of the original cookie profiles are identified and addressed based on the accumulated cookie information. This is referred to as lookalike retargeting.
When you access our websites, you will be informed in our so called cookie banner about the use of cookies for marketing purposes and your consent to the processing of personal data used in this context will be obtained. In doing so, you will also be referred to this data protection declaration. The legal basis for the processing of personal data using cookies and pixels for marketing purposes is your corresponding consent pursuant to Art. 6 I lit. a DSGVO.
You have the right to revoke your consent at any time with effect for the future without affecting the lawfulness of the processing carried out because of the consent until revocation. The easiest way to revoke your consent is to set the corresponding opt out cookie/pixel via our cookie and pixel list available here.

8. Social Media Cookies
Social media cookies provide you with the ability to connect directly to your social media account as required. These allow you to share web pages on social networks and post comments.
We also use cookies for social media targeting. With the help of the cookies, we have the possibility to exchange data with social media companies (such as Google or Facebook) using a value in order to play personalized content to you in banners and ads. Neither we nor our service providers can draw any conclusions about your person. Usage based targeting takes place in three steps: The collection of data via tracking pixels, the storage and processing of log file information and the ultimate use of this information in retargeting or lookalike retargeting.
Social media pixels and cookies are only activated and only transmit data if you have given us your prior consent via the cookie law banner settings in accordance with Art.6 I lit.a DSGVO. When you access our websites, you will be informed in our cookie banner about the use of social media cookies and your consent to the processing of personal data used in this context will be obtained. In doing so, you will also be referred to this data protection declaration. The legal basis for the processing of personal data using social media cookies and pixels is your corresponding consent.
You have the right to revoke your consent at any time with effect for the future, without affecting the lawfulness of the processing carried out based on the consent until revocation. The easiest way to revoke your consent is to set the corresponding opt out cookie/pixel via our cookie and pixel list available here.

9. Duration of storage
The controller shall process and store personal data of the data subject only for the period of time necessary to achieve the purpose of storage or where provided for by the European Directive and Regulation or other legislator in laws or regulations to which the controller is subject.

If the storage purpose cases to apply or if a storage period prescribed by the European Directive and Regulation Maker or another competent legislator expires, the personal data shall be routinely blocked or deleted in accordance with the statutory provisions.

10. Server log files
When you visit our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

– Date and time of the request
– Name of the requested file
– Page from which the file was requested
– Access status
– Web browser and operating system used
– (Complete) IP address of the requesting computer
– Amount of data transferred

We collect the listed data to ensure a smooth connection of the website and to enable a comfortable use of our website. For reasons of technical security, to defend against attempted attacks on our web server, we store this data for a short period of time. It is not possible for us to draw conclusions about individual persons based on this data.

The legal basis for the temporary storage of the data or the log files is our legitimate interest according to Art. 6 Para. 1 lit. f DSGVO and is justified by a weighing of interests in our favor. We have a legitimate interest in ensuring that the website and the services offered their function in technical terms and in protecting the website from attacks. Your legitimate interest in not having your aforementioned data used for this purpose does not outweigh this legitimate interest of ours, as we use this data appropriately for the described processing purpose and you also benefit from the functionality of the websites.

Your personal data will be deleted after 14 days at the latest, unless we are legally obliged to retain it, or the retention is permitted based on a legal justification.

11. Privacy policy on the use and application of Google Analytics
Our website uses Google Analytics, a web analysis service operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: Google). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

However, due to the activation of IP anonymization on these websites, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. This is done by us using the addition “_gat._anonymizelp”. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The data on the use of our website will be deleted immediately after the end of the retention period set by us in each case. Google provides us with a choice of 14, 26, 38 or 50 months as the retention period. You can ask us at any time for the current retention period set by us or request deletion.

The processing of your data with the help of cookies within the scope of this service is based on your express consent pursuant to Art. 6 I lit. a DSGVO. You can subsequently revoke your consent at any time with effect for the future pursuant to Art. 7 III DSGVO in your browser settings (link). In doing so, an opt out cookie will be installed on your device. This will prevent the collection of data by Google Analytics for this website and for this browser in the future, as long as the cookie remains installed in your browser. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under this link.

However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. If consent is not given or in the event of revocation, only those cookies will be set that are necessary for the operation and use of our website (technical cookies). In this and all other cases, your data will only be processed due to technical necessities based on our legitimate interest pursuant to Art. 6 I lit. f DSGVO.

Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html.
Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/.

12. Privacy policy on the use and application of Google – AdWords
Our website uses Google Conversion Tracking. If you have accessed our website via an ad placed by Google, Google AdWords will set a cookie on your computer. The company operating the Google AdWords services is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

If a data subject accesses our website via a Google ad, a conversion cookie will be stored by Google on the data subject’s information technology system. These cookies loose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked across AdWords customers websites.

The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

The processing of their data with the help of cookies as part of this service is based on their express consent pursuant to Art. 6 I lit. a DSGVO. You can revoke your consent at any time with effect for the future in accordance with Art. 7 III DSGVO in your browser settings (link). An opt out cookie will be installed on your device. This will prevent the collection of data by Google AdWords for this website and for this browser in the future, as long as the cookie remains installed in your browser. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under this link.

However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. If consent is not given or in the event of revocation, only those cookies will be set that are absolutely necessary for the operation and use of our website (technical cookies). In this and all other cases, your data will only be processed due to technical necessities on the basis of our legitimate interest pursuant to Art. 6 I lit. f DSGVO.

Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/.

13. Privacy policy on the use and application of Google Maps
This website uses Google Maps API to visually display geographical information. Google Maps is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When using Google Maps, Google also collects, processes, and uses data about visitors use of the map functions. By using our website, you consent to the collection, processing and use of automatically collected data and data provided by you by Google, one of its agents, or third parties. The terms of use for Google Maps can be found under Additional Terms of Use for Google Maps/Earth.

A note on the above mentioned services of Google Inc.: If you have a Google account, you yourself determine the activity data that is stored in your account. You can find this under Google > Settings > Personal data & privacy, section Transparency and choice: https://www.google.com/policies/privacy/#infochoices

14. Privacy policy on the use and application of Facebook Pixel
Our website uses the visitor action tool Pixel from Facebook to measure conversions. The operating company of Facebook Pixel is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the data controller is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
This allows the behavior of site visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The data collected is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage policy. This enables Facebook to serve advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.

The processing of your data with the help of cookies within the scope of this service is based on your express consent pursuant to Art. 6 I lit. a DSGVO. You may revoke your consent at any time with effect for the future pursuant to Art. 7 III DSGVO. If you have a Facebook account, you can revoke your consent under the following link and deactivate the setting https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

If you do not have a Facebook account, you can deactivate usage based advertising by Facebook on the website of the European Interactive Digital Advertising Alliance at a later date: http://www.youronlinechoices.com/de/praferenzmanagement/.

You can object to the collection by the Facebook pixel and the use of your data to display Facebook ads. To adjust which types of ads are displayed to you within Facebook, you can visit the page set up by Facebook and follow the instructions there on the settings for usage based advertising: https://www.facebook.com/settings?tab=ads.

However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. If consent is not given or in the event of revocation, only those cookies will be set that are necessary for the operation and use of our website (technical cookies). In this and all other cases, your data will only be processed due to technical necessities based on our legitimate interest pursuant to Art. 6 I lit. f DSGVO.

You can find further information on protecting your privacy in Facebook’s data protection information: https://www.facebook.com/about/privacy/.

15. Contact form
If you fill out a contact form, send us an email or another form of electronic message, your data will only be used to process your inquiry and possible further questions you might have.
Legal basis for the processing of your inquiry is Article 6 (1) lett. b GDPR.
We will delete your email address after completing your inquiry.

§ 6 Use and application of social media plugins Subhead

Use of the “2-click solution” for plugins on our website
Plugins from the service providers listed below are used on our website. You can recognize the plugins by the fact that they are marked with the logo. Plugins are small programs or programmed packages that extend or modify existing software.

Information, which may also include personal data, may be sent to the service provider via these plugins and may be used by the service provider. We prevent the unconscious and unintentional collection and transmission of data to the service provider by using a 2 click solution. To activate a desired plugin, it must first be activated by clicking on the corresponding button. Only this activation of the plugin also triggers the collection of information and its transmission to the service provider. We ourselves do not collect any personal data by means of the plugins or about their use.

We have no influence on what data an activated plugin collects and how it is used by the provider. At present, it must be assumed that a direct connection to the provider’s services is established and that at least the IP address and device related information is collected and used. There is also the possibility that the service providers try to save cookies on the computer used. Please refer to the data protection information of the respective service provider to find out which specific data is collected and how it is used. Note: If you are logged into Facebook at the same time, Facebook can identify you as a visitor to a particular page.

Privacy policy on the use and application of YouTube
We embed YouTube videos on our website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all kinds of videos, which is why complete film and television programs, but also music videos, trailers or videos made by users themselves can be accessed via the internet portal.

The provider of YouTube is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Each time one of the individual pages of this website operated by the data controller is called up and on which a YouTube component (YouTube Video) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/ . Within the scope of this technical procedure, YouTube and Google receive information about which specific subpage of our website is visited by the data subject.

If the data subject is logged into YouTube at the same time, YouTube recognizes which specific subpage of our website the data subject is visiting when a subpage containing a YouTube video is called up. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged into YouTube at the same time as calling up our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, he or she can prevent the transmission by logging out of his or her YouTube account before accessing our website.

The use of their data only takes place with their prior consent pursuant to Art. 6 I lit. a DSGVO. You give us your consent by agreeing to your data being transmitted to YouTube before calling up the video and by taking note of the data protection declaration.

The privacy policy published by YouTube, which can be found at https://www.google.de/intl/de/policies/privacy/ , provides information on the collection, processing and use of personal data by YouTube and Google.

Privacy policy on the use and application of Vimeo
Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.

When you visit our site equipped with a Vimeo plugin, a connection to the Vimeo servers is established. This tells the Vimeo server which page you have visited. If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.
In addition, Vimeo obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

Your data will only be used with your prior consent pursuant to Art. 6 I lit. a DSGVO. You give us your consent by agreeing to your data being transmitted to Vimeo before you call up the video and by taking note of the data protection declaration.

You can find further information on the handling of user data in Vimeo’s privacy policy at: https://vimeo.com/privacy.

Privacy policy on the use and application of Yumpu

We use the provider i-magazine AG (“Yumpu”), Gewerbestrasse 3, 9444 Diepoldsau, Switzerland, to display flip page catalogues on our website.

By means of Yumpu, the content of pdf files is displayed as a flip catalogue for everyone, freely accessible and easy to read directly in the web browser, without the need to load pdf files.
To run the service, your web browser retrieves the content directly from Yumpu. Yumpu receives – as with every website – your IP address as well as information about your web browser, operating system, date and time of access and the referrer data (de.wikipedia.org/wiki/Referrer), provided that the referrer data is not disguised by your browser. As far as we are aware, the data of the users is used by Yumpu exclusively for the purpose of displaying the flip page catalogue.

The use of their data only takes place with their prior consent in accordance with Art. 6 I lit. a DSGVO. You give us your consent by agreeing to the transfer of your data to Yumpu before calling up the file and by taking note of the data protection declaration.

You can find more information in Yumpu’s privacy policy at www.yumpu.com/de/info/privacy_policy.

We have integrated components of Facebook, a social network, on our website.

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller of personal data is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Each time one of the individual pages of our website operated by us and on which a Facebook component (Facebook plugin) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plugins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. Within the scope of this technical procedure, Facebook receives information about which specific subpage of our website is visited by the data subject.

If the data subject is logged in to Facebook at the same time, Facebook recognizes which specific subpage of our website the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject activates one of the Facebook buttons integrated on our website, for example the “Like” button, or if the data subject posts a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data.

Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is simultaneously logged into Facebook at the time of calling up our website; this takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want this information to be transmitted to Facebook, he or she can prevent the transmission by logging out of his or her Facebook account before accessing our website.

The data policy published by Facebook, which can be accessed at https://de-de.facebook.com/about/privacy/ , provides information on the collection, processing and use of personal data by Facebook. It also explains which setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress the transmission of data to Facebook.

Your data will only be used with your prior consent pursuant to Art. 6 I lit. a DSGVO. If the corresponding plugin is activated by you, a short notice and the corresponding privacy policy of the website will appear. By activating the service, you give your consent for your data to be transferred to Facebook.

Privacy policy on the use and application of Google+
Our website uses functions of Google+, a social network. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Each time one of the individual pages of our website operated by us and on which a Google+ button has been integrated is called up, the internet browser on the information technology system of the data subject is automatically caused by the respective Google+ button to download a representation of the corresponding Google+ button from Google. Within the scope of this technical procedure, Google receives knowledge of which specific subpage of our website is visited by the data subject. More detailed information on Google+ is available at https://developers.google.com/+/.

If the data subject is logged into Google+ at the same time, Google recognizes which specific subpage of our website the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Google+ button and assigned by Google to the respective Google+ account of the data subject.

If the data subject activates one of the Google+ buttons integrated on our website and thus submits a Google+1 recommendation, Google will associate this information with the data subject’s personal Google+ user account and store this personal data. Google stores the Google+1 recommendation of the data subject and makes it publicly available in accordance with the terms and conditions accepted by the data subject in this regard. A Google+1 recommendation made by the data subject on this website will subsequently be stored and processed together with other personal data, such as the name of the Google+1 account used by the data subject and the photo stored in this account, in other Google services, for example the search engine results of the Google search engine, the Google account of the data subject or in other places, for example on websites or in connection with advertisements. Furthermore, Google is able to link the visit to this website with other personal data stored by Google. Google also records this personal information for the purpose of improving or optimizing Google’s various services.

Further information and the applicable Google privacy policy can be found at https://www.google.de/intl/de/policies/privacy/.
Further information from Google on the Google+1 button can be found at https://developers.google.com/+/web/buttons-policy.

Privacy policy on the use and application of Instagram
We have integrated components of the Instagram service on our website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and to redistribute such data in other social networks.

The operating company of the Instagram services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.

Each time one of the individual pages of this website operated by us and on which an Instagram component (Insta button) has been integrated is called up, the internet browser on the information technology system of the data subject is automatically caused by the respective Instagram component to download a representation of the corresponding component from Instagram. Within the scope of this technical procedure, Instagram receives knowledge of which specific subpage of our website is visited by the data subject.

If the data subject is logged in to Instagram at the same time, Instagram recognizes which specific subpage the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the data subject. If the data subject activates one of the Instagram buttons integrated on our website, the data and information thus transmitted will be assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.

The use of their data only takes place with their prior consent pursuant to Art. 6 I lit. a DSGVO. If the corresponding plugin is activated by you, a short notice and the corresponding privacy policy of the website will appear. By activating the service, you give your consent for your data to be transferred to Instagram.

Further information and the applicable data protection provisions of Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

Privacy policy on the use and application of Xing
We have integrated components of Xing on our website. Xing is an internet-based social network that enables users to connect with existing business contacts and to make new business contacts. Individual users can create a personal profile of themselves on Xing. Companies can, for example, create company profiles or publish job offers on Xing.
The operating company of Xing is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

Each time one of the individual pages of our website operated by us and on which a Xing component (Xing plugin) has been integrated is called up, the Internet browser on the information technology system of the data subject is automatically caused by the respective Xing component to download a representation of the corresponding Xing component from Xing. Further information on the Xing plugins can be found at https://dev.xing.com/plugins. Within the scope of this technical procedure, Xing receives information about which specific subpage of our website is visited by the data subject.
If the data subject is logged in to Xing at the same time, Xing recognizes which specific subpage of our website the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Xing component and assigned by Xing to the respective Xing account of the data subject. If the data subject activates one of the Xing buttons integrated on our website, for example the “Share” button, Xing assigns this information to the personal Xing user account of the data subject and stores this personal data.

Xing always receives information via the Xing component that the data subject has visited our website if the data subject is logged in to Xing at the same time as calling up our website.

The data protection provisions published by Xing, which can be accessed at https://www.xing.com/privacy , provide information on the collection, processing and use of personal data by Xing. Furthermore, Xing has published data protection information for the XING Share button at https://www.xing.com/app/share?op=data_protection .

Privacy policy on the use and application of Linkedin
We have integrated components of the LinkedIn Corporation on our website. LinkedIn is an internet-based social network that enables users to connect with existing business contacts and to make new business contacts.

The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For data protection issues outside the USA, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

With each individual call up of our website that is equipped with a LinkedIn component (LinkedIn plugin), this component causes the browser used by the person concerned to download a corresponding representation of the component from LinkedIn. Further information on LinkedIn plugins can be found at https://developer.linkedin.com/plugins. Within the scope of this technical procedure, LinkedIn receives knowledge of which specific subpage of our website is visited by the data subject.

If the data subject is logged in to LinkedIn at the same time, LinkedIn recognizes which specific subpage of our website the data subject is visiting with each call up of our website by the data subject and for the entire duration of the respective stay on our website. This information is collected by the LinkedIn component and assigned by LinkedIn to the respective LinkedIn account of the data subject. If the data subject activates a LinkedIn button integrated on our website, LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores this personal data.

LinkedIn always receives information via the LinkedIn component that the data subject has visited our website if the data subject is simultaneously logged into LinkedIn at the time of calling up our website.

LinkedIn offers the possibility to unsubscribe from email messages, SMS messages and targeted ads as well as to manage ad settings at https://www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame, which may set cookies. Such cookies can be rejected at https://www.linkedin.com/legal/cookie-policy. LinkedIn’s applicable privacy policy is available at https://www.linkedin.com/legal/privacy-policy . LinkedIn’s cookie policy is available at https://www.linkedin.com/legal/cookie-policy.

§ 7 Data security

We care about the security of your information. To prevent unauthorized access, use, alteration, destruction, or disclosure, we have put in place appropriate physical, electronic and organizational measures to protect your personal information from unauthorized or illegal processing by third parties. Nevertheless, we cannot guarantee the security of your information and/or data from illegal activities by third parties. You are therefore asked to assist us in keeping your data secure by avoiding the use of obvious login names or passwords, changing your password regularly and ensuring that your password is not shared with others.

§ 8 Rights of the data subject (affected person)

The following list includes all rights of data subjects under the GDPR.

If personal data of yours is processed by us, you are a data subject within the meaning of the GDPR and you are entitled to the following rights:

a) Right to information
You may request confirmation from us as to whether personal data concerning you is being processed by us. If such processing is taking place, you may request information about the following:

– the purposes for which the personal data are processed;
– the categories of personal data which are processed;
– the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
– the planned duration of the storage of the personal data relating to you or, if specific information on this is not possible, criteria for determining the storage period;
– the existence of a right to obtain the rectification or erasure of personal data concerning you, a right to obtain the restriction of processing by the controller or a right to object to such processing;
– the existence of a right of appeal to a supervisory authority;
– any available information on the origin of the data if the personal data is not collected from the data subject;
– the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

b) Right to confirmation
You have the right to request confirmation from us as to whether personal data relating to you is being processed.

c) Right to rectification
You have a right to rectification and/or completion from us if the personal data processed concerning you is inaccurate or incomplete. We must make the rectification without delay.

d) Right to erasure (right to be forgotten)
You have the right to request that we erase the personal data concerning you without undue delay, provided that one of the following reasons applies and to the extent that the processing is not necessary:
– The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
– You withdraw your consent on which the processing was based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) DSGVO and there is no other legal basis for the processing.
– You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
– The personal data concerning you have been processed unlawfully.
– The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which eps holding gmbh is subject.
– The personal data concerning you has been collected in relation to information society services offered in accordance with Article 8(1) of the GDPR.

e) Right to restriction of processing
You have the right to request us to restrict processing if one of the following conditions is met:
– The accuracy of the personal data is disputed by you for a period of time that enables us to verify the accuracy of the personal data.
– The processing is unlawful; you object to the erasure of the personal data and request in-stead the restriction of the use of the personal data.
– As the personal data is no longer necessary for the purposes of processing, but you need it for the assertion, exercise or defense of legal claims.
– You have objected to the processing pursuant to Art. 21 (1) DSGVO and it is not yet clear whether our legitimate grounds outweigh yours.

f) Right to data portability
You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transfer this data to another controller without hindrance from us to whom the personal data has been provided, provided that
– the processing is based on consent pursuant to Art. 6 (1) a DSGVO or Art. 9 (2) a DSGVO or on a contract pursuant to Art. 6 (1) b DSGVO and
– the processing is carried out with the help of automated procedures
In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

g) Right to object
You have the right to object at any time to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(f) or (e) DSGVO. This also applies to profiling based on these provisions.

We will no longer process the personal data in the event of objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process personal data for the purpose of direct marketing, you have the right to object at any time to the processing of personal data for the purpose of such marketing. This also applies to profiling, insofar as it relates to such direct advertising. If you object to us processing for the purposes of direct advertising, we will no longer process the personal data for these purposes.

In addition, you have the right to object to the processing of personal data concerning you which is carried out by us for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) DSGVO, unless such processing is necessary for the performance of a task carried out in the public interest.

h) Automated decisions in individual cases, including profiling.
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is
– is necessary for the conclusion or performance of a contract between you and eps holding gmbh,
– is permitted under Union or Member State legislation to which we are subject, and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
– is made with your express consent.
If the decision is necessary for the conclusion or performance of a contract between you and eps holding gmbh, or if it is made with your explicit consent, we will take reasonable steps to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain the intervention of a person responsible, to express your point of view and to contest the decision.

i) Right to revoke consent under data protection law
You have the right to revoke your declaration of consent to the processing of personal data at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You can complain to the supervisory authority responsible for you at any time. Your competent supervisory authority depends on the federal state of your residence, your work, or the alleged violation.

§ 9 Deletion or blocking of data
We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as provided for by the various storage periods stipulated by the legislator in accordance with Art. 5 Para. 1 lit. e DSGVO. After the respective purpose has ceased to exist or these periods have expired, the corresponding data will be routinely blocked or deleted in accordance with the statutory provisions.

§ 10 Information, correction, correction, and deletion of data
For information about your personal data, to have incorrect data corrected or to have it blocked or deleted, as well as for further questions about the use of your personal data, please contact the data specified in § 2.

§ 11 Information about your right to object
You have the right to object at any time to the processing of your data based on a balance of interests or in the public interest on grounds relating to your situation. This also applies to profiling based on this provision.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

We also process your personal data to carry out direct advertising. If you do not wish to receive advertising, you have the right to object to this at any time; this also applies to profiling, insofar as it is associated with such direct advertising. We will observe this objection for the future.

The objection can be made form-free under the contact details given in § 2.

§ 12 Changes to our data protection regulations
We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or to implement changes to our services in the data protection declaration, e.g., when introducing new services. The new data protection statement will then apply to your next visit.

§ 9 Data protection in applications and the application process

The data controller collects and processes the personal data of applicants for the purpose of handling the application procedure. The processing may also be carried out electronically. This is the case when an applicant submits relevant application documents to the controller by electronic means, for example by e-mail or via a web form located on the website. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents are automatically deleted two months after the notification of the rejection decision, provided that no other legitimate interests of the controller conflict with such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

If you have questions about data protection, please send us an E-mail or contact our data protection officer directly:

Dr. Daniel Kerscher, eps holding gmbh, Fraunhoferstr. 22, 82152 Martinsried, Germany

Email: datenschutzbeauftragter@eps.net

Due to: January 2020