Privacy Policy

Your trust is important to us. E-HOCH-3 ECO IMPACT EXPERTS GMBH & CO.KG takes the protection of your personal data very seriously. Personal data is only collected, processed or used if the data subject has consented, if it is necessary for the fulfilment of a contract or if a law permits or prescribes the collection, processing or use.

With this data protection declaration, we would like to inform you about the details of data collection and data processing as well as the rights to which you are entitled in this context.

01 Name and address of the controller

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other data protection regulations is

E-HOCH-3 ECO IMPACT EXPERTS GMBH & CO.KG
Robert-Bosch-Straße 7
64293 Darmstadt
Phone: +49 6151 / 8701080

E-mail: info(a)e-3.co

Web: www.e-3.co

Data protection officer:

M.Geisen
BeSecure IT
Brunnenstraße 15
56751 Gering
Phone: 01522 9278922

E-mail: info(a)besecure-it.de

02. principles for the processing of personal data

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as ‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
E-HOCH-3 ECO IMPACT EXPERTS GMBH & CO. KG only processes personal data if the user has given their consent or the data processing is permitted by law. The legal basis is Article 6(1) of the EU General Data Protection Regulation (GDPR). According to this provision, the processing of personal data is only permitted if the data subject consents (Art. 6 para. 1 lit. a GDPR) or the processing is necessary for one of the following purposes
For the fulfilment of a contract with the data subject for the implementation of pre-contractual measures at the request of the data subject (Art. 6 para. 1 lit b GDPR). To fulfil a legal obligation of our company (Art. 6 para. 1 lit. c GDPR).
To protect the vital interests of the data subject or another natural person (Art. 6 para. 1 lit. d GDPR).
For the performance of a task carried out in the public interest or assigned to our company by the public administration (Art. 6 para. lit. e GDPR).
For the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (Art. 6 (1) (f) GDPR).

03 Storage period and data erasure

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may be stored beyond this if this is provided for by law. The data will also be blocked or erased if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract. Prescribed storage periods in this sense are, for example, retention periods under tax or commercial law.

04. collection of access data (creation of log files)

The website of E-HOCH-3 ECO IMPACT EXPERTS GMBH & CO.KG automatically collects general data and information from the computer system of the accessing computer each time it is accessed, which is stored in the log files of the server. The following data and information are recorded:
* Browser type including version used
* Operating system used by the accessing computer
* Date and time of the call
* IP address of the user
* Internet service provider of the user
* Websites from which our website is accessed
* Websites and sub-websites that are accessed from our website
* Other similar data and information used for security purposes in the event of attacks on our system

The data is stored anonymously in the log files of our system. There is no link with other personal data of the user, E-HOCH-3 ECO IMPACT EXPERTS GMBH & CO.KG does not draw any conclusions about the person concerned.
The legal basis for data processing is Art. 6 para. 1 lit. GDPR. The storage of data is necessary to ensure the functionality of our website and the correct display of content. Furthermore, the data is used for our statistics and the continuous optimisation of our content. Finally, the data is stored in order to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.
The data is not passed on to third parties unless there is a legal obligation to disclose it.
As the collection and storage of the data in the log files is absolutely necessary for the trouble-free operation of the website, the user has no option to object.
The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. If the data was collected in order to ensure the proper functioning of the website, it will be deleted at the end of the internet session.

05 Ninja Firewall

We have integrated Ninja Firewall on this website. The provider is NinTechNet Limited, Unit 1603, 16th Floor, The L. Plaza 367 – 375 Queen’s Road Central Sheung Wan, Hong Kong (hereinafter referred to as Ninja Firewall).
Ninja Firewall serves to protect our website from unwanted access or malicious cyberattacks. For this purpose, Ninja Firewall records the IP address, request, referrer and time of page access. Ninja Firewall is integrated on our own servers and does not transmit any personal data to the provider of the tool or other third parties.
We have activated IP anonymisation for Ninja Firewall so that the tool only records the IP address in abbreviated form.
Ninja Firewall is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website as effectively as possible against cyberattacks.

06. e-mail contact

It is possible to contact us via the e-mail address provided on our website. In this case, in addition to the e-mail address, the personal data provided by the user in the e-mail will be transmitted. The legal basis in this respect is Art. 6 para. 1 lit. f GDPR.
The processing of the data transmitted by e-mail serves exclusively to carry out the desired contact. Other data is stored in order to prevent or detect misuse of the website and to ensure the security of our system. The data will not be passed on to third parties unless there is a legal obligation to disclose it.

07 Use of social plug-ins

We have integrated plug-ins from social networks on our website. If the data subject is registered with the respective social network when accessing our website and is also logged in, the social network recognises which specific subpage of our website the data subject accesses. This information is collected by the operator of the social network and assigned to the data subject’s account there.
We have no influence on the type and scope of the data that is collected, stored and processed by the operator of the social network. For more information, please contact the operator of the respective social network. To prevent the operator of the respective social network from processing data about you, you must log out of the relevant network before accessing our website. You can also use special tools that block data transmission (e.g. Facebook blockers).
We have integrated the social media plug-ins of the following companies on our website
LinkedIn Corporation https://www.linkedin.com/legal/cookie-policy

08 Your rights as a data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:

a) Rights to confirmation and information

You can request confirmation from us at any time as to whether personal data concerning you is being processed by us. If this is the case, you have the right to be informed by us about the following circumstances
The categories of personal data that are being processed;
the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

the planned duration of storage of the personal data concerning you or, if specific information on this is no longer possible, criteria for determining the storage period
the existence of a right to authorisation or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing
The existence of a right to lodge a complaint with a supervisory authority;
All available information about the origin of the data if the personal data is not collected from the data subject;

The existence of automated decision-making including profiling in accordance with Art. 22 (Q) and (4) GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing for the data subject.
Furthermore, you have a right to information as to whether personal data is transferred to a country that is not a member of the EU (so-called third country) or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

b) Right to rectification

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. You also have the right to request that we complete incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.

c) Right to erasure (right to be forgotten)

You can request that we erase the personal data concerning you without undue delay if one of the following grounds applies:
The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed:
You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there was no other legal basis for the processing.
You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. (2) GDPR to object to the processing.
The personal data concerning you has been processed unlawfully.

The deletion of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
The personal data concerning you have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
If the personal data in question has been made public by E-HOCH-3 ECO IMPACT EXPERTS GMBH & CO. KG and we are obliged to delete the personal data in accordance with the above principles, we are also obliged to inform other data controllers that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.
In this regard, we take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to fulfil these obligations, at least insofar as the processing is no longer necessary, i.e. legal requirements prescribe this or legitimate interests conflict with the deletion.

d) Rights to restriction of processing

You may request that we restrict the processing of your personal data under the following conditions:
The accuracy of the personal data is contested by you, for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful and you request the restriction of the use of the personal data instead of erasure.
We no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims.
You have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of E-HOCH-3 ECO IMPACT EXPERTS GMBH & CO.KG override your grounds.
If the processing of personal data concerning you has been restricted, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. In this case, you will also be informed by us before the restriction is lifted.

e) Rights to information

If you have asserted the right to rectification, erasure or restriction of processing, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. In this respect, you can request that we inform you about these recipients.

f) Right to data portability (data portability)

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where the processing is based on consent pursuant to Art. 6 (1) (b) GDPR and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, when exercising your right to data portability in accordance with Art. 20 para. 1 GDPR, you may request that the personal data be transferred directly from one controller to another controller, insofar as this is technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.

g) Right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on this provision.
E-HOCH-3 ECO IMPACT EXPERTS GMBH & CO. KG shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the option of exercising your right to object in connection with the use of information society services – notwithstanding Directive 2002/58/EC – by means of automated procedures that use technical specifications.

H) Right to withdraw consent under data protection law

If you have given your consent under data protection law, you have the right to withdraw this consent at any time with effect for the future.
i.) Automated decisions in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling.
profiling – which produces legal effects concerning him or her or similarly significantly affects him or her, insofar as the decision produces legal effects concerning him or her or similarly significantly affects him or her, insofar as the decision produces legal effects concerning him or her or similarly significantly affects him or her.
is not necessary for entering into, or the performance of, a contract between you and E-HOCH-3 ECO IMPACT EXPERTS GMBH & CO.KG
Or
is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests
Or
With the explicit consent of the data subject.
However, these decisions may not be based on special categories of personal data in accordance with
Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. A or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
If the decision is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or it is based on the data subject’s explicit consent, E-HOCH-3 ECO IMPACT EXPERTS GMBH & CO. KG shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.

J) Rights to lodge a complaint with the supervisory authority

Notwithstanding your rights vis-à-vis us, you also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR