1. Name and contact details of the party responsible for data processing and of the data protection officer of the company
The responsible party pursuant to the General Data Protection Regulation and other national data protection regulations of the member states as well as any other data protection provisions is:
EckPack Service GmbH & Co. KG
Phone: +49 6151 27 382-0
Fax: +49 6151 27 382-20
Commercial Register: District Court of Darmstadt, No. HRA 7255
EckPack Verwaltungs GmbH
represented by Mr Marin Maras, Managing Director
Phone: +49 6151 27 382-0
Fax: +49 6151 27 382-20
Commercial Register: Darmstadt District Court, No. HRB 88545
The data protection officer of EckPack Service GmbH & Co. KG can be reached at the above-mentioned address, or via Datenschutzbeauftrager@eckpack.com.
2. Collection and storage of personal data; manner and purpose of their use
As a general rule, we process personal the data of our users only in so far as it is necessary in order to provide a working website and to present our contents and services. Personal data of our users is processed exclusively with the consent of our users. Exceptions are only in those cases whereby the user’s consent cannot be obtained in advance and processing their data is permitted by law.
The legal basis for obtaining users’ consent to process personal data shall be Article 6, paragraph 1 (a) of the EU General Data Protection Regulation (GDPR).
Article 6, paragraph 1 (b) GDPR shall apply if personal data is processed that is required in order to perform a contract to which the data subject is party. It shall also be the legal basis for data processing operations that are necessary to take steps prior to entering into a contract.
Article 6, paragraph 1 (c) GDPR shall be the legal basis for all cases in which personal data must be processed in order to comply with the legal obligations to which our company is subject.
Article 6, paragraph 1 (d) shall apply if the vital interests of the data subject, or any other natural person, require the process of personal data.
Article 6, paragraph 1 (f) shall be the legal basis for data processing, if the purpose of safeguarding our legitimate interests, pursued by our company or a third party, requires data processing and if a subject’s interests, basic rights and fundamental freedoms do not override our company’s interests.
Personal data shall be deleted or blocked as soon as the purpose for its storage is no longer required. Data can be stored beyond this purpose, if it is provided by European or national legislation via EU regulations, laws or other provisions to which the responsible party is subject. In addition, data is blocked or deleted, if a deadline set by the regulations mentioned expires, in which case the conclusion or performance of a contract necessitates further data storage.
a) Visiting our website
As soon as you click on https://www.eckpack.com the browser of your terminal device automatically sends information to the server on our website. This information is temporarily stores to a so called logfile. The following information is collected, stored and then automatically deleted without your doing anything:
- IP address of the requesting computer
- Date and time of access
- Name and URL of requested file
- Accessing website (referrer URL)
- Browser used.
We process the above-mentioned information for the following purposes:
- Ensuring a seamless connection will be established smoothly with the website,
- Ensuring that our website is user-friendly
- Evaluation of system security and stability, and
- For further administrative purposes
The legal basis for data processing is article 6, paragraph 1 (f) GDPR. Our legitimate interest arises from the above-mentioned purposes to collect data. Under no circumstances will we use the data collected to draw conclusions about you as a person.
b) When using our contact form
If you have any questions you are welcome to contact us via a contact form provided on our website. In order to be able to use it you must enter a valid e-mail address. This tells us who the sender of a message is and enables us to answer it. You may enter further information if you wish.
Processing data for the purpose of contacting us pursues to article 6, paragraph 1 (a) GDPR on the basis of your voluntarily-given consent.
In addition to any information you may enter, the following data is stored:
- URL of the page of the contact form
- URL of the page which you have visited prior to the page of the contact form
- URL of the page of our website which you have visited first
- Information about the browser you are using
The personal data we collect via your using the contact form will be deleted after your enquiry was answered.
3. Forwarding data
Your personal data will not be forwarded to third parties other than for the following purposes:
We disclose your personal data to third parties only when:
- you have expressly agreed to it pursuant to article 6, paragraph 1 (a) GDPR
- the forwarding of your data pursuant to article 6, paragraph 1 (f) GDPR is necessary to establish, exercise or defend legal claims and no reason is apparent as to why your interest in not forwarding your data is worth being protected and overrides the former interest
- we are legally obliged to forward your data pursuant to article 6, paragraph 1 (c) GDPR, as well as when
- it is legally necessary in order to perform a contract with you pursuant to article 6, paragraph 1 (b) GDPR.
Our website applies cookies. They are small files automatically established by your browser and stored on your terminal device (laptop, tablet computer, smartphone etc.) when you visit our website. Cookies are not harmful to your device. Nor do they not contain any viruses, trojans or other harmful software.
Cookies collect information from your individual use of your terminal device. This does not mean that we gather direct information of your identity.
On the one hand, we apply cookies in order to enable user-friendly access offers for our visitors Therefore, we apply so-called session cookies that enable us to recognise that you have previously accessed our website. They are automatically deleted after you visit.
In addition to that and similarly in order to optimise user-friendliness, we use temporary cookies which are stored on your device for a certain period of time. Should you visit our website again because you wish to make use of our services, we can automatically recognise that you have been here before and which entries and settings you have made, so that you do not have to make them again.
Pursuant to article 6, section 1 1 (f), the data processed by cookies is necessary in order to safeguard our legitimate interests and those of third parties.
Most browsers accept cookies automatically. You can, however, configure your browser in a way that cookies cannot be stored on your computer or that you are informed when a new cookie is stored. However, by completely deactivating cookies you might no longer be able to use all the features on our website.
On our website https://www.eckpack.com we do not apply any analysing tools. This means, data about your visit to our website is neither collected nor analysed.
Pursuant to article 6, section 1 (f) GDPR, it is permitted to carry out tracking measures. Tracking tools may be applied in order to design and optimise a website according to its users’ needs. In addition, they are used to obtain statistical information about the use of a website and to evaluate it in order to optimise it. These are legitimate interests pursuant to the above-mentioned regulation.
6. Integrated YouTube or Vimeo videos
We use YouTube videos on some pages of our website. The operator of their plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page featuring a YouTube plugin, a connection to the You Tube’s server is established. In doing so, YouTube will be informed about which of our pages you have visited. If you are logged on to your YouTube account, YouTube will be able to associate your browsing behaviour with your identity. You can prevent this by logging out of your YouTube account.
As soon as a YouTube video is started cookies are set to collect data about usage patterns. Those who deactivated the storage of cookies for the Google-Ad programme will not have to fear such cookies when watching YouTube videos. YouTube, however, stores non-personal usage information to other cookies. If you wish to prevent it, you have to block the storage of cookies to your browser.
7. Rights of the persons concerned:
You have the following rights:
- Pursuant to article 15 GDPR, you have the right to demand information about the personal data we have processed. In particular, you may demand information about the purposes of data processing, the categories of personal data concerned, the categories of recipients to whom your data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification of errors, erasure, restriction of processing or objection to such processing, the existence of the right to lodge a complaint, the origin of your data if it was not collected by us but by a third party and, finally, about the existence of an automated decision-making process, including profiling and, if this is the case, meaningful information about their particular details.
- Pursuant to article 16 GDPR it is your right to demand without undue delay rectification of incorrect or completion of incomplete personal data which we have stored about you.
- Pursuant to article 17 GDPR, you may demand erasure of personal data concerning you, unless such processing is necessary for the exercise of the right of freedom of expression and information, for compliance with legal obligations, for reasons of public interests nor for the establishment, exercise or defence of legal claim.
- Pursuant to article 18, you have the right to obtain restriction of the processing of your personal data if you are contesting the accuracy of it, if processing your data is unlawful and you oppose their erasure, if we no longer need your data and you need them in order to establish, exercise or defend legal claims, or if you have already objected to your data being processed pursuant to article 21 GDPR.
- Pursuant to article 20 GDPR, it is your right to receive the personal data that you have provided us with, in a structured, currently used and machine-readable format or to have them transmitted to another controller.
- Pursuant to article 7, section 3 GDPR, it is your right to withdraw your consent at any time which we signify that we may no longer continue processing any data that was subject to your consent.
- Pursuant to article 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you may refer to the appropriate authority in the area of your usual residence, at your place of work, or in the area where our headquarters are situated
8. Right to object
Pursuant to article 21 GDPR, you have the right to object to processing of your personal data if it is processed based on legitimate interests in accordance with article 6, paragraph 1 (f) GDPR on grounds relating to your particular situation or that your objection refers to direct marketing purposes. In that last case, you have a general right of objection which, even in the absence of any instruction regarding a specific situation, we would overturn.
If you wish to make use of your right to withdraw or object, an e-mail sent to the following address will suffice: firstname.lastname@example.org.
9. Data security
Within our website, we use the widely spread, SSL (Secure Socket Layer), in conjunction with the highest encryption level supported by your browser. As a rule, this is a 256 Bit encryption. If your browser does not support 256 Bit encryption, we will use 128 Bit v3 technology instead. Whether or not an individual page of our internet presence is transmitted with encryption can be identified by the lock or key symbol showing in the lower status bar of your browser.
Apart from that, we make use of appropriate technical and organisational security measures in order to protect your data from accidental or deliberate manipulation, partial or complete loss, deterioration or unauthorised access of third parties. Our security measures will continue to be upgraded in line with the best technical development available.