​​Data protection declaration according to the DSGVO

​I. Name and address of the responsible person

The person responsible in accordance with Art. 4 Para. 7 EU General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is: 

ergo: elektronik GmbH
Söflinger Straße 100
89077 Ulm, Germany
+49 (0)731 169088 0
info@ergo-elektronik.de
www.ergo-elektronik.de

II. Name and address of the data protection officer

The data protection officer of the person responsible is: 

audius GmbH
Mendelstraße 13
89081 Ulm, Germany
+49 (0)7151 36900 0
datenschutz@ergo-elektronik.de
www.audius.de 

III. General information on data processing

1. Scope of processing of personal data

As a matter of principle, we collect and use personal data of our users only to the extent necessary to provide a functional website and our contents and services. The collection and use of personal data of our users is regularly only carried out with the consent of the user. An exception is made in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by legal regulations.

2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6(1)(a) EU Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

When processing personal data which is necessary for the performance of a contract to which the data subject is a party, Article 6 (1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the performance of pre-contractual measures. Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6(1)(d) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6(1)(f) GDPR serves as the legal basis for the processing.

3. Data erasure and storage duration

The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage is no longer applicable. Furthermore, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the person responsible is subject. Data is also blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.

4. Use of service providers within the framework of the website

In some cases we use external service providers to process your data on our website. These have been carefully selected and commissioned by us. They are bound by our instructions and are checked regularly. There is no data transfer to countries outside the EU or the EEA (so-called third countries).

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Whenever our website is visited, our system automatically collects data and information from the computer system of the calling computer. When using the website for informational purposes only, we only collect the personal data that the browser sends to our server. The following data is collected:

• IP address
• Information about the browser type and version used
• User's operating system
• Date and time of access

The data is also stored in the log files of our system. Not affected by this are the IP addresses of the user or other data that allow the data to be assigned to a user. This data is not stored together with other personal data of the user.

2. Legal basis for the data processing

The legal basis for the temporary storage of data is Art. 6(1)(f) GDPR.

3. Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
These purposes also include our legitimate interest in data processing in accordance with Art. 6(1)(f) GDPR. 

4. Duration of storage

The data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended.

5. Possibility of opposition and removal

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. There is therefore no possibility of objection on the part of the user.

V. Use of technically necessary cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require the calling browser to be able to be identified even after a page change.

2. Legal basis for the data processing

The legal basis for the processing of personal data using cookies is Art. 6(1)(f) GDPR.

3. Purpose of the data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change.
The user data collected by technically necessary cookies is not used to create user profiles. 
These purposes also include our legitimate interest in the processing of personal data in accordance with Art. 6(1)(f) GDPR. 

4. Duration of storage, possibility of opposition and removal

Cookies are stored on the user's computer and are transmitted by the user to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated, it is possible that not all functions of the website can be used to their full extent.

VI. Contact form and e-mail contact

1. Description and scope of data processing

There is a contact form on our website which can be used for electronic contact. If a user takes this opportunity, the data entered in the input mask will be transmitted to us and stored.

For the processing of the data, your consent will be obtained during the sending process and reference will be made to this privacy policy.

Alternatively, it is possible to contact us via the e-mail address provided. In this case the personal data of the user transmitted with the e-mail will be stored.

In this context, it does not pursue the transfer of data to third parties. The data will be used exclusively for processing the conversation.

2. Legal basis for the data processing 

The legal basis for the processing of the data is Art. 6(1)(a) GDPR if the user has given his consent. 

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.

3. Purpose of the data processing

The processing of the personal data from the input mask serves us only for the processing of the establishment of contact. In the case of contacting us by e-mail, this is also the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary for the purpose of their collection. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be concluded from the circumstances that the matter in question has been finally clarified.

The personal data additionally collected during the sending process will be deleted after a period of seven days at the latest.

5. Possibility of opposition and removal

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case the conversation cannot be continued. The revocation can be made without any formality and should be addressed to the person responsible.

All personal data stored in the course of the contact will be deleted in this case.

VII. Integration of Google Maps 

On this website we use the offer of Google Maps. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.

By visiting the website, Google receives the information that you have called up the corresponding subpage of our website. In addition, the data mentioned under IV of this declaration is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google stores your data as user profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of providing needs-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles, whereby you must contact Google in order to exercise this right. 

For further information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

VIII. Rights of the data subject

Every data subject has the right of access under Article 15 GDPR, the right of rectification under Article 16 GDPR, the right of deletion under Article 17 GDPR, the right to restrict processing under Article 18 GDPR, the right of objection under Article 21 GDPR and the right of data transferability under Article 20 GDPR. With regard to the right to information and the right of deletion, the restrictions under Articles 34 and 35 of the German Federal Data Protection Act (BDSG) apply. In addition, there is a right of appeal to a data protection supervisory authority (Article 77 GDPR in conjunction with Article 19 BDSG).

You can revoke your consent to the processing of personal data at any time. This also applies to the revocation of declarations of consent that were given to us before the EU data protection basic regulation came into force, i.e. before 25 May 2018. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected. The revocation can be made without formality and should be addressed to the person responsible.

Right of appeal to the competent supervisory authority

In the event of violations of data protection law, the person concerned has a right of appeal to the competent supervisory authority. The competent supervisory authority for data protection issues is the State Data Protection Commissioner of the federal state in which our company is based. A list of the data protection officers and their contact details can be found at the following link:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

IX. Our social media appearances

Data processing through social networks

We maintain publicly accessible profiles in social networks. You can find the social networks we use in detail below.

Social networks such as Facebook, Twitter etc. can usually analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media sites triggers numerous data protection-relevant processing operations. In detail:

If you are logged in to your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies that are stored on your end device or by recording your IP address.

With the help of the data thus collected, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-related advertising can be displayed to you both inside and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing on the social media portals. Depending on the provider, further processing may be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection regulations of the respective social media portals.

Legal basis

Our social media appearances are designed to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest in the sense of

Art. 6(1)(f) GDPR. The analysis processes initiated by the social networks may be based on deviating legal bases which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6(1)(a) GDPR).

Responsibility and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can assert your rights (information, correction, deletion, restriction of processing, data transferability and complaints) both against us and against the operator of the respective social media portal (e.g. against Facebook).

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing procedures of the social media portals. Our possibilities depend largely on the corporate policy of the respective provider.

Storage duration

The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing them no longer applies, you request us to delete them, revoke your consent to store them or the purpose for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Social networks in detail

Facebook

We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.

We have a joint processing agreement (Controller Addendum) with Facebook. This agreement defines the data processing operations for which we or Facebook are responsible when you visit our Facebook page. You can view this agreement by clicking on the following link:

https://www.facebook.com/legal/terms/page_controller_addendum 

You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in:

https://www.facebook.com/settings?tab=ads 

Details can be found in the Facebook privacy policy:

https://www.facebook.com/about/privacy/