Privacy Notice | elostore

Privacy Notice


1. Information about the collection of personal data


1.1
In the following, we inform you about the collection of personal data using our website. Personal data is any data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

1.2
Responsible according to Art. 4 para. 7 EU General Data Protection Regulation (DS-GVO) are
  • elostore GmbH & Co. KG
  • Untere Grabenstraße 23
  • D-88299 Leutkirch
  • e-mail: shop@elo.store
  • (see our imprint)

1.3
You can reach our data protection officer at the following e-mail address:shop@elo.store or at our postal addresses with the addition of "the data protection officer".

1.4
If you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions.We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.
The legal basis for the processing of personal data described here is Art. 6 para. 1 lit f) DSGVO. Our legitimate interest is to offer you the possibility of a simple and quick contact in order to answer your questions and concerns.


2. Your rights


2.1
You have the following rights with respect to the personal data concerning you:
  • - right of information,
  • - Right of rectification or erasure,
  • - Right to restrict processing,
  • - Right to oppose processing,
  • - Right of data portability.

2.2
You also have the right to complain about our processing of your personal data to a data protection supervisory authority.
Locally responsible for us is:


3. Collection of personal data when visiting our website


3.1
In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO)
  • - IP-Adress
  • - Date and time of the request
  • - Time zone difference from Greenwich Mean Time (GMT)
  • - Request content (concrete page)
  • - Access status/HTTP-Statuscode
  • - Data volume transferred in each case
  • - Website from which the request comes
  • - Browser
  • - Operating system and its interface
  • - Language and version of the browser software

3.2
In addition to the previously mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the Internet offer as a whole more user-friendly and effective.

3.3
Cookies usage:
This website uses the following types of cookies, the scope and functionality of which are explained below:

  • Session- Cookies are automatically deleted when you close the browser. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

  • Permanent cookies are deleted automatically after a specified duration, which may differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser.

  • Essential cookies serve the control during your visit on our web pages and are necessary, so that you can navigate e.g. by the sides and use substantial functions.

  • Statistic cookies help us to better understand how visitors interact with the website in so-called pseudonymous usage profiles. A direct conclusion to a person is not possible. With these cookies, we can measure the reach of our offer. The legal basis for data processing is your previously given consent in accordance with Art. 6 Para. 1 lit. a DSGVO.

  • Marketing-cookies allow us to provide you with optimized and personalized content and offers on our or third-party sites. These cookies are only active if you have given us your prior consent, the legal basis for data processing is Art. 6 para. 1 lit. a DSGVO.

Your consent or refusal to the cookies listed above (Essential, Statistics Marketing), can be given via the be customized. There we also explain how it works, for which purposes we or third-party providers want to use the cookies and the duration of the storage of your data.
However, you can also configure your browser settings according to your preferences and refuse cookies. We would like to point out that you may not be able to use all the functions of this website.


4. Other functions and offers of our website


4.1
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you usually have to provide further personal data, which we use to provide the respective service and for which the aforementioned data processing principles apply.

4.2
In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

4.3
Insofar as our service providers or partners are based in a state outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the application.


5. Consent and withdrawal/Consent management tool and objection according to Art. 21 DSGVO


5.1
If you have given your consent to the processing of your data in accordance with Art. 7 DSGVO, you may revoke this consent at any time, with effect for the future.
To obtain and manage your consent, we use a so-called Consent Management Tool on our websites. Through this tool, you have the opportunity to decide on the setting of cookies on our websites according to your specifications. You are always informed about the setting options of the tool and to subsequently grant or revoke your consent.

5.2
Insofar as we base the processing of your personal data on the balancing of interests pursuant to Art. 6 (1) e) or f) DSGVO, you may object to the processing if your personal situation gives rise to grounds against data processing.
In addition, you can notify us of your advertising objection using the following contact information:
  • elostore GmbH & Co KG
  • Untere Grabenstraße 23
  • D-88299 Leutkirch
  • E-Mail: shop@elo.store


6. Secure communication on the Internet


6.1
To ensure the confidentiality of communication with you via our contact form, we use a so-called TLS encryption according to the current state of technology


7. Data erasure and storage


7.1
The personal data of the data subject shall be deleted or blocked as soon as the purpose of storage ceases to apply. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Blocking or deletion of data also takes place if a storage period prescribed by the aforementioned standards expires.
For the time limits for the storage of your data by cookies, please refer to the .


8. elostore


8.1
If you want to order in our elostore, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. Mandatory data necessary for the processing of contracts are marked separately, other information is voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment data to our house bank.
You can voluntarily create a customer account, through which we can store your data for future purchases. When you create an account under "My account", the data you provide will be stored revocably. If you want to have all further data, including your user account, deleted, please contact us via the mail shop@elo.store.
We may also process the data you provide in order to send you emails with technical information.

8.2
Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, after two years, we will restrict processing, i.e. your data will only be used to comply with legal obligations.

8.3
To prevent unauthorized access by third parties to your personal data, especially financial data, the order process is encrypted using TLS technology.

8.4
The legal basis for this is Art. 6 para. 1 p. 1 lit. b DS-GVO.


9. Newsletter


9.1
With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the consent form.

9.2
For registration to our newsletter, we use the so-called double-opt-in method. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

9.3
The only mandatory data for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a DS-GVO.

9.4
You can revoke your consent to receive the newsletter and unsubscribe at any time. You can revoke your consent by clicking on the link provided in every newsletter e-mail or by sending an e-mail to shop@elo.store.

9.5
We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your e-mail address and an individual ID.
With the data obtained in this way, we create a user profile in order to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters, which links you click on in them and infer your personal interests from this. We link this data to actions you have taken on our website.
You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us via another contact channel. The information is stored for as long as you are subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously.


10. Google Analytics


10.1
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; "Google" for short). Google Analytics uses so-called "cookies", which are text files placed on your computer, to help the website analyze how users use the site.

10.2
The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will - according to its own information - in no case associate your IP address with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
We would like to point out that on this website Google Analytics has been extended by the code "gat._anonymizeIp();" to ensure anonymized collection of IP addresses (so-called IP masking).
You can find more Google Analytics privacy settings here:https://support.google.com/analytics/answer/9019185?hl=de&ref_topic=2919631. General information on Google Analytics and data protection can be found at http://tools.google.com/dlpage/gaoptout?hl=de respectively under https://www.google.de/intl/de/policies/ .

10.3
The legal basis for the processing of personal data for advertising and analysis purposes by Google is Art. 6 para. 1 lit. a) DSGVO.

10.4
International data processing by Google. Google intends to convert its data processing in the USA to EU standard contractual clauses according to Art. 46 (2) lit c) DSGVO since 12.08.2020 and to adapt data processing contracts.
Translated, Google's latest announcement is as follows:
Dear partner,
Due to the recent decision of the Court of Justice of the European Union on data transfers invalidating the Privacy Shield, Google will move to standard contractual clauses (SCCs) for the transfer of online advertising and measurement of personal data from the Economic Area of Europe, Switzerland and the United Kingdom.
We will therefore update our existing Google Ads Data Processing Terms, Google Ads Controller-Controller Privacy Policy and Google Measurement Controller-Controller Data Privacy Policy to add the relevant SCCs adopted by the European Commission.
We make these updates solely to ensure compliance with the GDPR. The updates do not grant Google any additional rights to data. If the Google Ads Data Processing Privacy Policy or the Google Ads Controller Privacy Policy are already part of your contract (or if you have separately accepted the Google Measurement Controller Privacy Policy, if available), the updates will apply as of August 12. 2020.
For more information, please check out this article, which we continue to update, or (if applicable) talk to your Google representative.
Many thanks,
The Google team
https://privacy.google.com/businesses/compliance/#!#gdpr
Until final implementation, the legal basis for data transfer to the USA is your consent pursuant to Art. 49 (1) lit a) DSGVO.


11. YouTube videos


11.1
You Tube is a product of Google Ireland Limited,Gordon House, Barrow Street, Dublin 4, Ireland, Phone:+353 1 543 1000, Fax: +353 1 686 5660, e-mail: support-deutschland@google.com.
We have embedded YouTube videos in our website, which are stored on http://www.YouTube.com and can be played directly from our website. These are all embedded in "extended data protection mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in § 3 of this privacy policy will be transmitted. We have no influence on this data transmission.

11.2
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 3 of this statement are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
 For more information on the purpose and scope of data collection and processing by YouTube, please see the privacy policy. There you will also find further information about your rights and setting options to protect your privacy: https://policies.google.com/privacy?hl=de#about .

11.3
The legal basis for the processing of personal data for advertising and analysis purposes by Google is Art. 6 para. 1 lit. a) DSGVO, which we have obtained in the Consent Banner.

11.4
International data processing by Google. Google intends to convert its data processing in the USA to EU standard contractual clauses according to Art. 46 (2) lit c) DSGVO since 12.08.2020 and to adapt data processing contracts.
Translated, Google's latest announcement is as follows:
Dear partner,
Due to the recent decision of the Court of Justice of the European Union on data transfers invalidating the Privacy Shield, Google will move to standard contractual clauses (SCCs) for the transfer of online advertising and measurement of personal data from the Economic Area of Europe, Switzerland and the United Kingdom.
We will therefore update our existing Google Ads Data Processing Terms, Google Ads Controller-Controller Privacy Policy and Google Measurement Controller-Controller Data Privacy Policy to add the relevant SCCs adopted by the European Commission.
We make these updates solely to ensure compliance with the GDPR. The updates do not grant Google any additional rights to data. If the Google Ads Data Processing Privacy Policy or the Google Ads Controller Privacy Policy are already part of your contract (or if you have separately accepted the Google Measurement Controller Privacy Policy, if available), the updates will apply as of August 12. 2020.
For more information, please check out this article, which we'll continue to update, or (if applicable) talk to your Google representative.
Many thanks,
The Google team
https://privacy.google.com/businesses/compliance/#!#gdpr
Until final implementation, the legal basis for data transfer to the USA is your consent pursuant to Art. 49 (1) lit a) DSGVO.


12. Google Adwords Conversion


12.1
We use Google Adwords, a service of Google Ireland Limited, Gordon House, Barrow Street,
Dublin 4, Irland, Phone: +353 1 543 1000, Fax: +353 1 686 5660, e-mail: support-deutschland@google.com, to draw attention to our products and services on external websites with the help of advertisements (so-called Google Adwords). By comparing the data from the advertising campaigns, we can determine how successful the individual advertising measures are. In this way, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
 These cookies enable Google to recognize your internet browser. If a user visits certain pages of the website of an Adwords customer and the cookie stored on his computer has not yet expired, Google and the Adwords customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of other Adwords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertisements; in particular, we cannot identify users on the basis of this information.
 Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.
For more information, please contact:https://ads.google.com/intl/de_de/home/faq/gdpr/

12.2
The legal basis for the analysis and advertising tracking by Google is your consent pursuant to Art. 6 (1) lit a) DSGVO, which we have obtained in the consent banner.

12.3
International data processing by Google. Google intends to convert its data processing in the USA to EU standard contractual clauses according to Art. 46 (2) lit c) DSGVO since 12.08.2020 and to adapt data processing contracts.
 "Translated, Google's latest announcement is as follows:
Dear partner,
due to the recent decision of the Court of Justice of the European Union on data transfers invalidating the Privacy Shield, Google will switch to standard contractual clauses (SCCs) for the transfer of online advertising and measurement of personal data from the economic area of Europe, Switzerland and the United Kingdom.
We will therefore update our existing Google Ads Data Processing Terms, Google Ads Controller-Controller Privacy Policy and Google Measurement Controller-Controller Data Privacy Policy to add the relevant SCCs adopted by the European Commission.
We make these updates solely to ensure compliance with the GDPR. The updates do not grant Google any additional rights to data. If the Google Ads Data Processing Privacy Policy or the Google Ads Controller Privacy Policy are already part of your contract (or if you have separately accepted the Google Measurement Controller Privacy Policy, if available), the updates will apply as of August 12. 2020.
For more information, please check out this article, which we continue to update, or (if applicable) talk to your Google representative.
Many thanks,
The Google team
https://privacy.google.com/businesses/compliance/#!#gdpr
Until final implementation, the legal basis of the data transfer to the USA is based on your consent pursuant to Art. 49 (1) lit a) DSGVO.


13. Clarity


13.1
Our website uses "Clarity", a tool from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA for statistical behavioral analysis of the use of the website and user interaction on our website.

Behavioural metrics, heat maps and session replays, in particular user interactions such as mouse movements and other interaction with content and functions of the website, are created as well as pseudonymized usage profiles, graphical representations and session recordings for evaluation.

We process usage data (e.g. websites visited, access times, geographical origin of the page view, language settings, interaction events and behavioral metrics, in particular in the form of clicks, scrolls and, for example, mouse movements including stack trace, selection, window sizes, etc.),

We use Clarity for the needs-based design and continuous improvement of our online offering, for tracking and optimizing the functionality of the website and for error analysis.

The data collected by Clarity will not be used to personally identify the visitor to the website without the separately granted consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym.

The data and information collected is transmitted to Microsoft servers in the USA and stored there. Microsoft reserves the right to use the transmitted information for any purpose in accordance with the Microsoft Privacy Policy, including the provision of the offer, the improvement of Microsoft products and services, including reporting and performance analysis and the creation of user profiles for purposes that include advertising.

The data collected by Clarity will be deleted after 13 months at the latest.

The legal basis for the processing of your data is your consent - Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time. To exercise your revocation, deactivate the Clarity service in the "Cookie Consent Tool" provided on the website. In addition, we would like to point out the possibilities of the data protection functions of your browser and the deletion of cookies from your hard disk as well as the possibility of an opt-out under https://choice.microsoft.com/de-DE/opt-out.

The provider of Clarity is headquartered in the USA. For data transfers to the USA, the European Commission has issued an adequacy decision under the EU-US Data Privacy Framework (EU-US DPF) in accordance with Art. 45 para. 1 GDPR; thus, the level of data protection in the USA for certified organizations has been assessed as equivalent to that in the EU. The provider of Clarity is certified on the EU-US DPF list of the US Department of Commerce.

https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000KzNaAAK&status=Active

Microsoft also uses so-called standard contractual clauses (= Art. 46 (2) and (3) GDPR). Standard Contractual Clauses (SCCs) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. These clauses are based on an implementing decision of the EU Commission.

Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, the provider of Clarity undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA.

Further information on terms of use and data protection can be found at https://privacy.microsoft.com/de-de/privacystatement