1.1

In the following, we inform you about the collection of personal data using our website. Personal data is any data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

1.2

Responsible according to Art. 4 para. 7 EU General Data Protection Regulation (DS-GVO) are

• elostore GmbH & Co. KG
• Untere Grabenstraße 23
• D-88299 Leutkirch
  
• e-mail: shop@elo.store
• (see our imprint)

1.3

You can reach our data protection officer at the following e-mail address:shop@elo.store or at our postal addresses with the addition of "the data protection officer".

1.4

If you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions.We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.

2.1

You have the following rights with respect to the personal data concerning you:

• - right of information,
• - Right of rectification or erasure,
• - Right to restrict processing,
• - Right to oppose processing,
• - Right of data portability.

2.2

You also have the right to complain about our processing of your personal data to a data protection supervisory authority.

• The State Commissioner for Data Protection and Freedom of Information,
• Königstrasse 10 a
• 70173 Stuttgart
• Phone:0711/615541-0
• FAX:0711/615541-15
• e-mail: poststelle@lfdi.bwl.de

3.1

In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO)

• - IP-Adress
• - Date and time of the request
• - Time zone difference from Greenwich Mean Time (GMT)
• - Request content (concrete page)
• - Access status/HTTP-Statuscode
• - Data volume transferred in each case
• - Website from which the request comes
• - Browser
• - Operating system and its interface
• - Language and version of the browser software

3.2

In addition to the previously mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the Internet offer as a whole more user-friendly and effective.

3.3

Cookies usage:

• Session- Cookies are automatically deleted when you close the browser. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.


• Permanent cookies are deleted automatically after a specified duration, which may differ depending on the cookie. You can delete the cookies at any time in the security settings of your browser.


• Essential cookies serve the control during your visit on our web pages and are necessary, so that you can navigate e.g. by the sides and use substantial functions.


• Statistic cookies help us to better understand how visitors interact with the website in so-called pseudonymous usage profiles. A direct conclusion to a person is not possible. With these cookies, we can measure the reach of our offer. The legal basis for data processing is your previously given consent in accordance with Art. 6 Para. 1 lit. a DSGVO.


• Marketing-cookies allow us to provide you with optimized and personalized content and offers on our or third-party sites. These cookies are only active if you have given us your prior consent, the legal basis for data processing is Art. 6 para. 1 lit. a DSGVO.

4.1

In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you usually have to provide further personal data, which we use to provide the respective service and for which the aforementioned data processing principles apply.

4.2

In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

4.3

Insofar as our service providers or partners are based in a state outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the application.

5.1

If you have given your consent to the processing of your data in accordance with Art. 7 DSGVO, you may revoke this consent at any time, with effect for the future.

5.2

Insofar as we base the processing of your personal data on the balancing of interests pursuant to Art. 6 (1) e) or f) DSGVO, you may object to the processing if your personal situation gives rise to grounds against data processing.

• elostore GmbH & Co KG
• Untere Grabenstraße 23
• D-88299 Leutkirch
• E-Mail: shop@elo.store

6.1

To ensure the confidentiality of communication with you via our contact form, we use a so-called TLS encryption according to the current state of technology

7.1

The personal data of the data subject shall be deleted or blocked as soon as the purpose of storage ceases to apply. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Blocking or deletion of data also takes place if a storage period prescribed by the aforementioned standards expires.

8.1

If you want to order in our elostore, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. Mandatory data necessary for the processing of contracts are marked separately, other information is voluntary. We process the data you provide to process your order. For this purpose, we may pass on your payment data to our house bank.

8.2

Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, after two years, we will restrict processing, i.e. your data will only be used to comply with legal obligations.

8.3

To prevent unauthorized access by third parties to your personal data, especially financial data, the order process is encrypted using TLS technology.

8.4

The legal basis for this is Art. 6 para. 1 p. 1 lit. b DS-GVO.

9.1

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the consent form.

9.2

For registration to our newsletter, we use the so-called double-opt-in method. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

9.3

The only mandatory data for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a DS-GVO.

9.4

You can revoke your consent to receive the newsletter and unsubscribe at any time. You can revoke your consent by clicking on the link provided in every newsletter e-mail or by sending an e-mail to shop@elo.store.

9.5

We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your e-mail address and an individual ID.

10.1

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; "Google" for short). Google Analytics uses so-called "cookies", which are text files placed on your computer, to help the website analyze how users use the site.

10.2

The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will - according to its own information - in no case associate your IP address with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

10.3

The legal basis for the processing of personal data for advertising and analysis purposes by Google is Art. 6 para. 1 lit. a) DSGVO.

10.4

International data processing by Google. Google intends to convert its data processing in the USA to EU standard contractual clauses according to Art. 46 (2) lit c) DSGVO since 12.08.2020 and to adapt data processing contracts.

11.1

You Tube is a product of Google Ireland Limited,Gordon House, Barrow Street, Dublin 4, Ireland, Phone:+353 1 543 1000, Fax: +353 1 686 5660, e-mail: support-deutschland@google.com.

11.2

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned under § 3 of this statement are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

11.3

The legal basis for the processing of personal data for advertising and analysis purposes by Google is Art. 6 para. 1 lit. a) DSGVO, which we have obtained in the Consent Banner.

11.4

International data processing by Google. Google intends to convert its data processing in the USA to EU standard contractual clauses according to Art. 46 (2) lit c) DSGVO since 12.08.2020 and to adapt data processing contracts.

12.1

We use Google Adwords, a service of Google Ireland Limited, Gordon House, Barrow Street,

12.2

The legal basis for the analysis and advertising tracking by Google is your consent pursuant to Art. 6 (1) lit a) DSGVO, which we have obtained in the consent banner.

12.3

International data processing by Google. Google intends to convert its data processing in the USA to EU standard contractual clauses according to Art. 46 (2) lit c) DSGVO since 12.08.2020 and to adapt data processing contracts.

13.1

Our website uses "Clarity", a tool from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA for statistical behavioral analysis of the use of the website and user interaction on our website.

Behavioural metrics, heat maps and session replays, in particular user interactions such as mouse movements and other interaction with content and functions of the website, are created as well as pseudonymized usage profiles, graphical representations and session recordings for evaluation.

We process usage data (e.g. websites visited, access times, geographical origin of the page view, language settings, interaction events and behavioral metrics, in particular in the form of clicks, scrolls and, for example, mouse movements including stack trace, selection, window sizes, etc.),

We use Clarity for the needs-based design and continuous improvement of our online offering, for tracking and optimizing the functionality of the website and for error analysis.

The data collected by Clarity will not be used to personally identify the visitor to the website without the separately granted consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym.

The data and information collected is transmitted to Microsoft servers in the USA and stored there. Microsoft reserves the right to use the transmitted information for any purpose in accordance with the Microsoft Privacy Policy, including the provision of the offer, the improvement of Microsoft products and services, including reporting and performance analysis and the creation of user profiles for purposes that include advertising.

The data collected by Clarity will be deleted after 13 months at the latest.

The legal basis for the processing of your data is your consent - Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time. To exercise your revocation, deactivate the Clarity service in the "Cookie Consent Tool" provided on the website. In addition, we would like to point out the possibilities of the data protection functions of your browser and the deletion of cookies from your hard disk as well as the possibility of an opt-out under https://choice.microsoft.com/de-DE/opt-out.

The provider of Clarity is headquartered in the USA. For data transfers to the USA, the European Commission has issued an adequacy decision under the EU-US Data Privacy Framework (EU-US DPF) in accordance with Art. 45 para. 1 GDPR; thus, the level of data protection in the USA for certified organizations has been assessed as equivalent to that in the EU. The provider of Clarity is certified on the EU-US DPF list of the US Department of Commerce.

https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000KzNaAAK&status=Active

Microsoft also uses so-called standard contractual clauses (= Art. 46 (2) and (3) GDPR). Standard Contractual Clauses (SCCs) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there. These clauses are based on an implementing decision of the EU Commission.

Through the EU-US Data Privacy Framework and the Standard Contractual Clauses, the provider of Clarity undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA.

Further information on terms of use and data protection can be found at https://privacy.microsoft.com/de-de/privacystatement