Privacy policy

1. Privacy at a glance

General information

We are glad that you are visiting our website. Thank you for your interest. In the following, we provide you with information on what happens to your personal data when you visit this website. “Personal data” in this context refers to all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our Privacy Statement, which is provided under this text.

Data collection on this website

Who is responsible for the collection of data on this website?

The controller in the sense employed in Art. 4 No. 7 GDPR, the other data protection laws applicable in the Member States of the European Union and other regulations and provisions of a privacy-related nature is the website operator, Mittwald CM Service GmbH & Co. KG. Its contact details can be found in the “Notice on the controller” section of this Privacy Statement.

How do we collect your data?

Firstly, your data will be collected when you share it with us. This can include data such as information you enter into a contact form.

Other data is collected by our IT systems automatically or is subject to your consent when you visit the website. The information in this context is mainly technical data (e.g. internet browser, operating system or the time at which the site was accessed). This data is collected automatically when you access this website.

What do we use your data for?

Part of the data is collected in order to ensure the error-free provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have in regard to your data?

You have the right to be provided with information on the provenance, recipients and purpose of your stored personal data at any time, free of charge. You also have the right to request the rectification or erasure of this data. If you have given your consent to the processing of your data, you can withdraw this consent with future effect at any time. In addition, you have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the responsible supervisory authority.

You can contact us regarding this subject or any further questions related to data protection at any time.

2. General information and mandatory notices

Data protection

The operators of these sites take the protection of your personal data very seriously. We treat your personal data as confidential and handle it in accordance with the statutory provisions on data protection and this Privacy Statement.

When you use this website, various personal data is collected. “Personal data” refers to all data with which you can be personally identified. This Privacy Statement explains which data we collect and what we use it for. It also explains how and for what purpose this occurs.

Please note that data transmission via the internet (e.g. when communicating via e-mail) may be subject to gaps in security. Total protection of data from access by third parties is not possible.

Notice regarding the controller

The controller responsible for the processing of data on this website is:

ecoro GmbH
Represented by Daniel Daum, Christoph Tullius

Wagmüllerstraße 16
80538 München
Tel.: +49 157 3932 1496
E-mail: d.daum@ecoro-road.com

The controller is the natural or legal person who decides on the purposes and means of processing personal data (e.g. names, e-mail addresses), either independently or jointly in cooperation with other parties.

Duration of storage

Except in cases where a more specific duration of storage has been specified under this Privacy Statement, we will retain your personal data until the purpose for processing no longer applies. In the event that you submit a request for erasure or withdraw your consent to data processing, your data will be erased as long as we have no other legally admissible grounds for the storage of your personal data (e.g. retention periods under tax law or commercial law); in the latter case, erasure will be carried once these grounds no longer apply.

Notice regarding the transmission of data to the US and other third countries

Our website incorporates tools and other elements from companies based in the US and other third countries which are not secure in terms of data protection law. When these tools are active, your personal data may be transmitted to these third countries and processed there. Please note that a level of data protection comparable to that which applies in the EU cannot be guaranteed in these countries. In the US, for example, security authorities can demand personal data from US companies without any opportunity for you to take legal action against this as the affected data subject. For this reason, the possibility that US authorities (e.g. intelligence agencies) could process, analyse and permanently store your data located on US servers for surveillance purposes cannot be ruled out. We have no influence over these processing activities.

Withdrawing your consent to data processing

Many data processing procedures are possible only with your express consent. You can withdraw any consent that has already been granted at any time. The lawfulness of any data processing which has occurred before the time at which consent is withdrawn is not affected by this withdrawal.

Withdrawing your consent to data processing

IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E OR F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR GROUNDS RELATING TO YOUR PARTICULAR SITUATION AT ANY TIME; THIS ALSO APPLIES TO ANY PROFILING ON THE BASIS OF THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH ANY INSTANCE OF PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY STATEMENT. IF YOU FILE AN OBJECTION, WE WILL NO LONGER PROCESS THE PERSONAL DATA OF YOURS IN QUESTION UNLESS WE CAN PRODUCE EVIDENCE OF COMPULSORY AND LEGITIMATE REASONS FOR THE PROCESSING WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING AGAINST LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED IN ORDER TO CONDUCT DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL DATA PERTAINING TO YOU FOR THE PURPOSE OF SUCH ADVERTISING AT ANY TIME; THIS ALSO APPLIES TO PROFILING IN CASES WHERE IT IS CONNECTED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to lodge a complaint with the responsible supervisory authority

In the event of violations of the GDPR, the data subject has the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, their place of work or the place of the alleged violation. The right to lodge a complaint applies without prejudice to any other administrative or judicial legal remedies.

Right to data portability

You have the right to instruct us to provide data that we process by automated means on the basis of your consent or in order to fulfil a contract to you or a third party in a commonly used and machine-readable format. If you request the direct transmission of the data to another controller, this will be carried out only when technically feasible.

Information, erasure and rectification

Under the applicable statutory provisions, you have the right to receive information on the personal data of yours which is stored, the provenance and recipients thereof and the purpose of data processing, as well as a right to the rectification or erasure of this data where applicable. You can contact us regarding this subject or any further questions related to personal data at any time.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us regarding this subject at any time. The right to restriction of processing applies in the following cases:

If you dispute the accuracy of the personal data of yours which is stored with us, we typically need time to review whether this is the case. You have the right to request the restriction of the processing of your personal data for the duration of this review.
If the processing of your personal data occurred / is occurring unlawfully, you can request the restriction of data processing instead of erasure.
If we no longer need your personal data but you still need it in order to exercise, defend against or assert legal claims, you have the right to request the restriction of processing of your personal data instead of erasure.
If you have lodged an objection pursuant to Art. 21(1) GDPR, your interests must be weighed against ours. Until a determination is made regarding which interests will take precedence, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, processing of this data – apart from the storage thereof – is permitted only with your consent or in order to assert, exercise or defend against legal claims or in order to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

3. Notice on the collection of personal data and contact details on this website

The controller responsible for data processing on this website in the sense employed in the General Data Protection Regulation (GDPR) is ecoro GmbH, represented by Daniel Daum, Wagmüllerstraße 16, 80538 München, Germany, tel.: +49 157 3932 1496, e-mail: d.daum@ecoro-road.com. The controller responsible for the processing of personal data is the natural or legal person who decides on the purposes and means of processing personal data, either independently or jointly in cooperation with other parties.

This website employs SSL/TLS encryption for security reasons and in order to protect the transmission of personal data and other confidential content. Encrypted connections can be recognized by the character sequence “https://” in the URL and a padlock symbol in your browser’s URL bar.

Data collection when visiting our website

When using our website for merely informational purposes, i.e. if you do not register or share information with us by any other means, we only collect data that your browser sends to our servers (“server log files”). When you access our website, we collect the following data that is technically necessary for us to be able to display the website for you:

the website of ours which is being visited
date and time at which the website is accessed
volume of data transmitted, in bytes
source/referral from which you arrived on the page
browser used
operating system used
IP address used (potentially in anonymized form)

This data is processed on the basis of our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6(1)(f) GDPR. The data will not be shared or used in any other manner. However, we reserve the right to review past server log files in the event of concrete indications which suggest unlawful use.

Cookies

We use “cookies” on various pages in order to make the experience of visiting our website attractive and to enable the use of certain functions. These consist of small text files which are stored on your device. Several of the cookies we use are erased after the end of the browser session, i.e. when you close your browser (“session cookies”). Other cookies remain on your device and make it possible for us or our partner companies (cookies from third-party providers) to recognize your browser the next time you visit (persistent cookies). If cookies are used, these collect and process specific user information like browser data, location data and IP addresses within the respective individualized scope. Persistent cookies are automatically erased after a predefined period that can vary according to the cookie.

In the event that individual cookies implemented by us also process personal data, this processing takes place either for the performance of a contract in accordance with Art. 6(1)(b) GDPR or for the purpose of our legitimate interest in ensuring the optimal functioning of the website as well as an effective and customer-friendly experience of visiting the site in accordance with Art. 6(1)(f) GDPR.

We may work with advertising partners who help us make our online presence more interesting for you. In such cases, cookies from partner companies are also stored on your hard drive for this purpose when you visit our website (cookies from third-party providers). If we are working with the aforementioned advertising partners, you will be individually and separately notified of the use of such cookies and the respective scope of collected information in the following paragraphs.

Please note that you can configure your browser so that you are notified of the creation of cookies and can individually decide whether to accept them or refuse to accept cookies in specific cases or in general. Every browser handles cookie settings differently. An explanation of how to change your cookie settings can be found in each browser’s help menu. These can be found for the respective browsers under the following links:

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

Please note that the functionality of our website may be limited if you do not accept cookies.

Enquiries via e-mail, telephone or fax

In the event that you contact us (e.g. via contact form or e-mail), personal data is collected. The information collected when you use a contact form is displayed on the contact form in question. This data is stored and used exclusively for the purpose of responding to your concerns / contacting you and the technical administration this entails. The legal basis for processing this data is our legitimate interest in responding to your concerns in accordance with Art. 6(1)(f) GDPR. If you are contacting us in the interest of concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis for this processing. Your data will be erased once your enquiry has been addressed conclusively. This is the case when the circumstances indicate that the matter in question has been conclusively resolved, provided no statutory retention obligations to the contrary apply.

Tools and miscellaneous

Cookie consent tool: This website uses a “cookie consent tool” to collect valid user consent for cookies and cookie-based applications that require it. The cookie consent tool is displayed to users accessing the site in the form of an interactive user interface in which consent can be granted for specific cookies and/or cookie-based applications using checkboxes. When this tool is used, all cookies/services subject to consent are loaded only if the user in question grants corresponding consent with these checkboxes. This ensures that such cookies are only installed on the user's respective device when consent has been granted.

The tool creates technically necessary cookies in order to save your cookie preferences. As a general principle, personal user data is not processed in this context.

However, if the processing of personal data (e.g. IP address) occurs in individual cases for the purpose of saving, assigning or logging cookie settings, this takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant configuration of our web presence.

Art. 6(1)(c) GDPR also serves as a legal basis for this processing. As the controller, we are subject to the legal obligation to make the use of cookies which are not technically necessary dependent on the respective user consent.

Further information on the cookie consent tool’s operator and configuration options can be found directly in the corresponding user interface on our website.

Rights of the data subject

The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-a-vis the controller in regard to the processing of your personal data; for the respective prerequisites for exercising these rights, please refer to the legal basis specified:

right to information in accordance with Art. 15 GDPR;
right to rectification in accordance with Art. 16 GDPR;
right to erasure in accordance with Art. 17 GDPR;
right to restriction of processing in accordance with Art. 18 GDPR;
right to notification in accordance with Art. 19 GDPR;
right to data portability in accordance with Art. 20 GDPR;
right to withdraw consent in accordance with Art. 7(3) GDPR;
right to lodge a complaint in accordance with Art. 77 GDPR.

RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING WITH FUTURE EFFECT AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING SUCH DATA IF WE CAN PRODUCE EVIDENCE OF COMPULSORY AND LEGITIMATE REASONS WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS OR IF THE PROCESSING SERVES THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING AGAINST LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA IN ORDER TO CONDUCT DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF PERSONAL DATA PERTAINING TO YOU FOR THE PURPOSE OF SUCH ADVERTISING AT ANY TIME. YOU CAN EXERCISE THIS OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION FOR DIRECT ADVERTISING PURPOSES.

Duration of storage of personal data

When personal data is processed on the basis of express consent in accordance with Art. 6(1)(a) GDPR, this data is stored until the data subject withdraws their consent.

If statutory retention periods apply for data that is processed in the context of contractual or contract-like obligations on the basis of Art. 6(1)(b) GDPR, this data is routinely erased after the expiration of these retention periods if it is no longer necessary for the fulfilment or initiation of a contract and/or if we no longer have a legitimate interest in continued storage.

When personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to objection in accordance with Art. 21(1) GDPR unless we can produce evidence of compulsory and legitimate reasons for the processing which outweigh the interests, rights and freedoms of the data subject or the processing serves the purpose of asserting, exercising or defending against legal claims.

When personal data is processed for purposes of direct advertising on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right of objection in accordance with Art. 21(2) GDPR.

Unless specified otherwise in the other information on specific processing situations in this Statement, stored personal data is erased when it is no longer needed for the purposes for which it was collected or processed in any other manner.

4. Social media

LinkedIn:

1) Notice on the collection of personal data and the controller’s contact details

1.1 In the following, we provide you with information on how your personal data is handled. Personal data in this context is all data with which you can be personally identified.

Please carefully consider which personal data you share with us through the social media platform LinkedIn. We would like to expressly point out that LinkedIn stores the data of its users (e.g. personal information, IP address, etc.) and may potentially use it for commercial purposes as well. More detailed information on the processing of data by LinkedIn can be found in LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv.

We have no influence on the collection or further processing of data by LinkedIn. Furthermore, it is not possible for us to determine to what extent, in what location and for what duration the data is stored, the extent to which LinkedIn complies with the applicable erasure obligations, which analyses and linkages are carried out with the data or with whom the data is shared. If you would like to prevent LinkedIn from processing personal data you transmit to us, please contact us through a different channel. Our complete contact details can be found in our company profile on LinkedIn.

1.2 If the data you transmit to us via LinkedIn is processed exclusively by us, the controller responsible for data processing in the sense employed in the General Data Protection Regulation (GDPR) is Daniel Daum, ecoro, Wagmüllerstraße 16, 80538 München, Germany, tel.: 0157 3932 1496, e-mail: d.daum@ecoro-road.com.

If the data you transmit to us via LinkedIn is additionally or exclusively processed by LinkedIn, then the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is also the controller responsible for data processing in the sense employed in the General Data Protection Regulation (GDPR) in addition to us if you are domiciled in a country belonging to the European Union, Iceland, Liechtenstein, Norway or Switzerland. If you are not domiciled in one of these countries, then the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, is also the controller responsible for data processing in the sense employed in the GDPR in addition to us.

The controller responsible for the processing of personal data is the natural or legal person who decides on the purposes and means of processing personal data, either independently or jointly in cooperation with other parties.

2) Data protection officer

You can contact the data protection officer of the LinkedIn Ireland Unlimited Company / the LinkedIn Corporation with the contact form accessible via the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO

3) Data processing in the event of contact

We collect personal data ourselves when you contact us, e.g. via contact form or instant messaging. The data we collect when you contact us via contact form can be seen on the contact form in question. This data is stored and used exclusively for the purpose of responding to your concerns / contacting you and the technical administration this entails. The legal basis for processing this data is our legitimate interest in responding to your concerns in accordance with Art. 6(1)(f) GDPR. If you are contacting us in the interest of concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis for this processing. Your data will be erased once your enquiry has been addressed conclusively, provided no statutory retention obligations to the contrary apply. We assume that an enquiry has been addressed conclusively when the circumstances indicate that the matter in question has been conclusively resolved.

4) Rights of the data subject

4.1 The applicable data protection law grants you the following comprehensive data subject rights (rights of information and intervention) vis-a-vis the controller in regard to the processing of your personal data:

right to information in accordance with Art. 15 GDPR;
right to rectification in accordance with Art. 16 GDPR;
right to erasure in accordance with Art. 17 GDPR;
right to restriction of processing in accordance with Art. 18 GDPR;
right to notification in accordance with Art. 19 GDPR;
right to data portability in accordance with Art. 20 GDPR;
right to withdraw consent in accordance with Art. 7(3) GDPR;
right to lodge a complaint in accordance with Art. 77 GDPR.

4.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING WITH FUTURE EFFECT AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION FOR DIRECT ADVERTISING PURPOSES.

5) Duration of storage of personal data

When personal data is processed on the basis of express consent in accordance with Art. 6(1)(a) GDPR, this data is stored until the data subject withdraws their consent.

Instagram:

1) Notice on the collection of personal data and the controller’s contact details

1.1 In the following, we provide you with information on how your personal data is handled. Personal data in this context is all data with which you can be personally identified.

Please carefully consider which personal data you share with us through Instagram. Instagram is part of the Facebook group of companies and shares infrastructure, systems and technology with Facebook and other Facebook companies (https://www.facebook.com/help/111814505650678?ref=dp). We would like to expressly point out that Facebook stores the data of its services’ users (e.g. personal information, IP address etc.) and may potentially use it for commercial purposes as well. More detailed information on the processing of data by Facebook in the context of Instagram can be found in Instagram's privacy policy at https://help.instagram.com/519522125107875?helpref=page_content.

We have no influence on the collection or further processing of data by Facebook. Furthermore, it is not possible for us to determine to what extent, in what location and for what duration the data is stored, the extent to which Facebook complies with the applicable erasure obligations, which analyses and linkages are carried out with the data or with whom the data is shared. If you would like to prevent Facebook from processing personal data you transmit to us, please contact us through a different channel. Our complete contact details can be found in our company profile on Instagram.

1.2 If the data you transmit to us via Instagram is processed exclusively by us, the controller responsible for data processing in the sense employed in the General Data Protection Regulation (GDPR) is Daniel Daum, ecoro GmbH, Wagmüllerstraße 16, 80538 München, Germany, tel.: 0157 3932 1496, e-mail: d.daum@ecoro-road.com. If the data you transmit to us via Instagram is additionally or exclusively processed by Facebook, then Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is also the controller responsible for data processing in the sense employed in the General Data Protection Regulation (GDPR) in addition to us.

2) Data protection officer

You can contact the data protection officer of Facebook via the online contact form provided by Facebook at https://www.facebook.com/help/contact/540977946302970.

3) Data processing in the event of contact

4) Rights of the data subject

right to information in accordance with Art. 15 GDPR;
right to rectification in accordance with Art. 16 GDPR;
right to erasure in accordance with Art. 17 GDPR;
right to restriction of processing in accordance with Art. 18 GDPR;
right to notification in accordance with Art. 19 GDPR;
right to data portability in accordance with Art. 20 GDPR;
right to withdraw consent in accordance with Art. 7(3) GDPR;
right to lodge a complaint in accordance with Art. 77 GDPR.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION FOR DIRECT ADVERTISING PURPOSES.

5) Duration of storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and additionally – if relevant – the respective statutory retention period (e.g. retention periods under commercial law and tax law).When personal data is processed on the basis of express consent in accordance with Art. 6(1)(a) GDPR, this data is stored until the data subject withdraws their consent.