Privacy Policy

The data controller is:
ECRON Technologies GmbH
Marburger Straße 2
57334 Bad Laasphe
Germany
info@ecron.de

We are pleased about your interest in our online shop. Protecting your privacy is very important to us. Below, we inform you in detail about how your data is handled. The processing of your data is based on the GDPR as well as Section 96(3) of the TKG.

1. Access Data and Hosting

You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data) and documents the access. These access data are evaluated solely to ensure the trouble-free operation of the website and to improve our services. This serves to safeguard our legitimate interests in the correct presentation of our offer, which predominate in the context of a balancing of interests in accordance with Article 6(1)(1)(f) GDPR. All access data will be deleted no later than seven days after your visit to the site.

Hosting

The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in the forms provided for this purpose on this website are processed on their servers. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

2. Data Processing for Contract Execution and Contact

2.1 Data Processing for Contract Execution

For the purpose of contract execution (including inquiries and processing of any warranty and performance claims, as well as any legal update obligations) in accordance with Article 6(1)(1)(b) GDPR, we collect personal data if you voluntarily provide it to us as part of your order. Required fields are marked as such, as we need the data in these cases to process the contract, and we cannot send the order without it. The specific data collected can be seen from the respective input forms.

Further information on data processing, particularly regarding data transfer to our service providers for order, payment, and shipping processing, can be found in the subsequent sections of this privacy policy. After the contract has been fully executed, your data will be restricted for further processing and deleted after the retention periods required under tax and commercial law in accordance with Article 6(1)(1)(c) GDPR, unless you have expressly consented to further use of your data under Article 6(1)(1)(a) GDPR, or we reserve the right to further use of the data as permitted by law, which we inform you about in this policy.

2.2 Customer Account

If you have given your consent in accordance with Article 6(1)(1)(a) GDPR by choosing to open a customer account, we will use your data for the purpose of opening the account and storing your data for future orders on our website. You can delete your customer account at any time by sending a message to the contact details described in this privacy policy or through a designated function in the customer account. After deleting your customer account, your data will be deleted unless you have expressly consented to further use of your data under Article 6(1)(1)(a) GDPR, or we reserve the right to further use of the data as permitted by law, which we inform you about in this policy.

2.3 Contact

As part of customer communication, we collect personal data to process your inquiries in accordance with Article 6(1)(1)(b) GDPR if you voluntarily provide it to us when contacting us (e.g., via contact form, live chat tool, or email). Required fields are marked as such, as we need the data in these cases to process your contact request. The specific data collected can be seen from the respective input forms. After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data under Article 6(1)(1)(a) GDPR, or we reserve the right to further use of the data as permitted by law, which we inform you about in this policy.

3. Data Processing for Shipping Purposes

For contract fulfillment in accordance with Article 6(1)(1)(b) GDPR, we transfer your data to the shipping service provider responsible for delivery, provided this is necessary for the delivery of ordered goods.

Data Transfer to Shipping Service Providers for Shipping Notification

If you have expressly consented to this during or after your order in accordance with Article 6(1)(1)(a) GDPR, we will forward your email address to the selected shipping service provider so that they can contact you prior to delivery for notification or coordination purposes.

You can revoke your consent at any time by sending a message to the contact details described in this privacy policy or directly to the shipping service provider at the contact address provided below. After revocation, we will delete your data provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to further use of the data as permitted by law, which we inform you about in this policy.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany

4. Data Processing for Payment Handling

When processing payments in our online shop, we work with the following partners: technical service providers, credit institutions, and payment service providers.

4.1 Data Processing for Transaction Handling

Depending on the selected payment method, we transfer the data required for the execution of the payment transaction to our technical service providers, who work on our behalf, or to the assigned credit institutions or payment service providers, insofar as this is necessary for payment processing. This serves the fulfillment of the contract in accordance with Article 6(1)(1)(b) GDPR. In some cases, the payment service providers collect the data required for payment processing themselves, e.g., on their own website or through technical integration into the ordering process. In this regard, the privacy policy of the respective payment service provider applies.

If you have questions about our payment processing partners and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

4.2 Data Processing for Fraud Prevention and Optimization of Our Payment Processes

Where applicable, we provide our service providers with additional data, which they use together with the data necessary for processing the payment as our processors for fraud prevention and optimization of our payment processes (e.g., invoicing, processing of disputed payments, support for accounting). This serves to safeguard our legitimate interests in fraud prevention and efficient payment management in accordance with Article 6(1)(1)(f) GDPR.

4.3 Installment Purchase

If you choose the "Installment Purchase" payment method and give the necessary consent for data processing in accordance with Article 6(1)(1)(a) GDPR, personal data (e.g., first name, last name, address, email, phone number, date of birth, IP address, gender) together with the data required for transaction processing (e.g., items, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and time) will be transferred to our partner PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg.

To verify the customer’s identity or creditworthiness, our partner conducts inquiries and gathers information from publicly accessible databases and credit reporting agencies. Details regarding the providers used for inquiries and further details on the processing of your data after it is transferred to our partner PayPal (Europe) S.à r.l. et Cie, S.C.A. can be found in their privacy policy: PayPal Privacy Policy.

The information received about the statistical probability of a payment default is used by our partner PayPal (Europe) S.à r.l. et Cie, S.C.A. to make a balanced decision on the establishment, execution, or termination of the contractual relationship. You can present your point of view and contest the decision by contacting PayPal (Europe) S.à r.l. et Cie, S.C.A. The consent to transfer data given during the ordering process can be revoked at any time by contacting us with effect for the future.

4.4 Engagement of Debt Collection Agencies

If our payment claim is not settled despite prior reminders, we reserve the right to transfer the data required for debt collection to a commissioned debt collection agency. This serves the fulfillment of the contract in accordance with Article 6(1)(1)(b) GDPR and to safeguard our legitimate interests in the assertion or enforcement of our payment claims in accordance with Article 6(1)(1)(f) GDPR.

The commissioned debt collection agency is:
R+V Allgemeine Versicherung AG
Raiffeisenplatz 1
65189 Wiesbaden
Germany

5. Email Marketing

5.1 Email Newsletter with Registration

If you subscribe to our newsletter, we use the data required for this purpose or provided by you separately to send you our email newsletter regularly based on your consent in accordance with Article 6(1)(1)(a) GDPR.

You can unsubscribe from the newsletter at any time by either sending a message to the contact details described in this privacy policy or via a link provided in the newsletter. After unsubscribing, your email address will be deleted from the mailing list unless you have expressly consented to further use of your data in accordance with Article 6(1)(1)(a) GDPR, or we reserve the right to further use of the data as permitted by law, which we inform you about in this policy.

5.2 Newsletter Distribution

The newsletter may also be distributed by our service providers as part of processing on our behalf. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

5.3 Sending Review Requests via Email

If you have expressly consented to this during or after your order in accordance with Article 6(1)(1)(a) GDPR, we will use your email address to request a review of your order through the review system we use. This consent can be revoked at any time by sending a message to the contact details described in this privacy policy or via a link provided in the review request.

Review requests may also be sent by our service provider Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany ("Trusted Shops").

As part of sending review requests, we receive status information from Trusted Shops (e.g., whether the review request was sent and whether it was delivered). This is done in accordance with Article 6(1)(1)(f) GDPR to fulfill our legitimate interest in receiving information about review invitations to optimize them if necessary and to fulfill Trusted Shops’ legitimate interest in providing this service.

For the sending of review requests and the collection and display of review or status information, we are jointly responsible with Trusted Shops. For data protection inquiries and to exercise your rights, please preferably contact Trusted Shops directly using the contact details provided in their privacy information. Alternatively, you can always contact us using the contact details described in this privacy policy, and we will forward your request to Trusted Shops if necessary.

6. Cookies and Other Technologies

General Information

To make our website more attractive to visit and to enable the use of certain functions, we use various technologies on different pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies).

Protecting Privacy on End Devices
When using our online services, we employ technologies that are strictly necessary to provide the expressly requested telemedia service. The storage of information on your device or access to information already stored on your device does not require your consent for these purposes.

For non-essential functions, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if you do not grant consent, parts of the website may not be fully usable. Any consents you provide remain in effect until you adjust or reset the corresponding settings on your device.

Subsequent Data Processing via Cookies and Other Technologies
We use technologies that are essential for certain functions of our website (e.g., shopping cart functionality). These technologies collect and process IP addresses, the time of the visit, device and browser information, and information about your use of our website (e.g., shopping cart contents). This is done to safeguard our legitimate interest in providing an optimized presentation of our offering in accordance with Article 6(1)(1)(f) GDPR.

We also use technologies to meet our legal obligations (e.g., to demonstrate consent to the processing of your personal data) as well as for web analytics and online marketing. Further details, including the respective legal basis for data processing, can be found in the subsequent sections of this privacy policy.

You can find the cookie settings for your browser at the following links:
Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have given your consent to the use of technologies in accordance with Article 6(1)(1)(a) GDPR, you can revoke your consent at any time by sending a message to the contact details described in this privacy policy.

7. Use of Cookies and Other Technologies

Provided you have given your consent in accordance with Article 6(1)(1)(a) GDPR, we use the following cookies and other technologies from third-party providers on our website. Once the purpose for their use has been fulfilled and we cease using the respective technology, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. Further details about revocation options can be found in the "Cookies and Other Technologies" section. Additional information, including the basis of our cooperation with each provider, is available in the descriptions of the individual technologies. If you have questions about the providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

Use of Google Services

We use the following technologies provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google technologies about your use of our website is generally transmitted to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For the USA, no adequacy decision by the European Commission exists. Our cooperation is based on standard data protection clauses adopted by the European Commission. Unless stated otherwise for individual technologies, data processing is carried out based on an agreement between joint controllers in accordance with Article 26 GDPR. Further information on data processing by Google can be found in Google's Privacy Policy.

Google Analytics

For website analysis purposes, Google Analytics automatically collects and stores data (e.g., IP address, time of visit, device and browser information, and information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address is stored on a server located within the EU to derive location data and then immediately deleted before the traffic is forwarded to other Google servers for processing. Data processing is carried out based on a data processing agreement with Google.

Google Ads

For advertising purposes in Google search results and on third-party websites, the Google Remarketing cookie is set when you visit our website. This cookie automatically collects and processes data (e.g., IP address, time of visit, device and browser information, and information about your use of our website) using a pseudonymous cookie ID and based on the pages you visit, enabling interest-based advertising. Further data processing takes place only if you have enabled the “personalized advertising” setting in your Google account. In this case, if you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define target audience lists for cross-device remarketing.

To analyze website usage and track events, we measure your subsequent usage behavior via Google Ads Conversion Tracking when you arrive at our website through a Google Ads advertisement. Cookies may be used for this purpose to collect data (e.g., IP address, time of visit, device and browser information, and your use of our website based on predefined events, such as page visits or newsletter sign-ups). From this, pseudonymous usage profiles can be created.

Google Maps

To visually display geographic information, Google Maps collects data about your use of the map functions, particularly your IP address and location data, which is transmitted to and processed by Google. We have no influence on this subsequent data processing.

8. Integration of Trusted Shops Trustbadge and Other Widgets

Provided you have given your consent in accordance with Article 6(1)(1)(a) GDPR, Trusted Shops widgets are embedded on this website to display Trusted Shops services (e.g., the Trustmark, collected reviews) and to offer Trusted Shops products to buyers after an order.

The Trustbadge and the associated services are offered by Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany ("Trusted Shops"), with whom we are jointly responsible under Article 26 GDPR. Below, we provide essential contractual details in accordance with Article 26(2) GDPR.

In the context of our joint responsibility with Trusted Shops AG, please direct data protection inquiries and the assertion of your rights primarily to Trusted Shops using the contact information provided in their privacy policy. You can also contact us at any time using the contact details described in this privacy policy, and your inquiry will be forwarded to Trusted Shops if necessary.

8.1 Data Processing When Embedding the Trustbadge and Other Widgets

The Trustbadge is provided by a US-based content delivery network (CDN). An adequate level of data protection is ensured through standard contractual clauses and additional contractual measures.

When the Trustbadge is called up, the web server automatically stores a server log file, which also contains your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access. The IP address is anonymized immediately after collection, so the stored data cannot be attributed to you personally. The anonymized data is particularly used for statistical purposes and error analysis.

8.2 Data Processing After Order Completion

Provided you have given your consent, the Trustbadge accesses order information stored on your device (order total, order number, and optionally purchased product) and your email address after order completion. Your email address is hashed using a cryptographic one-way function. The hash value is then transmitted to Trusted Shops together with the order information in accordance with Article 6(1)(1)(a) GDPR.

This serves to verify whether you are already registered for Trusted Shops services. If you are, further processing is based on the contractual agreement between you and Trusted Shops. If you are not yet registered for the services or have not given your consent for automatic recognition via the Trustbadge, you will be offered the opportunity to manually register for the services or complete buyer protection as part of your existing user agreement, if applicable.

To this end, the Trustbadge accesses the following information stored on your device after your order is completed: order total, order number, and email address. This is necessary to offer you buyer protection. Data is only transmitted to Trusted Shops if you actively decide to use buyer protection by clicking on the corresponding button in the Trustcard. If you choose to use the services, further processing is governed by the contractual agreement with Trusted Shops under Article 6(1)(1)(b) GDPR, allowing for the completion of your registration for buyer protection and safeguarding your order as well as enabling the sending of review invitations via email.

Trusted Shops employs service providers for hosting, monitoring, and logging purposes. The legal basis for this is Article 6(1)(1)(f) GDPR to ensure the trouble-free operation of the services. Processing may take place in third countries (e.g., the USA and Israel). An adequate level of data protection is ensured in the USA through standard contractual clauses and additional contractual measures, and in Israel through an adequacy decision. More information is available here.

9. Social Media

Our Online Presence on Facebook (by Meta), Twitter, Instagram (by Meta), and YouTube

If you have given your consent in accordance with Article 6(1)(1)(a) GDPR to the respective social media operator, your data will be collected and stored for market research and advertising purposes when visiting our online presence on the mentioned social media platforms. Using pseudonyms, usage profiles can be created from this data, which can be used to display advertisements inside and outside the platforms that presumably match your interests. Cookies are generally used for this purpose. Detailed information about the processing and use of data by the respective social media operator, as well as contact information and your rights and settings options to protect your privacy, can be found in the privacy policies of the providers linked below. Should you need further assistance, you can also contact us.

Facebook (by Meta) is provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). Information automatically collected by Meta Platforms Ireland about your use of our Facebook online presence is generally transmitted to and stored on a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA. For the USA, no adequacy decision by the European Commission exists. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing when visiting a Facebook Fanpage is based on an agreement between joint controllers under Article 26 GDPR. More information (including details about Insights data) can be found here.

Twitter is provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“Twitter”). Information automatically collected by Twitter about your use of our Twitter online presence is generally transmitted to and stored on a server of Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. For the USA, no adequacy decision by the European Commission exists. Our cooperation is based on standard data protection clauses adopted by the European Commission.

Instagram (by Meta) is provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). Information automatically collected by Meta Platforms Ireland about your use of our Instagram online presence is generally transmitted to and stored on a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA. For the USA, no adequacy decision by the European Commission exists. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing when visiting an Instagram Fanpage is based on an agreement between joint controllers under Article 26 GDPR. More information (including details about Insights data) can be found here.

YouTube is provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Information automatically collected by Google about your use of our YouTube online presence is generally transmitted to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For the USA, no adequacy decision by the European Commission exists. Our cooperation is based on standard data protection clauses adopted by the European Commission.

10. Contact Options and Your Rights

10.1 Your Rights

As a data subject, you have the following rights:

• In accordance with Article 15 GDPR, the right to obtain information about your personal data processed by us to the extent described therein;
• In accordance with Article 16 GDPR, the right to request the rectification of inaccurate or incomplete personal data stored by us without undue delay;
• In accordance with Article 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is required
  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation;
  • for reasons of public interest; or
  • for the establishment, exercise, or defense of legal claims;
• In accordance with Article 18 GDPR, the right to request the restriction of processing of your personal data, where
  • the accuracy of the data is contested by you;
  • the processing is unlawful, but you oppose its erasure;
  • we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or
  • you have objected to processing in accordance with Article 21 GDPR;
• In accordance with Article 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller;
• In accordance with Article 77 GDPR, the right to lodge a complaint with a supervisory authority. You can usually contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

10.2 Contact Options

Data Protection Officer:
Christian Homrighausen
Marburger Straße 2
57334 Bad Laasphe
Germany
info@ecron.de

If you have any questions about the collection, processing, or use of your personal data, for information, rectification, restriction, or deletion of data, or to revoke any consent given, or to object to a particular data use, please contact:
Christian Homrighausen
Marburger Straße 2
57334 Bad Laasphe
Germany
info@ecron.de

Privacy Policy created with the Trusted Shops Legal Text Generator.