ENSYSCO GmbH

The following Data Protection Statement is valid for the use of our online offer www.e4-teams.com.

We put high value on data-protection. The solicitation and processing of your personal data happens under strict enforcement of the current data protection regulation, specifically the General Data Protection Regulation (GDPR).

1 Responsible entity

The responsible entity for the solicitation, processing and use of your personal data in the sense of Art. 4 Nr. 7 GDPR is:

ENSYSCO GmbH
Siegburger Straße 183
50679 Köln

If you would like to gainsay the whole or part of the solicitation, processing or use of your personal data through the stipulation of the aforementioned data protection regulation, you can direct your objection to the responsible entity.

You may, at any time save or print this data protection statement.

2 General uses of the processing

We use the personal data for the running of our Website, and at large, to answer your queries, process your application, or to facilitate your access to general information or offers.

3 Which data we use and why

3.1 Hosting

The Hosting-Services used by us, are there for the provision of the following services: Infrastructure and platform service provision, computing capacity, memory space and data bank services, security services as well as maintenance and upkeep, which are used for the running of the Website. Through this we, or rather our Hosting-provider, process stock data, contact information, content data, contract information, usage data, meta and communications data of customers, prospective customers and visitors of our website based on the legitimate interests in the provision of an efficient and secure access to our website according to Art. 6 par. 1 § 1 f) GDPR in connection with Art. 28 GDPR.

3.2 Access Data

We collect data about you when you visit this website. We automatically record information about your usage behaviour and your interactions with us as well as register data from your computer or mobile device. We solicit, save and use data from each access to our website (so called Server Logfiles). To this access data belong:

• Name and URL of the accessed file
• Date and time of access
• Amount of data transfer
• Notice of successful retrieval (HTTP response code)
• Type and version of browser
• Operating System
• Referrer URL (therefore the previously visited website)
• Websites accessed through the use of our website
• The user’s Internet-Service-Provider
• IP-Address and the inquiring provider

We use this protocol data, without assigning it to your person or other profile creation, for statistical analysis, with the purpose of the running, security and optimization of our website, but also for the anonymous collection of the traffic on our Website, as well as the scope and type of usage of our website and services, and for the calculation of the amount of clicks received by our cooperating partners. Due to this information, we are able to provide personalised and location specific content, and analyse the data traffic, bug detection and rectification, as well as improve our services.

In here lies our rightful interest according to Art. 6 par. 1 § 1 f) GDPR.

We reserve the right to review the log data at any point, if the suspicion of illegal use on the basis of concrete evidence arises. We store IP-addresses for a limited time in the Logfiles, if this were to be necessary for security reasons or the provision of services or if the billing of a service arises, e.g. if you use one of our offers. We delete the IP-Address after the cancellation of one of our processes or after receiving the payment, if the aforementioned is not necessary for security purposes. We furthermore, store IP-Addresses in the case of a concrete suspicion of an illegal activity in connection with the usage of our website. We also store, as part of your account, the date of your last visit (e.g. while registering, login, clicking of links, etc.).

3.3 Cookies

We use so called Session-Cookies to optimise our website. A Session-Cookie is a small text file, that is sent by the corresponding server during the visit to an internet site and stored temporarily. This file as such contains a so-called Session-ID, with which different inquiries from your Browser can be assigned to the joined session. This way, your computer can be recognised when you return to our website. These cookies are deleted when you close your browser. They work for example for you to use the product basket throughout several sites. We also use, to a small extent, persistent cookies (as well as small text files, that are put on your terminal), that remain on your terminal and allow us to recognise your browser during your next visit. These cookies are stored on your hard drive and delete themselves after a set period of time. Their lifespan goes anywhere from 1 month to 10 years. This way we are able to present to you our offers in a more user-friendly, more effective and safer way, and for example show you information specifically catered to your interests.

Our legitimate interest in the use of the cookies according to Art. 6 par. 1 § 1 f) GDPR lies in making our website more user-friendly, effective and safer. The following data and information can be stored in the Cookies:

• Login Information
• Language selection
• Entered search terms

Information about the amount of visits to our website as well as the use of separate functions of our internet presence. During the activation of a cookie, said cookie receives an identification number and the assignation of your personal data to the aforementioned identification number does not happen. Your name, your IP-address or similar data that would allow the assignation of a cookie to you, are not laid-in in the cookie. Based on the cookie technology, we merely receive pseudonymised information, for example, about what sites of our shop were visited, which products were viewed, etc. You can set your browser in such a way as to be informed in the case of placement of cookies, so you are able to decide on an individual basis if you would like to suspend the use of cookies in general or for certain cases, or that cookies should be completely prevented. Through this the functionality of the website can be limited.

3.4 Data required for the fulfilment of our contractual obligations

We process personal data, that we require for the fulfilment of our contractual obligations, such as name, address, E-mail address, ordered products, bills and payment dates. The solicitation of the aforementioned data is required for the completion of a contract.

The erasure of the data occurs after the termination of the warranty period and the legal retention periods. Data that is linked to a user account (see below), remain in any case for the running period of the account.

The legal basis for the processing of this information is Art. 6 par. 1 § 1 b) GDPR, for this information is necessary for the fulfilment of our contractual obligations.

3.5 User Account

You can set up a user account on our website. If you wish to do this, we require the personal data demanded at the moment of log-in. During the later login, only your E-mail or user name and the password you chose are required. For the new registration we enquire base data (e.g. name, address), communication data (e.g. Email Address) and payment information (Bank details), as well as access data (user name and password). To assure your proper registration and prevent unauthorised third party registration, you will receive, after your registration, an activation link via Email to activate your account. Only after successful registration, do we store the data you provide, on our system.

You can delete a once created user account at any point, without additional costs, other than the transmission costs established in the basis rates. A message to the contact information under Point 1 (e.g. E-mail, Fax or Letter) suffices for this purpose. We will then delete your saved personal data, as long as these are not necessary for completion or transaction of orders, or for legal record keeping reasons.

Legal basis for the distribution of the aforementioned data is your consent according to Art. 6 par. 1 § 1 a) GDPR.

3.6 Newsletter

For the registration for a Newsletter, you will need the data required during registration. The registration for the Newsletter will be recorded. After registration you will receive a message on Email address you have provided, in which you will be asked to confirm the registration (“Double Opt-in”). This is necessary, so that third parties cannot register with your Email address. You can at any point withdraw your consent to receive the Newsletter and therefore unsubscribe from it.

We store the registration data as long as is necessary for the distribution of the Newsletter. The logging of the registration and delivery address will be saved, as long as there is an interest in the proof of the initially given consent, in general this is the limitation period for civil claims, therefore a maximum three years. Legal basis for the distribution of the Newsletter is your consent according to Art. 6 par. 1 § 1 a) in connection with Art. 7 GDPR in connection with § 7 par. 2 Nr. 3 UWG (Act Against Unfair Competition). Legal basis for the recording of the registrations is our legitimate interest in proof that the distribution is carried out with your consent.

You can at any point undo the registration, without that for this arise costs other than the transmission costs established in the basis rates. A message to the contact information under Point 1 (e.g. E-mail, Fax, Letter) suffices for this. Of course, you can also find a link to unsubscribe in every Newsletter.

3.7 Product Recommendation

We send regularly, independently from the Newsletter, product recommendations per E-mail. This way we send you information about products that we have to offer, in which you might be interested based on your previous purchases of goods and services. For this we act strictly according to the legal requirements. You can gainsay this at any point without that for this arise costs other than the transmission costs established in the basis rates. A message to the contact information under Point 1 (e.g. E-mail, Fax, Letter) will suffice for this. Of course, you can also find a link to unsubscribe in every Email. Legal basis for this is the legal agreement according to Art. 6 par. 1 § 1 f) in connection with §7 par. 3 UWG (Act Against Unfair Competition).

3.8 Email contact

When you get in touch with us (e.g. through the contact form or E-mail), we process your information to handle queries, and in the case that follow-up questions arise.

If the processing of data for the execution of pre-contractual measures happens, that takes place based on your inquiry or, if you are already a customer, for the delivery of the contract, is the legal basis for this data processing Art. 6 par. 1 § 1 b) GDPR.

Further personal data, is only processed, if you agree to this (Art. 6 par. 1 § 1 a) GDPR) or if we have a legitimate interest in the processing of your data (Art. 6 par. 1 § 1 f) GDPR). A legitimate interest lies for example in responding to your E-mail.

4 Google Analytics

We use Google Analytics, a website analysis service of Google Inc. (“Google”). Google Analytics uses so called “Cookies”; text files, that are saved on your computer and allow an analysis of the use of the website on your computer. The, through the Cookie obtained, information about usage of the visit of this website are generally sent and saved to a Google server in the USA.

In here also lies out legitimate interest according to Art. 6 par. 1 § 1 f) GDPR. Google has subjected itself to the Privacy-Shield-Frameworks between the European Union and the USA, and certified itself to it. Through this, Google commits itself to observe the standards and regulations of the European Data Protection Law. Further information can be found on the following link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

We have activated the anonymisation on this Website (anonymizeIP). However through this, your IP-Address is shortened by Google previously inside of the member states of the European Union or in other contracting member states of the agreement in the European Economic Area. Only in exceptions is the full IP-Address transmitted to a Google Server in the USA and subsequently shortened there. On our instructions, Google is going to use this information, to evaluate your use of the Website, to compile reports about the web-activities and to provide us further services linked to the web- and internet use. The, in the framework of Google Analytics, transmitted IP-Address from your Browser will not be brought together with the other information from Google. You can prevent the storing of the cookies through the corresponding Browser-Software settings; we want to point out however, that in that case, you might not be able to enjoy the full scope of functions on this website. Furthermore, you can prevent the transmission of the information based on your use of the website generated through the cookies (incl. Your IP-Address) to Google, as well as the processing of said information through Google, if you download and install the Browser-Plugin available under the following Link: http://tools.google.com/dlpage/gaoptout?hl=de. Alternatively to the Browser-Plugin or within Browsers on mobile devices, you can click on the following link, to place an Opt-Out-Cookie, which will, in the future, prevent the recording through Google Analytics on this website (this Opt-Out-Cookie only works on this Browser and Domain. You will have to click this Link again if you delete the Cookies on your Browser): [deactivate Google Analytics]

5 Storage period

Unless otherwise stated, we only store the personal data as long as necessary for the pursued purposes. In some cases the legislator envisages the storage of personal data, perhaps in cases of tax or commercial law. In these cases, is the data saved further only for legal purposes, but not otherwise processed, and deleted after expiry of the legal retention period.

6 Your Rights as the Affected by the Data Processing

According to the applicable legislation, you have several rights regarding your personal data. If you would like to exert these rights, please direct your inquiry via E-mail or Post under clear identification of your person to the Address mentioned under Point 1. Following is an overview of your rights.

6.1 Right of Access by the Data Subject

You have a right to a clear access to the information regarding the processing of your personal data.

In detail:

You have, at any point in time, the right to receive a confirmation if the personal data relevant to you is being processed. If this is the case, you have the right to demand, free of charge, the information about the personal data stored by us, in the form of a copy of said information. Furthermore you are entitled to the following information:

• The processing purposes;
• the categories of the personal data, that is processed;
• the recipient or categories of recipients, towards which the personal data has been disclosed or are going to be disclosed, in particular in the case of recipients in third countries or international organisations;
• if possible, the duration for which the personal data will be stored, or, if this is not possible, the criteria for the establishing of said duration;
• the existence of a right to correction or deletion of the personal data concerning you or restriction of the processing by the responsible entity or the right to refuse further processing;
• the existence of a right to lodge a complaint with a regulatory or supervisory authority.
• if the personal data are not solicited through you, all available information about the origin of said data;
• the existence of an automated process of decision-making, including profiling, according to Art. 22 par. 1 and 4 GDPR and – at least in those cases – meaningful information about the logic involved as well as the scope and the consequences of such a handling for you.

If personal data is transmitted to a third country or international organisation, you have the right to be informed through the suitable guarantees according to Art. 46 GDPR in the connection with said transmission.

6.2 Right to Rectification

You have the right to demand the correction and if necessary the completion of the for you relevant personal data.

In detail:

You have the right, to demand the correction of personal data that is relevant to your person without undue delay. Under consideration of the purposes of the processing, you have the right to demand the completion of incomplete personal data – also through a supplementary statement.

6.3 Right to erasure (“Right to be forgotten”)

In a series of cases we are obliged to delete your personal data.

In detail:

According to Art. 17 par. 1 GDPR you have the right to demand from us the immediate erasure of your personal data, and we are obliged to delete personal data without undue delay, as far as one of the following reasons applies:

• The personal data is, for the reasons that it was obtained or otherwise processed, no longer necessary.
• You withdraw your consent, on which the processing, according to Art. 6 par. 1 § 1 a) GDPR or Art. 9 par. 2 a) is based, and another legal basis for the processing is not present.
• You file an objection according to Art. 21 par. 1 GDPR against the data-processing and no overriding legitimate reasons are present, or you file an objection against the data-processing according to Art. 21 par. 2 GDPR.
• The personal data was unlawfully processed.
• The erasure of the personal data is necessary for the fulfilment of a legal obligation according to EU law or the law of a member-state, to which we are subjected.
• The personal data was obtained in relation to offered services of the information society according to Art. 8 par. 1 GDPR.

If we have made public the personal data and are, according to Art. 17 par. 1 GDPR, required to delete these, we will, under consideration of the available technologies and the implementation costs, take the appropriate steps, also of technical nature, to inform the responsible entities of the data-processing that are responsible for the processing of personal data, that you have demanded the erasure of all links to this personal data or copies or replications of said personal data.

6.4 Right to restriction of processing

In a series of cases are you entitled to demand a restriction of processing of your personal data.

In detail:

You have the right to demand a restriction of processing, if one of the following requirements is met:

• the accuracy of the personal data is disputed by you, for a period of time that makes it possible for us to check the accuracy of said personal data;
• the processing is unlawful and you have rejected the erasure of personal data and instead demanded the restriction of the use of your personal data;
• if we no longer need the personal data for processing purposes, you however, require the information to assert, exercise or defend legal claims, or you have raised objections against the processing according to Art. 21 par. 1 GDPR, as long as it has not been settled whether the reasonable grounds of our enterprise outweigh yours.

6.5 Right to data portability

You have the right to receive, transfer or for us to transfer the affected personal data in a machine-readable manner.

In detail:

You have the right, to receive the personal data corresponding to your person that you have provided us with, in a structured, conventional and machine-readable manner, and you have the right to transfer this information to another responsible entity without hindrance from us, as long as

• the processing is founded upon an agreement according to Art. 6 par. 1 § 1 a) GDPR or Art. 9 par. 2 a) GDPR or based on a contract according to Art. 6 par. 1 § 1 b) GDPR and
• the processing ensues using automated procedures.

Through the exercise of your right to data portability according to Paragraph 1, you have the right to ask for your personal data to be transmitted directly from us to another responsible entity, as long as this is technically possible.

6.6 Right to object

You have the right to object to a legitimate processing of your personal data through us, on grounds of your particular situation and if these do not outweigh our interests in the processing.

In detail:

You have the right, on grounds of your particular situation, to object at any time to processing of personal data concerning you, that takes place by virtue of Art. 6 par. 1 § 1 e) or f) GDPR; which includes profiling to the extent that it is related to this provision. Where the data subject objects to processing, the personal data shall no longer be processed for such purposes, unless we are able to prove legitimate mandatory grounds, that outweigh your interests, rights and liberties, or the processing serves the enforcement, exercise or defense of legal claims.

If personal data is processed by us with the purpose of direct marketing, you have the right at any point in time to object to the processing of personal data concerning you for such marketing purposes; which includes profiling to the extent that it is related to such direct marketing.

Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Art. 89 par. 1 GDPR, you, on grounds relating to your particular situation, shall have the right to object to processing of personal data concerning you, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

6.7 Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. An automated decision-making on the base of the collected personal data does not occur.

6.8 Right to withdraw consent in line with the data protection regulations

You have the right to withdraw your consent for the processing of your personal data at any point in time.

6.9 Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes this Regulation.

7 Data security

We put great effort into the protection and security of your data as part of the data protection laws and the technical possibilities at our disposal.

Your personal data is encrypted when being transmitted. This is valid for the ordering as well as the customer login. We use the SSL (Secure Socket Layer) coding-system; we must, however, point out that the data transmission via internet (e.g. communication via E-Mail) can show security gaps. A complete protection of data from access through third parties is not given.

For the protection of your data we operate technical and organisational security measures corresponding to Art. 32 GDPR, that we constantly update to the latest technological advances. We also do not guarantee, that our offer is available at certain times; interferences, disruptions or breakdowns cannot be avoided at times. The servers used by us are regularly and thoroughly secured.

8 Transfer of data to a third party

In general do we only use personal data within our company.

If and insofar we engage third parties (e.g. Logistic service providers), do these only receive personal data to the extent that the personal data is necessary for the provision of the corresponding service.

In the case, that we outsource certain parts of the data processing (“order processing”), we contractually bind the third party processor, to only use the personal data in accordance with the data protection law requirements and to guarantee the rights of the affected person.

9 Data protection officer

If you have any further questions or concerns regarding data protection, please direct these to our data protection officer:

ENSYSCO GmbH
Data protection officer
Siegburger Straße 183
50679 Köln
E-Mail: privacy@ensysco.de