Privacy policy

Respon­si­ble par­ty pur­suant to data pro­tec­tion laws, in par­tic­u­lar the EU Gen­er­al Data Pro­tec­tion Reg­u­la­tion (GDPR), is

eCom­meleon GmbH

Rudolph-Her­rmann-Str. 1
04299 Leipzig
Ger­many

Reg­istry Court: Leipzig HRB 36634
VAT Num­ber: DE325863467

Your rights as the data subject

You can exer­cise the fol­low­ing rights at any time using the con­tact details of our data pro­tec­tion offi­cer:

  • Infor­ma­tion on your data stored by us and the pro­cess­ing there­of (Art. 15 GDPR),
  • Rec­ti­fi­ca­tion of inac­cu­rate per­son­al data (Art. 16 GDPR),
  • Dele­tion of your data stored by us (Art. 17 GDPR),
  • Restric­tion of the data pro­cess­ing, pro­vid­ed that we may not delete your data due to legal oblig­a­tions (Art. 18 GDPR),
  • Objec­tion to the pro­cess­ing of your data with us (Art. 21 GDPR) and
  • Data porta­bil­i­ty, pro­vide that you have con­sent­ed to the data pro­cess­ing or have entered into a con­tract with us (Art. 20 GDPR).

If you have giv­en us con­sent, you may with­draw it at any time, which will remain in effect in the future.

You can con­tact a super­vi­so­ry author­i­ty with a com­plaint at any time, e.g. the super­vi­so­ry author­i­ty of the state of your res­i­dence or the author­i­ty that over­sees us as the respon­si­ble par­ty.

You’ll find a list of super­vi­so­ry author­i­ties (for the non-pub­lic area) with their respec­tive address­es at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Collecting general information during a visit to our website

Type and purpose of the processing

When you access our web­site – i.e. if you do not reg­is­ter or sub­mit infor­ma­tion – infor­ma­tion of a gen­er­al nature will be col­lect­ed auto­mat­i­cal­ly. This infor­ma­tion (serv­er log files) con­tains the type of web brows­er, the oper­at­ing sys­tem used, the domain name of your Inter­net ser­vice provider, your IP address and the like.

It is processed in par­tic­u­lar for the fol­low­ing pur­pos­es:

  • Ensur­ing an unprob­lem­at­ic web­site con­nec­tion
  • Ensur­ing seam­less use of our web­site
  • Analy­sis of sys­tem secu­ri­ty and sta­bil­i­ty as well as
  • For addi­tion­al admin­is­tra­tive pur­pos­es.

We will not use your data to draw con­clu­sions about your per­son. This type of infor­ma­tion will be sta­tis­ti­cal­ly analysed by us if nec­es­sary to opti­mise our web­site and its under­ly­ing tech­nol­o­gy.

Legal basis

The pro­cess­ing occurs accord­ing to Art. 6 Para. 1 (f) GDPR, based on our legit­i­mate inter­est in improv­ing the sta­bil­i­ty and func­tion­al­i­ty of our web­site.

Recipients

Recip­i­ents of the data may be tech­ni­cal ser­vice providers, who work on the oper­a­tion and main­te­nance of our web­site as the proces­sor.

Retention period

The data will be delet­ed as soon as they are no longer required for the rea­son they were col­lect­ed. This is gen­er­al­ly the case, after the respec­tive ses­sion has end­ed, for data that are used to make the web­site avail­able.

Mandatory or required provision

The pro­vi­sion of the afore­men­tioned per­son­al data is nei­ther legal­ly nor con­trac­tu­al­ly manda­to­ry. With­out the IP address how­ev­er, the ser­vice and func­tion­al­i­ty of our web­site are not guar­an­teed. Fur­ther­more, indi­vid­ual ser­vices can be unavail­able or lim­it­ed. For this rea­son, an objec­tion is exclud­ed.

Cookies

Type and purpose of the processing

Like many oth­er web­sites, we use so-called ‘cook­ies’. Cook­ies are small text files that are stored on your device (lap­top, tablet, smart­phone, etc.) when you vis­it our web­site.

With cook­ies, we receive cer­tain infor­ma­tion such as IP address, type of brows­er and oper­at­ing sys­tem used.

Cook­ies can­not be used to start pro­grams or to trans­mit virus­es to a com­put­er. Based on the infor­ma­tion con­tained in cook­ies, we can facil­i­tate your nav­i­ga­tion of our site and prop­er­ly dis­play our web­pages for you.

The data col­lect­ed by us will not be shared with third par­ties under any cir­cum­stances nor will a link to per­son­al data be cre­at­ed with­out your con­sent.

Of course, you can view our web­site with­out cook­ies. Inter­net brows­er are reg­u­lar­ly con­fig­ured to accept cook­ies. In gen­er­al, you can dis­able the use of cook­ies via your brows­er set­tings at any time. Please use your Inter­net browser’s help func­tion to learn how to change these set­tings, and keep in mind that indi­vid­ual fea­tures of our web­site may not work if you have dis­abled the use of cook­ies.

Retention period and cookies used

If you allow us to use cook­ies, via your brows­er set­tings or con­sent, the fol­low­ing cook­ies may be utilised on our web pages:

_ga ecommeleon.com – 2 Years
_gat ecommeleon.com – 1 Day
_gid ecommeleon.com – 1 Day

Addi­tion­al­ly, through the use of Hub­spot, fur­ther cook­ies may be installed which you can find out more about here.

In the fol­low­ing sec­tions, we pro­vide you with infor­ma­tion con­cern­ing how these cook­ies can (also) per­tain to per­son­al data.

In your brows­er set­tings, you can delete indi­vid­ual cook­ies or the entire set of cook­ies. You will also find infor­ma­tion and instruc­tions on how to delete these cook­ies or pre­vent them from being saved in advance. The fol­low­ing links pro­vide the infor­ma­tion you’ll need for the respec­tive brows­er providers:

Registration on our website

Type and purpose of the processing

With the reg­is­tra­tion to use our per­son­alised ser­vices, some per­son­al data such as name, address, con­tact and com­mu­ni­ca­tion infor­ma­tion (e.g. phone num­ber and e-mail address) are col­lect­ed. If you are reg­is­tered with us, you can access con­tent and ser­vices that we only offer to reg­is­tered users. Reg­is­tered users also have the abil­i­ty to change or delete the data entered dur­ing reg­is­tra­tion at any time. At any time, we will also pro­vide you with infor­ma­tion on the per­son­al data about you that we have saved.

Legal basis

The data entered dur­ing reg­is­tra­tion are processed on the basis of the user’s con­sent (Art. 6 Para. 1 (a) GDPR).

If the reg­is­tra­tion ful­fils the oblig­a­tions of a con­tract, whose con­trac­tu­al par­ty is the data sub­ject, or serves to imple­ment pre-con­trac­tu­al mea­sures, the addi­tion­al legal basis for the data pro­cess­ing is Art. 6 Para. 1 (b) GDPR.

Recipients

Recip­i­ents of the data may be tech­ni­cal ser­vice providers, who work on the oper­a­tion and main­te­nance of our web­site as the proces­sor.

Retention period

Data are only processed in this con­text pro­vid­ed that the cor­re­spond­ing con­sent has been giv­en. The data will be delet­ed there­after, pro­vid­ed that no statu­to­ry reten­tion oblig­a­tions pro­hib­it the dele­tion. To con­tact us in this regard, please use the con­tact infor­ma­tion pro­vid­ed at the end of this pri­va­cy pol­i­cy.

Mandatory or required provision

The pro­vi­sion of your per­son­al data is vol­un­tary, based sole­ly on your con­sent. With­out the pro­vi­sion of your per­son­al data, we can­not give you access to our con­tent and ser­vices.

Provision of fee-based services

Type and purpose of the processing

For the pro­vi­sion of fee-based ser­vices, we will request addi­tion­al data such as pay­ment details in order to com­plete your order.

Legal basis

The data pro­cess­ing required to finalise the con­tract is based on Art. 6 Para. 1 (b) GDPR.

Recipients

Recip­i­ents of the data may be proces­sors.

Retention period

We store these data in our sys­tems until the statu­to­ry reten­tion peri­od has end­ed. Basi­cal­ly, this is 6 or 10 years for gen­er­al­ly accept­ed account­ing prin­ci­ples and statu­to­ry tax require­ment pur­pos­es.

Mandatory or required provision

The pro­vi­sion of your per­son­al data is vol­un­tary. With­out the pro­vi­sion of your per­son­al data, we can­not give you access to our con­tent and ser­vices.

Newsletter

Type and purpose of the processing

Your data will be used exclu­sive­ly to send you the newslet­ter you sub­scribed for via e-mail. We request your name so that we can address you per­son­al­ly in the newslet­ter and iden­ti­fy you as need­ed should you want to exer­cise your rights as a data sub­ject.

To receive the newslet­ter, pro­vid­ing your e-mail address is suf­fi­cient. When you sub­scribe to our newslet­ter, the data you pro­vide will be used exclu­sive­ly for this pur­pose. Sub­scribers can also be noti­fied by e-mail about cir­cum­stances that are rel­e­vant to the ser­vice or reg­is­tra­tion (such as changes to the newslet­ter offer or tech­ni­cal mat­ters).

We need a valid e-mail address to com­plete your reg­is­tra­tion. In order to ver­i­fy that a reg­is­tra­tion is actu­al­ly made by the own­er of an e-mail address, we utilise the ‘dou­ble opt-in’ pro­ce­dure. To this end, we log the newslet­ter sub­scrip­tion request, when a con­fir­ma­tion e-mail is sent and the receipt of the request­ed reply. Addi­tion­al data is not col­lect­ed. The data will be used exclu­sive­ly for send­ing the newslet­ter and will not be shared with third par­ties.

Legal basis

Based on your express con­sent (Arti­cle 6 (1) a DSGVO), we will send you our newslet­ter on a reg­u­lar basis or com­pa­ra­ble infor­ma­tion via e-mail to your spec­i­fied e-mail address.

The con­sent to save and use your per­son­al data for the newslet­ter may be with­drawn at any time and remain in effect in the future. Every newslet­ter con­tains a cor­re­spond­ing link, and you can also unsub­scribe on this web­site at any time or inform us of your can­cel­la­tion via the con­tact option indi­cat­ed at the end of this pri­va­cy pol­i­cy.

Recipients

Recip­i­ents of the data may be proces­sors.

Retention period

Data are only processed in this con­text pro­vid­ed that the cor­re­spond­ing con­sent has been giv­en. The data will be delet­ed there­after.

Mandatory or required provision

The pro­vi­sion of your per­son­al data is vol­un­tary, based sole­ly on your con­sent. Unfor­tu­nate­ly, we can­not send you our newslet­ter with­out your con­sent.

Contact form

Type and purpose of the processing

The data you enter are used for indi­vid­ual com­mu­ni­ca­tion with you. A valid e-mail address and your name are required for this com­mu­ni­ca­tion, which serves to orga­nize your inquiry and the respec­tive sub­se­quent reply. Pro­vid­ing addi­tion­al infor­ma­tion is option­al.

Legal basis

The pro­cess­ing of the data entered in the con­tact form occurs on the basis of a legit­i­mate inter­est (Art. 6 Para. 1 (f) GDPR).

By pro­vid­ing the con­tact form, our aim is to facil­i­tate an uncom­pli­cat­ed means for you to con­tact us. The infor­ma­tion you enter will be used to process the inquiry and saved for pos­si­ble fol­low-up ques­tions.

If you con­tact us to request an offer, the pro­cess­ing of the infor­ma­tion pro­vid­ed in the con­tact form will occur in order to imple­ment pre-con­trac­tu­al mea­sures (Art. 6 Para. 1 (b) GDPR).

Recipients

Recip­i­ents of the data may be proces­sors.

Retention period

The data will be delet­ed no lat­er than 6 months after pro­cess­ing the inquiry.

Pro­vid­ed that we enter into a con­tract togeth­er, we will use the statu­to­ry reten­tion peri­ods in the Ger­man Com­mer­cial Code (Han­dels­ge­set­zbuch) and delete your data accord­ing to the respec­tive stip­u­lat­ed dead­lines.

Mandatory or required provision

The pro­vi­sion of your per­son­al data is vol­un­tary. How­ev­er, we can only process your inquiry if you pro­vide us with your name, e-mail address and the rea­son for your inquiry.

Using Google Analytics

Type and purpose of the processing

This web­site uses Google Ana­lyt­ics, a web ana­lyt­ics ser­vice of Google LLC, 1600 Amphithe­ater Park­way, Moun­tain View, CA 94043 USA (here­inafter: ‘Google’). Google Ana­lyt­ics uses so-called ‘cook­ies’, i.e. text files that are stored on your com­put­er and allow an analy­sis of your use of the web­site. The infor­ma­tion gen­er­at­ed by the cook­ie about your use of this web­site is typ­i­cal­ly trans­mit­ted to a Google serv­er in the U.S. and stored there. How­ev­er, due to the acti­va­tion of IP anonymi­sa­tion on these web­sites, your IP address will be trun­cat­ed before­hand by Google with­in the mem­ber states of the Euro­pean Union or in oth­er con­tract­ing states of the Agree­ment on the Euro­pean Eco­nom­ic Area. Only in excep­tion­al cas­es will the full IP address be sent to a Google serv­er in the U.S. and trun­cat­ed there. On behalf of the oper­a­tor of this web­site, Google will use this infor­ma­tion to eval­u­ate your use of the web­site, sum­marise reports on web­site activ­i­ties and pro­vide oth­er ser­vices relat­ed to web­site and Inter­net usage to the web­site oper­a­tor. The IP address trans­ferred from your brows­er as part of Google Ana­lyt­ics will not be com­bined with oth­er data from Google.

The data pro­cess­ing pur­pos­es are the web­site-use analy­sis and the sum­ma­ry of reports on activ­i­ties on the web­site. Based on the use of the web­site and the Inter­net, oth­er relat­ed ser­vices will be pro­vid­ed.

Legal basis

The pro­cess­ing of the data occurs on the basis of the user’s con­sent (Art. 6 Para. 1 (a) GDPR).

Recipients

The recip­i­ent of the data is Google as the proces­sor. For this, we have entered into the cor­re­spond­ing data-pro­cess­ing con­tract with Google.

Retention period

The dele­tion of the data occurs as soon as they are no longer nec­es­sary for our record­ing-keep­ing pur­pos­es.

Third country transfers

Google process­es your data in the Unit­ed States of Amer­i­ca and is sub­ject to the EU-U.S. Pri­va­cy Shield: https://www.privacyshield.gov/EU-US-Framework.

Mandatory or required provision

The pro­vi­sion of your per­son­al data is vol­un­tary, based sole­ly on your con­sent. If you pre­vent access, this can lead to func­tion­al lim­i­ta­tions on the web­site.

Revocation of consent

You can pre­vent the stor­age of cook­ies by a cor­re­spond­ing set­ting in your brows­er soft­ware; how­ev­er, please note that in this case you may not be able to use all the func­tions of this web­site in their entire­ty. Fur­ther­more, you can pre­vent the col­lect­ed data gen­er­at­ed by the cook­ie and the data relat­ed to your use of the web­site (includ­ing your IP address) being trans­mit­ted to Google, as well as the pro­cess­ing of this data by Google, by down­load­ing and installing the brows­er plug-in avail­able at the fol­low­ing link: brows­er add-on to deac­ti­vate Google Ana­lyt­ics.

In addi­tion, or as an alter­na­tive to the brows­er add-on, you can pre­vent track­ing by Google Ana­lyt­ics on our web pages by click­ing this link, which will install an opt-out cook­ie on your device. This will pre­vent data col­lec­tion by Google Ana­lyt­ics for this web­site and for this brows­er in the future, as long as the cook­ie remains installed in your brows­er.

Profiling

With the assis­tance of the track­ing tool Google Ana­lyt­ics, the brows­ing behav­iour of the web­site vis­i­tors can be eval­u­at­ed and their respec­tive inter­ests can be analysed. For this analy­sis, we cre­ate a pseu­do­ny­mous user pro­file.

Using script libraries (Google Webfonts)

Type and purpose of the processing

In order to present our con­tent cor­rect­ly and graph­i­cal­ly appeal­ing across all browsers, we use ‘Google Web­fonts’ from Google LLC (1600 Amphithe­ater Park­way, Moun­tain View, CA 94043, USA, here­inafter ‘Google’) to dis­play fonts on this web­site.

You’ll find the data pro­tec­tion guide­lines of the library oper­a­tor Google here: https://www.google.com/policies/privacy/

Legal basis

Your con­sent is the legal basis for the inte­gra­tion of Google Web­fonts and the asso­ci­at­ed data trans­fer to Google (Art. 6 Para. 1 (a) GDPR).

Recipients

The use of script libraries or font libraries auto­mat­i­cal­ly trig­gers a con­nec­tion to the oper­a­tor of the library. It is the­o­ret­i­cal­ly pos­si­ble – but cur­rent­ly also unclear whether and to what end – that the oper­a­tor, in this case Google, will col­lect data.

Retention period

We do not col­lect any per­son­al data via the inte­gra­tion of Google Web­fonts.

You’ll find addi­tion­al infor­ma­tion on Google Web­fonts at https://developers.google.com/fonts/faq and in Google’s pri­va­cy pol­i­cy: https://www.google.com/policies/privacy/.

Third country transfers

Google process­es your data in the Unit­ed States of Amer­i­ca and is sub­ject to the EU-U.S. Pri­va­cy Shield: https://www.privacyshield.gov/EU-US-Framework.

Mandatory or required provision

The pro­vi­sion of your per­son­al data is nei­ther legal­ly nor con­trac­tu­al­ly required. How­ev­er, the cor­rect pre­sen­ta­tion of stan­dard-fonts con­tent is not pos­si­ble with­out this pro­vi­sion.

Revocation of consent

The pro­gram­ming lan­guage JavaScript is reg­u­lar­ly used to dis­play con­tent. Thus, you can opt out of the data pro­cess­ing by dis­abling JavaScript exe­cu­tion in your brows­er or by installing a JavaScript block­er. Please note that this may result in func­tion­al lim­i­ta­tions on the web­site.

Google AdWords

Type and purpose of the processing

Our web­site uses Google Con­ver­sion Track­ing. The oper­at­ing com­pa­ny of the Google AdWords ser­vices is Google LLC, 1600 Amphithe­ater Park­way, Moun­tain View, CA 94043, USA. If you have reached our web­site via a Google adver­tise­ment, Google Adwords will place a cook­ie on your com­put­er. The con­ver­sion track­ing cook­ie is used when a user clicks on an ad from Google.

If the user vis­its cer­tain pages on our web­site, and the cook­ie has not expired, we and Google can recog­nise that the user clicked on the ad and was redi­rect­ed to this page. Every Google AdWords cus­tomer receives a dif­fer­ent cook­ie. Thus, cook­ies can­not be tracked by the web­sites of AdWords cus­tomers. The infor­ma­tion gath­ered by the con­ver­sion cook­ie is used to gen­er­ate con­ver­sion sta­tis­tics for AdWords cus­tomers who have opt­ed for con­ver­sion track­ing. The cus­tomers see the total num­ber of users who clicked on their adver­tise­ment and were redi­rect­ed to a con­ver­sion track­ing tag page. How­ev­er, they do not receive infor­ma­tion that per­son­al­ly iden­ti­fies users.

Legal basis

Your con­sent is the legal basis for the inte­gra­tion of Google AdWords and the asso­ci­at­ed data trans­fer to Google (Art. 6 Para. 1 (a) GDPR).

Recipients

When­ev­er you vis­it our web­site, your per­son­al infor­ma­tion, includ­ing your IP address, is trans­ferred to Google in the U.S. This per­son­al infor­ma­tion is saved by Google. Google may trans­fer such per­son­al data col­lect­ed through the tech­ni­cal process to third par­ties.

We do not receive infor­ma­tion from Google that could iden­ti­fy the data sub­ject.

Retention period

These cook­ies lose their valid­i­ty after 30 days and are not used for per­son­al iden­ti­fi­ca­tion.

Third country transfers

Google process­es your data in the Unit­ed States of Amer­i­ca and is sub­ject to the EU-U.S. Pri­va­cy Shield: https://www.privacyshield.gov/EU-US-Framework.

Revocation of consent

If you do not want to par­tic­i­pate in the track­ing, you can reject the required cook­ie use – for exam­ple via a gen­er­al brows­er set­ting that dis­ables the auto­mat­ic use of cook­ies or con­fig­ures your brows­er to block cook­ies from the domain ‘googleleadservices.com’.

Please note that you should not delete the opt-out cook­ies as long as you do not want to save mea­sure­ment data. If you have delet­ed all your cook­ies in the brows­er, you must use the respec­tive opt-out cook­ie again.

Mandatory or required provision

The pro­vi­sion of your per­son­al data is vol­un­tary, based sole­ly on your con­sent. If you pre­vent access, this can lead to func­tion­al lim­i­ta­tions on the web­site.

Hubspot

This web­site uses a Hub­Spot track­ing code which uses cook­ies or sim­i­lar tech­nolo­gies to track vis­i­tors of this web­site and gath­ers demo­graph­ic infor­ma­tion about them. Hub­Spot keeps track of the ecom­meleon web­sites and pages you vis­it with­in Hub­Spot. This data is used to deliv­er cus­tomised con­tent and pro­mo­tions to users whose behav­iour indi­cates that they are inter­est­ed in a par­tic­u­lar sub­ject area.

For more infor­ma­tion about HubSpot’s Pri­va­cy Pol­i­cy, click here.

UserCentrics

We have engaged the ser­vices of User­Centrics GmbH to allow us to offer you, the user, a cus­tomis­able cook­ie expe­ri­ence. You can deac­ti­vate indi­vid­ual cook­ies at any­time using this plu­g­in.

 Note: If you vis­it our web­site in oth­er lan­guages,  then you must like­wise car­ry out an opt-out in the data pri­va­cy pol­i­cy pre­sent­ed there.

SSL encryption

To pro­tect the secu­ri­ty of your data dur­ing trans­mis­sion, we use state-of-the-art encryp­tion meth­ods (such as SSL) via HTTPS.

 

Revision of our privacy policy

We reserve the right to amend this pri­va­cy pol­i­cy so that it always com­plies with cur­rent legal require­ments or to imple­ment changes to our ser­vices in the pri­va­cy pol­i­cy, e.g. when intro­duc­ing new ser­vices. Your next vis­it will be sub­ject to the new pri­va­cy pol­i­cy.

Questions for the data protection officer

If you have any ques­tions per­tain­ing to data pro­tec­tion, please send us an e-mail or con­tact the per­son respon­si­ble for data pro­tec­tion in our orga­ni­za­tion:

dataprotection@ecommeleon.com

The pri­va­cy pol­i­cy was cre­at­ed via the active­Mind AG pri­va­cy pol­i­cy gen­er­a­tor (Ver­sion: #2018-09-24).