Privacy Poilicy

We are very pleased about your interest in our company. Data protection has a particularly high priority for the management of e&Co. AG. We are aware of the importance of the processing of personal data for the user and accordingly observe all relevant legal requirements. A use of the internet pages of e&Co. AG is basically possible without any indication of personal data, with the exception of legally required log files. However, if a person concerned wishes to make use of special services of our company, it may become necessary to process personal data.

The processing of personal data, for example the name, address, e-mail address or telephone number of a person concerned, is always carried out in accordance with the data protection regulation and in compliance with the country-specific data protection regulations applicable to e&Co. AG. By means of this data protection declaration, we would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, this data protection declaration informs affected persons about the rights to which they are entitled.

e&Co. AG, as the responsible for processing, has implemented numerous technical and organisational measures to ensure the most complete possible protection of the personal data processed via this website and also in principle within the company. Nevertheless, Internet-based data transmissions may have security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us by alternative means, such as by telephone.

In the following, e&Co. AG reports transparently about the responsible activities within its area of responsibility in order to inform all parties involved. The information covers not only processing activities directly related to the company’s websites, but also activities that go beyond these.

1

NAME AND ADDRESS OF THE RESPONSIBLE

e&Co. AG (Hubertusstr. 50, 54439 Saarburg, Germany), hereinafter also “we”, “us”, inform you in the following about the processing of your personal data in the context of the use of our website https://www.eandco.com, hereinafter also “website” as well as in the context of business relations between you and us.

If you have any questions regarding data protection in connection with our website, the services offered or existing business relationships, please contact us at datenschutz@eandco.com. Please send a request for information to

e&Co. AG
Data information
Hubertusstr. 50
54439 Saarburg
Germany

or by e-mail to:
datenschutz@eandco.com

If you contact us by e-mail, the communication is not encrypted.

2

GENERAL INFORMATION ON DATA PROCESSING

a) What do we process your data for (purpose of processing) and on what legal basis?

We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Personal data is processed by us to fulfil contractual obligations in accordance with Art. 6 Para. 1 S. 1 lit. b) GDPR. This includes in particular:

  • The execution of service / performance contracts and the associated business relationship.
  • The initiation of contractual relationships.

In addition, we process your data to protect our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR, including

  • for contacting you, insofar as a permanent business relationship with you or your employer exists or is intended (business contacts);
  • for the purposes of auditing;
  • to ensure IT security and IT operations;
  • for advertising purposes, provided that you have not objected to the use of your data;
  • for the purpose of compiling statistics;
  • for purposes of prevention, clarification and reporting of criminal offences, e.g. fraud, e.g. deception of identity or fraudulent performance;
  • for the assertion of legal claims including collection and defence in legal disputes.

We process your data on the basis of your consent in accordance with Art. 6 Para. 1 S.1 lit. a) GDPR for specific purposes, in particular

  • Market research and customer surveys;
  • for the personalised use of the website and personalised offers;
  • for analytical purposes in order to optimise our offer for you.

Any consent granted can be revoked at any time. This also applies to the revocation of declarations of consent that were given to us before the application of the GDPR, i.e. before 25.05.2018. The revocation of a consent is only effective for the future and does not affect the legality of the data processed until the revocation.

We process data on the basis of legal obligations in accordance with Art. 6 Para. 1 S.1 lit. c) GDPR:

Insofar as we are legally obliged to do so, we process personal data in order to comply with commercial, tax or data protection storage obligations or to fulfil security requirements. Further information on retention periods can be found under “Duration of data processing”.

b) What personal data are you obliged to provide?

For legally prescribed or contractual requirements, we have marked the respective input fields in the input masks, if applicable, on our websites, which must be filled in by you in order for us to provide the contract or service you request.

c) How long is your data stored?

Your personal data will be deleted as soon as it is no longer required for the purposes mentioned. However, we may have to continue to store your data until the expiry of the retention obligations and periods stipulated by the legislator or supervisory authorities, which may result from the German Commercial Code, the German Fiscal Code and the Money Laundering Act, among others, and which generally amount to 6 to 10 years. In addition, we may store your data until the expiry of the statutory limitation periods (i.e. as a rule 3 years; in individual cases, however, up to 30 years), insofar as this is necessary for the assertion, exercise or defence of legal claims. After this period, the corresponding data is routinely deleted.

Who receives your data?

In the context of the above data processing and the respective legal basis mentioned (execution of contract, in the legitimate interest, with consent or due to legal processing obligations), your data may be passed on to the following categories of recipients:

  • auxiliary persons, e.g. service providers,
  • other service providers, e.g. for the provision of the website, newsletter dispatch or feedback handling,
  • government bodies and authorities, e.g. due to legal regulations or police and investigation activities.

It may happen that personal data are transferred to third countries or to international organisations. For your protection and the protection of your personal data, appropriate guarantees are provided for such data transfers in accordance with and in compliance with the legal requirements.

Insofar as these transfers are not based on a legal basis or are made to a country for which no adequacy decision issued by the EU Commission has been made, we use the EU standard contractual clauses.

Information on EU standard contractual clauses can be found here on the websites of the European Union.

3

WHICH RIGHTS DO YOU HAVE?

a) Your rights at a glance

It is important for us to make our processes fair and transparent. It is therefore important for us that those affected can exercise the following rights if the respective legal requirements are met:

  • Right to information, Art. 15 GDPR
  • Right of rectification, Art. 16 GDPR
  • Right of deletion (“right to be forgotten”), Art. 17 GDPR
  • Right to restrict processing, Art. 18 GDPR
  • Right to data transferability, Art. 20 GDPR
  • Right of appeal, Art. 21 GDPR

To exercise your rights, you can contact us by e-mail at datenschutz@eandco.com. For identification purposes we ask you to provide the following information:

  • Name
  • Postal address
  • E-mail address
  • and optionally: relationship with e&Co. AG, further information to clearly identify you in our systems

If you send us a copy of your identity card, please black out all details except for your name, first name and address.

In order to be able to process your application, as well as for identification purposes, we would like to point out that we will process your personal data in accordance with Art. 6 para. 1 lit. c GDPR.

Furthermore, in accordance with Art. 77 GDPR in conjunction with § 19 BDSG you have the right to appeal to a supervisory authority. The supervisory authority responsible for e&Co. AG is

Der Landesbeauftragte für den Datenschutz
und die Informationsfreiheit Rheinland-Pfalz
Postfach 30 40
55020 Mainz
Germany

b) How can you withdraw your consent?

If you have given us your consent to process your personal data, we hereby inform you that you can revoke this consent at any time with effect for the future.

If you have given your consent on this website, please visit the page on which you originally gave your consent to revoke it.

In all other cases or if you have problems to revoke your consent on this website, you can of course also contact us at any time directly at the e-mail address datenschutz@eandco.com.

Please note that the consent you have revoked will only have effect for the future and will not affect the lawfulness of processing in the past. In some cases, despite your revocation, we are entitled to further process your personal data on another legal basis – for example, to fulfil a contract.

c) Information on your right of objection under Art. 21 GDPR

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out pursuant to Article 6 paragraph 1 letter e or f FADP; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you, unless he can demonstrate compelling reasons for processing which are justified on grounds of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it is linked to such direct marketing.

If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for those purposes.

You have the possibility to exercise your right of objection in relation to the use of information society services, without prejudice to Directive 2002/58/EC, by using automated procedures involving technical specifications.

4

PROVISION OF THE WEBSITE AND CREATION OF LOG FILES

When users visit our website, our system automatically collects data and information from the computer system of the calling computer each time our website is accessed. The following data (“technical information”) is collected:

  • Information about the browser type and version used
  • The user’s operating system (also device type, i.e. PC, mobile phone, etc.)
  • The IP address of the user
  • Date and time of access
  • Location of the access (e.g. opening the website via a Google link)

The collected data is temporarily stored in log files, which are deleted daily. Before deletion, the log files are read out and analysed. In doing so, we pursue the purpose of (network) security, for example to ward off cyber attacks, marketing, continuous improvement of the website and its alignment with the needs and requirements of our customers. For example, this analysis enables us to deliver the website optimised for your web browser.

The legal basis for the collection, temporary storage and further processing is our legitimate interest in offering our customers an optimal and profitable website with maximum functionality and maximum comfort, Art. 6 para. 1 lit. f GDPR.

5

USE OF COOKIES

Our website uses cookies. A cookie is a small text file that a web portal leaves on the user’s computer system (computer, tablet computer or smartphone) when they visit it. Personal data can be stored in cookies.

In your browser settings, you can prevent tracking by cookies (do-not-track, tracking protection list) or prohibit the storage of third-party cookies. Please also note that if you use a different Internet browser, you will have to set your preference for the use of cookies again.

When all cookies are deleted, any opt-out cookies already set will also be deleted, so that you will have to re-declare any opt-outs you have already declared.

We want to give you the opportunity to make an informed decision for or against the use of cookies, which are not absolutely necessary for the technical functions of the website. Please note that if you reject cookies used for advertising purposes, you will receive less customizable content that is tailored to your interests. However, the use of the website will remain in full.

We distinguish between cookies that are absolutely necessary for the technical functions of the website and optional cookies.

To enable you to determine your desired data protection settings for visiting our website as individually as possible, we will give you the opportunity below to set your preferences for the categories operational necessity, statistics, comfort and personalisation for you.

  • Category “Operational necessity”
    These cookies are necessary for the operation of the site.
  • Category “Statistics”
    To further improve our offer and our website, we collect anonymous data for statistics and analysis. With the help of these cookies we can, for example, determine the number of visitors and the effect of certain pages on our website and optimise our content.
  • “C0nvenience” category
    We use these cookies to make the use of the site easier for you. For example, the language you have selected can be displayed again initially on your next visit.
  • “Personalization” category
    These cookies are used to display personalized content according to your interests. This enables us to present you with offers that are particularly relevant to you.

Which cookies of the category “operational necessity” do we use?
Google Web Fonts: This site uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. To do this, the browser you use must connect to Google’s servers. In doing so, Google is informed that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f GDPR. If web fonts are not supported by your browser, a standard font from your computer will be used. Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in the Google privacy policy: https://www.google.com/policies/privacy/.

Which cookies of the category “Statistics” do we use?
On this website, the controller has integrated the component of Google Analytics (with the anonymizer function). Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analysis service collects, inter alia, data about the website from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.

The operator of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. For the web analytics through Google Analytics the controller uses the application “_gat. _anonymizeIp”. By means of this application the IP address of the Internet connection of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area. The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our websites, and to provide other services concerning the use of our Internet site for us.

Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Google Analytics component was integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements. Google Analytics cookies are stored based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.

The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of our website by the data subject. With each visit to our Internet site, such personal data, including the IP address of the Internet access used by the data subject, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties. The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google Analytics from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google Analytics may be deleted at any time via a web browser or other software programs.

In addition, the data subject has the possibility of objecting to a collection of data that are generated by Google Analytics, which is related to the use of this website, as well as the processing of this data by Google and the chance to preclude any such. For this purpose, the data subject must download a browser add-on under the link https://tools.google.com/dlpage/gaoptout and install it. This browser add-on tells Google Analytics through a JavaScript, that any data and information about the visits of Internet pages may not be transmitted to Google Analytics. The installation of the browser add-ons is considered an objection by Google. If the information technology system of the data subject is later deleted, formatted, or newly installed, then the data subject must reinstall the browser add-ons to disable Google Analytics. If the browser add-on was uninstalled by the data subject or any other person who is attributable to their sphere of competence, or is disabled, it is possible to execute the reinstallation or reactivation of the browser add-ons.

Objecting to the collection of data: You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this site: Disable Google Analytics. For more information about how Google Analytics handles user data, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Transfer to a third country: Google LLC, based in the USA, is certified for the US European data protection agreement “Privacy Shield”, which guarantees compliance with the data protection level applicable in the EU. Storage period: 14 months.

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under http://www.google.com/analytics/terms/us.html. Google Analytics is further explained under the following Link https://www.google.com/analytics/.

Which “convenience” category cookies do we use?
We currently do not use cookies of this category.

Which cookies in the “Personalization” category do we use?
We currently do not use cookies of this category.

6

PRIVACY POLICY FOR SOCIAL MEDIA PLUGINS / ONLINE PRESENCE IN SOCIAL MEDIA

On our website we only refer to our business channels on LinkedIn and Twitter by a direct link. However, we do not use so-called “social media plugins”, through which information about the person concerned is passed on.

Online presence in social media: We maintain online presences within social networks and platforms in order to be able to communicate with customers, interested parties and users active there and to inform them about our services. We point out that user data may be processed outside the European Union. This can result in risks for the users, because the enforcement of the users’ rights could be made more difficult. With regard to US providers certified under the Privacy Shield, we would like to point out that they thereby undertake to comply with the data protection standards of the EU. Furthermore, user data is generally processed for market research and advertising purposes. For example, user profiles can be created from the user behaviour and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers, in which the usage behaviour and interests of the users are stored. Furthermore, data may also be stored in the user profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them). The processing of users’ personal data is based on our legitimate interests in effective information of users and communication with users in accordance with Art. 6 para. 1 lit. f. GDPR. If users are asked by the respective providers to give their consent to data processing (i.e. to give their consent e.g. by ticking a check box or confirming a button), the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR. For a detailed presentation of the respective processing and the possibilities of objection (opt-out), we refer to the following linked information of the providers. Also in the case of requests for information and the assertion of user rights, we would like to point out that these can most effectively be asserted with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. Should you nevertheless require assistance, you can contact us.

LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) – Privacy Policy https://www.linkedin.com/legal/privacy-policy , Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) – Privacy Policy: https://twitter.com/de/privacy , Opt-Out: https://twitter.com/personalization, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

On this website, the controller has integrated components of YouTube. YouTube is an Internet video portal that enables video publishers to set video clips and other users free of charge, which also provides free viewing, review and commenting on them. YouTube allows you to publish all kinds of videos, so you can access both full movies and TV broadcasts, as well as music videos, trailers, and videos made by users via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, UNITED STATES. The YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a YouTube component (YouTube video) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained under https://www.youtube.com/yt/about/en/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject. If the data subject is logged in on YouTube, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site was visited by the data subject. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject. YouTube and Google will receive information through the YouTube component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on YouTube; this occurs regardless of whether the person clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made. YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.

YouTube’s data protection provisions, available at https://www.google.com/intl/en/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.

7

DESCRIPTION OF OUR DATA PROCESSING ACTIVITIES

We offer various services via our websites and through our activity/presence in social networks such as LinkedIn or XING. In order to provide these services, we have to collect and process personal data of the user or our customer.

The processing activities within the meaning of Art. 13 GDPR are described below:

a) Contact with/by (potential) customers

If you are a customer of e&Co. AG, we may need to collect and use information about you or people within your organization to provide services to you and/or notify you of content published by e&Co. that is likely to be important and useful to you.

Description and scope of data processing
On our website it is possible to contact us via the provided e-mail address. In this case, the user’s personal data transmitted with the e-mail will be stored. It is also conceivable that initial contact is usually made via corresponding social networks such as XING or LinkedIn. In this case, the personal data is recorded which is related to the contact and relevant for the further business relationship. We only collect data about our customers to a very limited extent. The following data is collected:

  • Name and first name of individual contact persons within your organization
  • E-mail address
  • Content of the request
  • Company on whose behalf you are making an enquiry (voluntary information)
  • Telephone number (optional)
  • Date and time of the request
  • Log information, such as IP address (only for contact form)

Purpose of the data processing:
We use the data to ensure a smooth business relationship and to be able to process your request as quickly as possible. For this purpose we use either your e-mail address or your telephone number. Log information is collected to protect against misuse of the contact form.

Legal basis for the data processing
As legal basis for the present processing of your data is our interest in a good dialogue between our customers and us, as well as ensuring a functioning process, Art. 6 para. 1 letter f GDPR.

Transfer to third parties:
The collected data will not be passed on to third parties in the course of contacting us.

Duration of storage:
If the data collection is no longer necessary to achieve the purpose, the data will be deleted. This is the case if the circumstances indicate that the matter in question has been conclusively clarified. However, there may be requirements under commercial law in particular which oblige us to maintain the correspondence for a period of time. The period of time depends on the content of the affected document.

b) Processing of contracts

If you are a customer of e&Co. AG, we need to collect and use information about you or people within your organization to provide services to you and/or notify you of content published by e&Co. that is likely to be important and useful to you.

Description and scope of data processing

In order to provide the contractually agreed services, we are dependent on the processing of certain personal data. We only collect data about our customers to a very limited extent. The following data is collected:

  • Name and first name of individual contact persons within your organisation
  • E-mail addresses of contact persons
  • Content of the request
  • Data on the company of our contact persons:
  • Address of the company
  • Telephone number
  • Company billing address
  • Value added tax Identification number
  • Commercial register number
  • Date and time of the request

Purpose of the data processing:
We use the information e.g. to assert, exercise or defend legal claims.

Legal basis for data processing
We process this data on the basis of Art. 6 Para. 1 lit. b of the GDPR. It states that the processing of personal data is lawful if it is necessary for the performance of a contract or for the implementation of pre-contractual measures taken at the request of the data subject.

Transfer to third parties:
It may be necessary to disclose data to tax, audit or other authorities if we are convinced in good faith that we are obliged to disclose such data by law or other regulation (for example, because of a request from a tax authority or in connection with an anticipated legal dispute).

Duration of storage:
If the collection of data is no longer necessary to achieve its purpose, the data will be deleted. This is the case if the circumstances indicate that the matter in question has been conclusively clarified. However, there may be requirements under commercial law in particular which oblige us to maintain the correspondence for a period of time. The period of time depends on the content of the affected document.

c) Subscription to our newsletter

On the website of e&Co. AG, users are given the opportunity to subscribe to the newsletter of our company. The input mask used for this purpose shows which personal data is transferred to the data controller when ordering the newsletter.

e&Co. AG sends out the Value Letter at regular intervals with professional articles, studies, valuable business insights and news about management consulting. The newsletter of our company can only be received by the person concerned if (1) the person concerned has a valid e-mail address and (2) the person concerned registers for the newsletter mailing. For legal reasons, a confirmation e-mail will be sent to the e-mail address registered for the first time by a person concerned for the purpose of receiving the newsletter using the double opt-in procedure. This confirmation mail is used to check whether the owner of the e-mail address has authorized the receipt of the newsletter as a data subject.

The following information is required for registration:

  • Salutation ( voluntary information )
  • Title (optional)
  • First name (optional)
  • Last name (optional)
  • E-mail (mandatory)

When registering for the newsletter, we also save the IP address assigned by the Internet Service Provider (ISP) of the computer system used by the person concerned at the time of registration as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of a data subject’s e-mail address at a later date and therefore serves to provide legal protection for the data controller.

This website uses Rapidmail for sending newsletters. The provider is rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany. Rapidmail is a service that can be used to organise and analyse the sending of newsletters, among other things. The data you enter to subscribe to the newsletter is stored on the Rapidmail servers in Germany. If you do not wish to receive an analysis from Rapidmail, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website by e-mail.

For the purpose of analysis, e-mails sent with Rapidmail contain a so-called “tracking pixel” which connects to the Rapidmail servers when the e-mail is opened. In this way, it can be determined whether a newsletter message has been opened. Furthermore, we can use Rapidmail to determine whether and which links in the newsletter message are clicked on. All links in the e-mail are so-called tracking links, which can be used to count your clicks. For more information on the analysis functions of Rapidmail, please see the following link: https://de.rapidmail.wiki/kategorien/statistiken/

Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by the data controller in order to optimise the newsletter dispatch and to adapt the content of future newsletters even better to the interests of the data subject. This personal data is not passed on to third parties. Affected persons are entitled to revoke the separate declaration of consent submitted in this regard via the double opt-in procedure at any time. After revocation, these personal data will be deleted by the data controller. A cancellation of receipt of the newsletter is automatically interpreted by e&Co. AG as a revocation.

Purpose of data processing
The personal data collected during registration for the newsletter is used exclusively for sending our newsletter. In addition, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or for registration, as might be the case if there are changes to the newsletter offer or if technical conditions change.

For the purpose of analysis, the e-mails sent with Rapidmail contain a so-called “tracking pixel” which connects to the servers of Rapidmail when the e-mail is opened. In this way, it can be determined whether a newsletter message has been opened. Furthermore, we can use Rapidmail to determine whether and which links in the newsletter message are clicked on. All links in the e-mail are so-called tracking links, which can be used to count your clicks. For more information on the analysis functions of Rapidmail, please see the following link: https://de.rapidmail.wiki/kategorien/statistiken/

Legal basis for the data processing
The data entered in the newsletter registration form will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a DSGVO).

The subscription to our newsletter can be cancelled by the person concerned at any time. The consent to the storage of personal data that the person concerned has given us for the purpose of sending the newsletter can be revoked at any time. For the purpose of revoking the consent, a corresponding link is included in every newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the website of the data controller or to inform the data controller in another way. The legality of the data processing operations already carried out remains unaffected by the revocation.

Disclosure to third parties
Personal data collected within the scope of the newsletter service will not be passed on to third parties. We have concluded a contract with Rapidmail in which we commit Rapidmail to protect the data of our customers and not to pass them on to third parties. This contract does not classify Rapidmail as a third party within the meaning of the DSGVO – we nevertheless want to provide transparent information about this. The contract can be viewed under the following link: https://de.rapidmail.wiki/files/adv/muster-auftragsdatenverarbeitung.pdf.

Duration of storage
The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of Rapidmail after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this. You can find more details in the Rapidmail data security information at: https://www.rapidmail.de/datensicherheit.

d) Registration for additional functions

You can register on our website to use additional features on the site.

Description and scope of data processing
We want to actively shape the opinion of tomorrow and therefore publish white papers, studies or books at regular intervals. To get access to these sources and to protect them from misuse we ask you to register. The following information is necessary for this:

  • Salutation (voluntary information)
  • Title (optional)
  • First name (optional)
  • Last name (optional)
  • Company (optional)
  • Position (optional)
  • E-mail (mandatory)

After you have registered once, you can log in again at any time with your e-mail address and get access to the sources.

Purpose of data processing
We use the data entered for registration only for the purpose of using the respective offer or service for which you have registered. The mandatory data requested during registration must be provided in full. Otherwise we will refuse the registration. In the event of important changes, for example in the scope of the offer or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way.

Legal basis for data processing
The data entered during registration is processed on the basis of your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke any consent you have given at any time. All you need to do is send us an informal notification by e-mail. The legality of the data processing already carried out remains unaffected by the revocation.

Disclosure to third parties
The collected data will not be passed on to third parties during the registration process.

Duration of storage
The data collected during registration is stored by us for as long as you are registered on our website and is then deleted. Legal retention periods remain unaffected.

d) Application & application procedure

We are constantly looking for new talents to develop our company. Please feel free to apply.

Description and scope of data processing
In order to process an application, we are obviously dependent on the collection of personal data from candidates. For this purpose, we receive the relevant data either through direct applications in response to our advertisements or through unsolicited applications (also directly by e-mail).

Depending on the relevant conditions and the applicable local laws and regulations, we will usually collect some or all of the information listed below:

  • Name
  • Age/date of birth
  • Gender
  • Photography
  • Marital status
  • Contact details
  • Details of training
  • Career development
  • Details of the contact person for a reference
  • Immigration status (whether you need a work permit)
  • Nationality/citizenship/place of birth details of any criminal record, if relevant to a job for which you are applying
  • Details of your current compensation, pension and benefit arrangements
  • Information about your interests and aspirations for future employment; this is both collected directly and derived, for example, from the job offers or articles you read on our website
  • Additional information that you provide on your own initiative
  • Additional information that we receive from third parties, e.g. job portals

Unless otherwise indicated, this data is provided by the (potential) candidate himself. Please ensure that you do not send us any data that is particularly worthy of protection within the meaning of Art. 9 DSGVO. This includes personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, biometric data uniquely identifying a natural person, health data or data concerning the sex life or sexual orientation of a natural person.

Purpose of data processing
The data controller collects and processes the personal data of applicants for the purpose of managing the application procedure and thus for the purpose of taking a decision on whether to close an employment relationship. The processing may also be carried out by electronic means. This is particularly the case when an applicant submits relevant application documents to the controller electronically, for example by e-mail or by means of a web form available on the website.

Legal basis for data processing
Art 88 (1) DSGVO in conjunction with §Section 26 BDSG provides that we may process applicant data for the purpose of deciding on an employment relationship.

Disclosure to third parties
As a rule, the collected data will not be passed on to third parties in the course of the application. Exception: Your data will be passed on or obtained in the case of obtaining your references from the relevant contact persons you have named to us, provided that such checks are appropriate and permitted by local law

Duration of storage
If the data controller concludes an employment contract with an applicant, the transmitted data is stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents shall be automatically deleted two months after notification of the rejection decision, unless deletion is contrary to any other legitimate interests of the controller. Other legitimate interests in this sense include, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

8

UPDATE AND AMENDMENT OF THIS PRIVACY POLICY

This privacy policy is currently valid and has the status of June 2020.

The further development of our website, its offers or changed legal provisions, or issued jurisdiction or official requirements may make it necessary to change this data protection declaration. You can access and print out the current version of our data protection declaration at any time on the website under Privacy Policy.