Privacy policy of EIKONA Media GmbH

1. Preamble

We are pleased about your visit on the website of our company. Information protection and in particular data protection is of great importance to our management. In principle, you can use this website without providing any personal data. Should you disclose data to us in connection with the processing described below, we will treat your personal data confidentially and in accordance with the legal data protection regulations of the European Union and the Federal Republic of Germany as well as this data protection declaration. As the data controller, EIKONA Media GmbH has implemented numerous technical and organizational measures to ensure the complete protection of personal data processed via this website. However, Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, you as the person concerned are free to transmit personal data to us by alternative means, for example by telephone or mail.

2. Definitions

EIKONA Media GmbH's data protection declaration is based on the terms used by the European legislator when the basic data protection regulation (GDPR) was issued. The detailed definitions can be found in Art. 4 GDPR. Essentially, these are the following terms, described here in simplified form:

a) Personal data: This is all information available to us as a responsible person to determine you as a natural person. (e.g. name, address, e-mail, telephone number, IP address etc.)

b) Person concerned: This is you as a natural person, if we have identified you or can identify you.

c) Processing: Processing is any collection, storage, further processing, forwarding, archiving and deletion of data. It is irrelevant whether the process is carried out automatically with the aid of IT systems or whether it is carried out manually (e.g. by letter).

d) Restriction of processing: Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.

e) Profiling: Profiling is any type of automated processing of your data, which consists in using these data to evaluate certain personal aspects relating to you. In particular, to analyse or predict aspects relating to your job performance, economic situation, health, personal preferences, interests, behaviour, whereabouts or change of location.

f) Pseudonymization: This is a process to identify your personal data. In the following, only this identifier will be used and without the original key or a "reference database" this pseudonym cannot be resolved (e.g. allocation of a customer number).

g) Responsible Person: The person responsible or responsible for processing is EIKONA Media GmbH with whom you have a contractual relationship. It is crucial that we can decide independently on the processing methods and means.

h) Contract processor: A processor is a company that has been commissioned by EIKONA Media GmbH to assist you in the collection, processing, storage, forwarding or deletion of your data. Usually these are IT service providers, but also waste disposal companies that are commissioned, for example, with the destruction of documents.

i) Consent: Consent is any expression of will given by you for a specific individual case. You will be fully informed about what you are consenting to.

3. The name and address of the controller

The person responsible for this website and the central services of EIKONA Media GmbH within the meaning of the Data Protection Basic Regulation and other regulations of a data protection nature is:

EIKONA Media GmbH Street: Am Alten Bahnhof 8 City: D-97332 Volkach

Managing Director: Torsten Herbert Salvatore Accaputo

Phone: 09381 / 71 77 8 - 0 E-Mail: kontakt@eikona-media.de

4. Data Protection Officer

A data protection officer has been appointed for EIKONA Media GmbH. He is available at any time to answer your questions in connection with data processing.

Personal/Confidential Data Protection Officer
pco GmbH & Co. KG
Am Alten Bahnhof 8
97332 Volkach
E-Mail: datenschutz@eikona-media.de
Tel.: +49 541 605 1500
www.it-ist-alles.de

5. Rights of the data subject

In accordance with Chapter 3 of the GDPR, you have the following rights as a data subject. In order to fulfil our obligations in connection with your rights in accordance with the law, please address appropriate inquiries to our data protection officer.

a) Art. 15 Right to information You have an unlimited right to request information about the personal data processed by you. This information must be provided to you free of charge. You may request information on the following information, a copy of which must also be sent to you

  • the purpose of processing your data,
  • the categories of the data,
  • the internal and external recipients of your data,
  • the duration of the data storage,
  • their rights under Chapter 3, in connection with data processing,
  • the origin of the data, if it was not collected from you,
  • whether a profile was created,
  • whether your data has been transferred to a third country (non-EU and non-EEA),
  • which data protection authority is responsible for our respective company,

b) Art. 16 Right of rectification Should we process incorrect data from you, you can have this corrected at any time by your contact person.

c) Art. 17 Right of cancellation You have the right to request the deletion of your personal data at any time. We may be required by law to retain your data for a certain period of time (e.g. 6 years for business mail or 10 years for tax-related documents). In such a case we will block your data record until the retention period has expired and then delete the data record accordingly. Please address deletion requests to the data protection officer, who will exercise your rights in our company on your behalf.

d) Art. 18 Right to limit processing If you dispute the accuracy of our personal data, or if you refuse to have your data deleted and instead demand the restriction (e.g. in the case of advertising mail), you can demand the restriction of processing from us. We will then set your data to blocked.

e) Art. 19 Obligations of notification in connection with correction, deletion or restriction We are obliged to inform all recipients of your data of any correction, deletion or restriction you have commissioned, insofar as this is possible and can be implemented with a reasonable amount of effort. We will inform you about the recipients of your data if you request this.

f) Art. 20 Right to data transfer You have the right at any time to request our company to transfer your data to another responsible person. This refers to all master data that we keep about you. If technically possible, we will provide the data record in a common machine-readable format (e.g. .csv).

g) Art. 21 Right of objection If a data processing has been justified on the basis of article 6, paragraph I, letter f (so-called legitimate interest), you may object to the processing in this context.

h) Art. 77 Right to appeal to a supervisory authority You have the right to complain to the data protection supervisory authority responsible for our company at any time if you believe that we have violated the provisions of the GDPR in any way. The following authority is responsible for EIKONA Media GmbH:

Bayerisches Landesamt f. Datenschutzaufsicht (BayLDA)
Promenade 18
D-91522 Ansbach

You can access the website of the data protection supervisory authority via the following link: https://www.lda.bayern.de/de/index.html

6. Processing operations

In this section we will describe the data processing that is connected with our internet offer or that applies to a general business relationship between you and our company.

The following legal bases serve us for the processing of your data. Art. 6 I lit. a GDPR serves our company as a legal basis for processing operations for which we obtain consent for a specific processing purpose.

If the processing of your data is necessary for the performance of a contract to which you are a party, as is the case, for example, with processing operations required for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 I lit. b GDPR. The same shall apply to such processing operations which are necessary for the performance of pre-contractual measures, for example in cases of inquiries about our products or services.

If our company is subject to a legal obligation which makes the processing of personal data necessary, for example to fulfil tax obligations, the processing is based on Art. 6 I lit. c GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the person concerned or of another natural person. This would be the case, for example, if a visitor to our company was injured and his name, age, health insurance details or other vital information had to be passed on to a doctor, hospital or other third party. In this case the processing would be based on Art. 6 I lit. d GDPR.

Finally, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the above legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, unless the interests, fundamental rights and freedoms of you outweigh the processing. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator.

a) Website processing We operate this website and collect various data in this context.

Cookies

The Internet pages partly use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. We, as website operators, have a legitimate interest in the storage of cookies for the technically error-free and optimized provision of our services. Insofar as other cookies (e.g. cookies to analyze your surfing behavior) are stored, they are treated separately in this privacy policy.

Server log data

EIKONA Media GmbH or our website provider collects data about access to our website and stores it as "server log files". The following data is logged in this way:

  • Visited website
  • Time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you reached to the page
  • Used Browser
  • Operating system used
  • IP address used (anonymized)

The data collected is only used for statistical analysis and to improve the website. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.

Blog on the website We offer our website visitors the possibility to inform themselves about relevant topics and to share individual blog posts. A blog is a portal on a website, usually publicly visible, in which one or more persons, called bloggers or web bloggers, can post articles or write down thoughts in so-called blogposts. The blogposts can usually be commented on and shared by third parties. So-called social bookmarks are implemented in our blog posts. These are Internet bookmarks that allow you to collect links and news items and share them via certain services. These services are implemented on our website only as a link in the form of an embedded graphic. Specifically, these are the services Facebook, Twitter, LinkedIn, XING. If you click on the graphic, you will be directed to the page of the respective provider. Only after your click will your user information be transferred to the respective provider. How the respective provider handles your personal data can be found in the respective provider's privacy policy.

Third party modules / analysis tools / advertising You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

(1) Google Tag Manager We use the Google Tag Manager on our website. Google Tag Manager is provided by Google Ireland Limited and is used to manage website tags through a user interface. The Tag Manager itself is a cookieless domain that does not set any cookies and does not process personal data. It is responsible for triggering other tags, which in turn may collect data. The Google Tag Manager cannot access this data. If you have deactivated cookies at the domain or cookie level, this deactivation will remain in effect for all tracking tags implemented by Google Tag Manager.

(2) Google Analytics If you have given us your consent in advance, we will use Google Analytics, a web analytics service provided by Google Ireland Limited (https://www.google.com/intl/en/about/) (Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google") for the purpose of demand-oriented design and ongoing optimisation of our pages. In this context, pseudonymous user profiles are created and cookies (see 6. a website) are used. The information generated by the cookie about your use of this website such as

  • Browser type/version,
  • operating system,
  • Referrer URL (the previously visited page),
  • Host name of the accessing computer (IP address),
  • Time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the website activities and to provide further services connected with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with requirements. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are made anonymous so that an assignment is not possible (IP masking). We would like to point out that the same level of protection under data protection law cannot be guaranteed in the USA as within the EU. This is due in particular to the lack of an adequacy decision by the EU Commission and the legal situation in the USA, which grants security authorities far-reaching powers of access to personal data. There are also no legal means by which EU citizens can defend themselves. The data processing is based on your consent in accordance with Art. 6 (1) a) GDPR, which you can give us with the help of the Consent Banner. You can revoke this consent at any time by calling up the settings of the consent banner and editing them accordingly. Furthermore, you may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en). You can find further information on data protection in connection with Google Analytics in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).

(3) Google Ads and Google Conversion-Tracking As part of our online marketing efforts, we use Google Ads to promote our products and services. Google Ads is a service of Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. In the process of the advertisements placed through Google Ads, we use the so-called conversion tracking. When you click on such an ad, a cookie for conversion tracking is stored on your end device. These cookies lose their validity after 30 days, do not contain any personal data and are not used for personal identification. If you visit certain pages of our website and the cookie set has not yet expired, Google and we can recognise that you have clicked on an ad and have been redirected to this page. Each Google Ads client uses a different cookie. Thus, there is no way that cookies can be tracked across Ads clients' websites. The information obtained using the conversion cookie is used to create conversion statistics for Ads customers who have opted in to conversion tracking. This tells clients the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. The storage of "conversion cookies" is based on Art. 6 para. 1 a) GDPR. As the website operator, we only set the cookie after you have given us your consent. You can give your consent using the consent banner and revoke it at any time by calling up the settings of the consent banner and editing them accordingly. If you do not wish to participate in tracking, you can object to this use by preventing the storage of cookies by setting your browser accordingly (deactivation option). You will then not be included in the conversion tracking statistics. Further information and Google's privacy policy can be found at: http://www.google.com/policies/technologies/ads/, and http://www.google.de/policies/privacy/.

(4) YouTube-Link We have integrated components of the video platform YouTube on this website to enable you to access our offer. YouTube is an Internet video portal that allows video publishers to post video clips and other users to view, rate and comment on them. YouTube allows the publication of all types of videos, which is why complete film and television broadcasts as well as music videos, trailers or videos created by users themselves can be accessed via the Internet portal. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Each time you access one of the individual pages of this website, which is operated by us and on which a YouTube component (YouTube video) has been integrated, the Internet browser on your PC is automatically prompted by the respective YouTube component to download a representation of the respective YouTube component from YouTube. More information about YouTube can be found at https://www.youtube.com/intl/en/about/. In the course of this technical process, YouTube and Google are informed which specific subpage of our website you are visiting. If you are logged in to YouTube at the same time, YouTube recognizes which specific page of our website you are visiting by calling up a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to your respective YouTube account. YouTube and Google receive information via the YouTube component that you have visited our website if you are logged in to YouTube at the same time when you call up our website; this takes place regardless of whether you click on a YouTube video or not. If you do not want this information to be sent to YouTube and Google, you can prevent it from being sent by logging out of your YouTube account before you visit our website. The privacy policy published by YouTube, which can be found at https://policies.google.com/privacy?hl=en, provides information about the collection, processing and use of personal data by YouTube and Google.

b) Contact / Inquiries / Newsletter

In the following we describe the possibilities of contacting the companies and employees of our company.

Contact form If you send us enquiries via the contact form, your details from the enquiry form including the contact data you provided there will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. These data will not be passed on without your consent.

The processing of the data entered in the contact form thus takes place in the first step on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal e-mail notification to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. In further correspondence, there may be a change of legality (e.g. if you request an offer), then your data will be processed in accordance with Art. 6 para. 1 lit b GDPR.

The data entered by you in the contact form will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected by this.

E-Mail / Phone inquiry If you send us inquiries by e-mail or telephone, your data from the e-mail or conversation, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not pass on this data without your consent.

The processing of the data provided in the e-mail or telephone conversation is therefore based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing operations carried out up to the point of revocation remains unaffected by the revocation. In further correspondence, there may be a change in legality (e.g. if it is business correspondence), in which case your data will be processed in accordance with Art. 6 Para. 1 lit. b GDPR.

The data provided by you in the mail or from the telephone conversation will remain with us until you request us to delete it, revoke your consent for storage or the purpose for which the data was stored ceases to apply (e.g. after your inquiry has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected by this.

Newsletter On our website you have the possibility to subscribe to the newsletter of our company. Which personal data is transmitted to us when ordering the newsletter is determined by the input mask used for this purpose. EIKONA Media GmbH informs its customers, business partners and other interested parties at regular intervals by means of a newsletter about company offers. You can only receive our company's newsletter if (1) you have a valid e-mail address and (2) you have registered to receive the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address you first entered for the newsletter mailing list using the double opt-in procedure. This confirmation mail is used to check whether you, as the owner of the e-mail address, have authorized the receipt of the newsletter. When you register for the newsletter, we also store the IP address assigned by the Internet Service Provider (ISP) of the computer system you are using at the time of registration as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of the e-mail address of a person concerned at a later date and therefore serves as our legal safeguard.

The personal data collected during registration for the newsletter will be used exclusively for sending our newsletter. In addition, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or for registration, as might be the case if there are changes to the newsletter offer or if technical conditions change. The personal data collected within the scope of the newsletter service will not be passed on to third parties. The subscription to our newsletter can be cancelled by you at any time. The consent to the storage of your personal data, which you have given us for the newsletter service, can be revoked at any time. For the purpose of revoking your consent, you will find a corresponding link in every newsletter. Furthermore, you have the possibility to unsubscribe from the newsletter at any time directly on our website or to inform us in another way.

The use of the newsletter is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in providing our customers, business partners and other interested parties with as much information as possible about our products and services.

c) Data processing for the fulfilment of contracts

If you have entered into a business relationship with our company, e.g. if you have placed an order with us, the data processing will be carried out on the basis of Art. 6 para. 1 lit. b GDPR. All data necessary to initiate, fulfill or complete this order, such as contact data, object data, service providers involved, photo documentation, plans, orders for goods, etc., may be collected and processed by us without separate consent.

Should it be necessary to call in a subcontractor (e.g. other IT service providers, special software suppliers) to fulfill the contract with you, we may also pass on your data to this subcontractor. We guarantee that we have committed our subcontractors to the same strict data protection requirements that you can expect from us.

In individual cases, it may happen that we obtain a company information from Creditrefom to initiate an order. If the data obtained in this way has consequences for the order, we will clarify this with you separately.

In rare cases, we will also check individuals. For this purpose, our company randomly checks your creditworthiness when concluding contracts and, in certain cases where there is a legitimate interest, also with existing customers. For this purpose, we work together with Creditreform Boniversum GmbH, Hellersbergstraße 11, 41460 Neuss, from which we receive the necessary data. For this purpose, we transmit your name and contact details to Creditreform Boniversum GmbH. The information according to article 14 of the EU data protection basic regulation regarding data processing at Creditreform Boniversum GmbH can be found here: https://www.boniversum.de/eu-dsgvo/?lang=en

The data related to orders are subject to different retention periods. For example, general business letters must be proven for 6 years and tax law documents for 10 years. We will only pass on your data within our company to the extent necessary, if this is justified by the subject of the order.

7. Protection / encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If the SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

8. Profiling

As a responsible company, we avoid automatic decision making or profiling.

9. Actuality / status

This data protection declaration has the current status of January 2023 and is subject to constant updating and adaptation to new legal requirements and technical developments.

Home