• Download Brochure

    • Preamble

    The use of our website is generally possible without providing personal data.

    Insofar as personal data is collected when visiting our websites, we process it exclusively in accordance with the General Data Protection Regulation (VO (EU) 2016/679; DS-GVO) and the Federal Data Protection Act of July 30, 2017 (BDSG-neu), as well as the Telemedia Act (TMG). The processing of personal data takes place exclusively in accordance with this privacy policy.

    This data protection declaration applies to the use of the website at the address ekko.io. For linked content from other providers, the data protection declaration stored on the linked website is authoritative.

    We point out that in the context of data transmission via the Internet security gaps may occur, which can not be prevented even by the technical design of this website. Complete protection of personal data is not possible when using the Internet.

    Responsible entity according to Art. 13 para. 1 lit. a) DS-GVO is:

    ekko GmbH 
    Benny Philip Lehmann 
    Ruhrtal 5
    58456 Witten
    Phone: +49 2302 430 870

    Data Protection Officer, Art. 13 para. 1 lit. b) DS-GVO

    We have appointed as data protection officer:

    Mr. Dipl.-Inform. Olaf Tenti
    GDI Gesellschaft für Datenschutz und Informationssicherheit mbH

    Körnerstr 45, 58095 Hagen (NRW)

    Phone: +49 (0)2331/356832-0
    E-mail: datenschutz(at)gdi-mbh.eu
    Internet: www.gdi-mbh.eu

    The reasons for collecting data on our website

    The purpose of collecting, processing and using your data on our website is the technical provision of our functions and the best possible provision of our services. Furthermore, the processing of your data establishes a contact function.

    Safety precautions

    All employees of our company are committed to confidentiality. Our EDP technical security precautions are continuously adapted to current circumstances and requirements.

    Protocol

    Each time a user accesses a page from our website and each time a file is retrieved, access data about this process is stored in a log file on the server of our hosting provider.

    • IP address (anonymized): 

    The IP addresses are stored anonymously. For this purpose, the last three digits are removed, i.e. 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymized. The anonymized IP addresses are kept for 60 days. Information about the directory protection user used is anonymized after one day. The last octet is shortened.

    • Page from which the file was requested
    • Date, time
    • Browser type and browser settings     
    • operating system
    • the page you visited
    • amount of data transferred
    • access status (file transferred, file not found, etc.)

    The log files remain stored there for 60 days. The legal basis for the data collection is Art.6 para. 1 lit. f DSGVO.

    Hosting

    The domain www.ekko.io is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany. The data recorded during your visit to our Internet pages of this domain (inventory data) as well as traffic data (connection data) are collected, processed and used in accordance with the legal provisions by Mittwald CM Service GmbH & Co. KG collects, processes and uses this data.

    Purpose of the collection by the hoster

    The hoster uses the collected data to operate the website and to ensure IT security. In case of concrete indications, the log data may be analyzed subsequently.

    Duration of storage by the hoster

    • The access logs of the web servers record which page requests have taken place and when. They contain the following data: IP, directory protection user, date, time, accessed pages, logs, status code, amount of data, referer, user agent, accessed host name.
    • The IP addresses are stored anonymously. For this purpose, the last three digits are removed, i.e. 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymized. The anonymized IP addresses are kept for 60 days. Information about the directory protection user used is anonymized after one day. 
    • Error logs, which record erroneous page requests, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the accessed website. 
    • Accesses via FTP are logged anonymously and stored for 60 days. 
    • The mail logs for sending e-mails from the web environment are anonymized after one day and then retained for 60 days. During anonymization, all data on the sender/recipient etc. is removed. Only the data on the time of sending and the information on how the e-mail was processed are retained (queue ID or not sent).
    • Mail logs for sending via our mail servers are deleted after four weeks. The longer retention period is necessary to ensure the functionality of the mail services and spam prevention.
    • It is not possible to specify the retention period individually.
    • Further information: FAQ article on the subject of DSGVO https://www.mittwald.de/index.php

    Collection of general information

    When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider and the like. This is exclusively information that does not allow any conclusions to be drawn about your person. This information is technically necessary in order to correctly deliver the content of web pages requested by you and is mandatory when using the Internet. Anonymous information of this kind is statistically evaluated by us in order to optimize our Internet presence and the technology behind it.

    To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

    Contact options on our website via forms, email and widget 

    On our website there is the possibility to contact us via e-mail, contact form or widget. In this context, personal data from you will be stored and processed for the purpose of communication. The data collected for this purpose (name, surname, company, telephone number, e-mail address, IP address) will not be disclosed to third parties. A combination of the data with other data collected on this website does not take place. The data may be stored as part of customer relations management (CRM) if you are already a customer of our company.

    The contact form is sent encrypted using TLS technology. The encryption serves to prevent unauthorized access to your personal data by third parties.

    The basis for the collection of data pursuant to Art.6 para. 1 p. 1 DSGVO are: the consent given by you (lit. a); if applicable, the processing of the information for the fulfillment of a contract or the initiation of a contract (lit. b), as well as the legitimate interest of our company in the communication initiated by you (lit. f).

    The data will be deleted as soon as the purpose of the communication has been achieved.

    Order / Request PDF files

    If you order/request brochures in PDF format and other digital print media from Crosscan by e-mail via this website, it is necessary to process your personal data in order to carry out pre-contractual measures and fulfill the contract (provision of the products) in accordance with Article 6(1) lit. b DSGVO. To process the request, the following personal data must be provided:

    • Company
    • First name
    • Last name
    • E-mail 

    This information is stored and processed in the context of the order/request as well as for sales follow-up and internal statistical purposes, e.g. how many copies of a medium have been ordered.

    Deletion or blocking of the data

    We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as stipulated by the various storage periods provided for by law. After the respective purpose has ceased to exist or these periods have expired, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions. 

    The criteria for deletion of personal data are the following for the purposes of contact via the contact form or contact widget:

    Contacting for the purpose of requesting a callback, requesting a quote, requesting a partnership or information about our offer or other request about our company or our products: The personal data in this context will be deleted after the end of the joint communication, if no further information is requested or a deletion of the personal data is requested. 

    Use of Google Analytics

    We use Google Analytics on our website. The service is offered by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).

    We have concluded an order data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics. The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 para. 1 p.1 lit. a DSGVO.

    If you have consented to the data processing, Google may store cookies on your terminal device to provide the service. Cookies are small text files that serve to recognize your browser. Google stores the following data within the scope of your website use: In addition to the IP address, the time, place, duration and frequency of your website visit are stored. As part of the processing of Google Analytics, personal data is transmitted to the USA. 

    Google uses this information for the purpose of evaluating website usage, compiling reports on website activity and providing other services relating to website usage to the responsible party. Before the IP address is transmitted to the USA, it is anonymized by the _anonymizeIP function on servers within the member states of the European Union.

    If you click in the cookie banner of this website – ekko.io -.

    • select the checkbox “Google Analytics” and click on “Accept selection” or
    • click on “Accept all”,

    you give your consent pursuant to Art. 6 para. 1 p. 1 lit. a in conjunction with. Art. 49 (1) a) DS-GVO that your personal data may be processed in the USA.

    Google will in no case merge your IP address with other data within Google.

    Information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=de.

    The data sent by us and linked to cookies are automatically deleted after 14 months. You can revoke your consent at any time with effect for the future by preventing the storage of cookies through a corresponding setting of your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

    Furthermore, you can prevent data collection by Google Analytics by installing the deactivation add-on provided by Google in your browser. Provided that this is properly installed in your browser, data collection by Google Analytics will not take place. The deactivation add-on can be downloaded from Google’s website at this link: http://tools.google.com/dlpage/gaoptout?hl=de

    Alternatively, you can set a so-called “opt-out cookie” for the browser used by clicking on the following link: Opt-Out-Cookie. When visiting this website, no data will then be forwarded to Google Analytics in the future.

    Please note that the opt-out cookie may be deleted. The deletion of the opt-out cookie depends on your individual browser settings. If the cookie is deleted, it must be set again by clicking on the link above. If you have set the opt-out cookie, it is possible that not all services provided by us can be used properly.

    Cookies

    Like many other websites, we also use so-called “cookies”. Cookies are small text files that are transferred from a website server to your hard drive. Through this, we automatically receive certain data such as IP address, browser used, operating system about your computer and your connection to the Internet.

    Cookies cannot be used to launch programs or transfer viruses to a computer. Based on the information contained in cookies, we can facilitate your navigation and enable the correct display of our web pages.
    Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.

    The legal basis for this is Art. 6 para. 1 p.1 lit. f DSGVO.

    Of course, you can also view our website without cookies in principle. Internet browsers are regularly set to accept cookies. You can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your Internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have disabled the use of cookies.

    You can revoke this consent to cookies at any time with effect for the future here

    Google AdWords

    Our website uses Google conversion tracking. If you have reached our website via an ad placed by Google, Google AdWords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked across AdWords customers’ websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive information that personally identifies users.

    The legal basis for the storage of “conversion cookies” is based on Art. 6 para. 1 p.1 lit a DSGVO.

    If you do not wish to participate in the tracking, you can refuse the setting of a cookie required for this – for example, by means of a browser setting that generally deactivates the automatic setting of cookies or by setting your browser so that cookies from the domain adssettings.google.com are blocked.

    Please note that you must not delete the opt-out cookies as long as you do not want any measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

    For more information on Google AdWords and Google Conversion Tracking, please see Google’s privacy policy: https://www.google.de/policies/privacy/.

    Google Maps

    Parts of our website use Google Maps functions to integrate map data. This content is provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”). When you call up our website, your browser loads the necessary code from Google. For this purpose, the browser you use must connect to Google’s servers. Through this, Google obtains knowledge that our website was called up via your IP address. At the same time, Google may place cookies on your terminal device, unless you have prohibited the use of cookies in your browser, or read cookies. Location data may also be collected if you allow this in your browser.
     
    The use of Google Maps is for the purpose of an appealing, comfortable design of our website and allows you to find places indicated by us on the website more easily. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
     
    Your IP address is collected by us to enable the transmission to Google. You are not obliged to provide this data, but it is not possible to use the affected parts of our website without providing this data.
     
    Further information is contained in Google’s privacy policy, which can be found at https://www.google.com/policies/privacy/.

    Leadfeeder

    We use the service LeadFeeder as a lead generation tool. LeadFeeder accesses the list of IP addresses of website visitors provided by Google Analytics in the evaluation and links the list of IP addresses with information about the companies that can be found on the Internet under these IP addresses. Due to the shortening of the IP address of the website visitors, which is already carried out when using Google Analytics, a direct personal reference is not established.

    Only company visitors can be assumed. Leadfeeder is integrated with our CRM system & email marketing tool. LeadFeeder is a service of Liidio Oy, Mikonkatu 17 C, Helsinki 00100, Finland.

    Leadfeeder’s privacy policy can be found at https://www.leadfeeder.com/privacy/

    You can prevent Leadfeeder from storing a user profile or data about your use of our site by means of an “opt-out”. You can find the option and information on this at:

    https://yourdata.leadfeeder.com/

    If you click in the cookie banner of this website – ekko.io -.

    • select the “Leadfeeder” checkbox and click “Accept selection” or
    • click on “Accept all”,

    you give your consent pursuant to Art. 6 para. 1 p. 1 lit. a in conjunction with. Art. 49 (1) a) DS-GVO that your personal data may be processed in the USA.

    LinkedIn Analytics and LinkedIn Ads

    We use the conversion tracking technology and the retargeting function of the LinkedIn Corporation on our website.

    This technology can be used to serve personalized ads on LinkedIn to visitors of this website. Furthermore, the possibility arises to create anonymous reports on the performance of the advertisements as well as information on website interaction. For this purpose, the LinkedIn Insight tag is embedded on this website, which establishes a connection to the LinkedIn server if you visit this website and are logged into your LinkedIn account at the same time.

    Please see LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy for more information on data collection and use, as well as the options and rights to protect your privacy. If you are logged in to LinkedIn, you can deactivate the data collection at any time under the following link: https://www.linkedin.com/psettings/enhanced-advertising.

    If you click in the cookie banner of this website – ekko.io -.

    • select the “LinkedIn Insight tag” checkbox and click “Accept selection” or
    • click on “Accept all”,

    you give your consent pursuant to Art. 6 para. 1 p. 1 lit. a in conjunction with. Art. 49 (1) a) DS-GVO that your personal data may be processed in the USA.

    Pipedrive

    Our contact forms and request forms for downloading material are connected to the customer relationship management tool (“CRM tool”) Pipedrive. The data entered when filling out the forms is transmitted to Pipedrive and stored there on Pipedrive servers.

    We use the CRM system Pipedrive of the provider Pipedrive OÜ on the basis of our legitimate interests (efficient and fast processing of user inquiries, existing customer management, new customer business), a private limited company established under the laws of the Republic of Estonia, with the address Paldiski mnt 80, Tallinn, 10617, Estonia, registered in the Estonian Commercial Register under the code 11958539, and a subsidiary of Pipedrive US.

    We have concluded a contract with Pipedrive with so-called standard contractual clauses, in which Pipedrive undertakes to process user data only in accordance with our instructions and to comply with the EU level of data protection.

    Pipedrive US processes the data in the USA.

    If you click in the cookie banner of this website – ekko.io -.

    • select the “Pipedrive” checkbox and click on “Accept selection” or
    • click on “Accept all”,

    you give your consent pursuant to Art. 6 para. 1 p. 1 lit. a in conjunction with. Art. 49 (1) a) DS-GVO that your personal data may be processed in the USA.

    Pipedrive’s privacy policy is available here: www.pipedrive.com/en/privacy.

    The data collected on the website, by entering the data in the above-mentioned forms, will be deleted in our CRM tool Pipedrive when we have processed your request and the purpose of storage has ceased to exist and there are no other conflicting legal exceptions. You can inform yourself at any time about the data stored about you.

    Other data sharing

    We disclose personal data beyond this on official and/or judicial instruction. We do not disclose personal data beyond what is stated in this privacy policy.

    Your rights to information, correction, blocking, deletion and objection.
    You have the right to obtain information about your personal data stored by us at any time. Likewise, you have the right to have your personal data corrected, blocked or, apart from the mandatory data storage for business processing, deleted. Please contact our data protection officer for this purpose. You will find the contact details at the very bottom.

    To ensure that a block on data can be taken into account at any time, this data must be kept in a blocking file for control purposes. You can also request the deletion of data, unless there is a legal archiving obligation. If such an obligation exists, we will block your data upon request.
    You can make changes or revoke consent by notifying us accordingly with effect for the future.

    Information / Data subject rights

    Users have the following rights regarding their collected data:

    • information (Art. 15 DS-GVO):

    Information about the stored data, the purpose of the data processing, the type of categories of personal data that are processed, to whom the data are/were disclosed, if applicable, how long the data are to be stored and what rights the data subjects are entitled to

    • rectification (Art. 16 DS-GVO):

    You have the right to have inaccurate personal data stored by us corrected. You also have the right to have us complete an incomplete data record stored by us.

    • Deletion (Art. 17 DS-GVO):

    You may request that we delete personal data relating to you if (1) the data has been processed unlawfully, (2) the purpose for which the data was collected has been achieved, (3) you have withdrawn your consent to data processing and there is no other legal basis for the processing, (4) we are subject to a legal obligation to delete the data (5) you are under 16 years of age, or (6) you have objected to the processing and there are no overriding legitimate grounds on our side for the processing.

    • Restriction of processing (Art. 18 DS-GVO):

    You can request us to restrict processing in the following cases. In these cases, we will place a block on the data and not process it further. (1) If you dispute the accuracy of the personal data for the duration of our review. (2) If you have requested deletion and we cannot or may not carry out deletion. (3) If you require the data for the assertion of claims, but we would be obliged to delete the data because the purpose of the processing has been achieved. (4) If you have objected to the processing and no final decision has been made.

    • Data portability (Art. 20 DS-GVO):

    pursuant to Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;

    • Revocation of a granted consent:

    to revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent for the future.

    If you have given us your consent to the processing of personal data, you can revoke this consent at any time. Please address your revocation to the above data or by mail to: datenschutz@gdi-mbh.eu

    • Right to object to processing (Art. 21 DS-GVO):

    If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, provided that there are grounds for doing so that arise from your particular situation.

    If you wish to exercise your right of withdrawal or objection, contact.

    • Complaint to a supervisory authority:

    complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our office / company headquarters for this purpose.

    Questions for the data protection officer

    If you have any questions about data protection, please write us an e-mail or contact our data protection officer directly:

    Herr Dipl. Inform. Olaf Tenti
    GDI
    Gesellschaft für Datenschutz und Informationssicherheit mbH
    Körnerstr. 45
    58095 Hagen
    E-Mail: datenschutz(at)gdi-mbh.eu
    Tel.: + 49 (0) 2331 / 35 68 32 – 0
    Fax: + 49 (0) 2331 / 35 68 32 – 1

    Right of appeal to data protection supervisory authority

    You have the right to contact the supervisory authorities with a data protection complaint. The supervisory authority responsible for us is the State Commissioner for Data Protection of North Rhine-Westphalia. The complaint can be filed with any supervisory authority regardless of the jurisdiction.

    Change to our privacy policy

    We reserve the right to occasionally adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
     

    Privacy Policy Status November 2020