1. Collection of personal data

Thank you for your interest in EPS Systems KG (EPS). Protecting your personal data is important to us. We are therefore taking this opportunity to inform you about what personal data we collect from you when you use this site. Personal data is any data relating to you as an individual, e.g. your name, your address, your e-mail addresses and you user behaviour.
Our website uses SSL encryption when transferring confidential content.

This document can be downloaded as a pdf and archived: General Data Privacy Statement. To open the pdf file, you will need the free Adobe Reader program, or similar, which runs the format. The document can also be printed.

2. Controller for data collection and processing

The controller in accordance with Article 4(7) of the General Data Protection Regulation (GDPR) is

EPS Systems KG
Obere Leimbach 6
57074 Siegen
Germany
Tel.: +49 (0)27133882900
E-mail: info@eps-systems.de
Website: www.eps-systems.de

The contact details of the data protection officer are as follows:

EPS Systems KG
Data Protection
Obere Leimbach 6
57074 Siegen
Germany

Should you have any questions or suggestions about data protection, please e-mail
datenschutz@eps-systems.de

3. Your rights

(1) You have the following rights with regard to your personal data:

a) Right to information
b) Right to correction
c) Right to erasure (right to be forgotten)
d) Right to restriction of processing
e) Right to data portability
f) Right to object
g) Right to withdraw data consent

(2) You also have the right to make a complaint to a data protection supervisory authority about our processing of your personal data.

4. Collection of personal data when visiting our website

(1) When using the website purely for information purposes, i.e. when you do not register or transfer other information, we only collect the personal data which your browser transfers to our server. All data collection and processing is carried out for specific purposes. This may be on grounds of technical necessity, contractual requirements or your express wish. If you make use of special services on our website, we will obtain your consent to collect and process the data.

When you look at our website we collect the following data, which is technically necessary for us to be able to show you our website and ensure stability and security. The data is also used to rectify website faults. The legal basis of the data processing is therefore Article 6(1)(f) of the GDPR.

– IP address
– Date and time of the request
– Time zone difference from Greenwich Mean Time (GMT)
– Contents of the request (specific page)
– Access status/HTTP status code
– Transferred amount of data
– Website from which the request originated
– Browser
– Operating system and its user interface
– Language and version of the browser software

(2) In addition to the use of our website purely for information purposes, we provide various services which you can use if you are interested and give your consent for data processing (legal basis: Article 6(1)(a) of the GDPR) under section 6 of this privacy policy, such as receiving newsletters.

This requires you to supply further personal data, which we use to provide the relevant service or make contact with you and for which the data protection principles set out in this privacy policy apply.
If you do not supply the required information, we may not be able to provide our service.

(3) Cookies
In addition to the aforementioned data, cookies are saved on your computer when you use our website. Cookies are small text files which are assigned to and saved on your hard drive by the browser you use, and which send certain information to the body setting the cookies (in this case us). Cookies cannot run programs or transfer viruses to your computer. They are used to make the overall internet service more user-friendly and effective.

Use of cookies:
a) This website uses the following type of cookies. Their scope and function are explained below.

– Transient/session cookies (see b)
– Persistent cookies (see c).

b) Transient cookies are automatically deleted when you close your browser. These include session cookies in particular. They save a session ID, which can be used to allocate various requests from your browser to the joint session. This allows your computer to be recognised when you visit our website again. The session cookies are deleted when you log out or close your browser.

c) Persistent cookies (e.g. the “stay logged in on this computer” function) remain on your end device and are automatically deleted after a given period, which can vary from cookie to cookie. You can delete the cookies in the security settings on your browser at any time.

d) You can configure your browser settings as you wish and reject third-party cookies, for example. Please note that you may not be able to use all the functions of this website. The Help function in the menu bar of most web browsers explains how you can stop your browser from accepting new cookies, how to notify your browser when you receive a new cookie and also how you can delete all of the cookies that you have already received and block any further cookies.
The legal basis of this data processing is Article 6(1)(f) of the GDPR in conjunction with Section 15 of the German Telemedia Act (Telemediengesetz). Our interest is in the operation of the website and the safeguarding of its basic functions.

5. Deletion and blocking of personal data

Your data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. When you use the website purely for information purposes, the IP address is deleted from all systems used in connection with the operation of this website within 7 days. We will no longer be able to identify you from the remaining data.

When using other services on our website, your data is generally saved for user administration in our systems. They are regularly checked to see whether data can be deleted. If data in a relationship with a customer or related party is no longer required or there is an overriding conflicting interest, we will delete the affected data provided there is no conflict with legal retention requirements.

You data will also be deleted if your saved data is invalid (e.g. if the data is erroneous and it is not possible to correct it). The data is blocked if legal or factual obstacles (e.g. particular legal obligations to retain data) prevent us from deleting it.

6. Transfer of data to third parties

Data that you give us is not in principle transferred to third parties. In particular, data is not passed on to third parties for the purposes of their advertising.

However, we use service providers where necessary, for example for technical maintenance, for work relating to the enhancement of our website or for running this website or for any other of our products. These providers are carefully chosen and contracted by us. They are bound to our instructions and are regularly inspected.

7. Newsletter/advertising

(1) With your consent, you can subscribe to our newsletter, which we use to inform you about our latest offers.

(2) We use the double opt-out procedure for signing up to our newsletter. This means that after you have signed up we send you an e-mail to the e-mail address you have provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 48 hours, your information will be blocked and automatically deleted after one month. Furthermore, we save your IP address and the time of registration and confirmation. The purpose of this procedure is to verify your registration and to be able to clarify any potential misuse of your personal information.

(3) The only mandatory information required to send the newsletter is your e-mail address. Providing separately marked data is voluntary and is used to be able to address you personally or send you further information. Once you have confirmed, we save your e-mail address for the purpose of sending the newsletter. The legal basis is Article 6(1)(1)(a) of the GDPR.

(4) You can revoke your consent to receive the newsletter at any time and unsubscribe from it. To revoke your consent, click on the link in any newsletter e-mail, or send an e-mail to info@eps-systems.de or a message to the contact details on the Imprint page.

(5) You can of course revoke your consent for the processing of your personal data for promotional purposes at any time, including after having consented to it. If you would like to revoke your advertising consent, please e-mail datenschutz@eps-systems.de.

8. Privacy policy on the use of Sendinblue GmbH

If you would like to receive the newsletter offered on the website, please provide an e-mail address as well as information that allows us to check that you are the holder of the e-mail address specified and that you agree to receive the newsletter.

To ensure mutual agreement on the distribution of a newsletter, we utilise the “double opt-in” process. The potential recipient is hereby added to a distribution list. The user then receives a confirmation e-mail which allows them to confirm their registration formally. The address is only actively added to the distribution list after this confirmation.

We only use this data for the purpose of sending the information and offers requested.

The newsletter software used is Sendinblue GmbH. Your data will be transferred to Sendinblue GmbH. Sendinblue GmbH is prohibited from selling your data or using it for purposes other than the distribution of newsletters. Sendinblue GmbH is a certified German provider which has been chosen in accordance with the requirements of the General Data Protection Regulation and the German Federal Data Protection Act.

You can find further information at: https://de.sendinblue.com/informationen-newsletter-empfaenger/?rtype=n2go

You can withdraw your consent for your data and e-mail address to be stored and for them to be used in sending the newsletter at any time by clicking the “Unsubscribe” link in the newsletter.

The data protection measures are always subject to technical advancements. For this reason, we kindly ask you to inform yourself of our data protection measures at regular intervals by inspecting our privacy policy

9. Privacy policy on the use of YouTube

We have integrated YouTube components into our website. YouTube is an internet video portal which allows video publishers to upload video clips free of charge and other users to view, rate and comment on them, likewise free of charge. YouTube permits the publication of all types of video, which is why both complete film and television programmes as well as music videos, trailers and videos made by users can be accessed via the internet portal.

YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

By accessing any of the individual pages of this website which are operated by us and on which a YouTube component (YouTube video) has been integrated, the internet browser on your IT system is automatically prompted by the YouTube component to download a display of the YouTube component from YouTube. For more information about YouTube, visit https://www.youtube.com/yt/about/. This technical process provides YouTube and Google with information about which specific subpages of our website you visit.

If you are logged into YouTube at the same time, YouTube recognises which specific subpage of our website you visit when you access a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to your YouTube account.

YouTube and Google are informed via the YouTube components that you have visited our website if you are logged in to YouTube when you access our website. This occurs regardless of whether or not you click on a YouTube video. If you do not wish to transfer this information to YouTube and Google, you can prevent this by logging out of your YouTube account before accessing our website.

YouTube’s privacy policy, which can be found at https://policies.google.com/privacy, provides information about the collection, processing and use of personal data by YouTube and Google.

10. Use of Social Media icons in the website footer

Usually, when a user visits a website in which a social media button has been integrated, the button solutions provided by the social networks (such as the ‘like’ button) already transmit personal data to the respective social network.

For us, this is not the case. No plug-in buttons are incorporated into the footer of our website. Only icons are featured there. Upon clicking on these, they direct you to external links within the corresponding social media platforms. They only actively connect with the respective platforms if they themselves are activated through clicking and the user is, where applicable, logged into the respective platform. There is no transfer of personal data due to the integration of icons for social media platforms when our website is accessed.

11. Privacy policy on the use of Google Analytics

This website uses Google Analytics, a web analysis service from Google Inc. (“Google”).

The operating company of Google Analytics is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Google Analytics uses “cookies”, i.e. text files which are saved on your computer to allow an analysis to be made of your use of the website. The information generated by the cookies regarding your use of this website (including your IP address) is transferred to a Google server in the USA and saved there.

Google will use this information to analyse how you use the website, so that it can create reports on website activity for the website owner and provide additional services related to the website use and internet use. Google may also pass this information on to third parties if this is required by law or if third parties process this data on behalf of Google. Google will never link your IP address to other Google data. You can prevent cookies from being installed by means of a setting in your browser software. However, we would like to point out that if you do so, you may not be able to use all of the functions of this website. By using this website you agree to Google processing the data it collects on you in the way described about and for the purpose described above.

You can view the Google Analytics data protection provisions here: https://www.google.de/intl/de/policies/privacy

11. Legal basis of the processing

Article 6(1)(a) of the GDPR is used by EPS as the legal basis of our processing procedures for obtaining consent for a specific promotional purpose (e.g. newsletters). If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case for processing procedures that are required for the delivery of goods or the provision of another services or return service, for example, the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing procedures that are necessary for the implementation of pre-contractual measures. In the case of enquiries about our products or services, for example, where we are subject to a legal obligation which requires the processing of personal data, such as the fulfilment of tax obligations, the processing is based on Article 6(1)(c) of the GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case if, for example, a visitor was injured and their name, age, health insurance details or other vital information needed to be given to a doctor, hospital or other third party. The processing would then be based on Article 6(1)(d) of the GDPR. Finally, processing procedures may be based on Article 6(1)(f) of the GDPR. This is the legal basis for processing procedures that are not covered by one of the aforementioned legal bases if the processing is necessary for the purposes of our legitimate interests or those a third party, except where they are overridden by the interests or fundamental rights and freedoms of the data subject. We are permitted to use such processing procedures as they are specifically mentioned by the European legislator. It considered that a legitimate interest could exist where the data subject is a client of the controller (recital 47, sentence 2, of the GDPR).

As at: March 2021