Privacy Policy

Introduction

This Privacy Policy explains, in accordance with the EU General Data Protection Regulation (GDPR) and applicable national laws, which personal data we process as the data controller — and which data is processed on our behalf by processors (e.g., hosting providers) — and which rights data subjects have.

In short: we provide transparent information about which data we process, for what purposes and legal bases, and how you can exercise your rights.

Scope

This policy applies to all personal data processed by our company and by our processors on our behalf, including:

our websites and online presences,
our social-media pages and email communication,
any mobile applications.

Legal Bases

We process personal data only where at least one of the following applies (Art. 6(1) GDPR):

Consent (a): e.g., when you submit a contact form.
Contract (b): to perform a contract or pre-contractual measures.
Legal obligation (c): e.g., statutory retention duties.
Legitimate interests (f): e.g., operating, securing and optimizing our website.

Where other legal bases apply (e.g., Art. 9 GDPR), we will indicate this for the relevant processing.

Controller Contact

ETL Kontor UG (Haftungsbeschränkt)

Hafenstraße 33

23568 Lübeck, Germany

Phone: +49 451 707 458 70

E-mail: contact@etl-kontor.io

Retention

We retain personal data only as long as necessary to provide our services and to comply with statutory obligations. If the purpose ceases to apply or you withdraw consent, we delete the data unless retention is required by law.

Your Rights (GDPR)

You have, in particular, the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw consent at any time with effect for the future (Art. 7(3)).

You also have the right to lodge a complaint with a supervisory authority (Art. 77). For our company, the competent authority is:

Independent Centre for Privacy Protection Schleswig-Holstein (ULD)

Holstenstraße 98, 24103 Kiel

Phone: +49 431 988-1200

E-mail: mail@datenschutzzentrum.de

Website: datenschutzzentrum.de

Security of Processing

We implement appropriate technical and organizational measures to protect personal data (Arts. 25, 32 GDPR), including access controls, encryption, pseudonymization and regular reviews of our security measures.

Communication

If you contact us by phone, email or online form, we process the data arising in this context (e.g., name, contact details, content) to handle your request and the related process. Legal bases: Art. 6(1)(a), (b) and/or (f) GDPR. Data are stored for the duration of the process and in accordance with legal requirements.

Cookies

We use cookies to provide a user-friendly website and certain functions. Where required, we obtain your consent (Art. 6(1)(a) GDPR). Necessary cookies are used based on our legitimate interests (Art. 6(1)(f) GDPR). You can manage, delete or disable cookies in your browser settings.

Customer Data

To deliver our services, we process customer data (e.g., contact, contract and billing data, communications). Legal bases: Art. 6(1)(b) GDPR (contract), Art. 6(1)(f) GDPR (legitimate interests) and — where applicable — consent (Art. 6(1)(a) GDPR). We delete the data when no longer required and no retention duties apply.

Web Hosting

Our website is hosted by a professional provider. Server-side, the following may be processed in log files to ensure stability, security and operation (Art. 6(1)(f) GDPR): IP address, date/time, requested pages, referrer URL, browser and OS information. Data are typically retained up to two weeks. A data-processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

Current hosting provider: IONOS by 1&1 (1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany). For details, see the IONOS privacy policy.

Security & Anti-Spam

To protect against cyber-attacks, spam and phishing, we may use security and anti-spam services (e.g., firewalls, filtering). Processing is based on our legitimate interests (Art. 6(1)(f) GDPR) and — where required — your consent (Art. 6(1)(a) GDPR).

Definitions (Excerpt)

Personal data, processing, consent, restriction of processing, controller and recipient correspond to the definitions in Art. 4 GDPR.

Final Remarks

Protecting personal data is important to us. If you have questions, please contact us using the details above or the contact information in our Imprint.

Last updated: