Personal data protection
We are serious about personal data protection
The protection of your privacy when processing personal data is important to us. When you visit our website, our web servers register, in the standard way, your IP address given to you by your Internet Service Provider, the web page from which you have visited us, the web pages you visit on our website and also the date and duration of your visit. These pieces of information are necessary for the technical transfer of web pages and the secure operation of the server. We do not perform any personalized evaluation of such data.
The data you sent voluntary through the contact form is stored on our servers as part of our data security policy. We use your data exclusively to process your request. We treat your data as strictly confidential. We do not disclose personal data to any third parties without your consent.
Please note that online data transfer may contain safety deficiencies (e.g. when communicating by e-mail). Absolute data protection against third-party access is not possible.
The use of contact details that have been obligatorily published by a third party within the author’s imprint (colophon) to send explicitly unsolicited advertisements and information materials is hereby prohibited. Website operators expressly reserve their right to take legal action in the event of unsolicited sending of advertising information, for example via spam e-mails.
Personal data is data about you as a person. It includes your name, your address and your email address. You do not need to provide any personal data to be able to visit our website. In certain cases, we ask for your name and address and possibly other pieces of information, so that we can offer you the service that was requested.
The same applies if you have requested our information materials or when we respond to your query. In those cases, we will always remind you of it. In addition to the above, we only store the data which you have provided to us automatically or voluntarily.
If you use any of our services, we normally only collect the data necessary for us to be able to offer the service to you. We may also ask about other pieces of information, which, however, remain voluntary. Whenever we process personal data, we do so in order to be able to offer our service to you or to meet our business goals.
Automatically stored anonymized data
When our website is visited, we store certain pieces of information for administrative and technical reasons. These are: the type and version of the browser, the date and time of access and the IP address.
This data is anonymized and only serves statistical purposes or to improve our online services. This anonymized data is separated from personal data and stored in secure systems and cannot be connected to any individual person. That means that your personal data is always protected.
This website is hosted externally. The personal data collected on this website is stored on the hoster(s)' servers. This may include, but is not limited to, 1 P addresses, contact requests, meta and communication data, contractual data, contact details, names, website traffic and other data generated by a website. External hosting is carried out for the purpose of contract fulfilment vis-a-vis our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fas and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO). lf a corresponding consent has been requested, the processing is carried out exclusively on the basis o~ Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time. Our hoster(s) will only process your data insofar as this is necessary for the fulfilment of their service obligations and follow our instructions with regard to this data.
We use the following hoster(s):
Domainfactory GmbH; c/o WeWork Neuturmstrasse 5, 80331 Munich, Germany
Realisation of the homepage by:
claudiusbähr+friends GmbH; Bamberger Straße 50, 91301 Forchheim
We have concluded a contract on order processing (AVV) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
When our website is visited, information in the form of cookies may be stored in your computer. Cookies are small data files sent by the internet server to your browser and stored on your hard drive. The legal basis for using cookies is Art. 6(1)(f) of the GDPR.
They only store, however, the address of the internet protocol – i.e. no personal data. This information, stored in cookies, allows the automatic recognition of your device when you re-visit our website, which makes it easier to use.
You can, of course, also visit our website without accepting the cookies. If you do not wish your device to be recognized upon your next visit, you can refuse to accept the cookies by setting your browser to “Block cookies”. The procedure is described in the instructions for use of your specific browser. If you disable cookies, certain functionalities of our website may be limited.
Google Analytics and anonymization
On our website, we use Google Analytics, a web analysis tool by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”. Google Analytics uses what are known as “Cookies”, i.e. text files stored in your computer, which help analyse how you use our website.
The information created by these cookies, such the time, location and frequency of your visits to websites, including your IP address, is sent to the US to Google, which stores it.
On our website, we use the Google Analytics service with the extension “_gat._anonymizeIp”. In this case, Google shortens your IP address within the Member States of the European Union or the Agreement on the European Economic Area, thus anonymizing it.
Upon authorization of this website’s provider, Google will use this information to evaluate your usage of the website, create reports on activities on the website and provide other services to the website’s provider related to the use of the website and the internet. Google also transfers the information to a third party where prescribed by law or where such a third party processed the information upon Google’s request.
As Google itself represents, it will never associate your IP address with Google’s other data. You can disable the installation of cookies by setting your browser accordingly; please note, however, that you may not be able to fully enjoy all of our website’s functionalities.
If you visit our website using a mobile device (smartphone or tablet), you need to click the link to prevent Google Analytics from future monitoring on this page. This is also an alternative to the above browser Add-on. By clicking the link, your browser installs what is called the Opt-Out-Cookie valid for this browser and domain. If you delete cookies in this browser, you will also delete the Opt-Out-Cookie; in that case, clicking the link again will be necessary.
If you have allowed Google to link the web browsing and application history with your Google account and to use your Google account information for ad personalization, Google will use your data together with the data collected by Google Analytics to create lists of target groups for remarketing across devices. For that purpose, Google Analytics first records your ID authenticated by Google, linked to your Google account (i.e. personal data), on our website. Then, Google Analytics temporarily links your ID with your Google Analytics data to optimize our target groups.
If you disagree with this, you can disable this functionality under “My account” in your Google account settings.
General information on the legal basis for data processing on this website
If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO if special categories of data are processed according to Art. 9 para. 1 DSGVO. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a DSGVO. If you have consented to the storage of cookies or to the access to information in your terminal device (e.g. via device fingerprinting), the data processing is additionally carried out on the basis of Section 25 (1) TTDSG. This consent can be revoked at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b DSGVO. Furthermore, if your data is required for the fulfilment of a legal obligation, we process it on the basis of Art. 6 para. 1 lit. c DSGVO.
The data processing may also be based on our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this data protection declaration.
This website uses the Google Maps application to show maps and plan routes.
Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
By using Google Maps on this website, you agree with the collection, processing and use of data collected automatically by, and sent by you to, Google, its representatives or other providers.
You can find the conditions for the use of Google Maps here.
The Google Maps Personal data protection policy is available here.
We have taken technical and administrative security measures to ensure the protection of your personal data from loss, destruction, manipulation and unauthorized access. All our employees and service providers working for us are obliged to abide by the applicable laws and regulations regarding personal data protection.
Any personal data we collect and process is transferred in an encrypted form. That means that your data cannot be misused by a third party. Our security measures are constantly subject to improvement and our personal data policy is updated regularly. Please make sure that you are consulting the latest version.
Data subjects' rights
Please contact us at any time if you would like to find out what personal data we are storing about you or if you would like to have it corrected or deleted. Furthermore, you have the right to restrict processing (Article 18 of the GDPR), the right to object to processing (Article 21 of the GDPR), the right to data portability (Article 20 of the GDPR) and the right to lodge a complaint against data protection processing with the competent supervisory authorities at the Bavarian State Office for Data Protection.
Data protection information for the application procedure
We are pleased that you are interested in us and are applying or have applied for a position in our company.
In connection with your application to us, we process personal data about you. The handling of this so-called "personal data" is regulated by special legal provisions.
Responsible handling of personal data is a high priority for Elflein Holding GmbH. In the data protection information for applicants, we explain to you which personal data is processed in the application process. You can find this information HERE.
Data processing by social networks
We maintain publicly accessible profiles on social networks. The individual social networks we use can be found below.
Social networks such as Facebook, LinkedIn, etc. can usually comprehensively analyse your user behaviour when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). By visiting our social media presences, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.
Our social media presences are intended to ensure the most comprehensive presence possible on the internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. The analysis processes initiated by the social networks may be based on different legal grounds, which are to be stated by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a DSGVO).
Responsible person and assertion of rights
If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both vis-à-vis us and vis-à-vis the operator of the respective social media portal (e.g. vis-à-vis Facebook).
Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.
Social networks in detail
We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the data collected is also transferred to the USA and other third countries.
We have entered into a Joint Processing Agreement (Controller Addendum) with Facebook. This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.
We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you would like to deactivate LinkedIn advertising cookies, please use the following link: www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.