Privacy Policy

State: 2022-06-02

This English translation of the privacy policy is a service for the visitors of the website. The content of the German version of the Privacy Policy (Datenschutzerklärung) is authoritative.

Data Protection acc. to EU General Data Protection Regulation (GDPR)
The protection of personal data has a high priority for esd electronics gmbh. This privacy statement informs the visitors of the website of esd electronics which data are collected for which purpose and for which usage.
esd electronics gmbh renounces on profiling and tracking of personal data of registered user web traffic, contact forms as well as on email newsletters.

In accordance with general data protection regulations, the national data protection acts of the members states and other related data policy provisions, the responsible operator of this website is:

esd electronics gmbh
Vahrenwalder Str. 207
30165 Hannover – GERMANY
Phone: +49 511-37298-0
Email: support@esd.eu
Website: www.esd.eu

Contact details of the data protection officer: dataprotection@esd.eu or at the postal address of the person responsible with the addition “Attn. Data protection officer"

The following data protection regulations apply to the offers presented by esd electronics gmbh (hereinafter referred to as "esd") on the internet www.esd.eu  (hereinafter referred to as "website"). The privacy statement is structured under the following headings and presents the required information in its entirety.

Content
1. General Information on Data Processing
2. Provision of the Website and Creation of Log Files
3. Use of Cookies
4. Registration
5. Contact Form and Emails
6. Newsletter
7. Web Analysis
8. Rights of the Data Subject

Type and Scope of Personal Data Processing
esd collects and uses the users' personal data only insofar as this is necessary to provide a functional website and to provide content and services of the website. The processing of the users' personal data is only done with the user's consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of data is permitted by law.

Legal Basis for Processing of Personal Data
Insofar as esd obtains consent from the data subject for the processing of personal data, Art. 6 Para. 1 (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for processing personal data.
Art. 6 Para 1 (d) of GDPR serves as the legal basis in the event that the vital interests of the data subject or another natural person require the processing of personal data.
Art. 6 Para. 1 (f) of GDPR serves as the legal basis for processing if processing is required to safeguard a legitimate interest of esd or a third party and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the first-mentioned interest.

Deletion of Data and Retention Periods
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Data may be stored beyond this period if this has been foreseen by the European or national legislator in EU regulations, laws or other provisions to which esd is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of data for the conclusion or fulfillment of a contract.

Type and Scope of Personal Data Processing
On each retrieval of esd's website, the system automatically gathers data and information from the computer system of the accessing computer. The website is provided by a hosting provider. The privacy agreement for the hosting services is contractually agreed in accordance with Art. 28 of GDPR.
The following data is collected:

1. The user’s IP address in anonymized form
2. Data and time of the access
3. URL of the webpage
4. Used protocol and status code
5. Amount of data
6. URL which linked the user's system to esd's website (referrer)
7. Information on the user's web browser (type, version, operating system)
8. Called host name

The data will likewise be stored in log files. This data will not be stored together with other personal data of the user.

Legal Basis for Processing of Personal Data
The legal basis for the temporary storing of the data and log files is Art. 6 (1) lit. f) GDPR.

Purpose of Personal Data Processing
The temporary storing of the above listed data by the system is necessary to enable a delivery of the website to the computer of the user. The information gathered is used for statistical purposes as well as for improvement and error detection at esd's website. The website operator reserves the right to check the server log files later if specific reasons indicate concrete evidence of unlawful use. The log files are stored in order to ensure the functionality of the website. In addition, the data helps esd to optimise the website and to ensure the security of esd's IT systems. The data is not analyzed for marketing purposes in this context.

Retention Period
The data will be deleted, as soon as it is no longer needed to achieve the purpose for gathering it.

Opposition and Cancellation Proceedings
The gathering of the data for the purpose of providing the website and the storing of the data in log files is necessarily required for the operation of the website. Consequently, there is no possibility to object for the user.

Type and Scope of Personal Data Processing
The website of esd uses cookies. Cookies are text files that are stored in the internet browser or that are stored by the internet browser on the user’s computer system. If a user retrieves a website, a cookie can be stored in the user’s operating system.
esd only uses so-called "technically necessary cookies", which are necessary for the operation of the website. Analysis cookies, advertising cookies or behavior-controlled cookies that are not technically necessary are not used by esd. Therefore, no cookie consent is required by the user.

However, esd also offers links to Google services such as YouTube and Google Maps on this website. If you would like to use Google services, you must actively give your consent. You agree to the "Additional Terms of Use for Google Maps / Google Earth" and the Google Privacy Policy and allow Google to implement the measures mentioned there.

Legal Basis for Processing of Personal Data
The legal basis for processing personal data by means of cookies is Art. 6 Para. 1 (f) of GDPR and Art. 5 Para. 3 of EU Directive 2002/58.

Purpose of Personal Data Processing
The purpose of using technically necessary cookies is to enable users to use websites. Some functions of the esd website cannot be offered without the use of cookies. The user data collected by technically necessary cookies are not used to create user profiles.

The following cookies set by esd are required for the following applications:

1. Typo3 cookie: language selection, watch list, browser recognition, login
2. Consent cookie: Saves the consent to open the Google Maps map

Retention Period, Opposition and Cancellation Proceedings
The above-mentioned cookies are stored on the user's computer and only transmitted from there to the esd website.

Storage period:

1. Typo3 cookie: 30 days
2. Consent cookie: 24 hours

As a user, you have the option of deactivating or restricting the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for the esd website, not all functions of the website can be used to their full extent.

Type and Scope of Personal Data Processing
The esd website offers users the opportunity to register by providing personal data. The data is entered in an input mask and it is transmitted to esd and stored by esd. The data will not be passed on to third parties. esd renounces on profiling and tracking of personal data of registered user web traffic.
The following data is gathered in the course of the registration process:

1. First and last name
2. Company
3. Department
4. Street an no.
5. City
6. Post code
7. Country
8. Phone
9. Date and time of registration
10. The user may also state his interests of the following categories: hardware, OS support and software

As part of the registration process, the consent of the user to process this data is obtained.

Legal Basis for Processing of Personal Data
The legal basis for the processing of the data, if the user has granted a consent, is Art. 6 (1) lit. a) GDPR.

Purpose of Personal Data Processing
User registration is intended to simplify communication in the event of user inquiries about products or support cases.

Retention Period
The data will be deleted, as soon as it is no longer needed to achieve the purpose for gathering it. This will be the case for data collected during the registration process, if the user account at esd's website is deleted.

Opposition and Cancellation Proceedings
As a user, you have the option at any time to cancel the registration. You can have the data stored about you be changed at any time. Furthermore, you can read, change or delete your personal data and your stored interests in your user account (under "My profile" via the link "Profile data") by yourself.

Type and Scope of Personal Data Processing
Contact forms are available on esd's website, which can be used to contact esd electronically. If a user uses this option, the data entered in the input mask will be transmitted to esd and stored by esd. esd renounces on profiling and tracking of personal data of registered user web traffic, contact forms as well as on email newsletters. When you purchase goods or services on esd's website and in this case deposit your e-mail address, this can be used by esd subsequently for direct advertising purposes as well as for mailing information about products and novelties for own similar goods or services.

The following user data collected via the contact form are transmitted and stored by esd:

1. First and last name
2. Company
3. Department
4. Street an no.
5. City
6. Post code
7. Country
8. Phone
9. Fax
10. Date and time of registration

Your consent to the use of the data will be requested in the course of the transmission process and a reference to this Data Privacy Policy will be made.
If contact is offered via a provided email address, the user’s personal data transmitted along with the email will be stored in that case.
The data will not be passed on to third parties in this context. The data will be used exclusively for the processing of the communication.

Legal Basis for Processing of Personal Data
The legal basis for the processing of the data, if the user has granted a consent, is Art. 6 (1) lit. a) GDPR.
The legal basis for the processing of the data that is transmitted in the course of sending an email is Art. 6 (1) lit. f) GDPR. If the contact by email aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b) GDPR.

Purpose of Personal Data Processing
The processing of the personal data from the input mask serves solely for esd's processing of the communication. In the event of contact by email, this is also the required justified interest in the processing of the data. The other personal data processed in the course of the transmission process serves to prevent misuse of the contact form and to ensure the security of esd's IT systems.

Deletion of Data and Retention Periods
The data will be deleted, as soon as it is no longer needed to achieve the purpose for gathering it.
This is the case, regarding the personal data originating from the input mask of the contact form and the data that has been transmitted with the email, when the respective communication with the user is terminated. The communication is terminated when it can be seen based on the circumstances that the relevant facts have been clarified conclusively.

Opposition and Cancellation Proceedings
The user has the possibility at all times to revoke his/her consent to the processing of personal data. If the user contacts esd by email, he/she can object at any time to the storing of his/her personal data. In such a case, the communication cannot be continued.
The user may exercise his/her right to information. Based on this information the user can object the storage of personal data. All personal data that has been stored in the course of the contacting will be deleted in that case.

Type and Scope of Personal Data Processing
You can subscribe to a free newsletter on esd's website. When registering for the newsletter, the data from the input mask is transmitted to esd.
Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with someone else's e-mail address.

esd renounces on profiling and tracking of personal data on email newsletters.

The following data is also collected during the registration process:

1. First and last name
2. e-mail address
3. IP address of the user
4. Date and time of registration

The data is not passed on to third parties in connection with data processing for sending newsletters. There is an exception if there is a legal obligation to pass it on. The data is used exclusively for sending the newsletter.

Your consent is obtained for processing the data within the scope of the newsletter mailing process and reference is made to this privacy policy.

When you purchase goods or services on esd's website and in this case deposit your e-mail address, this can subsequently be used by esd for sending a newsletter. In such a case, only information about products and novelties for own similar goods or services will be sent via the newsletter.

Newsletter Service Provider
The dispatch takes place via a service provider commissioned by esd, who receives this data for this purpose:
rapidmail GmbH, Wentzingerstrasse, 21, 79106 Freiburg, Germany
Data protection declaration: www.rapidmail.com/data-security
With rapidmail, among other things, the sending of newsletters is organized and analyzed. The data you enter for the purpose of subscribing to the newsletter will be stored on the rapidmail servers in Germany. If you do not want an analysis by rapidmail, you must unsubscribe from the newsletter. For this purpose, rapidmail provides a corresponding link in every newsletter message. For the purpose of analysis, the e-mails sent with rapidmail contain a so-called tracking pixel, which connects to the rapidmail servers when the e-mail is opened. In this way it can be determined whether a newsletter message has been opened. Furthermore, with the help of rapidmail, esd can determine whether and which links in the newsletter message are clicked on. All links in the e-mail are so-called tracking links, with which your clicks can be counted. Depending on which font the respective newsletter is designed with, a connection to external servers such as Google Fonts takes place.

Legal Basis for Processing of Personal Data
The legal basis for the processing of the data after registration for a newsletter, if the user has granted a consent, is Art. 6 (1) lit. a) GDPR.
The legal basis for the newsletter mailing on the basis of the sale of goods or services is §7 Art. 3 of the Law against Unfair Competition (UWG).
If the contact by email aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b) GDPR.

Transmission to third countries
The data will not be transmitted to third countries.

Purpose of Personal Data Processing
The requested email of the user is required to mail the newsletter to the user.

Retention Period
The data stored by you within the scope of your consent for the purpose of the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from both the esd servers and the rapidmail servers after you have canceled the newsletter.
The deletion of the newsletter registration has no influence on the data stored for a user account.

Opposition and Cancellation Proceedings
The subscription to the newsletter can be canceled by the respective user at any time. There is a corresponding information in each newsletter. This also allows you to revoke your consent to the storage of personal data collected during the registration process.

7.1 Matomo

Scope of Personal Data Processing
On the esd website the open source software tool Matomo is used to analyze the surfing behavior of the users.
If individual pages of the esd website are called, the following data is stored:

1. Two bytes of the IP address of the calling computer system of the user
2. URLs of the webpages
3. URL which linked the user's system to esd's website (referrer)
4. Sub-pages opened by the called website
5. Length of stay on website
6. Frequency of calling esd's website
7. Countries of origin
8. Information on the user's web browser and operating system
9. Used Search engine and search terms

The software runs exclusively on the servers of the esd website. The data is only stored there. The data will not be passed on to third parties. The software is set so that the IP addresses are not completely stored but in a shortened way. In this way it is no longer possible to assign the shortened IP address to the calling computer.

Legal Basis for Processing of Personal Data
The legal basis for the processing of the user's personal data is Art. 6 (1) lit. f) GDPR.

Purpose of Personal Data Processing
The processing of the users' personal data offers esd to analyze the surfing behavior of the users. Evaluation of the collected data enables esd to analyze the information on the usage of certain features of the website. This helps esd to continuously optimize the website and their user-friendliness.
These purposes justify esd's legitimate interest on data processing assorting to Art. 6 Para. 1 (f) of GDPR. By anonymizing of the IP address the users' interests in the protection of their personal data is taken sufficiently into account.

Retention Period
The data will be deleted after 1.5 years.

Opposition and Cancellation Proceedings
esd uses Matomo without the use of cookies.

esd uses the offering of Google Ads to draw attention on external websites to esd's attractive products by using advertising tools (so-called Google Ads). These advertising tools are delivered by Google by means of so-called "ad servers." Ad server cookies that allow the analyzis of performance parameters are used in this process, e.g. ad impressions, clicks and conversations. This allows esd to determine how successful individual advertising measures are in relation to the data of the advertising campaigns. If you reach the esd website through Google advertising, Google Ads will save a cookie on your end device. These cookies usually become invalid after 30 days and are not intended to identify you personally. With this cookie, the following analyzis values are usually saved:

1. Unique Cookie ID
2. Number of ad impressions per placement (frequency)
3. Last impression (relevant to post-view conversions)
4. OptOut information (marking that the user does no longer want to be addressed)

These cookies allow Google to recognize your internet browser. If a user visits certain pages of a website of an Ads customer and the cookie that has been saved on his end device has not expired, Google and the customer can detect that the user has clicked the advertisement and was forwarded to this site. Each Ads customer is assigned with a different cookie. Cookies can therefore not be tracked via the websites of Ads customers. In the above advertising measures, esd does not collect or process any personal data itself. esd is only provided with statistical analyzes by Google. These analyzes allow esd to identify which of the deployed advertising measures are particularly effective. esd does not receive any further data from the deployment of advertising measures, and, in particular, esd is able to identify users based on this information. The legal basis for processing your data is Article 6(1)(1)(a and f) GDPR.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. esd has no influence on the scope and further use of the data that is collected by Google through the use of this tool and therefore inform you according to the current state of knowledge:

By integrating "tracking tools", Google receives the information that you have accessed the corresponding webpage of the esd website or that you have clicked on an ad from esd. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and save it. Thanks to the company's remarketing technology, users who have already visited the esd website and online services and are interested in esd's offer are addressed again through targeted advertising on the pages of the Google partner network.

In addition, esd uses the Google Remarketing application. This is a means of retargeting in order to deliver advertisements that match interests. This application enables displaying esd's  advertising when you are visiting other websites after visiting the esd website. This is accomplished by means of cookies that are saved in your browser via which your utilization behavior is captured and analyzed by Google when you visit various websites. This enables Google to determine your previous visit to the esd website. According to Google, the data collected within the scope of retargeting is not combined with your personal data that may have been saved by Google. According to Google, pseudonymisation is used during retargeting in particular.

For further information on data protection at Google, please go to: http://www.google.com/intl/de/policies/privacy/ and https://services.google.com/sitestats/de.html

Transfer to third countries are possible. As an appropriate safeguard we have agreed on standard contractual clauses pursuant to Art. 46 GDPR. More information on this topic is published here: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu_en.

If you do not wish to have displayed advertising that is targeted to your interests in the future, you can deactivate cookies in your browser or inform Google about this by going to the following link: https://www.google.com/settings/ads/onweb/. Alternatively, you can object against Google retargeting by visiting the website Network Advertising Initiative (NAI): http://optout.networkadvertising.org.

Right to Information
You can ask esd to confirm whether your personal data is processed by esd. If such processing has taken place, you can request the following information from esd:

1. The purposes for which the personal data is processed.
2. The categories of personal data processed.
3. The recipients or categories of recipients to whom the personal data about you has been or will be disclosed.
4. The planned duration of the storage of your personal data or, if specific information about this cannot be provided, criteria for determining the storage period.
5. The existence of a right of rectification or deletion of your personal data, of a right to the restriction of processing by the data controller, or of a right to objection to such processing.
6. The existence of a right of appeal to a supervisory authority.
7. All available information about the origin of the data if the personal data is not collected from the data subject.
8. The existence of automated decision-making, including profiling in accordance with Art. 22 Para. 1 and 4 of GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether your personal data is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate guarantees in accordance with Art. 46 of GDPR in connection with the transmission.

Right to Rectification
You have a right to rectification and/or completion vis-à-vis esd if the personal data processed concerning you is incorrect or incomplete. esd must make the correction without delay.

Right to Limitation of Processing
You may request that the processing of personal data concerning you be restricted under the following circumstances:

1. If you dispute the accuracy of your personal data
2. The processing is unlawful
3. There is no more need of the personal data for the purposes of processing by esd, but you do need it to assert, exercise, or defend legal claims.
4. If you have filed an objection to the processing in accordance with Art. 21 Para. 1 of GDPR

If the processing of your personal data has been restricted, such data may only be processed - apart from being stored - with your consent or for the purpose of asserting, exercising, or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the European Union or a member state. If the processing restriction has been restricted according to the above conditions, you will be informed by esd before the restriction is lifted.

Right to Deletion
Deletion Obligation
You may request esd to delete your personal data without delay and esd is obliged to delete this data without delay if one of the following reasons applies:

1. Your personal data is no longer required for the purposes for which it was collected or otherwise processed.
2. You revoke your consent, on which the processing was based in accordance with Art. 6 Para. 1 (a) or Art. 9 Para. 2 (a) of GDPR, and there is no other legal basis for the processing.
3. You file an objection against the processing in accordance with Art. 21 Para. 1 of GDPR and there are no overriding legitimate reasons for the processing, or you file an objection against the processing in accordance with Art. 21 Para. 2 of GDPR.
4. Your personal data has been processed unlawfully.
5. The deletion of your personal data is required to fulfill a legal obligation under European Union law or the law of the member states to which esd is subject.
6. Your personal data has been collected in relation to information society services offered in accordance with Art. 8 Para. 1 of GDPR.

Information to Third Parties
If esd has made your personal data public and is obliged to delete it in accordance with Art. 17 Para. 1 of GDPR, esd shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those who process the personal data that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.

Exceptions
The right to deletion does not exist insofar as the processing is necessary, for example:

1. To exercise freedom of expression and information.
2. To fulfill a legal obligation required for processing under the law of the European Union or of member states to which esd is subject or to carry out a task in the public interest or in the exercise of official authority conferred on esd.
3. For reasons of public interest in the area of public health in accordance with Art. 9 Para. 2 (h) and (i) and Art. 9 Para. 3 of GDPR.
4. For archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes in accordance with Art. 89 Para. 1 of GDPR, insofar as the law referred to under section "Deletion Obligation" is likely to render impossible or seriously impair the attainment of the objectives of such processing.
5. To assert, exercise, or defend legal claims.

Right to be Informed
If you have exercised your right to have esd correct, delete, or restrict data processing, esd is obliged to inform all recipients to whom your personal data has been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by esd about such recipients.

Right to Data Transferability
You have the right to receive such personal data as relates to you that you provided to esd in a structured, common, and machine-readable format. In addition, you have the right to pass this data on to another data controller without obstruction by esd to whom the personal data was made available, provided that:

1. Processing is based on consent in accordance with Art. 6 Para. 1 (a) of GDPR or Art. 9 Para. 2 (a) of GDPR or on a contract in accordance with Art. 6 Para. 1 (b) of GDPR.
2. Processing is carried out using automated methods.

In exercising this right, you also have the right to request that your personal data be transferred directly from esd to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this. The right to data transferability shall not apply to the processing of personal data required for the performance of a task in the public interest or in the exercise of an official authorization conferred on esd.

Right of Objection
You have the right to file an objection at any time, for reasons arising from your particular situation, to the processing of your personal data in accordance with Art 6. Para. 1 (e) or (f) of GDPR; this also applies to profiling based on these provisions. esd shall no longer processes your personal data unless esd can prove compelling and legitimate grounds for processing, which outweigh your interests, rights, and freedoms or the processing serves to assert, exercise, or defend legal claims.
If your personal data is processed for direct marketing purposes, you have the right to file an objection at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
You have the option to exercise your right of objection in connection with the use of information society services by means of automated processes using technical specifications, notwithstanding Directive 2002/58/EC

Right to Revoke the Data Protection Declaration of Consent
You have the right to revoke your data protection declaration of consent at any time. The revocation of consent shall not affect the legality of processing carried out on the basis of the consent until revocation.

Automated Decision-Making in Individual Cases Including Profiling
You have the right not to be subject to a decision based exclusively on automated processing – including profiling – that has legal effects against you or significantly impairs you in a similar manner. This is not the case if the decision

1. is necessary for the conclusion or performance of a contract between you and esd.
2. is admissible under European Union legislation or that of the member states to which esd is subject and where such legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests.
3. is made with your express consent.

However, these decisions may not be based on special categories of personal data in accordance with Art. 9 Para. 1 of GDPR, unless Art. 9 Para. 2 (a) or (g) applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests. In the cases referred to in (1) and (3), esd shall take reasonable measures to safeguard your rights, freedoms, and legitimate interests, including at least the right to obtain the intervention of a person by esd, to state esd's own position, and to challenge the decision.

Right of Appeal to a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the member state where you reside, your place of work, or the location of the suspected infringement, if you believe that the processing of your personal data is contrary to the GDPR.
The supervisory authority to which the complaint was filed, inform the complainant about the status and results of the appeal including the possibility of a judicial remedy pursuant to Art. 78 DSGVO.