Data protection

We are glad that you visit our website and thank you for your interest! Protecting your privacy when using our website is important to us, so please be aware of the information below about how to handle your information: EC Brands GmbH has taken the measures that are reasonable for it to ensure the best possible protection of personal data processed via this website, but Internet-based data transmissions can in principle have security gaps so that absolute protection can not be guaranteed.

1. Definitions
The privacy policy of EC Brands GmbH is essentially based on the terminology used by the European directive and regulatory authorities in the adoption of the General Data Protection Regulation (DSGVO). These can be found in Art. 4 GDPR – for example on the website of the Federal Commissioner for Data Protection and Freedom of Information https://www.bfdi.bund.deIncidentally, the following terms are used:

a) Contract data processor
Order Processor is a natural or legal person, agency, agency or other body that processes personal data on behalf of the controller.

b) Cookies
Cookies are text files that the browser places on the user’s computer when a web page is accessed. They store data to visit websites, which in detail depends on the type and purpose of the cookie.

c) Double opt-in
If an affected person has registered with their e-mail address in a mailing list (single opt-in), a subsequent confirmation e-mail will be sent and requested to confirm the registration. If the person confirms the registration, the double opt-in is completed.

d) Web beacon (counting pixels)
A web beacon, or counting pixel, is a miniature graphic embedded in e-mails to evaluate the success or failure of the newsletter. The embedded pixel can be used to detect whether and when an e-mail was opened by an affected person and which links in the e-mail were called up by the person concerned.

2. Name and address of the controller
Responsible in the sense of the basic data protection regulation is the:
EC Brands GmbH, represented by their managing director Lisa Lang, Budapest str. 38-50, 10787 Berlin, Germany.
Tel: 0049 – (0) 30 20837551

3. Collecting general data and information
The website of EC Brands GmbH collects a series of general data and information each time the website is accessed by an affected person or an automated system. This general data and information is stored in the log files of the server. Can be recorded:
(1) The browser type used
(2) Time and date of the page request
(3) The operating system used,
(4) The website from which our website was referenced (referrer)
(5) The sub-web pages that are accessed on our website,
(6) The Internet Protocol address (IP address), which is stored with the proviso that, instead of the actual IP address, e.g. an IP address 123.123.123.XXX is stored, where XXX is a random value between 1 and 254. The production of a personal reference is no longer possible.
When using this general data and information no conclusions are drawn on the data subject. Rather, this information is required to (1) correctly deliver the contents of our website, (2) to optimize the content of our website and to advertise it, (3) to ensure the continued functioning of our information technology systems and the technology of our website, and ( 4) to provide law
enforcement authorities with the information necessary for law enforcement in the event of a cyberattack. This anonymously collected information is provided by EC Brands GmbH and its web host, Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109-5210 United States, represented by Chief Executive Officer, Andrew R. Jassy, on the one hand statistically and further evaluated with the aim to increase the privacy and data security in our company. The anonymous data of the server log files are stored separately from all personal data provided by an affected person, so that no connections or related data records can be formed from this. A contract data processing contract was concluded with the designated web host. If you have been redirected to our site through any of the internet addresses listed in Appendix A or Appendix B (see the end of this Privacy Policy), the data referred to in this point has been collected by another data processor, subject to the foregoing. These are the addresses listed in Appendix A to the domainfactory GmbH, represented by the Managing Director Dr. med. Claus Boyens, Tobias Mohr, Oskar-Messter-Strasse 33, 85737 Ismaning and at the LLC listed in Appendix B,
14455 N. Hayden Rd., Ste. 226 Scottsdale, AZ 85260 USA, represented by its CEO Scott W. Wagner. A contract data processing contract was signed with both contractors.
The appropriate data collection and processing is necessary to track the purposes mentioned under this point and to allow the transfer to our site.

4. Cookies
Most browsers have an option to restrict the storage of cookies, or the browser can be set to notify you when a cookie is set. You can also delete cookies from your PC’s hard drive at any time. Please note, however, that the use and especially the ease of use of our website is limited without cookies.

5. Contact via the website
The website of EC Brands GmbH contains functions that enable a fast electronic contact, including a contact form and an e-mail address. If an affected person contacts the data controller by e-mail or via the contact form, the personal data transmitted by the data subject will be automatically saved. Such personal data, voluntarily transmitted by an individual to the controller, is stored for the purpose of processing or contacting the data subject. There is no disclosure of this personal data to third parties.

6. Newsletter
On the website of the controller, it is possible to subscribe to a newsletter. The data collected in connection with the subscription result from the content of the input mask. EC Brands GmbH informs its customers and business partners at regular intervals through this newsletter about offers and news relating to the company and its business branch. The newsletter can only be received if the person concerned has a valid e-mail address and has registered to receive the newsletter. Before sending the newsletter for the first time, a confirmation e-mail will be sent to the e-mail address entered by the person concerned using the double opt-in procedure. This confirmation email is used to check whether the owner of the e-mail address as the person concerned authorised the receipt of the newsletter. The personal data collected in the context of registering for the newsletter will be used exclusively to send our newsletter. Subscribers to the newsletter may also be notified by e-mail if this is necessary for the operation of the newsletter service or registration, as might be the case in the event of changes to the newsletter or technical changes. Subscription to our newsletter may be terminated by the person concerned at any time. The consent to the storage of personal data that
the data subject has given us for the newsletter dispatch can be revoked at any time. For the purpose of revoking the consent, there is a corresponding link in each newsletter. It is also possible to unsubscribe from the newsletter at any time directly to the controller.
E-mail newsletters are sent via the technical service provider The Rocket Science Group, LLC d / b / a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http: // /), to which we pass on your data for the purpose of the newsletter dispatch. Please note that your data is usually transmitted to and stored by a MailChimp server in the USA. To protect your information in the United States, we have contracted with MailChimp to process the order data to facilitate the transfer of your personal information to MailChimp. MailChimp is certified under the US-EU Privacy Shield, and is committed to complying with EU data protection requirements, details of the US-EU Privacy Shield can be found here: id = a2zt0000000TO6hAAG.
Incidentally, the rights under point 10 also apply to the data collected as part of the subscription to the newsletter 6.1. Newsletter tracking
The newsletters contain so-called web beacons.
Such personal data collected via the web beacons contained in the newsletters will be stored and evaluated by the controller in order to optimize the delivery of the newsletter and to better adapt the content of future newsletters to the interests of the data subject. This personal data will not be disclosed to third parties. Affected persons are entitled at any time to revoke the given declaration of consent. After revocation, this personal data will be deleted by the controller. A deregistration from the receipt of the newsletter is automatically considered a revocation.
For technical reasons, it is unfortunately not possible to continue receiving the newsletter if the consent to the evaluation of the web beacons is revoked – this would involve disproportionate
efforts for the company.

7. Applications
The controller collects and processes the personal data of applicants for the purpose of processing the application process. The processing can also be done electronically. This is particularly the case if an applicant submits corresponding application documents to the controller by electronic means, for
example by e-mail or via a web form available on the website. If the controller concludes a contract of employment with an applicant, the data transmitted will be stored for the purposes of the employment relationship in accordance with the law. If no employment contract is concluded with the candidate by the controller, the application documents will be automatically deleted two months after the announcement of the rejection decision, unless deletion precludes other legitimate interests of the controller. Other legitimate interest in this sense, for example, a burden of proof in a
procedure under the General Equal Treatment Act (AGG). 8. Using Google Analytics (with anonymization function) The controller has integrated on this website the component Google Analytics (with anonymization function). Google Analytics is a web analytics service. Web analysis is the collection, collection and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on which website an affected person has come to a website (so-called referrers), which subpages of the website were accessed or how often and for which length of stay a
subpage was viewed. A web analysis is mainly used to optimize a website and cost-benefit analysis of Internet advertising. The operating company of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. The controller uses the addition “_gat._anonymizeIp” for web analytics via Google Analytics. By means of this addendum, the IP
address of the Internet access of the data subject will be shortened and anonymised by Google if the access to our website is from a Member State of the European Union or from another state party to the Agreement on the European Economic Area. Google Analytics sets a cookie on the affected
person’s system. By using this cookie Google is enabled to analyze the usage of our website. Each time you visit any of the pages on this site, the Internet browser on the affected person’s system is automatically prompted by the Google Analytics component to submit data to Google for online analysis. As part of this technical process, Google will be aware of personal data, such as the IP address of the person concerned, which serve, among other things, Google to track the origin of the visitors and clicks, and subsequently make commission settlements possible. The cookie stores personally identifiable information, such as access time, the location from which access was made,
and the frequency of site visits by the data subject. Each time you visit our website, your personal information, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties. The affected person can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the affected person’s system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs. Furthermore, the data subject has the option of objecting to and preventing the collection of the data generated by Google Analytics for the use of this website
and the processing of this data by Google. To do this, the person must download and install a browser add-on at This browser add-on informs Google
Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as a contradiction.
If the affected person’s system is later deleted, formatted, or reinstalled, the data subject must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or disabled by the data subject or any other person within their sphere of control, it is possible to
reinstall or reactivate the browser add-on.
Additional information and Google’s privacy policy can be found at and
Google Analytics is explained in more detail at
We have an order processing contract with Google.

8.1 Use of Google AdSense
Our website uses Google AdSense, an online advertising service provided by Google Inc. Google AdSense uses both cookies and web beacons (see Definitions). These web beacons can be used to evaluate information such as visitor traffic on our site. The data generated by cookies and web beacons on the use of this website (including the IP address of users) and delivery of advertising formats are transmitted to a Google server in the United States and stored there. This information may be disclosed by Google to contractors of Google. However, Google will not merge the IP address with other stored data, so there is no customization beyond the IP address. Users can prevent Google AdSense cookies from being stored in various ways:
On the one hand by deactivation in the Browser directly or by means of a Plugins. (see also Cookies). Also, by disabling interest-based ads on Google or by disabling interest-based ads from the providersthat are part of the About Ads self-regulatory campaign. For more information on privacy and cookies for advertising on Google AdSense, please refer to Google’s Privacy Policy, in particular the following links:

8.2 Use of Google Adwords
This website uses the Google AdWords online advertising program and Google AdWords conversion tracking. The conversion tracking cookie is set when a user clicks on a Google-served ad. Cookies are small text files that are stored on your computer system. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not expired yet, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can not be tracked through AdWords advertisers’ websites. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that
personally identifies users. If you do not want to participate in tracking, you can opt-out of this by easily disabling the Google Conversion Tracking cookie through its Internet browser under User Preferences. You will not be included in the conversion tracking statistics. For more information about Google’s privacy policy, visit the following Internet address:

8.3. Use of Instagram
The controller has integrated components of the Instagram service on this website Instagram’s operating company is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. Each time one of the individual pages of this website is accessed, on which an Instagram component has been integrated, the internet browser of the person concerned is automatically prompted by the
respective Instagram component to download a representation of the corresponding component of Instagram. As part of this technical process, Instagram is aware of which specific bottom of our website is visited by the person concerned. If the data subject is logged in to Instagram at the same time, Instagram recognizes with each visit to our website by the data subject and during the entire duration of the respective stay on our website which specific subpage the affected person visits. This information is collected through the Instagram component and assigned through Instagram to the affected person’s Instagram account.

If the person concerned activates one of the Instagram buttons integrated on our website, the data and information transferred with it are assigned to the personal Instagram user account of the person concerned and saved and processed by Instagram. If the affected person does not want to transmit this information to Instagram, the latter can prevent the transmission from logging out of their Instagram account before calling our website. Additional information and Instagram’s privacy policy can be found at and

9. Routine deletion and blocking of personal data
The controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of the storage or, as the case may be, by the European directives or regulations or by any other legislator in laws or regulations which the controller was provided for.
If the storage purpose is omitted or if a storage period prescribed by the European directives and regulations or any other relevant legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

10. Rights of the data subject
a) General information rights
Affected persons have the free right to obtain information about the personal data collected and processed in relation to them – including the right to know whether or not data relating to the data subject has been collected and / or processed. Furthermore, the data subject has the right to have his / her personal data disclosed to a third country or to a third country international organization. If that is the case, the person concerned is otherwise entitled toInformation about the appropriate guarantees in connection with the transmission. If an interested party wishes to exercise this right to information, they may at any time contact an employee of the controller.
b) Further rights Any person affected by the processing of personal data shall further have the right to request correction of incorrect personal data concerning them and, in consideration of the purpose of the processing, to request the completion of incomplete personal data. Any person affected by the
processing of personal data has the right to request that personal data be deleted without delay, provided that one of the reasons stated in Article 17 of the GDPR is satisfied and the processing is not required:
If the personal data have been made public by EC Brands GmbH and if our company is responsible for deleting personal data as the person in charge pursuant to Art. 17 para. 1 DS-GVO, we shall take appropriate measures, including technical ones, taking into account the available technology and the
implementation costs in order to inform other data controllers processing the published personal data that the data subject has requested the deletion, so that all links to such personal data or to copies or replications of such personal data are deleted further processing is not required. Please note that deleted data can still be retrieved due to caching systems, search engines, the interposition of proxy servers and the like, without them still being present in systems that fall under our sphere of influence. Furthermore, any person affected by the processing of personal data has the right to require the controller to restrict the processing if one of the reasons given in Art. 18 GDPR is given. In addition, each person involved in the processing of personal data has the right to receive personal data relating to him or her provided to a controller by the data subject in a structured, common and machine-readable format. It also has the right to transmit this data to
another person without hindrance by the controller to whom the personal data was provided, provided that the processing is based on the consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2)Subparagraph (a) of the GDPR or on a contract pursuant to Article 6 (1) (b) GDPR and processing by means of automated procedures, unless the processing is necessary for the performance of a publicinterest or public-authority task; which has been transferred to the responsible person.

Furthermore, in exercising their right to data portability under Article 20 (1) of the GDPR, the data
subject has the right to obtain that the personal data are transmitted directly from one controller to another, insofar as this is technically feasible and if not so the rights and freedoms of others are affected.
Any person concerned by the processing of personal data shall have the right, at any time, to object to the processing of personal data concerning him / her pursuant to Article 6 (1) (e) or (f) of the GDPR for reasons arising from his particular situation , This also applies to profiling based on these provisions. Compelling legitimate grounds for processing by the responsible person may be in conflict.If EC Brands GmbH processes personal data in order to operate direct mail, the data subject has the right to object at any time to the processing of personal data for these purposes.
c) Right to revoke a data protection consent
Any person affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time. If the data subject wishes to assert their right to withdraw consent, they may, at any time, contact an employee of the controller, as well as any other claims.
11. Liability for links Our offer contains links to external websites of third parties, on whose contents we have no influence. Therefore, we can not assume any liability for these external contents. For the contents of the linked pages is always the respective provider or operator of the pages responsible, this also applies, as far as we are in the individual case itself.
The linked pages were checked for possible legal violations at the time of linking. Illegal content was not recognizable at the time of linking. However, a permanent content control of the linked pages is not reasonable without concrete evidence of an infringement. Upon notification of violations, we
will remove such links immediately.

12. Legal basis of processing
Art. 6 I lit. A DS-GMO serves our company as the legal basis for processing operations where we obtain consent for a particular processing purpose. If the processing of personal data is necessary to fulfill a contract of which the data subject is a party, as is the case, for example, in processing operations necessary for the supply of goods or the provision of any other service or consideration, processing shall be based on Art. 6 I lit. b DS-GMO. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries regarding our
products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c DSGMO. In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises were injured and his or her name, age, health insurance or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based
on Art. 6 I lit. d DS-GMO are based. Ultimately, processing operations could be based on Art. 6 I lit. f DS-GMOs are based. On this legal basis, processing operations that are not covered by any of the above legal bases are required if processing is necessary to safeguard the legitimate interests of our
company or a third party, unless the interests, fundamental rights and fundamental freedoms of the person concerned prevail. Such processing operations are particularly allowed to us because they have been specifically mentioned by the European legislator. In that regard, it considered that a
legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, second sentence, DS-BER).

13. Beneficial interests in the processing that are being pursued by the controller or a third party. Is the processing of personal data based on Article 6 I lit. f DS-GMO is our legitimate interest in conducting our business.

14. Duration for which the personal data is stored
The criterion for the duration of the storage of personal data is the respective statutory retention period. After the deadline, the corresponding data will be routinely deleted, if they are no longer required to fulfill the contract or to initiate a contract.

15. No disclosure of data to third parties
EC Brands GmbH does not disclose the personal data of its users to third parties, unless you have previously given their express consent or there is a legal obligation to share data. In addition, a transfer of personal data to third parties may take place if a legal basis allows this and the disclosure
of the data is necessary for the fulfillment of our contractual obligations.

16. Existence of automated decision-making
As a responsible company we refrain from automatic decision-making or profiling.