WHAT INFORMATION WE COLLECT
WE DO NOT STORE ANY UNENCRYPTED PAYMENT DETAILS NOR DO WE SHARE CUSTOMER DETAILS WITH ANY 3RD PARTIES
The information we collect via this website may include:
- Any personal details you type in and submit, such as name, address, email address, etc.
- Data which allows us to recognise you, your preferences and how you use this website. This saves you from re-entering information when you return to the site. This data is collected by cookies from your navigation around the site. A cookie is a small amount of data which we send to your computer. The data is then stored on your browser or hard disk. Most web browsers can be set to prevent you from receiving new cookies, notify you before accepting cookies or disable cookies altogether. Details about this can normally be found in the Help facility provided with your browser. If you disable cookies, you will not be able to receive personalised facilities and your progress to check out may take longer. The cookies store information only for as long as you are viewing the website.
- Your IP address (this is your computer’s individual identification number) which is automatically logged by our web server. This is used to note your interest in our website.
- Your preferences and use of email updates, recorded by emails we send you (if you select to receive email updates on products and offers).
WHAT WE DO WITH YOUR INFORMATION
Any personal information we collect from you will be used in accordance with the Data Protection Act 1998 and other applicable laws. The details we collect will be used:-
- To carry out security checks (this may involve passing your details to credit reference agencies, who will check details we give them against public and private databases and may keep a record of that check to use in future security checks – this helps to protect you and us from fraudulent transactions);
- To comply with legal requirements we may use third parties to carry out certain activities, such as processing and sorting data, monitoring how customers use our site and issuing our emails for us.
We would also like to inform you of various promotions, goods and services that may be of interest to you. You may be contacted by post, email, telephone, SMS or such other means as we regard as appropriate, including new technology. If you wish to receive these communications, please tick the “Yes” box when entering your personal details (if applicable). You may unsubscribe at a later date, if you wish – see “Your rights” section below.
Upon entering our site we store various pieces of data such as :
- IP Address
- Previous Page;
- date and time of arrival;
- transferred amount of data;
- message about successful retrieval or an error message;
- browser type;
- operating system type;
This information is stored so we can adjust the website to our users needs, this is collected specifically so we know more about an individual or because we sell/trade this information. Our legal basis for the collection of access data is Art. 6 (1) b) GDPR.
Registration on our Website
When registering for the use of our services, the following personal data are collected: last name, first name, title, designation, and company name. If you are registered with us, you can access content and services that we offer only to registered users. Registered users also have the option of changing or deleting the data specified during registration at any time. Please read the section entitled “Your rights to access, rectification, cancellation, limitation of processing, data portability and opposition”. A transfer of your registration data to countries outside the European Economic Area does not take place. Our legal basis for the collection of registration data is Art. 6 (1) b) GDPR and the customer’s consent.
Data in the User area (user data)
To create the Company Profile and the Records of Processing Activities within our user area, we require a lot of personally identifiable information from the direct contact person and operational privacy officer of our clients. This information is indispensable for us in order to provide our services – in particular the production of documentation in accordance with Art. 30 GDPR – which we owe to our customers on the basis of the use contracts concluded with them. We store this personal information on our servers of 1 & 1 Internet SE (Elgendorfer Str. 57, 56410 Montabaur), which are located in Germany. A transfer of your user data to countries outside the European Economic Area does not take place. Our legal basis for the collection of user data is Art. 6 (1) b) GDPR and the customer’s consent.
We use Google Analytics, a web analytics service provided by Google Inc. (“Google”), on all websites. Google Analytics uses its own “cookies” (see above). On behalf of ECOMPLY, Google uses this information to evaluate every use of our websites, to compile reports on website activity in general, and to provide other services related to website activity and internet usage to ECOMPLY. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. Google is an American company that uses servers in the United States and has been licensed by us to transfer personal information worldwide, including to non-EEA countries. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymisation on our websites, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. By setting this in your browser, you can prevent the installation of cookies. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading the browser plug-in available under the following link and install: Browser Add On to disable Google Analytics. Our legal basis for the use of Google Analytics is Art. 6 (1) b) GDPR and Art. 6 (1) f) GDPR. Our legitimate interest is e. g. the optimization of our advertising to increase our sales.
Our website uses Google Conversion Tracking. If you have reached our website via an advertisement sent by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on a Google-served ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages on our website and the cookie has not expired, we and Google may recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can not be tracked through AdWords advertisers’ websites. The information obtained from the conversion cookie is used to generate conversion statistics for advertisers. Customers will be told the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag (“clicks”), the number of times their ad was shown (“impressions”), and the number and type of ads Actions users take after clicking an ad on the linked web page (“Conversions”). However, they do not receive information that personally identifies users. Google is an American company that uses servers in the United States and has been licensed by us to transfer personal information worldwide, including to non-EEA countries. If you do not want to participate in the tracking process, you can refuse the required setting of a cookie – for example via a browser setting that generally deactivates the automatic setting of cookies or sets your browser to block cookies from the domain “googleleadservices.com”. Please note that you can not delete the opt-out cookies as long as you do not want to record measurement data. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again. Our legal basis for the use of Google AdWords is Art. 6 (1) b) GDPR and Art. 6 (1) f) GDPR. Our legitimate interest is e. g. the optimization of our advertising to increase our sales.
If you contact us by email or contact form, the information you provide will be stored for the purpose of processing the request and for possible follow-up questions. In addition, please use the contact form in order to assert your data protection rights. Please read the section entitled “Your rights to access, rectification, cancellation, blocking and opposition”. Our legal basis for using a contact form is Art. 6 (1) b) GDPR and the customer’s consent.
Retention, deletion or blocking of data
We adhere to the principles of purpose limitation and data minimisation. Therefore, we only store your personal data for as long as it is necessary to achieve the purposes mentioned here or as long as the many storage periods required by law. After discontinuation of the respective purpose or expiry of these deadlines, the corresponding data will be blocked or deleted in accordance with the statutory provisions. Our legal basis for the deletion or blocking of personal data is Art. 5 (1) b) GDPR and Art. 5 (1) c) GDPR.
Your rights of access, rectification, cancellation, limitation of processing, data portability and to withdraw consent
Of course, we will provide access to your personal data stored by us at any time. If you wish, you will receive them in a structured, commonly used and machine-readable format. We will be happy to correct, edit, limit or delete your personal data at your request, provided that no statutory storage requirements are in conflict, or forward them to another responsible office. If your personal data stored with us has been processed incorrectly, out-of-date or unlawfully, you can restrict its processing by us. Finally, you may change or revoke your consent to the processing of your personal information at any time with future effect. To contact us for any of these concerns, please use our contact form. Our legal basis for the disclosure, correction, deletion, limitation of processing and data transmission is the respective request of the data subject.
You have the following rights:
- the right to be informed about our processing or your personal data which is the aim of this Notice;
- the right to request access to personal data we hold about you at any time;
- the right to ask us to update and correct any out-of-date or incorrect personal data that we hold about you;
- the right to object to processing of your personal data and/ or to withdraw any consent you have given us and to opt out of any marketing communications that we may send you;
- the right to prevent processing that is likely to cause damage or distress to you or anyone else;
- the certain rights in relation to automated decision making including profiling;
- the right to request that we erase your personal data in certain circumstances (the right to be forgotten) for example when the data are no longer necessary for the purpose for which we collected them;
- the right to have your personal data provided to you by us in a structured, commonly used and machine-readable format and transmitted to another data controller. This is known as the right to data portability.
If you wish to exercise any of the above rights, you can always contact us either by email to or by post to the Data Protection Officer.
You have the right to lodge a complaint with the Information Commissioner’s Office at Wycliffe House, Water Lane, Wilmslow, SK9 5AF, United Kingdom if you believe we have not handled your personal data in accordance with the law. Further information, including contact details, is available at https://ico.org.uk.
INTERNATIONAL TRANSFERS OF YOUR DATA
To deliver products and services to you, it is sometimes necessary to share your personal information outside of the European Economic Area (the EEA). This will typically occur when service providers are located outside the EEA or if you are based outside the EEA. These transfers are subject to special rules under data protection laws.
If we transfer your personal information outside the EEA, we will ensure that the transfer will be compliant with data protection law and all personal data will be secure. Our standard practice is to assess the laws and practices of the destination country and relevant service provider and the security measures that are to be taken as regards the data in the overseas location; alternatively, we use standard data protection clauses.