Privacy notice pursuant to Art. 13 GDPR

This is a courtesy English translation of our German privacy notice. In case of any discrepancies, the German version prevails.

Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

Engelking Elektronik GmbH
Albstr. 16
78609 Tuningen
Germany

Phone: +49 7464-9865-0
Email: info@engelking.de

Name and address of the data protection officer

The data protection officer of the controller is:

dsgvoschutzteam.com - Lukmann Consulting GmbH
Packerstraße 131a
A-8561 Söding
Austria

Phone: +49 7223 95 666 77
Email: service@dsgvoschutzteam.com

General information on data processing

Legal basis for the processing of personal data

In accordance with Art. 13 GDPR, we inform you of the legal bases of our data processing. Where the legal basis is not specifically stated in this privacy notice, the following applies: the legal basis for obtaining consent is Art. 6(1)(a) in conjunction with Art. 7 GDPR. The legal basis for processing in order to perform our services and carry out contractual measures, as well as to answer enquiries, is Art. 6(1)(b) GDPR. The legal basis for processing in order to comply with our legal obligations is Art. 6(1)(c) GDPR. If the processing of your data is necessary to safeguard a legitimate interest of our company or of a third party and your interests, fundamental rights and freedoms do not override that interest, Art. 6(1)(f) GDPR serves as the legal basis. Where vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.

Erasure of data and storage duration

We adhere to the principles of data minimisation pursuant to Art. 5(1)(c) GDPR and storage limitation pursuant to Art. 5(1)(e) GDPR. We only store your personal data for as long as is necessary to achieve the purposes stated here or as required by statutory retention periods. Once the respective purpose ceases to apply or once these retention periods expire, the corresponding data is erased as quickly as possible.

External links

This website may contain links to third-party websites or to other websites under our responsibility. If you follow a link to a website outside our responsibility, please note that these websites have their own privacy information. We accept no responsibility or liability for these external websites or their privacy notices. Therefore, please check before using these websites whether you agree with the privacy statements provided there.

You can usually recognise external links because they are visually distinguished from the rest of the text or underlined. Your cursor indicates external links when you hover over such a link. Only when you click an external link is your personal data transmitted to the target of the link. The operator of the other website will receive, in particular, your IP address, the time at which you clicked the link, the page on which you clicked the link, and further information that you can find in the privacy notices of the respective provider.

Please also note that individual links may lead to data being transferred outside the European Economic Area. As a result, foreign authorities may gain access to your data. You may not have any legal remedies against such access. If you do not want your personal data to be transmitted to the link destination or potentially exposed to access by foreign authorities, please do not click any links.

Rights of the data subject

As a data subject within the meaning of the GDPR, you may exercise various rights. The data subject rights arising from the GDPR are the right of access (Art. 15), the right to rectification (Art. 16), the right to erasure (Art. 17), the right to restriction of processing (Art. 18), the right to object (Art. 21), the right to lodge a complaint with a supervisory authority and the right to data portability (Art. 20).

Right to withdraw consent:

Some data processing can only take place with your express consent. You can withdraw consent that you have given at any time. The lawfulness of the data processing carried out up to the withdrawal is not affected.

Right to object:

If processing is based on Art. 6(1)(e) or (f) GDPR, you as the data subject may, on grounds relating to your particular situation, object at any time to the processing of personal data concerning you. This also applies to profiling based on these provisions within the meaning of Art. 4(4) GDPR. Unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims, we will no longer process your data following your objection.

If the processing of personal data is for the purpose of direct marketing, you also have the right to object at any time. The same applies to profiling associated with direct marketing. In these cases, too, we will no longer process personal data once you object.

Right to lodge a complaint with a supervisory authority:

If you believe that the processing of personal data relating to you infringes the GDPR, you have the right — without prejudice to any other administrative or judicial remedy — to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement.

Right to data portability:

If your data is processed by automated means on the basis of consent or for the performance of a contract, you have the right to receive this data in a structured, commonly used and machine-readable format. You also have the right to request the transmission and provision of the data to another controller, where technically feasible.

Right of access, rectification and erasure:

You have the right to obtain information about your processed personal data regarding the purpose of processing, the categories, the recipients and the storage duration. For questions on this subject, or any other topic concerning personal data, you can contact us using the contact details provided in the legal notice.

Right to restriction of processing:

You may assert the right to restriction of processing of your personal data at any time. You must meet one of the following requirements:

You contest the accuracy of the personal data. For the duration of the verification of accuracy, you have the right to request a restriction of processing.
Where the processing is unlawful, you may request restriction of use of the data as an alternative to erasure.
If we no longer need your personal data for the purposes of processing, but you require the data for the establishment, exercise or defence of legal claims, you may request a restriction of processing as an alternative to erasure.
If you object to the processing pursuant to Art. 21(1) GDPR, a balancing of your interests and ours will be carried out. Until this balancing is complete, you have the right to request a restriction of processing.

A restriction of processing means that, apart from storage, the personal data may only be processed with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.

Provision of the website (web host)

Our website is hosted by:

Lovable Labs AB
Box 190
101 23, Stockholm
Sweden

When you access our website, we automatically collect and store information in so-called server log files. Your browser transmits this information automatically to our server or to the server of our hosting provider.

These include:

IP address of the visitor's end device
Device used
Host name of the accessing computer
Operating system of the visitor
Browser type and version
Name of the file accessed
Time of the server request
Volume of data
Information on whether the data was retrieved successfully

This data is not merged with other data sources.

Instead of operating this website on our own server, we may also have it operated on the server of an external service provider (hosting company), which we have named above. The personal data collected via this website is then stored on the servers of the hosting company. In addition to the data mentioned above, the web host stores e.g. contact enquiries, contact details, names, website access data, meta and communication data, contract data and other data generated via a website.

The legal basis for the processing of this data is Art. 6(1)(f) GDPR. Our legitimate interest is the technically error-free presentation and optimisation of this website. If the website is accessed to enter into contract negotiations with us or to conclude a contract, Art. 6(1)(b) GDPR serves as an additional legal basis. Where we have engaged a hosting company, a data processing agreement is in place with that service provider.

Use of local storage items, session storage items and cookies

Our website uses local storage items, session storage items and/or cookies. Local storage is a mechanism that allows the storage of data within the browser on your end device. This data usually contains user preferences, such as the "day" or "night mode" of a website, and remains in place until you manually delete it. Session storage is very similar to local storage; however, the storage duration is limited to the current session, i.e. until the current tab is closed. After that, the session storage items are deleted from your device. Cookies are pieces of information that a web server (the server that provides web content) places on your end device in order to identify that device. They are either stored temporarily for the duration of a session (session cookies) and deleted after the end of your visit, or permanently (persistent cookies) on your end device until you delete them yourself or your web browser deletes them automatically.

These objects can also be stored on your end device by third-party companies when you enter our site (third-party requests). This enables us as the operator and you as the visitor of this website to use certain services from third parties that are installed on this website. Examples include the processing of payment services or the display of videos.

These mechanisms have many uses. They can improve the functionality of a website, control shopping cart functions, increase the security and convenience of website use, and carry out analyses of visitor flows and behaviour. Depending on the individual functions, they must be assessed under data protection law. If they are necessary for the operation of the website and intended to provide certain functions (shopping cart function) or serve to optimise the website (e.g. cookies to measure visitor behaviour), their use is based on Art. 6(1)(f) GDPR. As website operator, we have a legitimate interest in the storage of local storage items, session storage items and cookies for the technically error-free and optimised provision of our services. In all other cases, local storage items, session storage items and cookies are only stored with your express consent (Art. 6(1)(a) GDPR).

To the extent that local storage items, session storage or cookies are used by third-party companies or for analytics purposes, we will inform you separately within this privacy notice. Your required consent will be requested and can be withdrawn at any time.

Use of external services

External services are used on our website. External services are third-party services that are integrated into our website. This may be done for various reasons, e.g. to embed videos or for website security. When these services are used, personal data is also passed on to the respective providers of those external services. Where we have no legitimate interest in the use of these services, we obtain your consent — which you can withdraw at any time — before they are used (Art. 6(1)(a) GDPR).

Analytics

To analyse user behaviour we process personal data of website visitors. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website. This allows us to improve the user-friendliness of our website. Using the analytics tools we employ, user profiles could, for example, be created for the delivery of targeted or interest-based advertising; our website visitors could be recognised on their next visit; their click/scroll behaviour and downloads could be measured; heatmaps could be created; page views recognised; visit duration or bounce rates measured; as well as the origin of website visitors (city, country, the page from which the visitor came) traced. Analytics tools help us improve our market research and marketing activities.

Processing only takes place if you consent to it (via our consent banner on the website). The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, the data processing described above does not take place. If you withdraw your consent (e.g. via the consent banner or other options provided on this website), we will end this data processing. The lawfulness of any processing carried out up to the withdrawal remains unaffected.

Piwik PRO

We use the Piwik PRO service on our website. The provider of the service is Piwik PRO SA, Sw. Antoniego 2/4, 50-073 Wroclaw, Poland.

Further information can be found in the provider's privacy information at the following URL: https://piwikpro.de/datenschutz/.

Contact forms

Our website provides the option to contact us via a contact form. In particular, your contact details are required to get in touch using this form.

If you give your consent, the legal basis is Art. 6(1)(a) GDPR. This can be withdrawn at any time.

If you send enquiries about our products, services or company, the processing takes place for the purpose of contract performance or pre-contractual measures pursuant to Art. 6(1)(b) GDPR. There may also be a legitimate interest in maintaining business relationships or in responding to your enquiry for other reasons. In that case, the legal basis for processing your data would be Art. 6(1)(f) GDPR.

The data is erased once we have conclusively answered your enquiry and no other retention obligations stand in the way.

Presence on Facebook

Social networks process personal data of their users to a large extent. When you visit our profiles, your IP address as well as further information about the devices you use are processed, allowing the IP addresses to be assigned to individual users. We have no influence on this data processing. We point out that you use our profiles on social networks and their functions at your own responsibility. Details on data processing can be found in the provider's privacy policy.

We maintain a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

For details, please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/.

The purpose of our profiles on social media platforms is to expand our online presence and thereby increase our visibility. The legal basis is therefore legitimate interest pursuant to Art. 6(1)(f) GDPR. With regard to the processing activities carried out by the social networks themselves, please refer to their own legal bases (e.g. consent pursuant to Art. 6(1)(a) GDPR), which you can find in the respective privacy policy.

In principle, we are jointly responsible with the social media platform for the data processing operations triggered when our profile is visited. You can therefore assert your data subject rights pursuant to Art. 15 et seq. GDPR both vis-à-vis the social media platform and vis-à-vis us. We point out, however, that we have no influence on the data processing carried out by the social media platform.

Presence on LinkedIn

We maintain a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

Detailed information on the handling of personal data can be found in the following LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy.

Presence on X

We maintain a profile on X. The provider is X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

For details, please refer to X's privacy policy: https://twitter.com/de/privacy.

Newsletter — CleverReach

As part of our marketing, we offer you the option of subscribing to our newsletter via our website. To order the newsletter, you go through a registration process during which we verify that you are the owner of the email address provided and that you agree to receive our newsletter. The data remains with us — or with the newsletter service we have engaged — from your voluntary registration until your unsubscription. If you unsubscribe from the newsletter, you will be removed from the distribution list. This list is not merged with other data. Removing your newsletter subscription does not, however, lead to the deletion of data stored for other purposes (e.g. customer accounts).

Processing only takes place if you consent to it. The legal basis for this processing is consent (Art. 6(1)(a) GDPR). Without your consent, the data processing described above does not take place. If you withdraw your consent, we will end this data processing. The lawfulness of any processing carried out up to the withdrawal remains unaffected.

We use the CleverReach service. The provider of the service is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany.

Further information can be found in the provider's privacy information at the following URL: https://www.cleverreach.com/de-de/datenschutz/

Newsletter — Brevo

We use the Brevo service on our website. The provider of the service is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Further information can be found in the provider's privacy information at the following URL: https://www.brevo.com/de/legal/privacypolicy/