vectorpouch – shutterstock.com
Kölner Str. 30
Telefon: +49 (0)2234 250870
Christoph Bauer &
Dr. Stefan Fenner
The operational data protection officer of entrafin GmbH is listed under o.g. Address, z.H. Mr. Christoph Bauer or at firstname.lastname@example.org reachable.
oxion2003 – pixabay.de
We process the data of our customers, trading partners, interested parties and other contractual partners (hereinafter referred to as „contractual partners“) in accordance with Art. 6 para. 1 lit. b. DSGVO in order to provide them with our pre-contractual or contractual services as well as to carry out our commercial transactions with our contractual partners. The data processed in this process, their nature and extent as well as the purpose and the necessity of their processing, are determined by the underlying contractual relationship. The processed data includes:
Salutation, first name, last name
a valid, business email address
the business address
Telephone number (landline and / or mobile)
The IP address used to register and the last used IP address
The position within the company
Information that is necessary for the formation and maintenance of our commercial contracts as well as for the provision of our contractual services
In particular, this data is collected in order to identify you as our customer
for correspondence with you
to initiate and conclude commercial transactions with you or companies named by you on the basis of our commercial contracts.
In addition, we process and store personal information in the context of our administrative duties, the organization of our business, our financial accounting and compliance with legal obligations, such as: archiving. In doing so, we process the same data that we process in the course of rendering our pre-contractual and contractual services as well as within our trading business. The processing principles are Art. 6 para. 1 lit. c. DSGVO, Art. 6 para. 1 lit. f. DSGVO. Furthermore, we process and store personal data in order to operate our business economically, recognize market trends and conduct market research, carry out marketing measures and assess the wishes of our contractual partners and users. For this purpose, we analyze the data we have on trading transactions, contracts, inquiries, other business transactions etc. We process contract data, usage data, inventory data, communication data and metadata on the basis of Art. 6 para. 1 lit. f. DSGVO, whereby the affected persons include our contractual partners, prospective customers, customers as well as users and visitors of our online offer or our trade portal. The analyzes serve us to increase the user-friendliness, the optimization of our offer and the business economy. The analyzes are for us alone and will not be disclosed externally unless they are anonymous, aggregated value analyzes. If such analyzes or profiles are personal, they will be deleted or anonymised upon termination of the user, otherwise after two years from the conclusion of the contract. Incidentally, the overall business analyzes and general trend provisions are created anonymously if possible. As part of the use of our online services and our trade portal, we store the IP addresses used and the time of their respective use. The storage is based on our legitimate interests, both to avoid the misuse, as well as an unauthorized use of our online services or our trade portal. A transfer of these data to third parties does not take place, unless it is to prosecute and enforce our claims. Art. 6 para. 1 lit. f. DSGVO required or there is a legal obligation gem. Art. 6 para. 1 lit. c. DSGVO. In addition, we do not process any special categories of personal data unless they are part of a processing contracted by our contractors or through our commercial transactions. We point out the necessity of providing personal data, if this is not evident to the contractual partners. Disclosure to external persons or companies will only be made if required in connection with the initiation and conclusion of trade agreements. When processing the data provided to us, we act in accordance with the instructions of the client and the legal requirements. The data is deleted if the data is no longer required for the fulfillment of contractual or legal duties of care and for handling any warranty and comparable obligations, whereby the necessity of keeping the data is reviewed every three years; otherwise the statutory storage obligations apply.
According to Art. 6 para. 1 lit. b. DSGVO, Art. 6 para. 1 lit. c. DSGVO and Art. 6 para. 1 lit. f. DSGVO we transfer company-related data, which may include personal data, to the following third parties for the following purposes:
to insurers, in particular trade credit insurers, for the purpose of obtaining insurance covers, which are the basis of our commercial transactions;
to banks, financial institutions, financial service providers and finance companies of all kinds, provided there is a legitimate interest in doing so
to credit bureaus for soliciting credit information concerning the respective company
to intermediaries, mediation platforms and financial portals, as far as necessary to obtain such offers, to submit offers, to correspondence or for any other contractual relationship with them.
to other partners not mentioned up to here, if this is necessary for the fulfillment of the contract
to financial administrations, consultants (such as accountants), auditors, and other fee and payment service providers.
We have concluded order processing agreements with the parties involved pursuant to Art. 28 DS-GVO. Data transfer to third countries: If processing by third-party services takes place outside the European Union or the European Economic Area, these must meet the special requirements of Art. 44 et seq. DS-GVO, or in the case of US companies of the so-called „Privacy-Shield“ , fulfill.
We, or our hosting provider, collects on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO Data on every access to the server on which this service is located (so-called server log files). To access data belong
IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which access takes place (referrer URL)
used browser, browser version, operating system of your computer, as well as the name of your access provider
Access Status / HTTP status code;
The collection of the data for the provision of the website and the storage of data in log files is essential for the operation of the website or for the purpose of the user-friendly, functional and secure delivery of our website to you with functions and content as well as their optimization and statistical evaluation. For security reasons, we store this data in server log files for the retention period of 30 days. After this period, they will be automatically deleted, unless we require their storage for evidence in attacks on the server infrastructure or other violations. Further storage may be made in individual cases if required by law.
Users can create a user account with us. As part of the registration, the required mandatory information is communicated to the users and based on Art. 6 para. 1 lit. b DSGVO processed for purposes of providing the user account. The processed data include in particular the login information (name, password and an e-mail address). The data entered during registration will be used for the purpose of using the user account. Users can access information relevant to their user account – e.g. technical changes – be informed by e-mail. If users have terminated their user account, their data will be deleted with respect to the user account, subject to a statutory retention obligation. It is the responsibility of the users to secure their data upon termination prior to the end of the contract. We are entitled to irretrievably delete all user data stored during the term of the contract. In the context of the use of our registration and registration functions as well as the use of the user account, the IP address and the time of the respective user action will be saved. The storage is based on our legitimate interests, as well as the user’s protection against misuse and other unauthorized use. A transfer of these data to third parties does not take place, unless it is necessary for the pursuit of our claims or there is a legal obligation in accordance with. Art. 6 para. 1 lit. c DSGVO.
When contacting us (for example, by contact form, e-mail, telephone or via social media), the information of the user to process the contact request and their processing acc. Art. 6 para. 1 lit. b) DSGVO processed. User information can be stored in a Customer Relationship Management System („CRM System“) or comparable request organization. We delete the requests, if they are no longer required. We check the requirement every two years; Furthermore, the legal archiving obligations apply.
You have the right,
pursuant to Art. 7 para. 3 DSGVO your once granted consent to revoke against us at any time. As a result, we are not allowed to continue the data processing based on this consent for the future;
in accordance with Art. 15 DSGVO, to request information about your personal data processed by us. In particular, you may provide information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right of rectification, deletion, limitation of processing or opposition, the existence of a The right to complain, the source of your data, if it was not collected from us, and the existence of automated decision-making including profiling and, where appropriate, meaningful information about their details;
pursuant to Art. 15 DSGVO to demand the correction of incorrect or complete personal data stored with us without delay;
in accordance with Art. 17 DSGVO, to require the deletion of your personal data stored with us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims is;
in accordance with Art. 18 GDPR to demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is illegal, you refuse their deletion and we no longer need the data, but you to assert, exercise or Defense of legal claims or you have lodged an objection to the processing pursuant to Art. 21 GDPR;
pursuant to Art. 20 DSGVO to receive your personal data provided to us in a structured, common and machine-readable format or to request the transfer to another person in charge and
to complain to a supervisory authority in accordance with Art.77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.
Applications sent electronically or by post to the company’s office will be processed electronically or manually for the purposes of completing the application process. We expressly point out that application documents with „special categories of personal data“ according to Art. 9 DS-GVO (eg a photo, which gives an indication of your ethnic origin, religion or your marital status), with the exception of any severe disability, which you wanting to disclose a free decision are undesirable. You should submit your application without this data. This does not affect your candidate chances. Legal bases for processing are Art. 6 para. 1 p. 1 lit. b) DS-GVO and § 26 BDSG n.F. If an employment relationship with the applicant is received after the completion of the application process, the applicant data will be stored in compliance with relevant data protection legislation. If no job is offered to you after completing the application process, your application letter and documents will be deleted 6 months after the cancellation has been sent in order to be able to satisfy any claims and proof obligations according to AGG.
a. The hosting services we use through mirumedia (mirumedia IT Services – Owner Michael Rudolph – Heeneser Weg 1 – D-36251 Ludwigsau) serve us for the following purposes: the provision of infrastructure and platform services, computing capacity, storage space and database services , E-mail, security and technical maintenance. Here we, or our hosting providers, process inventory data, contact data, content data, contract data, usage data, meta and communication data of contract partners, users, customers, interested parties and visitors of our online offers on the basis of our legitimate interests in an efficient and secure provision of our online offers acc. Art. 6 para. 1 lit. f DSGVO i. V. m. Art. 28 DSGVO (conclusion of contract processing contract). b. We use the following shipping service providers for e-mail and newsletter delivery:
Mailchimp (The Rocket Science Group, LLC – 675 Ponce de Leon Ave NE – Atlanta, GA 30308 USA),
Postmark (Wildbit, LLC – 225 Chestnut St – Philadelphia, PA 19106 USA)
c. You can subscribe to our newsletter with your voluntary consent by entering your e-mail address and confirming the „double opt-in procedure“. After you have registered, you will receive an e-mail from us confirming your registration with a confirmation link. Only after your click on this link will your e-mail be included in the newsletter mailing list and saved for the purpose of sending e-mails. To meet the legal requirements, we will log your IP address used when you log in, as well as the date and time of the double opt-in (login and confirmation). For the statistical analysis and optimization of our newsletters, we evaluate your user behavior (opening the newsletter, link clicks) with the help of so-called „web beacons“ or „tracking pixels“. At any time, you can object to the tracking and consent to sending the newsletter by clicking on the unsubscribe link at the end of the newsletter. In this case, the newsletter reception will also be terminated. If you disable the display of images in your e-mail software, tracking is also not possible. However, this may have limitations in terms of the features of the newsletter, and included images will not be displayed. We save your data as long as you have subscribed to the newsletter. After logging off, your data will only be stored anonymously for statistical purposes.
Session Cookies: We use so-called „cookies“ to recognize multiple uses of an offer by the same user (for example, to determine your login status when you log in). When you visit our site again, these cookies provide information to automatically recognize you. The information obtained in this way serves to optimize our offers and to give you easier access to our site. If you close the browser or log out, the session cookies will be deleted.
Persistent cookies: These are automatically deleted after a specified period, which may differ depending on the cookie. In the security settings of your browser, you can delete the cookies at any time.
Third party cookies (third party cookies):
Google Analytics (Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA, EU office: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) with IP anonymization enabled („anonymizeIP“) ), whereby the IP addresses are processed only shortened. In addition, the cross-device analysis of website visitors with so-called user ID. The IP address provided by Google Analytics within the framework of Google Analytics will not be merged with other data provided by Google. The use of Google Analytics is for the purpose of analyzing, optimizing and improving our website. The data sent by us and linked to cookies, user IDs (eg user IDs) or advertising IDs will be automatically deleted after 26 months. The deletion of data whose retention period has been reached is done automatically once a month.
Google Adwords with Conversion Tracking (Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA) This conversion tracking is for the purpose of analyzing, optimizing, and operating our advertising and website, by posting on third party websites by viewing our website Website is made aware. The full extent of the data processing is unknown to us. With a logged-in Google account, AdWords will allow the data to be associated with your account. If you do not want this, you’ll need to log out of Google before visiting our website.
Google & Google Adwords remarketing (Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA) Remarketing is designed to target previous visitors to our site to use third-party websites, including the economic operation of our advertising and website, as well as their analysis and optimization , The full extent of the data processing is unknown to us. According to Google, a collection of the data collected through remarketing with your personal data, which may be stored on Google, does not take place, but is processed by a pseudonym.
Embedded Youtube Videos (Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, United States, EU Office: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland) Watch videos via „Enhanced Privacy Mode“ embedded and does not affect your personal video recommendations. The data obtained is transferred to the USA and stored there. This is also done without a user account at Google. If you are logged in to your Google Account, Google may associate the above information with your account. If you do not want this, you will need to log out of your Google Account. Google creates user profiles from such data and uses this data for the purpose of advertising, market research or optimization of its websites.
We use social media plug-ins on our website as part of the so-called „two-click-solution“ collaboration from the following social networks:
Facebook (EU Headquarters: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland)
Twitter (Twitter Inc., 1355 Market St, Suite 900, San Francisco, California 94103, United States)
Xing (XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany)
When accessing our website, no personal data is transmitted to the providers of the plug-ins. Next to the social network logo or brand, you’ll find a slider that lets you activate the plug-in with a click. After activation, the respective provider of the social network receives the information (including your IP address) that you visited our website. In addition, your personal data will be transmitted to the provider of the plug-in and stored there. Using the functions of the plug-in, e.g. Pressing the „Like“ button, this information will also be transmitted from your browser to the Facebook servers in the US, stored there, and displayed in your Facebook profile and possibly your Facebook friends. The data collected about the user stores the plug-in provider as usage profiles. These are used for purposes of advertising, market research and / or customization of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the purpose of displaying demand-oriented advertising and to inform other users of the social network about the activities of the user on our website. The user is entitled to a right of objection to the formation of these user profiles, whereby one must turn to the exercise of this right to the respective plug-in provider.