PRIVACY POLICY

Personal data (hereinafter mostly referred to as "data") is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Article 4, point 1 of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy, we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or jointly with others. Furthermore, we inform you below about the third-party components we use for optimization purposes and to improve the user experience, insofar as these components process data under their own responsibility. Our privacy policy is structured as follows:

I. Information about us as the responsible parties
II. Rights of users and affected parties
III. Information on data processing

I. Information about us as the responsible parties
The responsible provider of this website within the meaning of data protection law is:

elwis management GmbH
Bavariafilmplatz 7
82031 Grünwald
Germany

Telephone: 49 (0)89/ 125 0096 90
E-mail: contact@elwis-management.de

Data Protection Officer: Andrea Rau

II. Rights of users and affected parties
With regard to the data processing described in more detail below, users and data subjects have the right

to confirmation as to whether data concerning them is being processed, to information about the processed data, to further information about the data processing and to copies of the data (see also Art. 15 GDPR);
to rectification or completion of inaccurate or incomplete data (see also Art. 16 GDPR);
to the immediate erasure of their personal data (see also Art. 17 GDPR), or, alternatively, insofar as further processing is necessary pursuant to Art. 17 para. 3 GDPR, to the restriction of processing in accordance with Art. 18 GDPR;
to receive the data concerning them and provided by them and to transmit this data to other providers/controllers (see also Art. 20 GDPR);
to lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).

Furthermore, the provider is obligated to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out pursuant to Articles 16, 17(1), and 18 of the GDPR. This obligation does not apply, however, if such notification proves impossible or involves a disproportionate effort. Notwithstanding this, the user has the right to information about these recipients.

Users and data subjects also have the right to object to the future processing of their data pursuant to Article 21 GDPR, provided that the data is processed by the provider in accordance with Article 6(1)(f) GDPR. In particular, an objection to data processing for direct marketing purposes is permissible.

III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, there are no legal obligations to retain the data and no other information is provided below regarding individual processing procedures.

Server data
For technical reasons, particularly to ensure a secure and stable website, your internet browser transmits data to us or our web hosting provider. This data, known as server log files, includes information such as the type and version of your internet browser, your operating system, the website from which you accessed our site (referrer URL), the pages you visit on our website, the date and time of each access, and the IP address of the internet connection used to access our website.

The data collected in this way will be stored temporarily, but not together with any other data from you.
This data is stored on the legal basis of Article 6(1)(f) GDPR. Our legitimate interest lies in improving the stability, functionality, and security of our website.

The data will be deleted no later than seven days after collection, unless further retention is required for evidentiary purposes. Otherwise, the data will be wholly or partially exempt from deletion until the incident is fully resolved.

Cookies
a) Session cookies
We use cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your device by your web browser. These cookies process certain information about you, such as your browser or location data, or your IP address. This processing makes our website more user-friendly, effective, and secure, as it enables features such as displaying our website in different languages or offering a shopping cart function. The legal basis for this processing is Article 6(1)(b) GDPR, insofar as these cookies process data for initiating or fulfilling a contract. If the processing does not serve the purpose of initiating or fulfilling a contract, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is Article 6(1)(f) GDPR. These session cookies are deleted when you close your web browser.

b) Third-party cookies
Our website may also use cookies from partner companies with whom we collaborate for advertising, analytics, or to enhance the functionality of our website. For details, particularly regarding the purposes and legal basis for processing such third-party cookies, please see the information below.

c) Elimination option
You can prevent or restrict the installation of cookies by adjusting your internet browser settings. You can also delete cookies that have already been saved at any time. However, the necessary steps and procedures depend on the specific internet browser you are using. If you have any questions, please use your browser's help function or documentation, or contact its manufacturer or support. Flash cookies, however, cannot be prevented via browser settings. Instead, you must change the settings of your Flash Player. The necessary steps and procedures for this also depend on the specific Flash Player you are using. If you have any questions, please use your Flash Player's help function or documentation, or contact its manufacturer or user support. Please note that preventing or restricting the installation of cookies may result in some features of our website not being fully functional.

Contract processing
The data you provide when using our goods and/or services will be processed by us for the purpose of contract fulfillment and is necessary for this purpose. A contract cannot be concluded or fulfilled without providing your data. The legal basis for this processing is Article 6(1)(b) GDPR.

We delete the data upon complete contract fulfillment, but must observe the statutory retention periods under tax and commercial law.

As part of the contract processing, we will forward your data to the transport company commissioned with the delivery of the goods or to the financial service provider, insofar as this is necessary for the delivery of the goods or for payment purposes. The legal basis for the transfer of data is then Article 6 Paragraph 1 Letter b) GDPR.

Newsletter
If you subscribe to our free newsletter, the data requested from you for this purpose, namely your email address and – optionally – your name and address, will be transmitted to us. At the same time, we store the IP address of the internet connection from which you access our website, as well as the date and time of your registration. As part of the further registration process, we will obtain your consent to receive the newsletter, describe its content in detail, and refer you to this privacy policy. We use the data collected solely for sending the newsletter – it will therefore not be passed on to third parties. The legal basis for this is Article 6 Paragraph 1 Letter a) GDPR.

You can withdraw your consent to receive our newsletter at any time with effect for the future, in accordance with Article 7 Paragraph 3 of the GDPR. To do so, simply inform us of your withdrawal or click the unsubscribe link included in every newsletter.

Contact requests/ Contact options
If you contact us via contact form or email, the data you provide will be used to process your request. Providing this data is necessary for processing and responding to your request; without it, we cannot respond to your request or can only do so to a limited extent. The legal basis for this processing is Article 6(1)(b) GDPR.

Your data will be deleted once your request has been fully answered and there are no legal retention obligations preventing deletion, such as in the case of any subsequent contract processing.

User contributions, comments and ratings
We offer you the opportunity to publish questions, answers, opinions, or reviews—hereinafter referred to as "contributions"—on our website. If you take advantage of this offer, we will process and publish your contribution, the date and time of submission, and any pseudonym you may have used. The legal basis for this is Article 6(1)(a) of the GDPR. You can withdraw your consent at any time with effect for the future in accordance with Article 7(3) of the GDPR. To do so, simply inform us of your withdrawal.

Furthermore, we also process your IP address and email address. The IP address is processed because we have a legitimate interest in taking or supporting further action if your contribution infringes the rights of third parties and/or is otherwise unlawful. The legal basis for this is Article 6(1)(f) GDPR. Our legitimate interest lies in the potentially necessary legal defense.

Subscription to articles
If you publish content on our website, we also offer you the option to subscribe to any subsequent posts from third parties. To inform you about these subsequent posts via email, we process your email address. The legal basis for this is Article 6(1)(a) GDPR. You can withdraw your consent to this subscription at any time with effect for the future in accordance with Article 7(3) GDPR. To do so, simply inform us of your withdrawal or click the unsubscribe link in the respective email.

LinkedIn
We maintain an online presence on LinkedIn to present our company and services and to communicate with customers/prospective clients. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

Therefore, we would like to point out that there is a possibility that user data may be processed outside the European Union, particularly in the USA. This may pose increased risks for users, as, for example, subsequent access to user data may be more difficult. Furthermore, we have no access to this user data. Access is solely controlled by LinkedIn.

LinkedIn Corporation is certified under the Privacy Shield and has therefore committed to complying with European data protection standards. https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

LinkedIn's privacy policy can be found at https://www.linkedin.com/legal/privacy-policy

Instagram
To promote our services and communicate with prospective and existing clients, we maintain a company presence on the Instagram platform. We are jointly responsible for this social media platform with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Instagram's data protection officer can be contacted via a contact form:

https://www.facebook.com/help/contact/540977946302970

We have regulated our joint responsibility in an agreement regarding our respective obligations under the GDPR. This agreement, which outlines our mutual obligations, can be accessed via the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the processing of personal data described below is Article 6(1)(f) GDPR. Our legitimate interest lies in the analysis, communication, sale, and promotion of our products and services. The legal basis may also be the user's consent pursuant to Article 6(1)(a) GDPR given to the platform operator. The user may withdraw this consent at any time for the future by notifying the platform operator, in accordance with Article 7(3) GDPR.

When you access our online presence on the Instagram platform, Facebook Ireland Ltd., as the operator of the platform in the EU, processes user data (e.g. personal information, IP address, etc.).

This user data is used to generate statistical information about the use of our company's Instagram presence. Facebook Ireland Ltd. uses this data for market research and advertising purposes, as well as for creating user profiles. Based on these profiles, Facebook Ireland Ltd. can, for example, target users with interest-based advertising both on and off Instagram. If the user is logged into their Instagram account when accessing our page, Facebook Ireland Ltd. can also link the data to that user account.

If a user contacts us via Instagram, the personal data they provide will be used to process their request. We will delete the user's data once their request has been fully processed and there are no legal retention obligations, such as those arising from subsequent contract processing.

Facebook Ireland Ltd. may also use cookies to process data. If the user does not agree to this processing, they can prevent the installation of cookies by adjusting their browser settings accordingly. Cookies that have already been stored can also be deleted at any time. The settings for this depend on the specific browser. Flash cookies cannot be prevented via browser settings, but rather by adjusting the settings of the Flash Player. If the user prevents or restricts the installation of cookies, this may result in some Facebook functions not being fully available.

Further details regarding the processing activities, their prevention, and the deletion of data processed by Instagram can be found in Instagram's data policy:

https://help.instagram.com/519522125107875

It is possible that the processing by Facebook Ireland Ltd. also takes place via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA. Facebook Inc. has committed to the EU-US Privacy Shield and thereby declares its compliance with EU data protection regulations when processing data in the USA. https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Linking to social media via graphic or text link
We also promote our presence on the social networks listed below on our website. This is done by embedding a linked graphic of the respective network. Using this linked graphic prevents an automatic connection to the respective social network's server when a website containing a social media promotion is accessed, which would otherwise occur to display the network's graphic. Only when the user clicks on the corresponding graphic are they redirected to the respective social network's service.

After the user is redirected, the respective network collects information about the user. It cannot be ruled out that the processing of this data takes place in the USA.

This initially includes data such as IP address, date, time, and the page visited. If the user is logged into their account on the respective network during this time, the network operator may be able to associate the collected information about the user's specific visit with their personal account. If the user interacts via a "Share" button on the respective network, this information can be stored in the user's personal account and potentially published. If the user wants to prevent the collected information from being directly associated with their account, they must log out before clicking the graphic. It is also possible to configure the respective user account accordingly.

The following social networks are integrated into our site via links:

LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA. Privacy Policy:https://www.linkedin.com/legal/privacy-policy

EU-US Privacy Shield certification https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

Instagram

On this social media platform, we are jointly responsible with Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA).

https://www.facebook.com/legal/terms/page_controller_addendum

EU-US Privacy Shield certification

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Source: Sample Privacy Policy the Law firm Weiß & Partner