Privacy statement
The aim of this privacy statement is to provide you (the data subject) with comprehensive, transparent information about how we handle personal data. This includes information on the type, scope and purpose of the personal data we collect, use and process. Furthermore, this privacy statement aims to ensure that you understand your rights where your personal data are concerned.
1. Name and address of the controller responsible for data processing
The controller within the meaning of the General Data Protection Regulation (hereinafter referred to as the GDPR) is
ETON Deutschland Electro Acoustic GmbH
Pfaffenweg 21
89231 Neu-Ulm, Germany
(hereinafter referred to as "ETON")
2. Processing of personal data
In principle, our website etongmbh.com / www.eton-gmbh.com can be visited and used without providing any personal data. In these cases we only store general and statistical data relating to your visit. It may be necessary to provide personal data if you wish to take advantage of our company's special services via our website. Should it be necessary to process personal data and if there is no legal basis for such processing, we generally obtain consent for the specific processing from the data subject concerned.
The processing of personal data, such as names, addresses, e-mail addresses or phone numbers associated with a data subject, is always carried out in line with the GDPR and in accordance with the country-specific data protection provisions that apply to ETON and the processing operation in question.
a. General information about visits to our website
Each time our website is accessed by a data subject or an automated system, the site collects a range of general data and information. This general data and information are stored in server log files. The data that may be collected include (1) the browser type and version used, (2) the operating system used by the system accessing the site, (3) the website via which the system accessing the site reaches our website (i.e. a referrer), (4) the sub-websites accessed on our website by a system accessing the site, (5) the date and time at which the site is accessed, (6) the Internet Protocol address (IP address), (7) the internet service provider for the system accessing the site and (8) other similar data and information used for security purposes in the event of attacks on our IT systems.
We do not identify the data subject in our use of this general data and information. We solely use this data in order to correctly provide the contents of our website, to optimise the contents of our website and our associated advertising and to guarantee the long-term functionality of our IT systems and the technology we use for our website. This is anonymous data that is subject to statistical analysis alone. The anonymous data from the server log files is stored separately from all personal data supplied by data subjects.
b. Using the contact form
If, as a user of our website, you contact us by e-mail or using a contact form, the personal data you supply is stored automatically. Personal data that you voluntarily supply to us in this way is used for the purpose of processing your query and/or getting in touch with you. Your personal data is not shared with third parties.
c. Use of cookies on our website
The ETON website uses cookies. Cookies are text files placed and stored on a computer system by an internet browser.
In principle, it is possible to visit our website without accepting cookies. However, certain features may only be used with cookies activated. Cookies are used on our website in order to make your visits to the site as appealing as possible and to facilitate the use of certain features. Most of the cookies we use are deleted from your hard drive after the browser session ends (i.e. session cookies). Other cookies remain on your computer and allow us to recognise your computer on your next visit to our site (i.e. permanent cookies). These cookies allow us to greet you using your username and save you having to reinput your password or fill in forms with your information on subsequent visits. Our partner companies are not permitted to collect, process or use personal data collected from our website using cookies.
If you wish to prevent the use of cookies or delete existing cookies, please proceed as follows:
You can prevent the use of cookies at any time by changing the corresponding setting in the internet browser you use, thereby objecting to cookies being placed on your computer in all cases.
You can also delete any cookies that have already been set via your browser at any time. This option is available in the settings of commonly used browsers.
3. Storage periods for personal data
We process and store personal data only for as long as necessary in order to fulfil the purpose for which they are stored, or in the event that this is provided for in legislation or regulations by the European regulator or other legislator under whose jurisdiction the controller lies.
If the purpose of storage no longer applies or a storage period prescribed by the European regulator or other competent legislator expires, the personal data is, routinely and in accordance with the statutory requirements, either erased or processing thereof is restricted.
4. Rights of data subjects
You have the following rights as a data subject and you can contact us at any time if you wish to exercise them:
a) Right to confirmation
You have the right to obtain confirmation from ETON as the controller on whether relevant personal data is being processed. If you wish to exercise this right, you may contact our Data Protection Officer at any time using the contact details above.
b) Right to information
You have the right to obtain information from ETON as the controller responsible for processing data, at any time and without charge, regarding the personal data stored that concerns you personally, as well as a copy of this personal data. Furthermore, you have the right to information on whether personal data has been transferred to a third country or an international organisation. If this is the case, you also have the right to information about the appropriate safeguards taken in relation to the transfer.
If you wish to exercise this right, you may contact our Data Protection Officer at any time using the contact details above.
c) Right to rectification
You have the right to have any incorrect personal data that concerns you personally rectified without undue delay. Furthermore, you have the right to have incomplete personal data completed ‒ including by means of a supplementary statement ‒ taking into account the purposes of the processing.
If you wish to exercise this right, you may contact our Data Protection Officer at any time using the contact details above.
d) Right to erasure
You have the right to have ETON as the controller erase personal data that concerns you without undue delay, insofar as one of the following grounds applies and processing is not necessary:
- The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
- The data subject withdraws consent on which the processing was based on in accordance with Article 6(1a) or Article 9(2a) GDPR, and there is no other legal ground for the processing.
- The data subject objects to the processing in accordance with Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing in accordance with Article 21(2) GDPR.
- The personal data has been unlawfully processed.
- The personal data has to be erased in order to comply with a legal obligation in Union or Member State law to which the controller is subject.
- The personal data have been collected in relation to the offer of information society services in accordance with Article 8(1) GDPR.
Provided that one of the grounds above applies and you wish to arrange for the erasure of personal data stored by ETON, you may contact our Data Protection Officer at any time using the contact details above.
In the event that the personal data have been disclosed by ETON and our company is obliged as the controller to erase the personal data in accordance with Article 17(1) GDPR, ETON will take appropriate measures, including those of a technical nature and taking into account the available technology and costs of implementation, to make other parties responsible for processing the disclosed personal data aware that you as the data subject have demanded from these responsible parties the erasure of all links to this personal data or copies or replicas thereof, insofar as the processing thereof is not necessary. ETON will arrange the necessary measures on a case-by-case basis.
e) Right to restriction of processing
Every data subject affected by processing has the right to demand that the controller restrict the processing of their personal data in the event that one of the following conditions is met:
- The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
- The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
- The controller no longer needs the personal data for the purposes of processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.
- The data subject has objected to processing in accordance with Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
Provided that one of the grounds above applies and a data subject wishes to demand that the processing of personal data stored by ETON be restricted, they may contact an employee of the controller responsible for the data processing at any time for this purpose. The ETON employee will arrange for the restriction of processing.
f) Right to data portability
Each data subject affected by the processing of personal data has the right to obtain the personal data in question, provided to a controller by the data subject, in a structured, commonly used and machine-readable format. They also have the right to transmit the data to another controller without hindrance from the controller to which the personal data has been provided, as long as the processing is based on consent in accordance with Article 6(1a) or Article 9(2a) GDPR or on a contract in accordance with Article 6(1b) GDPR and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising their right to data portability in accordance with Article 20(1) GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, wherever technically feasible and provided that this does not adversely affect the rights and freedoms of others.
The data subject may contact an ETON employee at any time if they wish to exercise their right to data portability.
g) Right to object
Every data subject affected by the processing of personal data has the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them which is based on Article 6(1e) or Article 6(1f) GDPR. This includes profiling based on these provisions.
ETON will cease processing the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or where the processing is used for the establishment, exercise or defence of legal claims.
In cases where ETON processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing. This includes profiling, to the extent that it is related to such direct marketing. Where the data subject objects to processing for direct marketing purposes by ETON, ETON will cease to process the personal data for such purposes.
In addition, where personal data are processed by ETON for scientific or historical research purposes or statistical purposes in accordance with Article 89(1) GDPR, the data subject, on grounds relating to their particular situation, has the right to object to processing of personal data concerning them, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
The data subject may contact any ETON employee directly if they wish to exercise their right to object. In the context of the use of information society services, and irrespective of Directive 2002/58/EC, the data subject may also exercise their right to object by automated means using technical specifications.
h) Automated individual decision-making, including profiling
Every data subject affected by the processing of personal data has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them. This does not apply if the decision (1) is necessary for entering into, or performance of, a contract between the data subject and the data controller, or (2) is authorised by European Union or member state statutory provisions to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests or (3) is based on the data subject's explicit consent.
If the decision (1) is necessary for entering into, or performance of, a contract between the data subject and the data controller or (2) is based on the data subject's explicit consent, ETON will take suitable measures to safeguard the data subject's rights, freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision.
If the data subject wishes to exercise their rights with regard to automated decision-making, they may contact an employee of the controller responsible for the data processing at any time for this purpose.
i) Right to withdraw consent under data protection law
Every data subject affected by the processing of personal data has the right, conferred by the European regulator, to withdraw consent for the processing of their personal data at any time.
If the data subject wishes to exercise their right to withdraw consent, they may contact an employee of the controller responsible for the data processing at any time for this purpose.
5. Use of social media plug-ins
a. Facebook plug-in
The controller responsible for data processing has integrated components provided by Facebook on this website. Facebook is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. In the event that the data subject lives outside of the USA or Canada, the controller responsible for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If you access a webpage provided via such a plug-in on our website, this establishes a connection to Facebook servers and your browser is instructed to display the plug-in on the website. This informs Facebook servers which of our webpages you have visited. If you are logged in to your Facebook account at the same time, Facebook will match this information to your personal Facebook account. When you use the plug-in functions (e.g. clicking on a "Like" button, posting a comment), this information will be matched to your Facebook account as well. To prevent this from happening, log out of your Facebook account before using the plug-in. More detailed information about Facebook's collection and use of data and your associated rights and options for protecting your privacy can be found in Facebook's Data Policy.
If you do not wish Facebook to match the data collected via our website to your Facebook profile, you must log out of Facebook before visiting our website. You can also prevent Facebook plug-ins from being loaded outright using add-ons for your browser, such as the "Facebook Blocker" (http://webgraph.com/resources/facebookblocker/).
b. Google+ plug-in
We use the Google+ button on our website. Google+ is a social network. Google+ is operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time an individual page is accessed on this website ‒ which is operated by the controller responsible for the data processing and on which a Google+ button has been integrated ‒ the respective Google+ button automatically causes the internet browser on the data subject's IT system to download an image of the corresponding Google+ button from Google. As part of this technical process, Google receives information about which specific sub-websites on our website are visited by the data subject. More detailed information about Google+ can be found at https://developers.google.com/+/.
If the data subject is logged in to Google+ at the same time, Google identifies which specific sub-websites on our website are visited by the data subject, both each time our website is accessed by the data subject and throughout the duration of the respective stay on our website. This information is collected by the Google+ button and matched to the data subject's Google+ account by Google.
If the data subject does not wish their personal data to be transferred to Google, they can prevent such transfers by logging out of their Google+ account before accessing our website.
Additional information and the applicable Google Privacy Policy can be accessed at https://policies.google.com/privacy. Additional information about the Google+ button provided by Google can be found at https://developers.google.com/+/web/buttons-policy.
c. Instagram
We use links to Instagram's service on our website. Instagram services are operated by Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
Each time an individual page is accessed on this website ‒ which is operated by the controller responsible for the data processing and on which an Instagram component ("Insta-button") has been integrated ‒ the respective Instagram component automatically causes the internet browser on the data subject's IT system to download an image of the corresponding Instagram component from Instagram. As part of this technical process, Instagram receives information about which specific sub-websites on our website are visited by the data subject.
If the data subject is logged in to Instagram at the same time, Instagram identifies which specific sub-websites are visited by the data subject, both each time our website is accessed by the data subject and throughout the duration of the respective stay on our website. This information is collected by the Instagram component and matched to the data subject's Instagram account by Instagram. If the data subject uses one of the Instagram buttons integrated on our website, the data and information that are consequently transferred are matched to the data subject's personal Instagram user account and stored and processed by Instagram.
Additional information and the applicable Instagram Privacy Policy can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.
D. Pinterest
We use links to Pinterest's service on our website. Pinterest is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA.
Each time an individual page is accessed on this website ‒ which is operated by the controller responsible for the data processing and on which a Pinterest component (Pinterest plug-in) has been integrated ‒ the respective Pinterest component automatically causes the internet browser on the data subject's IT system to download an image of the corresponding Pinterest component from Pinterest. More information about Pinterest can be found at https://pinterest.com/. As part of this technical process, Pinterest receives information about which specific sub-websites on our website are visited by the data subject.
If the data subject is logged in to Pinterest at the same time, Pinterest identifies which specific sub-websites are visited by the data subject, both each time our website is accessed by the data subject and throughout the duration of the respective stay on our website. This information is collected by the Pinterest component and matched to the data subject's Pinterest account by Pinterest. If the data subject uses a Pinterest button integrated on our website, Pinterest matches this information to the data subject's personal Pinterest user account and stores this personal data.
The privacy policy published by Pinterest, available at https://about.pinterest.com/privacy-policy, contains information about the collection, processing and use of personal data by Pinterest.
6. Web tracking using Google Analytics
This website uses Google Analytics for online analysis purposes. Google Analytics is a web analytics service. Web analytics refers to the collection, compilation and evaluation of data concerning the behaviour of visitors to websites. A web analytics service collects data about the site from which a data subject is linked to a certain website (the referrer), which sub-websites on the website are accessed and how often and for how long sub-websites are viewed, among other data.
The Google Analytics component is operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The controller responsible for data processing uses the extension "_gat._anonymizeIp" for web analytics via Google Analytics. This extension is used by Google to shorten and anonymise the IP address of the data subject's internet connection when our website is accessed from a member state of the European Union or other states party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Google uses the data and information they obtain to evaluate use of our website in order to compile online reports showing activity on our website and in order to provide additional services relating to the use of our website, among other uses.
Google Analytics places a cookie on the data subject's IT system. The definition of cookies was described above. By placing this cookie, Google is able to analyse the use of our website. Each time an individual page is accessed on this website ‒ which is operated by the controller responsible for the data processing and on which a Google Analytics component has been integrated ‒ the respective Google Analytics component automatically causes the internet browser on the data subject's IT system to transfer data to Google for online analysis purposes. As part of this technical process, Google receives information about personal data such as the IP address of the data subject, which Google uses to trace the origin of visitors and clicks and subsequently facilitate commission billing, among other uses.
Cookies are used to store personal information, such as the time of access, location from which access originated and the regularity of visits to our website by the data subject. Each time our website is visited, these personal data, including the IP address of the internet connection used by the data subject, are transferred to Google in the USA. These personal data are stored by Google in the USA. Google may share these personal data, collected using the aforementioned technical process, with third parties.
The data subject can prevent the placement of cookies by our website, as set out above, at any time by adjusting the relevant setting in the internet browser they use, thereby objecting to cookies being placed on their computer in all cases. Changing the settings of the browser used in this way would also prevent Google from placing a cookie on the data subject's IT system. In addition, a cookie already placed by Google Analytics can be deleted at any time through an internet browser or alternate software program.
The data subject also has the option to object to collection of the data concerning use of this website generated by Google Analytics and the processing of these data by Google, and can prevent this from taking place. To do so, the data subject must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics, via JavaScript, that no data or information concerning visits to websites is permitted to be transferred to Google Analytics. The installation of this browser add-on is interpreted as an objection by Google. If the data subject's IT system is later erased, formatted or reinstalled, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. In the event that the browser add-on is uninstalled or deactivated by the data subject or someone else within their sphere of influence, there is the option to reinstall or reactivate the browser add-on.
Additional information and the applicable Google Privacy Policy can be accessed at https://policies.google.com/privacy and https://www.google.com/analytics/terms/gb.html. Google Analytics is explained in more detail at the following link: https://www.google.com/intl/en_uk/analytics/.
7. Forgoing automated decision-making
We do not use any automated decision-making processes, including profiling, as part of our website or online shop