We are delighted to welcome you to our website www.eurofactura.org and appreciate your interest in our organization and its offerings. We accept no liability for external links to third-party content, despite careful review, as we have not initiated the transmission of such information, nor have we selected or modified the recipient or the content of the information transmitted.
The protection of your personal data during its collection, processing, and use in connection with your visit to our website is a matter of great importance to us. All processing is carried out in accordance with applicable legal requirements, about which you can find further information at, for example, www.bfd.bund.de.
The following explains what information we collect during your visit to our website and how it is used:
1. Collection and Storage of Personal Data, and the Nature and Purpose of Its Use
a) When Visiting the Website
Each time a user (or any other visitor) accesses our website, the internet browser installed on their device (computer, laptop, tablet, smartphone, etc.) automatically transmits information to our web server. This information is temporarily stored in a log file.
The following data is collected automatically, without any action on your part, and stored until it is automatically deleted:
– IP address of the requesting device, as well as device ID or individual device identifier and device type,
– Name of the file accessed and volume of data transferred, as well as the date and time of access,
– Notification of successful retrieval,
– Requesting domain,
– Description of the type of internet browser used and, where applicable, the operating system of your device, as well as the name of your access provider,
– Your browser history data and standard weblog information,
– Location data, including location data from your mobile device. Please note that on most mobile devices, the use of location services can be controlled or disabled in the device’s settings menu.
Our legitimate interest pursuant to Art. 6(1)(1)(f) GDPR in collecting this data is based on the following purposes:
– Ensuring a smooth connection and a convenient browsing experience on the website,
– Evaluating system security and stability, and
– Other administrative purposes.
Under no circumstances do we use the collected data to draw conclusions about your identity.
b) When Using Our Contact Form
For inquiries of any kind, we offer you the option of contacting us via a form provided on the website. At a minimum, a valid phone number, email address, your name, and a proposed subject line are required so that we know who the inquiry is from and can respond to it. Additional information may be provided voluntarily.
The processing of data for the purpose of contacting us is carried out pursuant to Art. 6(1)(1)(a) GDPR on the basis of your voluntarily given consent.
The personal data we collect for the use of the contact form will be automatically deleted once the inquiry you submitted has been fully processed.
c) When Entering Into a Contractual Relationship
When entering into a contractual relationship on our website (e.g., registration on the website / platform, purchase in our online store, conclusion of a user agreement), we ask you to provide the following personal data:
– Data that personally identifies you, such as your name and email address, postal address, billing and delivery address, and phone number,
– Photos,
– Academic title,
– Data that identifies your company, such as company name, address, contact details (email address, phone and fax number), and, where applicable, VAT ID or tax number,
– Information about your payment method,
– Additional personal data that we are legally required or authorized to collect and process, and that we need for your authentication, identification, or to verify the data we have collected.
The data listed above is processed for the purpose of fulfilling the contractual relationship and — where necessary — passed on to the shipping service provider commissioned with the delivery. Data is processed on the basis of Art. 6(1)(b) GDPR. The retention period is limited to the purpose of the contract and, where applicable, statutory and contractual retention obligations.
Optional for data processing agreements: For personal data entered and stored after the order has been placed and the software configured / platform set up, the data processing agreement separately concluded between our clients and us applies.
d) Use of Payment Service Providers
For the payment of contracts concluded with us that involve a fee, we also work with payment service providers. Your payment data is passed on to the appointed payment service provider in the course of payment processing — solely for the purpose of processing the payment — insofar as this is necessary for payment processing. The legal basis for the transfer of data is Art. 6(1)(b) GDPR in each case.
e) When Registering for Our Newsletter
If you have given your explicit consent pursuant to Art. 6(1)(1)(a) GDPR, we will use your email address to send you our newsletter on a regular basis. You may unsubscribe at any time, for example via a link at the end of a newsletter. Alternatively, you may also send your request to unsubscribe at any time to help[at]eurofactura.de by email (preferably with the subject line: “Unsubscribe Newsletter”).
2. Disclosure of Personal Data
Your data will not be transferred to third parties for purposes other than those listed below. We only share your data with third parties if:
– You have given your explicit consent (Art. 6(1)(1)(a) GDPR),
– This is necessary for the fulfillment of contractual relationships with you (Art. 6(1)(b) GDPR),
– There is a legal obligation to disclose (Art. 6(1)(c) GDPR),
– The disclosure is necessary for the assertion, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed (Art. 6(1)(1)(f) GDPR).
In these cases, the scope of the data transferred is limited to the necessary minimum.
Our privacy practices comply with applicable data protection regulations, and data is processed exclusively within the Federal Republic of Germany. No transfer to third countries takes place or is intended.
3. Rights of Data Subjects
Upon request, we will be happy to inform you whether and which personal data relating to you is stored (Art. 15 GDPR), in particular regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected directly from you, and the existence of automated decision-making, including profiling.
You also have the right to have any inaccurately collected personal data corrected or incompletely collected data completed (Art. 16 GDPR).
Furthermore, you have the right to request that we restrict the processing of your data, provided the statutory requirements for this are met (Art. 18 GDPR).
You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format, or to request its transfer to another controller (Art. 20 GDPR).
In addition, you have the so-called “right to be forgotten,” meaning you may request that we erase your personal data, provided the statutory requirements for this are met (Art. 17 GDPR).
Regardless of the above, your personal data will be automatically erased by us if the purpose for which it was collected no longer applies or if processing was unlawful.
Pursuant to Art. 7(3) GDPR, you have the right to withdraw your consent at any time. This means that we may no longer continue the data processing based on that consent going forward.
You also have the right to object at any time to the processing of your personal data, insofar as a right to object is provided for by law. In the event of an effective withdrawal, your personal data will also be automatically erased by us (Art. 21 GDPR).
If you wish to exercise your right of withdrawal or objection, an email to help[at]eurofactura.de is sufficient.
In the event of violations of data protection regulations, you have the right pursuant to Art. 77 GDPR to lodge a complaint with the competent supervisory authority. The competent supervisory authority is both the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (https://www.ldi.nrw.de) and any other supervisory authority.
4. Duration of Data Storage
The data collected will be stored by us for as long as necessary to fulfill the contracts entered into with us, or until you exercise your right to erasure or your right to data portability to another organization.
5. Cookies
We use cookies on our website. These are small text files that your browser automatically creates and stores on your device when you visit our website.
Information is stored in the cookie that arises in connection with the specific device being used. This does not, however, mean that we immediately become aware of your identity.
The use of cookies first serves to make your experience with our offering more convenient: We use so-called session cookies to recognize that you have already visited individual pages of our website. If you have registered, your password is stored for the duration of your visit to our website and as you navigate between subpages, so that you do not have to re-enter it each time; similarly, items you have placed in your shopping cart are saved until you “proceed to checkout.” These session cookies are automatically deleted when you leave our website. In addition, we also use temporary cookies to optimize usability, which are stored on your device for a defined period of time. When you visit our site again to use our services, it is automatically recognized that you have been with us before and what inputs and settings you have made, so that you do not have to re-enter them.
We also use cookies to statistically record and evaluate the use of our website and to optimize our offering for you. These cookies allow us to automatically recognize, upon a repeat visit to our website, that you have been with us before. These cookies are automatically deleted after a defined period of time.
The data processed through cookies is necessary for the purposes stated above in order to protect our legitimate interests and those of third parties pursuant to Art. 6(1)(1)(f) GDPR. Most browsers accept cookies automatically. If you do not wish us to recognize information about your computer, please configure your internet browser to delete cookies from your hard drive, block all cookies, or warn you before a cookie is saved. You can find out how to delete or block cookies in the help and support section of your internet browser. There you will find instructions on how to locate the file or directory in which cookies are stored.
Please note in any case that completely disabling cookies may mean that you are unable to use all the features of our website.
If you leave our website via a link or by clicking on any banner advertising and thus arrive at a third-party site, that site’s operator may also set cookies. We are not legally responsible for these cookies. For information on the use of such cookies and the information stored on them by our advertising partners, please refer to their respective privacy policies.
Java applets and JavaScript are used in the provision of our online services. If you do not wish to use these tools or active content for security reasons, you should disable the relevant setting in your browser.
Google reCAPTCHA: We use the bot detection service “reCAPTCHA,” for example for entries in online forms, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
6. Online Marketing and Analytics Measures
We use online marketing measures and tracking tools on our website to analyze user behavior. This statistical data collection is intended to help us design our website to meet your needs, continuously adapt it for you as our user, and optimize its usability. The online marketing and tracking measures we use are employed on the basis of Art. 6(1)(1)(f) GDPR and § 15(3) TMG. Our stated interests are legitimate within the meaning of the aforementioned provisions.
a) Google Ads / Conversion Tracking
We use the online advertising program “Google Ads” and, within Google Ads, conversion tracking. Google Conversion Tracking is an analytics service provided by Google. When you click on an ad placed by Google, a cookie for conversion tracking is placed on your device. These cookies expire after 30 days, contain no personal data, and are therefore not used for personal identification. When you visit certain pages of our website and the cookie has not yet expired, both Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. Accordingly, cookies cannot be tracked across the websites of different Ads customers.
The information obtained through the conversion cookie is used to compile conversion statistics for Ads customers who have opted in to conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. They do not, however, receive any information that could be used to personally identify users. These purposes also represent our legitimate interest in the data processing. The legal basis for the use of Google Ads / Conversion Tracking is § 15(3) TMG in conjunction with Art. 6(1)(f) GDPR.
If you do not wish to participate in tracking, you may object to this use by preventing the installation of cookies from the domain “googleadservices.com” through the appropriate settings in your browser software (opt-out option). You will then not be included in the conversion tracking statistics. For further information and Google’s Privacy Policy, please visit: http://www.google.com/policies/technologies/ads/ and http://www.google.de/policies/privacy/.
b) Google Web Fonts and Font Awesome
This website uses so-called web fonts provided by Google Inc. for the consistent display of typefaces. When you access our website, your browser loads the required web fonts from Google and Fonticons into its browser cache in order to display text and fonts correctly. For this purpose, the browser you are using must establish a connection to Google’s and Fonticons’ servers. This enables Google and Fonticons to obtain information that our website was accessed via your IP address. The use of these web fonts is in the interest of a consistent and visually appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If your browser does not support web fonts, a default font from your computer will be used.
For further information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and Google’s Privacy Policy at https://www.google.com/policies/privacy/. For further information about Font Awesome, please visit https://fontawesome.com/help and the privacy policy of Fonticons, Inc. at https://fontawesome.com/privacy.
7. Google Maps API Services
To display routes and location information on our website, we use various services provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). These include Google Maps, Google Maps Directions, Distance, Geocoding, and Geolocation. These Google-provided services are each integrated into our website via API interfaces. As the operator of our website, we have no knowledge of whether or which data is transmitted to Google when using the Google Maps services. The terms of use and privacy policies of Google apply to the use of these services; we have linked to them accordingly.
8. Links to Our Social Media Profiles
Our website includes links to our profiles on social networks (Google+, Facebook, Twitter, Instagram, LinkedIn, and Xing). We draw your attention to the fact that these are links only, which redirect you to our profiles on the respective networks; they are not so-called plugins, which would, for example, allow you to “share” or “like” content from our website within those networks. To the best of our knowledge, it is technically not possible for social networks to collect personal data on our website through mere links. For the purpose and scope of data collection after you have been redirected, please refer to the privacy information of the respective network.
a) Facebook
Our website may use social plugins (“Plugins”) from the social network facebook.com, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA (“Facebook”). When you open our website with the plugin enabled, your browser establishes a direct connection to Facebook’s servers. This transmits to Facebook the information that you have accessed our page. If you are logged into your Facebook account, clicking the plugin may directly link your visit to our website to your profile. Even if you do not have a profile, it cannot be ruled out that your IP address will be stored by Facebook. For the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your related rights and privacy settings, please refer to Facebook’s privacy policy (https://www.facebook.com/about/privacy/).
If you are a member of Facebook and do not wish Facebook to collect data about you through our online offerings and link it to your member data stored on Facebook, you must log out of Facebook and delete the relevant Facebook cookies before visiting our website. It is also possible to block Facebook social plugins using browser add-ons, for example with the “Facebook Blocker.”
b) Twitter
Our website may include features of the Twitter service. These features are offered by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Retweet” function, the websites you visit are linked to your Twitter account and made known to other users. In the process, data is also transferred to Twitter. We draw your attention to the fact that, as the operator of our website, we receive no knowledge of the content of the transmitted data or its use by Twitter. For further information, please refer to Twitter’s Privacy Policy at http://twitter.com/privacy. You can change your privacy settings on Twitter in your account settings at http://twitter.com/account/settings.
To prevent Twitter from collecting data when you visit our website, log out of Twitter before your visit. To prevent Twitter from accessing your data across websites in general, you can block Twitter social plugins using a browser add-on (e.g., “Twitter Blocker,” https://disconnect.me).
c) Pinterest
Our website may include plugins from the social network Pinterest (Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA). Clicking the “Pin it” button establishes a connection to Pinterest’s servers. The plugin transmits log data to Pinterest’s server in the USA. This log data may include your IP address, the address of the websites visited that also contain Pinterest features, the type and settings of your browser, the date and time of the request, your use of Pinterest, and cookies.
If you are logged into your Pinterest account, clicking the “Pin it” button may directly link your visit to our website to your profile. Even if you do not have a profile, it cannot be ruled out that your IP address will be stored by Pinterest. Pinterest may thereby associate visits to these pages with your user account. To prevent Pinterest from collecting data when you visit our website, you must log out of your Pinterest account before clicking the “Pin it” button.
For further information, including information about privacy settings, please refer to Pinterest’s privacy policy: https://about.pinterest.com/de/privacy-policy.
d) YouTube
Our website may use plugins from YouTube (owned by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When you open our website, your browser establishes a direct connection to YouTube’s servers. This transmits to YouTube the information that you have accessed our website. If you are logged into your YouTube account, your visit to our website and all of your interactions in connection with the plugin (e.g., clicking the YouTube button) may be linked to your YouTube profile and stored on YouTube — even if you do not have a YouTube profile, it cannot be ruled out that YouTube stores your IP address. Please also refer to YouTube’s Privacy Policy in this regard: https://www.google.de/intl/de/policies/privacy/.
To prevent YouTube from collecting data when you visit our website, log out of YouTube before your visit. To prevent YouTube from accessing your data across websites in general, you can block YouTube plugins using a browser add-on (e.g., https://www.youtube.com/user/disconnecters).
e) SoundCloud
Our pages may include plugins from the social network SoundCloud (SoundCloud Limited, Berners House, 47-48 Berners Street, London W1T 3NF, United Kingdom). You can recognize the SoundCloud plugins by the SoundCloud logo on the relevant pages. When you visit our pages, a direct connection is established between your browser and the SoundCloud server once the plugin has been activated. SoundCloud thereby receives information that you visited our page from your IP address. If you click the “Like” or “Share” button while logged into your SoundCloud user account, you can link and/or share the content of our pages with your SoundCloud profile. This enables SoundCloud to associate your visit to our pages with your user account. We draw your attention to the fact that, as the operator of our pages, we receive no knowledge of the content of the transmitted data or its use by SoundCloud. For further information, please refer to SoundCloud’s privacy policy at: https://soundcloud.com/pages/privacy.
If you do not wish SoundCloud to associate your visit to our pages with your SoundCloud user account, please log out of your SoundCloud user account before activating any SoundCloud plugin content.
f) Spotify
Our pages may include features of the music service Spotify. The provider is Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. You can recognize the Spotify plugins by the green logo on our page. An overview of Spotify plugins is available at: https://developer.spotify.com.
When you visit our pages, a direct connection may be established between your browser and Spotify’s server via the plugin. This provides Spotify with the information that you visited our page from your IP address. If you click the Spotify button while logged into your Spotify account, you can link the content of our pages to your Spotify profile. This enables Spotify to associate your visit to our pages with your user account.
For further information, please refer to Spotify’s Privacy Policy: https://www.spotify.com/de/legal/privacy-policy/.
If you do not wish Spotify to associate your visit to our pages with your Spotify user account, please log out of your Spotify user account.
9. Data Security
We strive to implement all necessary technical and organizational security measures to store your personal data in a manner that prevents access by unauthorized third parties or the public. If you wish to contact us by email, we draw your attention to the fact that the confidentiality of the information transmitted cannot be fully guaranteed via this communication channel. We therefore recommend sending us confidential information exclusively by postal mail.
10. Currency and Amendments to This Privacy Policy
This Privacy Policy is currently valid and dated June 2018. As our website and offerings evolve, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. The current version of the Privacy Policy can be accessed and printed at any time on the website at https://www.eurofactura.org/datenschutz.
11. Name and Contact Details of the Controller and the Data Protection Officer
This privacy information applies to data processing by:
Controller: eurofactura – Verein zur Förderung der E-Rechnung in Europa e.V., Sudbrackstraße 17, 33611 Bielefeld, Tel. +49 (521) 520 171 40, email office[at]eurofactura.org
Data Protection Officer: Axel Veil, c/o OXSEED logistics GmbH, Sudbrackstraße 17, 33611 Bielefeld, email A.Veil[at]obwyse.com