Privacy policy
Data protection information
1 Controller responsible for data processing
2 Informational use
- IP address (network address)
- Address of the website from which you c
- ame Address of the retrieved files (retrieval address = URL)
- Date and time of a retrieval
- as well as the operating system and browser version of your end device (user agent) The data is stored in (technical) protocols (logs).
2.1 Storage period
2.2 Legal basis(s) for data processing
3 Cookies
We use cookies and similar technologies to enable certain functions within our websites. A cookie is a small package of information and consists of a pair of data, a key and a value. A cookie is managed by the browser on the user's end device and thus stored there. We may use cookies if they are absolutely necessary for the operation of our websites. We require your permission for all other cookie types. Some cookies are used by third-party providers that we have integrated into our websites.
You can find an overview of all cookies used, including the storage period and the corresponding legal basis, in our Consent Manager (cookie banner). You can also use this to manage your consent at any time. The Consent Manager is displayed automatically on your first visit.
You can also open it via an icon at the bottom left of the web pages.
4 Contact
When you contact us by email (incl. returns), contact form (incl. praise & criticism) or telephone and WhatsApp, the data you provide, e.g. your email address, your name, your telephone number and the content of the message, will be processed to clarify your request.
4.1 Storage period
We delete the data arising in this context after storage is no longer required for these purposes or restrict processing if there are statutory retention obligations (archiving obligations for business and commercial letters).
4.2 Legal basis(s) for data processing
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, pursuant to Art. 6 (1) (b) GDPR.
Alternatively, the processing is carried out in our and your interest in processing your request, pursuant to Art. 6 para. 1 lit. f) GDPR.
5 Shop
If you wish to order in our store, it is necessary for the conclusion of the contract and thus also for the creation of a customer account (MyENO account) that you provide your data, which we require for the processing of your order. Necessary mandatory information is marked separately, further information is voluntary.
Payment, credit check and shipping:
In order to process payments, we provide the payment data required for this purpose (e.g. name, invoice) to our bank and to the credit institution commissioned with the payment.
The payment method purchase on account is subject to a credit check, so that your master data is first transmitted to a credit agency. The credit check relates to your company and not necessarily to you as the person placing the order. As a rule, only in the case of smaller partnerships will your data as the “owner” be passed on directly to the credit agency for a credit check.
If it is necessary to ship your order, we will pass on the data required for this (e.g. name, address) to our shipping service provider or to the shipping service provider selected by you during the ordering process.
Further information on the payment and shipping service providers used as well as credit agencies can be found in the overview of integrated service providers further down in our data protection information.
5.1 Storage period:
In principle, we process your master data (MyENO account) for as long as you are registered with us in the store. You can delete your customer account at any time or instruct us to delete it.
Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of up to ten years.
5.2 Legal basis(s) for data processing:
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract, pursuant to Art. 6 (1) (b) GDPR.
Alternatively, the processing is carried out in our and your interest in processing your request, pursuant to Art. 6 para. 1 lit. f) GDPR.
A possible credit check of your company as the “owner” of a partnership (in the case of purchase on account) is carried out for our own protection, in accordance with Art. 6 para. 1 lit. f) GDPR.
The legal storage (archiving) of your address, payment and order data is based on legal obligations in accordance with Art. 6 para. 1 lit. c) GDPR. The legal obligation arises primarily from Section 147 of the German Fiscal Code (AO).
6 Newsletter
In the following section we inform you about the delivery of our newsletter.
6.1 ENO price list subscription
In order to receive our interactive ENO price list regularly, we need your consent and your e-mail address to which the newsletter is to be sent. Further information, such as your company, first and last name, your position in the company and your telephone number are also required for the order and the regular update of the price list.
Performance measurement:
We would like to point out that we can track the opening of the newsletter. To measure success, we link certain information in the HTML link with your e-mail address (possibly also with your first name and surname) and an individual ID. Such tracking is not possible if you refrain from opening links that are placed in the newsletter.
Revocation of your consent:
You can unsubscribe from our newsletter at any time by clicking on the corresponding link at the end of the newsletter.
6.1.1 Storage period
If you do not confirm your registration, your data will be deleted automatically. After a successful registration, your data will be stored for as long as you have subscribed to the newsletter.
In addition, we store your IP address and the time of registration and confirmation of the newsletter. The background to this is the required proof of your consent and, if necessary, the clarification of misuse of your data (e.g. a third party uses your e-mail address for registration without authorization). 6.1.2 Legal basis(s) for data processing
The processing of your data in the context of the delivery of our newsletter is based on your consent, Art. 6 para. 1 lit. a) GDPR.
The storage of more detailed information regarding the time of your registration and the IP address used is in our interest in providing proof of your consent, in accordance with Art. 6 para. 1 lit. f) GDPR.
6.2 Newsletter for existing customers
In order to inform our existing customers about current developments regarding comparable products and services, we process your e-mail address as well as your first and last name for the delivery of our newsletter for existing customers, which usually differs in content from the ENO price list subscription.
Performance measurement:
We would like to point out that we can track the opening of the newsletter. To measure success, we link certain information in the HTML link with your e-mail address (possibly also with your first name and surname) and an individual ID. Such tracking is not possible if you refrain from opening links that are placed in the newsletter.
Objection:
You can unsubscribe from the newsletter at any time by clicking on the corresponding link at the end of the newsletter.
6.2.1 Storage period
Your data will be stored for as long as you have subscribed to the newsletter.
6.2.2 Legal basis(s) for data processing
The processing of your data in the context of the delivery of our newsletter is in our and your interest to be regularly informed about current developments, in accordance with Art. 6 para. 1 lit. f) GDPR and § 7 para. 3 UWG.
7 Analysis (statistics) with Matomo
We use the open source software tool Matomo (formerly PIWIK) to analyze the surfing behavior of our users and to measure the success of our ENO price list subscription and, if necessary, when delivering further newsletters (opening clicks). By analyzing the data obtained, we are able to compile information about the use of the individual components of our store. This helps us to constantly improve user-friendliness. The software runs exclusively on our servers. This data is only stored there.
7.1 Web analysis
If individual pages of our store are accessed, the following data is stored:
3 bytes of the IP address of the user's accessing system (e.g.: 192.168.134.xxx)
the website accessed
the website from which you accessed the website (referrer)
the subpages that are accessed from the accessed website
the time spent on the website
the frequency with which the website is accessed
The software is set so that the IP addresses are not saved in full, but the last byte of the IP address is masked (e.g. 192.168.134.xxx). In this way, it is no longer possible to assign the shortened IP address to the calling computer.
No cookies or similar technologies are used.
7.1.1 Storage period
The (anonymized) data will be deleted after 720 days. 7.1.2 Legal basis(s) for data processing
The data processing is carried out in our interest in compiling information about the use of the individual components of our website in accordance with Art. 6 para. 1 lit. f) GDPR.
7.2 Newsletter performance measurement
In order to be able to measure the number of links opened in our ENO price list and possibly in other newsletters, we link these to your e-mail address.
7.2.1 Storage period
The data will be deleted after 720 days.
7.2.2 Legal basis(s) for data processing
ENO price list subscription:
The measurement of success takes place within the scope of your consent, pursuant to Art. 6 para. 1 lit. a) GDPR.
Existing customer newsletter:
The measurement of success takes place in the context of a balancing of interests, pursuant to Art. 6 para. 1 lit. f) GDPR.
Revocation and objection:
If you do not agree with our performance measurement, you can revoke the ENO price list subscription at any time or object to the delivery of a newsletter via the unsubscribe function.
8 Integrated service providers
Below you will find an overview of all service providers who are involved in the provision and further development of our websites and in enabling special functions.
|
Service provider
|
Purpose and legal basis
|
Notes
|
|
Hetzner Online GmbH
|
| Provision and administration of the IT infrastructure. |
| onacy GmbH
Martin-Luther-King Weg 30 48155 Münster |
| Content design and administration of the websites. |
| jsDelivr
(Content Delivery Network) https://www.jsdelivr.com/about |
| Only mandatory data, such as the IP address, is transmitted. Data processing also takes place in (insecure) countries outside the EEA (e.g. USA). |
| Unpkg
(Content Delivery Network) https://unpkg.com/ https://github.com/mjackson/unpkg |
| Only mandatory data, such as the IP address, is transmitted. Data processing also takes place in (insecure) countries outside the EEA (e.g. USA). |
| WhatsApp Ireland Limited
4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland |
| If communication via WhatsApp was initiated by you. The communication takes place outside our store (no active integration within the websites) and is end-to-end encrypted. Legal basis for processing outside the EEA: EU standard contractual clauses, available here. |
| Creditreform Osnabrück/Nordhorn Unger KG Bentheimer Str. 118 48529 Nordhorn |
| When purchasing on account, a credit check is usually carried out. This takes place outside the website. |
| DHL Paket GmbH
Sträßchensweg 10 53113 Bonn |
|
Only the data required for the delivery of your goods will be passed on.
|
| DHL Express Germany GmbH Heinrich-Brüning-Str. 5 53113 Bonn |
| Only the data required for the delivery of your goods will be passed on. |
| United Parcel Service Deutschland
S.à r.l. & Co. OHG (UPS) Görlitzer Straße 1 41460 Neuss |
| Only the data required for the delivery of your goods will be passed on. |
9 Social media platforms (outside our store)
In this section, we inform you about the processing of your data in connection with your visit to a social media site operated by us within an external social media platform.
9.1 Facebook (Meta)
We use Facebook and are jointly responsible with Facebook for the operation of our Facebook fan page. The Facebook fan page primarily serves as a communication platform for customers and interested parties.
We offer you the opportunity to comment on our posts, submit reviews or get in touch with us via Facebook Messenger. Your posts can be accessed by anyone worldwide on the Internet. However, only Facebook itself can access the content of Messenger communication, e.g. as part of IT administration.
We also receive statistical information from Facebook about the popularity of our Facebook fan page (e.g. number of page views, number of “likes”). Facebook is responsible for how this data is collected and processed. You can find more information about the “Insights data” at
https://www.facebook.com/business/a/page/page-insights
9.1.1 Controller responsible for data processing
https://www.facebook.com/privacy/policy?section_id=13-HowToContactMeta
Familiarize yourself with the data protection settings on Facebook (Meta) and only activate the cookies or data processing that you personally consider appropriate. Facebook (Meta) stores your data in user profiles and uses them to display personalized advertising, among other things.
9.1.2 Storage period
In principle, there is no fixed storage period for the publication of your posts, so we delete your data after storage is no longer necessary (the data that we can actually delete ourselves), or restrict processing if there are statutory retention obligations (e.g. the data transmitted to our email address via Facebook Messenger).
You can also delete your posts from our Facebook fan page yourself at any time.
9.1.3 Legal basis(s) for data processing
We operate our Facebook fan page in our own interest in order to communicate with customers, interested parties and users and to inform them about our offers, goods and events, in accordance with Art. 6 para. 1 lit. f) GDPR.
We process the statistical information “Insights data” provided by Facebook in our own interest to optimize our Facebook fan page, in accordance with Art. 6 para. 1 lit. f) GDPR.
In individual cases, the processing of your data may also be permitted in the context of a (pre-)contractual relationship (e.g. personal communication about one of our specific services via Facebook Messenger), in accordance with Art. 6 para. 1 lit. b) GDPR.
9.2 Instagram (Meta)
We use Instagram and are jointly responsible with Instagram for the operation of our Instagram fan page. The Instagram fan page primarily serves as a communication platform for customers and interested parties.
We offer you the opportunity to comment on our posts, share them, give them a “Like” or get in touch with us via the “Direct Messages” function. Your comments can be accessed by anyone worldwide on the Internet. However, only Instagram itself can access the content of Messenger communication, e.g. as part of IT administration.
In addition, we receive statistical information from Instagram about the popularity of our Instagram fan page (e.g. number of page views, number of “likes”). Instagram is responsible for how this data is collected and processed. You can find more information about the “Insights data” at
https://www.facebook.com/help/instagram/788388387972460/?helpref=uf_share
9.2.1 Controller responsible for data processing
We and Meta Platforms, Inc, 1601 Willow Road, Menlo Park, California, 94025, USA (operator of Instagram) are jointly responsible for our Instagram fan page. The representative of Meta Platforms, Inc. in the EU is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
Further information on data protection at Meta can be found at https://www.facebook.com/privacy/center
You can contact Meta's data protection officer here:
https://www.facebook.com/privacy/policy?section_id=13-HowToContactMeta
Familiarize yourself with the data protection settings at Instagram (Meta) and only activate the cookies or data processing that you personally consider appropriate. Instagram (Meta) stores your data in user profiles and uses them to display personalized advertising, among other things.
9.2.2 Storage period
In principle, there is no fixed storage period for the publication of your posts, so that we delete your data after storage is no longer necessary (the data that we can actually delete ourselves), or restrict processing if there are legal storage obligations (e.g. the data transmitted to our e-mail address via Instagram Direct Messages).
You can also delete your posts from our Instagram fan page yourself at any time.
9.2.3 Legal basis(s) for data processing
We operate our Instagram fan page in our own interest in order to communicate with customers, interested parties and users and to inform them about our offers, goods and events, in accordance with Art. 6 para. 1 lit. f) GDPR.
We process the statistical information “Insights data” provided by Instagram in our own interest to optimize our Instagram fan page, in accordance with Art. 6 para. 1 lit. f) GDPR.
In individual cases, the processing of your data may also be permitted in the context of a (pre-)contractual relationship (e.g. personal communication about one of our specific services via Instagram Direct Messages), in accordance with Art. 6 para. 1 lit. b) GDPR.
10 Your rights
You have the following rights vis-à-vis us with regard to the data concerning you
Right to information,
Right to rectification or erasure,
right to restriction of processing
and right to data portability.
10.1 Right to lodge a complaint with a supervisory authority
You also have the right to complain to a data protection supervisory authority about the processing of your data by us. The supervisory authority directly responsible for us is
https://www.lfd.niedersachsen.de/startseite/wir_uber_uns/kontakt_und_anfahrt/kontakt-anfahrt-56182.html
10.2 Right to object to direct advertising and processing in our legitimate interest
Insofar as we process your data exceptionally on the basis of Art. 6 para. 1 lit. f) GDPR (legitimate interests), you have the right to object to the processing of data concerning you at any time for reasons arising from your particular situation. If we cannot demonstrate compelling legitimate grounds for further processing which override your interests, rights and freedoms, or if we process your data for direct marketing purposes, we will no longer process your data (see Art. 21 GDPR). If we enable you to exercise your objection by technical means, we will inform you about this in the individual data processing operations above in our data protection information.
10.3 Right to withdraw consent given
You have the right to withdraw your consent to the collection and use of your data at any time with effect for the future. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
You can revoke or individually configure your cookie consent in our Consent Manager (cookie banner) 10.4 Contact options regarding your rights
You can contact us at any time to exercise your rights. The best way to do this is to use the following email address: datenschutz@eno.de You can also use one of the contact options in our legal notice or contact our data protection officer directly (contact details above).
Status: 11.06.2024