Data Protection Policy.

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

You may send data protection requests to the contact details above. Please use the subject “Data protection request” so that your enquiry can be assigned promptly.

We process personal data only where this is necessary to operate the website, respond to enquiries, provide requested services, protect our systems or send communications for which you have registered.

Where information is stored on or accessed from your device, Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) also applies. Technically necessary storage or access is based on Section 25(2) TDDDG; all other storage or access requires your consent under Section 25(1) TDDDG.

When you access this website, the web server automatically processes technical information required to deliver the requested content and maintain the security and stability of the service. This may include:

• IP address of the requesting device
• Date and time of access
• Requested page, file or resource
• Referrer URL, where transmitted
• Browser type, browser version and operating system
• Transferred data volume and HTTP status code

The processing is based on Art. 6(1)(f) GDPR. Our legitimate interests are the secure, stable and efficient operation of the website, the detection of misuse and the investigation of security incidents.

Log data is normally deleted or anonymised after seven days. Data required to investigate a specific security incident may be retained until the incident has been fully resolved and any related legal claims have expired.

This website uses cookies and similar technologies where they are technically necessary or where you have given consent. Necessary technologies support core functions such as security, language selection and the storage of your privacy preferences.

We use the consent management solution Complianz to request, document and manage your privacy choices. In this context, consent status, time of consent, policy version and technical information required to assign the choice may be processed. The processing serves to comply with legal documentation obligations and is based on Art. 6(1)(c) GDPR in conjunction with Section 25(2) TDDDG.

You can change or withdraw your consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

If you contact us by form, email, telephone or another communication channel, we process the information you provide in order to handle your enquiry. Depending on the selected form, this may include your name, company, contact details, department or topic, message and any files you voluntarily provide.

If your enquiry concerns a contract or steps prior to entering into a contract, processing is based on Art. 6(1)(b) GDPR. In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the efficient handling and documentation of business enquiries. Where you have expressly consented, Art. 6(1)(a) GDPR applies.

Form submissions may also include limited technical data needed to prevent abuse and ensure secure transmission. We do not use this data for profiling.

Enquiries are deleted when they have been conclusively resolved and no statutory retention obligation or legitimate need for further storage applies. Business correspondence may be subject to statutory retention periods.

If you subscribe to our newsletter, we process your email address and the information required to document your registration. Registration uses a double opt-in procedure: after submitting the form, you must confirm the subscription through a link sent to your email address.

The legal basis for sending the newsletter is your consent under Art. 6(1)(a) GDPR. The logging of the registration and confirmation process is based on Art. 6(1)(f) GDPR. Our legitimate interest is to demonstrate that the subscription was obtained properly and to prevent misuse of email addresses.

Service provider

We use Mailchimp, a service of The Rocket Science Group LLC, a subsidiary of Intuit Inc., 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, to manage and send the newsletter. Mailchimp processes subscriber data on our behalf.

Newsletter measurement

Where you have consented to the relevant measurement, newsletters may contain technologies that allow us to determine whether a message was opened and which links were selected. We use this information to assess and improve newsletter content. The legal basis is Art. 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) TDDDG.

International data transfers

Data may be processed in the United States. Intuit Inc. and The Rocket Science Group LLC doing business as Mailchimp state that they are certified under the EU–U.S. Data Privacy Framework. Mailchimp also incorporates the European Commission’s Standard Contractual Clauses into its Data Processing Addendum as an additional transfer mechanism.

Further information is available in the Intuit privacy statement and the Mailchimp Data Processing Addendum.

Unsubscribing

You may withdraw your consent at any time by using the unsubscribe link in any newsletter or by contacting us. After unsubscribing, your address may be stored on a suppression list to ensure that no further newsletter is sent. This limited storage is based on Art. 6(1)(f) GDPR and serves to respect and document your withdrawal.

Locally hosted fonts and media

The fonts used on this website are hosted locally. Loading a page therefore does not create a connection to Google Fonts. Where possible, website images, videos and interface libraries are also delivered from our own web infrastructure.

External websites and social networks

Our website may contain ordinary links to external websites or social media profiles. No data is transmitted to the operator of the linked service merely because the link is displayed. Data is transmitted only after you actively select the link and leave our website. The privacy policy of the respective provider then applies.

Embedded content

If external content is embedded in individual cases, it is blocked until the required consent has been given. Once activated, the external provider may receive technical data such as your IP address, device and browser information and may use cookies or similar technologies. Details are shown in the consent dialog for the relevant service.

Within EKS InTec GmbH, personal data is available only to departments and employees who need it for the relevant purpose. We may also engage service providers for hosting, IT support, website operation, email delivery, newsletter distribution and other business functions.

Service providers acting on our instructions are bound by data processing agreements in accordance with Art. 28 GDPR where required. Personal data may also be disclosed where we are legally obliged to do so or where disclosure is necessary to establish, exercise or defend legal claims.

If personal data is transferred outside the European Economic Area, we ensure that the requirements of Chapter V GDPR are met. Depending on the recipient, this may be based on an adequacy decision under Art. 45 GDPR, appropriate safeguards such as Standard Contractual Clauses under Art. 46 GDPR, or a derogation under Art. 49 GDPR.

We retain personal data only for as long as necessary for the purpose for which it was collected. The relevant period depends on the type of data, the purpose of processing, contractual requirements and statutory retention obligations.

Once the purpose no longer applies, data is deleted or anonymised unless continued storage is required by law, necessary to establish, exercise or defend legal claims, or otherwise permitted under data protection law. Where data is retained only for these reasons, access is restricted accordingly.

Subject to the applicable legal requirements, you have the following rights:

Right to object

If processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time on grounds relating to your particular situation. We will then cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms or the processing is required for legal claims.

If personal data is processed for direct marketing, you may object at any time without stating reasons. The data will then no longer be processed for that purpose.

Automated decision-making

We do not use solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR in connection with this website.

You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR. You may contact the authority responsible for us or another authority competent under Art. 77 GDPR.

We may update this policy when legal requirements, our website or the services used on it change. The version published on this page applies. If a change requires renewed consent, we will request it through the consent management system.

Last updated: September 2026