Data Privacy

A. Data protection policy according to the DSVGO

I. Name and address of the party responsible

Essentry GmbH
Düsseldorfer Straße 15
65760 Eschborn
Germany
Phone.: +49 (0)619 69734090
E-Mail: support@essentry.com

is the responsible party within the meaning of the EU General Data Protection Regulation (GDPR) and other national data protection laws.

II. Name and address of the Data Protection Officer

The data protection officer of the party responsible is:

AGOR AG
Niddastraße 74
60329 Frankfurt am Main
Phone: +49 (0)69 949432410
E-Mail: datenschutz@essentry.com

III. General information on data processing

1. Scope of the processing of personal data

As a matter of principle, we collect and use personal data of the users of our homepage only to the necessary extent for the provision of a functional website, our contents, and services.

In principle, the collection and use of our users’ personal data only takes place with their consent. An exception to this principle applies in cases where the processing of data is permitted by legal regulations or where obtaining prior consent is not possible for actual reasons.

2. Legal basis for the processing of personal data

The legal basis for the processing of personal data results in general from the following:

Art. 6 para. 1 lit. a DSGVO when obtaining the consent of the person concerned.
Art. 6 para 1 lit. b DSGVO for processing operations that serve to fulfil a contract to which the data subject is a party. Included here are processing operations that are necessary for the implementation of pre-contractual measures.
Art. 6 para. 1 lit. c DSGVO for processing that is necessary to fulfil a legal obligation
Art. 6 para. 1 lit. d DSGVO, if vital interests of the data subject or another natural personal make it necessary to process personal data.
Art. 6 Abs. 1 lit. f DSGVO, if the processing is necessary to protect the legitimate interests of our company or a third party and the interests’ fundamental rights and freedoms of the data subject do not override the first-mentioned interest.

3. Data deletion and storage period

The users’ personal data will be deleted or disabled as soon as the purpose of the storage no longer applies. Storage beyond this may take place if this has been provided for by the European or national legislator in Union regulations, laws, or other provisions to which the person responsible is subject. The data will also be disabled or deleted if a storage period prescribed by the aforementioned standards expires unless there is a need to continue storing the data for the conclusion or fulfilment of a contract.

IV. Use of our website, general information

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the user’s computer system. The following information is collected:
(1) Information about the browser type and version used
(2) The user’s operating system
(3) The Internet service provider of the user
(4) The IP address of the user
(5) Date and time of access
(6) Websites from which the user’s system accesses our website
(7) Websites that are accessed by the user’s system via our website
The data described is stored in the log files of our system. No storage of this data takes place together with other personal data of the user.

2. Purpose and legal basis for data processing

The temporary storage of the IP address by our system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems.

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DSGVO.

The collection of your personal data for the provision of our website and the storage of the data in log files is necessary for the operation of the website. The user therefore has no right to object.

3. Duration of the storage

Your data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. If your data is collected to ensure the provision of the website, the data will be deleted when the respective session has ended.

If your data is stored in log files, it will be deleted after seven days at the latest. Storage beyond this period is possible, whereby the IP addresses of the users are deleted or alienated in this case. This means that it is no longer possible to identify the calling client.

4. Data transfer outside the EU

The GDPR ensures an equally high level of data protection within the European Union. When selecting our service providers, we therefore rely on European partners wherever possible when your personal data is to be processed. Only in exceptional cases will we have data processed outside the European Union in the context of using third-party services. We will only allow your data to be processed in a third country if the special requirements of Art. 44 et seq. DSGVO are fulfilled. This means that the processing of your data may then only take place on the basis of special guarantees, such as the officially recognized determination by the EU Commission of a level of data protection corresponding to the EU or the observance of officially recognized special contractual obligations, the so-called “standard data protection clauses”.

V. General information on the use of cookies

We use cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If you display a website; this is how a cookie can be stored on your operating system. This cookie contains a characteristic string that allows the browser to be clear when the website is accessed again.

We use cookies to make our homepage more user-friendly. Some elements of our website require that the browser has to be identified even after a page break.

The following data is stored and transmitted:

(1) Language settings
(2) Log-in information

The legal basis for the storage of cookies, device identifiers and similar tracking technologies or for the storage of information in the end user’s terminal equipment and access to this information is the European ePrivacy Directive in conjunction with the Telecommunications and Telemedia Data Protection Act (TTDPA; Ger.: TTDSG).

Please note that the legal basis for the processing of personal data collected in this context then results from the GDPR. The relevant legal basis for the processing of personal data in each specific case can be found below the respective cookie or the respective processing itself.

The primary legal basis for the storage of information in the end user’s terminal equipment – consequently in particular for the storage of cookies – is their consent, §25 Abs.1 S.1 TTDPA (Ger.: TTDSG). Consent is given when visiting our website – although this does not have to be given, of course – and can be revoked at any time in the cookie settings.

According to §25 Abs.2 Nr.2 TTDPA (Ger.: TTDSG), consent is not required if the storage of information in the end user’s terminal equipment or access to information already stored in the end user’s terminal equipment is absolutely necessary for the provider of a telemedia service to be able to provide a telemedia service expressly requested by the user. You can see from the cookie settings which cookies are to be classified as absolutely necessary (often also referred to as “technically necessary cookies”) and therefore fall under the exception of §25 Para.2 TTDPA (Ger.: TTDSG) and therefore do not require consent.

We would like to point out that some functions on our website can only be offered if cookies are enabled. This applies to the following applications:

(1) Adopting language settings
(2) Remembering keywords

We do not use user data collected by technically required cookies to create user profiles.

Cookies are stored on the user’s computer, which transmits them to our page. As a user, you therefore have control over the use of cookies. You can restrict or disable transmission of cookies by making changes to your Internet browser settings. Here you can also delete cookies that have been stored. Please note that you may not be able to use all the features on our website if you deactivate cookies.

The legal basis for the processing of personal data using cookies for analysis and advertising purposes is Art. 6 para. 1 s. 1 lit. a GDPR if the user has given his consent.

Cookie consent with borlabs

This website uses the provider Borlabs (Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany), which sets a technically necessary cookie (borlabs-cookie) to provide you with individual cookie settings and to document them in accordance with data protection laws. If our website is accessed, the following data is transmitted to borlabs: Your consent or revocation of your consent to set cookies, a cookie set by borlabs-cookie in your browser, the cookie runtime and version, domain and path of the website and the UID. Whereas the UID is a randomly generated ID and not personal information. Borlabs does not process any personal data.

The use of Borlabs cookie consent technology takes place in order to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 para. 1 s. 1 lit. c GDPR.

The borlabs-cookie cookie stores your consents that you gave when entering the website. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.

VI. Your rights / rights of the data subject

According to the EU General Data Protection Regulation, you have the following rights as a data subject:

1. Right of information

You have the right to receive information from us as the controller as to whether and which personal data concerning you are being processed by us, as well as further information in accordance with the legal requirements pursuant to Art. 13, 14 DSGVO.

You could assert your right to information at: support@essentry.com

2. Right of rectification

If the personal data we process and which concerns you is incorrect or incomplete, you have the right to have it corrected and/or completed. The correction will be made without delay.

3. Right to restriction

You have the right to restrict the processing of personal data concerning you in accordance with the legal provisions (Art. 18 DSGVO).

4. Right to erasure

If the reasons set out in Art. 17 of the GDPR apply, you may request that the personal data relating to you be deleted without delay.
We would like to point out that the right to erasure does not exist where processing is necessary for one of the exceptional circumstances mentioned in Art. 17(3).

5. Right to information

If you have exercised the right to rectification, erasure, or restriction of processing, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You also have the right to be informed about these recipients.

6. Right to data portability

Under the GDPR, you also have the right to receive the personal data provided to us concerning you in a structured, common, and machine-readable format or to request that it be transferred to another party responsible.

7. Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. We would like to point out that the revocation of consent does not affect the legitimacy of the processing carried out based on the consent up to the revocation.

8. Right to object

Furthermore, you have the right to object at any time, on grounds relating to your situation, to the processing of personal data relating to you which is based on Article 6(1)(e) or (f) DSGVO.

9. Automated decision in individual cases including profiling

Under the EU General Data Protection Regulation, you also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

10. Right to complain to a supervisory authority

Finally, if you consider that the processing of personal data concerning you violates the GDPR, you have the right to file a complaint with a supervisory authority, in particular in the Member State of your residence, workplace, or the place of the alleged infringement.

VII. Cookies

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. a DSGVO. Consent can be revoked at any time.

IP anonymisation

We have enabled the IP anonymisation function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. In exceptional cases only, the full IP address will be transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity.
Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=en.

Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” function of Google Analytics. This allows the generation of reports containing statements about the age, gender, and interests of site visitors. This data is obtained from Google’s interest-based advertising and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics, as described in the section “Objection to data collection”.

Storage period

Data stored by Google at user and event level that are linked to cookies, user IDs or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) are anonymised or deleted after 14 months. Details can be found under the following link:
https://support.google.com/analytics/answer/7667196?hl=en

Google Tag Manager

The Google Tag Manager is used on this website. The Google Tag Manager is a tool from Google Inc. that allows companies to manage website tags via an interface. The Google Tag Manager is a cookie less domain that does not collect any personal data. The Google Tag Manager triggers other tags, which in turn may collect data. We would like to point this out separately. The Google Tag Manager does not access this data. If a deactivation has been made by the user at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

HubSpot

On this website, we use the service HubSpot for various purposes. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Telephone: +353 1 5187500.
HubSpot is an integrated software solution that covers various aspects of our online marketing. These include, among others: Contact management (e.g., user segmentation & CRM), landing pages and contact forms.

Within the scope of processing via HubSpot, data may be transferred to the USA. The security of the transfer is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a level of security that corresponds to that of the GDPR. You can find further information at:
https://legal.hubspot.com/privacy-policy