Data Protection | evehome.com

Privacy policy

1. General

1.1 Personal data (Art. 4 No. 1 GDPR)

The subject of privacy are personal data (hereinafter referred to as "data"), including any information relating to an identified or identifiable natural person such as name, address, occupation, e-mail address, state of health, income, marital status, genetic characteristics, telephone number and, if necessary, user data such as the IP address.

1.2 Controller (Art. 4 No. 7 GDPR)

The controller for the processing of your personal data in the context of using the website www.evehome.com (hereinafter referred to as the "website") is Eve Systems GmbH (hereinafter referred to as the "operator" or "controller"). The contact details are as follows:

Eve Systems GmbH

Managing Director: Jerome Gackel, Lucy Han
Rotkreuzplatz 1, 80634 Munich, Germany
Phone: +49 (0) 89 143339 0
Fax: +49 (0) 89 143339 99
E-mail: [email protected]

1.3 Data protection officer

The controller has designated an external data protection officer, who can be reached at the following contact details:

MORGENSTERN consecom GmbH
Grosse Himmelsgasse 1
67346 Speyer
Germany
Phone: +49 (0) 6232 100 119 44

1.4 Opportunity to object

If you want to object to the processing of your data by the operator entirely or for individual measures in accordance with this privacy policy, you can use the contact details stated in the legal notice. Please note that in the event of such an objection, the use of the website and the retrieval of the services offered on the website may only be possible to a limited extent or not at all.

2. Scope and purposes of data processing, legal basis, provision of data and storage period

2.1 Access and use of the website

Whenever the website and its subpages are accessed, usage data are transmitted by the respective internet browser and stored in log files (server log files). The stored data records contain the following data:

date and time of access
name of the subpage accessed
IP address
referrer URL (original URL from which you have accessed the website)
data volume transferred
product and version information of the browser used

The admissibility of this processing is based on Art. 6 para. 1 b) GDPR, according to which the processing is lawful if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. The data processed by the operator are necessary to enable you to access and use the website. These data shall be processed necessarily during the use of a telemedium, otherwise you will not be able to access the website.

The log files are evaluated in anonymous form by the operator in order to further improve the website and make it more user-friendly, to find and rectify faults more quickly as well as to control server capacities. Therefore, it can be retraced at what time the use of the website is particularly popular and the operator can provide appropriate data volume.

The admissibility of this processing is based on Art. 6 para. 1 f) GDPR, according to which the processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The legitimate interest of the operator lies in providing a website with information and services to the customers and optimising the operation of the website.

Your IP address will be deleted or anonymised after termination of use. In the case of anonymisation, the IP addresses are changed in such a way that they can no longer be assigned to an identified or identifiable natural person or can only be assigned with a disproportionate large amount of time, costs and effort.

2.2 E-mail to the provider

There are several places where you can generate an e-mail addressed to the operator of the website by clicking.

The e-mail address linked to your e-mail program will automatically be used as the sender here. If you do not want your e-mail address to be retrieved in this way, you can change it in the settings of your respective e-mail program.

The admissibility of this processing is based on Art. 6 para. 1 b) GDPR, according to which the processing is lawful if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. The provision of data is necessary, otherwise you will not be able to send a message to the operator.

The personal data processed will be erased after expiry of the legal retention periods unless the controller has a legitimate interest in further storage. In any case, only those data that are absolutely necessary for the achievement of the respective purpose will continue to be stored. As far as possible, the personal data are anonymised.

2.3 Customer support

If you as a customer make a support request to us, your request will be processed and answered by the controller. In the support request, you can provide the following information regarding name, e-mail address, country, product, issue, and subject, as well as describe the issue in the comment field.

The admissibility of this processing is based on Art. 6 para. 1 b) GDPR if your request relates to the purchase or imminent purchase of one of our products.

If you submit a support request to us without having already purchased one of our products, the admissibility of the processing is based on Art. 6 para. 1 f) GDPR (legitimate interest). The legitimate interests pursued in this respect are the provision of a reliable support platform and the resulting more effective structuring of the work processes as a whole.

The provision of your personal data in the context of the customer support and its care is neither prescribed by law nor contractually. However, it is necessary to process your request. Without providing your personal data, your request cannot be processed.

The processed personal data will be deleted after expiry of the statutory retention obligations, unless the controller has a legitimate interest in further storage. In any case, only those data will continue to be stored that are actually required to achieve the corresponding purpose.

2.4 Newsletter and click tracking

You can subscribe to an e-mail newsletter in order to receive further information about the services of the operator. The so-called double opt-in procedure is used for sending the newsletter, i.e. you will only receive a newsletter by e-mail if you have previously expressly confirmed that the newsletter service is to be activated. After you have activated the newsletter, you will receive a notification e-mail, including an activation link. You will receive the newsletter only by clicking on this link. You can deactivate the newsletter at any time. For this purpose, please contact the operator or use the unsubscribe link provided in every newsletter. The admissibility of this processing is based on Art. 6 para. 1 b) GDPR, according to which the processing is lawful if the data subject has given consent to the processing of his or her personal data for one or more specific purposes. The provision of your data is voluntary, but necessary for receiving the newsletter.

Your data will be erased after withdrawal of your consent unless the controller has a legitimate interest in further storage. This may be the case if the operator has to continue to store your data due to a contract concluded with you. In any case, only those data that are absolutely necessary for the achievement of the respective purpose will continue to be stored.

You can withdraw your consent to this processing at the address mentioned above.

The newsletter is offered via a service based in the Federal Republic of Germany.

When sending the newsletter, the service provider tracks which links included in the newsletter were clicked by the recipients of the newsletter (click tracking).

The provision of your personal data is neither prescribed by law nor contractually. However, it is necessary for tracking purposes. Without providing your data, tracking is not possible.

You can withdraw your consent to this processing and the dispatch of the newsletter here.

Your personal data will be erased after expiry of the legal retention periods unless there is a legitimate interest in further storage.

2.5 Use of cookies

The operator uses so-called cookies, which are small data packets normally consisting of letters and numbers and stored on a browser when you visit certain websites. Cookies enable the website to recognise your browser, track you visiting various sections of the website and identify you when you return to the website. Cookies do not contain any data that identify you personally, but the information concerning you stored by the operator can be assigned to the data obtained from and stored in the cookies.

Information that the operator obtains from you using cookies can be used for the following purposes:

recognising the user’s computer when visiting the website
tracing the surfing activities of the user on the website
improving the user-friendliness of the website
evaluating the use of the website
operating the website
providing the "shopping cart" function
geolocation
preventing fraud and improving the security of the website
individual design of the website considering the needs of users

Cookies do not cause any damage on a browser. They neither contain any viruses nor allow the operator to spy on you. Two types of cookies are used:

temporary cookies are automatically deleted when your browser is closed (session cookies)
persistent cookies, in contrast, have a maximum lifespan of up to 20 days, which enable to be recognised when you return to the website

By using cookies, the operator is able to track your usage behaviour for the above-mentioned purposes and to an appropriate extent. Moreover, they shall enable you to optimise your surfing on the operator's website. This information is only collected in anonymised form. The admissibility of this processing is based on Art. 6 para. 1 f) GDPR, according to which the processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The legitimate interest of the operator lies in the optimised presentation of the website. The provision of data is necessary in order to be able to access the operator’s website without errors. If you disable the setting of cookies (e.g. in the browser settings) or delete cookies that have already been set, this can lead to functional restrictions of the website.

2.6 Registration as a customer and ordering in the online shop

If you register as a customer in the online shop, the following information shall be entered:

full name
e-mail address

If you order products in the online shop, the following information shall be entered:

full name
address
city
country
postal code
telephone number

The indication of the federal state is voluntary.

The data processed by the operator are required in order to create the customer account and to prepare and perform purchase contracts as well as to process your order.

The provision of your personal data is contractually prescribed. Without providing your personal data, a customer account cannot be created. In addition, no products can be ordered in the online shop.

Your personal data will be erased as soon as they are no longer required for fulfilling the purpose of the customer account or contract processing.

Personal data may be stored for a longer period of time if legal retention periods apply (for example, § 147 The Fiscal Code of Germany "AO"). Furthermore, personal data will be stored for a longer period of time if the controller has a legitimate interest in further storage, and your rights which concern the protection of personal data do not override. In any case, your personal data will only be stored for as long as they are necessary to achieve the respective purpose.

2.7 Comment feature

You can write comments on individual topics and contributions on the website. These comments will be published on the website. Personal data such as

name
pseudonym
e-mail address

are processed.

If you publish a comment, you have the possibility to do so using a pseudonym.

The processing of your personal data is permitted according to Art. 6 para. 1 f) GDPR. The controller has a legitimate interest in using the comment feature to publicly exchange information on topics and products with customers and interested parties of the company.

The publication serves the purpose of transparency and opinion making.

The provision of your personal data is neither prescribed by law nor contractually. However, it is necessary to comment on contributions on the website. Without providing the data, you cannot comment on the website.

Your personal data will be erased once the purpose for which they were processed no longer applies. As far as possible, your personal data are pseudonymised.

2.8 Matomo Analytics

The operator uses the web analysis service Matomo. Matomo uses Javascript to collect your user data when you access and use the website, including the date and time of your visit to the website, your click behaviour on the website and the browser used.

The operator will use this information to evaluate the use of the website and to constantly improve the user experience based on the evaluations.

The admissibility of this processing is based on Art. 6 para. 1 f) GDPR, according to which the processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller. The legitimate interests of the operator lie in the further development and optimisation of the website through the findings obtained in the context of Matomo’s evaluations as well as an improvement of the user experience based on these findings.

The provision of your personal data is necessary to access and use the website.

The personal data collected during the use of Matomo will be stored for an unlimited period of time. As far as possible, the personal data are anonymised.

2.9 Application

On the website, you have the option to open an e-mail addressed to the operator for application purposes. The e-mail address linked to your e-mail program is automatically used as the sender. If you do not want your e-mail address to be retrieved in this way, you can change it in the settings of your respective e-mail program.

The operator processes your data in order to carry out the application procedure and to reply to your message. The admissibility of this processing is based on § 26 German Federal Data Protection Act ("BDSG"), according to which personal data of employees may be processed for employment-related purposes where necessary for hiring decisions. If you do not provide the operator with the requested information and documents, the operator cannot consider you in the application procedure. The provision of the data is contractually prescribed.

Application documents received by the operator will be kept for 6 months after refusal unless the applicant has given consent for longer storage.

2.10 Trusted Shops
Trusted Shops Trust Badge

To display the Trusted Shops seal of approval and to offer the Trusted Shops membership to buyers after an order, the Trusted Shops trust badge is integrated on this website. This serves to preserve our legitimate interests, which override in the context of a weighing of interests, in the optimal marketing of our services according to Art. 6 para. 1 p. 1 lit. f GDPR. The trust badge and the services advertised using it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. When the trust badge is accessed, the web server automatically saves a so-called server log file, which contains, e.g. your IP address, date and time of access, transferred data volume as well as the requesting provider (access data) and documents the access. Such access data are not evaluated and are automatically overwritten at the latest seven days after termination of your website visit. Other personal data are only transferred to Trusted Shops if you have consented to this, decide to use Trusted Shops products after completing an order or have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.

Review reminder by Trusted Shops

If you have given us your express consent to this during or after your order according to Art. 6 para. 1 p. 1 lit. a GDPR, we will transfer your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany (www.trustedshops.de), in order that they send you a review reminder by e-mail. Your consent can be withdrawn at any time by sending a message to the contact described below or directly to Trusted Shops with effect for the future.

2.11 YouTube

YouTube videos are embedded on the website. The purpose of incorporating these videos is that you can watch videos containing information about the operator’s products on the website. The legal basis for incorporating YouTube videos is Art. 6 para. 1 f) GDPR. The operator has a legitimate interest in making videos available to users and visitors to the operator’s website.

YouTube videos are incorporated in the so-called "extended privacy mode". According to YouTube, this means that as long as the embedded video is not yet played, no personal data are transferred to Google (the operator of YouTube). According to YouTube, no personal data are transferred to YouTube when the video is played, unless you are logged in with your Google or YouTube account on the browser or device you are using. In this case, YouTube can recognize that you, as a visitor to the operator's website, have watched this video. You can prevent this by logging out of your YouTube or Google account.

The provision of personal data is neither prescribed by law nor contractually for watching YouTube videos.

2.12 Apple Pay / PayPal

If you place an order, you can choose between Apple Pay and PayPal as a method of payment. As the controller for privacy, we receive information about the method of payment you have chosen. We do not receive any further payment data.

The legal basis for the processing of the information provided is Art. 6 para. 1 b) GDPR as the processing is necessary to process the payment.

The provision of your personal data is contractually prescribed.

3. Right of access, to rectification, to erasure, to restriction, to object and to data portability

3.1 Right of access (Art. 15 GDPR)

The operator will provide you with information on request as to whether data concerning you are processed. The operator makes every effort to process requests for information quickly.

3.2 Right to rectification (Art. 16 GDPR)

You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you.

3.3 Right to erasure (Art. 17 GDPR)

You have the right to obtain from the operator the erasure of personal data concerning you without undue delay and the operator is obliged to erase personal data without undue delay where one of the grounds specified in Art. 17 para. 1 a)-f) GDPR applies.

3.4 Right to restriction (Art. 18 GDPR)

You have the right to obtain from the operator restriction of processing where one of the requirements specified in Art. 18 para. 1 a)-d) GDPR applies.

3.5 Right to object (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 e) or f) GDPR, including profiling based on those provisions. The operator shall no longer process the personal data unless the operator demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

You have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you which is carried out for scientific or historical research purposes or statistical purposes according to Art. 89 para. 1 GDPR, unless processing is necessary for the performance of a task carried out in the public interest.

Please use the contact address stated in the legal notice for your message.

3.6 Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you, which you have provided to the operator, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the operator to which the personal data have been provided, where the processing is based on consent pursuant to Art. 6 para. 1 a) GDPR, Art. 9 para. 2 a) GDPR or on a contract pursuant to Art. 6 para. 1 b) GDPR, and the processing is carried out by automated means.

4. Withdrawal of your consent

If you have given your consent to the processing of your personal data and withdraw it, the processing remains unaffected until withdrawal.

5. Right to complain

You have the right to lodge a complaint with the competent supervisory authority at any time.

6. Recipients

The data collected when you were accessing and using the website and the information you provided when contacting are transmitted to the operator’s server and stored there. In addition, your data can be transferred to the following categories of recipients:

persons at the controller’s premises who are involved in the processing (e.g. marketing department, personnel management, customer service)
processors (e.g. computer centre, IT service provider, software support, website hosting)
contractual partners of the operator (e.g. shipping service providers, payment service providers, banks, tax consultants, customer hotline)
public bodies (e.g. authorities)

7. Links to third-party websites

When you visit the website, content may be displayed that is linked to third-party websites. The operator has no access to the cookies or other functions used by third-party websites nor can control them. Such third-party websites are not subject to the privacy provisions of the operator.