Responsible Person as per Art. 4 para. 7 GDPR
EBS Technologies GmbH
Heinrich-Hertz Straße 4, D-14532 Kleinmachnow
Tel.: +49 (0) 33203 80 47 11
Telefax: +49 (0) 33203 80 47 12
We, EBS Technologies GmbH, are service provider within the meaning of the German Telemedia Act (Telemediengesetz) of the homepage under https://eyetronic-therapie.de/ and controller within the meaning of the General Data Protection Regulation (GDPR).
By this notice we instruct you how we handle your personal data when you visit our homepage.
This notice relates only to our homepage. The homepage may contain links to websites of other providers. Clicking on those links will cause you to leave our homepage. Please note that the following information applies exclusively to our homepage.
We process any personal data collected during your use of our homepage exclusively in the framework of our legal authority or on the basis of your consent.
Personal data means all data by which you can be identified or that can be traced to you. In addition to your name and e-mail address, personal data for example also includes your IP address.
We will never knowingly collect personal data from individuals under the age of sixteen (16) without first obtaining verifiable parental consent. If you are under the age of 16 you should not provide information to us. If we become aware that a person under 16 has provided personal data to us without verifiable parental consent, we will remove such personal data from our files.
Transfer of personal data to third parties
As a rule, your personal data collected by our homepage will not be transferred to third parties unless permitted by law or set forth specifically below herein – on in any future amendment and update of this Privacy Notice – and in the context of our use of Google Analytics and Google Maps.
Exceptions to this rule permitted by law are:
• If the transfer is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract (Art. 6 (1), letter b) GDPR);
• If you have given us explicit consent to do so (Art. 6 (1), letter a) GDPR);
• If processing is necessary for the pursuit of our legitimate interests and there is no reason to assume that you have an overriding interest in the non-transfer of the data that require protection (Art. 6 (1), letter f) GDPR); or
• If the transfer is necessary for compliance with a legal obligation to which we are subject (Art. 6 (1), letter c) GDPR).
Transfer to and processing by our IT service providers as our vicarious agents who make this homepage available on the Internet on our behalf is by law no transfer to “third parties”.
If data is transferred to organisations which are based in or whose data processing takes place in a jurisdiction which is not a member of the European Union or a member state of the European Economic Area (“EEA”), before transferring the data we will ensure that (unless a legally applicable exemption applies) that the recipient has an appropriate level of data protection in place (e.g. through a determination of adequacy by the European Commission, through appropriate guarantees such as the recipient being self-certified for the EU-US Privacy Shield, or an agreement in the form of the EU standard contractual clauses with the recipient).
EBS uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
In case of activation of the IP anonymization, Google will truncate/anonymize the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA.
On behalf of the website provider Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website provider. Google will not associate your IP address with any other data held by Google.
Furthermore you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available under https://tools.google.com/dlpage/ gaoptout?hl=en.
More information is available from Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland, Fax: +353 (1) 436 1001 and under:
http://www.google.com/analytics/terms/de.html http://www.google.com/intl/de/analytics/learn/privacy.html http://www.google.de/intl/de/policies/privacy.
Our website uses Google Maps API from Google. When using Google Maps on our website, user information and a user’s IP address will be transferred and stored on Google’s servers in the USA.
Under its data protection policy, Google may not pass this information on to third parties, but does make exceptions to this rule. This means that data collected in this way may be provided to a third party where such is required under USA legislation or where such data is processed by third parties on Google’s behalf. More information on Google Inc.’s data protection policy can be obtained from http://www.google.com/policies/privacy/.
You can also disable Google Maps to stop your personal data from being transmitted to Google. To do so, disable Java Script in your browser. Please note that doing so means that it will no longer be possible to use locator features using Google Maps.
Logging of access data
When you visit our homepage, the following personal data is transferred to our web server and retained in a log file:
• IP address of the device you use to visit the homepage
• Time of access to each individual page of the homepage
• Amount of data transferred to your device
• Files retrieved via the homepage
• URL of the page/website from which you reached the selected page
• Browser you are using (type and version)
• Operating system and version you are using
This data is retrieved and processed for the purposes of our legitimate interests (Art. 6(1), letter f GDPR) in presenting the homepage so that it meets the requirements of your device and/or browser, and/or to investigate and trace unauthorized attempts to access our IT.
We shall make additional use of your data only for statistical purposes only after it has been rendered anonymous. Rendering data anonymous makes it impossible to draw conclusions regarding your identity.
Log data will be retained for seven days and then deleted, unless it must be retained for a longer period to trace unauthorized access attempts.
The anonymized data derived from the log file is no longer personal data. We will use this data to prepare statistics to improve our homepage and we may transfer it to agencies we have hired to improve our homepage.
You can enter search terms under the <SEARCH> link in the top right corner of every page on our homepage, and the results of your search can be viewed directly on the individual pages of the homepage. The search terms you enter are used exclusively to perform searches on our homepage, are not transferred to us or to third parties and are deleted after seven days together with the web server log data.
In several locations on our homepage you may find forms you can use to contact us directly. We retain the data you enter in the contact form (such as name, e-mail address, subject and message text) and transfer it to the person in our firm responsible for establishing contact.
The staff member responsible for establishing contact receives this data by e-mail in his or her mailbox. It is retained there only as long as necessary for the handling of the matter that was the reason for the contact request.
Our homepage uses session cookies to speed up your browsing and to prevent you from having to enter data previously entered when you return to a Forms page. Cookies are small text files that are temporarily retained in your browser’s cookie memory and cannot be retrieved by third parties.
As a service provider we cannot read these cookies directly. The cookies can only be assessed and read by your browser when you return to a page on our homepage.
As soon as you close your browser the cookie data – depending on the cookies setting in your browser – is automatically deleted.
Your rights as a data subject
As a user of our homepage you have the right, on request, to be informed free of charge about which of your personal data we have retained. You can file repeated requests at reasonable intervals. You may also demand the rectification of incorrect data and the blocking or restriction of processing of your personal data.
If personal data provided by you have been retained, you may demand access to that data (right to data portability).
If you suspect that your personal data is processed illegally, you may lodge a complaint with the competent supervisory authorities.
If you request information on the personal data collected during use of our homepage, we can generally respond to your request only if you inform us of the IP address you used while accessing the homepage. An exception from this requirement is data that you have transferred to us indicating your name or your e-mail address (e.g. in the Contact form).
Also, you have the right to object to us using your personal data for user profiling, if this profiling activity causes a material negative impact for you.
Finally, as a user of our homepage, the law gives you the right to object to the processing of your personal data alltogether. You have to understand though that you must then stop using our homepage. A homepage cannot be operated on the World Wide Web without processing personal data (see the section on Log Files above).
Deletion of data / How long do we keep your personal information?
Your personal information is processed by us only for the period necessary for the purposes for which the information is collected, or where we are relying upon your consent until you withdraw that consent. When we no longer need to use your information for those purposes or if we are relying on your consent where you withdraw that consent, we will remove it from our systems and records or take steps to anonymise it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which we are subject).
You can ask us to erase your personal data provided that your request does not conflict with a legal obligation to retain it. If the data cannot be deleted because it is required for purposes permitted by law, processing of the data will be restricted. In that case the data will be made unavailable and not processed for any purposes other than those permitted.
Updates to our Privacy Notice
As our business changes from time to time, we sometimes need to make changes to the way we collect and use your personal information. Therefore, this Privacy Notice may be updated from time to time. If we make changes to this Privacy Notice, we will notify you of these changes by email and post an alert on the home page of our Website.
If you have questions about this instruction or concerning our use of your personal data, please contact our Data Protection Officer directly at: