Your personal data (e.g. title, name, address, personal email address, telephone number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). This document provides information about how, for what purposes and for how long we process which of your data, to which recipients we may pass your data, on what legal basis this is done and your rights with regard to this data processing. This privacy policy refers exclusively to our above website. If you are redirected to other sites through links built into our pages, please inform yourself there about the respective handling of your data.
A. Data controller:
Esbit Compagnie GmbH
Zippelhaus 3
20457 Hamburg
Tel: 040 – 85 31 06 50
esbit@esbit.de
Represented by the directors: Philip Paap and Robert Paap
B. Visiting our website
When you visit our website, the following data is processed, depending on which functions you use:
I. Accessing the website
When you visit our website www.esbit.de information is automatically sent to the server of our website by the browser used on your terminal device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion:
- Address (URL) of the page/file accessed
- Browser and browser version
- Operating system
- Address (URL) of the previously visited page (referrer URL)
- Host name and IP address (anonymised) of the requesting computer/server
- Date and time
The above data will be processed by us for the following purposes:
- Ensuring smooth connection of the website,
- Ensuring comfortable use of our website,
- Evaluation of the security and stability of the system,
- Tracking of unauthorised or illegal access.
The above log data is stored anonymously for 7 days.
The legal basis for the above data processing is Art. 6 para. 1 s. 1 lit. f GDPR. Our legitimate interest results from the above purposes of data collection. In this context, we do not use the collected data for the purpose of drawing conclusions about your person.
II. Use of the contact form
On our website you have the possibility to call up a contact form and get in touch with us.
1. Private persons
If you use our contact form as a private person, it is necessary to provide your first and last name, a valid email address, your country of residence, your postcode and the subject and your message… so that we know who the request is from and what the content is and so that we can answer it satisfactorily.
2. Companies
When you access our contact form for companies, you must provide your first and last name, the name of the company, the country, an email address and the subject and your message. Optionally, you can also provide your website or the company’s website.
3. Storage period
We store this data until your request has been fully processed. If no contract is concluded, the data will be automatically deleted after 15 months at the latest. Longer-term storage only takes place with your express consent.
4. Legal basis
The processing of the personal data provided by you in the context of this contact takes place on the basis of Art. 6 para. 1 s. 1 lit. b GDPR in the interests of the fulfilment of your request.
III. Data processing using cookies
We use cookies on our website.
1. General information
A “cookie” is a – usually small – amount of data that your browser automatically creates and that can be stored in a text file on your terminal (laptop, tablet, smartphone or similar) when you visit our website. Cookies do not cause any damage to your terminal and do not contain viruses, Trojans or other malware.
In the cookies, information is stored that arises in each case in connection with the specific terminal you use. However, this does not mean that we obtain direct knowledge of your identity.
2. Necessary cookies – usable without consent
Cookies, which also store your personal data listed above under III., are technically necessary for the use of our website. These cookies are deleted when you close the browser.
The use of these cookies is justified under Art. 6 para. 1 p. 1 lit. b GDPR in order to be able to present our website to you appropriately.
3. Web analysis with Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
a) Purpose of processing
Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website on our behalf, compiling reports/statistics on website activity and providing other services relating to website activity and internet usage to us.
However, due to the activation of IP anonymisation on this website, your IP address will first be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.
The data will be stored for 24 months.
b) Legal basis – Consent
This processing only takes place with your consent and is then justified under Art. 6 para. 1 s. 1 lit. a GDPR.
c) Transfer to a third country
Google Ireland Limited is an affiliated company of Google LLC. Google LLC has its headquarters in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043). The level of data protection in the USA is considered insufficient with regard to the requirements of the GDPR. However, we would like to point out that we have selected the “IP address anonymisation” function for Google Analytics so that your IP address is not transmitted in full. You can find more information on this at: https://support.google.com/analytics/answer/2763052?hl=de
Please also note the terms of use and the privacy policy of Google: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
User conditions: http://www.google.com/analytics/terms/de.html, Privacy overview: Latest major version 7.0 – 01 April 2021
https://www.google.com/intl/de/analytics/learn/privacy.html as well as the data protection regulations: https://www.google.de/intl/de/policies/privacy.
d) Withdrawal
You can withdraw your consent to the use of Google Analytics at any time here:
Change cookie settingsYou can also prevent the storage of cookies by making the appropriate settings in your browser software.
However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
4. Dealer searches
We offer you the possibility to search for dealers on our website esbit.de. This results in the following data processing:
a) Indication of the availability of goods
For the function of retrieving the availability of goods “Lokale Händler/local shops” as well as “Online kaufen/buy online” we use the component OUTTRA of 81 MEDIA GmbH, Ziegelbrennerstr. 5, 73074 Stuttgart. In order to display this function, the component requires a query of the IP address you are using. The component initially only uses your IP address to send corresponding information to your browser or to you. The IP address is therefore required for the display of this function.
In order to be able to display the availability of the product you have selected through the “Lokale Händler/local shops” function, your IP address is anonymised on OUTTRA’s server. Based on the anonymised IP address, a database query is performed that allows approximate determination of your location based on the non-anonymised part of the IP address. As a result, local retailers are displayed on the website.
The legal basis for the above processing of personal data is Art. 6 (1) lit. f GDPR. Our legitimate interest is the sale and promotion of the products and services and the related functionality of the website.
If the retrieval of the availability of goods serves the initiation of a contract, the legal basis is Art. 6 para. 1 lit. b GDPR.
In principle, you can object to the future processing of data concerning you, which is based on Art. 6 (1) f GDPR, at any time in accordance with Art. 21 GDPR. The objection may in particular be directed against the processing for direct marketing purposes.
After the visitor has ended the browser session, no personal data is stored by the component or 81 MEDIA GmbH.
b) Google-Maps
To display the location of local dealers who carry the product you are looking for, the “Google Maps” component of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”, is used.
When displaying the dealer locations through the “Google Maps” component, a connection to a Google server is established to display the map. Through the connection, Google can recognise from which website a request is sent and to which IP address the display of the directions is transmitted.
It cannot be excluded that external servers of Google in the USA are used for this purpose.
The legal basis for this is Art. 6 para. 1 lit. a GDPR. Consent is given by activating the button “Use my location” or by entering a postcode and activating the button “Continue”. The consent can be revoked at any time here:
Change cookie settingsIt is also possible to stop the Google Maps service by deactivating JavaScript in the browser. Please note that in this case the map display can no longer be used.
Your attention is drawn to the following: According to the data protection regulators, the USA does not currently have an adequate level of data protection. However, so-called standard contractual clauses exist between the provider and Google:
https://privacy.google.com/businesses/compliance/#!#gdpr
Nevertheless, these are private law agreements which have no direct impact on the accessibility of the authorities in the US.
The use of “Google Maps” and the information obtained through “Google Maps” is subject to the Google terms of use and the additional terms for Google Maps. Further information, in particular on the possibilities of preventing the use of the data, is provided by Google under the following links: https://policies.google.com/privacy
4. Deactivating cookies
Most browsers accept cookies automatically. However, you can set your browser so that no cookies are stored on your computer or that a message always appears before a new cookie is created. On the other hand, the complete deactivation of cookies may mean that you cannot use all the functions of our website.
In addition, you can disable third-party cookies by visiting the Network Advertising Initiative’s disable page https://www.networkadvertising.org/choices/ and click on the opt-out information link.
5. Storage period
The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have a varying lifespan from a few minutes to several years.
6. Right of withdrawal
You can withdraw your consent to the use of functional cookies here
Change cookie settingsIf you do not want necessary cookies to be stored, please deactivate the acceptance of these cookies in your Internet browser. However, this may lead to a functional restriction of our website.
You also have the option of preventing the permanent storage of cookies through your browser.
C. Social media (Facebook, Instagram, YouTube)
On our website you will find buttons (icons) that lead you to our respective social media presences.
I. Social media button (icons) on our website
Our social media buttons are designed as links only. When you visit our website, no data is therefore automatically transmitted to the operators of these social media. Only when you activate the respective link will you be taken to the corresponding social media page. The following section provides information about the data processing there.
II. Data processing on our social media presences FACEBOOK/INSTAGRAM and YouTube
We have set up our own presence on Facebook and Instagram (hereinafter fan pages) as well as our own channel on YouTube. On these social media presences we inform you about current news about our company and our products and give you tips and further suggestions on the theme Outdoor.
1. FACEBOOK/INSTAGRAM-FAN PAGES
a) General information
We would like to point out that you use our Facebook/Instagram pages and their functions at your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, liking).
Facebook and Instagram are operated by Facebook Inc, 1601 s. California Ave, Palo Alto, CA 94304, USA. Data controller:
Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
Facebook Ireland provides information at https://www.facebook.com/about/privacy/ about the individual data processing operations, their purposes, the categories of recipients of the data, the legal basis for the processing of this data and the possibility of withdrawing any consent you have given to Facebook.
At https://www.facebook.com/settings?tab=ads you can change the advertising settings on Facebook. To do this, you need to log in to your own Facebook account.
b) Data processing by Facebook
When you access a Facebook page, the IP address assigned to your terminal is transmitted to Facebook. According to information from Facebook, this IP address is anonymised (for “German” IP addresses). Facebook also stores information about the terminals of its users (e.g. in the context of the “login notification” function); this can enable Facebook to assign IP addresses to individual users. If or as long as you are logged in to Facebook when visiting our fan page, a cookie with your Facebook ID will be stored on your terminal. This allows Facebook to track that you have visited this page and how you have used it. This also applies to all other Facebook pages. Based on this data, content or advertising tailored to you can be offered.
If you don’t want this to happen, you should log out of Facebook or disable the “stay logged in” feature, delete the cookies on your device, and exit and restart your browser. This will delete Facebook information that can directly identify you. In this way you can use our Facebook page without revealing your Facebook ID. However, in order to access interactive features of the page (Like, Comment, Share, News, etc.), you must log in to Facebook. You will then be recognisable to Facebook as a specific user again.
c) Data processing by us
Facebook provides us with so-called Page Insights for our fan pages in anonymous form about the use of our fan pages by their visitors. It is not possible for us to draw conclusions about individual visitors or to assign these to visitor profiles. You can find more information about this processing at
https://www.facebook.com/legal/terms/information_about_page_insights_data
d) Shared responsibility – Enforcement of data subject rights – Sharing of personal data by Facebook
The other processing of personal data is carried out by Facebook and us as shared responsibilities. We have entered into a Joint Controller Agreement with Facebook which sets out the division of data protection responsibilities between us and Facebook. Details of this agreement can be found at
https://www.facebook.com/legal/terms/page_controller_addendum.
In connection with this data processing, you can also assert your data subject rights (see “Data subject rights” below) against Facebook. You can find more information on this in Facebook’s privacy policy at
https://www.facebook.com/privacy/explanation.
We expressly point out that your user data is also processed in non-EU countries in accordance with the Facebook data protection provisions. However, Facebook states that it only transfers user data to countries for which the European Commission has issued an adequacy decision under Article 45 of the GDPR or otherwise only on the basis of adequate safeguards under Article 46 of the GDPR.
e) Legal basis for the data processing carried out by us
The data processing by means of our Facebook fan page serves our legitimate interest in an optimal and up-to-date advertising of our products and services; this also includes the (anonymised) evaluation of the use of our fan pages. The legal basis for this processing is Art. 6 para. 1 s. 1 lit. f GDPR.
2. YouTube
We have set up our own esbit channel on the Internet video portal YouTube. YouTube is operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. You can watch the video clips we post here for free, rate them, share them and save them.
We would like to point out that you use the YouTube channel offered here and its functions at your own responsibility.
The content presented on this website is not intended for children under the age of 16. This restriction results exclusively from the requirements of the General Data Protection Regulation (Art. 8 GDPR) and does not refer to the requirements of the FSM (Voluntary Self-Regulation for Multimedia Service Providers).
Information about what data is processed by Google and for what purposes can be found in Google’s privacy policy:
https://policies.google.com/privacy?hl=de&gl=de#infocollect
Google processes on the one hand your voluntarily entered data such as name and username, email address, telephone number. Google also processes the content that you create, upload or receive from others when using the services. This includes, for example, comments that you write on YouTube videos. On the other hand, Google also evaluates the content you share to determine what topics you are interested in, stores and processes confidential messages you send directly to other users and may determine your location based on GPS data, wireless network information or your IP address in order to send you advertising or other content.
For example, Google receives information that you are viewing content even if you have not created an account. This so-called “log data” may be the IP address, browser type, operating system, information about the website you visited previously and the pages you viewed, your location, your mobile provider, the terminal you use (including device ID and application ID), the search terms you used and cookie information.
We have no influence on the type and scope of the data processed by Google, the type of processing and use, and the transfer of this data to third parties. We also have no effective control options in this regard. By using YouTube, your personal data will not only be collected, transmitted, stored, shared and used by Google, but also transferred to Ireland and any other country in which Google does business, and stored and used there, irrespective of the country in which you reside. There is a transfer to Google affiliates and to other companies or individuals who process this data on Google’s behalf.
Google may use analysis tools such as Google Analytics for evaluation purposes. We have no influence on the use of such tools by Google and have not been informed about such possible use. If such tools are used by Google for our YouTube channel, we have neither commissioned this nor supported it in any other way. We have no way to prevent or disable the use of such tools on our YouTube channel. We are also not provided with the data obtained during the analysis.
You can restrict the processing of your data by changing the general settings in your Google account accordingly.
Google also offers additional privacy settings specifically for YouTube. To learn more, see Google’s guide to privacy in Google products:
https://policies.google.com/technologies/product-privacy?hl=de&gl=de
You can find more information on these points in Google’s privacy policy under “Privacy settings”:
https://policies.google.com/privacy?hl=de&gl=de#infochoices
We also process your data when you communicate with us through YouTube, e.g. by activating the “Like” button. The processing is carried out for the purpose and in the legitimate interest of improving our advertising and public relations work. It is therefore justified under Art. 6 (1) s. 1 lit. f GDPR.
The recipient of the data is initially Google, whereby the data may be passed on to third parties for their own purposes and under the responsibility of Google. We ourselves do not pass on the data to third parties.
We delete the data we process in the course of operating our YouTube channel at the latest after 10 years or when the channel is discontinued.
Insofar as YouTube processes personal data within the scope of its YouTube platform (including our YouTube channel), the respective storage period by YouTube results from the data protection provisions of Google.
https://policies.google.com/privacy?hl=de&gl=de#infochoices
You also have the option to set the storage period in your Google account yourself.
D. Disclosure of information
The following applies to the possible transfer of your data generated through our website to third parties:
I. Authorisation for disclosure
We will only share your personal information with third parties if:
- it is legally permissible and necessary, under Art. 6 para. 1 s. 1 lit. b GDPR for the processing of contractual relationships with you,
- there is a legal duty of disclosure under Art. 6 (1) sentence 1 lit. c GDPR and/or
- the disclosure is necessary in accordance with Art. 6 (1) sentence 1 lit. f GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.
We will only pass on your personal data for other purposes if you have expressly consented to this, Art. 6 para. 1 s. 1 lit. a GDPR.
II. Recipients
Any disclosure of your personal data by us to third parties will primarily be to those service providers to whom we grant access to your data held by us. In detail: IT application support/maintenance; archiving; data destruction; website administration.
In cases where your personal data is passed on to third parties, however, the scope of the data transferred is limited to the minimum necessary.
The transmission of the data is necessary due to our legitimate interest in the proper operation of the website as well as the proper fulfilment of our legal retention periods and deletion duties and is therefore permitted under Art. 6 para. 1 sentence 1 lit. f GDPR.
E. Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights against us as the data controller:
I. Right to information
You can obtain information about your personal data processed by us within the scope of Art. 15 GDPR.
II Right to correction
If the data concerning you is not (or is no longer) accurate, you may request a correction in accordance with Art. 16 of the GDPR. If your data is incomplete, you may request that it be supplemented.
III. Right to deletion
You can request the deletion of your personal data under the conditions of Art. 17 GDPR.
IV. Right to restrict processing
Within the context of the provisions of Art. 18 GDPR, you have the right to request a restriction of the processing of data concerning you.
V. Right to data portability
In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.
VI. Right to withdraw the declaration of consent under data protection law
In accordance with Art. 7 (3) GDPR, you have the right to withdraw your declaration of consent under data protection law at any time. For this purpose, we inform you above about the respective required consents. The lawfulness of the processing carried out on the basis of the consent until the withdrawal is not affected by this.
VII. Right to complain to a regulator
If you consider that the processing of personal data relating to you breaches the GDPR, you have the right to lodge a complaint with a regulator (in particular in the Member State of your residence, workplace or the place of the alleged breach) in accordance with Article 77 of the GDPR.
VIII. Right to objection under Art. 21 GDPR:
If the processing of your personal data is based on legitimate interests under Article 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data under Article 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.
If you wish to exercise your right to object, simply send an email to esbit@esbit.de
F. Data security
Within the website visit we use the widespread SSL (Secure Socket Layer) procedure in connection with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
In addition, we use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.