Privacy Policy
Privacy.
The following notes provide a simple overview of what happens to your personal data when you visit our website.
Controller
The responsible controller within the meaning of the data protection laws, in particular the GDPR, is:
EATC GmbH
Karlsruher Str. 129
01189 Dresden
Germany
Email: kontakt@eatc-online.com
General Information on Data Processing
We process personal data exclusively in accordance with the statutory provisions, in particular:
- General Data Protection Regulation (GDPR)
- Federal Data Protection Act (BDSG)
- Telecommunications and Digital Services Data Protection Act (TDDDG)
- Digital Services Act (DSA)
The processing takes place only insofar as this is necessary to provide our services.
Type and Purpose of Processing
We process personal data to perform our services. In particular, we process:
- Name, address
- Contact details (phone, email)
- Appointment and order data
- Payment information
Legal basis:
- Art. 6 para. 1 lit. b GDPR (contract fulfillment)
- Art. 6 para. 1 lit. c GDPR (legal obligations)
- Art. 6 para. 1 lit. f GDPR (legitimate interest)
Contacting Us
If you contact us (e.g., by email or phone), your details will be stored for the purpose of processing your inquiry. We will not pass on this data without your consent.
Hosting and Server Log Files
When visiting our website, the following data is automatically collected:
- IP address
- Date and time
- Browser type
- Operating system
- Referrer URL
This data serves exclusively for technical provision, system security, and error analysis. It will not be merged with other data.
Legal basis: Art. 6 para. 1 lit. f GDPR
Cookies, Tracking and Consent Management
Our website uses a consent management system. On your first visit, a privacy banner is displayed allowing you to accept or decline optional cookie categories. Your decision is stored for 12 months in your browser (localStorage) and can be revoked at any time via the "Cookie Settings" button in the footer (Art. 7 para. 3 GDPR).
Categories and legal bases:
- Necessary (always active): Storage of your privacy decision, spam protection for the contact form (Web3Forms/hCaptcha) — § 25 para. 2 TDDDG, Art. 6 para. 1 lit. f GDPR
- Statistics: Google Analytics — consent only, Art. 6 para. 1 lit. a GDPR
- Marketing: Google Ads / Remarketing — consent only, Art. 6 para. 1 lit. a GDPR
- External media: Google Maps — consent only, Art. 6 para. 1 lit. a GDPR
Disclosure of Data
Your data will only be passed on if:
- it is necessary to fulfill a contract
- there is a legal obligation
- you have expressly consented
A transfer to third countries does not take place unless explicitly stated.
Storage Period
We store personal data only as long as is necessary:
- to fulfill the contract
- to comply with legal retention requirements
After the deadlines have expired, the data will be deleted.
Your Rights
You have the following rights:
- Information (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Deletion (Art. 17 GDPR)
- Restriction (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority, in particular the Saxon Data Protection Commissioner.
Data Security
We use suitable technical and organizational measures to protect your data. Nevertheless, we point out that data transmission over the Internet may have security gaps.
External Links
Our website may contain links to external websites. We assume no liability for their content.
Changes to the Privacy Policy
We reserve the right to adapt this privacy policy at any time to adapt to current legal requirements.
Google Fonts
This website loads fonts via Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When loading the page, a connection to Google's servers is established and your IP address is transmitted. Transfer to the USA is possible; Google participates in the EU-US Data Privacy Framework.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in consistent font rendering). To object, please contact us or use browser extensions to block external fonts.
Google Analytics and Google Ads / Remarketing
With your consent, we use Google Analytics (Google Ireland Limited) for reach measurement. Cookies and similar technologies are used; data may be transferred to the USA. Storage period: up to 14 months. Google Ads / Remarketing is used for conversion tracking (consent only); storage period: up to 24 months.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent). Revoke at any time via "Cookie Settings" in the footer.
Google Maps
With your consent, Google Maps (Google Ireland Limited) is embedded on our contact page. When the map loads, data (including IP address) is transmitted to Google; transfer to the USA is possible. Storage duration: various, up to 6 months. Without consent, a placeholder is shown instead of the map.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
Contact Form: Web3Forms and hCaptcha
The contact form uses Web3Forms (support@web3forms.com) to submit inquiries and hCaptcha (Intuition Machines Inc., USA) for spam protection. When submitting the form, name, email and message are transmitted to Web3Forms; transfer to the USA is possible. hCaptcha processes technical data (IP address, browser information) for spam detection.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in preventing spam). Please refer to the privacy policies of Web3Forms and hCaptcha.
WhatsApp and Telegram
This website contains links to WhatsApp (Meta Platforms Ireland Limited) and Telegram (Telegram Messenger Inc.). Clicking these links takes you away from our website. These services have their own privacy policies for which we take no responsibility.
Legal basis when used: Art. 6 para. 1 lit. a GDPR (consent by active click).