Privacy policy

We’re currently updating our Privacy Policy. Please refer to the German page for the latest version. 

 

1. General

1.1 Personal data (Art. 4 No. 1 GDPR)

The subject of privacy are personal data (hereinafter referred to as "data"), including any information relating to an identified or identifiable natural person such as name, address, occupation, e-mail address, state of health, income, marital status, genetic characteristics, telephone number and, if necessary, user data such as the IP address.

 

1.2 Controller (Art. 4 No. 7 GDPR)

The controller for the processing of your personal data in the context of using the website www.evehome.com (hereinafter referred to as the "website") is Eve Systems GmbH (hereinafter referred to as the "operator" or "controller"). The contact details are as follows:
 

Eve Systems GmbH

Managing Director: Dr. Markus Fest
Rotkreuzplatz 1, 80634 Munich, Germany
Phone: +49 (0) 89 143339 0
Fax: +49 (0) 89 143339 99
E-mail: europesales@evehome.com

 

1.3 Data protection officer

The controller has designated an external data protection officer, who can be reached at the following contact details:

 

MORGENSTERN consecom GmbH
Grosse Himmelsgasse 1
67346 Speyer
Germany
Phone: +49 (0) 6232 100 119 44

 

1.4 Opportunity to object 

If you want to object to the processing of your data by the operator entirely or for individual measures in accordance with this privacy policy, you can use the contact details stated in the legal notice. Please note that in the event of such an objection, the use of the website and the retrieval of the services offered on the website may only be possible to a limited extent or not at all.

 

2. Scope and purposes of data processing, legal basis, provision of data and storage period

2.1 Access and use of the website

Whenever the website and its subpages are accessed, usage data are transmitted by the respective internet browser and stored in log files (server log files). The stored data records contain the following data:
 

  • date and time of access
  • name of the subpage accessed
  • IP address
  • referrer URL (original URL from which you have accessed the website)
  • data volume transferred
  • product and version information of the browser used

 

The admissibility of this processing is based on Art. 6 para. 1 b) GDPR, according to which the processing is lawful if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. The data processed by the operator are necessary to enable you to access and use the website. These data shall be processed necessarily during the use of a telemedium, otherwise you will not be able to access the website. 

The log files are evaluated in anonymous form by the operator in order to further improve the website and make it more user-friendly, to find and rectify faults more quickly as well as to control server capacities. Therefore, it can be retraced at what time the use of the website is particularly popular and the operator can provide appropriate data volume.  

The admissibility of this processing is based on Art. 6 para. 1 f) GDPR, according to which the processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The legitimate interest of the operator lies in providing a website with information and services to the customers and optimizing the operation of the website.

Your IP address will be deleted or anonymized after termination of use. In the case of anonymization, the IP addresses are changed in such a way that they can no longer be assigned to an identified or identifiable natural person or can only be assigned with a disproportionate large amount of time, costs and effort.

 

2.2 E-mail to the provider 

There are several places where you can generate an e-mail addressed to the operator of the website by clicking. 

The e-mail address linked to your e-mail program will automatically be used as the sender here. If you do not want your e-mail address to be retrieved in this way, you can change it in the settings of your respective e-mail program.

The admissibility of this processing is based on Art. 6 para. 1 b) GDPR, according to which the processing is lawful if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. The provision of data is necessary, otherwise you will not be able to send a message to the operator.

The personal data processed will be erased after expiry of the legal retention periods unless the controller has a legitimate interest in further storage. In any case, only those data that are absolutely necessary for the achievement of the respective purpose will continue to be stored. As far as possible, the personal data are anonymized.

 

2.3 Customer support

If you as a customer make a support request to us, your request will be processed and answered by the service provider engaged by us on our behalf. 

The admissibility of this processing is based on Art. 6 para. 1 b) GDPR if your request relates to the purchase or imminent purchase of one of our products. 

If you submit a support request to us without having already purchased one of our products, the admissibility of the processing is based on Art. 6 para. 1 f) GDPR. The legitimate interests pursued in this respect are the provision of a reliable support platform and the resulting more effective structuring of the work processes as a whole.  

The provision of your personal data in the context of the customer support and its care is neither prescribed by law nor contractually. However, it is necessary to process your request. Without providing your personal data, your request cannot be processed. 

Tickets are processed by a company based in the USA. Therefore, your personal data are transferred to a third country. The engagement of a service provider in the USA is lawful according to Art. 6 para. 1 f) GDPR (legitimate interest). The pursued legitimate interest lies in the involvement of suitable service providers in assisting the customer support. Moreover, this transfer is permitted due to the certification of the company under the EU-US Privacy Shield. In addition, the appropriate safeguards for the protection of your personal data result from the binding internal corporate rules of the service provider according to Art. 47 GDPR, which can be read here https://d1eipm3vz40hy0.cloudfront.net/pdf/ZENDESK%20-%20BCR%20Processor%20Policy.pdf

 

2.4 Newsletter and click tracking

You can subscribe to an e-mail newsletter in order to receive further information about the services of the operator. The so-called double opt-in procedure is used for sending the newsletter, i.e. you will only receive a newsletter by e-mail if you have previously expressly confirmed that the newsletter service is to be activated. After you have activated the newsletter, you will receive a notification e-mail, including an activation link. You will receive the newsletter only by clicking on this link. You can deactivate the newsletter at any time. For this purpose, please contact the operator or use the unsubscribe link provided in every newsletter. The admissibility of this processing is based on Art. 6 para. 1 b) GDPR, according to which the processing is lawful if the data subject has given consent to the processing of his or her personal data for one or more specific purposes. The provision of your data is voluntary, but necessary for receiving the newsletter.

 

Your data will be erased after withdrawal of your consent unless the controller has a legitimate interest in further storage. This may be the case if the operator has to continue to store your data due to a contract concluded with you. In any case, only those data that are absolutely necessary for the achievement of the respective purpose will continue to be stored. 

You can withdraw your consent to this processing at the address mentioned above. 

The newsletter service is offered via Mailchimp, provided by The Rocket Science Group LLC based in the USA. The legal basis for the transfer of personal data to The Rocket Science Group LLC is Art. 6 para. 1 f) GDPR. The operator has a legitimate interest in engaging a suitable service provider to provide the newsletter dispatch. The adequacy of the safeguards for the protection of personal data in the USA is determined by the Adequacy Decision, which is available at https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active

In some cases, the service provider tracks which links included in the newsletter have been clicked by the recipients of the newsletter (click tracking). 

The provision of your personal data is neither prescribed by law nor contractually. However, it is necessary for tracking purposes. Without providing your data, tracking is not possible. 

You can withdraw your consent to this processing and the dispatch of the newsletter here.

Your personal data will be erased after expiry of the legal retention periods unless there is a legitimate interest in further storage.

 

2.5 Use of cookies

The operator uses so-called cookies, which are small data packets normally consisting of letters and numbers and stored on a browser when you visit certain websites. Cookies enable the website to recognize your browser, track you visiting various sections of the website and identify you when you return to the website. Cookies do not contain any data that identify you personally, but the information concerning you stored by the operator can be assigned to the data obtained from and stored in the cookies.

Information that the operator obtains from you using cookies can be used for the following purposes: 
 

  • recognizing the user’s computer when visiting the website
  • tracing the surfing activities of the user on the website
  • improving the user-friendliness of the website
  • evaluating the use of the website 
  • operating the website 
  • providing the "shopping cart" function
  • geolocation
  • preventing fraud and improving the security of the website
  • individual design of the website considering the needs of users

 

Cookies do not cause any damage on a browser. They neither contain any viruses nor allow the operator to spy on you. Two types of cookies are used:
 

  • temporary cookies are automatically deleted when your browser is closed (session cookies)
  • persistent cookies, in contrast, have a maximum lifespan of up to 20 days, which enable to be recognized when you return to the website

 

By using cookies, the operator is able to track your usage behavior for the above-mentioned purposes and to an appropriate extent. Moreover, they shall enable you to optimize your surfing on the operator's website. This information is only collected in anonymized form. The admissibility of this processing is based on Art. 6 para. 1 f) GDPR, according to which the processing is lawful if it is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. The legitimate interest of the operator lies in the optimized presentation of the website. The provision of data is necessary in order to be able to access the operator’s website without errors. If you do not accept cookies or delete cookies that have already been set, this can lead to functional restrictions of the website.

 

2.6 Registration as a customer and ordering in the online shop

If you register as a customer in the online shop, the following information shall be entered:
 

  • full name 
  • e-mail address
     

If you order products in the online shop, the following information shall be entered:

 

  • full name
  • address
  • city
  • country
  • postal code 
  • telephone number 

 

The indication of the federal state is voluntary.  

The admissibility of this processing is based on Art. 6 para. 1 b) GDPR, according to which the processing is lawful if it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. 

The data processed by the operator are required in order to create the customer account and to prepare and perform purchase contracts as well as to process your order. 

The provision of your personal data is contractually prescribed. Without providing your personal data, a customer account cannot be created. In addition, no products can be ordered in the online shop. 

Your personal data will be erased as soon as they are no longer required for fulfilling the purpose of the customer account or contract processing. 

Personal data may be stored for a longer period of time if legal retention periods apply (for example, § 147 The Fiscal Code of Germany "AO"). Furthermore, personal data will be stored for a longer period of time if the controller has a legitimate interest in further storage, and your rights which concern the protection of personal data do not override. In any case, your personal data will only be stored for as long as they are necessary to achieve the respective purpose.

 

2.7 Comment feature

You can write comments on individual topics and contributions on the website. These comments will be published on the website. Personal data such as
 

  • name
  • pseudonym
  • e-mail address

are processed.
 

If you publish a comment, you have the possibility to do so using a pseudonym.

The processing of your personal data is permitted according to Art. 6 para. 1 f) GDPR. The controller has a legitimate interest in using the comment feature to publicly exchange information on topics and products with customers and interested parties of the company. 

The publication serves the purpose of transparency and opinion making.

The provision of your personal data is neither prescribed by law nor contractually. However, it is necessary to comment on contributions on the website. Without providing the data, you cannot comment on the website.

Your personal data will be erased once the purpose for which they were processed no longer applies. As far as possible, your personal data are pseudonymized.

 

2.8 Use of tracking tools Google Analytics

The operator uses the web analysis service Google Analytics, which uses the cookies described above, for example, to collect information about your operating system, your browser, your IP address, the website you visited before as well as the date and time of your access to the operator’s website. The generated information by the cookies about the use of the website is transferred to a Google server in the USA and stored there. Google will use such information in order to evaluate the use of the website, compile reports on the website activity for the operator and provide other services relating to the website activity and internet usage. If this is prescribed by law or if third parties process such data on behalf of Google, Google will transfer such information to these third parties. This usage is anonymized or pseudonymized. You will find further information directly at Google http://www.google.com/intl/de/privacypolicy.html#information

The data are stored by Google and transferred to the USA for this purpose. Google LLC is certified under the EU-US Privacy Shield. You will find further information in the privacy provisions and terms of use of Google.

When using Google Analytics, no direct personal data are stored by the controller, only the Internet Protocol address. This information is used to automatically recognize you the next time you visit the operator’s website and to make navigation easier for you.

The admissibility of this processing is based on Art. 6 para. 1 a) GDPR, according to which the processing is lawful if the data subject has given consent to the processing of his or her personal data for one or more specific purposes. 

Personal data collected in the context of using tracking tools will be erased unless the controller has a legitimate interest in further storage. In any case, only those data that are absolutely necessary for the achievement of the respective purpose will continue to be stored. As far as possible, the personal data are anonymized.

You can withdraw your consent to this processing with effect for the future by clicking on this link to prevent Google Analytics from recording data on this website. An opt-out cookie will be stored on your end device. If you delete your cookies, you must click the link again.

 

2.9 Application

On the website, you have the option to open an e-mail addressed to the operator for application purposes. The e-mail address linked to your e-mail program is automatically used as the sender. If you do not want your e-mail address to be retrieved in this way, you can change it in the settings of your respective e-mail program. 

The operator processes your data in order to carry out the application procedure and to reply to your message. The admissibility of this processing is based on § 26 German Federal Data Protection Act ("BDSG"), according to which personal data of employees may be processed for employment-related purposes where necessary for hiring decisions. If you do not provide the operator with the requested information and documents, the operator cannot consider you in the application procedure. The provision of the data is contractually prescribed.

Application documents received by the operator will be kept for 6 months after refusal unless the applicant has given consent for longer storage.

 

2.10 Trusted Shops Trusted Shops Trust Badge

To display the Trusted Shops seal of approval and to offer the Trusted Shops membership to buyers after an order, the Trusted Shops trust badge is integrated on this website. This serves to preserve our legitimate interests, which override in the context of a weighing of interests, in the optimal marketing of our services according to Art. 6 para. 1 p. 1 lit. f GDPR. The trust badge and the services advertised using it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. When the trust badge is accessed, the web server automatically saves a so-called server log file, which contains, e.g. your IP address, date and time of access, transferred data volume as well as the requesting provider (access data) and documents the access. Such access data are not evaluated and are automatically overwritten at the latest seven days after termination of your website visit. Other personal data are only transferred to Trusted Shops if you have consented to this, decide to use Trusted Shops products after completing an order or have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.

 

Review reminder by Trusted Shops

If you have given us your express consent to this during or after your order according to Art. 6 para. 1 p. 1 lit. a GDPR, we will transfer your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne, Germany (www.trustedshops.de), in order that they send you a review reminder by e-mail. Your consent can be withdrawn at any time by sending a message to the contact described below or directly to Trusted Shops with effect for the future.

 

3. Right of access, to rectification, to erasure, to restriction, to object and to data portability 3.1 Right of access (Art. 15 GDPR)

The operator will provide you with information on request as to whether data concerning you are processed. The operator makes every effort to process requests for information quickly.

3.2 Right to rectification (Art. 16 GDPR)

You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you.

3.3 Right to erasure (Art. 17 GDPR)

You have the right to obtain from the operator the erasure of personal data concerning you without undue delay and the operator is obliged to erase personal data without undue delay where one of the grounds specified in Art. 17 para. 1 a)-f) GDPR applies.

3.4 Right to restriction (Art. 18 GDPR)

You have the right to obtain from the operator restriction of processing where one of the requirements specified in Art. 18 para. 1 a)-d) GDPR applies.

3.5 Right to object (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 e) or f) GDPR, including profiling based on those provisions. The operator shall no longer process the personal data unless the operator demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

You have the right to object, on grounds relating to your particular situation, to processing of personal data concerning you which is carried out for scientific or historical research purposes or statistical purposes according to Art. 89 para. 1 GDPR, unless processing is necessary for the performance of a task carried out in the public interest. 

Please use the contact address stated in the legal notice for your message.
 

3.6 Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you, which you have provided to the operator, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the operator to which the personal data have been provided, where the processing is based on consent pursuant to Art. 6 para. 1 a) GDPR, Art. 9 para. 2 a) GDPR or on a contract pursuant to Art. 6 para. 1 b) GDPR, and the processing is carried out by automated means.

 

4. Withdrawal of your consent

If you have given your consent to the processing of your personal data and withdraw it, the processing remains unaffected until withdrawal.

 

5. Right to complain

You have the right to lodge a complaint with the competent supervisory authority at any time.

 

6. Recipients

The data collected when you were accessing and using the website and the information you provided when contacting are transmitted to the operator’s server and stored there. In addition, your data can be transferred to the following categories of recipients: 
 

  • persons at the controller’s premises who are involved in the processing (e.g. marketing department, personnel management, customer service)
  • processors (e.g. computer centre, IT service provider, software support, website hosting)
  • contractual partners of the operator (e.g. shipping service providers, payment service providers, banks, tax consultants, customer hotline)
  • public bodies (e.g. authorities)

 

7. Links to third-party websites

When you visit the website, content may be displayed that is linked to third-party websites. The operator has no access to the cookies or other functions used by third-party websites nor can control them. Such third-party websites are not subject to the privacy provisions of the operator.