PRIVACY POLICY

The protection of your personal data is of the utmost importance for ECCG GmbH and therefore you will find the following information in our privacy policy …

… General information about ECCG GmbH
… General information on data processing
… Information on our data processing activities
… Information on required data transmissions
… Information on the protection of your data and your rights
… Information about Cookies

If you have any questions or uncertainties regarding data protection, you can contact our data protection officer using the options listed in I.

I. General Information about ECCG GmbH

Name and Address of the Controller

Responsible in the sense of the General Data Protection Regulation (GDPR), as well as the BDSG-neu is:

European Center for Corporate Governance (ECCG) GmbH
Wilhelm-Leuschner-Str. 9
63179 Obertshausen
Germany

Telephone: +49 6104/809 364 00
E-Mail: contact@eccg.info
Website: https://thecompliancetraining.com

Contact information of the Data Protection Officer (DPO)

The DPO can be contacted via:

Data Protection Officer
European Center for Corporate Governance (ECCG) GmbH
Wilhelm-Leuschner-Str. 9
63179 Obertshausen
Germany

Telephone: +49 6104/809 364 00
E-Mail: datenschutz@eccg.info

II. General Information on Data Processing

1. Scope

Generally, ECCG GmbH processes your personal data only in order to be able to present contents and services for a well working website and to make contact with you. We always ask for your consent to process your personal data, unless the processing is allowed anyway, e. g. due to legal requirements.

2. Legal Basis

The legal basis for the processing of your personal data results from Art. 6(1) of the EU General Data Protection Regulation (GDPR).

In case that your consent is required for the processing of your personal data, this results from Art. 6(1)(a) GDPR.

If the processing of your personal data is necessary for the fulfilment of a contract or pre-contractual measures, Art. 6(1)(b) GDPR serves as the legal basis.

Art. 6(1)(c) GDPR is the legal basis for the processing of your personal data for the fulfilment of legal obligations on behalf of ECCG GmbH.

For the protection of vital interests Art. 6(1)(d) GDPR is the legal basis, for public interests Art. 6(1)(e) GDPR applies.

If the processing of personal data is necessary to safeguard legitimate interests of ECCG GmbH or other third parties and the interests, basic rights and fundamental freedoms of the persons concerned do not outweigh, Art. 6(1)(f) GDPR is the legal basis.

3. Principles of Data Processing

ECCG GmbH always processes data in a transparent and lawful manner, in good faith and trust and for clearly defined and legitimate purposes only. The processing of personal data appropriate to the purpose is limited to necessary extent. ECCG GmbH always processes personal data being up-to-date in a correct manner and ensures that personal data – which is incorrect concerning the purpose of processing – will be corrected or deleted immediately. By the way in which personal data is stored ECCG GmbH ensures that such data remains identifiable only as long as the purpose of the data processing is present. ECCG GmbH further ensures by means of appropriate technical and organisational measures that no personal data will be processed unauthorized or unlawfully and that no accidental loss, destruction or damage of personal data may be possible.

4. Duration of Data Storage and Data Deletion

ECCG GmbH deletes your personal data in general, if the purpose of storage is no longer available. However, it is conceivable that a storage exceeding this purpose results from European or national laws, regulations or other rules, to which ECCG GmbH is subject. Such data will only be deleted when the corresponding storage periods resulting from the aforementioned legal sources end. An exception is only made if the stored data is necessary for the fulfillment of a contract or the conclusion of a contract. For example, storage periods of up to ten years are legally prescribed for certain data due to tax regulations.

III. Information on our Data Processing Activities

Visiting and Using our Website

1. Description and Scope of Data Processing

Whenever you visit our website, we automatically collect information and data from your computer system or mobile device. In this context, we receive the following data:

a. Information on browser type and used version
b. Operating system
c. Internet-Service-Provider
d. Your IP address
e. Date and time of your access
f. Website from which you access eccg.eu
g. Websites that are called up by your system via our website

We store the collected data in log files of our system. We do not store this data together with your other personal data.

2. Legal Basis for the Data Processing

Art. 6(1)(f) GDPR is the legal basis for the temporary storage of data and log files.

3. Purpose of Data Processing

For the duration of your session it is necessary to save your IP address in order to deliver our website to your computer or mobile device.
The uniform storage in log files ensures the functionality of our website and makes an important contribution to the security of the IT systems of ECCG GmbH. Furthermore we use the data to improve our online offer.
Finally, this is also the reason for our legitimate interest in data processing.

4. Duration of Storage

We delete stored log files after seven days. In case, we would need log files for a longer period for the purposes aforementioned, we would anonymize or delete your IP address rendering an allocation to you impossible.

5. Right to object and right to erasure

Clients or website visitors have the right of objection. Since the data is absolutely necessary for the provision of our website, you would not be able to use our website afterwards.

Communication with the client or website visitor

A. Contact form
1. Description and Scope of Data Processing

In order to send a message to ECCG GmbH you may use the contact form of our website. In this context, we receive the following data:

a. Name
b. E-Mail address
c. Telephone number
d. Company name
e. Company address
f. Content of your message

These data are also stored at the time the message is sent:

a. Your IP address
b. Date and time

The data will only be used to process your request and will not be passed on to third parties.

2. Legal Basis for the Data Processing

Art. 6(1)(a) GDPR and thus your consent (given by you when submitting the contact form) constitutes the legal basis for data processing.

3. Purpose of Data Processing

Processing of contact initiated by clients or website visitors and prevention of misuse of the IT systems of ECCG GmbH.

4. Duration of Storage

The personal data collected when submitting a message via contact form to us will be deleted whenever the communication with the client is finally terminated, i. e. when the relevant facts have been finally clarified. Further data, collected when submitting the message, will be deleted within 7 days at the latest.

5. Right to object and right to erasure

The client or website visitor may revoke his or her preliminiary granted consent at any time. In this case all data that has been accumulated by using the contact form will be deleted immediately and the processing of a still open request sent by contact form will be terminated.

B. E-Mail
1. Description and Scope of Data Processing

In order to send a message to the ECCG GmbH an e-mail can be sent to the e-mail address contact@eccg.eu. All player data sent with the e-mail will be saved.

a. E-mail address
b. E-mail contents and attachments

All data will only be used to process your request and will not be passed on to third parties.

2. Legal Basis for the Data Processing

Art. 6(1)(f) GDPR and thus our legitimate interests, constitutes the legal basis for data processing.

3. Purpose of the Data Processing

It is a legitimate interest of ECCG GmbH to answer player requests received by e-mail as soon as possible, as well as to prevent misuse of the IT systems of ECCG GmbH.

4. Duration of Storage

The personal data collected in the course of e-mail communication will be deleted whenever the communication with the client is finally terminated, i. e. when the relevant facts have been finally clarified.

5. Right to object and right to erasure

The client or website visitor may object to the storage of his or her personal data at any time. In this case, the conversation with the client or website visitor cannot longer be maintained.

C. Telephone
1. Description and Scope of Data Processing

You may contact ECCG GmbH via telephone number +49 6104/809 364 00 to get in touch with us.
In this context, we receive the following data:

a. First name
b. Last name
c. E-Mail address
d. Telephone number
e. Content of the conversation

All data will only be used to process your request and will not be passed on to third parties.

2. Legal Basis for the Data Processing

Art. 6(1)(f) GDPR and thus our legitimate interests, constitutes the legal basis for data processing.

3. Purpose of the Data Processing

It is a legitimate interest of ECCG GmbH to answer client calls and appropriate requests as soon as possible.

4. Duration

The personal data collected in the course of telephonic communication will be deleted whenever the communication with the client is finally terminated, i. e. when the relevant facts have been finally clarified. If a recall will be stipulated during the clarification phase, no matter from which side, the data will be stored, but will be deleted seven days after the last telephone call took place at the latest.

5. Right to object and right to erasure

Der Anrufende kann jederzeit der Speicherung seiner personenbezogenen Daten widersprechen. Dadurch kann jedoch keine telefonische Kommunikation mehr stattfinden.

IV. Information on required data transmissions

Associated Companies / Group Companies
All collected and personal data will be made available by ECCG GmbH to associated companies within the group of companies.

1. Description and Scope of Data Processing

All processed data, for example, when visiting the website or getting in touch with us, and mentioned in this privacy policy will be also made available to associated companies within the group of companies for the purposes described below.

2. Legal Basis for the Data Processing

Art. 6 Abs. 1 lit. f DSGVO und somit unser berechtigtes Interesse daran, Ihnen unsere Dienstleistungen vollumfänglich, fortwährend und neueste Trend aufnehmend anbieten zu können stellt die Rechtsgrundlage der Datenverarbeitung dar.

3. Purpose of the Data Processing

ECCG GmbH offers comprehensive services of different disciplines at the highest level. The expertise of our professionals contributes a considerable part on this and is allocated over various companies associated with ECCG GmbH. In order to present the comprehensive services across all disciplines, a data transfer, strictly limited to associated companies, is essential.

4. Duration of Storage

As soon as data stored at ECCG GmbH has to be deleted, the corresponding data stored at associated companies within the group of companies will also be irretrievably removed.

5. Right to object and right to erasure

In case, personal data that is processed in connection with art. 6(1)(a) GDPR and thus with the client’s or website visitor´s consent, a revocation is sufficient to prohibit further processing. In case, data is processed in connection with art. 6(1)(b) GDPR and thus by contract, the termination of the contract closed with ECCG GmbH is necessary to stop the data processing. In order to end the processing of data, which is carried out in connection with art. 6(1)(f) GDPR, an objection of your consent is necessary, which will be only effective for the future.

V. Informationen on the Protection of Your Data and Your Rights

Your rights as data subject

1. Right of access (Art. 15 GDPR)
You have the right to be informed whether and which personal data we process from you. In accordance with GDPR, we will provide you with a summary of your personal data on request. In accordance with the GDPR, we have a 30-day period to respond to your request for information.

2. Right to rectification (Art. 16 GDPR)
If you inform us that data processed by us on your behalf is incorrect or incomplete, we will adjust it immediately after positive verification.

3. Right to erasure (Art. 17 GDPR)
We delete personal data immediately on request, provided that none of the reasons stated in art. 17 GDPR oppose this. Deletion can always only take place for the future.

4. Right to restriction of processing (Art. 18 GDPR)
If you wish, we will restrict the processing of your data if one of the conditions specified in the GDPR applies.

5. Notification obligation (Art. 19 GDPR)
We will inform recipients (e. g. data processors) of any requests for personal data that we have received, if you have sent us a request to correct, restrict or delete your personal data.

6. Right to data portability (Art. 20 GDPR)
Upon request, we will provide your data in a generally used, machine-readable format and will transfer your personal data to another responsible person upon request.

7. Right to object (Art. 21 GDPR)
You can object to the processing of personal data concerning you at any time, provided that the processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR.

8. Revocation
Generally, you can only revoke the processing of your personal data if you have previously given your consent in accordance with Art. 6(1)(a) GDPR. A revocation is only valid for the future.

Automated Decision Making and Profiling

ECCG GmbH carries out automated decisions on individual cases including profiling only if European or national legal provisions allow it or you have given us your explicit consent. In order to protect your rights and freedoms as well as legitimate interests, at least one natural person participates in automated decisions. If you have given your consent to the processing of your personal data for automated decisions on individual cases s including profiling, you can revoke it at any time, always for the future. Please use one of our contact channels.

International Data Transmission

In general, recipients of personal data must be located in the European Union (EU) or the European Economic Area (EEA). Otherwise, data may only be sent to third countries if there is an adequacy decision by the EU Commission, if standard data protection clauses approved by the EU Commission are used, or if approved binding corporate rules are involved or if you gave us your explicit consent. ECCG GmbH does not send any data to recipients in third countries.

Right to lodge a complaint with a supervisory authority

If you come to the conclusion that the processing of personal data concerning you is not in accordance with the GDPR, you have the right to lodge a complaint with a competent supervisory authority (art. 77 GDPR). An overview of the supervisory authorities in the Federal Republic of Germany can be found at
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Adaptions to the Privacy Policy

From time to time, ECCG GmbH may amend this privacy policy and inform you accordingly. In case, your consent is required for this – depending on the type and scope -, we will obtain it.

VI. Information about Cookies

Our website https://www.eccg.eu uses cookies, which are temporarily stored on your device. The respective company that places the cookie receives certain information, which is mainly used to make our website more user-friendly and to improve it. ECCG GmbH is allowed to use essential cookies without your consent (legal basis: Art. 6(1)(f) GDPR), but you have the right to object. In case you would object to the use of essential cookies, it cannot be excluded that our website can no longer be used to its full extent, as e. g. page navigation, language settings or the display of secure parts of our website may no longer function properly. For the use of non-essential cookies, e. g. for marketing or analysis purposes, your active consent is required (opt-in procedure), whereby Art. 6(1)(a) GDPR forms the legal basis for this. When you visit our website, you can give us the necessary consent or refuse to give it by clicking on the appropriate boxes in the cookie banner. You can also deactivate cookies in the settings of your internet browser or restrict their functions. Previously stored cookies can also be deleted directly. Restrictions implemented in your web browser may also lead to restrictions in the functionality of the website.