5. cookies

We use cookies on our website. Cookies are text files that are placed on your computer by our server and thus store certain data. Cookies usually contain a characteristic character string that enables a clear assignment of the internet browser when the user calls up the website again. This makes it possible to recognise and identify the calling browser. Cookies help us to make it easier for you to use the website. By recognising the browser and storing previously entered data, the offers and contents of our website can be individually optimised in that data entered by you (e.g. access data, search terms) do not have to be entered again each time you visit the website. The legal basis for this is Art. 6 para. 1 lit. f DSGVO. In addition, we use cookies on our website that enable an analysis of the user’s surfing behaviour. However, the data collected in this way is pseudonymised, i.e. the personal data is replaced by other identifiers (pseudonyms) so that it is no longer possible to identify the data subject without consulting additional information. Since your consent is obtained when you access the website, the legal basis for the processing of personal data by means of analysis cookies is Art. 6 para. 1 lit. a DSGVO.

Since cookies are stored on the user’s computer, you as the user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transfer of cookies. You can delete cookies that have already been stored at any time. However, if cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

6 Registration on our website

You have the option of registering as a user on our website. The data is entered by you in an input mask, transmitted to us and stored by us. Which personal data is affected by this can be seen from the input mask. Furthermore, your IP address as well as the date and time of registration are also stored. At the end of the registration process, we again obtain the user’s consent to data processing. The legal basis for the processing of personal data is therefore Art. 6 para. 1 lit. a DSGVO. As far as the storage of the IP address is concerned, the legal basis is also Art. 6 para. 1 lit. f DSGVO. The data is not passed on to third parties unless there is a legal obligation to disclose it. The registration of the data subject under voluntary provision of personal data

Data protection information

serves the purpose of the controller to offer the data subject content or services which, due to the nature of the matter, can only be offered to registered users. Other data is stored in order to prevent or detect misuse of the website and to ensure the security of our system.

As a registered user, you have the option at any time to change the personal data provided during registration or to have it deleted completely. To do this, you can use the functions contained in your account or inform us of your wish to change or delete the data in writing or by e-mail.

7 Contact form and e-mail contact

The website of E-Stream Beteiligungs GmbH provides a contact form which can be used to contact our company electronically. The data entered by the user in the input mask is transmitted to us and stored. Furthermore, the IP address of the user as well as the date and time of transmission are also stored. The user’s consent is obtained for the processing of the data during the submission process. The legal basis for the processing is therefore Art. 6 para. 1 lit. a DSGVO. As far as the storage of the IP address is concerned, the legal basis is also Art. 6 para. 1 lit. f DSGVO.

Alternatively, it is possible to contact us via the e-mail address provided on our website. In this case, in addition to the e-mail address, the personal data provided by the user in the e-mail will be transmitted. The legal basis in this respect is Art. 6 para. 1 lit. f DSGVO.

The processing of the data transmitted via the contact form or by e-mail serves exclusively to carry out the desired contact. Other data is stored in order to prevent or detect misuse of the website and to ensure the security of our system. The data is not passed on to third parties unless there is a legal obligation to disclose it. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. As far as the data transmitted by the user in the contact form or in the e-mail is concerned, this is the case when the communication in question has ended, unless the content of the communication still has legal significance thereafter. The data subject has the option to revoke consent to data processing or to object to the use of the data at any time. In this case, the intended contact with the user is no longer possible or communication that has already begun cannot be continued.

8. subscription to our newsletter

On the website of E-Stream Beteiligungs GmbH you have the opportunity to subscribe to our company newsletter. Which personal data is transmitted to us and stored by us when you subscribe to the newsletter can be seen from the input mask used for this purpose. Furthermore, the IP address of the user as well as the date and time of transmission are also stored. The processing of the data is governed by the

4

Data protection information

The user’s consent is obtained for the processing of the data during the registration process. The legal basis for the processing is therefore Art. 6 para. 1 lit. a DSGVO. As far as the storage of the IP address is concerned, the legal basis is also Art. 6 para. 1 lit. f DSGVO. The data is not passed on to third parties unless there is a legal obligation to disclose it.

The processing of the data transmitted by the user by entering it in the registration form is necessary in order to send the newsletter. The data will not be used for any other purpose. The storage of the IP address is necessary to prevent or detect misuse (especially of the e-mail address) and to ensure the security of our system.

The subscription to the newsletter can be cancelled by the data subject at any time, thus revoking the consent to send the newsletter. For this purpose, a corresponding link is provided in every newsletter e-mail sent. In this case – as well as in the case of any other objection to the use of data, which is possible at any time – the personal data stored by us as part of the newsletter subscription will be deleted. The data will therefore be stored for as long as the newsletter subscription is active.

9 Newsletter tracking

When sending newsletters, E-Stream Beteiligungs GmbH collects statistical data. This is done by means of a so-called counting pixel. This is a non-visible miniature graphic that is embedded in the newsletter e-mail and downloaded to the user’s computer when the e-mail is opened. The same applies when the user clicks on links provided in the e-mail. When the pixel-code is downloaded, the time, the IP address of the user and the browser type used are transmitted to our server and stored. The legal basis for this is Art. 6 para. 1 lit. f. DSGVO.

The processing of the data serves to optimise the newsletter. It enables a statistical evaluation of whether and when an email was opened and which links in the email were called up. This enables the acceptance of the newsletter to be measured and corresponding adjustments to be made for future newsletters, both in terms of technology and content, in order to optimise usage in line with requirements. The data is not passed on to third parties. Data subjects may object to the processing of their data at any time by cancelling their subscription to the newsletter (see Subscription to our newsletter). In this case, personal data stored by E-Stream Beteiligungs GmbH in this context will be deleted.

10 Data protection for applications

Persons can send us applications electronically (e.g. by e-mail or via an application form provided on the website). In this case, the collection and processing of the transmitted personal data takes place for the purpose of carrying out the application procedure and thus for the potential initiation of an employment relationship. The legal basis for this is Art. 6 para. 1 lit. b DSGVO. If an employment contract is subsequently concluded with us, the transmitted data will be used for the purpose of

5

Data protection information

If an employment contract is then concluded with us, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If no employment contract is concluded, the data will be deleted within two months of notification of the rejection decision, provided that this does not conflict with any other legitimate interests of our company. Such a legitimate interest is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG). or to object to the use of the data. In this case, the intended contact with the user is no longer possible or an already initiated communication cannot be continued.

11 Use of social plug-ins

We have integrated plug-ins from social networks on our website. If the data subject is registered with the respective social network when calling up our website and is also logged in, the social network recognises which specific sub-page of our website the data subject is calling up. This information is collected by the operator of the social network and assigned to the data subject’s account there. We have no influence on the type and scope of the data collected, stored and processed by the operator of the social network. For more detailed information, please contact the operator of the respective social network. To prevent data about you from being processed by the operator of the respective social network, you must log out of the relevant network before accessing our website. In addition, you can use special tools that block data transmission (e.g. Facebook Blocker).

We have integrated the social media plug-ins of the following companies on our website:

– Facebook Inc.
– https://de-de.facebook.com/about/privacy/ – Instagram

https://www.instagram.com/about/legal/privacy

improve others. In order to use the Google +1 button, you need a globally visible, public Google profile, which must at least contain the name chosen for the profile. This name is used in all Google services. In some cases, this name may also replace another name you used when sharing content via your Google Account. The identity of your Google profile may be displayed to users who know your email address or have other identifying information about you.

Use of information collected:
In addition to the uses explained above, the information you provide will be used in accordance with Google’s applicable privacy policy. Google may publish aggregate statistics about users’ +1 activities or share them with users and partners, such as publishers, advertisers or affiliated websites.
Source reference: Google +1 privacy policy

16 Google AdWords

Our website uses Google conversion tracking. If you have reached our website via an ad placed by Google, Google Adwords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked across AdWords customers’ websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you do not wish to participate in tracking, you can reject the setting of a cookie required for this – for example, by means of a browser setting that generally deactivates the automatic setting of cookies or by setting your browser in such a way that cookies from the domain “googleleadservices.com” are blocked.

Please note that you may not delete the opt-out cookies as long as you do not want any measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.

17. use of Facebook Retargeting

This website uses the retargeting function of Facebook Ireland Limited. The function is used to present interest-based advertisements to website visitors within the Facebook advertising network. A so-called “cookie” is stored in the browser of the website visitor, which makes it possible to recognise the visitor when he or she is

8

Data protection information

websites that belong to the Facebook advertising network. On these pages, the visitor can be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Facebook’s retargeting function.

According to its own information, Facebook does not collect any personal data during this process. However, if you do not wish to use the Facebook retargeting function, you can deactivate it by making the appropriate settings at http://www.facebook.com/settings/?tab=ads.

18. contents and services of third-party providers on the use and application of YouTube

Our website also contains content and services from third-party providers, e.g. videos from YouTube or map material from Google Maps. When you access these contents/services via our website, your IP address is usually transmitted to the respective third-party provider. This enables these third-party providers to process your user IP address. Even though we endeavour to only include third-party providers that use IP addresses solely for the purpose of delivering the content, we have no influence on how the third-party provider concerned uses the data received. For more detailed information, please therefore contact the respective third-party provider.

19. your rights as a data subject

If personal data is processed by you, you are a data subject within the meaning of the GDPR and you have the following rights against us as the data controller:

(a) Right to confirmation and information, Art. 15 DSGVO.

You can request confirmation from us at any time as to whether personal data relating to you is being processed by us. If this is the case, you have the right to be informed by us about the following circumstances: the categories of personal data which are processed; the recipients or categories of recipients vis-à-vis whom the data are processed; the nature of the data processed; the nature of the data processed; the nature of the data processed; and the nature of the data processed. the categories of recipients to whom the personal data relating to you have been or will be disclosed; the planned duration of the storage of the personal data relating to you or, if specific information on this is not possible, criteria for determining the storage duration; the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing; the existence of a right to lodge a complaint with a supervisory authority; any available information on the origin of the data if the personal data are not collected from the data subject; the existence of automated decision-making, including profiling, pursuant to Art. 22 (1) and (4) of the GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

Furthermore, you have the right to be informed whether personal data is transferred to a state that is not a member of the EU (so-called third country) or to an international organisation.

9

Data protection information

are transferred. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 DSGVO in connection with the transfer.

b) Right to rectification, Art. 16 DSGVO

You have the right to request that we correct any inaccurate personal data relating to you without undue delay. Furthermore, you have the right to request us to complete incomplete personal data – also by means of a supplementary declaration – taking into account the purposes of the processing.

c) Right to erasure (right to be forgotten), Art. 17 DSGVO

You may request us to erase the personal data concerning you without undue delay if one of the following reasons applies: The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.

You withdraw your consent on which the processing was based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) DSGVO and there is no other legal basis for the processing.

You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.

The personal data concerning you have been processed unlawfully. The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.

The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.

If the personal data concerned have been made public by E-Stream Beteiligungs GmbH and we are obliged to erase the personal data in accordance with the principles set out above, we also have a duty to inform other data controllers that you, as the data subject, have requested the erasure of all links to or copies or replications of the personal data.

In this regard, we shall take reasonable measures, including technical measures, to comply with this obligation, taking into account the available technology and the costs of implementation, in any case to the extent that the processing is no longer necessary, i.e. if required by law or if the erasure is contrary to legitimate interests.

d) Right to restriction of processing, Art. 18 DSGVO

10

Data protection information

You may request us to restrict the processing of personal data relating to you under the following conditions:

You dispute the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data.

The processing is unlawful and you request the restriction of the use of the personal data instead of erasure.

The personal data is no longer needed by us for the purposes of processing, but you need this data to assert, exercise or defend legal claims.

You have objected to the processing pursuant to Article 21 (1) DSGVO and it is not yet clear whether the legitimate grounds of E-Stream Beteiligungs GmbH override your interests.

If the processing of personal data relating to you has been restricted, this data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State. In this case, you will also be informed by us before the restriction is lifted.

e) Right to information

If you have exercised the right to rectification, erasure or restriction of processing, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. In this respect, you may request us to inform you about these recipients.

f) Right to data portability (“Datenportabilität”)

You have the right to receive the personal data concerning you, which you have made available to us, in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from the controller to whom the personal data has been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) DSGVO or Article 9(2)(a) DSGVO or on a contract pursuant to Article 6(1)(b) DSGVO and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

11

Data protection notices

Furthermore, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you may request that the personal data be transferred directly from one controller to another controller to the extent that this is technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

g) Right to revoke consent under data protection law, Art. 7 (3) DSVGO

If you have given your consent under data protection law, you have the right to revoke this consent at any time with effect for the future. This also applies to the revocation of declarations of consent that were given to us before the applicability of the General Data Protection Regulation, i.e. before 25 May 2018. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.

If you wish to exercise your right of revocation, please send an appropriate e-mail to datenschutzbeauftragter@esb-international.com or send the objection to the business address E-Stream Beteiligungs GmbH, Neue Straße 1, 40789 Monheim a. R., Germany.

h) Automated decisions in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless the decision is necessary for the conclusion or performance of an agreement between you and E-Stream Beteiligungs GmbH.

– is not necessary for the conclusion or performance of a contract between you and E- Stream Beteiligungs GmbH

or

– is permissible on the basis of legal provisions of the Union or the Member States to which the controller is subject and those legal provisions contain adequate measures to safeguard the rights and freedoms as well as the legitimate interests of the data subject

or

– is carried out with the express consent of the data subject.

However, such decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.

If the decision is necessary for entering into, or the performance of, a contract between the data subject and the controller, or if it is made with the data subject’s explicit consent, the E-Stream Beteiligungs GmbH shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, which include at least the right to obtain the data subject’s involvement on the part of the controller, to express his or her point of view and contest the decision.

i) Right to complain to the supervisory authority, Art. 77 DSGVO

12

Data protection notices

Notwithstanding the rights you have against us, you also have the right to lodge a complaint with a supervisory authority, in particular in the member state of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority to which the complaint has been lodged will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

20. right to object, Art. 21 DSGVO

You have the right to object at any time, on grounds relating to your particular situation, to the processing by us of personal data relating to you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO. This also applies to profiling based on these provisions.

The E-Stream Beteiligungs GmbH shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defence of legal claims.

If the personal data concerning you are processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

If you wish to exercise your right to object, please send an appropriate e-mail to datenschutzbeaufragter@ esb-international.com or send the objection to the business address E-Stream Beteiligungs GmbH, Neue Straße 1, 40789 Monheim a. R., Germany.

21. regular updating of this data protection notice

This data protection legal framework is subject to constant changes and adjustments. These changes make it necessary to update our data protection information from time to time. The current status is indicated by the line “Status…” at the end of this data protection notice.

Status 2021

13

Data protection information

E-Stream Beteiligungs GmbH
Postal address: Neue Straße 1, 40789 Monheim a.R. Email: info@esb-international.com
Registered office: Monheim a.R.
Register entry: Düsseldorf Local Court, HRB 90922 Managing Directors: Thomas Krämer, Dirk Köster