EBF Onboarder Privacy Policy

2. What processing activities are carried out?

a.

EBF Onboarder Use:

Purpose and Legal Basis:
The purpose of the processing is to provide the EBF Onboarder to the customers of EBF – EDV Beratung Föllmer GmbH. The legal basis is the contractual obligation of EBF – EDV Beratung Föllmer GmbH toward its customers (Art. 6 (1) (b) GDPR).

Other recipients of the data:
EBF Inc.
1221 Hermosa Ave STE 101
Hermosa Beach, CA 90254
USA
Tel.: +1 310 9802781

Retention Period:
The data subject’s personal data will be deleted as soon as the purpose of the processing has been achieved or no longer applies. This is typically the case upon termination of the contract between the customer and EBF – EDV Beratung Föllmer GmbH. If statutory retention periods apply, the data will be blocked and deleted upon expiration of the relevant retention period.

In addition, data subjects may delete their data themselves at any time. Upon deletion, the data is anonymized and can no longer be attributed to the data subjects.

Transfer Abroad:
The data is processed on servers belonging to EBF – EDV Beratung Föllmer GmbH. The servers are located in Cologne.

In addition, data may be transferred to the United States to EBF Inc. EBF Inc. is an affiliated company of EBF – EDV Beratung Föllmer GmbH. The transfer is safeguarded by appropriate safeguards within the meaning of Article 46 of the GDPR.

Provision required or necessary:
The data subject provides the personal data in connection with their employment relationship with the respective client of EBF – EDV Beratung Föllmer GmbH. The provision of this data is necessary for the performance of the contract between EBF – EDV Beratung Föllmer GmbH and the respective client.

Withdrawal of Consent:
The processing is not based on the data subject’s consent.

Profiling:
The data subject’s personal data is not linked or merged with data from other sources.

b.

Use of Cookies:

This website uses cookies. Cookies are small text files used by websites to improve the user experience. Cookies are only stored on the user’s device if they are necessary for the secure operation of the website. Additional cookies that analyze user behavior or similar purposes are subject to the user’s consent. Consent to the use of cookies may be modified or withdrawn at any time.

Purpose and Legal Basis (+Legitimate Interest):
We use cookies to personalize content and ads and to analyze traffic on our website. Cookies also help improve the user experience on the website. A distinction is made between technically necessary cookies and technically non-necessary cookies. Technically necessary cookies store, for example, the user’s privacy settings or selected categories. Technically non-necessary cookies store the user’s behavior on the website for later analysis.

Technically necessary cookies are based on the overriding legitimate interest of EBF-EDV Beratung Föllmer GmbH in processing the personal data of the data subject pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring IT security, the availability of our services, and the optimization of our website.
Non-technically necessary cookies are set exclusively on the basis of the user’s consent pursuant to Article 6(1)(a) of the GDPR.

Other recipients of the data:
EBF Inc.
1221 Hermosa Ave STE 101
Hermosa Beach, CA 90254
USA
Tel.: +1 310 9802781

Retention Period:
The retention period for cookies varies and is listed under “Purpose / Legal Basis” for each individual cookie.

Transfer abroad:
The data is processed on servers belonging to EBF-EDV Beratung Föllmer GmbH. The servers are located in Cologne.

In addition, data may be transferred to the United States to EBF Inc. EBF Inc. is an affiliate of EBF – EDV Beratung Föllmer GmbH. The transfer is safeguarded by appropriate safeguards within the meaning of Article 46 of the GDPR.

Provision Required or Necessary:
The personal data processed by the cookies is necessary for the operation of the website. Beyond the necessary data, the data subject is free to consent to the use of additional cookies. All cookies used for further analysis of user behavior are activated only after the user has given their consent.
On this website, this applies to Matomo cookies. All other cookies are necessary for the operation and security of the website.

Withdrawal of consent:
Consent regarding cookies that are not technically necessary can be withdrawn at any time via the privacy policy.

Profiling:
The data subject’s personal data is not linked or merged with data from other sources.

c.

Server log files

Purpose and Legal Basis (+Legitimate Interest):
When visiting the website, data is automatically transmitted from the data subject’s browser to EBF-EDV Beratung Föllmer GmbH and stored in so-called server log files.

The following are stored:

• Browser used
• Browser version
• Operating system
• Referrer URL
• Hostname of the accessing PC
• Time of the server request
• IP address

The legal basis for processing the specified data is the fulfillment of a legal obligation by the controller (Art. 6 (1) (b) GDPR). The legal obligation is the customer contract between EBF-EDV Beratung Föllmer GmbH and the customer and the resulting obligation to provide the EBF Onboarder. The server log files are stored in order to provide the customer with an EBF Onboarder that is as secure and available as possible.

Other recipients of the data:
EBF Inc.
1221 Hermosa Ave STE 101
Hermosa Beach, CA 90254
USA
Tel.: +1 310 9802781

Retention Period:
The data subject’s personal data is generally deleted after no later than 14 days. Individual server log files may be stored for longer. This may be necessary to ensure or improve the security and stability of the Onboarder. If statutory retention periods apply, the data will be blocked and deleted after the relevant retention periods have expired.

Transfer to Foreign Countries:
The data is processed on servers belonging to EBF-EDV Beratung Föllmer GmbH. The servers are located in Cologne.

In addition, data may be transferred to the United States to EBF Inc. EBF Inc. is an affiliate of EBF – EDV Beratung Föllmer GmbH. The transfer is safeguarded by appropriate safeguards within the meaning of Article 46 of the GDPR.

Provision is required or necessary
The personal data processed in the log files is necessary for the operation of the website.

Withdrawal of consent:
The processing is not based on the data subject’s consent.

Profiling:
The data subject’s personal data is not linked or merged with data from other sources.

d.

YouTube link

Purpose, Legal Basis, and Responsibility:
Visitors to the Onboarder site can click a link to go to the YouTube website. Various help videos are available there to explain the Onboarder’s features. When this link is used, YouTube receives information about the website from which the link was accessed. If you are logged into a YouTube account, this information may be linked by YouTube to your account information. You can prevent this by logging out of your account beforehand. For more information on YouTube’s processing of user data, please visit: https://policies.google.com/privacy.

Other recipients of the data:
YouTube is operated by:
Google Ireland Ltd.
Gordon House, Barrow Street
Dublin 4
Ireland
E-Mail: support-deutschland@google.com

Transfer to other countries:
When using YouTube, your personal data may be transferred to Google LLC in the United States.

e.

Contact form

Purpose and Legal Basis (+Legitimate Interest):
A contact form is available on the website. Customers can use it to contact EBF – EDV Beratung Föllmer GmbH. When the form is used, the data entered (name, email address) is stored and used to communicate with the customer. The legal basis for this, depending on the customer’s request, is the existing customer contract (Art. 6(1)(b) GDPR), the performance of pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR), or the consent of the data subject (Art. 6(1)(a) GDPR).

Retention Period:
The data subject’s personal data will be deleted as soon as the purpose of the processing has been achieved or no longer applies. If statutory retention periods apply, the data will be blocked and deleted after the relevant retention period has expired.

Transfer abroad:
The data is processed on servers belonging to EBF – EDV Beratung Föllmer GmbH. The servers are located in Cologne.

Provision Mandatory or Necessary:
The provision of personal data is voluntary on the part of the data subject.

Withdrawal of consent:
To the extent that processing is based on the data subject’s consent, this consent may be withdrawn at any time. To do so, please notify the data protection officer using the contact details provided in Section 1 that you wish to withdraw your consent.

Profiling:
The data subject’s personal data is not linked or merged with data from other sources.

3. What data protection rights do you have?

Every data subject has the right of access under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR, and the right to data portability under Article 20 of the GDPR.

The restrictions under Sections 34 and 35 of the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) apply to the right of access and the right to erasure.
You may revoke any consent you have given to the processing of personal data at any time. This also applies to the revocation of declarations of consent that were given to us prior to the General Data Protection Regulation coming into effect. Please note that the revocation only takes effect for the future. Processing that took place prior to the revocation is not affected by this.

Please exercise your rights as a data subject by contacting the data protection officer of the controller using the contact details provided in Section 1.

In addition, you have the right to lodge a complaint with a competent data protection authority (Art. 77 GDPR in conjunction with § 19 BDSG). A list of supervisory authorities (for the non-public sector) with addresses can be found at:

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

4. Information regarding your right to object under Article 21 of the GDPR

Right to object in specific cases:
You have the right to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) (f) GDPR (overriding legitimate interest). This also applies to profiling based on this provision within the meaning of Art. 4 (4) GDPR.

Your objection should be submitted informally to the data protection officer of the controller, stating your name, address, or other identifying information (see Section 1).

5. Data Security

To ensure the security of your personal data, we use encryption (e.g., SSL) via HTTPS. Our servers are equipped with a firewall and up-to-date antivirus programs. Regular backups are made of all relevant data. An effective role and authorization concept is in place. Further information on the technical and organizational measures taken can be found, for example, in our Onboarder-Security-Whitepaper.

6. Changes to Our Privacy Policy

We reserve the right to amend this Privacy Policy as necessary to comply with applicable legal requirements at all times or to reflect changes in our services. The amended Privacy Policy will then apply to visits and use following such changes.