Privacy Policy

The requirements of the EU General Data Protection Regulation apply throughout Europe. We would like to inform you about the processing of personal data carried out by our company in accordance with this regulation (compare Articles 13 and 14 GDPR). If you have any questions or comments about this data protection declaration, you can send them to the email address given under I. 2 or I.3 at any time.



In this section of the data protection declaration you will find information on the scope, the person responsible for data processing, his data protection officer and data security.

1. Purpose

Data processing by Ecologiks GbR can essentially be divided into two categories:

For the purpose of contract processing, all data necessary for the execution of a contract with Ecologiks GbR are processed. If external service providers are also involved in the execution of the contract, your data will be passed on to them to the extent necessary.

When you access the Ecologiks GbR website / application, various information is exchanged between your device and our server. This can also be personal data. The information collected in this way is used, among other things. used to optimize our website or to display content and advertising in the browser of your device.

This data protection declaration applies to the following offers:

our online offer is available at

whenever there is a reference to this data protection declaration from one of our offers (e.g. websites, subdomains, mobile applications, web services or integration into third-party sites), regardless of the way in which you access or use it.

All of these offers are collectively referred to as "Services".


2. Responsibility

The person responsible for data processing - i.e. the person who decides on the purposes and means of processing personal data - is in connection with the services:

Ecologiks GbR

Maximilianstrasse 28b

53111 Bonn


3. Data protection officer

You can contact our data protection officer as follows:



4. Data security

We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of processing, as well as the different probability and severity of the risk to the rights and freedoms of natural persons Measures to ensure a level of protection appropriate to the risk.

The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling the physical access to the data, as well as the access, input, transfer, securing availability and its separation. Furthermore, we have set up procedures that guarantee the exercise of data subject rights, deletion of data and reaction to data threats. Furthermore, we take the protection of personal data into account when developing or selecting hardware, software and processes, in accordance with the principle of data protection through technology design and data protection-friendly default settings.


In this section of the data protection declaration we inform you in detail about the processing of personal data as part of our services. For better clarity, we structure this information according to certain functionalities of our services. With the normal use of the services, different functionalities and thus also different processing can come into effect one after the other or simultaneously.

1. General information on data processing

Unless otherwise stated, the following applies to all processing operations described below:

a. No commitment to provide

There is no contractual or legal obligation to provide personal data. You are not obliged to provide data.

b. Consequences of non-provision

In the case of required data (data which are marked as mandatory when you enter them), the failure to provide them means that the service in question cannot be provided. Otherwise, the non-provision may result in our services not being able to be provided in the same form and quality.

c. consent

In various cases, you have the option to give us your consent to further processing in connection with the processing described below (if necessary for part of the data). In this case, we will inform you separately in connection with the submission of the respective declaration of consent about all modalities and the scope of the consent and about the purposes that we pursue with this processing.

d. Transfer of personal data to third countries

If we send data to third countries, i.e. Countries outside the European Union, then the transmission takes place only in compliance with the legally regulated admissibility requirements.

The admissibility requirements are regulated by Art. 44-49 GDPR.

e. Hosting with external service providers

Our data processing is carried out to a large extent with the involvement of so-called hosting service providers, who provide us with storage space and processing capacity in their data centers and, according to our instructions, also process personal data on our behalf. These service providers either process data exclusively in the EU or we have guaranteed an appropriate level of data protection using the EU standard data protection clauses.

f. Transmission to government agencies

We transmit personal data to state authorities (including law enforcement authorities) if this is necessary to fulfill a legal obligation to which we are subject (legal basis: Art. 6 Para. 1 c) GDPR) or if it is necessary to assert, exercise or defend legal claims (Legal basis Art. 6 Para. 1 f) GDPR).

G. Storage period

We do not store your data longer than we need it for the respective processing purposes. If the data is no longer required for the fulfillment of contractual or legal obligations, it will be deleted regularly, unless it is still necessary to keep it for a limited period. Reasons for this can e.g. Be the following:

The fulfillment of commercial and tax law retention requirements

Obtaining evidence for legal disputes within the statutory statute of limitations

It is also possible for us to continue storing your data with us if you have given your express consent for this or if the data is anonymized or sufficiently pseudonymized.

H. Data categories

Account data: login / user ID and password

Personal master data: title, title / gender, first name, last name, date of birth, if necessary profile picture

Address data: street, house number, address additions if necessary, postcode, city, country

Contact details: telephone number (s), fax number (s), e-mail address (s)

Credentials: information about the service you signed up for; Times and technical information for registration, confirmation and cancellation; Data provided by you when registering

Ordering data: Ordered products, prices, payment and delivery information

Payment data: account data, credit card data, data on other payment services

Access data: date and time of visit to our service; the page from which the accessing system came to our site; pages accessed when using; Session identification data (session ID); In addition, the following information about the accessing computer system: Internet protocol address (IP address) used, browser type and version, device type, operating system and similar technical information.

Application data: CV, certificates, evidence, work samples, certificates, pictures

2. Access to the website

This describes how we process your personal data when you access our services. We particularly point out that the transmission of access data to external content providers (see under b.) Is unavoidable due to the technical functioning of the information transfer on the Internet.

a. Processing information

The following data is collected:

Access data for the purpose of establishing a proper connection to our service, the presentation of content, the security of data and business processes as well as the detection and prevention of attacks on our site based on unusual activities and fault diagnosis

The access data is stored for seven days. The legal basis for this processing of personal data is Art. 6 Para. 1 f) GDPR.

b. Recipient of personal data

The legal basis for the transmission of personal data is order processing in accordance with Art. 28 GDPR.

Recipient category: web hosting service provider

Affected data: access data


3. Customer support

How we process your personal data when you contact our customer service can be found here:

Processing information

The following data is collected, in each case for processing customer inquiries and user complaints, for customer loyalty and improving our service:

  • Personal master data

  • contact details

  • Contents of inquiries or contact

The data is stored for up to 3 years. The legal basis for this processing of personal data is Art. 6 Para. 1 b), f) GDPR.


4. Customer account / order processing

We process our customers' data as part of the ordering processes in our online shop in order to enable them to select and order the selected products and services, as well as their payment and delivery, or execution.

a. Processing information

The following data is collected and processed in order to guarantee the provision of the contractual service in the context of the operation of the online shop, billing and delivery. Furthermore for processing customer inquiries and user complaints, for customer loyalty and improving our service:

  • Account data

  • Personal master data

  • Address data

  • contact details

  • Credentials

  • Order data

  • Payment details

Contents of inquiries or contact:

The legal basis for this processing of personal data is Art. 6 Para. 1 a), b), f) GDPR.

After registration, the user will be sent an email to activate the customer account. As part of the customer account, the orders placed can be called up, a profile for the evaluation of products can be created (optional upload of a profile photo) and the account data can optionally be completed with billing and delivery addresses. To process the order and the payment, the following data is mandatory: first and last name, postal address, email address.

As part of the registration and renewed registration and use of our online services, we save the IP address and the time of the respective user action. The storage takes place on the basis of our legitimate interests, as well as the user's protection against misuse and other unauthorized use. This data is not passed on to third parties, unless it is necessary to pursue our legal claims as a legitimate interest or there is a legal obligation to do so.

The deletion takes place after expiry of statutory warranty and other contractual rights or obligations (e.g. payment claims or performance obligations from contracts with customers); in the case of storage due to statutory archiving obligations, the deletion takes place after its expiration.

Payments are made exclusively to the clearing account of Ecologiks GbR. To process payments, we pass on the payment data required for this to the credit institution commissioned with the payment and, if applicable, to the payment and invoice service provider commissioned by us or to the payment service you selected in the ordering process.


5. Data Application

In an ongoing application process, we process your personal data in the following ways:

a. Processing information

The following data is collected, in each case for processing customer inquiries and user complaints, for customer loyalty and improving our service:

Personal master data

contact details

Application data

The data is saved for the period of processing. We delete the application documents no later than 6 months after receipt of a rejection in order to be able to defend ourselves against potential allegations of discrimination.

The legal basis for this processing of personal data is Art. 6 Para. 1 b), f) GDPR.

b. Recipients of personal data

No transfer of personal data.


7. Participation to Contests

We regularly offer you participation in various competitions on our website and through our social media channels. We only collect, process and use the data you provide when participating in a competition to run the competition. If we run the competition with a cooperation partner, it may be necessary to pass on your data to the cooperation partner in order to process the competition and to distribute the prize in order to distribute the prize to you. Any further disclosure of the data to third parties or use of the data for marketing purposes (e.g. for sending newsletters) will only take place if you have previously given your express consent. The legal basis for participation in the competition is Art. 6 Para. 1 lit. b GDPR.



1. Right to object

If we process your personal data for direct marketing purposes, you have the right to object to the processing of your personal data for the purpose of such advertising at any time with future effect; this also applies to profiling insofar as it is connected to such direct advertising.

You also have the right to object to the processing of personal data relating to you in accordance with Art. 6 Para. 1 e) or f) GDPR at any time with future effect for reasons that arise from your particular situation. ; this also applies to profiling based on these provisions.

You can exercise the right to object free of charge.

You can contact us using the contact details listed under I.2.


2. Right to information

You have the right to know whether we process your personal data, what personal data this may be, as well as further information in accordance with Art. 15 GDPR. If you would like information about your personal data, please contact us at the email address:


3. Right to rectification

You have the right to request that we immediately correct any incorrect personal data relating to you (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.


4. Right to deletion ("Right to be forgotten")

You have the right to ask us to delete your personal data immediately, provided that one of the reasons stated in Art. 17 Para. 1 GDPR applies and the processing is not for one of the purposes regulated in Art. 17 Para. 3 GDPR is required.


5. Right to restriction of processing

You are entitled to request a restriction in the processing of your personal data if one of the conditions set out in Art. 18 Para. 1 a) to d) GDPR is met.


6. Right to data portability

You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transmit this data to another responsible person without hindrance from us or to have a direct transmission by us, provided this is technically possible. This should always apply if the basis of data processing is consent or a contract and the data is processed automatically. This does not apply to data held only in paper form.


7. Right of withdrawal with consent

If the processing is based on your consent, you have the right to withdraw your consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.


8. Right to complain

You have the right to lodge a complaint with a supervisory authority.

As of May 2020