Legal information

Our
Privacy Policy

Here we inform you which personal data we process on our website and in our online shop.

1. Controller

The controller responsible for processing personal data on this website is:

EILX GmbH
Max-Eyth-Straße 21
74354 Besigheim
Germany

Phone: +49 7143 763 848-0
Email: info@eilx.com
Website: www.eilx.com

Authorised Managing Director: Marcel Eiler

2. General information on data processing

We process personal data only to the extent necessary to provide our website, handle enquiries, orders, customer accounts, payments and deliveries, or comply with legal obligations.

Die Verarbeitung erfolgt insbesondere auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO, sofern Sie uns eine Einwilligung erteilt haben, auf Grundlage von Art. 6 Abs. 1 lit. b DSGVO, sofern die Verarbeitung zur Durchführung vorvertraglicher Maßnahmen oder eines Vertrags erforderlich ist, auf Grundlage von Art. 6 Abs. 1 lit. c DSGVO, sofern eine rechtliche Verpflichtung besteht, sowie auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO, sofern wir ein berechtigtes Interesse an der jeweiligen Verarbeitung haben.

3. Hosting, EU servers and technical provision

Our website and online shop are operated on servers within the European Union. The hosting provider processes technical access data on our behalf so that the website can be provided securely, reliably and with high performance.

When you access our website, the following data in particular may be processed: IP address, date and time of access, requested URL, referrer URL, browser type, browser version, operating system, amount of data transferred and server status codes.

This data is processed to provide the website technically, ensure IT security, analyse errors and prevent misuse on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and uninterrupted operation of our website.

4. SSL and TLS encryption

For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address bar begins with https:// begins with and a padlock icon is displayed.

Encryption prevents data you transmit to us from being readily read by third parties. This applies in particular to contact forms, customer accounts, the shopping cart and checkout.

5. Cookies and consent management

We use cookies and similar technologies. Some cookies are technically necessary for our website and online shop to function. We use other cookies and technologies, for example for statistics, marketing or personalised advertising, only if you have given your prior consent.

Technisch erforderliche Cookies werden auf Grundlage von § 25 Abs. 2 TDDDG sowie Art. 6 Abs. 1 lit. f DSGVO eingesetzt. Unser berechtigtes Interesse liegt in der sicheren und funktionsfähigen Bereitstellung unserer Website. Nicht erforderliche Cookies und vergleichbare Technologien setzen wir nur auf Grundlage Ihrer Einwilligung gemäß § 25 Abs. 1 TDDDG und Art. 6 Abs. 1 lit. a DSGVO ein.

Typical essential cookies

  • Session cookies: for the technical use of the website.
  • Shopping-cart cookies: to save the shopping cart.
  • Language and country cookies: to display the appropriate language, currency and tax settings.
  • Consent cookies: to save your cookie and privacy selection.

You can change or withdraw your consent at any time with effect for the future via our cookie settings.

Open cookie settings

6. Contacting us

If you contact us via the contact form, email, telephone or other communication channels, we process the data you provide in order to handle your enquiry.

This may include, in particular, your name, company, email address, telephone number, address, customer number, vehicle data, order information and the content of your message.

Processing is carried out on the basis of Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual measures. In all other cases, processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in handling your enquiry appropriately.

7. Customer account and orders in the online shop

If you create a customer account or place an order in our online shop, we process the data required to set up the customer account, process the order, handle payment and delivery, issue invoices and provide customer service.

This may include, in particular, your name, company, VAT identification number, billing address, shipping address, email address, telephone number, payment data, order data, vehicle data, configurations, shopping-cart contents and communication data.

Processing is carried out on the basis of Art. 6(1)(b) GDPR. Where we are legally obliged to retain certain data, processing is additionally carried out on the basis of Art. 6(1)(c) GDPR.

8. Payment and shipping service providers

To process payments and deliveries, we may disclose personal data to payment service providers, banks, shipping providers, freight carriers or logistics partners to the extent necessary to fulfil your order.

The data is disclosed on the basis of Art. 6(1)(b) GDPR. Where we are legally obliged to carry out certain checks or maintain documentation, processing is carried out on the basis of Art. 6(1)(c) GDPR.

Depending on the selected payment method, the privacy information of the respective payment service provider also applies.

9. Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how visitors use our website, which pages are particularly relevant and how we can improve our offering.

Google Analytics is used only if you have consented to this via our consent management system. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Im Rahmen von Google Analytics können unter anderem Seitenaufrufe, Klicks, Scrollverhalten, technische Geräteinformationen, ungefähre Standortdaten, Referrer-Informationen und Interaktionen mit unserer Website verarbeitet werden. Google Analytics 4 speichert nach Angaben von Google bei Zugriffen aus der EU, der Schweiz und dem Vereinigten Königreich keine einzelnen IP-Adressen.

Where technically available, we use Google Analytics with privacy-friendly settings. These include, in particular, the IP-related safeguards of Google Analytics 4, a limited retention period and activation only after you have given your consent.

You can withdraw your consent at any time via our cookie settings.

10. Google Ads and conversion tracking

We use Google Ads to advertise our products and offers in Google Search and on other Google platforms. This enables us to determine whether users take a particular action after clicking an advertisement, for example submitting an enquiry, viewing a product, starting a configuration or completing an order.

Google Ads and conversion tracking are used only if you have consented to this. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

As part of Google Ads, cookies, device information, usage data, referrer information, conversion data and pseudonymous identifiers may be processed. If remarketing or audience functions are used, users may be shown relevant advertisements again based on their previous usage behaviour.

For users in the European Economic Area, the United Kingdom and Switzerland, Google requires valid consent for certain Google products and advertising functions. We therefore use Google services only in accordance with your selection in the consent management system.

11. Google Consent Mode

We may use Google Consent Mode to communicate the selection you make in the cookie banner to Google services. This controls whether Google Analytics, Google Ads and comparable services may set cookies or process data for analytics and advertising purposes.

Without your consent, no non-essential cookies are set for Google Analytics or Google Ads. Depending on the technical implementation, however, cookieless signals may be processed to enable aggregated measurement and basic functionality.

12. Data transfers to third countries

When Google services are used, it cannot be ruled out that personal data may also be transferred to Google LLC in the USA or to other Google companies. According to its own information, Google LLC is certified under the EU–U.S. Data Privacy Framework.

Where necessary, we additionally base data transfers on appropriate safeguards within the meaning of Arts. 44 et seq. GDPR, in particular standard contractual clauses, where these are provided by Google.

13. Newsletter and direct marketing

If you subscribe to our newsletter, we use your email address to send information about EILX products, offers, promotions and news.

The newsletter is sent only on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future, for example via the unsubscribe link in the newsletter or by sending us a message.

Where we send email advertising to existing customers, we do so only within the legally permitted framework. You may object to the use of your email address for advertising purposes at any time.

14. Recipients and processors

Personal data is disclosed to third parties only where this is necessary for the respective purposes, there is a legal obligation, you have given your consent or another legal basis applies.

Recipients may include, in particular: hosting providers, IT service providers, payment service providers, shipping and logistics providers, tax advisers, authorities, banks, marketing service providers and technical service providers.

Where service providers process personal data on our behalf, we enter into data processing agreements with them pursuant to Art. 28 GDPR.

15. Retention period

We retain personal data only for as long as necessary for the respective processing purposes. The data is then deleted unless statutory retention obligations prevent this.

Business correspondence, invoices, accounting records and tax-relevant documents may be retained for several years due to statutory requirements. In this case, processing is carried out on the basis of Art. 6(1)(c) GDPR.

16. Your rights

Subject to the statutory requirements, you have the following rights:

  • Right of access pursuant to Art. 15 GDPR
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to object pursuant to Art. 21 GDPR
  • Right to withdraw consent pursuant to Art. 7(3) GDPR

If processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

17. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

The responsible supervisory authority in Baden-Württemberg is:

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany

18. Current status of this Privacy Policy

This Privacy Policy is currently valid. We reserve the right to amend it in the event of legal, technical or organisational changes.