• You are here:
  • HABBL
  • ›
  • Data Privacy

Privacy policy of
EIKONA GmbH

 

1. Preamble

 

We are pleased about your visit on the website of our company. Information protection and in particular data protection is of great importance to our management. In principle, you can use this website without providing any personal data. Should you disclose data to us in connection with the processing described below, we will treat your personal data confidentially and in accordance with the legal data protection regulations of the European Union and the Federal Republic of Germany as well as this data protection declaration.

As the data controller, EIKONA GmbH has implemented numerous technical and organizational measures to ensure the complete protection of personal data processed via this website. However, Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, you as the person concerned are free to transmit personal data to us by alternative means, for example by telephone or mail.

 

2. Definitions

 

EIKONA GmbH data protection declaration is based on the terms used by the European legislator when the basic data protection regulation (GDPR) was issued. The detailed definitions can be found in Art. 4 GDPR. Essentially, these are the following terms, described here in simplified form:

Personal data:
This is all information available to us as a responsible person to determine you as a natural person. (e.g. name, address, e-mail, telephone number, IP address etc.)

Person concerned:
This is you as a natural person, if we have identified you or can identify you.

Processing:
Processing is any collection, storage, further processing, forwarding, archiving and deletion of data. It is irrelevant whether the process is carried out automatically with the aid of IT systems or whether it is carried out manually (e.g. by letter).

Restriction of processing:
Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.

Profiling:
Profiling is any type of automated processing of your data, which consists in using these data to evaluate certain personal aspects relating to you. In particular, to analyse or predict aspects relating to your job performance, economic situation, health, personal preferences, interests, behaviour, whereabouts or change of location.

Pseudonymization:
This is a process to identify your personal data. In the following, only this identifier will be used and without the original key or a "reference database" this pseudonym cannot be resolved (e.g. allocation of a customer number).

Responsible Person:
The person responsible or responsible for processing is EIKONA GmbH with whom you have a contractual relationship. It is crucial that we can decide independently on the processing methods and means.

Contract processor:
A processor is a company that has been commissioned by EIKONA GmbH to assist you in the collection, processing, storage, forwarding or deletion of your data. Usually these are IT service providers, but also waste disposal companies that are commissioned, for example, with the destruction of documents.

Consent:
Consent is any expression of will given by you for a specific individual case. You will be fully informed about what you are consenting to.

 

3. The name and address of the controller

 

The person responsible for this website and the central services of EIKONA GmbH within the meaning of the Data Protection Basic Regulation and other regulations of a data protection nature is:

EIKONA GmbH
Am Alten Bahnhof 8
D-97332 Volkach

Managing Director: Bastian Späth

Phone: +49 9381 / 71 77 8 - 116
E-Mail:

 

4. Data Protection Officer

 

A data protection officer has been appointed for EIKONA GmbH. He is available at any time to answer your questions in connection with data processing.

pco GmbH & Co. KG
Data Protection Officer – Confidential –
Industriestraße 6a
D-97359 Schwarzach am Main

Phone: +49 (0) 541 – 605 1500
e-mail:

 

5. Rights of the data subject

 

In accordance with Chapter 3 of the GDPR, you have the following rights as a data subject. In order to fulfil our obligations in connection with your rights in accordance with the law, please address appropriate inquiries to our data protection officer.

Art. 15 Right to information

You have an unlimited right to request information about the personal data processed by you. This information must be provided to you free of charge. You may request information on the following information, a copy of which must also be sent to you:

  • the purpose of processing your data,
  • the categories of the data,
  • the internal and external recipients of your data,
  • the duration of the data storage,
  • their rights under Chapter 3, in connection with data processing,
  • the origin of the data, if it was not collected from you,
  • whether a profile was created,
  • whether your data has been transferred to a third country (non-EU and non-EEA),
  • which data protection authority is responsible for our respective company,

Art. 16 Right of rectification

Should we process incorrect data from you, you can have this corrected at any time by your contact person.

Art. 17 Right of cancellation

You have the right to request the deletion of your personal data at any time. We may be required by law to retain your data for a certain period of time (e.g. 6 years for business mail or 10 years for tax-related documents). In such a case we will block your data record until the retention period has expired and then delete the data record accordingly. Please address deletion requests to the data protection officer, who will exercise your rights in our company on your behalf.

Art. 18 Right to limit processing

If you dispute the accuracy of our personal data, or if you refuse to have your data deleted and instead demand the restriction (e.g. in the case of advertising mail), you can demand the restriction of processing from us. We will then set your data to blocked.

Art. 19 Obligations of notification in connection with correction, deletion or restriction

We are obliged to inform all recipients of your data of any correction, deletion or restriction you have commissioned, insofar as this is possible and can be implemented with a reasonable amount of effort. We will inform you about the recipients of your data if you request this.

Art. 20 Right to data transfer

You have the right at any time to request our company to transfer your data to another responsible person. This refers to all master data that we keep about you. If technically possible, we will provide the data record in a common machine-readable format (e.g. .csv).

Art. 21 Right of objection

If a data processing has been justified on the basis of article 6, paragraph I, letter f (so-called legitimate interest), you may object to the processing in this context.

Art. 77 Right to appeal to a supervisory authority

You have the right to complain to the data protection supervisory authority responsible for our company at any time if you believe that we have violated the provisions of the GDPR in any way. The following authority is responsible for EIKONA GmbH:

Bayerisches Landesamt f. Datenschutzaufsicht (BayLDA)
Promenade 18
D-91522 Ansbach

You can access the website of the data protection supervisory authority via the following link: https://www.lda.bayern.de/de/index.html

 

6. Processing operations

 

In this section we will describe the data processing that is connected with our internet offer or that applies to a general business relationship between you and our company.

The following legal bases serve us for the processing of your data.

Art. 6 I lit. a GDPR serves our company as a legal basis for processing operations for which we obtain consent for a specific processing purpose.

If the processing of your data is necessary for the performance of a contract to which you are a party, as is the case, for example, with processing operations required for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 I lit. b GDPR. The same shall apply to such processing operations which are necessary for the performance of pre-contractual measures, for example in cases of inquiries about our products or services.

If our company is subject to a legal obligation which makes the processing of personal data necessary, for example to fulfil tax obligations, the processing is based on Art. 6 I lit. c GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the person concerned or of another natural person. This would be the case, for example, if a visitor to our company was injured and his name, age, health insurance details or other vital information had to be passed on to a doctor, hospital or other third party. In this case the processing would be based on Art. 6 I lit. d GDPR.

Finally, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the above legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, unless the interests, fundamental rights and freedoms of you outweigh the processing.

Website processing

We operate this website and collect various data in this context.

Cookies

The Internet pages partly use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. We, as website operators, have a legitimate interest in the storage of cookies for the technically error-free and optimized provision of our services.

Server log data

EIKONA GmbH or our website provider collects data about access to our website and stores it as "server log files". The following data is logged in this way:

  • Visited website
  • Time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you reached to the page
  • Used Browser
  • Operating system used
  • IP address used (anonymized)

The data collected is only used for statistical analysis and to improve the website. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.

Registration on our website

On our website you have the possibility to register by providing your personal data. Your data will be entered into an input mask, transmitted to us and then stored. The data will not be passed on to third parties. The following data will be collected during your registration:

  • Username and password (data from input mask)
  • Personal information (company, first and last name, address, e-mail address)
  • Further details

Your personal data will be processed on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR, unless they are necessary for the performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR. If you wish to delete your account, you can do so in writing by post or by e-mail to datenschutz@eikona.de.

Third party modules / analysis tools / advertising

You can prevent the collection of data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Web analysis Tool Matomo

We have integrated Matomo on this website. The software is operated on our own servers, so that your data are stored exclusively on our servers. For this purpose Matomo sets a cookie on your system. Further information and Matomo's valid data protection regulations can be found at: https://matomo.org/privacy/

Contact / Inquiries

Contact form / E-Mail / Phone inquiry
If you send us enquiries, your details including the contact data you provided will be stored by us for the purpose of processing the enquiry. The processing of the data takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR) or Art. 6 para. 1 lit b GDPR (pre-contractual measures). Mandatory legal provisions - in particular retention periods - remain unaffected.

Data processing for the fulfilment of contracts

Data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. For credit checks, we work together with Creditreform Boniversum GmbH. Information according to article 14 GDPR regarding data processing at Creditreform Boniversum GmbH can be found here: https://www.boniversum.de/eu-dsgvo/?lang=en

Handling of applications Documents

The legal basis for the processing of your personal data for application purposes is Art. 6 para. 1 lit. b GDPR. Application documents are usually deleted 6 months after the application process is completed.

Use of feedback options

(1) Link to Google Review
You have the option of submitting a review on Google. You can find Google's privacy policy at: https://policies.google.com/?hl=en. Data processing is carried out in accordance with Art. 6 para. 1 p. 1 lit. a GDPR on the basis of your voluntarily given consent.

 

7. Protection / encryption

 

This site uses SSL or TLS encryption for security reasons. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

 

8. Profiling

 

As a responsible company, we avoid automatic decision making or profiling.

 

9. Actuality / status

 

This data protection declaration has the current status of March 2026 and is subject to constant updating and adaptation to new legal requirements and technical developments.