Privacy policy
As of May 30, 2025Table of contents
- Name and address of the data controller
- Contact details of the data protection officer
- General information on data processing
- Rights of the person concerned and how to control your personal data
- How we collect and use your personal data
- Visiting the website
- Use of cookies
- Registration
- Ecovacs club membership
- E-mail contact
- Contact form
- Customer services
- Transaction
- Ecovacs Home App and Devices
- Competitions/Sweepstakes
- E-mail newsletter
- Digital Advertising & Analytics
- Application by e-mail
- Social media networks
- Job-oriented networks
- Geotargeting
- How we entrust, share, transfer and disclose your personal data
- Integration of plugins via external service providers
- How we store and protect your personal data
- Cross-border transfer of personal data
- Special Provision relating to children
- Amendment of this Privacy Policy
Ecovacs Europe GmbH
Holzstr. 2
40221 Düsseldorf
Germany
+49 (0)211 5380 4300
info@ecovacs-europe.com
https://www.ecovacs.com/uk The controller's data protection officer is:
DataCo GmbH
Dachauer Straße 65
80335 Munich
Germany
+49 89 7400 45840
www.dataguard.de 1. Scope of processing of personal data
As a matter of principle, we process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is required by law.
2. Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) GDPR serves as the legal basis.
In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 (1)(c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) (f) GDPR serves as the legal basis for the processing.
3. Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. In addition, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract. If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the data controller:
1. The right to access (Art. 15 GDPR)
You have the right to request confirmation from us as to whether personal data relating to you is being processed.
If this is the case, you have a right to information about this data and to the following information:
-
- Processing purposes
- Categories of personal data
- Recipients or categories of recipients
- Planned storage period or the criteria for determining this duration
- the existence of the rights to rectification, erasure or restriction or objection
- Right to lodge a complaint with the competent supervisory authority
- If applicable, origin of the data (if collected from a third party)
- If applicable, there is automated decision-making, including profiling, with meaningful information about the logic involved, the scope and the expected effects
- If necessary, transfer of personal data to a third country or international organization
2. Right to rectification (Art. 16 GDPR)
If your personal data is incorrect or incomplete, you have the right to request immediate correction or completion of the personal data.
You may refer to our contact information listed at the top of this Policy to request rectification in your personal data. We may require you to provide some information to check and verify your identity as the account owner before we proceed with any request to access your personal data.
3. Right to restriction of processing (Art. 18 GDPR)
If one of the following conditions is met, you have the right to request a restriction on the processing of your personal data:
-
- You dispute the accuracy of your personal data for a period of time that enables us to verify the accuracy of the personal data.
- In the context of unlawful processing, you refuse the deletion of the personal data and instead request the restriction of the use of the personal data.
- We no longer need your personal data for the purposes of processing, but you need your personal data to assert, exercise or defend your legal claims, or
- after you have objected to the processing, for the duration of the examination whether our legitimate reasons outweigh your reasons.
If one of the following reasons applies, you have the right to request the immediate deletion of your personal data:
-
- Your data is no longer necessary for the processing purposes for which it was originally collected.
- you revoke your consent and there is no other legal basis for the processing.
- You object to the processing and there are no overriding legitimate reasons for the processing or you object pursuant to Art. 21 (2) GDPR.
- Your personal data will be processed unlawfully.
- The deletion is necessary to fulfill a legal obligation under Union law or the law of the member state to which we are subject.
- The personal data was collected in relation to information society services offered in accordance with Art. 8 (1) of the GDPR.
How to cancel your Ecovacs account. You may initiate the termination of your account in the ECOVACS Home App account setting or contact us with the information as listed in this Policy. Before the completion of the termination, we may require you to provide some information to check and verify your identity as the account owner. You may also reach out to customer services for assistance. We will delete or anonymise your personal data in irreproducible and irrecoverable means, immediately after the termination of your account.
Please note that the above reasons do not apply if the processing is necessary:
-
- To exercise the right to freedom of expression and information;
- To comply with a legal obligation or to perform a task that is in the public interest and to which we are subject.
- For reasons of public interest in the field of public health.
- For archival purposes in the public interest, scientific or historical research purposes, or for statistical purposes.
- to assert, exercise or defend legal claims.
You have the right to receive your personal data in a structured, common and machine-readable format or to request that it be transferred to another person responsible.
6. Right to object to certain data processing (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) (e) or Art. 6 (1) (f) GDPR. This also applies to profiling based on these provisions.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling to the extent that it is related to such direct marketing.
How to refuse to receive promotion notifications. If you have opted to receive marketing information, you may, at any time, click on the “unsubscribe” button in emails sent by us or contact us through the information provided in the Policy to refuse to receive future promotion notifications. You can also find in the user setting interface an option to avoid receiving promotion notifications on the Ecovacs Home App end. Furthermore, you may also opt out from targeted advertising in the App within your App account interface by choosing to opt out, consequently advertisements pushed to you would be irrelevant to your interests.
Please note that as long as there is a valid contractual relationship with us or if it is legally required, we need to continue to send you email which is necessary to providing you with the services. For example, if you have an Ecovacs account, you will receive emails related to the account verifications, order confirmations, changes or updates of service functions, or notices regarding technology and safety, etc. for the purposes aforementioned. And, we may not accommodate a request to delete personal information if it would violate any law or legal requirement.
7. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR. The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR. A list of the local supervisory authorities in Germany can be found on the website of the Federal Commissioner for Data Protection under the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
- V. How we collect and use your personal data
- IP address of the calling computer
- Operating system of the calling computer
- Browser version of the calling computer
- Name of the retrieved file/website
- Date and time of retrieval
- Transferred amount of data
- Referring URL
The website is hosted on servers by the service providers commissioned by us.
The service providers include:
- Amazon Cloud Service (Amazon Web Services, Inc.) and
- Ali Cloud Service (Alibaba (Netherlands) B.V.).
The legal basis for this data processing is Art. 6 (1) (f) GDPR. Our overriding legitimate interest is the above purposes. 1. Description and scope of data processing
When you visit our website, we use technical aids for various functions, in particular cookies, which can be stored on your device. When you visit our website and at any time later, you have the choice of whether you generally allow the setting of cookies or which individual additional functions you would like to select. You can make changes in your browser settings or via our consent manager. Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using, so that certain information can flow to the site that sets the cookie. Below we describe what Art of cookies we use:
We use technically necessary cookies, which are necessary for the technical structure of the website. Without these cookies, our website cannot be displayed (completely correctly) or the support functions are not possible.
The following data is stored and transmitted by the technically necessary cookies:
-
- Language
- Log-in information
- Entered search terms
- Frequency of page views
By setting cookies that are not technically necessary, the following data is processed:
-
- IP address
The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
We need the technically necessary cookies for the following applications:
-
- Adoption of language settings
- Remembering search terms
Advertising & Analytics
3. Legal basis for data processing
The provisions of the Telecommunications Telemedia Data Protection Act (TTDSG) are relevant for the storage of information in the end user's terminal equipment and/or access to information already stored in the end user's terminal equipment. If the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, the storage of and access to cookies on your terminal equipment is based on Section 25 (2) (2) TTDSG. This storage and access to the information in your terminal equipment serves to make it easier for you to use our website and to be able to offer you our services as you wish. Some functions of our website do not work without the use of these cookies and could therefore not be offered. The cookies are generally deleted at the end of the session (e.g. logging out or closing the browser) or after a specified period of time. Information on deviating storage periods for cookies can be found in the following sections of this privacy policy.
Insofar as cookies are used that are not technically necessary, this is done on the basis of your express consent, which you can give via the cookie banner. In this case, the basis for the storage and access to information is § 25 (1) TTDSG in conjunction with Art. 6 (1) (a), Art. 7 GDPR. You can revoke your consent at any time with effect for the future or subsequently give it again by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by setting your browser software accordingly. Please note that the browser settings you make only work for the browser you are using. If personal data is processed following the storage of and access to the information on your terminal equipment, the provisions of the GDPR apply. Information on this can be found in the following sections of this privacy policy. Account and Product Registration
You provide your email, or log in for a third-party account, to create an online account or subscribe to our communications. When creating your account, you may be asked to enter certain information, such as: your email address, username and password, nickname and portrait (possibly obtained through third-party software), etc. If you refuse to provide such information, you may not be able to create an account on our website, and you may not be able to use the services completely or properly. This information is necessary to set up the website account for you governed under the Terms of Use with you and to enable you to use some basic functions of this website. The processing of your personal data is necessary to perform an agreement with you pursuant to Art. 6 (1) (f) GDPR.
If you choose to register your product with us, we will collect the information about your product such as the product serial number, your contact information such as the email address, information about the product purchase order such as the purchase channel, purchase order number, and the purchase date. We use this information to provide you with customer service, including dealing with any enquiries or complaints, providing after-sales issue solution. In this condition, the processing of your personal data is necessary to perform an agreement with you pursuant to Art. 6 (1) lit. b) GDPR. We may also use the information to compile analysis, improve our product and services, and to determine products and services that may be of interest to you and send you related notices through email, telephone, with your consent pursuant to Art. 6 (1) (a) GDPR or based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
If you meet the eligibility criteria and become a member of the Ecovacs Club, in order to provide you with the services in connection with the VIP membership, we will collect and use the account information (including your Ecovacs ID, email address), the Membership level, the amounts of the points you have earned and the records of its update.
You may log out of the membership by contacting us with the information provided in Chapter I of this Privacy Policy.
The legal basis for data collection and data processing is the performance of the contract according to Art. 6 (1) lit. b) GDPR. On our website, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.The data will be used exclusively for the processing of the conversation.
In the case of contact by e-mail, this also constitutes the necessary legitimate interest in the processing of the data.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) (f) GDPR. Our legitimate interest is to provide the best possible answer to your enquiry, which you send by e-mail.
If the aim of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR. There is a contact form on our website which can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.
At the time the message is sent, the following data is stored:
-
- E-mail address
- Forename
- IP address of the calling computer
- Subject
- If the enquiry concerns an ecovacs product, details of the purchase / product
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) f GDPR. Our legitimate interest is to provide the best possible answer to your enquiry, which you send to us via the contact form. If the aim of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) b GDPR. When you utilize our customer service, i.e. if you contact us, by e-mail, telephone, via a contact form or via live chat, the information you provide will be stored for the purpose of processing the request. We need the information to process your request, to address you correctly and to send you a reply. We process the data as part of the provision of our contractual services. In this context, your Ecovacs ID, inventory data (surname and first name of the contact person(s), country), contact data (e-mail address, telephone number, address), contract data (subject matter of the contract, term), payment and shipping data (payment amount, payment method information, user name, billing and/or shipping address), communication records and other data collected in the context of the provision of services and/or required for the provision of services are processed. If the problem you meet would obtain a clearer description by taking a photo/screenshot or video, you may also consider sending to the customer service such pictures and videos. The information is regularly stored and processed in our CRM system with the server located in Japan. To process your request, we are using Salesforce Support, provided by salesforce.com Germany GmbH, the address of its UK affiliate’s office at Floor 26 Salesforce Tower, 110 Bishopsgate, London, EC2N 4AY, United Kingdom. Please refer to the Annex of this Policy for the details of the service provider we have engaged in conducting such collection.
The information collected will be used to provide and improve our customer services. The processing described in this section is necessary to provide you with the services requested.
The legal basis for the processing of data transmitted in the course of providing the customer services is Art. 6 (1) b GDPR. We use data to carry out your transactions with us. For example, we process your name, contact information (email, telephone number), address, payment information to provide customers with product subscriptions and use contact information to deliver goods purchased from the website.
Transactions involving Third Parties. We also offer services or sell product lines jointly with third-party businesses or personnel, such as affiliates, promotion platforms providing such services and events participants. You can tell when a third party is involved in your transactions, and we share customers' personal information related to those transactions with that third party, include information relating to online purchases and actions made by you, order IDs, order timestamps, product information, purchase amount and other purchasing information of products and services.
We use data to perform your transaction contract with us, including for the goods purchased from the webstore deliverred to you.
The legal basis for data collection and data processing is the performance of the contract according to Art. 6 (1) (b) GDPR. In order to provide the services related to the Ecovacs products, you may need to use the Ecovacs Home App. Please refer to the separate privacy policy of the Ecovacs Home App to know more details about the data processing in relation with the use of Ecovacs Home App and the Ecovacs devices. When participating in one of our offline or online competitions/sweepstakes, we collect and process the personal data provided by the participant as part of the participation in the competition, usually first name, address and e-mail address.
We collect this data in order to enable participation in the competition, to carry out the competition, to inform the participant of a prize, if applicable, and to send the participant a possible prize.
We process the participants' personal data to conduct the competition and to determine and notify the winners.
Insofar as participants provide information as part of their participation that is not required for participation in the respective competition, this is done on a voluntary basis.
If you do not provide us with the data required to participate in a competition, it will not be possible to participate in the competition or to contact you regarding notification of a prize.
The legal basis for data collection and data processing is the performance of the contract according to Art. 6 (1) (b) GDPR.
- Registration
The registration for the newsletter can be terminated at any time by using the unsubscribe link contained in each newsletter or by contacting us at the above contact details.
The legal basis for the processing of data after registration for the newsletter is your consent pursuant to Art. 6 (1) (a) GDPR.
We would like to point out that in the event of a withdrawal of the consent, we will retain the data relating to consent until expiry of the statutory limitation period (pursuant to Section 195 of the German Civil Code (BGB), three calendar years after the last e-mail newsletter was sent) in order to be able to defend ourselves legally if necessary. The accountability obligation takes precedence over the deletion obligation here for this period (Art. 17 (3) (e) GDPR). The legal basis for this retention of consent data is Art. 6 (1) (c) in conjunction with Art. 5 (1) (a), (2), Art. 7 ( 1) GDPR and Art. 6 (1)(f) GDPR.
- Newsletter Service Provider
This may involve the transfer of personal data to a third country outside the EU without an adequate level of data protection.
In this case, we ensure that appropriate safeguards are provided for the transfer in accordance with Art. 46 GDPR. 1. Description and scope of data processing
We may partner with advertising networks and other advertising serving providers (“Advertising Providers”) that may push advertisements on our behalf and others within the website or to your email account with the consent of you. Some of these advertisements may be personalized based on your user profiling. This type of advertising is known as interest-based advertising. We will distinct advertisements with an “ad” imprint on all advertisements for your ease of identification.
2. Purpose of data processing
We involve Advertising Providers to identify advertising that might be of interest for you and/or for products that can be used with your Device and to present them to you within the website and to analyze the effectiveness of our advertisements presented in the website and your interactions with them. This information will not be used to identify you personally, but to analyze it in a pseudonymized way. This technology enables us to pursue our legitimate interests to present you advertisements that suit your individual interests and to perform direct marketing campaigns for our products and services to our customers.
3. Legal basis for data processing
The legal basis for the processing of data is your consent pursuant to Art. 6 (1) (a) GDPR.
4. Possibility of objection
You may opt-out from such personalized advertising, by using the "Do Not Track" or relevant functions of a supporting browser, by deactivating the execution of script code in your browser or through other methods as described in this Privacy Policy or those of the service providers. Please note that electing to opt out will not prevent advertisements from appearing in your browser or applications. However, opting out will allow the advertisements pushed to you to be irrelevant to your interests. 1. Scope of processing of personal data
You can send us your application by e-mail. We collect your e-mail address and the data you provide in the e-mail.
In addition, we offer an applicant/talent pool.
-
- Salutation
- Forename
- Name
- E-mail address
- Relevant information that serves the application process.
The processing of the personal data from your application e-mail serves us solely to process your application.
3. Legal basis for data processing
The legal basis for the processing of your data is the initiation of the contract, which takes place at the request of the data subject, Art. 6 (1) (b) (1) GDPR and § 26 (1) BDSG.
4. Duration of storage
After completion of the application process, the data will be stored for up to two months. Your data will be deleted at the latest after the two months have elapsed. In the event of a legal obligation, the data will be stored within the framework of the applicable regulations.
5. Exercising your rights
The applicant has the possibility to object to the processing of his/her personal data at any time by sending an email to info@ecovacs-europe.com or data-privacy@ecovacs.com. In such a case, the application can no longer be considered.
All personal data stored in the course of electronic applications will be deleted in this case. Use of company presences in social networks
Instagram:
Instagram, Part of Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2 Ireland
On our company page, we provide information and offer Instagram users the opportunity to communicate. If you carry out an action on our Instagram company presence (e.g. Comments, posts, likes, etc.) it may be that you thereby collect personal data (e.g. real name or photo of your user profile). However, since we generally or to a large extent have no influence on the processing of your personal data by Instagram, which is jointly responsible for the Ecovacs Europe GmbH corporate presence, we cannot provide any binding information on the purpose and scope of the processing of your data.
We use our corporate presence in social networks for communication and information exchange with (potential) customers. In particular, we use the company's presence for: Information about our products.
Every user is free to publish personal data through activities.
Insofar as we process your personal data in order to evaluate your online behaviour, to offer you competitions or to carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) (a), Art. 7 GDPR. The legal basis for the processing of personal data for the purpose of communication with customers and interested parties is Art. 6 (1) (f) GDPR. In doing so, our legitimate interest is to answer your inquiry in the best possible way or to be able to provide the requested information. If the purpose of the contact is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
The data generated by the company's website is not stored in our own systems.
For the processing of your personal data in third countries, we have appropriate safeguards in the form of standard data protection clauses pursuant to Art. 46 (2) (c)GDPR. A copy of the standard data protection clauses can be requested from us.
You can object to the processing of your personal data, which we collect in the context of your use of our Instagram corporate presence, at any time and assert your rights as a data subject mentioned under IV of this data protection declaration. To do so, send us an informal e-mail to info@ecovacs-europe.com or data-privacy@ecovacs.com. You can find more information about the processing of your personal data by Instagram and the corresponding objection options here:
Instagram: https://help.instagram.com/519522125107875
Twitter:
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland
On our company page, we provide information and offer Twitter users the opportunity to communicate. If you carry out an action on our Twitter company website (e.g. Comments, posts, likes, etc.) it may be that you thereby collect personal data (e.g. real name or photo of your user profile). However, since we generally or to a large extent have no influence on the processing of your personal data by Twitter, which is jointly responsible for the Ecovacs Europe GmbH corporate presence, we cannot provide any binding information on the purpose and scope of the processing of your data.
We use our corporate presence in social networks for communication and information exchange with (potential) customers. In particular, we use the company's presence for: Information about our products.
Every user is free to publish personal data through activities.
Insofar as we process your personal data in order to evaluate your online behaviour, to offer you competitions or to carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) (a), Art. 7 GDPR. The legal basis for the processing of personal data for the purpose of communication with customers and interested parties is Art. 6 (1) (f) GDPR. In doing so, our legitimate interest is to answer your inquiry in the best possible way or to be able to provide the requested information. If the purpose of the contract is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
The data generated by the company's website is not stored in our own systems.
For the processing of your personal data in third countries, we have appropriate safeguards in the form of standard data protection clauses pursuant to Art. 46 (2) (c) GDPR. A copy of the standard data protection clauses can be requested from us.
You can object to the processing of your personal data, which we collect in the context of your use of our Twitter corporate presence, at any time and assert your rights as a data subject mentioned under IV. of this data protection declaration. To do so, send us an informal e-mail to info@ecovacs-europe.com or data-privacy@ecovacs.com. You can find more information about the processing of your personal data by Twitter and the corresponding objection options here:
Twitter: https://twitter.com/de/privacy
YouTube:
YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States
On our company page, we provide information and offer YouTube users the opportunity to communicate. If you carry out an action on our YouTube company website (e.g. Comments, posts, likes, etc.) it may be that you thereby collect personal data (e.g. real name or photo of your user profile). However, since we generally or to a large extent have no influence on the processing of your personal data by YouTube, which is jointly responsible for the Ecovacs Europe GmbH corporate presence, we cannot provide any binding information on the purpose and scope of the processing of your data.
We use our corporate presence in social networks for communication and information exchange with (potential) customers. In particular, we use the company's presence for: Information about our products.
Every user is free to publish personal data through activities.
Insofar as we process your personal data in order to evaluate your online behaviour, to offer you competitions or to carry out lead campaigns, this is done on the basis of your express declaration of consent, Art. 6 (1) (a), Art. 7 GDPR. The legal basis for the processing of personal data for the purpose of communication with customers and interested parties is Art. 6 (1) (f) GDPR. In doing so, our legitimate interest is to answer your inquiry in the best possible way or to be able to provide the requested information. If the purpose of the contact is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
The data generated by the company's website is not stored in our own systems.
For the processing of your personal data in third countries, we have appropriate safeguards in the form of standard data protection clauses pursuant to Art. 46 (2) (c) GDPR. A copy of the standard data protection clauses can be requested from us.
You can object to the processing of your personal data, which we collect in the context of your use of our YouTube corporate presence, at any time and assert your rights as a data subject mentioned under IV of this data protection declaration. To do so, send us an informal e-mail to info@ecovacs-europe.com or data-privacy@ecovacs.com. You can find more information about the processing of your personal data by YouTube and the corresponding objection options here:
YouTube: https://policies.google.com/privacy?gl=DE&hl=de 1. Scope of data processing
We take advantage of the possibility of company appearances in job-oriented networks. We maintain a corporate presence on the following job-oriented networks:
LinkedIn:
LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland
XING:
XING SE, Dammtorstraße 30, 20354 Hamburg, Germany
On our site, we provide information and offer users the opportunity to communicate.
The company's website is used for applications, information/PR, and active sourcing.
We do not have any information on the processing of your personal data by the companies jointly responsible for the company's presence. Further information can be found in the privacy policy of:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
XING:
https://privacy.xing.com/de/datenschutzerklaerung
If you carry out an action on our company website (e.g. Comments, posts, likes, etc.) it may be that you thereby collect personal data (e.g. real name or photo of your user profile).
2. Legal basis for data processing
The legal basis for the processing of personal data for the purpose of communication with customers and interested parties is Art. 6 (1) (f) GDPR. In doing so, our legitimate interest is to answer your inquiry in the best possible way or to be able to provide the requested information. If the purpose of the contact is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
3. Purpose of data processing
Our corporate identity serves us to inform users about our services. Each user is free to publish personal data through activities.
4. Duration of storage
We store your activities and personal data published via our company website until you revoke your consent. In addition, we comply with the statutory retention periods.
5. Possibility of objection
You can object to the processing of your personal data, which we collect in the course of your use of our corporate presence, at any time and assert your rights as a data subject mentioned under IV. of this data protection declaration. To do so, send us an informal e-mail to the e-mail address given in this privacy policy.
Further information on how to exercise your rights can be found here:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
XING:
https://privacy.xing.com/de/datenschutzerklaerung We use the IP address and other information provided by the user (in particular postcode as part of registration or ordering) to address regional target groups (so-called "geotargeting").
The regional target group approach is used, for example, to automatically show you regional offers or advertising that are often more relevant for users. The legal basis for the use of the IP address and, if applicable, other information provided by the user (in particular postal code) is Art. 6 (1) (f) GDPR, based on our interest in ensuring a more precise target group approach and thus providing offers and advertising with higher relevance for users.
In doing so, part of the IP address as well as the additional information provided by the user (in particular postal code) are only read out and not stored separately.
You can prevent geo-targeting, for example, by using a VPN or proxy server that prevents accurate localization. In addition, depending on the browser used, you can also deactivate location localization in the corresponding browser settings (as far as the respective browser supports this).
We use geotargeting on our website for the following purposes:
-
- Report on international orientation
- Delegation of data processing and data sharing
If it is necessary for providing you with better or satisfactory products or services, we may engage third-party service providers to analyze or process your personal data or share your personal data with our affiliates or third-party service providers (refer to Chapter II).
Categories of third-party service providers who can obtain and/or process your personal data in connection to the App, include those fulfilling orders for products or services, delivering packages, sending postal mail and email, analyzing data, providing data collection, review and annotation for technology improvement, providing marketing assistance, providing search results and links, processing payments, transmitting content, and providing customer service. These third-party service providers have access to personal data needed to perform their functions, but may not use it for other purposes.
There are also cases where we are required to provide your personal data to the competent supervisory authorities pursuant to the Law, court orders, any other provisions of legal proceedings, or mandatory requirements imposed by administrative or judicial bodies. Information sharing under this circumstance may not require your prior authorization or consent. Insofar we are required to provide your personal data under legal obligations. The legal basis for such disclosure of your data will be Art. 6 (1) c) GDPR. For other cases of disclosure of your personal data, the legal basis for such disclosure will be our legitimate interest according to Art. 6 (1) f) GDPR or your consent according to Art. 6 (1) a) GDPR.
Third parties to whom Ecovacs may, or is obliged to, transfer personal data on the basis of the above, can be located in another country subject to prior establishment of additional guarantees according Art. 44 et seq. GDPR.
- Data transfer
In principle, we will not transfer and cease our control over your personal data to any third-party entities except when we would have undergone acquisition, merger or reorganization.
With the continuous development of our business, we may engage in transactions including mergers, acquisitions and assets transfers. We will notify you if such were to occur, and continuously protect or cause data receiving parties to continuously protect your personal data pursuant to the Law or, in each transaction as required by the Law and with no less than the standard stipulated under this Policy. The legal basis for such disclosure of your data will be Art. 6 (1) f) GDPR.
- Disclosure
We will not disclose your personal data to the public. If a disclosure is needed, we will notify you of the purpose of such disclosure, the type of information disclosed, and the scope of any sensitive information (if any, as defined in the Law) involved, and then only to the extent permitted by Law.
We use third-party providers such as plugins and content delivery networks on our website for various purposes. These are listed below
| Service |
Provider | Transfer to third countries | Purposes of data processing | Legal basis | Information on data protection and appropriate safeguards for third country transfers |
| Amazon Cloud |
Amazon Web Services, Inc. | USA | Content Delivery Networks | Art. 6 (1) (b) GDPR | https://aws.amazon.com/de/privacy/?nc1=f_pr |
| Alibaba Cloud | Alibaba (Netherlands) B.V. | Netherlands | Content Delivery Networks | Art. 6 (1) (b) GDPR | https://www.alibabacloud.com/help/en/legal/latest/alibaba-cloud-international-website-privacy-policy |
| Cookiebot | Cybot A/S | Denmark | Cookie-Consent | Art. 6 (1) (b) GDPR Art. 6 (1) (a) GDPR |
https://www.cookiebot.com/de/privacy-policy/ |
| Digicert Trust Seal | DigiCert, Inc | USA | Functional | Art. 6 (1) (f) GDPR | https://www.digicert.com/digicert-privacy-policy?inid=dc_cookiebanner_privacy-policy |
| Facebook pixel | Meta Platforms Ireland Ltd. | Ireland (USA) | Tracking | Art. 6 (1) (a) GDPR | https://www.facebook.com/about/privacy https://www.facebook.com/legal/EU_data_transfer_addendum/update |
| Google Analytics | Google Ireland Ltd. | Ireland (USA) | Tracking | Art. 6 (1) (a) GDPR | https://policies.google.com/privacy?gl=DE&hl=de https://business.safety.google/gdpr/ |
| Google Tag Manager | Google Ireland Ltd. | Ireland (USA) | Tag configuration and integration of Google services | Art. 6 (1) (a) GDPR | https://policies.google.com/privacy?gl=DE&hl=de https://business.safety.google/gdpr/ |
| Omnisend | Omnisend, Inc.transac | USA | Email notification | Art. 6 (1) (a) GDPR | https://www.omnisend.com/privacy/ |
| Salesforce | salesforce.com Germany GmbH | Germany | Customer services | Art. 6 (1) (b) GDPR | https://www.salesforce.com/company/legal/privacy/ |
| LiveChat | Text, Inc. | USA | Customer Service | Art. 6 (1) (b) GDPR | policy/?_ga=2.222831964.672473113.1709619407-1477929159.1709619405 |
| Sensors Data | Sensors Data Network Technology (Beijing) Co., Ltd. | China | Data Analysis | Art. 6 (1) (a) GDPR | https://www.sensorsdata.cn/market/privacy_policy.html |
| Stripe | Stripe Payments Europe, Limited | Ireland | Payment service | Art. 6 (1) (b) GDPR | https://stripe.com/zh-cn-us/privacy |
| 85-Sixty | 85SIXTY, Inc. | USA | Data Analysis and Tracking | Art. 6 (1) (a) GDPR | https://www.85sixty.com/privacy-policy/ |
| Stamped | WeCommerce Holdings Limited Partnership dba Stamped | Canada | Rate and review collection | Art. 6 (1) (a) GDPR | https://stamped.io/privacy |
| Melissa | Melissa Data Corporation | USA | Global Address Verification | Art. 6 (1) (a) GDPR | https://www.melissa.com/privacy-policy |
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can prevent the collection and processing of your personal data by Facebook by preventing the storage of third-party cookies on your computer, by using the "Do Not Track" function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
- Location for storing your data. Personal data collected and generated in the jurisdiction in which you reside in the course of providing our products and services to you will be stored in servers of Ecovacs located in European Union and the United States. Notwithstanding the foregoing, your data might be transferred to other jurisdiction as described in Chapter VII.
- Period for storing your data. We will only store your personal data for the period necessary to fulfill the purpose outlined in this Policy or required or permitted by applicable Laws. When assessing these periods, we carefully examine our needs to collect personal data at all as revealed herein, and if we establish a relevant need, we only retain it for the shortest possible period to realize the purpose of collection unless a longer retention period is required by the Law.
If the purpose of storage no longer applies or if a storage period provided for by law expires, the personal data will be routinely anonymized or deleted in accordance with the statutory provisions. Unless otherwise required under relevant laws and regulations, if we stop the provision of services or business operation, we will promptly cease to collect your personal data, and also delete or anonymize your personal data collected by us for such purpose without delay. In a case where certain categories of your personal data become unnecessary to be collected or processed to achieve all the applicable purposes specified herein, we will also stop collecting the relevant personal data and/or anonymize or delete those have been collected. We will also give notice to you individually or by publishing the relevant information on our website or within the App.
- Security. We take appropriate technical and organizational measures to ensure a level of protection for the personal data we process that is appropriate to the risk of the respective processing and to protect the data we process against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.
Our website uses Secure Socket Layer (SSL) encryption for security reasons and to protect the transmission of confidential content, such as orders, inquiries or payment data that you send to us.
To make sure your personal data is secure, we communicate our privacy and security guidelines to our employees and strictly enforce privacy safeguards within the company. We have further established access procedures and approval mechanisms to strictly limit the access to your personal data.
- Account Verification. In the process of using your account, to protect your account security, we may undertake different verification measures to identify you. For example, if your account is logged on for the first time on a new Device, we may identify you by using your account passcode plus a check code sent to you by ways including, but is not limited to, a verification email.
- Reporting mechanism for personal data safety accidents. Please understand that due to limitation of technologies or potential malicious attacks, personal data safety accidents may unfortunately occur due to factors beyond our control. If a safety accident occurs, if required by the Law, we will immediately notify you of the general facts and potential influences of the safety accident, measures we have adopted or will adopt, advice for you to protect your data and reduce risks, as well as remedial measures, etc. We will inform you of the relevant facts of the accident by email, letter and telephone or by pushing notifications as per your settings on receiving communications from us. If it is impossible or difficult for us to contact every affected user individually, we will publish notifications in a reasonable and effective manner. We will also report the result of personal data safety accident to supervisory authorities if required.
We reserve the right to amend this Privacy Policy from time to time so that it always complies with current legal requirements and/or in order to implement changes to our services in the Privacy Policy, e.g. when introducing new services. When visiting the website or using our services, the current privacy policy always applies.