Privacy Policy

We appreciate your visit to our website. Protecting and securing your personal information while using our website is very important to us. Below, we provide information about what personal data we collect when you visit our website and for what purposes it is used.
Personal data refers to any information relating to an identified or identifiable natural person (data subject), such as name, address, email address, or user behavior. In other words, this is data that can be used to identify you. Additionally, this policy includes information on data processing activities outside this website (e.g., video conferences or newsletters).

Data Controller

Data Controller

The entity responsible for processing personal data in accordance with the EU General Data Protection Regulation (GDPR) is:

ENTRO Service GmbH
Aurbacherstraße 3
81541 Munich, Germany
Phone: 089-69313213-0
Email: kontakt@entro-service.de

Data Protection Officer

exkulpa gmbh
Waldfeuchterstr. 266
52525 Heinsberg, Germany
Phone: 02452 / 99 33 11
Email: datenschutz@entro-service.de

General Information

This privacy policy meets the legal transparency requirements regarding the processing of personal data. Personal data includes all information that relates to an identified or identifiable natural person, such as name, age, address, phone number, date of birth, email address, IP address, or website usage behavior.
Data that cannot be linked to your identity, such as anonymized data, is not considered personal data. The processing of personal data (e.g., collection, storage, use, or transmission) always requires a legal basis and a defined purpose.
Stored personal data is deleted as soon as the purpose of processing has been achieved and there are no legal reasons for further retention. We specify the retention periods for each processing activity. In certain cases, data may be retained for the establishment, exercise, or defense of legal claims or due to statutory retention obligations.

Information According to Article 13 GDPR

To fulfill our contractual obligations to you (Article 6(1)(b) GDPR).
This information is addressed to customers, prospects, suppliers, and employees. We process your personal data for the following purposes:

  • To fulfill our contractual obligations to you (Article 6(1)(b) GDPR).
  • To carry out pre-contractual obligations (Article 6(1)(b) GDPR).
  • To respond to inquiries (Article 6(1)(b) GDPR).
  • If you have given us consent for specific purposes (e.g., to receive our newsletter), processing is based on your consent (Article 6(1)(a) GDPR).
  • To fulfill legal obligations (Article 6(1)(c) GDPR).
  • If necessary, we also process your data to protect our legitimate interests, such as asserting legal claims, ensuring IT security, consulting and exchanging data with credit agencies to assess credit and default risks, direct marketing, and market research (unless you object to the use of your data for these purposes), business management measures, service and product development, risk management, or crime prevention (Article 6(1)(f) GDPR).

Categories of Recipients of Personal Data

Only employees who need access to your data to fulfill their duties have access (need-to-know principle). Some services are provided by carefully selected and GDPR-compliant service providers within the European Economic Area (EEA). If service providers process personal data on our behalf, data processing agreements have been concluded in accordance with Article 28(3) GDPR.

Data Retention Period

The personal data we process is stored for the duration of the contractual relationship and in accordance with statutory retention periods, particularly those outlined in the German Commercial Code (HGB) and the German Tax Code (AO). Regular retention periods range from six to ten years. If no contractual relationship is established, data is only stored for as long as necessary for the specific purpose.

Your Rights as a Data Subject

As a data subject, you have the following rights regarding your personal data:

  • Right of Access: Obtain information about the personal data we process about you.
  • Right to Rectification or Erasure: Correct or delete inaccurate, outdated, or unlawfully collected data.
  • Right to Restriction of Processing: Limit processing when deletion is not possible (e.g., due to legal retention obligations).
  • Right to Object: Object to processing based on legitimate interest. Please provide reasons why we should not process your data as we do.

Right to Withdraw Consent: If processing is based on your consent, you can withdraw it at any time.

  • Right to Lodge a Complaint: File a complaint with a data protection authority if you believe your data is being processed unlawfully.
  • For any privacy-related inquiries, please contact us at the details provided in our Legal Notice (Impressum).

Cookies

Cookies are small text files stored on your browser during your visit to our website. Some cookies are technically necessary, while others help us analyze website usage, improve functionality, and enhance user experience.
More information on cookies used on this website can be found in our Cookie Settings or Consent Manager.

Website Provision

When you visit our website, the following data is automatically collected and temporarily stored in server log files:

– IP address of the requesting device
– Date and time of access
– Name and URL of the accessed file
– Referrer URL (previously visited website)
– Browser type, operating system, and access provider

Our website is hosted by an external service provider, who processes this data on our behalf (Article 28 GDPR). The use of a hosting provider ensures contract fulfillment for our customers (Article 6(1)(b) GDPR) and serves the legitimate interest of secure and efficient website provision (Article 6(1)(f) GDPR).

Contact Form & Applicant Form

When you submit an inquiry via our contact form or apply for a position, we process your submitted personal data (e.g., name, email address, inquiry details).

– Legal Basis: Contract fulfillment or pre-contractual obligations (Article 6(1)(b) GDPR) or legitimate interest in responding to inquiries (Article 6(1)(f) GDPR).
– Retention Period: Data is stored until the purpose is fulfilled or until a deletion request is made, unless legal retention obligations apply.

For job applications, data is retained for six months after the recruitment process, unless further storage is required due to legal claims.

  • Video Conferences
  • We use online conferencing tools for communication. These tools process:

    – User-provided data (e.g., email, phone number)
    – Connection metadata (e.g., duration, participant count)
    – Technical data (e.g., IP address, device type)
    – Shared content (e.g., chat messages, voice recordings)
    – Legal Basis: Contract fulfillment (Article 6(1)(b) GDPR) or legitimate interest in efficient communication (Article 6(1)(f) GDPR).
    – Retention Period: Data is deleted when no longer needed or upon request.

    For further details, refer to the privacy policies of the respective conference tool providers.

  • Third-Party Services (AWS, Google, Vimeo, etc.)

    Our website integrates third-party services such as AWS CloudFront, Google Fonts, and Vimeo to optimize performance and functionality.

    – Legal Basis: Legitimate interest in providing a secure and efficient service (Article 6(1)(f) GDPR).
    – International Transfers: Data transfers to the U.S. rely on EU-U.S. Data Privacy Framework or Standard Contractual Clauses (SCCs).

    For more details, please check the privacy policies of the respective service providers.