Legal Notice / SBS Ecoclean Group Privacy Policy

Below you will find which data we collect when you use our website, tuportal.beijing21.com, and what our purpose is in collecting and using this data when you view our services.

1 Responsible authority

The responsible body for collecting, processing and using your personal data as defined under the General Data Protection Regulation (GDPR) is

SBS Ecoclean Group (hereinafter referred to as "Ecoclean")
Savignystrasse 43
60325 Frankfurt
Germany
Phone: +49(0)69 697474990

Data privacy officer: Mr. Holger Lapp, holger.lapp(at)beijing21.com

Please contact the responsible department or our data privacy officer if you have questions about your data, this privacy policy or the assertion of your rights.

2 Encoding

Our website uses TLS encryption for security reasons and to protect the transmission of data that you send to us as a site operator. The "http://" and the lock symbol located in the address line of your browser indicate that the connection is encrypted.

When TLS encryption is enabled, the data that you send to us cannot be read by third parties.

3 Collecting and processing personal data

Ecoclean will only collect and process personal data if you give your consent (Article 6 (1) a GDPR), which might be required for fulfilling contractual or pre-contractual measures (Article 6 (1) (b) GDPR) or is required to meet the basis of our legitimate interests (Article 6 (1) (f) GDPR).

3.1 Personal data

"Personal data" as defined in the GDPR means all information relating to an identified or identifiable natural person; a natural person is considered as identifiable; that person can be identified directly or indirectly, in particular by associating that person with an identifier such as a name, an identification number, location data, an online identifier or one or other more special features, such as the physiognomy, physiological, genetic, mental, economic, cultural or social identity of this natural person.

3.2 Cookies

In order to make overall use of our web pages more user-friendly and effective, Ecoclean stores cookies on the customer’s hard disk either through Ecoclean’s own efforts or by using third parties that Ecoclean has authorized. The legal basis for storing these cookies is Art. 6 para. 1 lit. f) GDPR.

A cookie is a small text file used primarily to collect information regarding the customer’s use of a website. Cookies cannot run programs or transmit viruses to your computer. We have compiled a list below of the cookies we use. Unless otherwise stated, cookies will be automatically deleted after two years at the latest. We will not merge this data with other data sources.

It is impossible to use our web pages without cookies. You can disable the storage of cookies in your browser, restrict them to certain websites or set your browser to notify you when a cookie is sent. You can also delete cookies from your PC's hard drive at any time.

3.3 Automatically collected data

You can always visit Ecoclean's websites without having to provide personal data yourself.

When visiting the tuportal.beijing21.com website, the web server automatically records log files that cannot be assigned to a specific person; these log files are in line with our legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR (General Data Protection Regulation).

This data can include:

• Browser type and version
• The oprating system being used
• The referring URL, i.re. the the previously visited page
• The host name of requesting computer
• The access date and time of the server request

This data is collected and stored for a period of 7 days solely for the purpose of statistical analysis and for security purposes (e.g., to investigate abusive or fraudulent activities) and is then deleted. If the data needs to be stored for a longer period of time for evidential purposes, then it shall be exempted from the cancellation until final clarification of the incident.

3.4 Newsletter (hereinafter also "Mailings")

At your request, we will regularly email you our current prices and other interesting Ecoclean offers regarding our products and services. Registration is voluntary and takes place via the so-called double opt-in procedure. After registering, you will receive an email requesting confirmation of your registration. This is necessary so that no third party can log in using your e-mail address. In order to be able to document the registration in accordance with legal requirements, we record the registration date, the confirmation time and the IP address, which is in line with our legitimate interests, Art. 6 para. 1 lit. f) GDPR.

As part of registration, you consent to the processing of specified data for sending or receiving email (Article 6 (1) (a) GDPR (General Data Protection Regulation)). You can revoke your consent at any time with effect for the future.

We may save the email addresses and the data stored during the logging of the application up to three years, which is in line with our legitimate interests (Article 6 (1) f) of the GDPR) before we delete said data for purpose of sending out the newsletter in order to be able to prove a previously given consent. Processing this data is limited to the purpose of possibly having to raise a defense against claims. An individual request for cancellation is possible at any time, provided that at the same time, the former existence of a consent is confirmed.

3.5 Contact form 

When contacting us, for example, by contact form, email, phone or via social media, the user’s information will be used to process the contact request and the transaction in accordance with. Art. 6 para. 1 lit. b) GDPR. User information can be stored in a Customer Relationship Management System ("CRM System") or a comparable query system.

The data transmitted to us will be deleted once the request has been completed.

3.6 Google reCAPTCHA

We use Google reCAPTCHA on our website to check for and avoid interactions with automated access, e.g. by bots. reCAPTCHA is a service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google.” Google uses this service to determine from which website a request is sent and from which IP address you use the reCAPTCHA input box. In addition to your IP address, Google may collect additional information necessary for processing an offer and the guarantee for this service.   

The legal basis for storing these cookies is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the security of our website and in defending against unwanted, automated access in the form of spam or similar.

For more information about Google's use of user data, please go to: http://policies.google.com/privacy

Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law: (http://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

3.7 Google Maps

We use Google Maps to display interactive maps and generate driving directions. Google Maps is an offer from Google Inc., 1600 Amphitheater Parkway, Mountain View, California 94043, United States.

When you visit a website on our website that contains Google Maps, your browser establishes a direct connection to Google servers. Google transmits the map contents directly to your browser and integrates this info in the website. We have no control over the amount of data Google collects in this way. In any case, the date and time of the visit to the website in question, the Internet address or URL of the website visited, the IP address and the (starting) address entered during the route planning will be transmitted. We have no influence over any further processing or how Google uses data, and we therefore cannot accept any responsibility for this. 

If you do not want Google to collect, process or use information about you through our website, you can disable JavaScript in your browser settings. However, you will not be able to use the map viewer if you do. 

Please refer to Google's Privacy Policy at http://policies.google.com/privacy?hl=de for the purpose and scope of data collection, further processing and use of the data by Google, as well as your rights and options to protect your privacy.

Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (http://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

3.8 Leaflet API - OpenStreetMap

This website uses Leaflet API, a map service that enables OpenStreetMap - the open source alternative from Google Maps - to be integrated into the website. From a technical point of view, it is necessary to make inquiries to other servers for correct display. These inquiries would in principle make it possible for information about your use of this website (including your IP address) to be transmitted to other servers and stored there. After analysis by the developer tools, the other servers are limited to maps.wikimedia.org (map layer) and unpkg.com (leaflet files).

You have the option of deactivating the OpenStreetMap service and thus preventing data transfer to third parties by deactivating JavaScript in your browser. However, we would like to point out that in this case you will not be able to use the map display on our website, or only to a limited extent.

More information about OpenStreetMap can be found at http://www.openstreetmap.de. More information on the API Leaflet used can be found at http://www.leafletjs.com

4 Use of web analytics, remarketingand retargeting tools

Based on our legitimate interests as defined in Art. 6 para. 1 lit. f), GDPR uses Ecoclean to optimize our online presence in order to be able to put together more targeted offers and to check the efficiency of advertising measures, various tools or plug-ins for web analysis, remarketing and retargeting.

Cookies are used, the IP address is forwarded, and/or different types of data are recorded and evaluated. These include the number of website visitors, the visit duration, average page load time, origin of the visitors.

Ecoclean uses Google Analytics, a web analytics service provided by Google. Google Analytics uses cookies that allow user use of the website to be analyzed. The information generated by the cookie about your use of this website (including your IP address) is usually transmitted to a Google server in the USA and stored there. Ecoclean has activated the IP anonymization by adding the code "gat._anonymizeIp ();" on the web pages, so that your IP address is shortened beforehand by Google within member states of the EU or other parties to the Agreement on the European Economic Area (referred to as IP masking). Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google will use this information on behalf of Ecoclean to evaluate your use of the website, to compile reports on Ecoclean's website activity and to provide other services related to website activity and Internet usage. Google may also transfer this information to third parties if required by law or as far as third parties process this data on behalf of Google.

Google offers an extension for web browsers (add-ons) that can prevent Google Analytics from collecting data and Google from processing it. The add-on can be downloaded and installed at your own risk http://tools.google.com/dlpage/gaoptout.

For more information, see http://www.google.com/intl/de/analytics/privacyoverview.html (general information about Google Analytics and privacy).

Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European data protection law (http://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

5 Social Plug-Ins

We use social plug-ins based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer as defined in article  6 para. 1 lit. f. GDPR). The plug-ins we use are listed below:

5.1 LinkedIn

We are using a “follow plugin” of the LinkedIn network, operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, United States. When you enter a website that has a “follow plugin” from LinkedIn, it automatically connects to the LinkedIn servers. LinkedIn is informed that you have visited our website with your IP address. If you use LinkedIn's “follow plugin” and are logged in to your LinkedIn account, LinkedIn can associate your visit to our website with you and your user account.

The latest privacy information on the “follow plugin” and additional information can be found on this website: http://www.linkedin.com/legal/privacy-policy

5.2 XING

The XING share button, which is a plug-in of the social network XING, is integrated on our website. The service provider is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

When accessing this website, your browser will quickly establish a connection to XING SE ("XING") servers, which provide the "XING Share Button" functions (in particular the calculation/display of the counter value). XING does not store personal data about you when calling up this website. Please note that XING does not store any IP addresses. There is also no evaluation of your usage behavior via the use of cookies in connection with the "XING Share Button.” The current data protection information on the "XING Share Button" and additional information can be found on this website: http://www.xing.com/app/share?op=data_protection

The XING SE privacy policy can be found at: http://privacy.xing.com/de/datenschutzerklaerung

5.3 Kununu

The "Kununu" button for the social network Kununu is used on our websites. Kununu is an application of the XING service (see point 5.1). When accessing this website, your browser will briefly establish a connection to XING SE ("XING") servers, which provides the "Kununu Share Button" functions (in particular the calculation/display of the counter value). XING does not store personal data about you when calling up this website. Please note that XING does not store any IP addresses. There is also no evaluation of your usage behavior via the use of cookies in connection with the "Kununu Share Button.” The current data protection information on the "Kununu Share Button" and additional information can be found on this website: http://www.xing.com/app/share?op=data_protection

5.4 Youtube

We use YouTube to provide videos. Google Inc., located at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA owns YouTube. We use YouTube plug-ins on some of our websites. A connection to YouTube servers is established whenever you visit one of our Internet web pages that are equipped with this type of plug-in—our media library, for example. This connection will communicate to the YouTube server which of our websites you have visited. If you are logged in as a member of YouTube, YouTube assigns this information to your personal user account. This information is assigned to your user account whenever you use a plug-in, such as whenever you click on a video’s start button. You can prevent this association by logging out of your YouTube user account and other user accounts associated with YouTube LLC and Google Inc. before using our website and deleting the corresponding cookies from those companies.

For more information about data processing and privacy by YouTube (Google), see www.google.de/intl/de/policies/privacy/

6 Deleting data

Unless explicitly stated in this privacy policy, the data we store is deleted as soon as it is no longer required for its purpose, and the deletion does not conflict with any statutory storage requirements. Unless the data is deleted because it is required for other and legitimate purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be kept for commercial or tax reasons.

7 Your rights

You can contact us at any time under the contact details mentioned above under point 1 for your rights and further questions regarding personal data.

You have the following rights:

7.1 The right of information 

You have the right at any time to request free information about your personal data stored at Ecoclean, its origin and recipient, the purpose of the data processing, the planned duration of data storage, including copy of the personal data that is the object of the processing (Art. 15 GDPR). 

7.2 The right to rectification 

In addition, you have the right at any time to rectify incorrect personal data immediately or to complete incomplete personal data (Art. 16 GDPR).

7.3 The right to revoke consent

You have the right to revoke your consent to data processing at any time and with effect for the future, without the need for stating your reasons of revocation (Art. 7 (3) GDPR).

7.4 The right to delete 

You have the right to have your personal data deleted immediately if it is no longer necessary for the purposes for which it was collected or otherwise processed, or if you revoke your consent to lawful processing and no other legal basis for storage exists. If you object to the processing and there are no priority interests for processing, your data will be deleted. Finally, your data will be deleted if the processing is inadmissible for other legal reasons (Art. 17 GDPR).

7.5 The right to restricting processing 

You have the right to restrict the processing of your personal data, provided that you contest the accuracy of your personal data for a period that allows us to verify the accuracy.

A restriction also applies if the processing is unlawful, but you reject the deletion of your personal data and require a restriction of use instead of deletion, or we no longer need your personal data for our legitimate purposes, but you this data in order to assert, exercise or defend a claim, or you have objected to the processing but have not yet determined whether there are legitimate reasons for data retention at Ecoclean that outweigh your interest (Art. 18 GDPR).

7.6 The right to data portability  

You have the right to receive your personal data provided to us in a structured, common and machine-readable format or to forward it to another responsible person, provided the processing is based on consent and the processing is carried out by automated means (Art. 20 GDPR).

7.7 The right to revocation 

Finally, you have the right to revoke your consent to the processing of your personal data at any time with future effect.

You have the right to object to the creation of user profiles and the processing of your personal data at any time, provided the processing is based on your consent. Your personal data will no longer be processed unless there are compelling legitimate reasons for your interests, rights and freedoms. If your personal data are used for the purpose of direct marketing, you naturally have the right to object to such processing at any time (Article 21 GDPR).

7.8 The right of appeal

You also have the right to complain to a supervisory authority (Article 77 GDPR).

8 Validity and timeless

We reserve the right to update this privacy policy from time to time.

Last update: 25 May 2018