ELO Digital Office Corporation USA takes data privacy seriously. This privacy policy explains who we are, how we collect, share, and use Personal Information, and how you can exercise your privacy rights when using our website www.elo.com/en-us ("website"). As a subsidiary of ELO Digital Office GmbH, ELO USA complies with the General Data Protection Regulation (GDPR) and personal data as all information referring to an identified or identifiable natural person (see Art. 4 No. 1 GDPR). This includes information such as your name, e-mail address, usage data, or address. Information that cannot be directly connected with your identity, for example, the number of users of a website, is not considered personal information.
a) The controller as per Art. 4 Sec. 7 GDPR is:
ELO Digital Office Corporation
66 West Flagler Street
Suite 900
Miami, FL 33130
USA
Phone: +1 (321) 343 7381
info-usa@elo.com
www.elo.com
b) Name and address of the data protection officer
You can reach our data protection officer at the e-mail address info-usa@elo.com or at our mailing address by specifying 'Data protection officer'.
a) Scope of processing of personal data
We process your personal data only to the extent necessary to provide a functional website and for our content and services, and only data that are needed to carry out the stated purpose (principle of data minimization). Your personal data will only be processed if it constitutes a justified interest pursuant to Art. 6 GDPR or it is expressly allowed by law.
b) Data deletion and storage periods
Your personal data will be deleted or blocked as soon as the purpose for which it was collected and saved and the reason for the storage no longer applies, or if you request us to delete or block it. For more information, refer to the section on the rights of data subjects.
a) Processing personal data when visiting our website
When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information by entering data, we only collect the personal data your browser automatically transmits to our server via log files. The log files contain IP addresses or other data that enable a user to be identified. If you want to view our website, we collect the following personal data with the server log files:
b) Legal basis for data processing
The legal basis for temporary storage of data and log files is Art. 6 Sec. 1 f GDPR.
c) Purpose of data processing
Temporary storage of the IP address by the system is necessary in order to provide the website to your computer. The IP address has to remain stored over the duration of the session. It is stored in log files in order to ensure the functionality of the website. In addition, the data helps us optimize the website and ensure the security of our IT systems. In this context, the data is not analyzed for marketing purposes.
d) Retention period
The data are stored in log files for seven days. Data can also be stored beyond this period. In this case, user IP addresses are deleted or disguised so that it is no longer possible to associate them with the respective client.
e) Right to object and right to erasure
We are required to collect and store specific data in log files for the purpose of delivering the website and to ensure it works properly. While the user does not have the right to object to this, you will find other rights of data subjects at the end of this page.
We use cookies to store information that allows us to customize our site according to your individual interests and make our website more user-friendly. A cookie is a small piece of data that stores configuration information (e.g. language setting, logon credentials) on your end device.
The cookies used on the website may be broadly classified into strictly necessary cookies and optional cookies. The legal basis for collecting strictly necessary cookies (functional cookies) is Art. 6 (1) lit. f GDPR. We will not set optional cookies (e.g. tracking cookies) unless we have an active indication of your consent (via the cookie consent banner) in accordance with Art. 6 (1) lit. a GDPR.
For more information about the types of cookies, what they are used for, how long they are stored, and how you can block or delete them, click here.
a) Description and scope of data processing
There are various contact forms on our website that you can use to contact us electronically. If you use this option, the data you enter in the form will be transmitted to us and, if applicable, sent to data processors commissioned by us and subsequently processed (for more details, see ""Data processors""). The following data is collected:
Company, first and last name, postal code, country, e-mail address, your request, your message including the data provided
In order to process the data, we obtain your consent during the delivery process and refer to the Privacy Policy. Alternatively, contact via the provided e-mail address is also possible. In this case, the personal data transferred with your e-mail address is saved. Your data will not be passed on to any third party in this context (See previous paragraph for exceptions if data is passed on to protect a legitimate interest). The data is only used to process the conversation.
Demo request: As described in our demo request form, we may share your data with the ELO branch office responsible for your region and its authorized ELO Business Partners, if necessary to carry out the demo. These parties are contractually obligated to process your data in compliance with the applicable data protection regulations.
b) Legal basis for data processing
The legal basis for processing data is your agreement as per Art. 6 Sec. 1 a GDPR. The legal basis for processing data collected in the context of e-mail delivery is Art. 6 Sec. 1 f GDPR. If e-mail contact is made with the objective of concluding a contract, the legal basis for processing is Art. 6 Sec. 1 b GDPR.
c) Purpose of data processing
We process personal data from the form solely to process your contact with us. In case of e-mail contact, this represents the legitimate interest for processing data. Other data processed during delivery serve to prevent misuse of the contact form and ensure the security of our IT systems.
The ELO branch offices use different tools for this purpose: Google Places API (see "Use of the Google Places API").
d) Retention period
The data is deleted once it is no longer necessary to achieve the purpose for which it was collected. For personal data from the contact form and the data sent by e-mail, this is the case when the conversation with the user has ended. The conversation is considered ended when it can be assumed from the circumstances that the relevant matter has been resolved fully. The additional personal data collected as part of the delivery process is deleted within seven days.
e) The right to object and rectification
The user can withdraw consent to processing of personal data at any time. If the user contacts us directly via e-mail, the user can withdraw consent to storage of personal data at any time. In such a case, the conversation cannot be continued. To exercise such right, the user may write to info@elo.com. All personal data saved in contact is deleted in this case. You are also entitled to the rights listed below with regard to the controller.
a) Description and scope of data processing
On our website, you have the option to download different white papers and watch webinar recordings. The personal data that you are required to provide for this purpose is entered to a form, transferred to us, and stored. The data will not be passed on to any third party. The following data is collected for registration/subscription:
i. Mandatory data: First and last name, e-mail address, country
ii. Voluntary information: Company, title
The following data are also stored at the time of registration: The IP address of the user, date and time of registration, website that the request originates from, white paper that was downloaded.
During the registration process, you will be asked for your consent to process this data.
b) Legal basis for data processing
Registration serves to fulfil a contract or to carry out pre-contractual duties that you are bound to by contract. The legal basis for processing data is Art. 6 Sec. 1 (b) GDPR. The legal basis for processing further data as part of the registration process is your agreement as per Art. 6 Sec. 1 (a) GDPR.
c) Purpose of data processing
Your registration is mandatory to fulfil a contract or to carry out pre-contractual duties. The data collected for these contracts are mandatory to optimize the white paper/webinar recording offering.
d) Retention period
The data will be deleted as soon as the obligations of both contracting parties have been fulfilled. This includes fulfilment of pre-contractual duties as well as implementing and following up on them. After the contract is concluded, it may still be necessary to store and maintain personal data of the contractual partner in order to meet contractual or legal obligations.
e) Right to object and right to erasure
You will find your rights as a data subject at the bottom of the page.
Processor within the EU
In some cases, we employ external service providers (data processors) from the EU to process your data. These have been carefully selected by us, amongst other things to ensure that they meet the requirements for compliance with GDPR. This may be the case, for example, when you register for events, sign up for the newsletter, take part in promotions, competitions or otherwise contact us or submit support requests. To ensure that your personal data is processed correctly as per GDPR, we enter into corresponding data processing agreements with these providers, who guarantee that they implement appropriate technical organizational measures to ensure that your data is handled securely. Recipients of your data are mainly providers of e-mail, hosting, analysis tool, and platform services (http://account.elo.com) as well as the head office (technical support) and business partners.
If any of these data processors are located in another EU country, we have checked that they meet the requirements of Art. 28 and Art. 44 et seq. GDPR. In each case, we conclude a written contract with these data processors.
(1) We do not use social media plug-ins. Instead, we have integrated icons that link to the third-party provider of the respective social media platforms when clicked. ELO currently maintains a profile on the following social media platforms: Twitter, Xing, LinkedIn, YouTube, and Facebook. When you visit our website, no personal data is transferred to the third-party provider. If you click the icon, you will be redirected to the provider's website and the privacy provisions of the respective provider shall apply.
(2) To this extent, we have an influence on the data collected and processing of such data by using the services of the aforementioned providers and have a responsibility in that by integrating the icon, the user is able to find the ELO website on the respective social media platform, enabling the service provider to obtain data in this way. This limits our responsibility as ultimately you make an active decision to provide your consent to transmit the data via the link. The only information available to us about the scope of data collection, the purposes and form of processing as well as the retention periods is the official information of the provider that is accessible to everyone. We inform you about this in the following.
(3) The third-party provider can store the data collected on you as user profiles, and uses these for the purposes of advertising, market research, and/or to optimize the content of its website. This type of analysis is carried out in order to deliver individual advertisements and to notify other users of the social network of your activities on our website (including for users that are not logged on). Since you are the data subject as per GDPR, you have the right to object to the creation of these user profiles or storage of data as per GDPR. To exercise these rights, you must contact the respective third-party provider, as they have direct access to these data. You can access privacy notices regarding the use of our websites and the ELO Digital Office privacy policy via the links on our websites. These do not apply to your activities on the websites of social media networks. You can read the data protection regulations of these providers on their respective websites.
(4) We have our own social media pages on the third-party sites that can be accessed via links from this website. The links take you to the respective websites of the third-party providers (e.g. Facebook, Twitter, Xing, LinkedIn), and you can also share content that we publish. No data is transferred when you access our website. As soon as you access the third-party provider's website, the privacy policy of that provider and other declarations on the use of data shall also apply. We have no influence on this, but we recommend that you log out of the respective third-party provider's website before using a link. This ensures that no data are transferred that the third-party provider could use to create user profiles. To protect your data, we have deliberately only used links and have refrained from using additional third-party plug-ins.
Addresses of the respective plug-in providers and URLs to their privacy policies:
Data that we receive as a result of visits to our fan page on Facebook ("Page Insights Addendum")
a) Subject
Facebook provides ELO with Page Insights for the company website (referred to as "fan page"). Page Insights are aggregated data that can help ELO understand how users are engaging with the fan page.
Page Insights may be based on personal data collected in connection with a visit or interaction of users with the fan page and its content. The Court of Justice of the European Union (CJEU) has ruled that in such a case Facebook Ireland Limited ("Facebook Ireland") and the fan page operator (ELO) are jointly responsible (pursuant to Art. 26 GDPR) for the Insights Data.
This Page Insights Addendum sets out the main elements of the agreement on shared responsibility and related data processing. For more information, refer to https://www.facebook.com/legal/terms/information_about_page_insights_data
b) Responsibilities
Facebook Ireland takes primary responsibility pursuant to GDPR for processing Insights Data and agrees to comply with all obligations under GDPR with respect to processing Insights Data (including Art. 12 and 13, Art. 15 to 22, and Art. 32 to 34 GDPR). In addition, Facebook Ireland shall make the main elements of this Page Insights Addendum available to data subjects (you as a user) (see link above).
Responsibility for processing the data from the fan page itself lies with the controller named at the beginning of this declaration.
c) Legal basis
The legal basis for processing Insights data pursuant to GDPR is Art. 6 (1) lit. a GDPR. You can opt-out at any time in the settings for your ad preferences. To do so, use the following links: https://www.facebook.com/help/109378269482053 and http://www.youronlinechoices.com.
As a data subject within the meaning of GDPR, you also have other rights, which you will find at the bottom of this declaration. You can exercise these rights by contacting Facebook Ireland or ELO.
d) Processing activity and supervision
Facebook Ireland is solely responsible for taking and implementing decisions about processing Insights Data. Facebook Ireland decides in its sole discretion how to comply with its obligations under this Page Insights Addendum. ELO must agree that Facebook Ireland is the main establishment in the EU for processing Insights Data for all data controllers and acknowledges that the lead supervisory authority for this processing is the Irish Data Protection Commission.
Furthermore, Facebook Ireland remains solely responsible for processing personal data in connection with Page Insights other than that covered by the scope of this Page Insights Addendum. This Page Insights Addendum does not grant ELO any right to request the disclosure of personal data of Facebook users that is processed in connection with Facebook Products, including for Page Insights that are provided to ELO.
e) Contact
If ELO is contacted by data subjects or a supervisory authority under the GDPR with regard to processing Insights Data and the obligations assumed by Facebook Ireland under this Page Insights Addendum (“Requests”), ELO is required to forward all relevant information to Facebook Ireland. Facebook Ireland will answer Requests in accordance with its obligations. ELO is not authorized to act or answer on Facebook Ireland’s behalf.
Any claim, cause of action or dispute ELO has against Facebook Ireland that arises out of or relates to this Page Insights Addendum must be resolved exclusively in the courts of Ireland. This Page Insights Addendum, which was drawn up by Facebook Ireland, is also governed by Irish law.
f) Changes and validity of the version
Facebook Ireland may need to update the Page Insights Addendum from time to time. ELO has no influence on this and is accordingly required to comply with updates to the Page Insights Addendum.
If ELO finds any part of this Page Insights Addendum to be unenforceable, the remaining part will remain in full force and effect. If Facebook Ireland fails to enforce any part of this Page Insights Addendum, it will not be considered a waiver. Any amendment to the Page Insights Addendum or waiver must be submitted in writing by ELO and will not be effective until signed by Facebook Ireland in accordance with its Terms.
"The Friendly Captcha tool provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany, helps us prevent misuse of our forms and website campaigns by computer-generated bots or spam software, protecting both you and us. Accordingly, we have integrated the Friendly Captcha program code for contact forms and other uses. This allows your end device to establish a connection to the Friendly Captcha servers in order to create a task. Your end device solves the task, which takes up certain system resources, and sends the result to our web server. The server contacts the Friendly Captcha server via an interface and receives a response stating whether the end device solved the task correctly. Depending on the result, security rules can be applied to requests via our website so that they can be processed or rejected, for example.
Friendly Captcha uses cookies, which are text files placed or read out on your computer to help the website analyze how you use the newsletter. IP addresses are only stored as a hashed version (one-way encryption) and do not allow Friendly Captcha or us to draw conclusions about an individual person."
The legal basis for processing is our legitimate interest to protect our website against unauthorized access by bots, i.e. spam protection and protection against attacks (e.g. mass requests), Art. 6 (1) lit. f GDPR.
For more information on data protection when using Friendly Captcha, go to https://friendlycaptcha.com/legal/privacy-end-users/.
(1) This website uses the website analysis service "piwik". It is an open source program provided by sponsors for analysis of websites. "Piwik" uses cookies.
(2) "Piwik" delivers statistical analysis of user access to websites. These reports contain information about the search engines, search terms, and languages used, the location of visitors by country, the browsers and plug-ins used, the session duration, entry pages, exit pages, bounce rates, the IP address, etc.
(3) "Piwik" is a web analytics solution that does not store or share your data with third parties. In addition, ELO uses a plug-in that anonymizes your IP address.
(4) We host our solution on Microsoft Azure in Germany and the data is stored for 25 months.
(5) Purpose of processing data: Analytics and conversion tracking based on consent. Legal basis: Art. 6 (1)(a) GDPR.
This website uses the search technology service of the following provider: ELASTIC, 800 West El Camino Real, Suite 350, Mountain View, California 94040, USA.
The provider collects and stores certain user information (e.g. user/session ID) in anonymized form to deliver the search function for articles via the search field and for navigation and filters.
Any personal data processed in this context is done so pursuant to Art. 6 Para. 1 lit. f GDPR based on our legitimate interest to provide an error-tolerant search function and therefore to improve our offering.
In the event of data being transferred to the United States, the provider refers to the standard contractual clauses of the European Commission and its adequacy decisions on certain countries, which are intended to ensure compliance with data protection law at the European level.
To optimise access to the data stored in websites, ‘Elastic Cloud’ is used as a service of the provider Elasticsearch B.V. (Keizersgracht 281, 1016 ED Amsterdam, Netherlands) (‘Elasticsearch’) and stored on Elasticsearch's servers in the Netherlands. We also use Elasticsearch to monitor the performance of the server.
You can find Elasticsearch's privacy policy at: https://www.elastic.co/legal/product-privacy-statement. If personal data is also processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in efficient data access and improved use of our websites.
Our website uses the SalesViewer® technology from the company SalesViewer GmbH.
SalesViewer® records the following data:
A JavaScript-based code is used for this, which collects the company-related data and its associated use. Data collected using this technology is encrypted via a one-way function that cannot be back-calculated (hashtag). The data is immediately pseudonymized and cannot be used to personally identify visitors to the website. The data is collected and stored for marketing, market research, and optimization purposes, on the basis of the authorized interests of the website operator (article 6 para. 1. (f) GDPR). The data saved by SalesViewer is deleted as soon as it is no longer required for its intended purpose and provided its deletion does not conflict with any regulatory retention obligations. You can opt out of data collection and storage at any time with future effect via www.salesviewer.com/opt-out, to prevent SalesViewer from recording data in the future.
For questions, requests, or complaints related to data privacy, please contact our Data Protection Officer. Please contact:
ELO Digital Office Corporation
66 West Flagler Street
Suite 900 - #6864
Miami, FL 33130
USA
Phone: +1 (321) 343 7381
Or send an e-mail to info-usa@elo.com.
Version: July 2022
