Through this privacy policy, we inform you on what personal data we collect when you visit www.ewbcd.com (“ewbcd.com” or “the Site”) and how we process it. Hereby we also fulfill our duty to inform you pursuant to Art. 13 GDPR.

I. Identity of the controller and contact details of our Data Protection Officer
The controller is
EWBCD GmbH
Friedrich-Ebert-Anlage 49
60308 Frankfurt am Main
Tel.: +49 69 9001 2000
Fax: +49 69 9001 20088
Mail: info@ewbcd.com
You can contact our Data Protection Officer at the same address and under privacy@ewbcd.com.

II. Personal data, purposes and legal basis
1. Personal data
Pursuant to the General Data Protection Regulation (“GDPR“), personal data means any information relating to an identified or identifiable natural person (‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Insofar as you do not actively make personal data available to us, we do not store personal data while you use our Site except that our webserver(s) register all connections to the Site automatically and collects the following technical information about your visit:

• date and time of request,
• the preferred access method/function for the computer making the request,
• the input values transferred by the computer making the request (e.g. file name),
• the operating system used by the user,
• the browser type used by the user, including version number,
• the URL from which the file was requested/the desired function was triggered.

If you contact us by writing an email, we collect your email address and all information that is included in the email.

2. Purpose and legal basis for Processing
We process your IP address to allow your device to establish a connection to our webserver over the Internet, and to solve technical issues. This processing is based on Art. 6 par. 1 lit. f) GDPR.
If you contact us, the processing is based on Art. 6 par. 1 lit. f) GDPR. The purpose as well as our legitimate interest is to answer your inquiry.

III. Recipients
Internally, the relevant employees or lawyers process your data. Externally, we use IT and telecommunications service providers. We do not intend to transfer data to third countries.

IV. Your rights as a data subject
If the respective requirements are met, the GDPR grants you certain rights as a data subject.
Art. 15 GDPR – Right of access: You shall have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and certain information.
Art. 16 GDPR – Right to rectification: You shall have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Art. 17 GDPR – Right to erasure: You shall have the right to obtain from us the erasure of personal data concerning you without undue delay.
Art. 18 GDPR – Right to restriction of processing: You shall have the right to obtain from us the restriction of processing.
Art. 20 GDPR – Right to data portability: You shall have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you shall have the right to transmit those data to another controller without hindrance from us. You shall also have the right to have the personal data transmitted directly from us to another controller, where technically feasible.
Art. 21 GDPR – Right to object: You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, which is based on legitimate interests or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
In such case, we shall no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms or where the processing is necessary for the establishment, exercise or defense of legal claims.
Art. 77 GDPR – Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
Where the processing is based on your informed consent, you shall have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Therefore, you may send us a message to privacy@ewbcd.com.

V. Obligation to provide us with personal data
You have no statutory or contractual obligation to provide us with any personal data. However, we may not be able to provide you with our services if you decide not to do so.

VI. Existence of automated decision-making, including profiling
We do not use automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Frankfurt, September 2019