1. Name and address of the responsible
e&Co. AG (Hubertusstr. 50, 54439 Saarburg, Germany), hereinafter also “we”, “us”, inform you in the following about the processing of your personal data in the context of the use of our website https://www.theincarnationcode.com, hereinafter also “website” as well as in the context of business relations between you and us.
If you have any questions regarding data protection in connection with our website, the services offered or existing business relationships, please contact us at firstname.lastname@example.org. Please send a request for information to
or by e-mail to:
If you contact us by e-mail, the communication is not encrypted.
2. General information on data processing
a) What do we process your data for (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Personal data is processed by us to fulfil contractual obligations in accordance with Art. 6 Para. 1 S. 1 lit. b) GDPR. This includes in particular:
- The execution of service / performance contracts and the associated business relationship.
- The initiation of contractual relationships.
In addition, we process your data to protect our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR, including
- for contacting you, insofar as a permanent business relationship with you or your employer exists or is intended (business contacts);
- for the purposes of auditing;
- to ensure IT security and IT operations;
- for advertising purposes, provided that you have not objected to the use of your data;
- for the purpose of compiling statistics;
- for purposes of prevention, clarification and reporting of criminal offences, e.g. fraud, e.g. deception of identity or fraudulent performance;
- for the assertion of legal claims including collection and defence in legal disputes.
We process your data on the basis of your consent in accordance with Art. 6 Para. 1 S.1 lit. a) GDPR for specific purposes, in particular
- Market research and customer surveys;
- for the personalised use of the website and personalised offers;
- for analytical purposes in order to optimise our offer for you.
Any consent granted can be revoked at any time. This also applies to the revocation of declarations of consent that were given to us before the application of the GDPR, i.e. before 25.05.2018. The revocation of a consent is only effective for the future and does not affect the legality of the data processed until the revocation.
We process data on the basis of legal obligations in accordance with Art. 6 Para. 1 S.1 lit. c) GDPR:
Insofar as we are legally obliged to do so, we process personal data in order to comply with commercial, tax or data protection storage obligations or to fulfil security requirements. Further information on retention periods can be found under “Duration of data processing”.
b) What personal data are you obliged to provide?
For legally prescribed or contractual requirements, we have marked the respective input fields in the input masks, if applicable, on our websites, which must be filled in by you in order for us to provide the contract or service you request.
c) How long is your data stored?
Your personal data will be deleted as soon as it is no longer required for the purposes mentioned. However, we may have to continue to store your data until the expiry of the retention obligations and periods stipulated by the legislator or supervisory authorities, which may result from the German Commercial Code, the German Fiscal Code and the Money Laundering Act, among others, and which generally amount to 6 to 10 years. In addition, we may store your data until the expiry of the statutory limitation periods (i.e. as a rule 3 years; in individual cases, however, up to 30 years), insofar as this is necessary for the assertion, exercise or defence of legal claims. After this period, the corresponding data is routinely deleted.
Who receives your data?
In the context of the above data processing and the respective legal basis mentioned (execution of contract, in the legitimate interest, with consent or due to legal processing obligations), your data may be passed on to the following categories of recipients:
- auxiliary persons, e.g. service providers,
- other service providers, e.g. for the provision of the website, newsletter dispatch or feedback handling,
- government bodies and authorities, e.g. due to legal regulations or police and investigation activities.
It may happen that personal data are transferred to third countries or to international organisations. For your protection and the protection of your personal data, appropriate guarantees are provided for such data transfers in accordance with and in compliance with the legal requirements.
Insofar as these transfers are not based on a legal basis or are made to a country for which no adequacy decision issued by the EU Commission has been made, we use the EU standard contractual clauses.
Information on EU standard contractual clauses can be found here on the websites of the European Union.
3. Which rights do you have?
a) Your rights at a glance
It is important for us to make our processes fair and transparent. It is therefore important for us that those affected can exercise the following rights if the respective legal requirements are met:
- Right to information, Art. 15 GDPR
- Right of rectification, Art. 16 GDPR
- Right of deletion (“right to be forgotten”), Art. 17 GDPR
- Right to restrict processing, Art. 18 GDPR
- Right to data transferability, Art. 20 GDPR
- Right of appeal, Art. 21 GDPR
To exercise your rights, you can contact us by e-mail at email@example.com. For identification purposes we ask you to provide the following information:
- Postal address
- E-mail address
- and optionally: relationship with e&Co. AG, further information to clearly identify you in our systems
If you send us a copy of your identity card, please black out all details except for your name, first name and address.
In order to be able to process your application, as well as for identification purposes, we would like to point out that we will process your personal data in accordance with Art. 6 para. 1 lit. c GDPR.
Furthermore, in accordance with Art. 77 GDPR in conjunction with § 19 BDSG you have the right to appeal to a supervisory authority. The supervisory authority responsible for e&Co. AG is
Der Landesbeauftragte für den Datenschutz
und die Informationsfreiheit Rheinland-Pfalz
Postfach 30 40
b) How can you withdraw your consent?
If you have given us your consent to process your personal data, we hereby inform you that you can revoke this consent at any time with effect for the future.
If you have given your consent on this website, please visit the page on which you originally gave your consent to revoke it.
In all other cases or if you have problems to revoke your consent on this website, you can of course also contact us at any time directly at the e-mail address firstname.lastname@example.org.
Please note that the consent you have revoked will only have effect for the future and will not affect the lawfulness of processing in the past. In some cases, despite your revocation, we are entitled to further process your personal data on another legal basis – for example, to fulfil a contract.
c) Information on your right of objection under Art. 21 GDPR
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out pursuant to Article 6 paragraph 1 letter e or f FADP; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you, unless he can demonstrate compelling reasons for processing which are justified on grounds of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it is linked to such direct marketing.
If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for those purposes.
You have the possibility to exercise your right of objection in relation to the use of information society services, without prejudice to Directive 2002/58/EC, by using automated procedures involving technical specifications.
4. Provision of the website and creation of log files
When users visit our website, our system automatically collects data and information from the computer system of the calling computer each time our website is accessed. The following data (“technical information”) is collected:
- Information about the browser type and version used
- The user’s operating system (also device type, i.e. PC, mobile phone, etc.)
- The IP address of the user
- Date and time of access
- Location of the access (e.g. opening the website via a Google link)
The collected data is temporarily stored in log files, which are deleted daily. Before deletion, the log files are read out and analysed. In doing so, we pursue the purpose of (network) security, for example to ward off cyber attacks, marketing, continuous improvement of the website and its alignment with the needs and requirements of our customers. For example, this analysis enables us to deliver the website optimised for your web browser.
The legal basis for the collection, temporary storage and further processing is our legitimate interest in offering our customers an optimal and profitable website with maximum functionality and maximum comfort, Art. 6 para. 1 lit. f GDPR.
External Hosting: This website is hosted by our external service provider deHOSTED (NetTask GmbH, Zillplatz 9-10, D-09337 Hohenstein-Ernstthal) in Germany (Hoster) Personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, contact information, web page access and other data generated by a website.
The use of the hoster is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our hoster will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions with regard to this data.
When all cookies are deleted, any opt-out cookies already set will also be deleted, so that you will have to re-declare any opt-outs you have already declared.
We distinguish between cookies that are absolutely necessary for the technical functions of the website and optional cookies.
To enable you to determine your desired data protection settings for visiting our website as individually as possible, we will give you the opportunity below to set your preferences for the categories operational necessity, statistics, comfort and personalisation for you.
- Category “Operational necessity”
These cookies are necessary for the operation of the site.
- Category “Statistics”
To further improve our offer and our website, we collect anonymous data for statistics and analysis. With the help of these cookies we can, for example, determine the number of visitors and the effect of certain pages on our website and optimise our content.
- “C0nvenience” category
We use these cookies to make the use of the site easier for you. For example, the language you have selected can be displayed again initially on your next visit.
- “Personalization” category
These cookies are used to display personalized content according to your interests. This enables us to present you with offers that are particularly relevant to you.
Which cookies of the category “operational necessity” do we use?
Our website uses the cookie consent technology of Borlabs Cookie of the provider Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany. This is a technically necessary cookie (borlabs-cookie) to store your cookies’ consent. Borlabs-cookie does not process any personal data.
The borlabs-cookie stores the consent you gave when entering the website. The collected data will be stored until you request us to delete it or until you delete the borlabs-cookie yourself or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found here.
You can find more information about Borlabs’ data protection here.
Which cookies of the category “Statistics” do we use?
Which “convenience” category cookies do we use?
Which cookies in the “Personalization” category do we use?
6. YouTube and presence in social media
We have embedded videos from YouTube on this website. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
To integrate our videos, we use the so-called “extended data protection mode” of this provider. This is done via the so-called “double-click” procedure. Thus, you will initially only be shown a preview image on our website without a connection to YouTube being established through this. Only after your explicit consent and approval and when you click on the respective preview image, a connection to YouTube will be established and your IP address will be forwarded to YouTube’s servers. YouTube is thus informed that our website was visited with your IP address. We do not obtain knowledge of the data collected in this way and how it is used.
If you are logged into your YouTube or Google account, Google may add the processed information to your account depending on your account settings and treat it as personal data, see in particular: https://www.google.de/policies/privacy/partners/ .
For more information on data processing by Google, please visit https://policies.google.com/privacy.
YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. The legal basis for this data processing is your consent, Art. 6 (1) (f) GDPR.
We maintain online presences within social networks and platforms in order to be able to communicate with customers, interested parties and users active there and to inform them about our services. We point out that user data may be processed outside the European Union. This can result in risks for the users, because the enforcement of the users’ rights could be made more difficult. Furthermore, user data is generally processed for market research and advertising purposes. For example, user profiles can be created from the user behaviour and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers, in which the usage behaviour and interests of the users are stored. Furthermore, data may also be stored in the user profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them). The processing of users’ personal data is based on our legitimate interests in effective information of users and communication with users in accordance with Art. 6 para. 1 lit. f. GDPR. If users are asked by the respective providers to give their consent to data processing (i.e. to give their consent e.g. by ticking a check box or confirming a button), the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR. For a detailed presentation of the respective processing and the possibilities of objection (opt-out), we refer to the following linked information of the providers. Also in the case of requests for information and the assertion of user rights, we would like to point out that these can most effectively be asserted with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. Should you nevertheless require assistance, you can contact us.
7. Description of our data processing activities
We offer various services via our websites and through our activity/presence in social networks such as LinkedIn or XING. In order to provide these services, we have to collect and process personal data of the user or our customer.
The processing activities within the meaning of Art. 13 GDPR are described below:
a) Contact with/by (potential) customers
If you are a customer of e&Co. AG, we may need to collect and use information about you or people within your organization to provide services to you and/or notify you of content published by e&Co. that is likely to be important and useful to you.
Description and scope of data processing
On our website it is possible to contact us via the provided e-mail address. In this case, the user’s personal data transmitted with the e-mail will be stored. It is also conceivable that initial contact is usually made via corresponding social networks such as XING or LinkedIn. In this case, the personal data is recorded which is related to the contact and relevant for the further business relationship. We only collect data about our customers to a very limited extent. The following data is collected:
- Name and first name of individual contact persons within your organization
- E-mail address
- Content of the request
- Company on whose behalf you are making an enquiry (voluntary information)
- Telephone number (optional)
- Date and time of the request
- Log information, such as IP address (only for contact form)
Purpose of the data processing:
We use the data to ensure a smooth business relationship and to be able to process your request as quickly as possible. For this purpose we use either your e-mail address or your telephone number. Log information is collected to protect against misuse of the contact form.
Legal basis for the data processing
As legal basis for the present processing of your data is our interest in a good dialogue between our customers and us, as well as ensuring a functioning process, Art. 6 para. 1 letter f GDPR.
Transfer to third parties:
The collected data will not be passed on to third parties in the course of contacting us.
Duration of storage:
If the data collection is no longer necessary to achieve the purpose, the data will be deleted. This is the case if the circumstances indicate that the matter in question has been conclusively clarified. However, there may be requirements under commercial law in particular which oblige us to maintain the correspondence for a period of time. The period of time depends on the content of the affected document.
b) Processing of contracts
If you are a customer of e&Co. AG, we need to collect and use information about you or people within your organization to provide services to you and/or notify you of content published by e&Co. that is likely to be important and useful to you.
Description and scope of data processing
In order to provide the contractually agreed services, we are dependent on the processing of certain personal data. We only collect data about our customers to a very limited extent. The following data is collected:
- Name and first name of individual contact persons within your organisation
- E-mail addresses of contact persons
- Content of the request
- Data on the company of our contact persons:
- Address of the company
- Telephone number
- Company billing address
- Value added tax Identification number
- Commercial register number
- Date and time of the request
Purpose of the data processing:
We use the information e.g. to assert, exercise or defend legal claims.
Legal basis for data processing
We process this data on the basis of Art. 6 Para. 1 lit. b of the GDPR. It states that the processing of personal data is lawful if it is necessary for the performance of a contract or for the implementation of pre-contractual measures taken at the request of the data subject.
Transfer to third parties:
It may be necessary to disclose data to tax, audit or other authorities if we are convinced in good faith that we are obliged to disclose such data by law or other regulation (for example, because of a request from a tax authority or in connection with an anticipated legal dispute).
Duration of storage:
If the collection of data is no longer necessary to achieve its purpose, the data will be deleted. This is the case if the circumstances indicate that the matter in question has been conclusively clarified. However, there may be requirements under commercial law in particular which oblige us to maintain the correspondence for a period of time. The period of time depends on the content of the affected document.