1. Name and address of the responsible
e&Co. AG (Hubertusstr. 50, 54439 Saarburg, Germany), hereinafter also “we”, “us”, inform you in the following about the processing of your personal data in the context of the use of our website https://www.theincarnationcode.com, hereinafter also “website” as well as in the context of business relations between you and us.
If you have any questions regarding data protection in connection with our website, the services offered or existing business relationships, please contact us at firstname.lastname@example.org. Please send a request for information to
or by e-mail to:
If you contact us by e-mail, the communication is not encrypted.
2. General information on data processing
a) What do we process your data for (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). Personal data is processed by us to fulfil contractual obligations in accordance with Art. 6 Para. 1 S. 1 lit. b) GDPR. This includes in particular:
- The execution of service / performance contracts and the associated business relationship.
- The initiation of contractual relationships.
In addition, we process your data to protect our legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f) GDPR, including
- for contacting you, insofar as a permanent business relationship with you or your employer exists or is intended (business contacts);
- for the purposes of auditing;
- to ensure IT security and IT operations;
- for advertising purposes, provided that you have not objected to the use of your data;
- for the purpose of compiling statistics;
- for purposes of prevention, clarification and reporting of criminal offences, e.g. fraud, e.g. deception of identity or fraudulent performance;
- for the assertion of legal claims including collection and defence in legal disputes.
We process your data on the basis of your consent in accordance with Art. 6 Para. 1 S.1 lit. a) GDPR for specific purposes, in particular
- Market research and customer surveys;
- for the personalised use of the website and personalised offers;
- for analytical purposes in order to optimise our offer for you.
Any consent granted can be revoked at any time. This also applies to the revocation of declarations of consent that were given to us before the application of the GDPR, i.e. before 25.05.2018. The revocation of a consent is only effective for the future and does not affect the legality of the data processed until the revocation.
We process data on the basis of legal obligations in accordance with Art. 6 Para. 1 S.1 lit. c) GDPR:
Insofar as we are legally obliged to do so, we process personal data in order to comply with commercial, tax or data protection storage obligations or to fulfil security requirements. Further information on retention periods can be found under “Duration of data processing”.
b) What personal data are you obliged to provide?
For legally prescribed or contractual requirements, we have marked the respective input fields in the input masks, if applicable, on our websites, which must be filled in by you in order for us to provide the contract or service you request.
c) How long is your data stored?
Your personal data will be deleted as soon as it is no longer required for the purposes mentioned. However, we may have to continue to store your data until the expiry of the retention obligations and periods stipulated by the legislator or supervisory authorities, which may result from the German Commercial Code, the German Fiscal Code and the Money Laundering Act, among others, and which generally amount to 6 to 10 years. In addition, we may store your data until the expiry of the statutory limitation periods (i.e. as a rule 3 years; in individual cases, however, up to 30 years), insofar as this is necessary for the assertion, exercise or defence of legal claims. After this period, the corresponding data is routinely deleted.
Who receives your data?
In the context of the above data processing and the respective legal basis mentioned (execution of contract, in the legitimate interest, with consent or due to legal processing obligations), your data may be passed on to the following categories of recipients:
- auxiliary persons, e.g. service providers,
- other service providers, e.g. for the provision of the website, newsletter dispatch or feedback handling,
- government bodies and authorities, e.g. due to legal regulations or police and investigation activities.
It may happen that personal data are transferred to third countries or to international organisations. For your protection and the protection of your personal data, appropriate guarantees are provided for such data transfers in accordance with and in compliance with the legal requirements.
Insofar as these transfers are not based on a legal basis or are made to a country for which no adequacy decision issued by the EU Commission has been made, we use the EU standard contractual clauses.
Information on EU standard contractual clauses can be found here on the websites of the European Union.
3. Which rights do you have?
a) Your rights at a glance
It is important for us to make our processes fair and transparent. It is therefore important for us that those affected can exercise the following rights if the respective legal requirements are met:
- Right to information, Art. 15 GDPR
- Right of rectification, Art. 16 GDPR
- Right of deletion (“right to be forgotten”), Art. 17 GDPR
- Right to restrict processing, Art. 18 GDPR
- Right to data transferability, Art. 20 GDPR
- Right of appeal, Art. 21 GDPR
To exercise your rights, you can contact us by e-mail at email@example.com. For identification purposes we ask you to provide the following information:
- Postal address
- E-mail address
- and optionally: relationship with e&Co. AG, further information to clearly identify you in our systems
If you send us a copy of your identity card, please black out all details except for your name, first name and address.
In order to be able to process your application, as well as for identification purposes, we would like to point out that we will process your personal data in accordance with Art. 6 para. 1 lit. c GDPR.
Furthermore, in accordance with Art. 77 GDPR in conjunction with § 19 BDSG you have the right to appeal to a supervisory authority. The supervisory authority responsible for e&Co. AG is
Der Landesbeauftragte für den Datenschutz
und die Informationsfreiheit Rheinland-Pfalz
Postfach 30 40
b) How can you withdraw your consent?
If you have given us your consent to process your personal data, we hereby inform you that you can revoke this consent at any time with effect for the future.
If you have given your consent on this website, please visit the page on which you originally gave your consent to revoke it.
In all other cases or if you have problems to revoke your consent on this website, you can of course also contact us at any time directly at the e-mail address firstname.lastname@example.org.
Please note that the consent you have revoked will only have effect for the future and will not affect the lawfulness of processing in the past. In some cases, despite your revocation, we are entitled to further process your personal data on another legal basis – for example, to fulfil a contract.
c) Information on your right of objection under Art. 21 GDPR
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out pursuant to Article 6 paragraph 1 letter e or f FADP; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you, unless he can demonstrate compelling reasons for processing which are justified on grounds of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it is linked to such direct marketing.
If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for those purposes.
You have the possibility to exercise your right of objection in relation to the use of information society services, without prejudice to Directive 2002/58/EC, by using automated procedures involving technical specifications.
4. Provision of the website and creation of log files
When users visit our website, our system automatically collects data and information from the computer system of the calling computer each time our website is accessed. The following data (“technical information”) is collected:
- Information about the browser type and version used
- The user’s operating system (also device type, i.e. PC, mobile phone, etc.)
- The IP address of the user
- Date and time of access
- Location of the access (e.g. opening the website via a Google link)
The collected data is temporarily stored in log files, which are deleted daily. Before deletion, the log files are read out and analysed. In doing so, we pursue the purpose of (network) security, for example to ward off cyber attacks, marketing, continuous improvement of the website and its alignment with the needs and requirements of our customers. For example, this analysis enables us to deliver the website optimised for your web browser.
The legal basis for the collection, temporary storage and further processing is our legitimate interest in offering our customers an optimal and profitable website with maximum functionality and maximum comfort, Art. 6 para. 1 lit. f GDPR.
External Hosting: This website is hosted by our external service provider deHOSTED (NetTask GmbH, Zillplatz 9-10, D-09337 Hohenstein-Ernstthal) in Germany (Hoster) Personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, contact information, web page access and other data generated by a website.
The use of the hoster is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our hoster will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions with regard to this data.
When all cookies are deleted, any opt-out cookies already set will also be deleted, so that you will have to re-declare any opt-outs you have already declared.
We distinguish between cookies that are absolutely necessary for the technical functions of the website and optional cookies.
To enable you to determine your desired data protection settings for visiting our website as individually as possible, we will give you the opportunity below to set your preferences for the categories operational necessity, statistics, comfort and personalisation for you.
- Category “Operational necessity”
These cookies are necessary for the operation of the site.
- Category “Statistics”
To further improve our offer and our website, we collect anonymous data for statistics and analysis. With the help of these cookies we can, for example, determine the number of visitors and the effect of certain pages on our website and optimise our content.
- “C0nvenience” category
We use these cookies to make the use of the site easier for you. For example, the language you have selected can be displayed again initially on your next visit.
- “Personalization” category
These cookies are used to display personalized content according to your interests. This enables us to present you with offers that are particularly relevant to you.
Which cookies of the category “operational necessity” do we use?
Which cookies of the category “Statistics” do we use?
On this website, the controller has integrated the component of Google Analytics (with the anonymizer function). Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analysis service collects, inter alia, data about the website from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.
The operator of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. For the web analytics through Google Analytics the controller uses the application “_gat. _anonymizeIp”. By means of this application the IP address of the Internet connection of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area. The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our websites, and to provide other services concerning the use of our Internet site for us.
Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Google Analytics component was integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements. Google Analytics cookies are stored based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its website and its advertising.
The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of our website by the data subject. With each visit to our Internet site, such personal data, including the IP address of the Internet access used by the data subject, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties. The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google Analytics from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google Analytics may be deleted at any time via a web browser or other software programs.
Transfer to a third country: Google LLC is based in the USA. Storage period: 14 months. Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under http://www.google.com/analytics/terms/us.html. Google Analytics is further explained under the following Link https://www.google.com/analytics/.
Which “convenience” category cookies do we use?
Which cookies in the “Personalization” category do we use?
6. YouTube and presence in social media
On this website, we have integrated components of YouTube. YouTube is an Internet video portal that enables video publishers to set video clips and other users free of charge, which also provides free viewing, review and commenting on them. YouTube allows you to publish all kinds of videos, so you can access both full movies and TV broadcasts, as well as music videos, trailers, and videos made by users via the Internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, UNITED STATES. The YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES.
With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a YouTube component (YouTube video) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding YouTube component. Further information about YouTube may be obtained under https://www.youtube.com/yt/about/en/. During the course of this technical procedure, YouTube and Google gain knowledge of what specific sub-page of our website was visited by the data subject. If the data subject is logged in on YouTube, YouTube recognizes with each call-up to a sub-page that contains a YouTube video, which specific sub-page of our Internet site was visited by the data subject. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject. YouTube and Google will receive information through the YouTube component that the data subject has visited our website, if the data subject at the time of the call to our website is logged in on YouTube; this occurs regardless of whether the person clicks on a YouTube video or not. If such a transmission of this information to YouTube and Google is not desirable for the data subject, the delivery may be prevented if the data subject logs off from their own YouTube account before a call-up to our website is made. YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.
YouTube’s data protection provisions, available at https://www.google.com/intl/en/policies/privacy/, provide information about the collection, processing and use of personal data by YouTube and Google.
We maintain online presences within social networks and platforms in order to be able to communicate with customers, interested parties and users active there and to inform them about our services. We point out that user data may be processed outside the European Union. This can result in risks for the users, because the enforcement of the users’ rights could be made more difficult. Furthermore, user data is generally processed for market research and advertising purposes. For example, user profiles can be created from the user behaviour and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers, in which the usage behaviour and interests of the users are stored. Furthermore, data may also be stored in the user profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them). The processing of users’ personal data is based on our legitimate interests in effective information of users and communication with users in accordance with Art. 6 para. 1 lit. f. GDPR. If users are asked by the respective providers to give their consent to data processing (i.e. to give their consent e.g. by ticking a check box or confirming a button), the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR. For a detailed presentation of the respective processing and the possibilities of objection (opt-out), we refer to the following linked information of the providers. Also in the case of requests for information and the assertion of user rights, we would like to point out that these can most effectively be asserted with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. Should you nevertheless require assistance, you can contact us.
7. Description of our data processing activities
We offer various services via our websites and through our activity/presence in social networks such as LinkedIn or XING. In order to provide these services, we have to collect and process personal data of the user or our customer.
The processing activities within the meaning of Art. 13 GDPR are described below:
a) Contact with/by (potential) customers
If you are a customer of e&Co. AG, we may need to collect and use information about you or people within your organization to provide services to you and/or notify you of content published by e&Co. that is likely to be important and useful to you.
Description and scope of data processing
On our website it is possible to contact us via the provided e-mail address. In this case, the user’s personal data transmitted with the e-mail will be stored. It is also conceivable that initial contact is usually made via corresponding social networks such as XING or LinkedIn. In this case, the personal data is recorded which is related to the contact and relevant for the further business relationship. We only collect data about our customers to a very limited extent. The following data is collected:
- Name and first name of individual contact persons within your organization
- E-mail address
- Content of the request
- Company on whose behalf you are making an enquiry (voluntary information)
- Telephone number (optional)
- Date and time of the request
- Log information, such as IP address (only for contact form)
Purpose of the data processing:
We use the data to ensure a smooth business relationship and to be able to process your request as quickly as possible. For this purpose we use either your e-mail address or your telephone number. Log information is collected to protect against misuse of the contact form.
Legal basis for the data processing
As legal basis for the present processing of your data is our interest in a good dialogue between our customers and us, as well as ensuring a functioning process, Art. 6 para. 1 letter f GDPR.
Transfer to third parties:
The collected data will not be passed on to third parties in the course of contacting us.
Duration of storage:
If the data collection is no longer necessary to achieve the purpose, the data will be deleted. This is the case if the circumstances indicate that the matter in question has been conclusively clarified. However, there may be requirements under commercial law in particular which oblige us to maintain the correspondence for a period of time. The period of time depends on the content of the affected document.
b) Processing of contracts
If you are a customer of e&Co. AG, we need to collect and use information about you or people within your organization to provide services to you and/or notify you of content published by e&Co. that is likely to be important and useful to you.
Description and scope of data processing
In order to provide the contractually agreed services, we are dependent on the processing of certain personal data. We only collect data about our customers to a very limited extent. The following data is collected:
- Name and first name of individual contact persons within your organisation
- E-mail addresses of contact persons
- Content of the request
- Data on the company of our contact persons:
- Address of the company
- Telephone number
- Company billing address
- Value added tax Identification number
- Commercial register number
- Date and time of the request
Purpose of the data processing:
We use the information e.g. to assert, exercise or defend legal claims.
Legal basis for data processing
We process this data on the basis of Art. 6 Para. 1 lit. b of the GDPR. It states that the processing of personal data is lawful if it is necessary for the performance of a contract or for the implementation of pre-contractual measures taken at the request of the data subject.
Transfer to third parties:
It may be necessary to disclose data to tax, audit or other authorities if we are convinced in good faith that we are obliged to disclose such data by law or other regulation (for example, because of a request from a tax authority or in connection with an anticipated legal dispute).
Duration of storage:
If the collection of data is no longer necessary to achieve its purpose, the data will be deleted. This is the case if the circumstances indicate that the matter in question has been conclusively clarified. However, there may be requirements under commercial law in particular which oblige us to maintain the correspondence for a period of time. The period of time depends on the content of the affected document.