In accordance with the legal requirements of data protection law (in particular the German Federal Data Protection Act (BDSG nF) and the European General Data Protection Regulation (GDPR)), we hereby inform you about the nature, scope, and purpose of the processing of personal data by our company. This privacy policy also applies to our websites and social media profiles. For the definition of terms such as "personal data" or "processing," please refer to Article 4 of the GDPR

Name and contact details of the controller:
Our controller (hereinafter referred to as "Controller") within the meaning of Art. 4 No. 7 GDPR is:

ECH Elektrochemie Halle GmbH
Otto-Eißfeldt-Straße 8
06120 Halle (Saale)
Germany

Managing Director: Dr. Michael Hahn / Dr. Dorit Wilke

Commercial Register/No.: HRB 206379
Register Court: Stendal District Court

Fax: +49 (0) 345 27 95 70 - 99
Email address: info@ech.de

Data Protection Officer:
Dr. Dorit Wilke
Otto-Eißfeldt-Straße 8
06120 Halle (Saale)
Germany

Email address: info@ech.de
Fax: +49 (0) 345 27 95 70 - 99

ECH Scientific Limited
Building 69, Wrest Park, Silsoe
Bedfordshire, MK45 4HS
United Kingdom

Managing Director:  Karl George Robertson / Thomas Liam Gallant

Fax: +44 1525 404848
E-Mail-Adresse: info@echscientific.com

ECH America Inc.
3430 S Sam Houston Pkwy E #400
Houston, TX 77047
USA

Managing Director: Karl George Robertson

E-Mail-Adresse: info@echamerica.com

Types of data, purposes of processing, and categories of data subjects:
Below, we inform you about the type, scope, and purpose of the collection, processing, and use of personal data.

Integration of external content from our own central subdomain (data.echscientific.com):

Our websites load certain content (e.g., stylesheets, scripts, images, or fonts) from a central domain that we operate ourselves. This serves the efficient provision and maintenance of website elements across several of our online services.

When you access this content, your IP address is automatically transmitted to the server of the central domain to enable the website to be displayed. The central domain is operated exclusively by us and does not process any personal data beyond what is necessary for its technical provision. Your user behavior is not analyzed, and no personal data is stored.

The servers of the central domain are hosted within the European Union. No data is shared with third parties or transferred to third countries.

Preamble:

ECH Elektrochemie Halle GmbH, ECH Scientific Ltd., and ECH America Inc. belong to the ECH Elektrochemie Halle group of companies and are responsible for the websites under ech.group, ech.de, echscientific.com, echamerica.com, aquamaxkf.com, sulfimaxgx.com, titramaxvt.com, h2s-analysis.com, and their associated subdomains (e.g., data.ech.group, store.ech.group, service.ech.group), as well as on the ECH Elektrochemie Halle social media channels.

Personal data is deleted as soon as possible and is never used or shared for advertising purposes without your consent.

• Types of data we process:
  Usage data (access times, websites visited, etc.), inventory data (name, address, etc.), contact data (telephone number, email, fax, etc.), content data (text entries, videos, photos, etc.), communication data (IP address, etc.).
   
• Purposes of processing according to Art. 13 para. 1 c) GDPR:
  Evidentiary purposes / securing evidence, technically and economically optimizing the website, enabling easy access to the website, fulfilling legal retention obligations, optimizing and statistically evaluating our services, improving user experience, making the website user-friendly, creating statistics, determining the likelihood of text copying, preventing spam and misuse, processing job applications, customer service and support, handling contact requests, providing websites with functions and content, security measures, uninterrupted and secure operation of our website.
   
• Categories of data subjects according to Art. 13 para. 1 e) GDPR:
  Visitors/users of the website, customers, suppliers, prospective customers, applicants, employees, employees of customers or suppliers.
  The data subjects are collectively referred to as "users".

Below we inform you about the legal basis for the processing of personal data:

• If we have obtained your consent for the processing of personal data, the legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR.
   
• If the processing is necessary for the performance of a contract or for taking steps at your request prior to entering into a contract, the legal basis is Art. 6 para. 1 sentence 1 lit. b) GDPR.
   
• If processing is necessary for compliance with a legal obligation to which we are subject (e.g. statutory retention obligations), then Art. 6 para. 1 sentence 1 lit. c) GDPR is the legal basis.
   
• If processing is necessary to protect the vital interests of the data subject or of another natural person, then Article 6(1)(d) GDPR is the legal basis.
   
• If the processing is necessary to protect our legitimate interests or those of a third party, and your interests or fundamental rights and freedoms do not override these interests, then Article 6(1)(f) GDPR is the legal basis.

We generally do not share your data with third parties without your consent. Should this nevertheless occur, the transfer will be based on the aforementioned legal grounds, for example, when transferring data to online payment providers for contract fulfillment, or due to a court order or legal obligation to disclose data for the purposes of law enforcement, public safety, or the enforcement of intellectual property rights.

We also use data processors (external service providers, e.g., for web hosting of our websites and databases) to process your data. If data is transferred to data processors within the framework of a data processing agreement, this is always done in accordance with Article 28 of the GDPR. We carefully select our data processors, monitor them regularly, and have reserved the right to issue instructions regarding the data. Furthermore, the data processors must have implemented appropriate technical and organizational measures and comply with the data protection regulations according to the German Federal Data Protection Act (BDSG nF) and the GDPR.

The adoption of the European General Data Protection Regulation (GDPR) created a uniform basis for data protection in Europe. Your data is therefore primarily processed by companies to which the GDPR applies. Should processing by third-party services outside the European Union or the European Economic Area nevertheless take place, these services must meet the specific requirements of Articles 44 et seq. of the GDPR. This means that processing is based on special safeguards, such as the EU Commission's officially recognized finding of an adequate level of data protection equivalent to that of the EU, or compliance with officially recognized specific contractual obligations, the so-called "standard contractual clauses."

Insofar as we obtain your explicit consent for the transfer of data to the USA pursuant to Article 49(1)(a) of the GDPR due to the invalidity of the so-called "Privacy Shield," we would like to draw your attention to the risk of secret access by US authorities and the use of the data for surveillance purposes, possibly without legal recourse for EU citizens

Unless expressly stated otherwise in this privacy policy, your personal data will be deleted or blocked as soon as you withdraw your consent to its processing, or the purpose for its storage no longer applies, or the data is no longer required for that purpose, unless its further retention is necessary for evidentiary purposes or is required by law. 

This includes, for example, the statutory retention periods for business correspondence under Section 257 Paragraph 1 of the German Commercial Code (HGB) (6 years) and the statutory retention periods for tax documents under Section 147 Paragraph 1 of the German Fiscal Code (AO) (10 years). Once the prescribed retention period expires, your data will be blocked or deleted, unless further storage is necessary for entering into or fulfilling a contract.

We do not use automated decision-making or profiling.

• If you use our website for informational purposes only (i.e., without registering or otherwise submitting information), we only collect the personal data that your browser transmits to our server. When you visit our website, we collect the following data:

  • IP address;
  • User's internet service provider;
  • Date and time of access;
  • Browser type;
  • Browser language and version;
  • Content of the request;
  • Time zone;
  • Access status/HTTP status code;
  • Data volume;
  • Websites from which the request originates;
  • Operating system.
  
  This data is not stored together with other personal data of yours.

  This data serves the purpose of providing you with a user-friendly, functional, and secure website with its features and content, as well as for its optimization and statistical analysis.

• The legal basis for this is our legitimate interest in data processing, which is also reflected in the purposes stated above, pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.
   
• For security reasons, we store this data in server log files for a period of 90 days. After this period, it is automatically deleted, unless we need to retain it as evidence in the event of attacks on the server infrastructure or other legal violations.

• We use cookies when you visit our website. Cookies are small text files that your internet browser places and stores on your computer. When you revisit our website, these cookies provide information to automatically recognize you. Cookies also include so-called "user IDs," where user data is stored using pseudonymized profiles.

  When you access our website, we inform you about the use of cookies for the aforementioned purposes and how you can object to or prevent their storage ("opt-out") via a notice linking to our privacy policy.

• The following types of cookies are used:
  
  Necessary, essential cookies: Essential cookies are cookies that are absolutely necessary for the operation of the website in order to save certain functions of the website such as logins, shopping cart or user inputs e.g. regarding the language of the website.
  
  Session cookies: Session cookies are required to recognize repeated use of a service by the same user (e.g., to determine your login status after you have logged in). When you revisit our site, these cookies provide information to automatically recognize you. The information obtained in this way is used to optimize our services and make it easier for you to access our site. Session cookies are deleted when you close your browser or log out.
  
  Persistent cookies: These cookies remain stored even after you close your browser.
  They are used to store login information, measure website reach, and for marketing purposes. 
  They are automatically deleted after a predetermined period, which varies depending on the cookie.
  You can delete cookies at any time in your browser's security settings.
  
  Third-party cookies (especially those from advertisers): You can configure your browser settings according to your preferences and, for example, reject the acceptance of third-party cookies or all cookies. However, please note that you may then not be able to use all the functions of this website. For more information about these cookies, please refer to the respective privacy policies of the third-party providers.
  
  Data categories: User data, cookie, user ID (in particular, pages visited, device information, access times and IP addresses).
  
  Purposes of processing: The information obtained in this way serves the purpose of technically and economically optimizing our web services and enabling you to access our website more easily and securely.
  
  Legal basis: If we process your personal data using cookies based on your consent ("opt-in"), then Article 6(1)(a) GDPR is the legal basis. Otherwise, we have a legitimate interest in the effective functionality, improvement, and economic operation of the website, so in that case, Article 6(1)(f) GDPR is the legal basis. Article 6(1)(b) GDPR also applies if the cookies are set for the purpose of initiating a contract, e.g., during the ordering process.
  
  Storage period/deletion: The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case when the respective session has ended. Otherwise, cookies are stored on your computer and transmitted from there to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all of the website's functions. Here you will find information on deleting cookies for different browsers:
  
  Chrome: 
  https://support.google.com/chrome/answer/95647
  
  Safari: 
  https://support.apple.com/de-at/guide/safari/sfri11471/mac
  
  Firefox: 
  https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen
  
  Microsoft Edge: 
  https://support.microsoft.com/de-at/help/4027947/windows-delete-cookies
   
• Objection and "Opt-Out": You can generally prevent cookies from being stored on your hard drive, regardless of consent or legal permission, by selecting "do not accept cookies" in your browser settings. However, this may limit the functionality of our services. You can object to the use of third-party cookies for advertising purposes via an "opt-out" on this American website or this European website
  
  American webseite:
  https://optout.aboutads.info
  European website:
  http://www.youronlinechoices.com/de/praferenzmanagement/

• When you contact us via contact form, fax, post or e-mail, your information will be processed for the purpose of handling your contact request.
   
• The legal basis for processing your data, if you have given your consent, is Article 6(1)(a) GDPR. The legal basis for processing data transmitted in the course of a contact request or via email, letter, or fax is Article 6(1)(f) GDPR. The controller has a legitimate interest in processing and storing the data in order to respond to user inquiries, for evidentiary purposes in case of liability claims, and to comply with any legal retention obligations for business correspondence. If the contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.
   
• We may store your information and contact request in our Customer Relationship Management System ("CRM System") or a comparable system.
   
• The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data from the contact form and data transmitted by email, this is the case when the respective conversation with you has ended. A conversation is considered ended when it is clear from the circumstances that the matter in question has been resolved. We store inquiries from users who have an account or contract with us for up to two years after the contract ends. In the case of statutory archiving obligations, deletion occurs after their expiry: the end of the commercial (6 years) and tax-related (10 years) retention periods.
   
• You have the right to withdraw your consent to the processing of your personal data at any time, in accordance with Article 6(1)(a) of the GDPR. If you contact us by email, you can object to the storage of your personal data at any time.

• When you contact us by phone, your phone number is processed to handle your inquiry and is temporarily stored or displayed in the RAM/cache of your phone/display. This storage is for liability and security reasons, to provide proof of the call, and for business reasons, to enable a callback. In the case of unsolicited advertising calls, we block the phone numbers
   
• The legal basis for processing the telephone number is Article 6(1)(f) GDPR. If the contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.
   
• The device cache stores call logs for 90 days and successively overwrites or deletes older data. When the device is disposed of, all data is deleted and the storage medium may be physically destroyed. Blocked phone numbers are reviewed annually to determine if the block is still necessary.
   
• You can prevent your phone number from being displayed by calling with a suppressed phone number.

• We have integrated the anti-spam function "reCAPTCHA" from "Google" ( provider: Google Ireland Limited, registration number: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) into our website
   
• Data category and description of data processing: Usage data (e.g., website visited, IP address). By using "reCAPTCHA" in our forms, we can determine whether the input was made by a machine (robot) or a human. When using this service, your IP address and, if applicable, other data required for this purpose may be transmitted to Google servers in the USA.
   
• Purpose of processing: Prevention of spam and abuse, as well as our economic interest in optimizing our website.
   
• Legal basis: If you have given your consent ("opt-in") to the processing of your personal data using "reCaptcha" from the third-party provider, then Article 6(1)(a) GDPR is the legal basis. Our legitimate interest in data processing for the purposes stated above is also a legal basis pursuant to Article 6(1)(f) GDPR.
   
• Data transfer/recipient category: Third-party providers in the USA.
   
• Storage duration: until you, as the user, delete the cookies.
   
• Further information about Google reCAPTCHA can be found at  and in Google's privacy policy at:
  https://www.google.com/recaptcha/ 
  and in Google's privacy policy at:
  https://policies.google.com/privacy.

• We maintain profiles and fan pages on social media. When you use and access our profile on the respective network, the respective privacy policies and terms of use of that network apply.
   
• Data categories and description of data processing: Usage data, contact data, content data, inventory data. Furthermore, user data within social networks is generally processed for market research and advertising purposes. For example, user profiles can be created based on usage behavior and the resulting user interests. These user profiles can then be used to display advertisements within and outside the networks that are likely to correspond to the users' interests. For these purposes, cookies are generally stored on users' computers, recording their usage behavior and interests. Additionally, data can be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in). For a detailed description of the respective processing methods and the options for objecting (opting out), please refer to the privacy policies and information provided by the operators of the respective networks. Regarding requests for information and the assertion of data subject rights, we also point out that these can be most effectively addressed directly with the providers. Only the service providers have access to user data and can directly take appropriate action and provide information. Should you still require assistance, please contact us.
   
• Purpose of processing: Communication with users connected and registered on social networks; information and advertising for our products, offers and services; public relations and image management; evaluation and analysis of users and content of our social media presence.
   
• Legal basis: The legal basis for processing personal data is our legitimate interest in the purposes stated above, pursuant to Article 6(1)(f) GDPR.
  
  If you have given us or the operator of the social network your consent to the
  processing of your personal data, the legal basis is Article 6(1)
  
  (a) in conjunction with Article 7 GDPR.
   
• Data transmission/recipient category: Social network.
   
• The privacy policies, information options, and opt-out options of the respective networks/service providers can be found here:
  
  • LinkedIn – Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland –
  
  Privacy Policy:
  https://www.linkedin.com/legal/privacy-policy 
  
  Cookie Policy and Opt-Out:
  https://www.linkedin.com/legal/cookie-policy

• Applications sent electronically or by post to the responsible party will be processed electronically or manually for the purpose of handling the application process.
   
• We expressly point out that application documents containing "special categories of personal data" according to Article 9 of the GDPR (e.g., a photo that reveals your ethnic origin, religion, or marital status), with the exception of any severe disability that you may choose to disclose, are not desired. You should submit your application without this data. This will not affect your chances of being hired.
   
• The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b) GDPR and § 26 BDSG nF.
   
• If an employment relationship is established with the applicant after the application process is completed, the applicant's data will be stored in accordance with applicable data protection regulations. If you are not offered a position after the application process is completed, your application letter and supporting documents will be deleted 6 months after the rejection notice is sent, in order to comply with any potential claims and documentation requirements under the German General Equal Treatment Act (AGG).

• Objection or revocation of the processing of your data. If the processing is based
  
  on your consent pursuant to Art. 6 para. 1 sentence 1 lit. a), Art. 7 GDPR , you have the right to revoke your consent at any time. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected . 

  If we base the processing of your personal data on the balancing of interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, you may object to the processing. 
  
  This is the case, in particular, if the processing is not necessary for the performance of a contract with you, which we will explain in the following description of the functions. 
  
  When exercising such an objection , we ask that you explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either cease or adjust the data processing or demonstrate to you our compelling legitimate grounds on which we continue the processing. 
  
  You may object to the processing of your personal data for advertising and data analysis purposes at any time. You can exercise your right to object free of charge. 
  
  You can inform us of your objection to advertising using the following contact details: 

  ECH Elektrochemie Halle GmbH
  Otto-Eißfeldt-Straße 8
  06120 Halle (Saale)
  Germany
  
  Managing Director: Dr. Michael Hahn
  Commercial Register/No.: HRB 206379
  Register Court: Stendal District Court 
  Fax: +49 (0) 345 27 95 70 - 99
  Email address: info@ech.de
   

• Right to Information:
  
  You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to access your personal data stored by us in accordance with Article 15 of the GDPR. This includes, in particular, information about the purposes of the processing, the categories of personal data concerned, the categories of recipients to whom your data have been or will be disclosed, the envisaged storage period, and the source of your data, if it was not collected directly from you.
   
• Right to rectification
  
  You have a right to rectification of inaccurate data or to completion of inaccurate data pursuant to Art. 16 GDPR.
   
• Right to erasure
  
  You have the right to erasure of your data stored with us in accordance with Art. 17 GDPR, unless statutory or contractual retention periods or other legal obligations or rights to further storage preclude this.
   
• Right to restriction of processing:
  
  You have the right to request a restriction on the processing of your personal data if one of the conditions in Article 18(1)(a) to (d) GDPR is met:
   
  • If you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
  
  • The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
  
  • The controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims; or
  
  • You have objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds. 
   
• Right to data portability
  
  You have a right to data portability under Article 20 GDPR, which means that you can receive the personal data we hold about you in a structured, commonly used and machine-readable format or request its transmission to another controller.
   
• Right to lodge a complaint:
  
  You have the right to lodge a complaint with a supervisory authority. Generally, you can contact the supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

To protect all personal data transmitted to us and to ensure that data protection regulations are complied with by us and our external service providers, we have implemented appropriate technical and organizational security measures. Therefore, among other things, all data between your browser and our server is transmitted via a secure SSL connection.