Privacy Policy

We are delighted that you are interested in our company. Data protection is of particularly high priority for the management of ecoTES Trockeneisstrahltechnik. It is generally possible to use our website without providing any personal data. However, if a data subject wishes to make use of special services offered by our company via our website, it may become necessary to process personal data. If such processing is necessary and there is no statutory basis for it, we generally obtain the consent of the data subject.

The processing of personal data is always carried out in accordance with the General Data Protection Regulation (GDPR) and the country-specific data protection provisions applicable to ecoTES Trockeneisstrahltechnik. This Privacy Policy informs you of the nature, scope and purpose of the personal data we collect, use and process, as well as the rights to which data subjects are entitled.

1. Definitions

This Privacy Policy is based on the terms used by the GDPR:

a) Personal data
Any information relating to an identified or identifiable natural person ("data subject").

b) Data subject
Any identified or identifiable natural person whose personal data is processed.

c) Processing
Any operation performed on personal data, such as collection, recording, storage, alteration, retrieval, use, disclosure, or erasure.

d) Restriction of processing
The marking of stored personal data with the aim of limiting its future processing.

e) Profiling
Automated processing of personal data to evaluate personal aspects (e.g. work performance, economic situation, health, behaviour, or location).

f) Pseudonymisation
The processing of data in such a way that it can no longer be attributed to a specific data subject without additional information.

g) Controller
The natural or legal person which determines the purposes and means of processing personal data.

h) Processor
A person or body which processes personal data on behalf of the controller.

i) Recipient
A person or body to whom personal data is disclosed.

j) Third party
Any person or body other than the data subject, the controller, the processor and their authorised staff.

k) Consent
Any freely given, informed and unambiguous indication of the data subject's wishes by which they agree to the processing of their personal data.

2. Name and Address of the Controller

The controller within the meaning of the GDPR is:

ecoTES Trockeneisstrahltechnik
Owner: Joschka Steffahn
Zum Jagsttal 19
74532 Ilshofen
Germany

Phone: +49 7904-9428791
Email: info@ecotes.de
Website: https://www.ecotes.de/

3. Hosting

Our website is operated by a hosting provider with servers located in Germany. We have entered into a data processing agreement with the hosting provider pursuant to Art. 28 GDPR. The server log files generated during operation (see Section 5) are processed there.

4. Cookies and Consent Management

Our website uses cookies. Cookies are text files that are stored on a user's device via their web browser.

To manage consent, we use the plugin "GDPR Cookie Compliance", which displays a cookie consent banner on a visitor's first visit to our website and technically blocks non-essential scripts until active consent has been given.

We distinguish between:

  • Technically necessary cookies (e.g. for the shopping cart, security functions, language settings, and storing the cookie consent itself): These are required to operate the website and are used without separate consent on the basis of Art. 6(1)(f) GDPR in conjunction with § 25(2) No. 2 TDDDG (German Telecommunications and Digital Services Data Protection Act).
  • Statistics and marketing cookies (Google Analytics 4, Google Ads – see Sections 8 and 9): These are set only after prior, explicit consent given via the cookie banner (§ 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR). Consent can be withdrawn at any time with effect for the future via the consent button (cookie settings).

Users may additionally object to the setting of cookies at any time via their browser settings; however, this may limit the functionality of certain parts of the website.

5. Collection of General Data and Information (Server Log Files)

When our website is accessed, we automatically collect: browser type and version used, operating system, referrer URL, subpages accessed, date and time of access, IP address, and internet service provider. This data is used exclusively for the technical provision and security of the website, is not merged with other personal data, and is deleted or anonymised promptly. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operational security and error analysis).

6. Contact via Email or Contact Form

If you contact us by email or via a contact form, the personal data you submit is automatically stored and used to process your inquiry and for follow-up questions. This data is not disclosed to third parties. The legal basis is Art. 6(1)(b) GDPR (pre-contractual inquiry) or (f) (legitimate interest in communication).

7. Order and Inquiry Form (Purchase, Rental, Leasing, Instalment Purchase)

On our product pages, purchases can be made directly via the shopping cart, or rental/leasing/instalment purchase inquiries can be submitted via a separate inquiry form. In doing so, we collect: company name, VAT ID, contact person, phone number, email address, postal code, city, and street address.

This data is processed to handle the order or inquiry and, where applicable, for the initiation or performance of a contract (Art. 6(1)(b) GDPR), as well as—where legally required—to comply with commercial and tax retention obligations (Art. 6(1)(c) GDPR, generally 6–10 years pursuant to § 147 of the German Fiscal Code / § 257 of the German Commercial Code). Consent to the terms and conditions and this Privacy Policy is obtained via separate checkboxes on the form.

8. Google Analytics 4 (GA4)

We use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland ("Google"). Google Analytics uses cookies or comparable technologies that enable analysis of website usage (e.g. referrer, pages visited, time spent, approximate location).

GA4 truncates or masks IP addresses before transmission to Google servers within the EU/EEA. A full IP address is transmitted to the US only in exceptional cases. Data transfers to Google in the US are based on Standard Contractual Clauses or the EU-US Data Privacy Framework, where Google is certified under it.

Legal basis: solely consent under Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG — GA4 is only loaded after active consent has been given via the cookie banner. Consent can be withdrawn at any time with effect for the future.

Further information: https://policies.google.com/privacy and https://support.google.com/analytics/answer/12017362

9. Google Ads (Conversion Tracking)

We use Google Ads provided by Google Ireland Limited (address as above) to advertise our products on external websites and in Google search results. To measure the success of our ads, we use conversion tracking: if a user clicks on one of our Google ads, a cookie is set that records whether certain actions were subsequently carried out on our website (e.g. a completed purchase, a phone call, or email contact).

The data collected is used exclusively for statistical purposes to optimise our advertising campaigns; we are not able to identify individual users. Google may link the data to its own user accounts and process it in the US.

Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG — conversion tracking likewise runs only after consent has been given via the cookie banner.

Opt-out/deactivation: https://www.google.com/settings/ads or by declining via the cookie banner.

10. Legal Bases for Processing – Overview

  • Art. 6(1)(a) GDPR: Consent (e.g. statistics/marketing cookies)
  • Art. 6(1)(b) GDPR: Performance/initiation of a contract (e.g. order/inquiry form)
  • Art. 6(1)(c) GDPR: Legal obligation (e.g. tax retention requirements)
  • Art. 6(1)(f) GDPR: Legitimate interest (e.g. IT security, website operation, general communication)

11. Legitimate Interests Pursued by the Controller

Where processing is based on Art. 6(1)(f) GDPR, our legitimate interest lies in the proper and secure operation of our website and in maintaining our business operations.

12. Retention Period

Personal data is only stored for as long as necessary for the respective processing purpose or as required by statutory retention periods. It is then routinely deleted or blocked.

13. Rights of the Data Subject

Every data subject has the right to:

  • Confirmation and access (Art. 15 GDPR) regarding personal data stored about them
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure / "right to be forgotten" (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Not be subject to a decision based solely on automated processing, including profiling (Art. 22 GDPR)
  • Withdraw consent previously given, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, an informal message to the contact details given in Section 2 is sufficient.

14. Right to Lodge a Complaint with a Supervisory Authority

Data subjects have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged infringement, if they consider that the processing of their personal data violates the GDPR.

The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
(State Commissioner for Data Protection and Freedom of Information Baden-Württemberg)
Lautenschlagerstraße 20
70173 Stuttgart, Germany
https://www.baden-wuerttemberg.datenschutz.de/

15. Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Last updated: September 2026