Privacy Policy, Copyright, Liability
Privacy Policy
Last updated: October 2026. This English version is provided for convenience; in case of doubt, the German version applies.
In short: This website works without tracking cookies, without advertising and without services from Google, Facebook or other third parties. All fonts, images and scripts are loaded from our own server. For visitor statistics we use Matomo on our own server – without cookies and with a shortened IP address. That is why you will not see a cookie banner here.
1) Controller
1.1 Thank you for visiting our website. Below we inform you about the personal data we process when you use our website. Personal data is any data that can be used to identify you personally.
1.2 The controller within the meaning of the General Data Protection Regulation (GDPR) is econcess GmbH, Firkenweg 7, 85774 Unterföhring, Germany, phone: +49 89 700742-660, fax: +49 89 39298954, e-mail:
1.3 This website uses SSL/TLS encryption to protect the transmission of your data (e.g. enquiries via the contact form). You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.
2) Provision of the website and server log files
When you access our website, your browser automatically transmits data to our server, which is stored in so-called server log files:
- page or file accessed
- date and time of access
- amount of data transferred
- the page from which you reached us (referrer)
- browser and operating system used
- IP address
This data is technically necessary to display the website and to ensure stable and secure operation. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website). The data is not combined with other data sources and is not passed on. We reserve the right to review the log files retrospectively if there are concrete indications of unlawful use.
Our website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany. Mittwald processes the data exclusively on our behalf on servers in Germany; a data processing agreement pursuant to Art. 28 GDPR has been concluded with Mittwald.
3) No third-party content
Fonts, icons, images and program libraries (e.g. jQuery) are hosted on our own server. When you visit our website, no connection is made to Google Fonts, content delivery networks or other third parties, and your IP address is not transmitted to third parties.
Our pages contain links to Facebook, Instagram, YouTube and other external websites. These are simple links, not embedded plugins: only when you click such a link are you forwarded to the respective provider’s website, and only then does its privacy policy apply.
4) Cookies and local browser storage
4.1 We only use one technically necessary session cookie of the content management system Joomla. It contains a random identifier, is required, for example, to submit forms securely and is deleted when you close your browser. The legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. We do not use cookies for analytics or advertising.
4.2 If you use our accessibility tool (icon at the bottom right), your settings such as font size or contrast are stored in your browser’s local storage (localStorage) so that they are retained on your next visit. This data does not leave your device and is not transmitted to us. You can delete it at any time using the “Reset” button in the tool or via your browser settings. The legal basis is Section 25(2) no. 2 TDDDG, as storage is necessary to provide the function you have expressly requested.
4.3 If you object to web analytics (see section 5), your browser stores a note of this objection so that it is respected on future visits.
5) Web analytics with Matomo (self-hosted, without cookies)
To understand how our website is used and to improve it, we use the open-source software Matomo. Matomo runs on our own server (stats.econcess.de); the data is not transmitted to the makers of Matomo or any other third party.
We have configured Matomo to collect as little data as possible:
- No cookies are set and no user profiles are created across visits.
- Your IP address is immediately shortened by two bytes (e.g. 192.168.xxx.xxx) and only stored in this form. It is therefore not possible to identify you.
- Your browser’s “Do Not Track” setting is respected: if it is enabled, no data is collected.
- Parameters in referrer addresses are removed.
- Raw data is deleted automatically after 180 days; only aggregated, anonymous statistics (e.g. page views per month) are kept.
The following is recorded: pages and page titles visited, time and duration of the visit, the page you came from, links and downloads clicked, browser, operating system, device type, screen resolution, language setting and the country or region derived from the shortened IP address.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the statistical analysis and improvement of our website. As no cookies are set, no profiles are created and no data is passed on to third parties, in our view your interests do not override ours.
Objection: You can object to the collection at any time using the button below. Your browser then stores a note (cookie “mtm_consent_removed”) and your visits are no longer recorded. If you delete your cookies, you will need to object again.
If the button is not displayed (e.g. because JavaScript is disabled), please enable “Do Not Track” in your browser or send us an e-mail.
6) Contacting us
If you contact us via the contact form, e-mail or telephone, we process the data you provide (for the contact form: first and last name, e-mail address, telephone number and your message) in order to answer your enquiry. Enquiries via the contact form are forwarded to us by e-mail; they are not stored in our website’s database.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering your enquiry) and, if your enquiry is aimed at concluding a contract, Art. 6(1)(b) GDPR. We delete your data once your enquiry has been dealt with conclusively, provided there are no statutory retention obligations.
To protect against automated spam, a short calculation may be performed in your browser before a form is submitted (a so-called proof-of-work method). This check runs entirely on our server and in your browser; no cookies are set and no data is transmitted to third parties.
7) Job applications
7.1 You can apply for advertised positions by e-mail or via an online form. In doing so, we process the data you send us with your application, in particular personal details, contact details and evidence of qualifications. Applications via the online form are transmitted in encrypted form.
7.2 The legal basis is Art. 6(1)(b) GDPR in conjunction with Section 26(1) BDSG (initiation of an employment relationship). Where special categories of personal data within the meaning of Art. 9(1) GDPR are processed (e.g. information on a severe disability), this is done in accordance with Art. 9(2)(b) GDPR so that we can fulfil our obligations under employment and social security law.
7.3 If no employment relationship is established or you withdraw your application, we delete your data including correspondence no later than six months after the end of the procedure. This period results from our legitimate interest in answering follow-up questions and complying with our obligations to provide evidence under the German General Equal Treatment Act (AGG). If your application is successful, we continue to process your data for the purpose of the employment relationship.
8) Your rights
8.1 You have the following rights with regard to your personal data:
- right of access (Art. 15 GDPR)
- right to rectification (Art. 16 GDPR)
- right to erasure (Art. 17 GDPR)
- right to restriction of processing (Art. 18 GDPR)
- right to notification of recipients regarding rectification, erasure or restriction (Art. 19 GDPR)
- right to data portability (Art. 20 GDPR)
- right to withdraw consent with effect for the future (Art. 7(3) GDPR)
To exercise your rights, an informal message to
8.2 You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
8.3 RIGHT TO OBJECT
WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR LEGITIMATE INTERESTS (ART. 6(1)(F) GDPR), YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION (ART. 21 GDPR). WE WILL THEN NO LONGER PROCESS THE DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
YOU CAN OBJECT TO WEB ANALYTICS WITH MATOMO WITHOUT GIVING REASONS USING THE BUTTON IN SECTION 5.
9) Storage period
We only store personal data for as long as is necessary for the respective purpose or as required by statutory retention periods (e.g. under commercial and tax law). Specific periods are stated in the individual sections. The data is deleted thereafter.
Copyright
The content and works created by the site operators on these pages are subject to German copyright law. Reproduction, editing, distribution and any kind of use outside the limits of copyright law require the written consent of the respective author or creator. Downloads and copies of this site are only permitted for private, non-commercial use. Where content on this site was not created by the operator, the copyrights of third parties are respected. Individual photos are from Unsplash (unsplash.com) and are used under the Unsplash licence. Should you nevertheless become aware of a copyright infringement, please let us know. If we become aware of any infringements, we will remove such content immediately.
Liability for links
Our website contains links to external third-party websites over whose content we have no influence. We therefore cannot accept any liability for this external content. The respective provider or operator of the linked pages is always responsible for their content. The linked pages were checked for possible legal violations at the time of linking. No illegal content was recognisable at that time. Permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of an infringement. If we become aware of any infringements, we will remove such links immediately.
Liability for content
The content of our pages has been created with the greatest care. However, we cannot guarantee that the content is correct, complete or up to date. As a service provider, we are responsible for our own content on these pages under general law in accordance with Section 7(1) of the German Digital Services Act (DDG). According to Sections 8 to 10 DDG, however, we are not obliged as a service provider to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information under general law remain unaffected. Liability in this respect is, however, only possible from the time we become aware of a specific infringement. If we become aware of such infringements, we will remove this content immediately.