Data sharing with service providers & partners

1) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

2) Furthermore, we may pass on your personal data to third parties if we offer promotions, competitions, contract conclusions or similar services together with partners. You will receive more information about this when you provide your personal data or in the description of the offer.

3) If our service providers or partners are located in a country outside the European Economic Area (EEA), we will inform you in the description of the offer.

Cookies (“Cookie Policy)

What are cookies

Our website uses so-called cookies to store user-specific data. Cookies are small files that are stored by our website on your computer and contain certain user data from you, such as language or personal page settings. When you return to our site, your browser transmits the “user-specific” information back to our site. Thanks to the cookies, our site knows who you are and offers you your usual default settings. A cookie consists of a name and a value.

Consent to the use of cookies

When you visit our website for the first time (using a so-called “cookie banner” or “cookie consent tool”), you will be asked which cookies you would like to allow. Cookies that are not essential to provide the services of this website will only be used after you have given your consent. However, this decision will in turn be stored in a cookie for purposes of proof and implementation of your setting.

You can view and change your cookie settings here at any time: https://www.myetstorace.com/ at the bottom of the website by pop up.

The use of cookies represents a legitimate interest and is justified by Art. 6 (1) p. 1 lit. f DSGVO. In the case of non-essential cookies, the processing of personal data concerning you by cookies is based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO to the individual cookies. You are entitled to the rights described in section I. at any time.

By agreeing to the use of the respective cookies by U.S. providers such as Google, Facebook, Twitter, YouTube, LinkedIn, etc., you also consent to the processing of your data in the U.S. pursuant to Art. 49 (1) sentence 1 lit. a DSGVO.

Whether cookies are set in each case and which data is stored in them under which further circumstances is additionally explained in more detail in our notes on the tools, plug-ins or services used.

First-party and third-party cookies

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner websites or their tools/plug-ins/services (e.g. Google Analytics). Each cookie is to be evaluated individually, as each cookie stores different data. The expiration time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other “pests”. Cookies also cannot access information on your PC.

What are the types of cookies?

1) Essential cookies
These cookies are necessary to ensure basic functions of the website. For example, when the user adds a product to the shopping cart, then continues surfing on other pages and only later goes to the checkout. Through these cookies, the shopping cart is not deleted even if the user closes his browser window.

Essential cookies used:

2) Functional cookies
These cookies are not mandatory, but they increase the functionality of the website. This includes, for example, information such as user names, language selection, once entered form data, size of the font, etc..

Functional cookies used:

3) Performance, performance or marketing cookies

These cookies come from external advertising companies, among others, and are used to collect information about the websites visited by the user, for example, to create targeted advertisements for the user.
Other cookies collect information about user behavior on the website and whether users receive error messages (if so, which ones?) to enable improvement of the website’s content and structure. Loading times or the behavior of the website with different browser types are also measured with these cookies.

Performance cookies used:

3) Legal basis

The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest lies in the analysis, optimization and economic operation of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user.
The legal basis for setting the cookie is your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO. Details on this can be found above under the item “Cookies”.

4) Deactivation of data collection by Google Analytics

(1) You can revoke your consent to the storage of cookies at any time. For this, we refer to the previous notes on “Cookies” and the rights to which you are entitled.
(2) You may also refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
(3) You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

5) IP anonymization

We have implemented Google Analytics IP address anonymization on this website. The anonymization or masking of the IP takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before any storage or processing of the data takes place. As a result, IP addresses are further processed in a shortened form, which means that it is not possible to relate them to a specific person.
More information on IP anonymization can be found at: https://support.google.com/analytics/answer/2763052?hl=de.

6) Privacy of the provider

(1) Google’s privacy policy can be found at https://policies.google.com/privacy?hl=de&gl=de; as well as the terms of use for Google Analytics at: https://marketingplatform.google.com/about/analytics/terms/de/.
(2) It is not excluded that the processing is carried out by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Please note our information on data transfers to the USA.

Embedded Services

Integration of Google Maps

1) On this website we use the Google Maps service. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This allows us to show you interactive maps directly on the website and enables you to use the map function comfortably.

2) In order for Google Maps to fully offer its service, the company must collect and store data from you. This includes, among other things, the search terms entered, your IP address and the latitude or longitude coordinates. However, this data storage happens on the websites of Google Maps. We can only inform you about this, but have no influence. Since we have integrated Google Maps into our website, Google sets at least one cookie (name: NID) in your browser. This cookie stores data about your usage behavior. Google uses this data primarily to optimize its own services and to provide individual, personalized advertising for you.

3) The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest lies in optimizing the functionality of our website.
The legal basis for the setting of cookies is your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO. Details on this can be found above under the item “Cookies”.

4) It is not excluded that the processing is carried out by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Please note our information on data transfers to the USA.

5) For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider’s terms of use (available at: https://policies.google.com/terms?gl=DE&hl=de) and the terms and conditions for Google Maps (available at: https://www.google.com/intl/de_de/help/terms_maps.html).
There you will also receive further information about your rights in this regard and setting options for protecting your privacy (available at: http://www.google.de/intl/de/policies/privacy).

Social media

1) General information

We maintain publicly accessible profiles on social networks. The social networks used by us in detail can be found below.

Social networks can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media profile triggers numerous processing operations relevant to data protection.

2) Personal data

If you are logged into your social media account and visit our social media profile, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, you can be shown interest-based advertising inside and outside the respective social media profile. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

3) Reference to risks

We would like to point out that the respective providers may process user data outside the European Union. This may result in risks for the users because, for example, it could make it more difficult to enforce the rights of the users. With regard to U.S. providers that offer guarantees of a secure level of data protection through, for example, EU standard contractual clauses, we point out that they thereby undertake to comply with the data protection standards of the EU.

4) Purpose of the processing/legal basis

Our own processing of personal data on our social media sites is based on our legitimate interests according to Art. 6 para. 1 p. 1 lit. f DSGVO, in order to inform about our offer there, to make posts more attractive, to find the right time for publication, as well as to communicate with customers, interested parties and users active there. We have no influence on any further processing by the providers.

The legal basis for setting the aforementioned cookies is your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO. Details on this can be found above under the item “Cookies” or under “Social Media Plugins”.

5) Joint responsibility

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit.

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.

6) Rights management

In principle, you can assert your rights both against us and against the operator of the respective social media portal.

However, we would like to point out that these can be asserted most effectively with the operators. Only the operators have access to the users’ data and can take appropriate measures and provide information directly. If you still need help, please feel free to contact us.

7) Storage duration

The data collected directly by us via the social media profile is deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

8) Provider data protection

For a detailed presentation of the respective forms of processing and the options to object (opt-out), we refer to the data protection declarations and information of the providers of the respective social media networks, over which we have no influence and which apply when calling up the respective sites.

9) Existing social media profiles

a) Facebook
Own profile: https://www.facebook.com/ETSRacing

Service provider: Facebook Ireland Ltd. also Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA; Website: https://www.facebook.com; Privacy policy: https://www.facebook.com/about/privacy

“Insights Data”
Furthermore, Facebook provides us with statistical data of different categories (so-called “insights data”) when our fan page is used, which we can access accordingly. These page insights are aggregated data that allow us to gain insight into how people interact with our page. This includes: total page views, likes, page activity, post interactions, video views, post reach, comments, content shared, replies, percentage of men and women, country and city origin, language, store views and clicks, route planner clicks, and phone number clicks.
For more information about “Insights data,” including how to exercise your rights, please visit: https://www.facebook.com/legal/terms/information_about_page_insights_data.

Joint responsibility
There is a joint responsibility of the Fanpage operator and Facebook according to Art. 26 DSGVO.

To this end, a corresponding agreement has been reached with the fan page operators (available at: https://www.facebook.com/legal/terms/page_controller_addendum).

In doing so, Facebook assumes primary responsibility under the GDPR for the processing of Insights Data and will comply with all obligations under the GDPR with respect to the processing of Insights Data (including Articles 12 and 13 of the GDPR, Articles 15 to 22 of the GDPR, and Articles 32 to 34 of the GDPR).

You can contact Facebook’s data protection officer via the general contact form at https://www.facebook.com/help/contact/540977946302970 or regarding Insights data at https://www.facebook.com/help/contact/308592359910928.

b) Instagram
Own profile: https://www.instagram.com/ets_racing_fuels

Service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA;
Website: https://www.instagram.com;
Privacy policy: http://instagram.com/about/legal/privacy; Opt-out: https://help.instagram.com/519522125107875.

c) Twitter
Own profile: https://twitter.com/etsracingfuels

Service provider: Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA;
Website: www.twitter.com;
Privacy policy: https://twitter.com/de/privacy, (settings) https://twitter.com/personalization.

d) LinkedIn
Own profile: https://www.linkedin.com/company/ets-racing-fuels

Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;
Website: https://www.linkedin.com;
Privacy policy: https://www.linkedin.com/legal/privacy-policy; opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

e) YouTube
Own profile: https://www.youtube.com/channel/UCAVWZc2wDu2UzftGTCpRsgw

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA;
Website: www.youtube.com;
Privacy Policy: https://policies.google.com/privacy.

Linking social media profiles via graphic or text link

1) On our website, we also link to social media profiles on the platforms listed above. The integration takes place via a linked graphic or a text link of the respective platform. The use of this linking prevents a connection to the respective server of the platform from being automatically established when a website with a social media link is called up in order to display a graphic of the respective platform itself. The user is only forwarded to the service of the respective platform by clicking on the corresponding graphic.

2) After the user has been forwarded, information about the user is collected by the respective provider. It cannot be ruled out that the data collected in this way will be processed in the USA. Please note our information on data transfers to the USA.

3) This is initially data such as IP address, date, time and page visited. If the user is logged into his user account of the respective platform during this time, the operator may be able to assign the collected information of the specific visit of the user to his personal account. If the User interacts via a “Share” button of the respective platform, this information can be stored in the User’s personal user account and may be published. If the user wants to prevent the collected information from being directly assigned to his user account, he must log out before clicking on the graphic. In addition, it is possible to configure the respective user account accordingly.

Special forms of use of the website

Use of the blog functions

In our blog, where we publish various posts on topics related to our activities, you can make public comments. Your comment will be published with your specified username at the post. We recommend using a pseudonym instead of your real name. You are required to provide your username and e-mail address; all other information is voluntary. If you post a comment, we will continue to store your IP address, which we will delete after [one week]. The storage is necessary for us to be able to defend ourselves against liability claims in cases of possible publication of illegal content. We need your e-mail address to contact you if a third party should object to your comment as illegal. Legal bases are Art. 6 para. 1 p. 1 lit. b and f DS-GVO. Comments are not checked before publication. We reserve the right to delete comments if they are objected to by third parties as unlawful.

Use of our webshop

1) If you would like to order in our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need for the processing of your order. Mandatory information necessary for the processing of contracts is marked separately, other information is voluntary.

2) We transmit personal data to third parties only if this is necessary in the context of the contract, such as to the companies entrusted with the delivery of the goods or the credit institution entrusted with the payment processing. A further transmission of the data does not take place or only if you have expressly agreed to the transmission. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

3) In order to fulfill the purchase contract concluded between you and us and the associated delivery of the ordered goods, we transmit your e-mail address and telephone number to the selected shipping service provider to enable the coordination of the delivery with you.

4) You have the possibility at any time to object to the data transfer with effect for the future by sending a message to dataprivacy@h-c-s-group.com or directly to the shipping service provider using the contact details provided in each case.

5) After revocation, we will delete the data provided, unless you have expressly consented to a different use of the data or we reserve the right to use the data in a manner that goes beyond this and is permitted or ordered by law and about which we inform you in this declaration.

6) The revocation then has the consequence that a delivery of the goods ordered by you via our shipping service providers is not possible.

7) The basis for the data processing is Art. 6 para. 1 p. 1 lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

8) We are obliged by commercial and tax law to store your address, payment and order data for a period of ten years. However, we will restrict processing after two years, i.e. your data will only be used to comply with legal obligations.

9) To prevent unauthorized access by third parties to your personal data, especially financial data, the ordering process is encrypted using TLS technology.

Use of our portal

1) If you wish to use our portal, you must register by entering your e-mail address, a password of your choice and a user name of your choice. There is no obligation to use a clear name; pseudonymous use is possible. We use the so-called double-opt-in procedure for registration, i.e. your registration is only completed once you have confirmed your registration by clicking on the link contained in a confirmation e-mail sent to you for this purpose. If your confirmation is not received within [24 hours], your registration will be automatically deleted from our database. The provision of the aforementioned data is mandatory, all other information you can provide voluntarily by using our portal.

2) If you use our portal, we store your data required for the fulfillment of the contract, including information on the method of payment, until you finally delete your access. Furthermore, we store the voluntary data you provide for the time of your use of the portal, unless you delete it beforehand. You can manage and change all information in the protected customer area. The legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO.

3) If you use the portal, your data may become accessible to other participants of the portal according to the contractual performance. Non-registered members will not receive any information about you. For all logged-in members, your [username and photo] are visible, regardless of whether you have released them. In contrast, your entire profile with the data you have shared is visible to all members who have confirmed you as a personal contact. If you make content available to your personal contacts that you do not send by means of a private message, this content is visible to third parties, provided that your personal contact has given the release. As far as you post contributions in public groups, these are visible for all registered members of the portal.

4) To prevent unauthorized access by third parties to your personal data, especially financial data, the connection is encrypted using TLS technology.