Privacy Notice
1. The Data Controller
| Data Controller | Bramcke GmbH |
| Registered office | Schoellerstrasse 33, 52351 Düren, Germany |
| Representative | Sándor Kovács, CEO |
| info@entaceurope.com | |
| Website | www.entaceurope.com |
| Corporate website | www.bramcke.de |
Bramcke GmbH is the European authorised representative of the manufacturer of ENTAC products.
This Notice explains what personal data we process when you visit and use the entaceurope.com website, for what purposes, on what legal basis and for how long.
2. Contact
You may use the contact form available on the website to send a message concerning ENTAC products, commercial cooperation, resale, statutory warranty, commercial warranty, product defects or any other related matter.
Data processed name;
e-mail address;
telephone number;
the subject or category of the enquiry;
the content of the message;
any additional data provided during subsequent communication;
technical data related to the transmission of the e-mail.
Providing a telephone number is voluntary unless telephone contact is necessary to handle the particular matter. Please provide only the personal data required to respond to your enquiry in the message.
Purposes of processing
receiving, responding to and investigating the enquiry;
communicating with the data subject;
providing product information and technical assistance;
handling commercial and resale enquiries;
handling statutory warranty, commercial warranty and product safety matters;
establishing, exercising or defending legal claims.
Legal basis for processing
Where the enquiry is necessary for the performance of a contract concluded with the data subject or in order to take steps at the request of the data subject prior to entering into a contract, the legal basis for processing is Article 6(1)(b) of the GDPR.
In the case of general product information, technical, commercial, warranty-related or other enquiries, the legal basis for processing is our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest is to respond to enquiries received by us, maintain customer and partner relationships and investigate product-related issues.
Where processing is necessary for compliance with a legal obligation, the legal basis is Article 6(1)(c) of the GDPR.
Necessity of providing data
The data marked as mandatory on the form must be provided so that we can properly process and respond to the enquiry. If the necessary data are not provided, we may be unable to respond to the enquiry or properly investigate the matter.
Transmission and storage of data
The data entered in the contact form are not stored separately in the database of the WordPress website. The message is transmitted as an electronic mail through the website’s mailing system to the info@entaceurope.com mailbox.
Enquiries may be accessed only by the duly authorised employees of the Data Controller and by technical service providers required for operation, solely to the extent necessary for the performance of their duties.
Retention period
Personal data relating to general enquiries are retained for no longer than one year after the matter has been closed.
Data relating to contracts, statutory warranty, commercial warranty, product safety or legal claims may be processed until the matter is closed and until the expiry of the applicable statutory limitation period.
In the event of an administrative, judicial or other legal proceeding, the data may be retained until the final conclusion of the proceeding and until the expiry of the period during which any resulting legal claims may be enforced.
3. Processing related to the operation and security of the website
When the website is opened, the web server and the website’s security system may process technical data.
IP address;
date and time of access;
the address of the page visited or file downloaded;
the type of browser and operating system used;
technical data concerning the device used for the visit;
the address of the referring website;
data concerning the result of the request;
technical data relating to login and access attempts.
The purposes of processing are to display and properly operate the website, identify and remedy technical errors, maintain IT security, detect unauthorised access attempts, prevent automated attacks and misuse, and investigate security events.
The legal basis for processing is our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest is to ensure the security of the website, the IT systems and the data processed through them.
Technical data are retained only for as long as necessary for the operation and troubleshooting of the website and for detecting and investigating security events. In the event of a security incident, the relevant data may be retained for a longer period where necessary to investigate the incident or to establish, exercise or defend legal claims.
4. Cookies and similar technologies
The website uses cookies that are necessary for its operation and, subject to the visitor’s consent, statistical cookies. Cookie settings are provided through the CookieYes consent management system. Through the cookie banner, visitors may accept or reject non-essential cookies and may subsequently change their previous choice.
Necessary cookies
Necessary cookies support the proper operation and security of the website and retain the visitor’s cookie preferences. Their use does not depend on the visitor’s consent because, without them, the website or certain essential functions would not operate properly.
The cookieyes-consent cookie stores the visitor’s cookie preferences and previous choice. Its retention period is one year.
Statistical cookies – Google Analytics
The website uses the Google Analytics 4 web analytics service through the MonsterInsights plugin.
website traffic;
pages visited;
duration of the visit;
actions performed on the website;
the device, browser and operating system used;
source of the visit;
the visitor’s approximate geographical area.
The legal basis for statistical data processing is the visitor’s voluntary consent pursuant to Article 6(1)(a) of the GDPR.
Cookies associated with Google Analytics may be used only after statistical cookies have been accepted. Refusing consent does not restrict the basic use of the website.
According to the website’s settings, user-level and event-level data are retained in Google Analytics for 14 months.
The current list, purpose, provider and lifetime of the cookies used can be viewed on the cookie settings interface available on the website. Consent to cookies may be changed or withdrawn there at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
5. Processors and recipients
Personal data may be accessed by the authorised employees of the Data Controller and by the following service providers, to the extent necessary for the performance of their services.
5.1. Hosting provider
| Name | Rackhost Zrt. |
| Registered office | 6722 Szeged, Tisza Lajos körút 41, Hungary |
| Company registration number | 6-10-000489 |
| Tax number | 25333572-2-06 |
| info@rackhost.hu |
Task providing website hosting and technical infrastructure, storing website data, creating backups and maintaining server logs.
5.2. E-mail and SMTP service provider
| Name | Viacom Informatikai Kereskedelmi és Szolgáltató Kft. |
| Registered office | 2360 Gyál, Deák Ferenc utca 17, Hungary |
| Company registration number | 13-09-109794 |
| Tax number | 13810359-2-13 |
Task transmitting electronic mail sent through the website, providing the e-mail mailbox and related mailing infrastructure, and technically processing and storing electronic mail.
5.3. Management of cookie settings
| Name | CookieYes Limited |
| Registered office | 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom |
Task operating the cookie management interface, managing visitors’ cookie preferences and providing technical support for identifying and categorising the cookies used on the website.
5.4. Web analytics provider
| Name | Google Ireland Limited |
| Registered office | Gordon House, Barrow Street, Dublin 4, Ireland |
Task providing the Google Analytics service and processing statistical data relating to website traffic and use.
Depending on the nature of the service and the particular processing operation, Google may act as a processor or, in respect of certain processing activities, as an independent controller.
6. Transfers outside the European Economic Area
When Google services are used, personal data or technical data that can be linked to an individual may also be processed in the United States. The transfer may take place on the basis of the applicable adequacy decision, the EU–US Data Privacy Framework or, where necessary, the standard contractual clauses adopted by the European Commission.
CookieYes Limited operates in the United Kingdom. Transfers to the United Kingdom may take place on the basis of the relevant adequacy decision of the European Commission.
Where data are transferred outside the European Economic Area, the Data Controller applies a transfer mechanism and safeguards compliant with Chapter V of the GDPR.
7. Automated decision-making and profiling
In the course of the processing described in this Notice, the Data Controller does not use decision-making based solely on automated processing that produces legal effects concerning the data subject or similarly significantly affects the data subject. No individual marketing profile is created concerning website visitors.
8. Rights of data subjects
Under the GDPR, the data subject has the right to:
request information about the processing of their personal data;
request access to the personal data processed about them;
request the rectification of inaccurate personal data and the completion of incomplete data;
request the erasure of their personal data where the statutory conditions are met;
request restriction of processing;
exercise the right to data portability in the cases specified in the GDPR;
object to processing based on legitimate interests;
withdraw consent at any time;
lodge a complaint with a data protection supervisory authority;
seek judicial remedy where their rights have been infringed.
Right to object
Where processing is based on legitimate interests pursuant to Article 6(1)(f) of the GDPR, the data subject may object at any time to the processing of their personal data on grounds relating to their particular situation.
If an objection is made, we will no longer process the personal data unless the processing is justified by compelling legitimate grounds which override the interests, rights and freedoms of the data subject, or the processing is necessary for the establishment, exercise or defence of legal claims.
9. Exercising data subject rights
The data subject may submit a data protection request using the following contact details:
| Data Controller | Bramcke GmbH |
| Address | Schoellerstrasse 33, 52351 Düren, Germany |
| info@entaceurope.com | |
| Response deadline | as a general rule, one month from receipt of the request |
Taking into account the complexity and number of requests, this period may be extended by a further two months where necessary. The data subject will be informed of the extension and the reasons for it within one month of receipt of the request.
Requests from data subjects are generally handled free of charge. In the case of a manifestly unfounded or excessive request, in particular because of its repetitive character, a reasonable fee may be charged or the request may be refused in accordance with the GDPR.
Where there are reasonable doubts concerning the identity of the person submitting the request, we may request additional information necessary to confirm their identity.
10. Complaints and judicial remedies
The data subject may lodge a complaint with the data protection supervisory authority competent for their habitual residence, place of work or the place of the alleged infringement.
Supervisory authority competent for the registered office of Bramcke GmbH
| Authority | Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen |
| Address | Kavalleriestraße 2–4, 40213 Düsseldorf, Germany |
| poststelle@ldi.nrw.de | |
| Telephone | +49 211 38424-0 |
| Website | www.ldi.nrw.de |
For data subjects in Hungary
| Authority | Nemzeti Adatvédelmi és Információszabadság Hatóság |
| Address | 1055 Budapest, Falk Miksa utca 9–11, Hungary |
| Postal address | 1363 Budapest, Pf. 9, Hungary |
| ugyfelszolgalat@naih.hu | |
| Website | www.naih.hu |
Irrespective of lodging a complaint with a supervisory authority, the data subject may also seek judicial remedy.
11. Data security
The Data Controller applies technical and organisational measures appropriate to the nature of the personal data processed and to the circumstances and risks of the processing.
restricting access to personal data to authorised persons;
preventing unauthorised access, alteration or disclosure;
reducing the risk of data loss and accidental deletion;
protecting the website and the e-mail system;
detecting and managing IT and data protection incidents;
maintaining the confidentiality, integrity and availability of the systems.
The Data Controller regularly reviews the security measures applied.
12. Amendments to the Notice
The Data Controller may amend this Notice, in particular where the operation of the website, the technology used or the range of service providers changes, where the purpose or method of processing changes, where the identity of processors changes, or where the applicable legal environment changes.
The current version is available on the entaceurope.com website.