Privacy policy for the EPTEX website

1. Responsible

The responsible party within the meaning of the General Data Protection Regulation is:

EPTEX GmbH in formation

Hamburg, Germany

Email: info@eptex.com

If you have any questions about this privacy policy or the processing of personal data, you can contact us at any time by email.

2. General information on data processing

We process personal data exclusively in accordance with the General Data Protection Regulation and the applicable national data protection laws. Personal data is only processed to the extent necessary to provide the platform, optimise our services or fulfil legal obligations.

The data processed may include the following categories in particular:

• Master data such as name, company, address, telephone number, email address
• Login data such as user name, password, roles and authorisations
• Usage data such as log files, IP addresses, click behaviour, search processes, technical movement data
• Content data such as uploaded images, texts, descriptions and project data
• Communication data such as messages via platform functions, email correspondence or support requests
• Payment data, if paid functions are used

3. Provision of the website and log file collection

When you visit our website, data that your browser transmits to our server is automatically collected. This includes:

• IP address
• Date and time of access
• Files accessed
• Browser type and version
• Operating system
• Referrer URL
• Amount of data transferred

This data is technically necessary to provide the website and ensure system security. This data is not merged with other data sources.

4. Hosting and content delivery networks

We use professional hosting and cloud providers to provide the platform. Depending on the technical infrastructure, these may include the following service providers:

• Amazon Web Services (AWS)
• Google Cloud Platform
• Microsoft Azure
• Cloudflare
• DigitalOcean
• Hetzner
• Akamai
• Fastly
• Netlify
• Vercel

These providers may process data in the EU or worldwide. If data is transferred to third countries, this is done in accordance with legal requirements, in particular through EU standard contractual clauses.

5. Cookies and consent management

Our website uses cookies and similar technologies. Cookies serve technical functions, optimise the platform, analyse usage behaviour and provide personalised content and advertising.

We use a consent management tool that logs all consents. Depending on the technical selection, the following providers may be used:

• Cookiebot
• Usercentrics
• OneTrust
• Complianz

6. Web analysis and tracking

We use common web analysis and tracking tools to analyse the use of our website and improve our offerings. These may include the following services:

6.1 Google Analytics

Data may include: IP address, click paths, length of stay, technical device information.

6.2 Matomo

Can be used as a local or cloud-based solution.

6.3 Microsoft Clarity

Collects anonymised interaction data such as mouse movements and scrolling behaviour.

6.4 Hotjar

Used to analyse user interactions and session recordings.

6.5 Plausible Analytics

A data protection-friendly analysis option without cookies.

Depending on the service, data processing is carried out on the basis of your consent.

7. Marketing and retargeting tools

We may use the following tools, among others, to display targeted advertising and measure campaign success:

• Meta Pixel (formerly Facebook Pixel)
• Google Ads Conversion Tracking
• Google Tag Manager
• LinkedIn Insight Tag
• TikTok Pixel
• Twitter Ads
• Taboola
• Outbrain

These tools are used exclusively on the basis of your consent.

8. Newsletters and communication

If newsletters are offered, we use professional mailing service providers to send them, including:

• Mailchimp
• Sendinblue
• Brevo
• Mailjet
• Amazon SES
• HubSpot
• ActiveCampaign

Processing is only carried out with your express consent.

9. User accounts, registration and login

User master data is processed during registration. We may use login tools or authentication services, for example:

• Auth0
• AWS Cognito
• Firebase Authentication
• Azure Active Directory B2C
• Google or Apple-based login procedures

10. User images and uploads

When users upload images, text or other content, this data is stored on our servers or external servers and processed technically.

Users grant EPTEX a simple, perpetual, worldwide, transferable and irrevocable right of use, in particular for:

• Storage
• Reproduction
• Technical optimisation
• Making publicly available
• Forwarding to other users of the platform
• Display within search functions
• Use within the EPTEX database and all associated functions

The user is solely responsible for the legality of the content.

11. Artificial intelligence and automated data processing

EPTEX uses AI technologies to analyse data, assign technical attributes, read product information or process user content in a structured manner. This may involve automated decisions within the meaning of Art. 22 GDPR, such as suggestions for categorisation or technical plausibility checks.

Processing is carried out with the greatest possible transparency and exclusively within the framework of legal requirements.

12. Payment processing

If paid services are offered, payment processing is carried out by external service providers, for example:

• Stripe
• PayPal
• Mollie
• Adyen
• Klarna

Processing is carried out exclusively via encrypted connections.

13. Transfer of data to third parties

Data may be passed on to external service providers to the extent necessary for the provision of the platform. These include hosting partners, analysis services, technical service providers, payment providers or communication services.

Data is never passed on for the purposes of unauthorised advertising.

14. Storage period

Personal data is only stored for as long as is necessary for the respective purposes or as required by legal regulations.

15. Your rights

Users have the following rights at any time:

• Information
• Correction
• Deletion
• Restriction of processing
• Objection
• Data portability
• Revocation of consent

Enquiries can be directed to info@eptex.com.

16. Changes to this privacy policy

EPTEX may amend this privacy policy if this is necessary due to technical changes, legal requirements or new functions. The current version is available on the website at any time.