Privacy Policy

The protection of your data at


I. General

We, the eco – Association of the Internet Industry, Lichtstrasse 43h, 50825 Cologne, Germany (hereinafter referred to as “eco”), take the protection of your personal data very seriously, and we strictly comply with the regulations of the data protection statutes. The following declaration provides you with an overview of how we ensure this protection. In particular, we would like to explain to you – as a visitor to our websites, a subscriber to our newsletter, as a guest at one of our numerous events, as a user of the eco Members+ area, or as an applicant to eco – which types of data we gather, why we collect these types of data, how we use this data, and how you at any and all times can determine how your personal data is treated.

Under the General Data Protection Regulation (GDPR), you have various rights which you can assert in relation to us. This includes, among others, the right to withdraw consent to the processing of data, in particular, data processing for the purposes of marketing. The possibility to withdraw consent is typographically highlighted.

Should you have questions regarding this Privacy Policy, you can contact our data protection officer at any time. The contact details can be found below.


II. Name and contact details of the person responsible for processing and the  data protection officer

This Privacy Policy applies to the processing of data by eco – Association of the Internet Industry (eco – Verband der Internetwirtschaft e.V.), Lichtstrasse 43h, 50825 Cologne, Germany (“person responsible”) for the website

Our data protection officer, Mr Jan Stumpf, can be contacted via the email address, by post to: eco – Association of the Internet Industry, Mr Jan Stumpf, Lichtstrasse 43h, 50825 Cologne, Germany, with the keyword “Data Protection,” or by fax at the number +49 (221) 70 00 48-111.


III. Purpose of data processing, legal basis, and legitimate interests that are pursued by eco or a third party, and categories of recipients

1. Surfing on this website

eco gathers and automatically stores on its server log file information that your browser deposited with us while you were surfing.

In brief, here is the key data that we store:

  • Type of browser/browser version
  • The operating system used
  •  Referrer URL (the page visited previously)
  • URLs / pages on this website that have been accessed
  • IP address of the accessing device along with its name
  • Time of the server request
  • Visitor history

Furthermore, we record the complete Uniform Resource Locator (URL) Clickstream through and from our website, i.e., the sequence of the pages of our website that you visit, including date and time, cookie number, and the content that you viewed or for which you searched.

During your visits, we sometimes use JavaScript in order to gather and evaluate information, including the time it takes a website to load, download errors, the duration of the visit on a subpage, information regarding the interaction between pages (e.g., scrolling, clicking, mouse-overs) and leaving the page.

The legal basis for the processing of the IP address is Article 6 (1)(f) GDPR. Our legitimate interest results from the following list of purposes of the data processing. Please note on this point that it is not possible for us to draw any direct conclusions about your identity on the basis of the data collected, nor do we attempt to draw such conclusions.

The IP address of your device and the remaining data listed above is used by us for the following purposes:

  • Ensuring a seamless establishment of the connection
  • Ensuring the comfortable use of our website
  • Assessing the system security and stability

 The data is saved for a period of 22 days, after which it is automatically deleted or anonymised. Further, we make use of so-called cookies, tracking tools and social media plug-ins for our website. Exactly what process is undertaken and how your data is used for these is clarified in Section III.15. below.


2. Contact Form and Email Contact

On our website, you have the option of getting in contact with us or sending us articles via email to

The personal data imparted to us will be used exclusively for the purpose of processing your enquiry and will be deleted after processing your query. The legal basis for this is your consent within the meaning of Article 6 (1)(a) GDPR, as well as Article 6 (1)(f) GDPR. The proper processing of your enquiry is to be regarded as a legitimate interest within the meaning of the GDPR. You can withdraw your consent to the processing of the personal data imparted to us at any time with effect for the future, using the contact information provided under II. From the moment of withdrawal of consent, it will no longer be possible to process your enquiry.


3. Sending of newsletters

You can subscribe to our newsletter on our website. Within the scope of making a subscription, we will collect personal-related data from you (email address is mandatory). We shall solely use these types of data for the personalisation and implementation of our email mailings. In order to prevent the misuse of email addresses, subscribers must confirm the ordering of our newsletter in an automated process via email (double opt-in). Only after you have clicked on the confirmation link will your email address be added to our mailing list. 

Your thus declared consent can be withdrawn at any time with effect for the future. This can be done conveniently with the aid of the link that is located in the lower section of each of our mailings, via email to, or by means of a message to our office – by mail to: eco – Association of the Internet Industry, Lichtstrasse 43h, 50825 Cologne, Germany, or by fax to: +49-221-7000-48-11.

Our newsletters are sent via the email marketing service “XCampaign” operated by the Schober Information Group (Schweiz) AG, Theaterstrasse 17, 8400 Winterthur, Switzerland. 

When you subscribe to our newsletter, XCampaign stores the data you have entered for the sending and analysis of the newsletter on our behalf. The data is encrypted using the XCrypto service in Switzerland and anonymously hosted on servers of Super Network s.r.o. in Prague, Czech Republic. For each newsletter sent, we receive information on the address file used, the subject, and the number of newsletters sent. In addition, we can see which addresses have not yet received the newsletter, to which address it was sent, and at which addresses it failed to be dispatched. We can also see which addresses have subscribed. We require this data for organisational reasons in order to optimise the dispatch of our newsletter and for statistical analysis of our newsletter. Further analysis of your user behaviour will not take place unless you have given us your consent in accordance with Article 6 (a) GDPR.  In this case, we will collect the following additional data: which addresses have opened the newsletter and which links have been clicked. This data helps us to improve our newsletters.

You can withdraw your consent in this additional analysis at any time with effect for the future. By email to:, keyword: Revocation of Tracking of Opening and Clicking, or by means of a message to our office – by post to: eco Association of the Internet Industry, Lichtstrasse 43h, 50825 Cologne, Germany, or by fax to: +49-221 – 7000 48-111.

XCampaign will only share your information with eco-approved subcontractors to fulfil their contractual obligations. Beyond that, no passing on to third parties will take place. XCampaign will also not contact you. XCampaign is our processor and acts solely according to our specifications. Schober’s data protection regulations can be found here:

The legal basis for sending our newsletter is Article 6 (1)(a) GDPR as well as Section 2 (3) or Section 3 of the German Federal Law on Unfair Competition (UWG). The legal basis for the use of XCampaign, the performance of statistical surveys and analyses, and the recording of the registration procedure is our legitimate interest pursuant to Article 6 (1)(f) GDPR. Our interest is in the deployment of a user-friendly and secure newsletter system that serves both our business interests and the expectations of users. The legal basis for the collection of opening and click rates is the consent you have given us pursuant to Article 6 (a) GDPR.


4. Online Presence on Social Media

In addition to this website, eco also maintains an online presence on the social media channels Facebook, Twitter, Linked-in,. You can access these by clicking on the corresponding menu items on our website.

We would like to point out that your use of these pages and their functions lies within your own responsibility. This applies in particular to the use of interactive functions (e.g., commenting, sharing, rating).

When visiting such a page, personal data may be transferred to the provider of the social media channel. The social media provider collects and processes your IP address, the type of processor and browser version used, including plug-ins and, where applicable, other information.

The data collected about you in this context will be processed by the provider of the social media channel and, in some instances, may be transferred to countries outside of the European Union.

If you are logged in with your personal user account of the respective channel during your visit to such a website, this channel can assign the visit to your account.

If you wish to avoid this, you should log out of the social media channel before visiting our online presence or deactivate the “remain logged in” function, delete the cookies present on your device, and exit and restart your browser. In this way, information that could be used to directly identify you is deleted.

The purpose and scope of the data collection and the further processing and use of the data by the provider of the respective social media channel, as well as your relevant rights and setting options for the protection of your privacy, can be found under the respective privacy policy information of the respective medium:






As the operator of the respective online presence, we do not collect or process any further data from your use of the corresponding social media channel.


5. Online presence and website optimisation

5.1. Cookies

Our Internet sites use so-called cookies at numerous points. Cookies are small text files that are automatically generated by your browser and saved on your device (laptop, tablet, smartphone, etc.). Cookies do not cause any damage to your device, and they do not contain any viruses, Trojans, or other malware. In the cookie, information is stored which results from the connection with each specific device respectively. However, this does not mean that we gain any direct knowledge regarding your identity. Cookies can be used to store different information. This includes, for example, the language settings on our website. The use of cookies also serves the purpose of improving the user experience of our Internet presence. We, therefore, use so-called “session cookies” in order to recognise that you have already visited individual pages on our website. These are deleted automatically after the end of your visit. In addition to this, also for the purpose of increasing user-friendliness, we make use of temporary cookies that are saved on your device for a specific period of time. When you visit our website again, it will be automatically recognised that you have visited the site previously and what input you made or settings you activated so that you do not have to input them again.

Insofar as these cookies are those that are necessary to ensure the proper functioning of our website, the use of these takes place on the basis of Article 6 (1)(a) GDPR. Our interest in optimising is thereby to be seen as legitimate in the sense of the aforementioned regulation.  In all other cases, we ask you for your consent, which allows us to set further cookies (analysis cookies, marketing cookies). No cookies are set (except required/essential cookies) without giving consent. Further information can be found in our “Individual Cookie Settings”.

You can withdraw or change your consent at any time in the “Individual Cookie Settings” or via the button “Change Cookie Settings” on our website.   

These cookies are automatically deleted after a respectively defined period of time. You can, however, configure your browser so that no cookies are stored on your device or so that a warning always appears before a new cookie is created. However, the complete deactivation of cookies can result in your not being able to use all functions on our website. The storage duration of the cookies is dependent on their purpose and is not the same for all.


5.2. Google Analytics

For the purposes of needs-oriented design and continual optimisation of our web pages, we use Google Analytics, a web analytics service from Google Inc (“Google”) on the basis of Article 6 (1)(a) GDPR. In conjunction with this, anonymised usage profiles are generated and cookies are used. The information generated through the cookie about your use of this website, such as

  • Browser type/version,
  • Operating system in use,
  • Referrer URL (the previously visited website),
  • Host name of the device accessing the site (IP address),
  • Time of the service request,

is transferred to and stored on a Google server in the USA. The information is used in order to analyse the use of the website, create reports on website activities, and deliver further services in connection with the use of the Internet for the purposes of market research and the needs-oriented design of these web pages. This information is also, if necessary, forwarded to third parties, insofar as this is required by law or data processing is outsourced to said third party.  Under no circumstances will your IP address be merged with any other data from Google. The IP addresses are anonymised so that correlation is not possible (so-called IP masking). 

If you do not give us consent to the use of Google Analytics, no cookie will be set and no data will be transferred. Further information regarding data protection in connection with Google Analytics can be found on the Google Analytics website. You can also change or withdraw your individual cookie settings as described in 5.1. This will also ensure that no more data is processed via Google Analytics.


5.3. Google Tag Manager

We make use of the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only allows us to operate and make use of its integrated tools. However, the Google Tag Manager collects your IP address, which may also be transmitted to Google’s parent company in the United States.

The Google Tag Manager is deployed on the basis of Article 6 Para 1f) GDPR. As a website operator, we have a legitimate interest in a quick and uncomplicated integration and operation of various tools on our website.


5.4. Adobe Typekit

For the unified presentation of texts types (fonts), the site use the Adobe Typekit service. Adobe Typekit is a service that enables access to a font library and is made available by the company Adobe Systems Inc., 345 Park Avenue, San Jose, CA 95110-2704, USA (“Adobe”). When accessing a site, your browser loads the required fonts into your browser cache in order to display texts and fonts correctly.

In the course of providing the Typekit service, no cookies are placed or used to supply the fonts. To provide the Typekit service, Adobe can collect information about the font, which serves to identify the website itself and the associated Typekit account. Adobe Typekit is used in the interest of enabling a unified and appropriate presentation of our online offer. This represents a legitimate interest as defined in Article 6 (1)( f) GDPR. If your browser does not support web fonts, a standard font from your device is used.

More information about the Typekit can be found at and generally about Adobe at


6. Joint controllers pursuant to Article 26 Para. 2 (2) GDPR

In order to spare resources and use them more effectively, eco – Association of the Internet Industry and the deutsche medienakademie GmbH (“dma”, German Media Academy), as a 100 per cent subsidiary of eco, as well as eco and the EuroCloud Deutschland_eco e.V., as affiliated associations, use a joint database to manage their address databases.

As part of their joint data protection responsibility, eco and dma have agreed on which of them fulfils which obligations under the GDPR. To this end, eco and dma have each assigned the individual data files to a company responsible for processing the personal data. This applies in particular to the observation of the rights of the data subjects and the fulfilment of the information obligations pursuant to Articles 13 and 14 of the GDPR. The same agreement stands between eco and eco and EuroCloud Deutschland_eco e.V.

You can assert your data protection rights centrally at:  or alternatively at:

As part of our cooperation with talque, eco and talque also process personal data together. This concerns the use of personal data that is saved when registering on the talque web platform for an eco event/network. You can assert your data protection rights centrally at:


IV. Your rights

1. Overview

Alongside the right to withdraw the consent given to us, you also have the following rights when the respective legal conditions are extant:

  • Right of information regarding your personal data stored by us in accordance with Article 15 GDPR; in particular, you can obtain information about the purpose of processing, the category of personal data, the category of recipient for whom your data is or has been made available, the planned period of retention, the origin of your data, insofar as it was not collected directly from you,
  • Right of rectification of erroneous or to completion of correct data in accordance with Article 16 GDPR,
  • Right to deletion of your data stored by us in accordance with Article 17 GDPR, insofar as there are no legal or contractual requirements to retain the data or other legal obligations or rights to the continued retention of the data,
  • Right to limit the processing of your data in accordance with Article 18 GDPR, insofar as you dispute the correctness of the data, the processing is illegal, but you oppose the deletion of said data; the data controller no longer requires the data, but you require said data for the assertion, exercise or defence of legal claims, or you have filed an objection to the processing in accordance with Article 21 GDPR,
  • Right to data portability in accordance with Article 20 GDPR, i.e. the right to receive selected data about you stored by us in a standard, machine-readable format, or to have this transmitted to another data controller,
  • Right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your normal place of residence or work, or of our association headquarters to do this.


2. Right to object

Under the conditions of Article 21 (1) GDPR, the data processing can be objected to on grounds arising out of the special situation of the person affected.

The above general right to object applies for all purposes of processing described in this Privacy Policy that are processed on the basis of Article 6 (1)(f) GDPR. In contrast to the special right to object to data processing for marketing purposes (see Section III.5.2. above), we are, according to the GDPR, only obligated to implement such a general right to object if you can provide grounds of superordinate importance (e.g. a possible risk to life or health).


V. Forwarding to third parties

The data collected by us is not sold. We share the information that we obtain with third parties exclusively to the extent described in the following:


1. Affiliated companies

Affiliated companies that are under the control of eco, if they are either subject to this Privacy Policy or adhere to guidelines that offer at least as much protection as this Privacy Policy.


2. Service providers

We commission other companies and individuals to fulfil tasks for us. Examples include supporting with the organisation of events (e.g. competence groups, congresses, or LocalTalks), the sending of letters or emails, the maintenance of our contact lists, the analysis of our databases, marketing measures (including the making available of search results and links), and the handling of payments (credit cards, bank transfers, and purchase order invoicing). These service providers have access to personal information that is necessary for fulfilling their tasks. However, they are not permitted to use this for other purposes. In addition to this, they are obligated to handle the information in accordance with this Privacy Policy and applicable data protection laws.


3. Protection of eco and third parties

We disclose personal data when we are legally obliged to do so or when such disclosure is necessary to protect our rights and those of third parties.


4. Recipients outside of the EU

Your data will generally be processed in Germany and in other European countries. If, in exceptional cases, your data is also processed in countries outside the European Union (i.e. in so-called third countries), this is done insofar as you have expressly consented to this or it is necessary for our provision of services to you, or it is provided for by law (Article 49 GDPR). Furthermore, your data will only be processed in third countries if certain measures ensure that an adequate level of data protection exists (e.g. adequacy decision of the EU Commission; EU standard contractual clauses or so-called suitable guarantees, Article 44ff. of the GDPR). 


VI. Further information and notes

Our website, services, and initiatives evolve continuously. Equally, this Privacy Policy and our conditions of use change on occasion. Therefore, you should regularly visit our website and take note of any changes. Insofar as nothing is regulated in another manner, the use of all information that we have about you is subject to this Privacy Policy. We assure you that significant changes to our Privacy Policy that would result in weakened protection of already collected data will always only be made with your agreement as the respective affected party.

Your trust is very important to us. Therefore, we are available to answer your questions at any time regarding the processing of your personal data. If you have questions that could not be answered in this Privacy Policy, or if you would like more detailed information on one of the points, please contact our data protection officer, Mr Jan Stumpf, at any time at the email address, at the postal address: eco – Association of the Internet Industry, Lichtstrasse 43h, 50825, Cologne, Germany, (keyword “Data Protection”) or by fax to the number +49 (0)221 70 00 48-111.


Updated: August 2022