Privacy Policy

1. Controller

EIGA Design GbR

Spritzenplatz 6, 22765 Hamburg, Germany

Phone: +49 (0)40 18 88 12 360

Email: mail@eiga.design

Data Protection Officer

Not appointed (not required due to company size)

1. Legal Basis for Processing

We process personal data only on a legal basis:

• Consent (Art. 6 Abs. 1 a GDPR)
• Contract performance (Art. 6 Abs. 1 b GDPR)
• Legal obligation (Art. 6 Abs. 1 c GDPR)
• Legitimate interests (Art. 6 Abs. 1 f GDPR)

1. Processors

Web Hosting Provider (dogado GmbH)

Antonio-Segni-Straße 11, 44263 Dortmund, Germany

Email: info@dogado.de

Phone: +49 (0)231 2866-200

Purpose: Hosting the website and storing log data

Legal basis: Art. 6 Abs. 1 f GDPR

Retention period: Log data is anonymized or deleted after 24 hours

1. Data Collected When Visiting the Website

Server log files: IP address (anonymized after 24 hours), date and time, requested URL, referrer URL, user agent, and the amount of data transferred

Purpose: Operation, security, and stability of the website

Legal basis: Art. 6 Abs. 1 f GDPR

1. Cookies and Similar Technologies

We use a consent management tool. Prior to activating non-essential cookies, we obtain your consent.

• Essential cookies: Necessary for basic site functions; no consent required
• Preference cookies: Store user preferences; consent required
• Statistics cookies (Google Analytics 4):

– Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

– IP anonymization enabled

– EU Standard Contractual Clauses implemented

– Opt-out: https://tools.google.com/dlpage/gaoptout

– Consent required

• Marketing cookies: Used for tracking services; consent required
• Vimeo cookies:

– Provider: Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA

– Purpose: Enable video playback and integration on our website

– Legal basis: Legitimate interests (Art. 6 Abs. 1 f GDPR)

– More info: https://vimeo.com/privacy

– Consent managed via our consent tool

Withdrawal / Deletion

You may withdraw consent at any time through the cookie banner or delete cookies via your browser settings

1. Third-Party Services

6.1 Google Maps Link

We provide an external link to Google Maps (maps.google.com); no user data is transmitted by our site

Legal basis: Art. 6 Abs. 1 f GDPR

6.2 Fonts

All fonts used on our website are hosted locally on our servers and not loaded from external services. No personal data is transmitted to third parties

Legal basis: Art. 6 Abs. 1 f GDPR

6.3 Modernizr via Cloudflare

We use modernizr.js to detect HTML5 and CSS3 features. This may transmit your IP address to cloudflare.com

Legal basis: Art. 6 Abs. 1 f GDPR

1. Contact Form and Email Contact

When you contact us via form or email, we process your name, email address, subject, message content, and date

Purpose: To respond to your inquiry

Legal basis: Art. 6 Abs. 1 b GDPR (contract) and Art. 6 Abs. 1 f GDPR (legitimate interests)

Retention period: Until the end of the correspondence, up to a maximum of 6 months

1. Recruitment

We process applicant data (cover letters, resumes, certificates) for the purpose of conducting the recruitment process

Legal basis: Section 26 of the German Federal Data Protection Act (BDSG) and Art. 6 Abs. 1 b GDPR

Retention period: In case of rejection – 6 months; if consent is given for inclusion in the applicant pool – up to 2 years

Security: Encrypted submission is recommended (GPG/7zip)

1. Rights of Data Subjects

You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent (Art. 7 Abs. 3 GDPR)

To exercise these rights, please contact us using the details above

1. Right to Lodge Complaints

You have the right to lodge a complaint with the Hamburg Commissioner for Data Protection and Freedom of Information: https://www.datenschutz-hamburg.de

1. Security Measures

We employ TLS encryption, firewalls, access controls, and regular backups to protect your data

1. Updates to This Policy

This privacy policy is effective as of May 16, 2025. Any changes will be published on this page

Full policy download: https://www.eiga.de/download/Datenschutz.zip

Privacy Policy

1. Information on the collection of personal data

• We provide information on the collection of personal data when our website is used in the following. Personal data are all data that can be used to personally identify you, e.g. name, address, email addresses, user behaviour.
• The controller pursuant to Article 4 Paragraph 7 of the EU General Data Protection Regulation (GDPR) is

EIGA Design, Spritzenplatz 6, 22765 Hamburg
Telephone: +49 40 188812360

Email: mail{at}eiga.design

Website: www.eiga.design

• You can contact our Data Protection Officer by sending an email to Datenschutz{at}de or by post with the addition “Data Protection Officer”.
• In the following, we provide you with detailed information on procedures in the event that we would like to use assigned service providers for individual features of our offering or use your data for advertising purposes. We also specify the defined criteria for the retention period.

2. Your rights

• You have the following rights with respect to us in relation to your personal data:
  •  Right of access,
  • Right to rectification or erasure,
  • Right to restriction of processing,
  • Right to object to processing,
  • Right to data portability.

To assert your rights, please contact us using the aforementioned contact data of the responsible person or Data Protection Officer.

• You also have the right to lodge a complaint with a data protection authority pertaining to the processing of your personal data by us.

3. Objection or revocation pertaining to the processing of your data

• If you have granted consent for your data to be processed, you are entitled to revoke this at any time. Such a revocation influences the admissibility of the processing of your personal data once you have expressed it to us.
• Insofar as we base the processing of your personal data on the balancing of interests, you are entitled to object to processing. This is the case where processing is not required to fulfil a contract with you, which is described by us in the following description of features. When such an objection is asserted, we ask you to provide reasons why we should not process your personal data as we have done previously. Should you submit a justified objection, we will examine the situation and either cease or adjust data processing, or present our compelling legitimate grounds to you, on the basis of which we will continue processing.

4. Collection of personal data when our website is visited

• In cases of merely informational use of the website, where you do not register with us or otherwise submit information to us, we only collect the personal data that your browser transmits to our server. If you would like to view our website, we will collect the following data that we technically require in order to display our website to you and guarantee its stability and security (legal basis is Article 6 Paragraph 1 Page 1 lit. f GDPR):
  • IP address
  • Date and time of request
  • Time zone difference with Greenwich Mean Time (GMT)
  • Content of the request (specific site)
  • Access status/HTTP status code
  •  Website where the request comes from
  • Websites that are accessed via our website by the system of the user
  • Bytes transferred from the requesting URL browser
  • Operating system and its user interface
  • Language and version of the browser software.

We save these data with an anonymised IP address for a period of 24 hours in a log file. The data are erased once this period has expired.

• In addition to the aforementioned data, cookies are saved on your computer when you use our website. Cookies are small text files that are saved on your hard drive assigned to the browser you are using and through which the body placing the cookies (us in this case) receives certain information. Cookies cannot run programmes or transfer viruses to your computer. They serve to make the online offering more user friendly and effective.
• Use of cookies:
  • This website uses the following types of cookies; their scope and function is also explained in the following:
    • Transient cookies (b)
    • Persistent cookies (c).

• Transient cookies are automatically deleted when you close the browser. These specifically include session cookies. These save a session ID which is used to assign different requests from your browser to the shared session. This way, your computer can be recognised when you return to our website. Session cookies also include cookies that we use to ensure the correct display of the website on the end device used and record the data pertaining to your order (which item, quantity, payment method, shipping choice, etc.) during a purchase in our online shop. Session cookies are deleted when you log out or close your browser.
• Persistent cookies are automatically deleted after a stipulated period that can vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
• You can configure your browser settings to match your wishes and, for example, reject the acceptance of third-party cookies or all cookies. Please note that you might not be able to use all features of this website to their full extent.

5. Making contact via the contact form or email

• If you contact us by email, the data transmitted by you (your email address, the date of your request (if required), your name and telephone number as well as your message) are saved by us in order to respond to your questions. We erase the data accruing in this context once it is no longer necessary to store them, or restrict their processing where statutory retention requirements exist.
• • These data are processed by us in order to respond to your concern. Data are processed in order to respond to your requests on the basis of legitimate interests (Article 6 Paragraph 1 Page 1 lit. b GDPR), thereby enabling satisfactory communication.

6. Use of www.typography.com

The font on this website is integrated via www.typography.com, a service provided by Hoefler & Co., 611 Broadway, Room 725, New York, NY 10012-2608. This service provides fonts that are presented in the browser of the user following a server request to www.typography.com (in the USA). www.typography.com is used in the interests of a uniform and appealing presentation of our online services. This constitutes a legitimate interest as set out in Article 6 Paragraph 1 lit. f of the GDPR. More information can be found in the privacy notices of www.typography.com, which can be accessed here: https://www.typography.com/home/privacy.php

7. Integration of Google Maps

• We use Google Maps services on this website. This allows us to display interactive maps directly on the website and enable you to comfortably use the map feature.
• When you visit the website, Google is informed that you have accessed the corresponding sub-page of our website. The data specified in Section 3 of this policy are also transmitted. This takes place irrespective of whether Google provides a user account via which you are logged in or whether a user account exists. If you are logged into Google, your data will be directly allocated to your account. If you would not like your data to be allocated to your Google profile, you will need to log out before activating the button. Google stores your data as a usage profile and uses them for the purposes of advertising, market research and/or needs-based design of its website. Such evaluation takes place (only for users who are not logged in) for the purposes of rendering needs-based advertising and in order to inform other users of the social network of your activities on our website. You are entitled to object to the creation of this user profile. Should you wish to do so, you will need to send your objection to Google.
• More information on the purpose and extent of data collection and their processing by the plug-in provider can be found in the privacy policies of the provider. These include more detailed information on your rights and configuration options for protecting your privacy in this regard: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

8. Modernizr

• We use modernizr.js, a JavaScript library which facilitates the recognition of HTML5 and CSS3 features in different browsers. Your IP address – at the very least – is transmitted to the server www.cloudflare.com.

9. Additional information on the management of personal data during the application process

• We are delighted that you are interested in us and are applying or have applied for a position at our company. In the following, we would like to share information with you about the processing of your personal data in connection with your application.
• You can send your application to the specified email address job@eiga.de. We recommend that you send your documents in an encrypted email. You can download our public PGP key here {here}. Alternatively, you can encrypt the documents attached to the email using a data compression programme, such as 7Zip, and let us know the password over the phone.
• We process the data that you send us in relation to your application in order to review your suitability for the position (or, where applicable, other vacant positions in our company) and conduct the application process.
• The legal basis for the processing of your personal data in this application process is primarily Section 26 of the Federal Data Protection Act in the version applicable from 25 May 2018. Subsequently, the processing of data that are required in connection with the decision on the justification of an employment relationship is permitted.

Should the data be required for prosecution following conclusion of the application process, data can be processed on the basis of the conditions of Article 6 GDPR, particularly to discern legitimate interests pursuant to Article 6 Paragraph 1 lit. f GDPR. Our interest lies in the assertion of or defence against claims.

• Data of applicants are erased within 6 months in the event of rejection. Should you be awarded the position during the application process, the data from the applicant data system are transferred to our personnel information system.
• In the event that you have expressly consented to the continued storage of your personal data, we will include your data in our applicant pool. These data are erased after two years.