Data Protection
Information on data processing for this website pursuant to Art. 13 EU General Data Protection Regulation (GDPR) when personal data is collected from the data subject
Privacy Notice (Version: GDPR 2.0 dated 8 October 2021)
EVA Technology GmbH is the controller for this website and, as the provider of a telemedia service, must inform you at the beginning of your visit about the nature, scope and purposes of the collection and use of personal data in a precise, transparent, intelligible and easily accessible form, in clear and plain language. This content must be available to you at all times.
We attach the greatest importance to the security of your data and to compliance with data protection regulations. The processing of personal data is subject to the provisions of the European and national laws currently in force.
With the following privacy notice, we would like to show you how we handle your personal data and how you can contact us:
EVA Technology GmbH
Aufeldstrasse 6
86899 Landsberg am Lech
Germany
Commercial Register No.: HRB 19367
Managing Director:
Fengyuan Zhang
Phone: +49 1502 80 90 199
E-mail: info@biyondworld.com
A. General
To make this easier to read, we do not differentiate by gender. In the interest of equal treatment, the corresponding terms apply to all genders. The meaning of terms used, such as “personal data” or its “processing”, can be found in Art. 4 GDPR.
The personal data processed within the scope of this website includes
- Master data (e.g. names and addresses of customers),
- Contract data (e.g. services used),
- Usage data (e.g. pages of our website visited) and
- Content data (e.g. entries in online forms).
B. Specific
Privacy notice
We guarantee that we process your data only in connection with the handling of your inquiries, for internal purposes, and to provide the services you request or to make content available.
Basis of data processing
We process your personal data only in compliance with the relevant data protection provisions. The legal bases are:
- Provision of our contractual services and performance of contractual measures, Art. 6 (1) lit. b) GDPR
- Processing to fulfil our legal obligations, Art. 6 (1) lit. c) GDPR
- Existence of your consent (e.g. newsletter subscription), Art. 6 (1) lit. a) GDPR
- Processing to safeguard our legitimate interests, Art. 6 (1) lit. f) GDPR
Transfer of data to third parties
Please note that data may be transferred when you use our website.
Your data is passed on to third parties only within the framework of legal requirements. We only pass on your data if this is necessary, e.g. for contractual purposes, or on the basis of legitimate interests in the economic and effective operation of our business.
If we use subcontractors to provide our services, we take appropriate legal precautions as well as corresponding technical and organisational measures to ensure the protection of personal data in accordance with the relevant legal provisions.
Transfer of data to a third country or an international organisation
Third countries are countries in which the GDPR is not directly applicable law. In principle, this includes all countries outside the EU or the European Economic Area.
A data transfer to a third country or an international organisation takes place.
Because we use PayPal as a payment option on our website, data is transferred to a third country (here the USA) or an international organisation, insofar as you have given us your consent for this pursuant to Art. 49 (1) lit. a) GDPR. Under the current legal situation, the USA is considered a country with an inadequate level of data protection. There is a risk that your data may be processed by US authorities for control and surveillance purposes. There are currently no legal remedies available to take action against this practice.
Storage period of your personal data
We adhere to the principles of data minimisation and data avoidance. This means that we store your data only for as long as necessary to fulfil the aforementioned purposes or as required by the various retention periods provided for by the legislator. If the respective purpose ceases to apply, or after the relevant periods have expired, your data is routinely blocked or deleted in accordance with the statutory provisions.
For this purpose, we have created an internal company policy to ensure this procedure.
Contact
If you contact us via the website, you consent to electronic communication. Personal data is processed in the course of electronic contact with us. The information you provide is stored exclusively for the purpose of processing the inquiry and for possible follow-up questions.
Please note that e-mails can be read or altered without authorisation and without notice during transmission. We also draw your attention to the fact that we use software to filter unwanted e-mails (spam filter). The spam filter may reject e-mails if they have been wrongly identified as spam due to certain characteristics.
We would like to state the legal basis for this:
- Processing to fulfil our services and carry out contractual measures, Art. 6 (1) lit. b) GDPR.
What rights do you have?
- Right of access
You have the right to obtain information free of charge about your stored data. Upon request, we will inform you in writing which personal data we have stored about you. This also includes the origin and recipients of your data and the purpose of the data processing. - Right to rectification
You have the right to have your data stored with us rectified if it is inaccurate. You may also request a restriction of processing, e.g. if you dispute the accuracy of your personal data. - Right to blocking
Furthermore, you can have your data blocked. So that a blocking of your data can be taken into account at any time, this data must be kept in a blocking file for control purposes. - Right to erasure
You can request the deletion of your personal data, insofar as there are no statutory retention obligations. Where such an obligation exists, we will block your data upon request. If the relevant statutory requirements are met, we will also delete your personal data without you having to request it. - Right to data portability
You are entitled to request that we provide the personal data you have transmitted to us in a format that allows transmission to another body. - Right to lodge a complaint with a supervisory authority
You have the option of lodging a complaint with one of the data protection supervisory authorities.
The data protection authority responsible for us:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27, 91522 Ansbach, Germany
Phone: +49 981 53-1300
Fax: +49 981 53-981300
You can open the complaint form via the following link: https://www.lda.bayern.de/de/beschwerde.html
Note: A complaint can also be addressed to any data protection supervisory authority within the EU. - Right to object
At any time, on grounds relating to your particular situation, you have the option to object to the processing of your data pursuant to Art. 6 (1) letters e) and f); this also applies to profiling based on these provisions.
EVA Technology GmbH will then no longer process your personal data, unless it can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. In the event of such an objection, we will no longer process your personal data for direct marketing purposes. It is sufficient to send us an e-mail to this effect. - Right to withdraw consent
At any time, you have the option to withdraw the consent you have given to the processing of your data, with effect for the future, without giving reasons. You will not suffer any disadvantages as a result of the withdrawal. It is sufficient to send us an e-mail to this effect.
However, such a withdrawal does not affect the lawfulness of the processing carried out up to the time of the withdrawal on the legal basis of Art. 6 (1) lit. a) GDPR.
To exercise your data subject rights, please send us an e-mail to the following address: info@biyondworld.com
Protection of your personal data
We take contractual, technical and organisational security measures in accordance with the state of the art to ensure that data protection laws are complied with and thus to protect the processed data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons.
The security measures include in particular the encrypted transmission of data between your browser and our server. A 256-bit SSL (SHA-256 ECDSA) encryption technology is used for this.
Your personal data is protected within the framework of the following points (excerpt):
- Maintaining the confidentiality of your personal data
To maintain the confidentiality of your data stored with us, we have taken various measures for physical access control, system access control and data access control. - Maintaining the integrity of your personal data
To maintain the integrity of your data stored with us, we have taken various measures for transfer control and input control. - Maintaining the availability of your personal data
To maintain the availability of your data stored with us, we have taken various measures for order control and availability control.
Protection of minors
Persons who have not yet reached the age of 16 may only provide us with personal information if the express consent of their legal guardians has been given. This data is processed in accordance with this privacy notice.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
The basis for the data processing is our legitimate interest pursuant to Art. 6 (1) lit. f) GDPR.
Cookies
Cookies are small text files that are stored locally in the cache of your internet browser. Cookies enable, for example, the recognition of the internet browser. The files are used to help the browser navigate the website and to make full use of all functions.
Google Web Fonts
To ensure a uniform display of fonts, this site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For GDPR-compliant implementation and to avoid data transfer to Google, the fonts are provided from our own servers.
Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f) GDPR.
If your browser does not support web fonts, a standard font from your computer is used. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/
Use of PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “instalment payment” via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of the payment processing. The data is passed on pursuant to Art. 6 (1) lit. b) GDPR and only insofar as this is necessary for the payment processing. For the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “instalment payment” via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies pursuant to Art. 6 (1) lit. f) GDPR on the basis of PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check with regard to the statistical probability of payment default for the purpose of deciding whether to provide the respective payment method. The credit check may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things, but not exclusively, is included in the calculation of the score values. For further data protection information, including on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may remain entitled to process your personal data where this is necessary for contractual payment processing.
Use of two-factor authentication (2FA) plugins
We use an internal plugin on this website to enable 2FA. Communication to third parties takes place within the scope of key verification. You can obtain further information about the advantages of two-factor authentication from the BSI (Federal Office for Information Security).
Changes to our privacy notice
We reserve the right to adapt our privacy notice at short notice so that it always complies with current legal requirements, or to implement changes to our services. This may, for example, concern the introduction of new services. The new privacy notice will then apply to your next visit.